last executing test programs: 16.846384016s ago: executing program 0 (id=759): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.283851157s ago: executing program 0 (id=759): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.698630666s ago: executing program 0 (id=759): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.139737067s ago: executing program 0 (id=759): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.441657784s ago: executing program 0 (id=759): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.267738227s ago: executing program 1 (id=981): socketpair(0x1a, 0x4, 0x6, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40047438, 0x20001400) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="25030f00dd2594f0"], 0xffdd) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0xda00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000e500000004001d000400000000000000026122f0c4444328225078830772ba0f85bcb1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(r3, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r4, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000001380)=[0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000001400)=[{}], 0x8, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x88, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_type(r5, &(0x7f0000000240), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x42, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90021", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0xfdef) 2.216385197s ago: executing program 4 (id=985): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000200"/28], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair(0x29, 0x0, 0x100, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00net\t\x00\x00\x00o \x00perf_event \x00rdma \x00net '], 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe884700121100632f77fbac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 2.094483297s ago: executing program 0 (id=759): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.230667314s ago: executing program 1 (id=986): r0 = syz_clone(0x40004280, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000480)="4a2d66d08fb644e27e89650de7896a3ac70d476fb103a21fce60dab3210fccc3bb485875f6430648caa666fdd717e0a1644ea207f998d5ddb777f44ea5a6ef8acb6374a60e7615f4564071a38144d48a6c28d95b513155cb5ffc8893fc43eab22303a2004db878aff35699e14b73e904e8ca45f8c28a12dc031e4c5bbdf9b8175b9b87e0d72fed0953633b6bbc1d7323dcdfae6d555fd8") perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xac7}, 0x4000, 0x0, 0x2, 0x0, 0xffffffffffffff4f, 0x0, 0xfffe}, r0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0xc, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd1a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x6}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x80000001, 0x8}, 0xc) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x80, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0xb, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x1, 0x8, 0x8, 0x3, 0x40, 0xffffffffffffffff}, @generic={0x1, 0x0, 0x4, 0x4c44}, @alu={0x7, 0x1, 0x7, 0x4cdb886e34c2bc16, 0x1, 0xffffffffffffffcd, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x1, 0x4, 0x7, 0x0, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x4, 0x7, 0xb, 0x10, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x6796, 0x1000, &(0x7f0000001400)=""/4096, 0x40f00, 0x48, '\x00', 0x0, @netfilter, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x3, 0x7, 0x2}, 0x10, r4, 0xffffffffffffffff, 0x9, &(0x7f00000008c0)=[r5, r6, r7, r8], &(0x7f0000000900)=[{0x3, 0x5, 0xf, 0xa}, {0x3, 0x5, 0xe, 0x1}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x2, 0x3, 0x1}, {0x1, 0x5, 0xb, 0x6}, {0x5, 0x5, 0x1, 0x1}, {0x4, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x13, 0x1}, {0x0, 0x1, 0x0, 0xc}], 0x10, 0x7, @void, @value}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000013c0)=0xfffff52d) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0xa, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x244180, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1100000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ffe800008000"/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000240), 