last executing test programs: 3.343410499s ago: executing program 2 (id=5372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.27620844s ago: executing program 4 (id=5376): r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYRES32=0xffffffffffffffff], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85cde900000000000200010000000000b56f000000000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x18, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="60e7254020ca9d9154a84fb41164930030ed2193fab2672362e46160dd973cb06a54c5b4433e0ba4676f99df92631a9d7a7c6a214eb3a4c82829fad0b5773422b399a94e24a17168c0bbb16c6275a2ba0715dda2a3cba84b832eb05d30a99026fee556fda90cd20cd196", @ANYRES16=r2, @ANYRES64=r0], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000005740)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe87) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00"/20, @ANYRES32, @ANYBLOB="0000004a056067cea9a4c8f0f3e81a70879e910000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) perf_event_open(&(0x7f0000000040)={0x500, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xc}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001b00)={0x0, &(0x7f0000001ac0)}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) 3.27516963s ago: executing program 1 (id=5377): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(r1) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe40, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00230006a60000080056f30c0000367738b4a2b2710002000000e64f0d61bfc618cf5459be74e5bd7e4ee3fbbe031f7d70ed66ef246677ff3914", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) 3.219427721s ago: executing program 2 (id=5379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x1, 0x80000000, 0x0, 0xfffffffffff7bbfe, 0x0, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 2.983699805s ago: executing program 1 (id=5382): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e1a20410c304bb9841c6c967a604d30a461d0388cc5fd426109c870743efecee87b33", 0x28}], 0x1}, 0x20000001) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x820e, 0x820e0000}, 0x10002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 2.898610956s ago: executing program 4 (id=5383): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x23, 0x4, 0x1000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000d313f800", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="63c5a42951c515a3a7dcd154ee3648ed9388e55bb778d5952f06d139f0a6a4208f0c63799bf26429676e8295247d62cfaf76976559977345fa0ee1551b7d41654b74e00e1d26794b184be37bd69ea0126711e59f05c20fc178e3ddda22c9a353bbfd305ff7bdf133cba5fc162836b75247bcefce181f2013281e5239d400"/138], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socketpair(0x10, 0x3, 0x6, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) ioctl$TUNSETOFFLOAD(r2, 0x4008744b, 0xf0ff1f00000000) 2.396861673s ago: executing program 2 (id=5385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000000000", 0x0, 0x24, 0x60000000}, 0x50) 2.318916385s ago: executing program 3 (id=5386): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r3) 2.163969207s ago: executing program 2 (id=5387): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100800}, 0x2000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, &(0x7f0000000880), 0x0, 0x43}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)="3e26cca5654ec15949e45af8b1159d592e49690b9f6c637472b128e2b445f281f35b794162cb429c47dca668", 0x2c}], 0x1}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRESOCT, @ANYRES64=r3, @ANYRES16, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c300000d0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x2d) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000022c0)="0079e120b56e53235134e628dcaed8c4a3b323a2cf4c5baa19410960c399a49395ed063b5b090066cfaabc0d41af86d29b52303762f0ce8f37ed209c6cb2470351a035b105da90c2f088b51078369b21bb71277e1c34157ee4a80fc659c96924df8636d912aeefe1acc7ce90448be843c558850a5bfa382b944a7f465ffa6ffb26541c5449dd20ef27ab8042ba737f1e0319662ee84ba367e7b9cb1fff9a321ebcb508b6432732cfa993bb9c3bc22a63c980a64089db1f4018e081654ccc3a681a48b361a0d5a2d36e1ace4377d6ab839b895ee1860547a803b4811bf55ce04ebc620402a16bda1429f800f0a751a26f295126767122e9757345f605ba37d3ebfe706ae5a2ecd347e4140e5eef4b6c654fed272c8503b7ef14bdfd9a3a48c5d396f9339bd35207277c186dda241a0fce425f1f129ad46dd405c9879daf0266269c41e198a193b3df808602881c986d32db415663f11fb5585e5ae4411ca220628fe97392e0b54f8aa638c112cbb8f8020253692228de00e7176086b10eb8ee0fd7c5fc40a1c5e8d18b9e2e596a4b1a5859360afb4acd9d8af0fcb025c3d3f694b9d63795f22129e6e54037dfaa197fe9022d0c8ce8e7e7ad615b64dc8317caa8ffceeb7addfadb287dc050564ca0f02fbbfe2cbd6bd7b1307f7ebae09a4a5862a507120c490eaa8a0b78c4416d75563a31ef6653068d749f7515b2f9823a01e1b4dc680ba762c807130472aa16df1479fb07d84226771ec555b7bc461cb563957970d413dccc1deee82f67b272ebe3ab518a8d09195a608c4cf77780183c817aaea86f995fc2d4021a0a838664bea63447f7d14b24c094d8a1f937668057036dabbc610cd24542068c4483c0eff466c316b38b43de3c6069ccb09984ab6f4b8eef088ec42b2844d092d36dc760948a896107fc5e3170541fbeab3b9a0bb24e6cf88fe810d6db8f8d12a50c285b5ff5b205e15454c9089f0d8ff40691a9133d5e7039061f3bd7c993742feca8676b5b8f0184d8477415257073fc07af51bc9b1684d853769b8cc7d9db00c074531a695b7b0b35fb58ec769143d698c3db9f9312f039a6a97b395c1e3330b2edbbac9dca625b1cf1e7c7a2e1e8946abf7751472fc2ae687817c84b8de024fa341dc838ff1fd8515a19237421a2694a5d0f52399f0e558c2f74f46f89844de71ed2bbabaaccd41ee1bb49384848110f3ebd38aaa4a4b2dd7338f70879edb05726b1edbc535ad3e8e6108a3457c48adebe09b4c8fcbd494e5f95e663dc82398abd9fbb3d8eed0f1b289899fd4a9a19711dc9c7bb26ca43a09ef2e54fd5a6c033583379e42aad4ff3da2f8b33ede8f6e729ca7bc2849c79743509199346465006d149a11640b2d95b2efe3cbfe0f3fbe1fa61557a3254fdc57a0c5de6b00fa15671fb6b15f54d8fd49e433816b8d58b2584474aae2332b3a1271c81d35bd17ab642dc5a889640fdc68e9162e6bd7a970c350585549d994dd6f9ecc2ef20a138eab6606881032eee6cd34fc9f9cb0b9a04957f762add0631e59b69c3ad7f9967aab7d2658d6b8f74a992bce994e49f36466959d39c608634e0c54384504b4dbbbc261ed2b2a6ab7cf403ea56bd5e30aaf674db158336c32fe6c4b32d781c862b3c51a9ec601a874b5268baf573b0d3f9b9a3fa2036ec365da87aeb6d9c18541e9fd6dc70fb021e9b8ec45f87bdf1cedd27b4af36e690e60e5cc51f7292c0326cb7d71d303fd83727bc537169825ff6dfd5b240952f0649419e8757420d51b461c2428febdedb39515cf7ea617da55c4a3c622349d70d85369faa79d3c6285de2b480e33cfdb40487086b30bb8f6250d80b60561ab9f8cf471d02665af65bed664073a06015562171954b0e1133621ca8e73b73fc7f05db8165085f17a2d5cbcc0f58afe8d1a6e93c2c3d88e054f056312a855666787ea4351e25cc1807c81452240116f69effbba226c78ce66538dfb77a34786501745514f40ccc36e49e822bde143c1415a20f158a00e8284e1a85d1884ca3e38c6f70147ac75d297ff7fdbb188c5ea5cb02c0553e63c323b6e42a645c5d0e86159fb4fc0fc7bc6800aba12604d8a26c894163cff56c4f53ca574a112ac08ce62dfc2186875139d5460498819d746d7e241d15646a3720548da86b257f8c094a12a91fd9f04fdc3a37246690a26fdb0873845d7810cf36adc1ae1f450b7efca5c1992d78bc1184c301d5b357aa55016d5b6bd22a761b3e263ae956cf61a1c81b926954e7eca2a8f5c24204731ae2a688f2cc94af1fa84176cf7761f15057a35e0b04598a6348bf5b3b266b0c7406e0dffcb97b6bc4af88b2d6816021872a876b93374d929c128a7c060771c96eda9cf9693063c2e744d5c501ef3887c05d8a67f21bd4f4b0f4c395a7e88130885bb1314e1ce319a736b0f20e1f2e4325715ffb065137a11b82e7146e049fe68b7a2fc02cc01ca900f91e79c73155989be0ee25a34d704a94a999c76f51838762d4adec00b44874ef4147ad851afe52259795a46a5a7abedf55a5bc6de1c60bfb5bfd054d3144ae9d4fd6992c05028d4452a6c1995a93ba3e2f42c86df31ad61c29ae3c7df9c1e9cb2e7b0723f8b58809eaea3174a4ac70b1ce5e4c77ee4a1911f18ca7f7ccbbb0ded703269a1f8c41d53e2c7e9677033359987b079f2d5915713493a113108b62f594044ebe8cfe776ccb219ad8cb", 0x4c3}, {&(0x7f0000000480)="98394755849309c480bfe4d40fdf45226dd7e2c5bc8d33c4c6544b7e033b9362065e0d967c99e7b40911fd8c2363ce70339f149b9536076be177b5605f3c30f4b483eaf594719aea8e9669235978c074000b221c10e9d7d87f3b", 0x5a}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000032c0)="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", 0x800}], 0x6, &(0x7f0000000640)}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.00895749s ago: executing program 1 (id=5388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='afs_flock_ev\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x8a}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x20, 0x0}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80032, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3480000000, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000080eb0000000000800000007454787bddbcfb000000"], 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000020030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22ffe3) close(r3) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f584899441cf03bd555e4dc105ba195c707c288583c2d5fb75f11bc395a50dbfc87a03d0a907e3e6be94fa27da906c5d3426c3852b90be4304af05ae18ad4d54793b2a1b1ad8ac9197ea5a17da9ca55123cfffcf6f2c06652f78c77e06df4ae3bcf816cb6190e4cdc55aac66cb228b10c72210"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r11}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4) 1.590214766s ago: executing program 3 (id=5389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.515648657s ago: executing program 4 (id=5391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800"], &(0x7f0000000240)=""/199, 0x33, 0xc7, 0x1}, 0x28) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef2885634a8270e7112f00000000000000000000000000ac14141e82"], 0xffdd) 1.427233969s ago: executing program 4 (id=5393): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000070000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x9, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x100000004}, 0x14, 0xc8, 0xfffffffe, 0x0, 0x7f, 0xfffffffa, 0x0, 0x0, 0x200d9, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.426418698s ago: executing program 4 (id=5394): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100800}, 0x2000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, &(0x7f0000000880), 0x0, 0x43}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)="3e26cca5654ec15949e45af8b1159d592e49690b9f6c637472b128e2b445f281f35b794162cb429c47dca668", 0x2c}], 0x1}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c300000d0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x2d) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.32905773s ago: executing program 3 (id=5395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe80ccef02a1e9e99, 0x2, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x84}, @call={0x85, 0x0, 0x0, 0xb3}], &(0x7f0000000400)='GPL\x00', 0x6, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x6e, '\x00', r2, @fallback=0xe, r3, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xc, 0x85, 0xd12b}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000780)=[{0x5, 0x1, 0x9, 0x8}, {0x5, 0x4, 0x4, 0x1}], 0x10, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=@framed={{}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001000)='workqueue_queue_work\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.32619897s ago: executing program 0 (id=5396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x1, 0x80000000, 0x0, 0xfffffffffff7bbfe, 0x0, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 1.31905346s ago: executing program 3 (id=5397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x50) 1.228468731s ago: executing program 3 (id=5398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x1, 0x80000000, 0x0, 0xfffffffffff7bbfe, 0x0, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 1.227770092s ago: executing program 2 (id=5399): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e1a20410c304bb9841c6c967a604d30a461d0388cc5fd426109c870743efecee87b33", 0x28}], 0x1}, 0x20000001) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x820e, 0x820e0000}, 0x10002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.158218673s ago: executing program 0 (id=5400): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r3) 1.157399622s ago: executing program 1 (id=5401): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100800}, 0x2000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, &(0x7f0000000880), 0x0, 0x43}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)="3e26cca5654ec15949e45af8b1159d592e49690b9f6c637472b128e2b445f281f35b794162cb429c47dca668", 0x2c}], 0x1}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRESOCT, @ANYRES64=r3, @ANYRES16, @ANYRES32], 0x48) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.058580854s ago: executing program 2 (id=5402): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x23, 0x4, 0x1000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000d313f800", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="63c5a42951c515a3a7dcd154ee3648ed9388e55bb778d5952f06d139f0a6a4208f0c63799bf26429676e8295247d62cfaf76976559977345fa0ee1551b7d41654b74e00e1d26794b184be37bd69ea0126711e59f05c20fc178e3ddda22c9a353bbfd305ff7bdf133cba5fc162836b75247bcefce181f2013281e5239d400"/138], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) socketpair(0x10, 0x3, 0x6, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) ioctl$TUNSETOFFLOAD(r2, 0x4008744b, 0xf0ff1f00000000) 822.204907ms ago: executing program 0 (id=5403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4e}], 0x1}, 0x0) 688.156469ms ago: executing program 0 (id=5404): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000070000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x9, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x100000004}, 0x14, 0xc8, 0xfffffffe, 0x0, 0x7f, 0xfffffffa, 0x0, 0x0, 0x200d9, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 606.925821ms ago: executing program 0 (id=5405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 548.170502ms ago: executing program 4 (id=5406): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 5) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r5) 48.134359ms ago: executing program 0 (id=5407): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(r1) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe40, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00230006a60000080056f30c0000367738b4a2b2710002000000e64f0d61bfc618cf5459be74e5bd7e4ee3fbbe031f7d70ed66ef246677ff3914", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) 46.94454ms ago: executing program 1 (id=5408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 773.17µs ago: executing program 1 (id=5409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000c200"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180)}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x6, 0x44, 0x1, 0x0, 0x0, 0x3, 0x60014, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x9}, 0x20, 0x200, 0xfffffff9, 0x4, 0xc, 0x0, 0x200, 0x0, 0x40, 0x0, 0x3}, 0x0, 0xf, r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500000000004000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x10, 0x0, 0xa, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=[{0x2, 0x2, 0x3, 0x5}, {0x3, 0x3, 0xb, 0x3}, {0x4, 0x5, 0x10, 0x6}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0xb}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x0, 0x0}, 0x30) syz_clone(0x2a020600, &(0x7f0000000440)="4e159d92ce4e466744ae3704fbcbecdf6d177309d6887a9d4f60bdd3c2aa9601456e3bdfd0d883f01ff4b38bc7e0302ffc3a39d616b8f204f4e6067102b48bf64b442ded12f27d5c1fefd49050ae9b46d11c86ae78e3f153dacb1199b2571171df725d2ec1", 0x65, &(0x7f0000000280), &(0x7f00000003c0), 0x0) 0s ago: executing program 3 (id=5410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x1, 0x80000000, 0x0, 0xfffffffffff7bbfe, 0x0, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 588.470765][T10378] RBP: 00007f319d503090 R08: 0000000000000000 R09: 0000000000000000 [ 588.479011][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.487143][T10378] R13: 0000000000000000 R14: 00007f319f0c1fa0 R15: 00007ffe3ce24458 [ 588.495292][T10378] [ 590.852571][T10417] device pim6reg1 entered promiscuous mode [ 591.245139][T10437] syz.3.3613[10437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.245213][T10437] syz.3.3613[10437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.621850][T10433] device sit0 entered promiscuous mode [ 592.330267][T10457] device sit0 left promiscuous mode [ 592.481239][T10457] device sit0 entered promiscuous mode [ 593.310877][T10489] syz.0.3629[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.310946][T10489] syz.0.3629[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.571435][T10503] FAULT_INJECTION: forcing a failure. [ 593.571435][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.601556][T10503] CPU: 0 PID: 10503 Comm: syz.1.3639 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 593.611933][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.622405][T10503] Call Trace: [ 593.625694][T10503] [ 593.628810][T10503] __dump_stack+0x21/0x30 [ 593.633350][T10503] dump_stack_lvl+0xee/0x150 [ 593.638182][T10503] ? show_regs_print_info+0x20/0x20 [ 593.643609][T10503] dump_stack+0x15/0x20 [ 593.648057][T10503] should_fail+0x3c1/0x510 [ 593.652500][T10503] should_fail_usercopy+0x1a/0x20 [ 593.657539][T10503] _copy_to_user+0x20/0x90 [ 593.661978][T10503] simple_read_from_buffer+0xe9/0x160 [ 593.667501][T10503] proc_fail_nth_read+0x19a/0x210 [ 593.672804][T10503] ? proc_fault_inject_write+0x2f0/0x2f0 [ 593.678635][T10503] ? security_file_permission+0x83/0xa0 [ 593.684522][T10503] ? proc_fault_inject_write+0x2f0/0x2f0 [ 593.690340][T10503] vfs_read+0x282/0xbe0 [ 593.694584][T10503] ? kernel_read+0x1f0/0x1f0 [ 593.699408][T10503] ? __kasan_check_write+0x14/0x20 [ 593.704830][T10503] ? mutex_lock+0x95/0x1a0 [ 593.709785][T10503] ? wait_for_completion_killable_timeout+0x10/0x10 [ 593.718471][T10503] ? __fget_files+0x2c4/0x320 [ 593.724081][T10503] ? __fdget_pos+0x2d2/0x380 [ 593.728909][T10503] ? ksys_read+0x71/0x240 [ 593.733381][T10503] ksys_read+0x140/0x240 [ 593.738204][T10503] ? vfs_write+0xf70/0xf70 [ 593.744712][T10503] ? debug_smp_processor_id+0x17/0x20 [ 593.750619][T10503] __x64_sys_read+0x7b/0x90 [ 593.756119][T10503] x64_sys_call+0x96d/0x9a0 [ 593.761558][T10503] do_syscall_64+0x4c/0xa0 [ 593.767136][T10503] ? clear_bhb_loop+0x50/0xa0 [ 593.772095][T10503] ? clear_bhb_loop+0x50/0xa0 [ 593.777249][T10503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.783765][T10503] RIP: 0033:0x7f80962a233c [ 593.789040][T10503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 593.810704][T10503] RSP: 002b:00007f809490c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 593.819914][T10503] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a233c [ 593.829013][T10503] RDX: 000000000000000f RSI: 