0x20000000, 0x2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119100000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a80)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000ac0)={'c', ' *:* ', 'r\x00'}, 0x8) sendmsg$unix(r1, 0x0, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.226871244s ago: executing program 4 (id=989): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1000, &(0x7f0000000940), 0x0, &(0x7f00000009c0), 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 726.068572ms ago: executing program 3 (id=993): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa6c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff0000000000001, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x21) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x12, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 725.659592ms ago: executing program 2 (id=994): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000000440)="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", &(0x7f00000009c0)=""/4080, &(0x7f0000000000)="3c687edf77d1542e95a52dc44b9bb9f52abcf25818de6cbf4530bdc4eec773e41c0df5724ba597d1977c35f3aadebfdc7ecaa0d8f3bb6655df70b67af3", &(0x7f00000003c0)="843a5335b373e243f3697028728ad60b35ff3e34523d4f0a78a571c469c23824ce8665013c816df10c06d21cb1ae880b803acc1eef393e0462bd822d49334d3e644e82553c4b8b0b3942206564e612efc4813f098e480d9bdc1aefdbfc6e073719ddd306e882cb4eb1abfd41f9acd66c42e8", 0x200, r4, 0x4}, 0x38) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100), 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8000) 721.595462ms ago: executing program 3 (id=995): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xeb8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xf00, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 714.400882ms ago: executing program 2 (id=996): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x7, 0xf98}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x2, 0x6, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x22, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff7d}, [@ldst={0x1, 0x2, 0x6, 0x1, 0x1, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0xae}, @tail_call]}, &(0x7f0000000480)='syzkaller\x00', 0x4, 0x3d, &(0x7f00000004c0)=""/61, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000580)=[{0x5, 0x2, 0x2, 0x2}, {0x5, 0x1, 0xf, 0x7}], 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x4000000000}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r0}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xeb8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 613.249062ms ago: executing program 3 (id=997): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000007000000fe7f00000100000000000000", @ANYRES32, @ANYBLOB="00008259cd7d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000600), 0x0}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000f8ffffff050000005107ffff53c70200", @ANYRES32, @ANYBLOB="8000000000000000800000000000000093d40000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000040000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 32) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_int(r9, &(0x7f0000000200), 0x40000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x23, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3c90ac9e, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0xfffffffa, 0x70, &(0x7f0000000540)=""/112, 0x41100, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x9, 0x1000}, 0x10, 0x1ad8a, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r4, r0, r5, r6, r7, r8, r9], 0x0, 0x10, 0x5, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x9) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000cd35c90553da2bbabfa200000000000007020100f8c18cffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB="00000900f0f8ffffffffffff00000000000010e8610d71d7261be2482927ff717a616bdb02dac6a431c6fc01984ff0ae99cd5fac855e980e6e9f245d6f0ec1c25034c9953087c34ac038178f2eaa64bd5ac812a5b6b94c4311857f2621ace609e0f59f418c32584c4f44b4065cac4dc9fd9179d155f619efda02dd4f9a6fda8f5baf8213b9c2218c569331812e21dad86567b5d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r10}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 613.073152ms ago: executing program 4 (id=998): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="0000000000000000000b02000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fefffebf00"/28], 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x8411}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 598.255542ms ago: executing program 3 (id=999): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = syz_clone(0x80860100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, r3, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f00000001c0), 0xffbf) close(0x5) 498.853142ms ago: executing program 1 (id=1000): close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfd, '\x00', r0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000380)="743de341535c60ceac136975c43fbf", &(0x7f00000003c0)=""/82}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3b, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x1, 0x9, 0x2, 0x80, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x54661325, 0xc2, &(0x7f0000000700)=""/194, 0x40f00, 0x4, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x0, 0x5, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f00000008c0)=[{0x3, 0x5, 0x9, 0xc}, {0x0, 0x4, 0x6, 0x7}], 0x10, 0x7f, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000480)='task_newtask\x00', r3, 0x0, 0x10000}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001a00)={r2, &(0x7f0000000a00)="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"}, 0x20) r5 = syz_clone(0x300a4100, &(0x7f0000001b00)="c6932e161118350cf9eb2bd7e65c3e105c4ff9c30b5d5efb9226290fba88c7ac8cd8f9cf4565da9090bb72f9f25b927332fb3cea96db0815344ec6db03edf59e95a51c891bae17f333e5bdba6ce536465c1c7cc7833269c64e60e025e9ddf31b06dd38e3d7e2b4083e0aae6f7e3abb05358fd8683a2aafb8c0d4073ff10700ed319799eb0ea341d5bf5aec23c75ff8d26eebbb5310f94c3d036e82aafce795b3402893ec0d8ad0c3e66d07aaa07fcec86460bcc4ec18be621448e31cdbd211e2", 0xc0, &(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40)="746815e3e94fbb3f4f028a3b8cbc8f79f8d89e574cc9eb6ce12ff343de8deecb7aea1d033f91fd712d3cad2ad024533b69b1037e8b9c8151ecfcd5f9330e4ac2cf08daf08678d7e64ff3e47a810e493a5c9f9e3dda412c704f3aeb96f85d8f5c70a7d3dd6cc49f0551b50119602f5b48df42138bb4d2e7f4922fedb43eaebc3a84206721ed9aa489d84664d5fb05f3b3324b86dae8ca7938a5a66fbd5ea736e6f0") perf_event_open(&(0x7f0000001a80)={0x4, 0x80, 0xb0, 0x8, 0xed, 0x1, 0x0, 0x1000, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000001a40), 0x4}, 0x26200, 0x0, 0x401, 0x1, 0x1000, 0x6, 0x400, 0x0, 0xe, 0x0, 0x3}, r5, 0x6, r4, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r3, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000001d40)=[0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000001dc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0x32, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', r7, r4, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080)=r1, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000020c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2b, '\x00', 0x0, r9, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000021c0)={{r8}, &(0x7f0000002140), &(0x7f0000002180)='%pI4 \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000002200)='\\$,:--[^\x00') r11 = bpf$TOKEN_CREATE(0x24, &(0x7f00000023c0)={0x0, r10}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0xa, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x4, 0x8}, {0xe, 0x2}, {0x3, 0x1}, {0x9, 0x5}, {0x10, 0x3}, {0x8, 0x3}, {0x3}, {0xe, 0x1}]}, @enum64={0xb, 0x7, 0x0, 0x13, 0x0, 0x4, [{0xd, 0x2, 0x8}, {0x5, 0x5, 0x9}, {0xa, 0x2, 0x2cce}, {0x7, 0xe, 0x8}, {0x8, 0x87c}, {0x3, 0x387f5cbb, 0x1}, {0x2, 0x1, 0x3}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @var={0x2, 0x0, 0x0, 0xe, 0x1, 0x2}, @const={0xa}]}, {0x0, [0x61, 0x0, 0x61, 0x0, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f0000002340)=""/5, 0xfe, 0x5, 0x0, 0x1, 0x10000, @value=r11}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002400)={r6}, 