00007f809490c0a0 RDI: 0000000000000005 [ 593.837556][T10503] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 593.846631][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.855496][T10503] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 593.865160][T10503] [ 594.223347][T10511] device sit0 entered promiscuous mode [ 595.378451][T10529] syz.1.3645[10529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.378525][T10529] syz.1.3645[10529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.675159][T10549] FAULT_INJECTION: forcing a failure. [ 595.675159][T10549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.764790][T10549] CPU: 0 PID: 10549 Comm: syz.4.3656 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 595.775923][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.787762][T10549] Call Trace: [ 595.791220][T10549] [ 595.794671][T10549] __dump_stack+0x21/0x30 [ 595.799247][T10549] dump_stack_lvl+0xee/0x150 [ 595.804332][T10549] ? show_regs_print_info+0x20/0x20 [ 595.809646][T10549] dump_stack+0x15/0x20 [ 595.815073][T10549] should_fail+0x3c1/0x510 [ 595.819887][T10549] should_fail_usercopy+0x1a/0x20 [ 595.825228][T10549] _copy_to_user+0x20/0x90 [ 595.830060][T10549] simple_read_from_buffer+0xe9/0x160 [ 595.836514][T10549] proc_fail_nth_read+0x19a/0x210 [ 595.842003][T10549] ? proc_fault_inject_write+0x2f0/0x2f0 [ 595.849040][T10549] ? security_file_permission+0x83/0xa0 [ 595.855543][T10549] ? proc_fault_inject_write+0x2f0/0x2f0 [ 595.861905][T10549] vfs_read+0x282/0xbe0 [ 595.866522][T10549] ? kernel_read+0x1f0/0x1f0 [ 595.872244][T10549] ? __kasan_check_write+0x14/0x20 [ 595.879112][T10549] ? mutex_lock+0x95/0x1a0 [ 595.883910][T10549] ? wait_for_completion_killable_timeout+0x10/0x10 [ 595.892104][T10549] ? __fget_files+0x2c4/0x320 [ 595.897964][T10549] ? __fdget_pos+0x2d2/0x380 [ 595.903098][T10549] ? ksys_read+0x71/0x240 [ 595.908260][T10549] ksys_read+0x140/0x240 [ 595.913787][T10549] ? vfs_write+0xf70/0xf70 [ 595.918912][T10549] ? sched_clock_cpu+0x18/0x3c0 [ 595.924223][T10549] __x64_sys_read+0x7b/0x90 [ 595.929536][T10549] x64_sys_call+0x96d/0x9a0 [ 595.934192][T10549] do_syscall_64+0x4c/0xa0 [ 595.939777][T10549] ? clear_bhb_loop+0x50/0xa0 [ 595.945162][T10549] ? clear_bhb_loop+0x50/0xa0 [ 595.949886][T10549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.956429][T10549] RIP: 0033:0x7f35450e033c [ 595.961403][T10549] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 595.983699][T10549] RSP: 002b:00007f354374a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 595.993069][T10549] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e033c [ 596.001406][T10549] RDX: 000000000000000f RSI: 00007f354374a0a0 RDI: 0000000000000005 [ 596.010103][T10549] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 596.018996][T10549] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 596.028241][T10549] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 596.038523][T10549] [ 596.075211][T10554] device sit0 entered promiscuous mode [ 597.296513][T10590] FAULT_INJECTION: forcing a failure. [ 597.296513][T10590] name failslab, interval 1, probability 0, space 0, times 0 [ 597.310143][T10590] CPU: 1 PID: 10590 Comm: syz.4.3670 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 597.321191][T10590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.331799][T10590] Call Trace: [ 597.335718][T10590] [ 597.338656][T10590] __dump_stack+0x21/0x30 [ 597.343809][T10590] dump_stack_lvl+0xee/0x150 [ 597.348618][T10590] ? show_regs_print_info+0x20/0x20 [ 597.355017][T10590] dump_stack+0x15/0x20 [ 597.360765][T10590] should_fail+0x3c1/0x510 [ 597.366428][T10590] __should_failslab+0xa4/0xe0 [ 597.371384][T10590] should_failslab+0x9/0x20 [ 597.376825][T10590] slab_pre_alloc_hook+0x3b/0xe0 [ 597.382160][T10590] kmem_cache_alloc_trace+0x48/0x270 [ 597.388600][T10590] ? tipc_nametbl_insert_publ+0x9a0/0x1460 [ 597.394829][T10590] tipc_nametbl_insert_publ+0x9a0/0x1460 [ 597.402132][T10590] tipc_nametbl_publish+0x176/0x2f0 [ 597.408531][T10590] tipc_sk_publish+0x1f8/0x440 [ 597.413664][T10590] ? tipc_sk_withdraw+0x620/0x620 [ 597.419068][T10590] ? tipc_nametbl_build_group+0x3d2/0x430 [ 597.425377][T10590] tipc_sk_join+0x389/0x6a0 [ 597.430528][T10590] ? sock_init_data+0xc0/0xc0 [ 597.435633][T10590] ? __tipc_sendstream+0x11a0/0x11a0 [ 597.441457][T10590] ? __kasan_check_write+0x14/0x20 [ 597.446916][T10590] ? _copy_from_user+0x95/0xd0 [ 597.452329][T10590] tipc_setsockopt+0x684/0x900 [ 597.458085][T10590] ? tipc_shutdown+0x400/0x400 [ 597.463150][T10590] ? security_socket_setsockopt+0x82/0xa0 [ 597.469071][T10590] ? tipc_shutdown+0x400/0x400 [ 597.474962][T10590] __sys_setsockopt+0x2f0/0x460 [ 597.480958][T10590] ? __ia32_sys_recv+0xb0/0xb0 [ 597.486870][T10590] ? ksys_write+0x1eb/0x240 [ 597.491957][T10590] ? __ia32_sys_read+0x90/0x90 [ 597.497022][T10590] ? __bpf_trace_sys_enter+0x62/0x70 [ 597.502753][T10590] __x64_sys_setsockopt+0xbf/0xd0 [ 597.508566][T10590] x64_sys_call+0x982/0x9a0 [ 597.513256][T10590] do_syscall_64+0x4c/0xa0 [ 597.518346][T10590] ? clear_bhb_loop+0x50/0xa0 [ 597.523472][T10590] ? clear_bhb_loop+0x50/0xa0 [ 597.529136][T10590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 597.536208][T10590] RIP: 0033:0x7f35450e1929 [ 597.540907][T10590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.563439][T10590] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 597.572989][T10590] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 597.584311][T10590] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 597.593226][T10590] RBP: 00007f354374a090 R08: 00000000000004bd R09: 0000000000000000 [ 597.604773][T10590] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 597.614437][T10590] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 597.623496][T10590] [ 597.627377][T10590] tipc: Failed to bind to 4294967295,0,0 [ 598.551598][T10626] FAULT_INJECTION: forcing a failure. [ 598.551598][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.565486][T10626] CPU: 1 PID: 10626 Comm: syz.1.3682 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 598.576263][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.587645][T10626] Call Trace: [ 598.591822][T10626] [ 598.594958][T10626] __dump_stack+0x21/0x30 [ 598.599505][T10626] dump_stack_lvl+0xee/0x150 [ 598.604826][T10626] ? show_regs_print_info+0x20/0x20 [ 598.610221][T10626] ? exc_page_fault+0x5e/0xb0 [ 598.615938][T10626] dump_stack+0x15/0x20 [ 598.620497][T10626] should_fail+0x3c1/0x510 [ 598.625373][T10626] should_fail_usercopy+0x1a/0x20 [ 598.630521][T10626] copy_page_from_iter+0x2f6/0x680 [ 598.636393][T10626] pipe_write+0x914/0x18d0 [ 598.641112][T10626] ? pipe_write+0x111/0x18d0 [ 598.645725][T10626] ? pipe_read+0xfe0/0xfe0 [ 598.650241][T10626] ? selinux_file_permission+0x3f4/0x510 [ 598.655975][T10626] ? memset+0x35/0x40 [ 598.660146][T10626] ? iov_iter_init+0xbc/0x180 [ 598.664880][T10626] vfs_write+0x802/0xf70 [ 598.669142][T10626] ? file_end_write+0x1b0/0x1b0 [ 598.674102][T10626] ? __fget_files+0x2c4/0x320 [ 598.678889][T10626] ? __fdget_pos+0x1f7/0x380 [ 598.684393][T10626] ? ksys_write+0x71/0x240 [ 598.688826][T10626] ksys_write+0x140/0x240 [ 598.693164][T10626] ? __ia32_sys_read+0x90/0x90 [ 598.698308][T10626] ? debug_smp_processor_id+0x17/0x20 [ 598.703953][T10626] __x64_sys_write+0x7b/0x90 [ 598.708552][T10626] x64_sys_call+0x8ef/0x9a0 [ 598.713190][T10626] do_syscall_64+0x4c/0xa0 [ 598.717796][T10626] ? clear_bhb_loop+0x50/0xa0 [ 598.722474][T10626] ? clear_bhb_loop+0x50/0xa0 [ 598.727462][T10626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.733939][T10626] RIP: 0033:0x7f80962a3929 [ 598.738953][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.759357][T10626] RSP: 002b:00007f809490c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.767873][T10626] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a3929 [ 598.776616][T10626] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 598.785133][T10626] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 598.794924][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.803868][T10626] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 598.813287][T10626] [ 600.218384][T10661] device veth1_macvtap left promiscuous mode [ 600.228007][T10666] FAULT_INJECTION: forcing a failure. [ 600.228007][T10666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.249475][T10666] CPU: 0 PID: 10666 Comm: syz.3.3695 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 600.259591][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.270107][T10666] Call Trace: [ 600.273384][T10666] [ 600.276405][T10666] __dump_stack+0x21/0x30 [ 600.280923][T10666] dump_stack_lvl+0xee/0x150 [ 600.286261][T10666] ? show_regs_print_info+0x20/0x20 [ 600.291657][T10666] ? vfs_write+0xc17/0xf70 [ 600.296525][T10666] dump_stack+0x15/0x20 [ 600.300951][T10666] should_fail+0x3c1/0x510 [ 600.305563][T10666] should_fail_usercopy+0x1a/0x20 [ 600.310590][T10666] _copy_from_user+0x20/0xd0 [ 600.315268][T10666] __sys_bpf+0x233/0x730 [ 600.319508][T10666] ? bpf_link_show_fdinfo+0x310/0x310 [ 600.325415][T10666] ? debug_smp_processor_id+0x17/0x20 [ 600.330976][T10666] __x64_sys_bpf+0x7c/0x90 [ 600.335400][T10666] x64_sys_call+0x4b9/0x9a0 [ 600.339930][T10666] do_syscall_64+0x4c/0xa0 [ 600.344667][T10666] ? clear_bhb_loop+0x50/0xa0 [ 600.349530][T10666] ? clear_bhb_loop+0x50/0xa0 [ 600.354230][T10666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.360792][T10666] RIP: 0033:0x7f053e584929 [ 600.365292][T10666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.388085][T10666] RSP: 002b:00007f053cbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.397463][T10666] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 600.408995][T10666] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 600.417267][T10666] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 600.426053][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.435712][T10666] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 600.444663][T10666] [ 600.538091][T10670] device sit0 left promiscuous mode [ 600.564005][T10670] device sit0 entered promiscuous mode [ 600.579530][T10670] device sit0 left promiscuous mode [ 600.632055][T10670] device sit0 entered promiscuous mode [ 603.692678][ T30] audit: type=1400 audit(1751087885.243:154): avc: denied { create } for pid=10710 comm="syz.1.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 605.270974][T10753] FAULT_INJECTION: forcing a failure. [ 605.270974][T10753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.293657][T10753] CPU: 1 PID: 10753 Comm: syz.3.3727 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 605.305009][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.322800][T10753] Call Trace: [ 605.326351][T10753] [ 605.330074][T10753] __dump_stack+0x21/0x30 [ 605.334977][T10753] dump_stack_lvl+0xee/0x150 [ 605.342159][T10753] ? show_regs_print_info+0x20/0x20 [ 605.348738][T10753] ? dump_stack+0x9/0x20 [ 605.353176][T10753] dump_stack+0x15/0x20 [ 605.358104][T10753] should_fail+0x3c1/0x510 [ 605.363784][T10753] should_fail_usercopy+0x1a/0x20 [ 605.369860][T10753] _copy_to_user+0x20/0x90 [ 605.375188][T10753] simple_read_from_buffer+0xe9/0x160 [ 605.381051][T10753] proc_fail_nth_read+0x19a/0x210 [ 605.386557][T10753] ? proc_fault_inject_write+0x2f0/0x2f0 [ 605.393091][T10753] ? security_file_permission+0x83/0xa0 [ 605.399098][T10753] ? proc_fault_inject_write+0x2f0/0x2f0 [ 605.405776][T10753] vfs_read+0x282/0xbe0 [ 605.410099][T10753] ? kernel_read+0x1f0/0x1f0 [ 605.415120][T10753] ? __kasan_check_write+0x14/0x20 [ 605.420523][T10753] ? mutex_lock+0x95/0x1a0 [ 605.425474][T10753] ? wait_for_completion_killable_timeout+0x10/0x10 [ 605.432794][T10753] ? __fget_files+0x2c4/0x320 [ 605.438013][T10753] ? __fdget_pos+0x2d2/0x380 [ 605.443631][T10753] ? ksys_read+0x71/0x240 [ 605.448332][T10753] ksys_read+0x140/0x240 [ 605.453631][T10753] ? vfs_write+0xf70/0xf70 [ 605.459531][T10753] ? sched_clock_cpu+0x18/0x3c0 [ 605.465013][T10753] __x64_sys_read+0x7b/0x90 [ 605.471107][T10753] x64_sys_call+0x96d/0x9a0 [ 605.476506][T10753] do_syscall_64+0x4c/0xa0 [ 605.482002][T10753] ? clear_bhb_loop+0x50/0xa0 [ 605.487255][T10753] ? clear_bhb_loop+0x50/0xa0 [ 605.492395][T10753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 605.498808][T10753] RIP: 0033:0x7f053e58333c [ 605.503987][T10753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 605.525913][T10753] RSP: 002b:00007f053cbed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.534761][T10753] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e58333c [ 605.545075][T10753] RDX: 000000000000000f RSI: 00007f053cbed0a0 RDI: 0000000000000006 [ 605.553570][T10753] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 605.563716][T10753] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 605.572743][T10753] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 605.581679][T10753] [ 608.400584][T10846] FAULT_INJECTION: forcing a failure. [ 608.400584][T10846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.462578][T10846] CPU: 1 PID: 10846 Comm: syz.1.3762 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 608.474830][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.486253][T10846] Call Trace: [ 608.490681][T10846] [ 608.493622][T10846] __dump_stack+0x21/0x30 [ 608.497969][T10846] dump_stack_lvl+0xee/0x150 [ 608.502710][T10846] ? show_regs_print_info+0x20/0x20 [ 608.508448][T10846] dump_stack+0x15/0x20 [ 608.513170][T10846] should_fail+0x3c1/0x510 [ 608.518298][T10846] should_fail_usercopy+0x1a/0x20 [ 608.524043][T10846] _copy_to_user+0x20/0x90 [ 608.528897][T10846] simple_read_from_buffer+0xe9/0x160 [ 608.534851][T10846] proc_fail_nth_read+0x19a/0x210 [ 608.540403][T10846] ? proc_fault_inject_write+0x2f0/0x2f0 [ 608.547281][T10846] ? security_file_permission+0x83/0xa0 [ 608.553428][T10846] ? proc_fault_inject_write+0x2f0/0x2f0 [ 608.559769][T10846] vfs_read+0x282/0xbe0 [ 608.564474][T10846] ? kernel_read+0x1f0/0x1f0 [ 608.569338][T10846] ? __kasan_check_write+0x14/0x20 [ 608.574812][T10846] ? mutex_lock+0x95/0x1a0 [ 608.579519][T10846] ? wait_for_completion_killable_timeout+0x10/0x10 [ 608.587013][T10846] ? __fget_files+0x2c4/0x320 [ 608.592241][T10846] ? __fdget_pos+0x2d2/0x380 [ 608.596957][T10846] ? ksys_read+0x71/0x240 [ 608.602009][T10846] ksys_read+0x140/0x240 [ 608.606729][T10846] ? vfs_write+0xf70/0xf70 [ 608.612279][T10846] ? debug_smp_processor_id+0x17/0x20 [ 608.619196][T10846] __x64_sys_read+0x7b/0x90 [ 608.624714][T10846] x64_sys_call+0x96d/0x9a0 [ 608.629699][T10846] do_syscall_64+0x4c/0xa0 [ 608.634758][T10846] ? clear_bhb_loop+0x50/0xa0 [ 608.639637][T10846] ? clear_bhb_loop+0x50/0xa0 [ 608.644769][T10846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 608.651655][T10846] RIP: 0033:0x7f80962a233c [ 608.657345][T10846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 608.679380][T10846] RSP: 002b:00007f809490c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 608.688387][T10846] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a233c [ 608.696554][T10846] RDX: 000000000000000f RSI: 00007f809490c0a0 RDI: 0000000000000004 [ 608.705076][T10846] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 608.714652][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.724369][T10846] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 608.733171][T10846] [ 609.188856][T10862] device sit0 left promiscuous mode [ 609.635111][T10862] device sit0 entered promiscuous mode [ 609.718405][T10869] device sit0 left promiscuous mode [ 610.657285][ T30] audit: type=1400 audit(1751087892.203:155): avc: denied { create } for pid=10893 comm="syz.0.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 611.111702][T10904] ÿÿÿÿÿÿ: renamed from vlan1 [ 611.943719][T10935] device sit0 left promiscuous mode [ 612.645248][T10942] device pim6reg1 entered promiscuous mode [ 614.045003][T10981] ÿÿÿÿÿÿ: renamed from vlan1 [ 616.592273][T11027] FAULT_INJECTION: forcing a failure. [ 616.592273][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 616.732465][T11027] CPU: 0 PID: 11027 Comm: syz.1.3827 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 616.743173][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.753499][T11027] Call Trace: [ 616.756953][T11027] [ 616.759936][T11027] __dump_stack+0x21/0x30 [ 616.764275][T11027] dump_stack_lvl+0xee/0x150 [ 616.768962][T11027] ? show_regs_print_info+0x20/0x20 [ 616.774259][T11027] dump_stack+0x15/0x20 [ 616.778419][T11027] should_fail+0x3c1/0x510 [ 616.782927][T11027] ? tipc_buf_acquire+0x2b/0xe0 [ 616.787802][T11027] __should_failslab+0xa4/0xe0 [ 616.792614][T11027] should_failslab+0x9/0x20 [ 616.797131][T11027] slab_pre_alloc_hook+0x3b/0xe0 [ 616.802280][T11027] ? tipc_buf_acquire+0x2b/0xe0 [ 616.807248][T11027] ? tipc_buf_acquire+0x2b/0xe0 [ 616.812302][T11027] __kmalloc_track_caller+0x6c/0x2c0 [ 616.817791][T11027] ? tipc_buf_acquire+0x2b/0xe0 [ 616.822947][T11027] ? tipc_buf_acquire+0x2b/0xe0 [ 616.828121][T11027] __alloc_skb+0x21a/0x740 [ 616.832707][T11027] tipc_buf_acquire+0x2b/0xe0 [ 616.837506][T11027] tipc_msg_build+0x8f1/0xfb0 [ 616.842346][T11027] __tipc_sendmsg+0x19dd/0x2680 [ 616.847230][T11027] ? release_firmware_map_entry+0x190/0x190 [ 616.853141][T11027] ? __kasan_check_read+0x11/0x20 [ 616.858437][T11027] ? local_bh_enable+0x30/0x30 [ 616.863292][T11027] ? wait_woken+0x170/0x170 [ 616.867971][T11027] ? avc_has_perm+0x158/0x240 [ 616.872656][T11027] ? __kasan_check_write+0x14/0x20 [ 616.877822][T11027] ? _raw_spin_lock_bh+0x8e/0xe0 [ 616.882777][T11027] ? _raw_spin_lock_irq+0xe0/0xe0 [ 616.888218][T11027] ? unwind_get_return_address+0x4d/0x90 [ 616.894048][T11027] ? stack_trace_save+0xe0/0xe0 [ 616.898997][T11027] ? __local_bh_enable_ip+0x58/0x80 [ 616.905115][T11027] ? lock_sock_nested+0x1f1/0x290 [ 616.910347][T11027] ? sock_init_data+0xc0/0xc0 [ 616.915587][T11027] ? stack_trace_save+0x98/0xe0 [ 616.920743][T11027] tipc_sendmsg+0x55/0x70 [ 616.925341][T11027] ? tipc_recvmsg+0x13a0/0x13a0 [ 616.930378][T11027] ____sys_sendmsg+0x5a2/0x8c0 [ 616.935673][T11027] ? __sys_sendmsg_sock+0x40/0x40 [ 616.941149][T11027] ? import_iovec+0x7c/0xb0 [ 616.945731][T11027] ___sys_sendmsg+0x1f0/0x260 [ 616.950410][T11027] ? __sys_sendmsg+0x250/0x250 [ 616.955280][T11027] ? __fdget+0x1a1/0x230 [ 616.959626][T11027] __x64_sys_sendmsg+0x1e2/0x2a0 [ 616.964666][T11027] ? ___sys_sendmsg+0x260/0x260 [ 616.969703][T11027] ? ksys_write+0x1eb/0x240 [ 616.974310][T11027] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 616.980745][T11027] x64_sys_call+0x4b/0x9a0 [ 616.985348][T11027] do_syscall_64+0x4c/0xa0 [ 616.989968][T11027] ? clear_bhb_loop+0x50/0xa0 [ 616.994767][T11027] ? clear_bhb_loop+0x50/0xa0 [ 616.999834][T11027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 617.006108][T11027] RIP: 0033:0x7f80962a3929 [ 617.010536][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.031043][T11027] RSP: 002b:00007f809490c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.039677][T11027] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a3929 [ 617.048244][T11027] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000008 [ 617.056756][T11027] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 617.065019][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.072995][T11027] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 617.081062][T11027] [ 617.275611][T11038] FAULT_INJECTION: forcing a failure. [ 617.275611][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 617.290975][T11038] CPU: 1 PID: 11038 Comm: syz.3.3832 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 617.303199][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.315222][T11038] Call Trace: [ 617.319071][T11038] [ 617.322060][T11038] __dump_stack+0x21/0x30 [ 617.326767][T11038] dump_stack_lvl+0xee/0x150 [ 617.331581][T11038] ? show_regs_print_info+0x20/0x20 [ 617.337759][T11038] dump_stack+0x15/0x20 [ 617.342278][T11038] should_fail+0x3c1/0x510 [ 617.346889][T11038] ? skb_ensure_writable+0x2e7/0x460 [ 617.352763][T11038] __should_failslab+0xa4/0xe0 [ 617.358835][T11038] should_failslab+0x9/0x20 [ 617.363823][T11038] slab_pre_alloc_hook+0x3b/0xe0 [ 617.369230][T11038] ? skb_ensure_writable+0x2e7/0x460 [ 617.374902][T11038] ? skb_ensure_writable+0x2e7/0x460 [ 617.380543][T11038] __kmalloc_track_caller+0x6c/0x2c0 [ 617.386023][T11038] ? skb_ensure_writable+0x2e7/0x460 [ 617.391404][T11038] ? skb_ensure_writable+0x2e7/0x460 [ 617.396693][T11038] pskb_expand_head+0x11b/0x11d0 [ 617.401803][T11038] ? __copy_skb_header+0x437/0x600 [ 617.407119][T11038] ? __kasan_check_write+0x14/0x20 [ 617.412491][T11038] ? __skb_clone+0x47a/0x790 [ 617.417367][T11038] skb_ensure_writable+0x2e7/0x460 [ 617.422482][T11038] bpf_clone_redirect+0x10b/0x380 [ 617.427585][T11038] ? stack_trace_save+0x98/0xe0 [ 617.433148][T11038] bpf_prog_6893982b85ceadf7+0x56/0x824 [ 617.438865][T11038] ? __kasan_slab_alloc+0xcf/0xf0 [ 617.443884][T11038] ? __kasan_slab_alloc+0xbd/0xf0 [ 617.449095][T11038] ? slab_post_alloc_hook+0x4f/0x2b0 [ 617.454475][T11038] ? kmem_cache_alloc+0xf7/0x260 [ 617.459600][T11038] ? __build_skb+0x2d/0x310 [ 617.464280][T11038] ? build_skb+0x24/0x200 [ 617.468686][T11038] ? bpf_prog_test_run_skb+0x279/0x1150 [ 617.474487][T11038] ? bpf_prog_test_run+0x3d5/0x620 [ 617.479720][T11038] ? __sys_bpf+0x52c/0x730 [ 617.484293][T11038] ? __x64_sys_bpf+0x7c/0x90 [ 617.489394][T11038] ? x64_sys_call+0x4b9/0x9a0 [ 617.494370][T11038] ? do_syscall_64+0x4c/0xa0 [ 617.499539][T11038] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 617.505806][T11038] ? ktime_get+0x12f/0x160 [ 617.510436][T11038] bpf_test_run+0x33d/0x8d0 [ 617.515365][T11038] ? convert___skb_to_skb+0x4f0/0x4f0 [ 617.521097][T11038] ? eth_get_headlen+0x1f0/0x1f0 [ 617.526048][T11038] ? convert___skb_to_skb+0x41/0x4f0 [ 617.531494][T11038] bpf_prog_test_run_skb+0x9ec/0x1150 [ 617.537057][T11038] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 617.543040][T11038] bpf_prog_test_run+0x3d5/0x620 [ 617.548167][T11038] ? bpf_prog_query+0x230/0x230 [ 617.553103][T11038] ? selinux_bpf+0xce/0xf0 [ 617.558326][T11038] ? security_bpf+0x82/0xa0 [ 617.563606][T11038] __sys_bpf+0x52c/0x730 [ 617.568018][T11038] ? bpf_link_show_fdinfo+0x310/0x310 [ 617.573664][T11038] ? debug_smp_processor_id+0x17/0x20 [ 617.579454][T11038] __x64_sys_bpf+0x7c/0x90 [ 617.584033][T11038] x64_sys_call+0x4b9/0x9a0 [ 617.588822][T11038] do_syscall_64+0x4c/0xa0 [ 617.593424][T11038] ? clear_bhb_loop+0x50/0xa0 [ 617.598188][T11038] ? clear_bhb_loop+0x50/0xa0 [ 617.602864][T11038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 617.609039][T11038] RIP: 0033:0x7f053e584929 [ 617.613593][T11038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.634494][T11038] RSP: 002b:00007f053cbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 617.644050][T11038] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 617.652286][T11038] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 617.661046][T11038] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 617.669361][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.677566][T11038] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 617.685809][T11038] [ 619.642072][T11106] FAULT_INJECTION: forcing a failure. [ 619.642072][T11106] name failslab, interval 1, probability 0, space 0, times 0 [ 619.685094][T11106] CPU: 1 PID: 11106 Comm: syz.1.3852 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 619.696340][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.706759][T11106] Call Trace: [ 619.710132][T11106] [ 619.713174][T11106] __dump_stack+0x21/0x30 [ 619.717512][T11106] dump_stack_lvl+0xee/0x150 [ 619.722385][T11106] ? show_regs_print_info+0x20/0x20 [ 619.727668][T11106] dump_stack+0x15/0x20 [ 619.731993][T11106] should_fail+0x3c1/0x510 [ 619.736786][T11106] __should_failslab+0xa4/0xe0 [ 619.742966][T11106] should_failslab+0x9/0x20 [ 619.748095][T11106] slab_pre_alloc_hook+0x3b/0xe0 [ 619.753216][T11106] ? skb_clone+0x1cf/0x360 [ 619.757939][T11106] kmem_cache_alloc+0x44/0x260 [ 619.763074][T11106] ? stack_trace_save+0xe0/0xe0 [ 619.768809][T11106] skb_clone+0x1cf/0x360 [ 619.773164][T11106] bpf_clone_redirect+0xa7/0x380 [ 619.778478][T11106] ? stack_trace_save+0x98/0xe0 [ 619.783356][T11106] bpf_prog_6893982b85ceadf7+0x56/0xed0 [ 619.789265][T11106] ? __kasan_slab_alloc+0xcf/0xf0 [ 619.794660][T11106] ? __kasan_slab_alloc+0xbd/0xf0 [ 619.799788][T11106] ? slab_post_alloc_hook+0x4f/0x2b0 [ 619.805775][T11106] ? kmem_cache_alloc+0xf7/0x260 [ 619.811612][T11106] ? __build_skb+0x2d/0x310 [ 619.816508][T11106] ? build_skb+0x24/0x200 [ 619.821197][T11106] ? bpf_prog_test_run_skb+0x279/0x1150 [ 619.827348][T11106] ? bpf_prog_test_run+0x3d5/0x620 [ 619.833406][T11106] ? __sys_bpf+0x52c/0x730 [ 619.838117][T11106] ? __x64_sys_bpf+0x7c/0x90 [ 619.843134][T11106] ? x64_sys_call+0x4b9/0x9a0 [ 619.849129][T11106] ? do_syscall_64+0x4c/0xa0 [ 619.854611][T11106] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.862357][T11106] ? ktime_get+0x12f/0x160 [ 619.866798][T11106] bpf_test_run+0x33d/0x8d0 [ 619.871585][T11106] ? convert___skb_to_skb+0x4f0/0x4f0 [ 619.877930][T11106] ? eth_get_headlen+0x1f0/0x1f0 [ 619.883035][T11106] ? convert___skb_to_skb+0x41/0x4f0 [ 619.889147][T11106] bpf_prog_test_run_skb+0x9ec/0x1150 [ 619.896116][T11106] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 619.904894][T11106] bpf_prog_test_run+0x3d5/0x620 [ 619.910034][T11106] ? bpf_prog_query+0x230/0x230 [ 619.915063][T11106] ? selinux_bpf+0xce/0xf0 [ 619.919664][T11106] ? security_bpf+0x82/0xa0 [ 619.924491][T11106] __sys_bpf+0x52c/0x730 [ 619.929255][T11106] ? bpf_link_show_fdinfo+0x310/0x310 [ 619.935181][T11106] ? debug_smp_processor_id+0x17/0x20 [ 619.941100][T11106] __x64_sys_bpf+0x7c/0x90 [ 619.946418][T11106] x64_sys_call+0x4b9/0x9a0 [ 619.951316][T11106] do_syscall_64+0x4c/0xa0 [ 619.955734][T11106] ? clear_bhb_loop+0x50/0xa0 [ 619.960526][T11106] ? clear_bhb_loop+0x50/0xa0 [ 619.965517][T11106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.971681][T11106] RIP: 0033:0x7f80962a3929 [ 619.976480][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.997429][T11106] RSP: 002b:00007f809490c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.006673][T11106] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a3929 [ 620.015797][T11106] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 620.024483][T11106] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 620.032889][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.042377][T11106] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 620.051256][T11106] [ 620.652913][T11121] FAULT_INJECTION: forcing a failure. [ 620.652913][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.772256][T11121] CPU: 1 PID: 11121 Comm: syz.1.3858 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 620.782444][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.792708][T11121] Call Trace: [ 620.796080][T11121] [ 620.799098][T11121] __dump_stack+0x21/0x30 [ 620.803434][T11121] dump_stack_lvl+0xee/0x150 [ 620.808154][T11121] ? show_regs_print_info+0x20/0x20 [ 620.813533][T11121] dump_stack+0x15/0x20 [ 620.818151][T11121] should_fail+0x3c1/0x510 [ 620.823052][T11121] should_fail_usercopy+0x1a/0x20 [ 620.828384][T11121] _copy_to_user+0x20/0x90 [ 620.832911][T11121] simple_read_from_buffer+0xe9/0x160 [ 620.838738][T11121] proc_fail_nth_read+0x19a/0x210 [ 620.843881][T11121] ? proc_fault_inject_write+0x2f0/0x2f0 [ 620.849744][T11121] ? security_file_permission+0x83/0xa0 [ 620.855599][T11121] ? proc_fault_inject_write+0x2f0/0x2f0 [ 620.861717][T11121] vfs_read+0x282/0xbe0 [ 620.866110][T11121] ? kernel_read+0x1f0/0x1f0 [ 620.870897][T11121] ? __kasan_check_write+0x14/0x20 [ 620.876535][T11121] ? mutex_lock+0x95/0x1a0 [ 620.881231][T11121] ? wait_for_completion_killable_timeout+0x10/0x10 [ 620.889590][T11121] ? __fget_files+0x2c4/0x320 [ 620.894830][T11121] ? __fdget_pos+0x2d2/0x380 [ 620.899824][T11121] ? ksys_read+0x71/0x240 [ 620.904262][T11121] ksys_read+0x140/0x240 [ 620.908690][T11121] ? vfs_write+0xf70/0xf70 [ 620.913381][T11121] ? debug_smp_processor_id+0x17/0x20 [ 620.919033][T11121] __x64_sys_read+0x7b/0x90 [ 620.923625][T11121] x64_sys_call+0x96d/0x9a0 [ 620.928117][T11121] do_syscall_64+0x4c/0xa0 [ 620.932607][T11121] ? clear_bhb_loop+0x50/0xa0 [ 620.937575][T11121] ? clear_bhb_loop+0x50/0xa0 [ 620.942343][T11121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 620.948245][T11121] RIP: 0033:0x7f80962a233c [ 620.952686][T11121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 620.972367][T11121] RSP: 002b:00007f809490c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.981388][T11121] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a233c [ 620.990069][T11121] RDX: 000000000000000f RSI: 00007f809490c0a0 RDI: 0000000000000004 [ 620.998208][T11121] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 621.006251][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.014288][T11121] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 621.022249][T11121] [ 621.234850][T11134] device ip6gretap0 entered promiscuous mode [ 623.356077][T11190] FAULT_INJECTION: forcing a failure. [ 623.356077][T11190] name failslab, interval 1, probability 0, space 0, times 0 [ 623.435553][T11190] CPU: 0 PID: 11190 Comm: syz.3.3883 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 623.446652][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 623.458077][T11190] Call Trace: [ 623.461642][T11190] [ 623.464811][T11190] __dump_stack+0x21/0x30 [ 623.470207][T11190] dump_stack_lvl+0xee/0x150 [ 623.474982][T11190] ? show_regs_print_info+0x20/0x20 [ 623.480916][T11190] dump_stack+0x15/0x20 [ 623.486024][T11190] should_fail+0x3c1/0x510 [ 623.490962][T11190] ? skb_ensure_writable+0x2e7/0x460 [ 623.497075][T11190] __should_failslab+0xa4/0xe0 [ 623.502464][T11190] should_failslab+0x9/0x20 [ 623.507626][T11190] slab_pre_alloc_hook+0x3b/0xe0 [ 623.513861][T11190] ? skb_ensure_writable+0x2e7/0x460 [ 623.519795][T11190] ? skb_ensure_writable+0x2e7/0x460 [ 623.525788][T11190] __kmalloc_track_caller+0x6c/0x2c0 [ 623.531471][T11190] ? skb_ensure_writable+0x2e7/0x460 [ 623.537282][T11190] ? skb_ensure_writable+0x2e7/0x460 [ 623.543646][T11190] pskb_expand_head+0x11b/0x11d0 [ 623.549878][T11190] ? __copy_skb_header+0x437/0x600 [ 623.555373][T11190] ? __kasan_check_write+0x14/0x20 [ 623.562631][T11190] ? __skb_clone+0x47a/0x790 [ 623.567808][T11190] skb_ensure_writable+0x2e7/0x460 [ 623.573827][T11190] bpf_clone_redirect+0x10b/0x380 [ 623.579748][T11190] ? stack_trace_save+0x98/0xe0 [ 623.585510][T11190] bpf_prog_6893982b85ceadf7+0x56/0x4a4 [ 623.591681][T11190] ? __kasan_slab_alloc+0xcf/0xf0 [ 623.597954][T11190] ? __kasan_slab_alloc+0xbd/0xf0 [ 623.604160][T11190] ? slab_post_alloc_hook+0x4f/0x2b0 [ 623.610274][T11190] ? kmem_cache_alloc+0xf7/0x260 [ 623.615932][T11190] ? __build_skb+0x2d/0x310 [ 623.620747][T11190] ? build_skb+0x24/0x200 [ 623.625114][T11190] ? bpf_prog_test_run_skb+0x279/0x1150 [ 623.631389][T11190] ? bpf_prog_test_run+0x3d5/0x620 [ 623.637168][T11190] ? __sys_bpf+0x52c/0x730 [ 623.642134][T11190] ? __x64_sys_bpf+0x7c/0x90 [ 623.647361][T11190] ? x64_sys_call+0x4b9/0x9a0 [ 623.652408][T11190] ? do_syscall_64+0x4c/0xa0 [ 623.657410][T11190] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 623.664447][T11190] ? ktime_get+0x12f/0x160 [ 623.668984][T11190] bpf_test_run+0x33d/0x8d0 [ 623.673674][T11190] ? convert___skb_to_skb+0x4f0/0x4f0 [ 623.679253][T11190] ? eth_get_headlen+0x1f0/0x1f0 [ 623.685289][T11190] ? convert___skb_to_skb+0x41/0x4f0 [ 623.691213][T11190] bpf_prog_test_run_skb+0x9ec/0x1150 [ 623.697096][T11190] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 623.703773][T11190] bpf_prog_test_run+0x3d5/0x620 [ 623.710782][T11190] ? bpf_prog_query+0x230/0x230 [ 623.715925][T11190] ? selinux_bpf+0xce/0xf0 [ 623.720408][T11190] ? security_bpf+0x82/0xa0 [ 623.725718][T11190] __sys_bpf+0x52c/0x730 [ 623.730759][T11190] ? bpf_link_show_fdinfo+0x310/0x310 [ 623.737038][T11190] ? debug_smp_processor_id+0x17/0x20 [ 623.742949][T11190] __x64_sys_bpf+0x7c/0x90 [ 623.747733][T11190] x64_sys_call+0x4b9/0x9a0 [ 623.752531][T11190] do_syscall_64+0x4c/0xa0 [ 623.758609][T11190] ? clear_bhb_loop+0x50/0xa0 [ 623.763485][T11190] ? clear_bhb_loop+0x50/0xa0 [ 623.768366][T11190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 623.775306][T11190] RIP: 0033:0x7f053e584929 [ 623.780010][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.801732][T11190] RSP: 002b:00007f053cbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 623.810618][T11190] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 623.819339][T11190] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 623.828462][T11190] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 623.836830][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.845407][T11190] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 623.853576][T11190] [ 627.128108][T11279] device sit0 left promiscuous mode [ 627.444322][T11269] device sit0 entered promiscuous mode [ 637.459827][T11481] syz.3.3979[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.459901][T11481] syz.3.3979[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.523651][T11485] FAULT_INJECTION: forcing a failure. [ 637.523651][T11485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.550022][T11485] CPU: 1 PID: 11485 Comm: syz.4.3981 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 637.560731][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.571221][T11485] Call Trace: [ 637.575276][T11485] [ 637.578402][T11485] __dump_stack+0x21/0x30 [ 637.582730][T11485] dump_stack_lvl+0xee/0x150 [ 637.587500][T11485] ? show_regs_print_info+0x20/0x20 [ 637.592934][T11485] ? bpf_cgroup_storage_free+0x8f/0xb0 [ 637.598825][T11485] dump_stack+0x15/0x20 [ 637.603075][T11485] should_fail+0x3c1/0x510 [ 637.607913][T11485] should_fail_usercopy+0x1a/0x20 [ 637.613483][T11485] _copy_to_user+0x20/0x90 [ 637.618270][T11485] bpf_test_finish+0x1ae/0x3b0 [ 637.623381][T11485] ? convert_skb_to___skb+0x360/0x360 [ 637.629497][T11485] ? convert_skb_to___skb+0x203/0x360 [ 637.635683][T11485] bpf_prog_test_run_skb+0xbba/0x1150 [ 637.641671][T11485] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 637.648225][T11485] bpf_prog_test_run+0x3d5/0x620 [ 637.653518][T11485] ? bpf_prog_query+0x230/0x230 [ 637.658810][T11485] ? selinux_bpf+0xce/0xf0 [ 637.663369][T11485] ? security_bpf+0x82/0xa0 [ 637.668242][T11485] __sys_bpf+0x52c/0x730 [ 637.673186][T11485] ? bpf_link_show_fdinfo+0x310/0x310 [ 637.679202][T11485] ? debug_smp_processor_id+0x17/0x20 [ 637.684867][T11485] __x64_sys_bpf+0x7c/0x90 [ 637.689633][T11485] x64_sys_call+0x4b9/0x9a0 [ 637.694670][T11485] do_syscall_64+0x4c/0xa0 [ 637.699172][T11485] ? clear_bhb_loop+0x50/0xa0 [ 637.704202][T11485] ? clear_bhb_loop+0x50/0xa0 [ 637.709089][T11485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 637.715154][T11485] RIP: 0033:0x7f35450e1929 [ 637.720280][T11485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.741949][T11485] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.750783][T11485] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 637.759489][T11485] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 637.767825][T11485] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 637.775878][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.785120][T11485] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 637.793915][T11485] [ 642.615933][T11603] syz.1.4017[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.616015][T11603] syz.1.4017[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.456860][T11625] device veth0_vlan left promiscuous mode [ 643.475822][T11625] device veth0_vlan entered promiscuous mode [ 643.585243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 643.602779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 643.615670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 645.740617][T11669] device veth0_vlan left promiscuous mode [ 645.882648][T11669] device veth0_vlan entered promiscuous mode [ 645.889822][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 645.923219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.027204][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 652.362632][T11864] FAULT_INJECTION: forcing a failure. [ 652.362632][T11864] name failslab, interval 1, probability 0, space 0, times 0 [ 652.376633][T11864] CPU: 0 PID: 11864 Comm: syz.2.4113 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 652.386828][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.396903][T11864] Call Trace: [ 652.400371][T11864] [ 652.404020][T11864] __dump_stack+0x21/0x30 [ 652.408776][T11864] dump_stack_lvl+0xee/0x150 [ 652.413814][T11864] ? show_regs_print_info+0x20/0x20 [ 652.419065][T11864] dump_stack+0x15/0x20 [ 652.423228][T11864] should_fail+0x3c1/0x510 [ 652.428323][T11864] ? skb_ensure_writable+0x2e7/0x460 [ 652.434431][T11864] __should_failslab+0xa4/0xe0 [ 652.439227][T11864] should_failslab+0x9/0x20 [ 652.443752][T11864] slab_pre_alloc_hook+0x3b/0xe0 [ 