0x4) r12 = getpid() r13 = perf_event_open(&(0x7f0000002440)={0x7, 0x80, 0x40, 0x0, 0xfe, 0x2, 0x0, 0xffffffffffffb649, 0x40, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x302b, 0x1, @perf_config_ext={0x1, 0xb}, 0x3, 0x55, 0x3, 0x3, 0xf, 0x8, 0x2, 0x0, 0x0, 0x0, 0x40}, r12, 0xd, r4, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000024c0)) socketpair(0x1, 0x2, 0x7b5fb037, &(0x7f0000002500)={0xffffffffffffffff}) recvmsg(r14, &(0x7f0000003680)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/126, 0x7e}], 0x2, &(0x7f0000003600)=""/119, 0x77}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000036c0), 0x101000, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000003700)={'tunl0\x00', 0x10}) openat$ppp(0xffffffffffffff9c, &(0x7f0000003740), 0xc0600, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003840)={&(0x7f0000003780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x1, 0x6}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000003800)=""/5, 0x4a, 0x5, 0x9, 0xffff, 0x10000, @value=r11}, 0x28) ioctl$PERF_EVENT_IOC_DISABLE(r13, 0x2401, 0x10001) socketpair(0x22, 0x3, 0x5, &(0x7f0000003880)) 336.114451ms ago: executing program 4 (id=1001): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x53, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8901, &(0x7f0000000080)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x82}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 334.657631ms ago: executing program 2 (id=1002): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x59, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000005000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='cq_drain_complete\x00', r0}, 0xfffffffffffffefd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0100000003000000040000000e0000000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 293.002671ms ago: executing program 3 (id=1003): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20c6}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20000050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 216.86071ms ago: executing program 4 (id=1004): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x1, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{r0, 0xffffffffffffffff}, &(0x7f0000002e80), &(0x7f0000002ec0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000480)={{r1}, &(0x7f0000000380), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301410000000000950000000000000015a72ccae9890cb361770d0b8ecc0b9188997af489dec263fb88a5cc80b7910f4e7463476054b6d34af92d9175c2c5b8bcfb2c9fba4052baa0be56b68da553c05f1f82e8e581cfaa4d3d44556e7ac6526f5a83a5c955244c9bed755023a9839d15b94eb8c070f47704f33aad05ba40cf8017afd2a87a39ba847f9c891462dd4ab0d280205f5d8e505c057937f6827ddc1d134e71bc6f59c29f35a5d37df35793cd813a88e6dad9ee2d5227af6cd7f6af2e392fd2f2bbe81805d2e1a8ee8c4edbadfb252cd9e071207cbe6d621ad2faa9ae76"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x110, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 163.65354ms ago: executing program 2 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000080)=ANY=[@ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 163.14506ms ago: executing program 1 (id=1006): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8500000011000000350000000000002085000000a00000009500000000000000f4670880271e3503200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f5369ec7122178602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b1b2d2747c45b0c52087b5efabf84960ba0e3c4c00356ffebfb19a34268335648e1f822de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbd775d9c07d8d591a4d8c60ff000000b78863e629b3b200000000000000000000000000008b00000000449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e20b911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x1415, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0xc0189436, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00edffffffffffffff00955c0a94c6005100009f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) (async) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x72}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) (async) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2401, 0x0) close(0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000023c0)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x2000}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 161.93538ms ago: executing program 1 (id=1007): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xeb8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 91.93371ms ago: executing program 2 (id=1008): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000000000000000100000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x80, 0xb, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x3, 0x5, 0x3e5, 0x0, 0x2}, 0x0, 0x80000000001, 0xffffffffffffffff, 0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009598c33368e639ebda7328370f060000b07be964ad1cb5ea98e6ba5ce5dcaf32a8531d756cda4ceb1a0271460d4c4083634bc844bae3748f78793152fa40bb1bf2a0341abd50997612c6cd31e929b37ffd7d139301409e0919ec26d206ef9ecc7208c5a2399cca5593df94021ce38d493d7c22ed16e8b91ccef49caf7cfde7339ee3a9f1f443e1b4dfaf6eedd67eed1b6aa3f2259268fa69c41a559dd5d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x481135f8f97ef36f, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, 0x0, 0xfdef) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x9, 0x3, 0x1, 0x8, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb0, @void, @value}, 0x90) 90.27832ms ago: executing program 4 (id=1009): socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff22, 0x0}, 0x4044800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x57f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000001000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 79.39031ms ago: executing program 3 (id=1010): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1000, &(0x7f0000000940), 0x0, &(0x7f00000009c0), 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 75.23844ms ago: executing program 1 (id=1011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x28}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000004c0)="98cf34ceed23661079a14f9f44d3731bc5b4e93d004646f2ba47568bdf807c58d79189d8beea02f46f633ab7b2a0ba6b4151c53fd029333c119f11e6b3447e5a93c9cce4b1fcabd2b39223a73aaa70301bcddc27ec4101681b922d8272ea26d00088c05756d22fcc3ef4a34b7fd48dfa8a30c40ce70713e45d3fbc5f67441b47b1586b76f1b3977969f2fe78b9a5af91a660c279fe7e654f46dcdf2d", &(0x7f0000000380)=""/62}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f0000000640)="9fd23f89a2d18e0befa3856ff9fd0bcd0c5008c177242c13fded31da50b975368b072da7b473c671a87c811a56eeac5ee80edbe0962cdaa1b04e8af73354cff35a7c059275613320299c6000b3f04b8473cb4b52c35cb7f95dfd7a38b6cda361f6b4628438ad263cb25d67bb2f631da079c748de4c58900bc1b562504fa4a5cdbd904e468652a0e0f2e69661fe29419327b6274f3e913e1e6a431fc96c961eca41caea6fc37bd414c169cf1247543ff772da282f70523605eb64e337d4e6bfe31cc907b8f6cadc3e89a3763ab66e49dbf36d079eb6596e2eaf77090ed7470b5df2f1"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x3, [{0x7, 0x1, 0x68}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}, @union={0x9, 0x2, 0x0, 0x5, 0x1, 0x9, [{0x4, 0x3, 0xc6fc}, {0x8, 0x3, 0x6}]}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x9, [{0x6, 0xfffffffd, 0x3}, {0xf, 0x0, 0x1}, {0x4, 0x4, 0x537e}, {0xb, 0x1, 0x8}, {0x9, 0x1, 0x2638b4d4}, {0x4, 0x8, 0x1}, {0x10, 0x8, 0x27a}]}]}, {0x0, [0x61]}}, &(0x7f0000000940)=""/91, 0xc3, 0x5b, 0x0, 0x400, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r5, 0x20, &(0x7f0000000b00)={&(0x7f0000000a00)=""/149, 0x95, 0x0, &(0x7f0000000ac0)=""/6, 0x6}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@x}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x15, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1012): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x1301, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xa}, 0x100800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x45a182, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000f9ffffffffffffff7fff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r6, @ANYBLOB="000000000000000018100000", @ANYRESOCT=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 332] copy_page_range+0x240c/0x26f0 [ 41.828188][ T1332] ? pfn_valid+0x1b0/0x1b0 [ 41.832430][ T1332] ? anon_vma_interval_tree_insert+0x32e/0x3a0 [ 41.838418][ T1332] ? vma_interval_tree_augment_rotate+0x1c0/0x1c0 [ 41.844670][ T1332] ? memset+0x1f/0x40 [ 41.848485][ T1332] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 41.854039][ T1332] copy_mm+0xb23/0x10d0 [ 41.858037][ T1332] ? copy_signal+0x5d0/0x5d0 [ 41.862458][ T1332] ? __init_rwsem+0xd6/0x210 [ 41.866886][ T1332] ? copy_signal+0x4b3/0x5d0 [ 41.871311][ T1332] copy_process+0x1291/0x3230 [ 41.875828][ T1332] ? proc_fail_nth_write+0x20b/0x290 [ 41.880953][ T1332] ? fork_idle+0x290/0x290 [ 41.885195][ T1332] ? memset+0x1f/0x40 [ 41.889020][ T1332] ? fsnotify+0x1280/0x1340 [ 41.893359][ T1332] ? __kernel_write+0x350/0x350 [ 41.898042][ T1332] _do_fork+0x197/0x900 [ 41.902040][ T1332] ? debug_smp_processor_id+0x20/0x20 [ 41.907251][ T1332] ? apic_timer_interrupt+0xa/0x20 [ 41.912197][ T1332] ? copy_process+0x3230/0x3230 [ 41.916882][ T1332] ? __sb_end_write+0xc4/0x120 [ 41.921485][ T1332] __x64_sys_clone+0x26b/0x2c0 [ 41.926080][ T1332] ? fput_many+0x15e/0x1b0 [ 41.930334][ T1332] ? __ia32_sys_vfork+0x110/0x110 [ 41.935195][ T1332] ? do_syscall_64+0x1f/0x1c0 [ 41.939706][ T1332] do_syscall_64+0xca/0x1c0 [ 41.944047][ T1332] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 41.949775][ T1332] RIP: 0033:0x7f1843d1ada9 [ 41.954025][ T1332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.973467][ T1332] RSP: 002b:00007f1842384fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.981720][ T1332] RAX: ffffffffffffffda RBX: 00007f1843f33fa0 RCX: 00007f1843d1ada9 [ 41.989522][ T1332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 41.997333][ T1332] RBP: 00007f1842385090 R08: 0000000000000000 R09: 0000000000000000 [ 42.005144][ T1332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 42.012956][ T1332] R13: 0000000000000000 R14: 00007f1843f33fa0 R15: 00007fffee65a9a8 [ 42.410866][ T1384] FAULT_INJECTION: forcing a failure. [ 42.410866][ T1384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.442394][ T1386] device pim6reg1 entered promiscuous mode [ 42.452524][ T1384] CPU: 0 PID: 1384 Comm: syz.3.306 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 42.462044][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.471939][ T1384] Call Trace: [ 42.475069][ T1384] dump_stack+0x1d8/0x241 [ 42.479228][ T1384] ? apic_timer_interrupt+0xa/0x20 [ 42.484178][ T1384] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 42.489823][ T1384] ? should_fail+0x700/0x880 [ 42.494245][ T1384] ? should_fail+0x71a/0x880 [ 42.498674][ T1384] should_fail+0x71f/0x880 [ 42.502939][ T1384] ? _raw_spin_unlock_irq+0x4a/0x60 [ 42.507963][ T1384] ? setup_fault_attr+0x3d0/0x3d0 [ 42.512819][ T1384] ? __schedule+0xb0d/0x1320 [ 42.517251][ T1384] __alloc_pages_nodemask+0x1b4/0x840 [ 42.522457][ T1384] ? is_mmconf_reserved+0x430/0x430 [ 42.527488][ T1384] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 42.532867][ T1384] ? preempt_schedule_common+0xa6/0xd0 [ 42.538165][ T1384] ? schedule_preempt_disabled+0x20/0x20 [ 42.543632][ T1384] pte_alloc_one+0x1b/0xb0 [ 42.547881][ T1384] __pte_alloc+0x1d/0x1c0 [ 42.552050][ T1384] copy_page_range+0x1c24/0x26f0 [ 42.556831][ T1384] ? pfn_valid+0x1b0/0x1b0 [ 42.561074][ T1384] ? up_write+0xa6/0x270 [ 42.565154][ T1384] ? memset+0x1f/0x40 [ 42.568973][ T1384] copy_mm+0xb23/0x10d0 [ 42.572968][ T1384] ? copy_signal+0x5d0/0x5d0 [ 42.577392][ T1384] ? __init_rwsem+0xd6/0x210 [ 42.581819][ T1384] ? copy_signal+0x4b3/0x5d0 [ 42.586245][ T1384] copy_process+0x1291/0x3230 [ 42.590761][ T1384] ? proc_fail_nth_write+0x20b/0x290 [ 42.595881][ T1384] ? fork_idle+0x290/0x290 [ 42.600129][ T1384] ? memset+0x1f/0x40 [ 42.603947][ T1384] ? fsnotify+0x1280/0x1340 [ 42.608292][ T1384] ? __kernel_write+0x350/0x350 [ 42.612978][ T1384] _do_fork+0x197/0x900 [ 42.616972][ T1384] ? debug_smp_processor_id+0x20/0x20 [ 42.622177][ T1384] ? __fsnotify_parent+0x310/0x310 [ 42.627126][ T1384] ? copy_process+0x3230/0x3230 [ 42.631814][ T1384] ? __x64_sys_clone+0x247/0x2c0 [ 42.636584][ T1384] ? __x64_sys_clone+0x263/0x2c0 [ 