652.448708][T11864] ? skb_ensure_writable+0x2e7/0x460 [ 652.453999][T11864] ? skb_ensure_writable+0x2e7/0x460 [ 652.459375][T11864] __kmalloc_track_caller+0x6c/0x2c0 [ 652.464755][T11864] ? skb_ensure_writable+0x2e7/0x460 [ 652.470040][T11864] ? skb_ensure_writable+0x2e7/0x460 [ 652.475412][T11864] pskb_expand_head+0x11b/0x11d0 [ 652.480353][T11864] ? __copy_skb_header+0x437/0x600 [ 652.485832][T11864] ? __kasan_check_write+0x14/0x20 [ 652.490968][T11864] ? __skb_clone+0x47a/0x790 [ 652.495649][T11864] skb_ensure_writable+0x2e7/0x460 [ 652.500767][T11864] bpf_clone_redirect+0x10b/0x380 [ 652.505793][T11864] ? stack_trace_save+0x98/0xe0 [ 652.510746][T11864] bpf_prog_208b094576c80b22+0x56/0x8e8 [ 652.516381][T11864] ? __kasan_slab_alloc+0xcf/0xf0 [ 652.521496][T11864] ? __kasan_slab_alloc+0xbd/0xf0 [ 652.526514][T11864] ? slab_post_alloc_hook+0x4f/0x2b0 [ 652.531801][T11864] ? kmem_cache_alloc+0xf7/0x260 [ 652.536913][T11864] ? __build_skb+0x2d/0x310 [ 652.541555][T11864] ? build_skb+0x24/0x200 [ 652.545889][T11864] ? bpf_prog_test_run_skb+0x279/0x1150 [ 652.551698][T11864] ? bpf_prog_test_run+0x3d5/0x620 [ 652.556817][T11864] ? __sys_bpf+0x52c/0x730 [ 652.561246][T11864] ? __x64_sys_bpf+0x7c/0x90 [ 652.565841][T11864] ? x64_sys_call+0x4b9/0x9a0 [ 652.570539][T11864] ? do_syscall_64+0x4c/0xa0 [ 652.575134][T11864] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 652.581298][T11864] ? ktime_get+0x12f/0x160 [ 652.585712][T11864] bpf_test_run+0x33d/0x8d0 [ 652.590216][T11864] ? convert___skb_to_skb+0x4f0/0x4f0 [ 652.595595][T11864] ? eth_get_headlen+0x1f0/0x1f0 [ 652.600649][T11864] ? convert___skb_to_skb+0x41/0x4f0 [ 652.606032][T11864] bpf_prog_test_run_skb+0x9ec/0x1150 [ 652.611423][T11864] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 652.617331][T11864] bpf_prog_test_run+0x3d5/0x620 [ 652.622292][T11864] ? bpf_prog_query+0x230/0x230 [ 652.627139][T11864] ? selinux_bpf+0xce/0xf0 [ 652.631704][T11864] ? security_bpf+0x82/0xa0 [ 652.636225][T11864] __sys_bpf+0x52c/0x730 [ 652.640564][T11864] ? bpf_link_show_fdinfo+0x310/0x310 [ 652.645964][T11864] ? debug_smp_processor_id+0x17/0x20 [ 652.651343][T11864] __x64_sys_bpf+0x7c/0x90 [ 652.655762][T11864] x64_sys_call+0x4b9/0x9a0 [ 652.660347][T11864] do_syscall_64+0x4c/0xa0 [ 652.664766][T11864] ? clear_bhb_loop+0x50/0xa0 [ 652.669449][T11864] ? clear_bhb_loop+0x50/0xa0 [ 652.674141][T11864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 652.680032][T11864] RIP: 0033:0x7f319ee9a929 [ 652.684448][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.704053][T11864] RSP: 002b:00007f319d503038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.712487][T11864] RAX: ffffffffffffffda RBX: 00007f319f0c1fa0 RCX: 00007f319ee9a929 [ 652.720503][T11864] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 652.728689][T11864] RBP: 00007f319d503090 R08: 0000000000000000 R09: 0000000000000000 [ 652.737453][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.745783][T11864] R13: 0000000000000000 R14: 00007f319f0c1fa0 R15: 00007ffe3ce24458 [ 652.754062][T11864] [ 663.884880][T12149] FAULT_INJECTION: forcing a failure. [ 663.884880][T12149] name failslab, interval 1, probability 0, space 0, times 0 [ 663.902227][T12149] CPU: 1 PID: 12149 Comm: syz.3.4202 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 663.912315][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.922367][T12149] Call Trace: [ 663.925704][T12149] [ 663.928630][T12149] __dump_stack+0x21/0x30 [ 663.932954][T12149] dump_stack_lvl+0xee/0x150 [ 663.937538][T12149] ? show_regs_print_info+0x20/0x20 [ 663.942731][T12149] dump_stack+0x15/0x20 [ 663.946875][T12149] should_fail+0x3c1/0x510 [ 663.951282][T12149] __should_failslab+0xa4/0xe0 [ 663.956036][T12149] should_failslab+0x9/0x20 [ 663.960535][T12149] slab_pre_alloc_hook+0x3b/0xe0 [ 663.965470][T12149] __kmalloc+0x6d/0x2c0 [ 663.969619][T12149] ? kvmalloc_node+0x242/0x330 [ 663.974379][T12149] kvmalloc_node+0x242/0x330 [ 663.978966][T12149] ? vm_mmap+0xb0/0xb0 [ 663.983025][T12149] ? __kasan_check_write+0x14/0x20 [ 663.988131][T12149] pfifo_fast_init+0x3af/0x7a0 [ 663.992899][T12149] qdisc_create_dflt+0x142/0x3a0 [ 663.997829][T12149] dev_activate+0x2a0/0x1060 [ 664.002414][T12149] __dev_open+0x3aa/0x4c0 [ 664.006742][T12149] ? dev_open+0x230/0x230 [ 664.011160][T12149] ? _raw_spin_unlock_bh+0x51/0x60 [ 664.016262][T12149] ? dev_set_rx_mode+0x212/0x2c0 [ 664.021216][T12149] ? __kasan_check_read+0x11/0x20 [ 664.026237][T12149] __dev_change_flags+0x20a/0x6a0 [ 664.031263][T12149] ? dev_get_flags+0x1e0/0x1e0 [ 664.036024][T12149] ? __request_module+0x3dc/0x8a0 [ 664.041048][T12149] dev_change_flags+0x88/0x1a0 [ 664.045811][T12149] dev_ifsioc+0x147/0xe70 [ 664.050140][T12149] ? dev_ioctl+0xd10/0xd10 [ 664.054546][T12149] ? __mutex_lock_slowpath+0xe/0x10 [ 664.059739][T12149] ? mutex_lock+0x100/0x1a0 [ 664.064235][T12149] ? wait_for_completion_killable_timeout+0x10/0x10 [ 664.070833][T12149] ? security_capable+0x87/0xb0 [ 664.075677][T12149] dev_ioctl+0x560/0xd10 [ 664.079913][T12149] sock_do_ioctl+0x22e/0x300 [ 664.084499][T12149] ? sock_show_fdinfo+0xa0/0xa0 [ 664.089345][T12149] ? selinux_file_ioctl+0x377/0x480 [ 664.094541][T12149] sock_ioctl+0x4bc/0x6b0 [ 664.098869][T12149] ? sock_poll+0x3d0/0x3d0 [ 664.103278][T12149] ? __fget_files+0x2c4/0x320 [ 664.107951][T12149] ? security_file_ioctl+0x84/0xa0 [ 664.113057][T12149] ? sock_poll+0x3d0/0x3d0 [ 664.117467][T12149] __se_sys_ioctl+0x121/0x1a0 [ 664.122229][T12149] __x64_sys_ioctl+0x7b/0x90 [ 664.126906][T12149] x64_sys_call+0x2f/0x9a0 [ 664.131322][T12149] do_syscall_64+0x4c/0xa0 [ 664.136009][T12149] ? clear_bhb_loop+0x50/0xa0 [ 664.140685][T12149] ? clear_bhb_loop+0x50/0xa0 [ 664.145358][T12149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 664.151512][T12149] RIP: 0033:0x7f053e584929 [ 664.156059][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.175752][T12149] RSP: 002b:00007f053cbcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.184269][T12149] RAX: ffffffffffffffda RBX: 00007f053e7ac080 RCX: 00007f053e584929 [ 664.192953][T12149] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000009 [ 664.200923][T12149] RBP: 00007f053cbcc090 R08: 0000000000000000 R09: 0000000000000000 [ 664.209426][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.218519][T12149] R13: 0000000000000000 R14: 00007f053e7ac080 R15: 00007fffae597838 [ 664.226506][T12149] [ 664.232448][T12149] device pim6reg1 entered promiscuous mode [ 664.906609][T12180] device pim6reg1 entered promiscuous mode [ 686.964971][T12865] bond_slave_1: mtu less than device minimum [ 689.802594][T12956] FAULT_INJECTION: forcing a failure. [ 689.802594][T12956] name failslab, interval 1, probability 0, space 0, times 0 [ 689.817418][T12956] CPU: 1 PID: 12956 Comm: syz.0.4491 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 689.830218][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.844117][T12956] Call Trace: [ 689.847413][T12956] [ 689.850355][T12956] __dump_stack+0x21/0x30 [ 689.854761][T12956] dump_stack_lvl+0xee/0x150 [ 689.859335][T12956] ? show_regs_print_info+0x20/0x20 [ 689.865039][T12956] dump_stack+0x15/0x20 [ 689.869182][T12956] should_fail+0x3c1/0x510 [ 689.873594][T12956] ? tipc_buf_acquire+0x2b/0xe0 [ 689.878960][T12956] __should_failslab+0xa4/0xe0 [ 689.883841][T12956] should_failslab+0x9/0x20 [ 689.888458][T12956] slab_pre_alloc_hook+0x3b/0xe0 [ 689.893607][T12956] ? tipc_buf_acquire+0x2b/0xe0 [ 689.898725][T12956] ? tipc_buf_acquire+0x2b/0xe0 [ 689.903566][T12956] __kmalloc_track_caller+0x6c/0x2c0 [ 689.908842][T12956] ? tipc_buf_acquire+0x2b/0xe0 [ 689.913784][T12956] ? tipc_buf_acquire+0x2b/0xe0 [ 689.918758][T12956] __alloc_skb+0x21a/0x740 [ 689.923188][T12956] tipc_buf_acquire+0x2b/0xe0 [ 689.927855][T12956] tipc_msg_build+0x544/0xfb0 [ 689.932523][T12956] __tipc_sendmsg+0x19dd/0x2680 [ 689.937357][T12956] ? _raw_spin_lock+0xe0/0xe0 [ 689.942120][T12956] ? local_bh_enable+0x30/0x30 [ 689.946899][T12956] ? wait_woken+0x170/0x170 [ 689.951397][T12956] ? avc_has_perm+0x158/0x240 [ 689.956067][T12956] ? __kasan_check_write+0x14/0x20 [ 689.961169][T12956] ? _raw_spin_lock_bh+0x8e/0xe0 [ 689.966094][T12956] ? _raw_spin_lock_irq+0xe0/0xe0 [ 689.971123][T12956] ? unwind_get_return_address+0x4d/0x90 [ 689.976774][T12956] ? stack_trace_save+0xe0/0xe0 [ 689.981617][T12956] ? __local_bh_enable_ip+0x58/0x80 [ 689.987309][T12956] ? lock_sock_nested+0x1f1/0x290 [ 689.993668][T12956] ? sock_init_data+0xc0/0xc0 [ 689.998351][T12956] ? stack_trace_save+0x98/0xe0 [ 690.003473][T12956] tipc_sendmsg+0x55/0x70 [ 690.008396][T12956] ? tipc_recvmsg+0x13a0/0x13a0 [ 690.013534][T12956] ____sys_sendmsg+0x5a2/0x8c0 [ 690.018390][T12956] ? __sys_sendmsg_sock+0x40/0x40 [ 690.023401][T12956] ? import_iovec+0x7c/0xb0 [ 690.027906][T12956] ___sys_sendmsg+0x1f0/0x260 [ 690.032656][T12956] ? __sys_sendmsg+0x250/0x250 [ 690.037966][T12956] ? __fdget+0x1a1/0x230 [ 690.042562][T12956] __x64_sys_sendmsg+0x1e2/0x2a0 [ 690.047708][T12956] ? ___sys_sendmsg+0x260/0x260 [ 690.052663][T12956] ? ksys_write+0x1eb/0x240 [ 690.057537][T12956] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 690.063905][T12956] x64_sys_call+0x4b/0x9a0 [ 690.068602][T12956] do_syscall_64+0x4c/0xa0 [ 690.073019][T12956] ? clear_bhb_loop+0x50/0xa0 [ 690.077684][T12956] ? clear_bhb_loop+0x50/0xa0 [ 690.082884][T12956] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.088760][T12956] RIP: 0033:0x7fe3cd53c929 [ 690.093172][T12956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.112977][T12956] RSP: 002b:00007fe3cbba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.121472][T12956] RAX: ffffffffffffffda RBX: 00007fe3cd763fa0 RCX: 00007fe3cd53c929 [ 690.129441][T12956] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000007 [ 690.137929][T12956] RBP: 00007fe3cbba5090 R08: 0000000000000000 R09: 0000000000000000 [ 690.145899][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.154484][T12956] R13: 0000000000000000 R14: 00007fe3cd763fa0 R15: 00007fff700ef668 [ 690.162572][T12956] [ 700.193224][T13309] device pim6reg1 entered promiscuous mode [ 706.069898][ T30] audit: type=1400 audit(1751087987.623:156): avc: denied { create } for pid=13486 comm="syz.1.4673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 706.498084][T13493] device syzkaller0 entered promiscuous mode [ 707.471858][T13546] bond_slave_1: mtu less than device minimum [ 707.688323][T13555] device syzkaller0 entered promiscuous mode [ 708.739337][T13595] device sit0 entered promiscuous mode [ 709.453693][T13615] FAULT_INJECTION: forcing a failure. [ 709.453693][T13615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 709.467557][T13615] CPU: 1 PID: 13615 Comm: syz.1.4717 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 709.477547][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 709.487881][T13615] Call Trace: [ 709.491166][T13615] [ 709.494092][T13615] __dump_stack+0x21/0x30 [ 709.498433][T13615] dump_stack_lvl+0xee/0x150 [ 709.503037][T13615] ? show_regs_print_info+0x20/0x20 [ 709.508242][T13615] dump_stack+0x15/0x20 [ 709.512400][T13615] should_fail+0x3c1/0x510 [ 709.516824][T13615] should_fail_alloc_page+0x55/0x80 [ 709.522024][T13615] prepare_alloc_pages+0x156/0x600 [ 709.527144][T13615] ? __alloc_pages_bulk+0xab0/0xab0 [ 709.532348][T13615] ? irqentry_exit+0x37/0x40 [ 709.536939][T13615] ? exc_page_fault+0x5e/0xb0 [ 709.541617][T13615] __alloc_pages+0x10a/0x440 [ 709.546383][T13615] ? prep_new_page+0x110/0x110 [ 709.551176][T13615] ? copy_user_enhanced_fast_string+0xe/0x40 [ 709.557339][T13615] pipe_write+0x570/0x18d0 [ 709.561757][T13615] ? pipe_write+0x111/0x18d0 [ 709.566349][T13615] ? pipe_read+0xfe0/0xfe0 [ 709.570766][T13615] ? selinux_file_permission+0x3f4/0x510 [ 709.576408][T13615] ? memset+0x35/0x40 [ 709.580411][T13615] ? iov_iter_init+0xbc/0x180 [ 709.585090][T13615] vfs_write+0x802/0xf70 [ 709.589332][T13615] ? file_end_write+0x1b0/0x1b0 [ 709.594177][T13615] ? __fget_files+0x2c4/0x320 [ 709.598878][T13615] ? __fdget_pos+0x1f7/0x380 [ 709.603622][T13615] ? ksys_write+0x71/0x240 [ 709.608054][T13615] ksys_write+0x140/0x240 [ 709.612388][T13615] ? __ia32_sys_read+0x90/0x90 [ 709.617171][T13615] ? debug_smp_processor_id+0x17/0x20 [ 709.622571][T13615] __x64_sys_write+0x7b/0x90 [ 709.627165][T13615] x64_sys_call+0x8ef/0x9a0 [ 709.631687][T13615] do_syscall_64+0x4c/0xa0 [ 709.636103][T13615] ? clear_bhb_loop+0x50/0xa0 [ 709.640820][T13615] ? clear_bhb_loop+0x50/0xa0 [ 709.645607][T13615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 709.652430][T13615] RIP: 0033:0x7f80962a3929 [ 709.657402][T13615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.679119][T13615] RSP: 002b:00007f809490c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 709.687539][T13615] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a3929 [ 709.696222][T13615] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 709.704192][T13615] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 709.712159][T13615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.720129][T13615] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 709.728114][T13615] [ 710.938250][T13660] device sit0 left promiscuous mode [ 711.083342][T13660] device sit0 entered promiscuous mode [ 734.327292][T14247] FAULT_INJECTION: forcing a failure. [ 734.327292][T14247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.341296][T14247] CPU: 0 PID: 14247 Comm: syz.1.4928 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 734.351299][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.361392][T14247] Call Trace: [ 734.364676][T14247] [ 734.367610][T14247] __dump_stack+0x21/0x30 [ 734.371947][T14247] dump_stack_lvl+0xee/0x150 [ 734.376537][T14247] ? show_regs_print_info+0x20/0x20 [ 734.381739][T14247] ? format_decode+0x1bb/0x1520 [ 734.386610][T14247] dump_stack+0x15/0x20 [ 734.390778][T14247] should_fail+0x3c1/0x510 [ 734.395205][T14247] should_fail_usercopy+0x1a/0x20 [ 734.400323][T14247] _copy_from_user+0x20/0xd0 [ 734.404926][T14247] kstrtouint_from_user+0xbe/0x200 [ 734.410041][T14247] ? netdev_run_todo+0x92a/0x990 [ 734.414998][T14247] ? kstrtol_from_user+0x260/0x260 [ 734.420114][T14247] ? 0xffffffff81000000 [ 734.424266][T14247] ? _copy_to_user+0x78/0x90 [ 734.428878][T14247] ? simple_read_from_buffer+0x10f/0x160 [ 734.434520][T14247] proc_fail_nth_write+0x85/0x1f0 [ 734.439821][T14247] ? proc_fail_nth_read+0x210/0x210 [ 734.445024][T14247] ? security_file_permission+0x79/0xa0 [ 734.450578][T14247] ? security_file_permission+0x83/0xa0 [ 734.456126][T14247] ? proc_fail_nth_read+0x210/0x210 [ 734.461443][T14247] vfs_write+0x3ee/0xf70 [ 734.465786][T14247] ? file_end_write+0x1b0/0x1b0 [ 734.470652][T14247] ? __kasan_check_write+0x14/0x20 [ 734.475779][T14247] ? mutex_lock+0x95/0x1a0 [ 734.480204][T14247] ? wait_for_completion_killable_timeout+0x10/0x10 [ 734.487198][T14247] ? __fget_files+0x2c4/0x320 [ 734.491897][T14247] ? __fdget_pos+0x2d2/0x380 [ 734.496528][T14247] ? ksys_write+0x71/0x240 [ 734.500948][T14247] ksys_write+0x140/0x240 [ 734.505283][T14247] ? __ia32_sys_read+0x90/0x90 [ 734.510153][T14247] ? debug_smp_processor_id+0x17/0x20 [ 734.515532][T14247] __x64_sys_write+0x7b/0x90 [ 734.520134][T14247] x64_sys_call+0x8ef/0x9a0 [ 734.524646][T14247] do_syscall_64+0x4c/0xa0 [ 734.529157][T14247] ? clear_bhb_loop+0x50/0xa0 [ 734.533835][T14247] ? clear_bhb_loop+0x50/0xa0 [ 734.538514][T14247] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 734.544413][T14247] RIP: 0033:0x7f80962a23df [ 734.548846][T14247] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 734.568544][T14247] RSP: 002b:00007f80948eb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 734.576964][T14247] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80962a23df [ 734.584938][T14247] RDX: 0000000000000001 RSI: 00007f80948eb0a0 RDI: 000000000000000a [ 734.592912][T14247] RBP: 00007f80948eb090 R08: 0000000000000000 R09: 0000000000000000 [ 734.601060][T14247] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 734.609106][T14247] R13: 0000000000000000 R14: 00007f80964cb080 R15: 00007fffbf422558 [ 734.617095][T14247] [ 735.308816][T14273] device sit0 entered promiscuous mode [ 735.786540][T14297] FAULT_INJECTION: forcing a failure. [ 735.786540][T14297] name failslab, interval 1, probability 0, space 0, times 0 [ 735.799306][T14297] CPU: 1 PID: 14297 Comm: syz.3.4946 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 735.809451][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.819677][T14297] Call Trace: [ 735.822957][T14297] [ 735.825888][T14297] __dump_stack+0x21/0x30 [ 735.830211][T14297] dump_stack_lvl+0xee/0x150 [ 735.834796][T14297] ? show_regs_print_info+0x20/0x20 [ 735.839988][T14297] ? fib6_select_path+0x107/0x620 [ 735.845009][T14297] dump_stack+0x15/0x20 [ 735.849157][T14297] should_fail+0x3c1/0x510 [ 735.853560][T14297] __should_failslab+0xa4/0xe0 [ 735.858585][T14297] should_failslab+0x9/0x20 [ 735.863094][T14297] slab_pre_alloc_hook+0x3b/0xe0 [ 735.868031][T14297] ? __alloc_skb+0xe0/0x740 [ 735.872530][T14297] kmem_cache_alloc+0x44/0x260 [ 735.877283][T14297] ? icmpv6_xrlim_allow+0x350/0x490 [ 735.882466][T14297] __alloc_skb+0xe0/0x740 [ 735.886954][T14297] alloc_skb_with_frags+0xa8/0x620 [ 735.892065][T14297] ? fib6_lookup+0x2a0/0x2a0 [ 735.896646][T14297] sock_alloc_send_pskb+0x853/0x980 [ 735.901838][T14297] ? sock_kzfree_s+0x60/0x60 [ 735.906411][T14297] ? __local_bh_enable_ip+0x58/0x80 [ 735.911592][T14297] ? local_bh_enable+0x1f/0x30 [ 735.916342][T14297] ? ip6_dst_lookup_tail+0xd01/0x1370 [ 735.921695][T14297] sock_alloc_send_skb+0x32/0x40 [ 735.926622][T14297] __ip6_append_data+0x252e/0x37e0 [ 735.931722][T14297] ? icmpv6_route_lookup+0x457/0x4e0 [ 735.936990][T14297] ? ip6_setup_cork+0x1290/0x1290 [ 735.942004][T14297] ? __kasan_check_read+0x11/0x20 [ 735.947010][T14297] ? ip6_setup_cork+0xd10/0x1290 [ 735.951929][T14297] ip6_append_data+0x1d0/0x330 [ 735.956934][T14297] ? icmpv6_route_lookup+0x4e0/0x4e0 [ 735.962202][T14297] ? icmpv6_route_lookup+0x4e0/0x4e0 [ 735.967467][T14297] icmp6_send+0xeb8/0x14c0 [ 735.971870][T14297] ? icmpv6_push_pending_frames+0x440/0x440 [ 735.977744][T14297] ? numa_migrate_prep+0xd0/0xd0 [ 735.982684][T14297] ? __skb_flow_dissect+0x520c/0x5930 [ 735.988037][T14297] icmpv6_param_prob+0x2f/0x40 [ 735.992783][T14297] ip6_parse_tlv+0x1a4c/0x1ba0 [ 735.997533][T14297] ipv6_parse_hopopts+0x2a3/0x580 [ 736.002542][T14297] ip6_rcv_core+0xca7/0x1390 [ 736.007118][T14297] ipv6_rcv+0xca/0x210 [ 736.011169][T14297] ? irqentry_exit+0x37/0x40 [ 736.015741][T14297] ? exc_page_fault+0x5e/0xb0 [ 736.020405][T14297] ? ip6_rcv_finish+0x360/0x360 [ 736.025242][T14297] ? asm_exc_page_fault+0x27/0x30 [ 736.030254][T14297] ? _copy_from_iter+0x1d1/0x1050 [ 736.035261][T14297] ? ip6_rcv_finish+0x360/0x360 [ 736.040094][T14297] __netif_receive_skb+0xc8/0x280 [ 736.045101][T14297] ? _copy_from_iter+0x4ae/0x1050 [ 736.050106][T14297] ? __kasan_check_write+0x14/0x20 [ 736.055199][T14297] netif_receive_skb+0x98/0x3d0 [ 736.060039][T14297] ? netif_receive_skb_core+0x100/0x100 [ 736.065565][T14297] ? __kernel_text_address+0xa0/0x100 [ 736.070923][T14297] ? virtio_net_hdr_to_skb+0x9df/0x11c0 [ 736.076451][T14297] tun_rx_batched+0x5e8/0x710 [ 736.081111][T14297] ? local_bh_enable+0x30/0x30 [ 736.085860][T14297] tun_get_user+0x279c/0x33c0 [ 736.090537][T14297] ? __kasan_init_slab_obj+0x10/0x40 [ 736.095806][T14297] ? kmem_cache_free+0x100/0x320 [ 736.100732][T14297] ? __x64_sys_openat+0x136/0x160 [ 736.105746][T14297] ? x64_sys_call+0x219/0x9a0 [ 736.110409][T14297] ? tun_do_read+0x1c40/0x1c40 [ 736.115168][T14297] ? kstrtouint_from_user+0x1a0/0x200 [ 736.120524][T14297] ? kstrtol_from_user+0x260/0x260 [ 736.125618][T14297] ? avc_policy_seqno+0x1b/0x70 [ 736.130453][T14297] ? selinux_file_permission+0x2aa/0x510 [ 736.136069][T14297] tun_chr_write_iter+0x1eb/0x2e0 [ 736.141093][T14297] vfs_write+0x802/0xf70 [ 736.145323][T14297] ? file_end_write+0x1b0/0x1b0 [ 736.150156][T14297] ? __fget_files+0x2c4/0x320 [ 736.154820][T14297] ? __fdget_pos+0x1f7/0x380 [ 736.159392][T14297] ? ksys_write+0x71/0x240 [ 736.163819][T14297] ksys_write+0x140/0x240 [ 736.168141][T14297] ? __ia32_sys_read+0x90/0x90 [ 736.172885][T14297] ? debug_smp_processor_id+0x17/0x20 [ 736.178243][T14297] __x64_sys_write+0x7b/0x90 [ 736.182815][T14297] x64_sys_call+0x8ef/0x9a0 [ 736.187302][T14297] do_syscall_64+0x4c/0xa0 [ 736.191699][T14297] ? clear_bhb_loop+0x50/0xa0 [ 736.196357][T14297] ? clear_bhb_loop+0x50/0xa0 [ 736.201014][T14297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 736.206889][T14297] RIP: 0033:0x7f053e584929 [ 736.211299][T14297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.230887][T14297] RSP: 002b:00007f053cbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.239287][T14297] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 736.247240][T14297] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 736.255193][T14297] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 736.263240][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.271292][T14297] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 736.279255][T14297] [ 737.571244][T14331] FAULT_INJECTION: forcing a failure. [ 737.571244][T14331] name failslab, interval 1, probability 0, space 0, times 0 [ 737.597979][T14331] CPU: 0 PID: 14331 Comm: syz.0.4957 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 737.608079][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.618862][T14331] Call Trace: [ 737.622134][T14331] [ 737.625053][T14331] __dump_stack+0x21/0x30 [ 737.629369][T14331] dump_stack_lvl+0xee/0x150 [ 737.633938][T14331] ? show_regs_print_info+0x20/0x20 [ 737.639119][T14331] ? kmem_cache_free+0x2f8/0x320 [ 737.644051][T14331] dump_stack+0x15/0x20 [ 737.648185][T14331] should_fail+0x3c1/0x510 [ 737.652581][T14331] __should_failslab+0xa4/0xe0 [ 737.657327][T14331] should_failslab+0x9/0x20 [ 737.661813][T14331] slab_pre_alloc_hook+0x3b/0xe0 [ 737.666737][T14331] __kmalloc+0x6d/0x2c0 [ 737.670881][T14331] ? sock_kmalloc+0x99/0xf0 [ 737.675370][T14331] ? memcpy+0x56/0x70 [ 737.679334][T14331] sock_kmalloc+0x99/0xf0 [ 737.683647][T14331] ____sys_sendmsg+0x1ac/0x8c0 [ 737.688391][T14331] ? __sys_sendmsg_sock+0x40/0x40 [ 737.693395][T14331] ? import_iovec+0x7c/0xb0 [ 737.697883][T14331] ___sys_sendmsg+0x1f0/0x260 [ 737.702539][T14331] ? __sys_sendmsg+0x250/0x250 [ 737.707290][T14331] ? __fdget+0x1a1/0x230 [ 737.711522][T14331] __x64_sys_sendmsg+0x1e2/0x2a0 [ 737.716889][T14331] ? ___sys_sendmsg+0x260/0x260 [ 737.721739][T14331] ? ksys_write+0x1eb/0x240 [ 737.726226][T14331] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 737.732278][T14331] x64_sys_call+0x4b/0x9a0 [ 737.736681][T14331] do_syscall_64+0x4c/0xa0 [ 737.741077][T14331] ? clear_bhb_loop+0x50/0xa0 [ 737.745734][T14331] ? clear_bhb_loop+0x50/0xa0 [ 737.750394][T14331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 737.756266][T14331] RIP: 0033:0x7fe3cd53c929 [ 737.760665][T14331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.780254][T14331] RSP: 002b:00007fe3cbba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.788652][T14331] RAX: ffffffffffffffda RBX: 00007fe3cd763fa0 RCX: 00007fe3cd53c929 [ 737.796607][T14331] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000006 [ 737.804561][T14331] RBP: 00007fe3cbba5090 R08: 0000000000000000 R09: 0000000000000000 [ 737.812526][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.820488][T14331] R13: 0000000000000000 R14: 00007fe3cd763fa0 R15: 00007fff700ef668 [ 737.828469][T14331] [ 740.244405][T14402] FAULT_INJECTION: forcing a failure. [ 740.244405][T14402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.354479][T14402] CPU: 0 PID: 14402 Comm: syz.4.4981 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 740.365892][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.376309][T14402] Call Trace: [ 740.379595][T14402] [ 740.382527][T14402] __dump_stack+0x21/0x30 [ 740.389379][T14402] dump_stack_lvl+0xee/0x150 [ 740.397019][T14402] ? show_regs_print_info+0x20/0x20 [ 740.402240][T14402] dump_stack+0x15/0x20 [ 740.406489][T14402] should_fail+0x3c1/0x510 [ 740.410909][T14402] should_fail_usercopy+0x1a/0x20 [ 740.415927][T14402] _copy_from_user+0x20/0xd0 [ 740.420508][T14402] ____sys_sendmsg+0x305/0x8c0 [ 740.425273][T14402] ? __sys_sendmsg_sock+0x40/0x40 [ 740.430279][T14402] ? kstrtouint_from_user+0x1a0/0x200 [ 740.435646][T14402] ? import_iovec+0x7c/0xb0 [ 740.440130][T14402] ___sys_sendmsg+0x1f0/0x260 [ 740.444790][T14402] ? __sys_sendmsg+0x250/0x250 [ 740.449542][T14402] ? __fdget+0x1a1/0x230 [ 740.453768][T14402] __x64_sys_sendmsg+0x1e2/0x2a0 [ 740.458688][T14402] ? ___sys_sendmsg+0x260/0x260 [ 740.463533][T14402] ? ksys_write+0x1eb/0x240 [ 740.468018][T14402] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 740.474073][T14402] x64_sys_call+0x4b/0x9a0 [ 740.478476][T14402] do_syscall_64+0x4c/0xa0 [ 740.482883][T14402] ? clear_bhb_loop+0x50/0xa0 [ 740.487566][T14402] ? clear_bhb_loop+0x50/0xa0 [ 740.492252][T14402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 740.498134][T14402] RIP: 0033:0x7f35450e1929 [ 740.502532][T14402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.522292][T14402] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.530784][T14402] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 740.538742][T14402] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 740.546693][T14402] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 740.554649][T14402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.562600][T14402] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 740.570561][T14402] [ 744.520651][T14486] FAULT_INJECTION: forcing a failure. [ 744.520651][T14486] name failslab, interval 1, probability 0, space 0, times 0 [ 744.563529][T14486] CPU: 0 PID: 14486 Comm: syz.4.5008 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 744.573551][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.583610][T14486] Call Trace: [ 744.586881][T14486] [ 744.589810][T14486] __dump_stack+0x21/0x30 [ 744.594151][T14486] dump_stack_lvl+0xee/0x150 [ 744.598751][T14486] ? show_regs_print_info+0x20/0x20 [ 744.604270][T14486] ? cpumask_next+0x7c/0xa0 [ 744.608782][T14486] ? pfifo_fast_reset+0xe02/0xef0 [ 744.613819][T14486] dump_stack+0x15/0x20 [ 744.617978][T14486] should_fail+0x3c1/0x510 [ 744.622402][T14486] __should_failslab+0xa4/0xe0 [ 744.627166][T14486] should_failslab+0x9/0x20 [ 744.631666][T14486] slab_pre_alloc_hook+0x3b/0xe0 [ 744.636598][T14486] ? __alloc_skb+0xe0/0x740 [ 744.641112][T14486] kmem_cache_alloc+0x44/0x260 [ 744.645877][T14486] ? br_netlink_fini+0x30/0x30 [ 744.650657][T14486] __alloc_skb+0xe0/0x740 [ 744.655007][T14486] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 744.660302][T14486] rtmsg_ifinfo+0x7a/0x130 [ 744.664716][T14486] dev_close_many+0x279/0x4d0 [ 744.669482][T14486] ? __dev_open+0x4c0/0x4c0 [ 744.673991][T14486] ? __kasan_check_read+0x11/0x20 [ 744.679026][T14486] unregister_netdevice_many+0x44c/0x1990 [ 744.684753][T14486] ? kmem_cache_free+0x100/0x320 [ 744.689700][T14486] ? ____kasan_slab_free+0x130/0x160 [ 744.695471][T14486] ? __kasan_check_write+0x14/0x20 [ 744.700585][T14486] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 744.706035][T14486] ? alloc_netdev_mqs+0xc90/0xc90 [ 744.711135][T14486] ? queue_delayed_work_on+0x101/0x150 [ 744.716584][T14486] ? __kasan_check_read+0x11/0x20 [ 744.721595][T14486] unregister_netdevice_queue+0x31c/0x360 [ 744.727318][T14486] ? __kasan_check_read+0x11/0x20 [ 744.732683][T14486] ? list_netdevice+0x4c0/0x4c0 [ 744.737951][T14486] ? linkwatch_fire_event+0x307/0x380 [ 744.743309][T14486] __tun_detach+0xca6/0x1450 [ 744.747892][T14486] tun_chr_close+0x92/0x140 [ 744.752725][T14486] ? tun_chr_open+0x540/0x540 [ 744.757385][T14486] __fput+0x20b/0x8b0 [ 744.761357][T14486] ____fput+0x15/0x20 [ 744.765324][T14486] task_work_run+0x127/0x190 [ 744.769903][T14486] exit_to_user_mode_loop+0xd0/0xe0 [ 744.775093][T14486] exit_to_user_mode_prepare+0x5a/0xa0 [ 744.780536][T14486] syscall_exit_to_user_mode+0x1a/0x30 [ 744.786239][T14486] do_syscall_64+0x58/0xa0 [ 744.790659][T14486] ? clear_bhb_loop+0x50/0xa0 [ 744.795321][T14486] ? clear_bhb_loop+0x50/0xa0 [ 744.799983][T14486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 744.805858][T14486] RIP: 0033:0x7f35450e1929 [ 744.810258][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.830453][T14486] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 744.838851][T14486] RAX: 0000000000000000 RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 744.846827][T14486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 744.854974][T14486] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 744.863020][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.870975][T14486] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 744.879111][T14486] [ 746.036406][T14527] FAULT_INJECTION: forcing a failure. [ 746.036406][T14527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.093779][T14527] CPU: 0 PID: 14527 Comm: syz.0.5019 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 746.104067][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.114154][T14527] Call Trace: [ 746.117431][T14527] [ 746.120361][T14527] __dump_stack+0x21/0x30 [ 746.124691][T14527] dump_stack_lvl+0xee/0x150 [ 746.129283][T14527] ? show_regs_print_info+0x20/0x20 [ 746.134486][T14527] dump_stack+0x15/0x20 [ 746.138642][T14527] should_fail+0x3c1/0x510 [ 746.143064][T14527] should_fail_usercopy+0x1a/0x20 [ 746.148095][T14527] _copy_to_user+0x20/0x90 [ 746.152636][T14527] simple_read_from_buffer+0xe9/0x160 [ 746.158025][T14527] proc_fail_nth_read+0x19a/0x210 [ 746.163065][T14527] ? proc_fault_inject_write+0x2f0/0x2f0 [ 746.168710][T14527] ? security_file_permission+0x83/0xa0 [ 746.174360][T14527] ? proc_fault_inject_write+0x2f0/0x2f0 [ 746.180181][T14527] vfs_read+0x282/0xbe0 [ 746.184503][T14527] ? kernel_read+0x1f0/0x1f0 [ 746.189252][T14527] ? __kasan_check_write+0x14/0x20 [ 746.194379][T14527] ? mutex_lock+0x95/0x1a0 [ 746.198987][T14527] ? wait_for_completion_killable_timeout+0x10/0x10 [ 746.205858][T14527] ? __fget_files+0x2c4/0x320 [ 746.210657][T14527] ? __fdget_pos+0x2d2/0x380 [ 746.215254][T14527] ? ksys_read+0x71/0x240 [ 746.219586][T14527] ksys_read+0x140/0x240 [ 746.223832][T14527] ? vfs_write+0xf70/0xf70 [ 746.228250][T14527] ? debug_smp_processor_id+0x17/0x20 [ 746.233626][T14527] __x64_sys_read+0x7b/0x90 [ 746.238134][T14527] x64_sys_call+0x96d/0x9a0 [ 746.242643][T14527] do_syscall_64+0x4c/0xa0 [ 746.247151][T14527] ? clear_bhb_loop+0x50/0xa0 [ 746.251923][T14527] ? clear_bhb_loop+0x50/0xa0 [ 746.256611][T14527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.262511][T14527] RIP: 0033:0x7fe3cd53b33c [ 746.266930][T14527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 746.286546][T14527] RSP: 002b:00007fe3cbba5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.294971][T14527] RAX: ffffffffffffffda RBX: 00007fe3cd763fa0 RCX: 00007fe3cd53b33c [ 746.302958][T14527] RDX: 000000000000000f RSI: 00007fe3cbba50a0 RDI: 0000000000000008 [ 746.310954][T14527] RBP: 00007fe3cbba5090 R08: 0000000000000000 R09: 0000000000000000 [ 746.319356][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.327681][T14527] R13: 0000000000000000 R14: 00007fe3cd763fa0 R15: 00007fff700ef668 [ 746.335955][T14527] [ 749.735307][T14621] FAULT_INJECTION: forcing a failure. [ 749.735307][T14621] name failslab, interval 1, probability 0, space 0, times 0 [ 749.749351][T14621] CPU: 0 PID: 14621 Comm: syz.4.5051 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 749.759344][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.769392][T14621] Call Trace: [ 749.772662][T14621] [ 749.775589][T14621] __dump_stack+0x21/0x30 [ 749.779919][T14621] dump_stack_lvl+0xee/0x150 [ 749.784505][T14621] ? show_regs_print_info+0x20/0x20 [ 749.789699][T14621] ? avc_has_perm_noaudit+0x2f4/0x460 [ 749.795260][T14621] dump_stack+0x15/0x20 [ 749.799586][T14621] should_fail+0x3c1/0x510 [ 749.803990][T14621] __should_failslab+0xa4/0xe0 [ 749.808745][T14621] should_failslab+0x9/0x20 [ 749.813232][T14621] slab_pre_alloc_hook+0x3b/0xe0 [ 749.818372][T14621] ? __alloc_skb+0xe0/0x740 [ 749.823084][T14621] kmem_cache_alloc+0x44/0x260 [ 749.827850][T14621] __alloc_skb+0xe0/0x740 [ 749.832171][T14621] alloc_skb_with_frags+0xa8/0x620 [ 749.837274][T14621] sock_alloc_send_pskb+0x853/0x980 [ 749.842457][T14621] ? is_bpf_text_address+0x177/0x190 [ 749.847816][T14621] ? __kernel_text_address+0xa0/0x100 [ 749.853193][T14621] ? sock_kzfree_s+0x60/0x60 [ 749.857769][T14621] ? stack_trace_save+0x98/0xe0 [ 749.862614][T14621] tun_get_user+0x4e6/0x33c0 [ 749.867194][T14621] ? __kasan_init_slab_obj+0x10/0x40 [ 749.872463][T14621] ? kmem_cache_free+0x100/0x320 [ 749.877388][T14621] ? tun_do_read+0x1c40/0x1c40 [ 749.882150][T14621] ? kstrtouint_from_user+0x1a0/0x200 [ 749.887545][T14621] ? kstrtol_from_user+0x260/0x260 [ 749.892643][T14621] ? putname+0x111/0x160 [ 749.896869][T14621] ? avc_policy_seqno+0x1b/0x70 [ 749.901748][T14621] ? selinux_file_permission+0x2aa/0x510 [ 749.907365][T14621] tun_chr_write_iter+0x1eb/0x2e0 [ 749.912374][T14621] vfs_write+0x802/0xf70 [ 749.916688][T14621] ? file_end_write+0x1b0/0x1b0 [ 749.921623][T14621] ? __fget_files+0x2c4/0x320 [ 749.926476][T14621] ? __fdget_pos+0x1f7/0x380 [ 749.931056][T14621] ? ksys_write+0x71/0x240 [ 749.935481][T14621] ksys_write+0x140/0x240 [ 749.939795][T14621] ? __ia32_sys_read+0x90/0x90 [ 749.944545][T14621] ? debug_smp_processor_id+0x17/0x20 [ 749.949909][T14621] __x64_sys_write+0x7b/0x90 [ 749.954484][T14621] x64_sys_call+0x8ef/0x9a0 [ 749.958973][T14621] do_syscall_64+0x4c/0xa0 [ 749.963421][T14621] ? clear_bhb_loop+0x50/0xa0 [ 749.968085][T14621] ? clear_bhb_loop+0x50/0xa0 [ 749.972744][T14621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 749.978625][T14621] RIP: 0033:0x7f35450e1929 [ 749.983035][T14621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.002657][T14621] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 750.011066][T14621] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 750.019032][T14621] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 750.027155][T14621] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 750.035564][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.043794][T14621] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 750.051764][T14621] [ 750.112742][T14630] FAULT_INJECTION: forcing a failure. [ 750.112742][T14630] name failslab, interval 1, probability 0, space 0, times 0 [ 750.125498][T14630] CPU: 1 PID: 14630 Comm: syz.2.5057 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 750.135472][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.145533][T14630] Call Trace: [ 750.148822][T14630] [ 750.151754][T14630] __dump_stack+0x21/0x30 [ 750.156094][T14630] dump_stack_lvl+0xee/0x150 [ 750.160685][T14630] ? show_regs_print_info+0x20/0x20 [ 750.165879][T14630] dump_stack+0x15/0x20 [ 750.170030][T14630] should_fail+0x3c1/0x510 [ 750.174444][T14630] ? fdb_notify+0x78/0x130 [ 750.178856][T14630] __should_failslab+0xa4/0xe0 [ 750.183627][T14630] should_failslab+0x9/0x20 [ 750.188131][T14630] slab_pre_alloc_hook+0x3b/0xe0 [ 750.193069][T14630] ? fdb_notify+0x78/0x130 [ 750.197482][T14630] ? fdb_notify+0x78/0x130 [ 750.201898][T14630] __kmalloc_track_caller+0x6c/0x2c0 [ 750.207177][T14630] ? fdb_notify+0x78/0x130 [ 750.211653][T14630] ? fdb_notify+0x78/0x130 [ 750.216057][T14630] __alloc_skb+0x21a/0x740 [ 750.220460][T14630] fdb_notify+0x78/0x130 [ 750.224773][T14630] fdb_insert+0x16b/0x260 [ 750.229181][T14630] br_fdb_changeaddr+0x187/0x1c0 [ 750.234099][T14630] br_device_event+0x335/0x790 [ 750.238846][T14630] ? br_boolopt_multi_get+0xf0/0xf0 [ 750.244025][T14630] ? packet_notifier+0x8bc/0x8d0 [ 750.248946][T14630] ? addrconf_notify+0x37b/0xde0 [ 750.253867][T14630] raw_notifier_call_chain+0x90/0x100 [ 750.259220][T14630] dev_set_mac_address+0x318/0x420 [ 750.264317][T14630] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 750.270113][T14630] dev_set_mac_address_user+0x31/0x50 [ 750.275470][T14630] dev_ifsioc+0x757/0xe70 [ 750.279961][T14630] ? dev_ioctl+0xd10/0xd10 [ 750.284361][T14630] ? __kasan_check_write+0x14/0x20 [ 750.289459][T14630] ? mutex_lock+0x95/0x1a0 [ 750.293887][T14630] ? wait_for_completion_killable_timeout+0x10/0x10 [ 750.300464][T14630] ? dev_get_by_name_rcu+0xc8/0xf0 [ 750.305563][T14630] dev_ioctl+0x560/0xd10 [ 750.309788][T14630] sock_do_ioctl+0x22e/0x300 [ 750.314360][T14630] ? sock_show_fdinfo+0xa0/0xa0 [ 750.319290][T14630] ? selinux_file_ioctl+0x377/0x480 [ 750.324477][T14630] sock_ioctl+0x4bc/0x6b0 [ 750.328791][T14630] ? sock_poll+0x3d0/0x3d0 [ 750.333191][T14630] ? __fget_files+0x2c4/0x320 [ 750.337878][T14630] ? security_file_ioctl+0x84/0xa0 [ 750.342991][T14630] ? sock_poll+0x3d0/0x3d0 [ 750.347485][T14630] __se_sys_ioctl+0x121/0x1a0 [ 750.352155][T14630] __x64_sys_ioctl+0x7b/0x90 [ 750.356905][T14630] x64_sys_call+0x2f/0x9a0 [ 750.361306][T14630] do_syscall_64+0x4c/0xa0 [ 750.365703][T14630] ? clear_bhb_loop+0x50/0xa0 [ 750.370414][T14630] ? clear_bhb_loop+0x50/0xa0 [ 750.375362][T14630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 750.381257][T14630] RIP: 0033:0x7f319ee9a929 [ 750.385658][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.405343][T14630] RSP: 002b:00007f319d503038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.413747][T14630] RAX: ffffffffffffffda RBX: 00007f319f0c1fa0 RCX: 00007f319ee9a929 [ 750.421705][T14630] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 750.429758][T14630] RBP: 00007f319d503090 R08: 0000000000000000 R09: 0000000000000000 [ 750.437717][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.445673][T14630] R13: 0000000000000000 R14: 00007f319f0c1fa0 R15: 00007ffe3ce24458 [ 750.453634][T14630] [ 750.918941][T14653] FAULT_INJECTION: forcing a failure. [ 750.918941][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 750.932331][T14653] CPU: 1 PID: 14653 Comm: syz.0.5064 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 750.942600][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.953095][T14653] Call Trace: [ 750.956382][T14653] [ 750.959324][T14653] __dump_stack+0x21/0x30 [ 750.963665][T14653] dump_stack_lvl+0xee/0x150 [ 750.968271][T14653] ? show_regs_print_info+0x20/0x20 [ 750.973474][T14653] ? should_fail+0x331/0x510 [ 750.978072][T14653] dump_stack+0x15/0x20 [ 750.982252][T14653] should_fail+0x3c1/0x510 [ 750.986779][T14653] __should_failslab+0xa4/0xe0 [ 750.991561][T14653] should_failslab+0x9/0x20 [ 750.996078][T14653] slab_pre_alloc_hook+0x3b/0xe0 [ 751.001112][T14653] kmem_cache_alloc_trace+0x48/0x270 [ 751.006407][T14653] ? selinux_tun_dev_alloc_security+0x51/0x140 [ 751.012553][T14653] selinux_tun_dev_alloc_security+0x51/0x140 [ 751.018611][T14653] security_tun_dev_alloc_security+0x62/0x90 [ 751.024579][T14653] tun_net_init+0x1e1/0x580 [ 751.029068][T14653] ? register_netdevice+0x26a/0x13a0 [ 751.034345][T14653] register_netdevice+0x38b/0x13a0 [ 751.039535][T14653] ? kvmalloc_node+0x26d/0x330 [ 751.044323][T14653] ? irqentry_exit+0x37/0x40 [ 751.049079][T14653] ? netif_stacked_transfer_operstate+0x220/0x220 [ 751.055479][T14653] tun_set_iff+0x812/0xe00 [ 751.060412][T14653] __tun_chr_ioctl+0x7e8/0x1eb0 [ 751.065260][T14653] ? tun_flow_create+0x320/0x320 [ 751.070273][T14653] ? __fget_files+0x2c4/0x320 [ 751.074963][T14653] tun_chr_ioctl+0x2a/0x40 [ 751.079361][T14653] ? tun_chr_poll+0x720/0x720 [ 751.084023][T14653] __se_sys_ioctl+0x121/0x1a0 [ 751.088687][T14653] __x64_sys_ioctl+0x7b/0x90 [ 751.093384][T14653] x64_sys_call+0x2f/0x9a0 [ 751.097798][T14653] do_syscall_64+0x4c/0xa0 [ 751.102200][T14653] ? clear_bhb_loop+0x50/0xa0 [ 751.106862][T14653] ? clear_bhb_loop+0x50/0xa0 [ 751.111521][T14653] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 751.117395][T14653] RIP: 0033:0x7fe3cd53c929 [ 751.121796][T14653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.141385][T14653] RSP: 002b:00007fe3cbba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.149783][T14653] RAX: ffffffffffffffda RBX: 00007fe3cd763fa0 RCX: 00007fe3cd53c929 [ 751.157741][T14653] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000008 [ 751.165696][T14653] RBP: 00007fe3cbba5090 R08: 0000000000000000 R09: 0000000000000000 [ 751.173658][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.181613][T14653] R13: 0000000000000000 R14: 00007fe3cd763fa0 R15: 00007fff700ef668 [ 751.189666][T14653] [ 751.896247][T14698] FAULT_INJECTION: forcing a failure. [ 751.896247][T14698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 751.942224][T14698] CPU: 0 PID: 14698 Comm: syz.3.5078 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 751.952240][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.962928][T14698] Call Trace: [ 751.966381][T14698] [ 751.969303][T14698] __dump_stack+0x21/0x30 [ 751.973745][T14698] dump_stack_lvl+0xee/0x150 [ 751.978323][T14698] ? show_regs_print_info+0x20/0x20 [ 751.983562][T14698] dump_stack+0x15/0x20 [ 751.987738][T14698] should_fail+0x3c1/0x510 [ 751.992143][T14698] should_fail_alloc_page+0x55/0x80 [ 751.997334][T14698] prepare_alloc_pages+0x156/0x600 [ 752.002433][T14698] ? __alloc_pages_bulk+0xab0/0xab0 [ 752.008146][T14698] ? perf_sched_cb_inc+0x240/0x240 [ 752.013245][T14698] __alloc_pages+0x10a/0x440 [ 752.018372][T14698] ? prep_new_page+0x110/0x110 [ 752.023124][T14698] ? __schedule+0xb76/0x14c0 [ 752.027705][T14698] ? release_firmware_map_entry+0x190/0x190 [ 752.033951][T14698] __get_free_pages+0x10/0x30 [ 752.038626][T14698] kasan_populate_vmalloc_pte+0x29/0x120 [ 752.044350][T14698] __apply_to_page_range+0x8b0/0xbf0 [ 752.049727][T14698] ? kasan_populate_vmalloc+0x70/0x70 [ 752.055260][T14698] ? kasan_populate_vmalloc+0x70/0x70 [ 752.060790][T14698] apply_to_page_range+0x3b/0x50 [ 752.065778][T14698] kasan_populate_vmalloc+0x60/0x70 [ 752.070987][T14698] alloc_vmap_area+0x185c/0x1990 [ 752.075926][T14698] ? vm_map_ram+0xa60/0xa60 [ 752.080413][T14698] ? kmem_cache_alloc_trace+0x119/0x270 [ 752.085942][T14698] ? __get_vm_area_node+0x11d/0x350 [ 752.091151][T14698] __get_vm_area_node+0x14e/0x350 [ 752.096172][T14698] __vmalloc_node_range+0xe8/0x840 [ 752.101283][T14698] ? copy_process+0x5a9/0x3210 [ 752.106034][T14698] ? slab_post_alloc_hook+0x6d/0x2b0 [ 752.111302][T14698] ? kmem_cache_alloc+0xf7/0x260 [ 752.116226][T14698] dup_task_struct+0x3f2/0xc10 [ 752.120973][T14698] ? copy_process+0x5a9/0x3210 [ 752.125731][T14698] ? recalc_sigpending+0x1ac/0x230 [ 752.130827][T14698] copy_process+0x5a9/0x3210 [ 752.135402][T14698] ? kstrtol_from_user+0x260/0x260 [ 752.140507][T14698] ? __kasan_check_write+0x14/0x20 [ 752.145603][T14698] ? proc_fail_nth_write+0x17a/0x1f0 [ 752.150876][T14698] ? proc_fail_nth_read+0x210/0x210 [ 752.156060][T14698] ? __pidfd_prepare+0x150/0x150 [ 752.160987][T14698] ? security_file_permission+0x83/0xa0 [ 752.166518][T14698] kernel_clone+0x23f/0x940 [ 752.171008][T14698] ? create_io_thread+0x130/0x130 [ 752.176016][T14698] ? __kasan_check_write+0x14/0x20 [ 752.181114][T14698] ? mutex_unlock+0x89/0x220 [ 752.185692][T14698] __x64_sys_clone+0x176/0x1d0 [ 752.190442][T14698] ? __kasan_check_write+0x14/0x20 [ 752.195539][T14698] ? __ia32_sys_vfork+0xf0/0xf0 [ 752.200382][T14698] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 752.206478][T14698] x64_sys_call+0x41f/0x9a0 [ 752.211071][T14698] do_syscall_64+0x4c/0xa0 [ 752.215665][T14698] ? clear_bhb_loop+0x50/0xa0 [ 752.220343][T14698] ? clear_bhb_loop+0x50/0xa0 [ 752.225107][T14698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 752.231084][T14698] RIP: 0033:0x7f053e584929 [ 752.235497][T14698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.255089][T14698] RSP: 002b:00007f053cbecfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 752.263498][T14698] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 752.271458][T14698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c000000 [ 752.279503][T14698] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 752.287459][T14698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 752.295416][T14698] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 752.303376][T14698] [ 752.416703][T14698] syz.3.5078: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 752.452303][T14698] CPU: 0 PID: 14698 Comm: syz.3.5078 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 752.462316][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.472370][T14698] Call Trace: [ 752.475650][T14698] [ 752.478586][T14698] __dump_stack+0x21/0x30 [ 752.482917][T14698] dump_stack_lvl+0xee/0x150 [ 752.487522][T14698] ? show_regs_print_info+0x20/0x20 [ 752.492723][T14698] ? pr_cont_kernfs_name+0xe3/0xf0 [ 752.497864][T14698] dump_stack+0x15/0x20 [ 752.502165][T14698] warn_alloc+0x1b0/0x1d0 [ 752.506596][T14698] ? __kasan_slab_free+0x11/0x20 [ 752.511546][T14698] ? slab_free_freelist_hook+0xc2/0x190 [ 752.518653][T14698] ? zone_watermark_ok_safe+0x270/0x270 [ 752.526945][T14698] ? __get_vm_area_node+0x163/0x350 [ 752.533021][T14698] __vmalloc_node_range+0x2c4/0x840 [ 752.538233][T14698] ? slab_post_alloc_hook+0x6d/0x2b0 [ 752.543736][T14698] ? kmem_cache_alloc+0xf7/0x260 [ 752.549126][T14698] dup_task_struct+0x3f2/0xc10 [ 752.554253][T14698] ? copy_process+0x5a9/0x3210 [ 752.559034][T14698] ? recalc_sigpending+0x1ac/0x230 [ 752.564158][T14698] copy_process+0x5a9/0x3210 [ 752.568760][T14698] ? kstrtol_from_user+0x260/0x260 [ 752.573876][T14698] ? __kasan_check_write+0x14/0x20 [ 752.578990][T14698] ? proc_fail_nth_write+0x17a/0x1f0 [ 752.584289][T14698] ? proc_fail_nth_read+0x210/0x210 [ 752.589513][T14698] ? __pidfd_prepare+0x150/0x150 [ 752.594556][T14698] ? security_file_permission+0x83/0xa0 [ 752.600222][T14698] kernel_clone+0x23f/0x940 [ 752.605578][T14698] ? create_io_thread+0x130/0x130 [ 752.610634][T14698] ? __kasan_check_write+0x14/0x20 [ 752.615769][T14698] ? mutex_unlock+0x89/0x220 [ 752.620370][T14698] __x64_sys_clone+0x176/0x1d0 [ 752.625143][T14698] ? __kasan_check_write+0x14/0x20 [ 752.630268][T14698] ? __ia32_sys_vfork+0xf0/0xf0 [ 752.635127][T14698] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 752.641294][T14698] x64_sys_call+0x41f/0x9a0 [ 752.645807][T14698] do_syscall_64+0x4c/0xa0 [ 752.650331][T14698] ? clear_bhb_loop+0x50/0xa0 [ 752.655013][T14698] ? clear_bhb_loop+0x50/0xa0 [ 752.659709][T14698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 752.665701][T14698] RIP: 0033:0x7f053e584929 [ 752.670315][T14698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.689932][T14698] RSP: 002b:00007f053cbecfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 752.698356][T14698] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 752.706333][T14698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c000000 [ 752.714308][T14698] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 752.722393][T14698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 752.730381][T14698] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 752.738452][T14698] [ 752.757724][T14698] Mem-Info: [ 752.767442][T14698] active_anon:41 inactive_anon:29208 isolated_anon:0 [ 752.767442][T14698] active_file:26093 inactive_file:3576 isolated_file:0 [ 752.767442][T14698] unevictable:0 dirty:547 writeback:4 [ 752.767442][T14698] slab_reclaimable:8068 slab_unreclaimable:75732 [ 752.767442][T14698] mapped:39338 shmem:15137 pagetables:672 bounce:0 [ 752.767442][T14698] kernel_misc_reclaimable:0 [ 752.767442][T14698] free:1499910 free_pcp:11572 free_cma:0 [ 752.982328][T14698] Node 0 active_anon:164kB inactive_anon:138484kB active_file:104372kB inactive_file:14304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150224kB dirty:2188kB writeback:0kB shmem:82256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4356kB pagetables:2696kB all_unreclaimable? no [ 753.024973][T14698] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2983004kB mlocked:0kB bounce:0kB free_pcp:4232kB local_pcp:4232kB free_cma:0kB [ 753.102366][T14698] lowmem_reserve[]: 0 3941 3941 [ 753.112695][T14698] Normal free:2976452kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:164kB inactive_anon:127064kB active_file:104372kB inactive_file:14304kB unevictable:0kB writepending:2188kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:52212kB local_pcp:36068kB free_cma:0kB [ 753.202266][T14698] lowmem_reserve[]: 0 0 0 [ 753.262507][T14698] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 753.312276][T14698] Normal: 2*4kB (ME) 3*8kB (UE) 1*16kB (U) 33*32kB (UME) 152*64kB (ME) 50*128kB (UME) 32*256kB (UM) 19*512kB (ME) 6*1024kB (UME) 3*2048kB (UME) 713*4096kB (M) = 2967888kB [ 753.387901][T14698] 39862 total pagecache pages [ 753.392761][T14698] 0 pages in swap cache [ 753.417433][T14698] Swap cache stats: add 0, delete 0, find 0/0 [ 753.478331][T14698] Free swap = 124996kB [ 753.532740][T14698] Total swap = 124996kB [ 753.547118][T14698] 2097051 pages RAM [ 753.550944][T14698] 0 pages HighMem/MovableOnly [ 753.558039][T14698] 342276 pages reserved [ 753.562275][T14698] 0 pages cma reserved [ 754.422026][T14757] FAULT_INJECTION: forcing a failure. [ 754.422026][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 754.443851][T14757] CPU: 1 PID: 14757 Comm: syz.1.5099 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 754.453951][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.464008][T14757] Call Trace: [ 754.467283][T14757] [ 754.470210][T14757] __dump_stack+0x21/0x30 [ 754.474629][T14757] dump_stack_lvl+0xee/0x150 [ 754.479205][T14757] ? show_regs_print_info+0x20/0x20 [ 754.484393][T14757] dump_stack+0x15/0x20 [ 754.488539][T14757] should_fail+0x3c1/0x510 [ 754.492938][T14757] ? tipc_buf_acquire+0x2b/0xe0 [ 754.497772][T14757] __should_failslab+0xa4/0xe0 [ 754.502530][T14757] should_failslab+0x9/0x20 [ 754.507017][T14757] slab_pre_alloc_hook+0x3b/0xe0 [ 754.511943][T14757] ? tipc_buf_acquire+0x2b/0xe0 [ 754.516781][T14757] ? tipc_buf_acquire+0x2b/0xe0 [ 754.521620][T14757] __kmalloc_track_caller+0x6c/0x2c0 [ 754.526891][T14757] ? tipc_buf_acquire+0x2b/0xe0 [ 754.531729][T14757] ? tipc_buf_acquire+0x2b/0xe0 [ 754.536578][T14757] __alloc_skb+0x21a/0x740 [ 754.541069][T14757] tipc_buf_acquire+0x2b/0xe0 [ 754.546133][T14757] tipc_msg_build+0x8f1/0xfb0 [ 754.550801][T14757] __tipc_sendmsg+0x19dd/0x2680 [ 754.555636][T14757] ? _raw_spin_lock+0xe0/0xe0 [ 754.560302][T14757] ? local_bh_enable+0x30/0x30 [ 754.565054][T14757] ? wait_woken+0x170/0x170 [ 754.569541][T14757] ? avc_has_perm+0x158/0x240 [ 754.574214][T14757] ? __kasan_check_write+0x14/0x20 [ 754.579330][T14757] ? _raw_spin_lock_bh+0x8e/0xe0 [ 754.584257][T14757] ? _raw_spin_lock_irq+0xe0/0xe0 [ 754.589392][T14757] ? unwind_get_return_address+0x4d/0x90 [ 754.595014][T14757] ? stack_trace_save+0xe0/0xe0 [ 754.599851][T14757] ? __local_bh_enable_ip+0x58/0x80 [ 754.605037][T14757] ? lock_sock_nested+0x1f1/0x290 [ 754.610052][T14757] ? sock_init_data+0xc0/0xc0 [ 754.614716][T14757] ? stack_trace_save+0x98/0xe0 [ 754.619567][T14757] ? __kasan_check_write+0x14/0x20 [ 754.624681][T14757] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 754.630137][T14757] tipc_sendmsg+0x55/0x70 [ 754.634458][T14757] ? tipc_recvmsg+0x13a0/0x13a0 [ 754.639557][T14757] ____sys_sendmsg+0x5a2/0x8c0 [ 754.644334][T14757] ? __sys_sendmsg_sock+0x40/0x40 [ 754.649346][T14757] ? import_iovec+0x7c/0xb0 [ 754.653836][T14757] ___sys_sendmsg+0x1f0/0x260 [ 754.658508][T14757] ? __sys_sendmsg+0x250/0x250 [ 754.663364][T14757] ? __fdget+0x1a1/0x230 [ 754.667601][T14757] __x64_sys_sendmsg+0x1e2/0x2a0 [ 754.672524][T14757] ? ___sys_sendmsg+0x260/0x260 [ 754.677354][T14757] ? ksys_write+0x1eb/0x240 [ 754.681934][T14757] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 754.687985][T14757] x64_sys_call+0x4b/0x9a0 [ 754.692394][T14757] do_syscall_64+0x4c/0xa0 [ 754.696798][T14757] ? clear_bhb_loop+0x50/0xa0 [ 754.701461][T14757] ? clear_bhb_loop+0x50/0xa0 [ 754.706119][T14757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 754.711996][T14757] RIP: 0033:0x7f80962a3929 [ 754.716402][T14757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.736086][T14757] RSP: 002b:00007f809490c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.744516][T14757] RAX: ffffffffffffffda RBX: 00007f80964cafa0 RCX: 00007f80962a3929 [ 754.752481][T14757] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000006 [ 754.760439][T14757] RBP: 00007f809490c090 R08: 0000000000000000 R09: 0000000000000000 [ 754.768675][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.776640][T14757] R13: 0000000000000000 R14: 00007f80964cafa0 R15: 00007fffbf422558 [ 754.784604][T14757] [ 756.081273][T14796] device pim6reg1 entered promiscuous mode [ 756.104247][T14803] FAULT_INJECTION: forcing a failure. [ 756.104247][T14803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.133114][T14803] CPU: 1 PID: 14803 Comm: syz.3.5112 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 756.143303][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.153485][T14803] Call Trace: [ 756.156769][T14803] [ 756.159701][T14803] __dump_stack+0x21/0x30 [ 756.164032][T14803] dump_stack_lvl+0xee/0x150 [ 756.168620][T14803] ? show_regs_print_info+0x20/0x20 [ 756.173814][T14803] ? __kmalloc+0x13d/0x2c0 [ 756.178227][T14803] ? kvmalloc_node+0x242/0x330 [ 756.182973][T14803] dump_stack+0x15/0x20 [ 756.187121][T14803] should_fail+0x3c1/0x510 [ 756.191518][T14803] should_fail_usercopy+0x1a/0x20 [ 756.196562][T14803] _copy_from_user+0x20/0xd0 [ 756.201420][T14803] map_update_elem+0x552/0x740 [ 756.206261][T14803] __sys_bpf+0x40c/0x730 [ 756.210495][T14803] ? bpf_link_show_fdinfo+0x310/0x310 [ 756.215858][T14803] ? debug_smp_processor_id+0x17/0x20 [ 756.221307][T14803] __x64_sys_bpf+0x7c/0x90 [ 756.226090][T14803] x64_sys_call+0x4b9/0x9a0 [ 756.230587][T14803] do_syscall_64+0x4c/0xa0 [ 756.235163][T14803] ? clear_bhb_loop+0x50/0xa0 [ 756.240329][T14803] ? clear_bhb_loop+0x50/0xa0 [ 756.245197][T14803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 756.251078][T14803] RIP: 0033:0x7f053e584929 [ 756.255483][T14803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.275225][T14803] RSP: 002b:00007f053cbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.283713][T14803] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 756.291684][T14803] RDX: 0000000000000020 RSI: 0000200000000940 RDI: 0000000000000002 [ 756.299836][T14803] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 756.307815][T14803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.316591][T14803] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 756.324598][T14803] [ 756.876267][T14815] device wg2 entered promiscuous mode [ 758.426514][T14853] FAULT_INJECTION: forcing a failure. [ 758.426514][T14853] name failslab, interval 1, probability 0, space 0, times 0 [ 758.439221][T14853] CPU: 0 PID: 14853 Comm: syz.3.5128 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 758.449218][T14853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 758.459258][T14853] Call Trace: [ 758.462521][T14853] [ 758.465435][T14853] __dump_stack+0x21/0x30 [ 758.469751][T14853] dump_stack_lvl+0xee/0x150 [ 758.474495][T14853] ? show_regs_print_info+0x20/0x20 [ 758.479699][T14853] dump_stack+0x15/0x20 [ 758.483853][T14853] should_fail+0x3c1/0x510 [ 758.488266][T14853] ? skb_ensure_writable+0x2e7/0x460 [ 758.493537][T14853] __should_failslab+0xa4/0xe0 [ 758.498289][T14853] should_failslab+0x9/0x20 [ 758.502775][T14853] slab_pre_alloc_hook+0x3b/0xe0 [ 758.507701][T14853] ? skb_ensure_writable+0x2e7/0x460 [ 758.512973][T14853] ? skb_ensure_writable+0x2e7/0x460 [ 758.518249][T14853] __kmalloc_track_caller+0x6c/0x2c0 [ 758.523518][T14853] ? skb_ensure_writable+0x2e7/0x460 [ 758.528789][T14853] ? skb_ensure_writable+0x2e7/0x460 [ 758.534057][T14853] pskb_expand_head+0x11b/0x11d0 [ 758.538990][T14853] ? __copy_skb_header+0x437/0x600 [ 758.544091][T14853] ? __kasan_check_write+0x14/0x20 [ 758.549185][T14853] ? __skb_clone+0x47a/0x790 [ 758.553756][T14853] skb_ensure_writable+0x2e7/0x460 [ 758.558850][T14853] bpf_clone_redirect+0x10b/0x380 [ 758.563860][T14853] ? stack_trace_save+0x98/0xe0 [ 758.568698][T14853] bpf_prog_6893982b85ceadf7+0x56/0x5f8 [ 758.574225][T14853] ? __kasan_slab_alloc+0xcf/0xf0 [ 758.579226][T14853] ? __kasan_slab_alloc+0xbd/0xf0 [ 758.584230][T14853] ? slab_post_alloc_hook+0x4f/0x2b0 [ 758.589520][T14853] ? kmem_cache_alloc+0xf7/0x260 [ 758.594439][T14853] ? __build_skb+0x2d/0x310 [ 758.598925][T14853] ? build_skb+0x24/0x200 [ 758.603233][T14853] ? bpf_prog_test_run_skb+0x279/0x1150 [ 758.608869][T14853] ? bpf_prog_test_run+0x3d5/0x620 [ 758.613977][T14853] ? __sys_bpf+0x52c/0x730 [ 758.618375][T14853] ? __x64_sys_bpf+0x7c/0x90 [ 758.622954][T14853] ? x64_sys_call+0x4b9/0x9a0 [ 758.627613][T14853] ? do_syscall_64+0x4c/0xa0 [ 758.632190][T14853] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 758.638248][T14853] ? ktime_get+0x12f/0x160 [ 758.642644][T14853] bpf_test_run+0x33d/0x8d0 [ 758.647130][T14853] ? convert___skb_to_skb+0x4f0/0x4f0 [ 758.652484][T14853] ? eth_get_headlen+0x1f0/0x1f0 [ 758.657408][T14853] ? convert___skb_to_skb+0x41/0x4f0 [ 758.662681][T14853] bpf_prog_test_run_skb+0x9ec/0x1150 [ 758.668050][T14853] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 758.674011][T14853] bpf_prog_test_run+0x3d5/0x620 [ 758.678934][T14853] ? bpf_prog_query+0x230/0x230 [ 758.683836][T14853] ? selinux_bpf+0xce/0xf0 [ 758.688323][T14853] ? security_bpf+0x82/0xa0 [ 758.692806][T14853] __sys_bpf+0x52c/0x730 [ 758.697028][T14853] ? bpf_link_show_fdinfo+0x310/0x310 [ 758.702385][T14853] ? debug_smp_processor_id+0x17/0x20 [ 758.707748][T14853] __x64_sys_bpf+0x7c/0x90 [ 758.712153][T14853] x64_sys_call+0x4b9/0x9a0 [ 758.716676][T14853] do_syscall_64+0x4c/0xa0 [ 758.721075][T14853] ? clear_bhb_loop+0x50/0xa0 [ 758.725736][T14853] ? clear_bhb_loop+0x50/0xa0 [ 758.730395][T14853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 758.736273][T14853] RIP: 0033:0x7f053e584929 [ 758.740724][T14853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.760314][T14853] RSP: 002b:00007f053cbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 758.768714][T14853] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e584929 [ 758.776670][T14853] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 758.784631][T14853] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 758.792599][T14853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.800908][T14853] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 758.809094][T14853] [ 762.446821][T14914] FAULT_INJECTION: forcing a failure. [ 762.446821][T14914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.522721][T14914] CPU: 0 PID: 14914 Comm: syz.0.5146 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 762.532731][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.542793][T14914] Call Trace: [ 762.546075][T14914] [ 762.549003][T14914] __dump_stack+0x21/0x30 [ 762.553335][T14914] dump_stack_lvl+0xee/0x150 [ 762.557928][T14914] ? show_regs_print_info+0x20/0x20 [ 762.563244][T14914] ? migrate_enable+0x192/0x260 [ 762.568109][T14914] ? migrate_disable+0x180/0x180 [ 762.573056][T14914] dump_stack+0x15/0x20 [ 762.577222][T14914] should_fail+0x3c1/0x510 [ 762.581646][T14914] should_fail_usercopy+0x1a/0x20 [ 762.586762][T14914] _copy_to_user+0x20/0x90 [ 762.591186][T14914] generic_map_lookup_batch+0x707/0xa70 [ 762.596843][T14914] ? security_file_permission+0x79/0xa0 [ 762.602431][T14914] ? bpf_map_update_value+0x3e0/0x3e0 [ 762.607912][T14914] ? __fdget+0x1a1/0x230 [ 762.612346][T14914] ? bpf_map_update_value+0x3e0/0x3e0 [ 762.617743][T14914] bpf_map_do_batch+0x2d4/0x5f0 [ 762.622601][T14914] ? security_bpf+0x82/0xa0 [ 762.627112][T14914] __sys_bpf+0x5e3/0x730 [ 762.631368][T14914] ? bpf_link_show_fdinfo+0x310/0x310 [ 762.636830][T14914] ? debug_smp_processor_id+0x17/0x20 [ 762.642203][T14914] __x64_sys_bpf+0x7c/0x90 [ 762.646612][T14914] x64_sys_call+0x4b9/0x9a0 [ 762.651106][T14914] do_syscall_64+0x4c/0xa0 [ 762.655501][T14914] ? clear_bhb_loop+0x50/0xa0 [ 762.661001][T14914] ? clear_bhb_loop+0x50/0xa0 [ 762.665992][T14914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 762.672571][T14914] RIP: 0033:0x7fe3cd53c929 [ 762.677871][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.704263][T14914] RSP: 002b:00007fe3cbba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 762.712763][T14914] RAX: ffffffffffffffda RBX: 00007fe3cd763fa0 RCX: 00007fe3cd53c929 [ 762.720740][T14914] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 0000000000000018 [ 762.728980][T14914] RBP: 00007fe3cbba5090 R08: 0000000000000000 R09: 0000000000000000 [ 762.737304][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.745458][T14914] R13: 0000000000000000 R14: 00007fe3cd763fa0 R15: 00007fff700ef668 [ 762.753551][T14914] [ 763.004242][T14927] FAULT_INJECTION: forcing a failure. [ 763.004242][T14927] name failslab, interval 1, probability 0, space 0, times 0 [ 763.019128][T14926] FAULT_INJECTION: forcing a failure. [ 763.019128][T14926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.052338][T14927] CPU: 0 PID: 14927 Comm: syz.0.5150 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 763.062545][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.072689][T14927] Call Trace: [ 763.075957][T14927] [ 763.078870][T14927] __dump_stack+0x21/0x30 [ 763.083463][T14927] dump_stack_lvl+0xee/0x150 [ 763.088147][T14927] ? show_regs_print_info+0x20/0x20 [ 763.093328][T14927] dump_stack+0x15/0x20 [ 763.097468][T14927] should_fail+0x3c1/0x510 [ 763.101866][T14927] ? alloc_skb_with_frags+0xa8/0x620 [ 763.107134][T14927] __should_failslab+0xa4/0xe0 [ 763.111892][T14927] should_failslab+0x9/0x20 [ 763.116398][T14927] slab_pre_alloc_hook+0x3b/0xe0 [ 763.121319][T14927] ? alloc_skb_with_frags+0xa8/0x620 [ 763.126587][T14927] ? alloc_skb_with_frags+0xa8/0x620 [ 763.131854][T14927] __kmalloc_track_caller+0x6c/0x2c0 [ 763.137121][T14927] ? alloc_skb_with_frags+0xa8/0x620 [ 763.142394][T14927] ? alloc_skb_with_frags+0xa8/0x620 [ 763.147665][T14927] __alloc_skb+0x21a/0x740 [ 763.152076][T14927] alloc_skb_with_frags+0xa8/0x620 [ 763.157173][T14927] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 763.162619][T14927] sock_alloc_send_pskb+0x853/0x980 [ 763.167802][T14927] ? sock_kzfree_s+0x60/0x60 [ 763.172387][T14927] ? __kasan_check_write+0x14/0x20 [ 763.177478][T14927] ? _raw_spin_lock+0x8e/0xe0 [ 763.182138][T14927] ? _raw_spin_trylock_bh+0x130/0x130 [ 763.187496][T14927] ? security_socket_getpeersec_dgram+0xaa/0xc0 [ 763.193715][T14927] unix_dgram_sendmsg+0x5ea/0x1880 [ 763.198809][T14927] ? unwind_get_return_address+0x4d/0x90 [ 763.204429][T14927] ? stack_trace_save+0xe0/0xe0 [ 763.209334][T14927] ? selinux_socket_sendmsg+0x208/0x2e0 [ 763.214866][T14927] ? selinux_socket_accept+0x500/0x500 [ 763.220311][T14927] ? unix_dgram_poll+0x6b0/0x6b0 [ 763.225316][T14927] ? stack_trace_save+0x98/0xe0 [ 763.230163][T14927] unix_seqpacket_sendmsg+0x118/0x1e0 [ 763.235523][T14927] ? unix_dgram_peer_wake_me+0x450/0x450 [ 763.241142][T14927] ____sys_sendmsg+0x5a2/0x8c0 [ 763.245892][T14927] ? __sys_sendmsg_sock+0x40/0x40 [ 763.251173][T14927] ? kstrtouint_from_user+0x1a0/0x200 [ 763.256532][T14927] ? import_iovec+0x7c/0xb0 [ 763.261034][T14927] ___sys_sendmsg+0x1f0/0x260 [ 763.265695][T14927] ? __sys_sendmsg+0x250/0x250 [ 763.270451][T14927] ? __fdget+0x1a1/0x230 [ 763.274681][T14927] __x64_sys_sendmsg+0x1e2/0x2a0 [ 763.279608][T14927] ? ___sys_sendmsg+0x260/0x260 [ 763.284445][T14927] ? ksys_write+0x1eb/0x240 [ 763.288972][T14927] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 763.295050][T14927] x64_sys_call+0x4b/0x9a0 [ 763.299507][T14927] do_syscall_64+0x4c/0xa0 [ 763.303908][T14927] ? clear_bhb_loop+0x50/0xa0 [ 763.308568][T14927] ? clear_bhb_loop+0x50/0xa0 [ 763.313228][T14927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.319333][T14927] RIP: 0033:0x7fe3cd53c929 [ 763.323730][T14927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.343447][T14927] RSP: 002b:00007fe3cbba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.351853][T14927] RAX: ffffffffffffffda RBX: 00007fe3cd763fa0 RCX: 00007fe3cd53c929 [ 763.359806][T14927] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000005 [ 763.367759][T14927] RBP: 00007fe3cbba5090 R08: 0000000000000000 R09: 0000000000000000 [ 763.375717][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.383671][T14927] R13: 0000000000000000 R14: 00007fe3cd763fa0 R15: 00007fff700ef668 [ 763.391632][T14927] [ 763.394728][T14926] CPU: 1 PID: 14926 Comm: syz.4.5149 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 763.404709][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.414756][T14926] Call Trace: [ 763.418019][T14926] [ 763.420932][T14926] __dump_stack+0x21/0x30 [ 763.425248][T14926] dump_stack_lvl+0xee/0x150 [ 763.429821][T14926] ? show_regs_print_info+0x20/0x20 [ 763.435009][T14926] dump_stack+0x15/0x20 [ 763.439163][T14926] should_fail+0x3c1/0x510 [ 763.443565][T14926] should_fail_usercopy+0x1a/0x20 [ 763.448570][T14926] _copy_to_user+0x20/0x90 [ 763.452971][T14926] simple_read_from_buffer+0xe9/0x160 [ 763.458331][T14926] proc_fail_nth_read+0x19a/0x210 [ 763.463356][T14926] ? proc_fault_inject_write+0x2f0/0x2f0 [ 763.468974][T14926] ? security_file_permission+0x83/0xa0 [ 763.474533][T14926] ? proc_fault_inject_write+0x2f0/0x2f0 [ 763.480431][T14926] vfs_read+0x282/0xbe0 [ 763.484571][T14926] ? kernel_read+0x1f0/0x1f0 [ 763.489142][T14926] ? fd_install+0x169/0x2a0 [ 763.493632][T14926] ? __se_sys_perf_event_open+0x19b7/0x1b80 [ 763.499515][T14926] ? __kasan_check_write+0x14/0x20 [ 763.504613][T14926] ? mutex_lock+0x95/0x1a0 [ 763.509031][T14926] ? wait_for_completion_killable_timeout+0x10/0x10 [ 763.515629][T14926] ? __fget_files+0x2c4/0x320 [ 763.520323][T14926] ? __fdget_pos+0x2d2/0x380 [ 763.524895][T14926] ? ksys_read+0x71/0x240 [ 763.529206][T14926] ksys_read+0x140/0x240 [ 763.533436][T14926] ? vfs_write+0xf70/0xf70 [ 763.537833][T14926] ? debug_smp_processor_id+0x17/0x20 [ 763.543288][T14926] __x64_sys_read+0x7b/0x90 [ 763.547773][T14926] x64_sys_call+0x96d/0x9a0 [ 763.552260][T14926] do_syscall_64+0x4c/0xa0 [ 763.556795][T14926] ? clear_bhb_loop+0x50/0xa0 [ 763.561471][T14926] ? clear_bhb_loop+0x50/0xa0 [ 763.566144][T14926] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.572117][T14926] RIP: 0033:0x7f35450e033c [ 763.576518][T14926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 763.596938][T14926] RSP: 002b:00007f354374a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.605350][T14926] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e033c [ 763.613424][T14926] RDX: 000000000000000f RSI: 00007f354374a0a0 RDI: 0000000000000006 [ 763.621493][T14926] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 763.629476][T14926] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 763.637520][T14926] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 763.645583][T14926] [ 764.757940][T14972] bond_slave_1: mtu less than device minimum [ 768.094392][T15066] FAULT_INJECTION: forcing a failure. [ 768.094392][T15066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.252961][T15066] CPU: 0 PID: 15066 Comm: syz.4.5198 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 768.263073][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.273131][T15066] Call Trace: [ 768.276438][T15066] [ 768.279457][T15066] __dump_stack+0x21/0x30 [ 768.283821][T15066] dump_stack_lvl+0xee/0x150 [ 768.288503][T15066] ? show_regs_print_info+0x20/0x20 [ 768.293682][T15066] ? __alloc_pages+0x27d/0x440 [ 768.298425][T15066] dump_stack+0x15/0x20 [ 768.302648][T15066] should_fail+0x3c1/0x510 [ 768.307051][T15066] should_fail_usercopy+0x1a/0x20 [ 768.312148][T15066] copy_page_from_iter+0x2f6/0x680 [ 768.317359][T15066] tun_get_user+0x813/0x33c0 [ 768.322210][T15066] ? __kasan_init_slab_obj+0x10/0x40 [ 768.327496][T15066] ? tun_do_read+0x1c40/0x1c40 [ 768.332346][T15066] ? kstrtouint_from_user+0x1a0/0x200 [ 768.337716][T15066] ? kstrtol_from_user+0x260/0x260 [ 768.342822][T15066] ? bpf_get_stackid_raw_tp+0x161/0x1b0 [ 768.348351][T15066] ? avc_policy_seqno+0x1b/0x70 [ 768.353183][T15066] ? selinux_file_permission+0x2aa/0x510 [ 768.358798][T15066] tun_chr_write_iter+0x1eb/0x2e0 [ 768.364349][T15066] vfs_write+0x802/0xf70 [ 768.368575][T15066] ? file_end_write+0x1b0/0x1b0 [ 768.373410][T15066] ? __fget_files+0x2c4/0x320 [ 768.378073][T15066] ? __fdget_pos+0x1f7/0x380 [ 768.382648][T15066] ? ksys_write+0x71/0x240 [ 768.387220][T15066] ksys_write+0x140/0x240 [ 768.391529][T15066] ? __ia32_sys_read+0x90/0x90 [ 768.396277][T15066] ? debug_smp_processor_id+0x17/0x20 [ 768.401646][T15066] __x64_sys_write+0x7b/0x90 [ 768.406218][T15066] x64_sys_call+0x8ef/0x9a0 [ 768.410703][T15066] do_syscall_64+0x4c/0xa0 [ 768.415100][T15066] ? clear_bhb_loop+0x50/0xa0 [ 768.419759][T15066] ? clear_bhb_loop+0x50/0xa0 [ 768.424418][T15066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 768.430297][T15066] RIP: 0033:0x7f35450e1929 [ 768.434696][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.454284][T15066] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.462768][T15066] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 768.470816][T15066] RDX: 000000000000000e RSI: 0000200000000000 RDI: 00000000000000c8 [ 768.478897][T15066] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 768.486861][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.494827][T15066] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 768.502790][T15066] [ 770.102596][T15123] FAULT_INJECTION: forcing a failure. [ 770.102596][T15123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.156370][T15123] CPU: 0 PID: 15123 Comm: syz.3.5218 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 770.166390][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.176446][T15123] Call Trace: [ 770.179728][T15123] [ 770.182664][T15123] __dump_stack+0x21/0x30 [ 770.186995][T15123] dump_stack_lvl+0xee/0x150 [ 770.191595][T15123] ? show_regs_print_info+0x20/0x20 [ 770.196789][T15123] dump_stack+0x15/0x20 [ 770.200942][T15123] should_fail+0x3c1/0x510 [ 770.205360][T15123] should_fail_usercopy+0x1a/0x20 [ 770.210392][T15123] _copy_to_user+0x20/0x90 [ 770.214810][T15123] simple_read_from_buffer+0xe9/0x160 [ 770.220180][T15123] proc_fail_nth_read+0x19a/0x210 [ 770.225293][T15123] ? proc_fault_inject_write+0x2f0/0x2f0 [ 770.230923][T15123] ? security_file_permission+0x83/0xa0 [ 770.236641][T15123] ? proc_fault_inject_write+0x2f0/0x2f0 [ 770.242426][T15123] vfs_read+0x282/0xbe0 [ 770.246586][T15123] ? kernel_read+0x1f0/0x1f0 [ 770.251172][T15123] ? fd_install+0x169/0x2a0 [ 770.255680][T15123] ? __se_sys_perf_event_open+0x19b7/0x1b80 [ 770.261604][T15123] ? __kasan_check_write+0x14/0x20 [ 770.266735][T15123] ? mutex_lock+0x95/0x1a0 [ 770.271239][T15123] ? wait_for_completion_killable_timeout+0x10/0x10 [ 770.277832][T15123] ? __fget_files+0x2c4/0x320 [ 770.282536][T15123] ? __fdget_pos+0x2d2/0x380 [ 770.287124][T15123] ? ksys_read+0x71/0x240 [ 770.291448][T15123] ksys_read+0x140/0x240 [ 770.295681][T15123] ? vfs_write+0xf70/0xf70 [ 770.300092][T15123] ? debug_smp_processor_id+0x17/0x20 [ 770.305457][T15123] __x64_sys_read+0x7b/0x90 [ 770.309950][T15123] x64_sys_call+0x96d/0x9a0 [ 770.314458][T15123] do_syscall_64+0x4c/0xa0 [ 770.318879][T15123] ? clear_bhb_loop+0x50/0xa0 [ 770.323554][T15123] ? clear_bhb_loop+0x50/0xa0 [ 770.328225][T15123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 770.334358][T15123] RIP: 0033:0x7f053e58333c [ 770.338785][T15123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 770.358507][T15123] RSP: 002b:00007f053cbed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.366950][T15123] RAX: ffffffffffffffda RBX: 00007f053e7abfa0 RCX: 00007f053e58333c [ 770.374930][T15123] RDX: 000000000000000f RSI: 00007f053cbed0a0 RDI: 0000000000000006 [ 770.382909][T15123] RBP: 00007f053cbed090 R08: 0000000000000000 R09: 0000000000000000 [ 770.390884][T15123] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 770.398859][T15123] R13: 0000000000000000 R14: 00007f053e7abfa0 R15: 00007fffae597838 [ 770.406956][T15123] [ 776.715335][T15312] device veth0_vlan left promiscuous mode [ 776.843863][T15312] device veth0_vlan entered promiscuous mode [ 777.124174][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 777.211505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 777.240372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 789.387040][T15667] FAULT_INJECTION: forcing a failure. [ 789.387040][T15667] name failslab, interval 1, probability 0, space 0, times 0 [ 789.442233][T15667] CPU: 1 PID: 15667 Comm: syz.4.5406 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 789.452302][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 789.462360][T15667] Call Trace: [ 789.465643][T15667] [ 789.468579][T15667] __dump_stack+0x21/0x30 [ 789.472919][T15667] dump_stack_lvl+0xee/0x150 [ 789.477512][T15667] ? show_regs_print_info+0x20/0x20 [ 789.483074][T15667] dump_stack+0x15/0x20 [ 789.487323][T15667] should_fail+0x3c1/0x510 [ 789.491745][T15667] __should_failslab+0xa4/0xe0 [ 789.496506][T15667] should_failslab+0x9/0x20 [ 789.501000][T15667] slab_pre_alloc_hook+0x3b/0xe0 [ 789.505936][T15667] kmem_cache_alloc_trace+0x48/0x270 [ 789.511207][T15667] ? sk_psock_skb_ingress_self+0x5f/0x330 [ 789.516950][T15667] ? migrate_disable+0x180/0x180 [ 789.521878][T15667] sk_psock_skb_ingress_self+0x5f/0x330 [ 789.527410][T15667] ? migrate_disable+0xd6/0x180 [ 789.532246][T15667] sk_psock_verdict_recv+0x636/0x800 [ 789.537519][T15667] unix_read_sock+0x10a/0x2c0 [ 789.542187][T15667] ? sk_psock_skb_redirect+0x440/0x440 [ 789.547633][T15667] ? unix_stream_splice_actor+0x120/0x120 [ 789.553341][T15667] ? __kasan_check_write+0x14/0x20 [ 789.558441][T15667] ? unix_stream_splice_actor+0x120/0x120 [ 789.564146][T15667] sk_psock_verdict_data_ready+0x115/0x170 [ 789.569943][T15667] ? sk_psock_start_verdict+0xc0/0xc0 [ 789.575298][T15667] ? _raw_spin_lock+0x8e/0xe0 [ 789.580141][T15667] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 789.585945][T15667] ? skb_queue_tail+0xcb/0xf0 [ 789.590616][T15667] unix_dgram_sendmsg+0x11e6/0x1880 [ 789.595818][T15667] ? stack_trace_save+0xe0/0xe0 [ 789.600661][T15667] ? unix_dgram_poll+0x6b0/0x6b0 [ 789.605586][T15667] ? security_socket_sendmsg+0x82/0xa0 [ 789.611035][T15667] ? unix_dgram_poll+0x6b0/0x6b0 [ 789.615970][T15667] ____sys_sendmsg+0x5a2/0x8c0 [ 789.620738][T15667] ? __sys_sendmsg_sock+0x40/0x40 [ 789.625762][T15667] ? kstrtouint_from_user+0x1a0/0x200 [ 789.631129][T15667] ? import_iovec+0x7c/0xb0 [ 789.635621][T15667] ___sys_sendmsg+0x1f0/0x260 [ 789.640547][T15667] ? __sys_sendmsg+0x250/0x250 [ 789.645501][T15667] ? __fdget+0x1a1/0x230 [ 789.649742][T15667] __x64_sys_sendmsg+0x1e2/0x2a0 [ 789.654671][T15667] ? ___sys_sendmsg+0x260/0x260 [ 789.659514][T15667] ? ksys_write+0x1eb/0x240 [ 789.664004][T15667] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 789.670058][T15667] x64_sys_call+0x4b/0x9a0 [ 789.674459][T15667] do_syscall_64+0x4c/0xa0 [ 789.678857][T15667] ? clear_bhb_loop+0x50/0xa0 [ 789.683514][T15667] ? clear_bhb_loop+0x50/0xa0 [ 789.688175][T15667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 789.694051][T15667] RIP: 0033:0x7f35450e1929 [ 789.698449][T15667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.718039][T15667] RSP: 002b:00007f354374a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.726441][T15667] RAX: ffffffffffffffda RBX: 00007f3545308fa0 RCX: 00007f35450e1929 [ 789.734398][T15667] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 789.742358][T15667] RBP: 00007f354374a090 R08: 0000000000000000 R09: 0000000000000000 [ 789.750314][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.758275][T15667] R13: 0000000000000000 R14: 00007f3545308fa0 R15: 00007ffeae53adc8 [ 789.766370][T15667] [ 789.882420][T15666] ================================================================== [ 789.890614][T15666] BUG: KASAN: use-after-free in consume_skb+0x3a/0x1f0 [ 789.897481][T15666] Read of size 4 at addr ffff888129d4d4ac by task syz.4.5406/15666 [ 789.905373][T15666] [ 789.907692][T15666] CPU: 1 PID: 15666 Comm: syz.4.5406 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 789.918187][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 789.928238][T15666] Call Trace: [ 789.931511][T15666] [ 789.934435][T15666] __dump_stack+0x21/0x30 [ 789.938757][T15666] dump_stack_lvl+0xee/0x150 [ 789.943330][T15666] ? show_regs_print_info+0x20/0x20 [ 789.948507][T15666] ? load_image+0x3a0/0x3a0 [ 789.952994][T15666] print_address_description+0x7f/0x2c0 [ 789.958522][T15666] ? consume_skb+0x3a/0x1f0 [ 789.963010][T15666] kasan_report+0xf1/0x140 [ 789.967413][T15666] ? consume_skb+0x3a/0x1f0 [ 789.971900][T15666] kasan_check_range+0x280/0x290 [ 789.976913][T15666] __kasan_check_read+0x11/0x20 [ 789.981752][T15666] consume_skb+0x3a/0x1f0 [ 789.986067][T15666] __sk_msg_free+0x4f4/0x560 [ 789.990645][T15666] ? _raw_spin_lock_bh+0x8e/0xe0 [ 789.995624][T15666] ? _raw_spin_lock_irq+0xe0/0xe0 [ 790.000634][T15666] ? skb_dequeue+0x125/0x160 [ 790.005212][T15666] sk_psock_stop+0x4c9/0x570 [ 790.009788][T15666] ? sock_no_sendpage_locked+0x130/0x130 [ 790.015675][T15666] sk_psock_drop+0x226/0x300 [ 790.020250][T15666] sock_map_unref+0x3c2/0x420 [ 790.024920][T15666] ? sk_psock_link_pop+0x154/0x170 [ 790.030015][T15666] sock_map_remove_links+0x3cd/0x600 [ 790.035280][T15666] ? sock_init_data+0xc0/0xc0 [ 790.039942][T15666] ? sock_map_unhash+0x130/0x130 [ 790.044863][T15666] sock_map_close+0x111/0x440 [ 790.049522][T15666] ? unix_peer_get+0xe0/0xe0 [ 790.054093][T15666] ? sock_map_remove_links+0x600/0x600 [ 790.059538][T15666] ? clear_nonspinnable+0x60/0x60 [ 790.064546][T15666] ? security_file_free+0xc7/0xe0 [ 790.069559][T15666] unix_release+0x82/0xc0 [ 790.074050][T15666] sock_close+0xe0/0x270 [ 790.078278][T15666] ? sock_mmap+0xa0/0xa0 [ 790.082511][T15666] __fput+0x20b/0x8b0 [ 790.086480][T15666] ____fput+0x15/0x20 [ 790.090542][T15666] task_work_run+0x127/0x190 [ 790.095293][T15666] exit_to_user_mode_loop+0xd0/0xe0 [ 790.100822][T15666] exit_to_user_mode_prepare+0x5a/0xa0 [ 790.106296][T15666] syscall_exit_to_user_mode+0x1a/0x30 [ 790.112011][T15666] do_syscall_64+0x58/0xa0 [ 790.116497][T15666] ? clear_bhb_loop+0x50/0xa0 [ 790.121158][T15666] ? clear_bhb_loop+0x50/0xa0 [ 790.125841][T15666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 790.131848][T15666] RIP: 0033:0x7f35450e1929 [ 790.136249][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.155841][T15666] RSP: 002b:00007ffeae53af28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 790.164243][T15666] RAX: 0000000000000000 RBX: 00007f354530aba0 RCX: 00007f35450e1929 [ 790.172636][T15666] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 790.180860][T15666] RBP: 00007f354530aba0 R08: 0000000000000000 R09: 0000000fae53b21f [ 790.189003][T15666] R10: 000000000003fd44 R11: 0000000000000246 R12: 00000000000c0ea0 [ 790.197048][T15666] R13: 00007f3545309080 R14: ffffffffffffffff R15: 00007ffeae53b040 [ 790.205104][T15666] [ 790.208110][T15666] [ 790.210589][T15666] Allocated by task 15667: [ 790.215001][T15666] __kasan_slab_alloc+0xbd/0xf0 [ 790.219841][T15666] slab_post_alloc_hook+0x4f/0x2b0 [ 790.224944][T15666] kmem_cache_alloc+0xf7/0x260 [ 790.229694][T15666] skb_clone+0x1cf/0x360 [ 790.233919][T15666] sk_psock_verdict_recv+0x53/0x800 [ 790.239103][T15666] unix_read_sock+0x10a/0x2c0 [ 790.243763][T15666] sk_psock_verdict_data_ready+0x115/0x170 [ 790.249552][T15666] unix_dgram_sendmsg+0x11e6/0x1880 [ 790.254750][T15666] ____sys_sendmsg+0x5a2/0x8c0 [ 790.259499][T15666] ___sys_sendmsg+0x1f0/0x260 [ 790.264154][T15666] __x64_sys_sendmsg+0x1e2/0x2a0 [ 790.269075][T15666] x64_sys_call+0x4b/0x9a0 [ 790.273519][T15666] do_syscall_64+0x4c/0xa0 [ 790.277953][T15666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 790.283834][T15666] [ 790.286151][T15666] Freed by task 6: [ 790.289850][T15666] kasan_set_track+0x4a/0x70 [ 790.294422][T15666] kasan_set_free_info+0x23/0x40 [ 790.299344][T15666] ____kasan_slab_free+0x125/0x160 [ 790.304438][T15666] __kasan_slab_free+0x11/0x20 [ 790.309182][T15666] slab_free_freelist_hook+0xc2/0x190 [ 790.314621][T15666] kmem_cache_free+0x100/0x320 [ 790.319369][T15666] kfree_skbmem+0x10c/0x180 [ 790.323856][T15666] kfree_skb+0xc1/0x2f0 [ 790.327994][T15666] sk_psock_backlog+0xa85/0xd80 [ 790.332833][T15666] process_one_work+0x6be/0xba0 [ 790.337686][T15666] worker_thread+0xa59/0x1200 [ 790.342351][T15666] kthread+0x411/0x500 [ 790.346409][T15666] ret_from_fork+0x1f/0x30 [ 790.350814][T15666] [ 790.353120][T15666] The buggy address belongs to the object at ffff888129d4d3c0 [ 790.353120][T15666] which belongs to the cache skbuff_head_cache of size 248 [ 790.367678][T15666] The buggy address is located 236 bytes inside of [ 790.367678][T15666] 248-byte region [ffff888129d4d3c0, ffff888129d4d4b8) [ 790.380936][T15666] The buggy address belongs to the page: [ 790.386558][T15666] page:ffffea0004a75340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129d4d [ 790.396784][T15666] flags: 0x4000000000000200(slab|zone=1) [ 790.402500][T15666] raw: 4000000000000200 ffffea000441e4c0 0000000c00000002 ffff8881081ab080 [ 790.411069][T15666] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 790.420021][T15666] page dumped because: kasan: bad access detected [ 790.426420][T15666] page_owner tracks the page as allocated [ 790.432114][T15666] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 101, ts 346536431091, free_ts 346428372373 [ 790.449632][T15666] post_alloc_hook+0x192/0x1b0 [ 790.454397][T15666] prep_new_page+0x1c/0x110 [ 790.458884][T15666] get_page_from_freelist+0x2cc5/0x2d50 [ 790.464409][T15666] __alloc_pages+0x18f/0x440 [ 790.468983][T15666] new_slab+0xa1/0x4d0 [ 790.473035][T15666] ___slab_alloc+0x381/0x810 [ 790.477609][T15666] kmem_cache_alloc_bulk+0xf7/0x340 [ 790.482806][T15666] __alloc_skb+0x526/0x740 [ 790.487207][T15666] __napi_alloc_skb+0x162/0x2e0 [ 790.492044][T15666] page_to_skb+0x287/0xb60 [ 790.496443][T15666] receive_buf+0xc17/0x49f0 [ 790.500929][T15666] virtnet_poll+0x545/0xef0 [ 790.505413][T15666] __napi_poll+0xbe/0x590 [ 790.509727][T15666] net_rx_action+0x371/0x8e0 [ 790.514298][T15666] handle_softirqs+0x250/0x560 [ 790.519047][T15666] __irq_exit_rcu+0x52/0xf0 [ 790.523536][T15666] page last free stack trace: [ 790.528188][T15666] free_unref_page_prepare+0x542/0x550 [ 790.533632][T15666] free_unref_page+0xa2/0x550 [ 790.538383][T15666] __free_pages+0x6c/0x100 [ 790.543343][T15666] free_pages+0x82/0x90 [ 790.547538][T15666] tlb_finish_mmu+0x248/0x300 [ 790.552200][T15666] exit_mmap+0x40f/0x860 [ 790.556425][T15666] __mmput+0x93/0x320 [ 790.560389][T15666] mmput+0x50/0x150 [ 790.564178][T15666] do_exit+0x9ca/0x27a0 [ 790.568315][T15666] do_group_exit+0x141/0x310 [ 790.572887][T15666] get_signal+0x66a/0x1480 [ 790.577287][T15666] arch_do_signal_or_restart+0xc1/0x10f0 [ 790.582925][T15666] exit_to_user_mode_loop+0xa7/0xe0 [ 790.588121][T15666] exit_to_user_mode_prepare+0x5a/0xa0 [ 790.593573][T15666] syscall_exit_to_user_mode+0x1a/0x30 [ 790.599018][T15666] do_syscall_64+0x58/0xa0 [ 790.603560][T15666] [ 790.605869][T15666] Memory state around the buggy address: [ 790.611652][T15666] ffff888129d4d380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 790.619868][T15666] ffff888129d4d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 790.627912][T15666] >ffff888129d4d480: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 790.635948][T15666] ^ [ 790.641306][T15666] ffff888129d4d500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 790.649361][T15666] ffff888129d4d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 790.657400][T15666] ================================================================== [ 790.665466][T15666] Disabling lock debugging due to kernel taint [ 790.671653][T15666] ================================================================== [ 790.679706][T15666] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0x100/0x320 [ 790.688125][T15666] [ 790.690447][T15666] CPU: 1 PID: 15666 Comm: syz.4.5406 Tainted: G B 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 790.701807][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.711863][T15666] Call Trace: [ 790.715142][T15666] [ 790.718066][T15666] __dump_stack+0x21/0x30 [ 790.722395][T15666] dump_stack_lvl+0xee/0x150 [ 790.726967][T15666] ? show_regs_print_info+0x20/0x20 [ 790.732174][T15666] ? load_image+0x3a0/0x3a0 [ 790.736696][T15666] print_address_description+0x7f/0x2c0 [ 790.742240][T15666] ? kmem_cache_free+0x100/0x320 [ 790.747174][T15666] kasan_report_invalid_free+0x58/0x90 [ 790.752677][T15666] ? kmem_cache_free+0x100/0x320 [ 790.757611][T15666] ____kasan_slab_free+0x13d/0x160 [ 790.762711][T15666] __kasan_slab_free+0x11/0x20 [ 790.767506][T15666] slab_free_freelist_hook+0xc2/0x190 [ 790.772866][T15666] ? kfree_skbmem+0x10c/0x180 [ 790.777532][T15666] kmem_cache_free+0x100/0x320 [ 790.782282][T15666] ? skb_release_data+0x94f/0xa10 [ 790.787293][T15666] kfree_skbmem+0x10c/0x180 [ 790.791789][T15666] consume_skb+0xb3/0x1f0 [ 790.796122][T15666] __sk_msg_free+0x4f4/0x560 [ 790.800710][T15666] ? _raw_spin_lock_bh+0x8e/0xe0 [ 790.805947][T15666] ? _raw_spin_lock_irq+0xe0/0xe0 [ 790.810975][T15666] ? skb_dequeue+0x125/0x160 [ 790.815553][T15666] sk_psock_stop+0x4c9/0x570 [ 790.820231][T15666] ? sock_no_sendpage_locked+0x130/0x130 [ 790.825850][T15666] sk_psock_drop+0x226/0x300 [ 790.830443][T15666] sock_map_unref+0x3c2/0x420 [ 790.835104][T15666] ? sk_psock_link_pop+0x154/0x170 [ 790.840203][T15666] sock_map_remove_links+0x3cd/0x600 [ 790.845504][T15666] ? sock_init_data+0xc0/0xc0 [ 790.850165][T15666] ? sock_map_unhash+0x130/0x130 [ 790.855087][T15666] sock_map_close+0x111/0x440 [ 790.859749][T15666] ? unix_peer_get+0xe0/0xe0 [ 790.864325][T15666] ? sock_map_remove_links+0x600/0x600 [ 790.869767][T15666] ? clear_nonspinnable+0x60/0x60 [ 790.874873][T15666] ? security_file_free+0xc7/0xe0 [ 790.879893][T15666] unix_release+0x82/0xc0 [ 790.884301][T15666] sock_close+0xe0/0x270 [ 790.888533][T15666] ? sock_mmap+0xa0/0xa0 [ 790.892758][T15666] __fput+0x20b/0x8b0 [ 790.896726][T15666] ____fput+0x15/0x20 [ 790.900693][T15666] task_work_run+0x127/0x190 [ 790.905264][T15666] exit_to_user_mode_loop+0xd0/0xe0 [ 790.910453][T15666] exit_to_user_mode_prepare+0x5a/0xa0 [ 790.916227][T15666] syscall_exit_to_user_mode+0x1a/0x30 [ 790.921777][T15666] do_syscall_64+0x58/0xa0 [ 790.926304][T15666] ? clear_bhb_loop+0x50/0xa0 [ 790.930985][T15666] ? clear_bhb_loop+0x50/0xa0 [ 790.935742][T15666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 790.941721][T15666] RIP: 0033:0x7f35450e1929 [ 790.946126][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.965717][T15666] RSP: 002b:00007ffeae53af28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 790.974207][T15666] RAX: 0000000000000000 RBX: 00007f354530aba0 RCX: 00007f35450e1929 [ 790.982169][T15666] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 790.990213][T15666] RBP: 00007f354530aba0 R08: 0000000000000000 R09: 0000000fae53b21f [ 790.998171][T15666] R10: 000000000003fd44 R11: 0000000000000246 R12: 00000000000c0ea0 [ 791.006132][T15666] R13: 00007f3545309080 R14: ffffffffffffffff R15: 00007ffeae53b040 [ 791.014096][T15666] [ 791.017104][T15666] [ 791.019412][T15666] Allocated by task 15667: [ 791.023871][T15666] __kasan_slab_alloc+0xbd/0xf0 [ 791.028796][T15666] slab_post_alloc_hook+0x4f/0x2b0 [ 791.033893][T15666] kmem_cache_alloc+0xf7/0x260 [ 791.038769][T15666] skb_clone+0x1cf/0x360 [ 791.042996][T15666] sk_psock_verdict_recv+0x53/0x800 [ 791.048274][T15666] unix_read_sock+0x10a/0x2c0 [ 791.052945][T15666] sk_psock_verdict_data_ready+0x115/0x170 [ 791.058742][T15666] unix_dgram_sendmsg+0x11e6/0x1880 [ 791.063935][T15666] ____sys_sendmsg+0x5a2/0x8c0 [ 791.068683][T15666] ___sys_sendmsg+0x1f0/0x260 [ 791.073341][T15666] __x64_sys_sendmsg+0x1e2/0x2a0 [ 791.078260][T15666] x64_sys_call+0x4b/0x9a0 [ 791.082681][T15666] do_syscall_64+0x4c/0xa0 [ 791.087180][T15666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 791.093618][T15666] [ 791.096055][T15666] Freed by task 6: [ 791.099966][T15666] kasan_set_track+0x4a/0x70 [ 791.104854][T15666] kasan_set_free_info+0x23/0x40 [ 791.109787][T15666] ____kasan_slab_free+0x125/0x160 [ 791.114885][T15666] __kasan_slab_free+0x11/0x20 [ 791.119630][T15666] slab_free_freelist_hook+0xc2/0x190 [ 791.124984][T15666] kmem_cache_free+0x100/0x320 [ 791.129728][T15666] kfree_skbmem+0x10c/0x180 [ 791.134304][T15666] kfree_skb+0xc1/0x2f0 [ 791.138446][T15666] sk_psock_backlog+0xa85/0xd80 [ 791.143532][T15666] process_one_work+0x6be/0xba0 [ 791.148381][T15666] worker_thread+0xa59/0x1200 [ 791.153052][T15666] kthread+0x411/0x500 [ 791.157108][T15666] ret_from_fork+0x1f/0x30 [ 791.161548][T15666] [ 791.163854][T15666] The buggy address belongs to the object at ffff888129d4d3c0 [ 791.163854][T15666] which belongs to the cache skbuff_head_cache of size 248 [ 791.178411][T15666] The buggy address is located 0 bytes inside of [ 791.178411][T15666] 248-byte region [ffff888129d4d3c0, ffff888129d4d4b8) [ 791.191583][T15666] The buggy address belongs to the page: [ 791.197196][T15666] page:ffffea0004a75340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129d4d [ 791.207596][T15666] flags: 0x4000000000000200(slab|zone=1) [ 791.213229][T15666] raw: 4000000000000200 ffffea000441e4c0 0000000c00000002 ffff8881081ab080 [ 791.221951][T15666] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 791.230522][T15666] page dumped because: kasan: bad access detected [ 791.237035][T15666] page_owner tracks the page as allocated [ 791.242733][T15666] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 101, ts 346536431091, free_ts 346428372373 [ 791.260248][T15666] post_alloc_hook+0x192/0x1b0 [ 791.265001][T15666] prep_new_page+0x1c/0x110 [ 791.269486][T15666] get_page_from_freelist+0x2cc5/0x2d50 [ 791.275014][T15666] __alloc_pages+0x18f/0x440 [ 791.279586][T15666] new_slab+0xa1/0x4d0 [ 791.283639][T15666] ___slab_alloc+0x381/0x810 [ 791.288216][T15666] kmem_cache_alloc_bulk+0xf7/0x340 [ 791.293401][T15666] __alloc_skb+0x526/0x740 [ 791.297803][T15666] __napi_alloc_skb+0x162/0x2e0 [ 791.302658][T15666] page_to_skb+0x287/0xb60 [ 791.307060][T15666] receive_buf+0xc17/0x49f0 [ 791.311741][T15666] virtnet_poll+0x545/0xef0 [ 791.316347][T15666] __napi_poll+0xbe/0x590 [ 791.320751][T15666] net_rx_action+0x371/0x8e0 [ 791.325327][T15666] handle_softirqs+0x250/0x560 [ 791.330258][T15666] __irq_exit_rcu+0x52/0xf0 [ 791.334762][T15666] page last free stack trace: [ 791.339423][T15666] free_unref_page_prepare+0x542/0x550 [ 791.344875][T15666] free_unref_page+0xa2/0x550 [ 791.349912][T15666] __free_pages+0x6c/0x100 [ 791.354310][T15666] free_pages+0x82/0x90 [ 791.358523][T15666] tlb_finish_mmu+0x248/0x300 [ 791.363185][T15666] exit_mmap+0x40f/0x860 [ 791.368105][T15666] __mmput+0x93/0x320 [ 791.372156][T15666] mmput+0x50/0x150 [ 791.376047][T15666] do_exit+0x9ca/0x27a0 [ 791.380446][T15666] do_group_exit+0x141/0x310 [ 791.385021][T15666] get_signal+0x66a/0x1480 [ 791.389423][T15666] arch_do_signal_or_restart+0xc1/0x10f0 [ 791.395757][T15666] exit_to_user_mode_loop+0xa7/0xe0 [ 791.400938][T15666] exit_to_user_mode_prepare+0x5a/0xa0 [ 791.406387][T15666] syscall_exit_to_user_mode+0x1a/0x30 [ 791.411832][T15666] do_syscall_64+0x58/0xa0 [ 791.416232][T15666] [ 791.418535][T15666] Memory state around the buggy address: [ 791.424157][T15666] ffff888129d4d280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.432207][T15666] ffff888129d4d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 791.440260][T15666] >ffff888129d4d380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 791.448300][T15666] ^ [ 791.454435][T15666] ffff888129d4d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.462478][T15666] ffff888129d4d480: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 791.470522][T15666] ================================================================== [ 791.488385][ T30] audit: type=1400 audit(1751088073.043:157): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 791.535273][ T30] audit: type=1400 audit(1751088073.043:158): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.556900][ T30] audit: type=1400 audit(1751088073.043:159): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.578865][ T30] audit: type=1400 audit(1751088073.043:160): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.601757][ T30] audit: type=1400 audit(1751088073.043:161): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 791.645361][ T30] audit: type=1400 audit(1751088073.043:162): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 791.684550][ T30] audit: type=1400 audit(1751088073.043:163): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1