42.641360][ T1384] __x64_sys_clone+0x26b/0x2c0 [ 42.645957][ T1384] ? fput_many+0x15e/0x1b0 [ 42.650216][ T1384] ? __ia32_sys_vfork+0x110/0x110 [ 42.655075][ T1384] do_syscall_64+0xca/0x1c0 [ 42.659413][ T1384] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 42.665141][ T1384] RIP: 0033:0x7f6c901a8da9 [ 42.669393][ T1384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.688831][ T1384] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 42.697077][ T1384] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 42.704888][ T1384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 42.712705][ T1384] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 42.720509][ T1384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 42.728321][ T1384] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 42.748054][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.125630][ T23] audit: type=1400 audit(1738425509.630:133): avc: denied { attach_queue } for pid=1408 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 43.720446][ T1430] device syzkaller0 entered promiscuous mode [ 43.775491][ T1456] syz.3.330[1456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.775535][ T1456] syz.3.330[1456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.536696][ T1599] device wg2 left promiscuous mode [ 45.608445][ T1605] device wg2 entered promiscuous mode [ 47.416582][ T1699] device veth1_to_team entered promiscuous mode [ 48.055240][ T23] audit: type=1400 audit(1738425514.550:134): avc: denied { create } for pid=1718 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.334803][ T23] audit: type=1400 audit(1738425515.840:135): avc: denied { create } for pid=1758 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.715806][ T1775] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.722854][ T1775] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.808170][ T1775] device bridge0 left promiscuous mode [ 49.926416][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.933276][ T1780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.940418][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.947164][ T1780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.078399][ T1780] device bridge0 entered promiscuous mode [ 50.264328][ T1793] device syzkaller0 entered promiscuous mode [ 51.075498][ T1872] device syzkaller0 entered promiscuous mode [ 51.287097][ T1892] device syzkaller0 entered promiscuous mode [ 51.501507][ T1896] device syzkaller0 entered promiscuous mode [ 51.516213][ T1893] device sit0 entered promiscuous mode [ 51.849088][ T23] audit: type=1400 audit(1738425518.360:136): avc: denied { create } for pid=1933 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.879602][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.886559][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.945537][ T1934] device bridge0 left promiscuous mode [ 51.986159][ T1937] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.993022][ T1937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.000158][ T1937] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.006903][ T1937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.044519][ T1937] device bridge0 entered promiscuous mode [ 52.276356][ T23] audit: type=1400 audit(1738425518.790:137): avc: denied { create } for pid=1957 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.816213][ T1981] device wg2 entered promiscuous mode [ 53.345687][ T2024] device syzkaller0 entered promiscuous mode [ 53.657837][ T1999] syz.3.482 (1999) used greatest stack depth: 20504 bytes left [ 53.723107][ T23] audit: type=1400 audit(1738425520.160:138): avc: denied { write } for pid=2038 comm="syz.4.495" name="cgroup.subtree_control" dev="cgroup2" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.816109][ T23] audit: type=1400 audit(1738425520.230:139): avc: denied { open } for pid=2038 comm="syz.4.495" path="" dev="cgroup2" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.037280][ T2160] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.077962][ T2160] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.084807][ T2160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.324813][ T2172] device sit0 entered promiscuous mode [ 58.431764][ T2263] FAULT_INJECTION: forcing a failure. [ 58.431764][ T2263] name failslab, interval 1, probability 0, space 0, times 0 [ 58.448205][ T2263] CPU: 0 PID: 2263 Comm: syz.3.569 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 58.457720][ T2263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.467616][ T2263] Call Trace: [ 58.470749][ T2263] dump_stack+0x1d8/0x241 [ 58.474911][ T2263] ? apic_timer_interrupt+0xa/0x20 [ 58.479864][ T2263] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 58.485503][ T2263] should_fail+0x71f/0x880 [ 58.489757][ T2263] ? setup_fault_attr+0x3d0/0x3d0 [ 58.494617][ T2263] ? copy_mm+0x75e/0x10d0 [ 58.498789][ T2263] should_failslab+0x5/0x20 [ 58.503123][ T2263] kmem_cache_alloc+0x28/0x250 [ 58.507722][ T2263] copy_mm+0x75e/0x10d0 [ 58.511715][ T2263] ? _raw_spin_lock+0x97/0x1b0 [ 58.516316][ T2263] ? copy_signal+0x5d0/0x5d0 [ 58.520742][ T2263] ? __init_rwsem+0xd6/0x210 [ 58.525164][ T2263] ? copy_signal+0x4b3/0x5d0 [ 58.529592][ T2263] copy_process+0x1291/0x3230 [ 58.534109][ T2263] ? proc_fail_nth_write+0x20b/0x290 [ 58.539231][ T2263] ? fork_idle+0x290/0x290 [ 58.543477][ T2263] ? memset+0x1f/0x40 [ 58.547300][ T2263] ? fsnotify+0x1280/0x1340 [ 58.551639][ T2263] ? __kernel_write+0x350/0x350 [ 58.556325][ T2263] _do_fork+0x197/0x900 [ 58.560314][ T2263] ? debug_smp_processor_id+0x20/0x20 [ 58.565526][ T2263] ? __fsnotify_parent+0x310/0x310 [ 58.570474][ T2263] ? copy_process+0x3230/0x3230 [ 58.575164][ T2263] ? __sb_end_write+0xc4/0x120 [ 58.579763][ T2263] __x64_sys_clone+0x26b/0x2c0 [ 58.584359][ T2263] ? fput_many+0x15e/0x1b0 [ 58.588615][ T2263] ? __ia32_sys_vfork+0x110/0x110 [ 58.593477][ T2263] do_syscall_64+0xca/0x1c0 [ 58.597816][ T2263] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 58.603539][ T2263] RIP: 0033:0x7f6c901a8da9 [ 58.607793][ T2263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.627229][ T2263] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 58.635472][ T2263] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 58.643283][ T2263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 58.651095][ T2263] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 58.658904][ T2263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 58.666719][ T2263] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 59.385272][ T23] audit: type=1400 audit(1738425525.890:140): avc: denied { create } for pid=2313 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.496776][ T23] audit: type=1400 audit(1738425526.010:141): avc: denied { create } for pid=2326 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 59.523796][ T2323] FAULT_INJECTION: forcing a failure. [ 59.523796][ T2323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.676240][ T2323] CPU: 1 PID: 2323 Comm: syz.3.587 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 59.685773][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 59.695659][ T2323] Call Trace: [ 59.698796][ T2323] dump_stack+0x1d8/0x241 [ 59.702957][ T2323] ? panic+0x89d/0x89d [ 59.706862][ T2323] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 59.712509][ T2323] should_fail+0x71f/0x880 [ 59.716758][ T2323] ? setup_fault_attr+0x3d0/0x3d0 [ 59.721620][ T2323] __alloc_pages_nodemask+0x1b4/0x840 [ 59.726832][ T2323] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 59.732210][ T2323] ? apic_timer_interrupt+0xa/0x20 [ 59.737152][ T2323] ? apic_timer_interrupt+0xa/0x20 [ 59.742453][ T2323] ? apic_timer_interrupt+0xa/0x20 [ 59.747397][ T2323] pte_alloc_one+0x1b/0xb0 [ 59.751649][ T2323] __pte_alloc+0x1d/0x1c0 [ 59.755813][ T2323] copy_page_range+0x1c24/0x26f0 [ 59.760601][ T2323] ? pfn_valid+0x1b0/0x1b0 [ 59.764841][ T2323] ? up_write+0xa6/0x270 [ 59.768921][ T2323] ? memset+0x1f/0x40 [ 59.772740][ T2323] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 59.778291][ T2323] copy_mm+0xb23/0x10d0 [ 59.782292][ T2323] ? copy_signal+0x5d0/0x5d0 [ 59.786712][ T2323] ? __init_rwsem+0xd6/0x210 [ 59.791139][ T2323] ? copy_signal+0x4b3/0x5d0 [ 59.795566][ T2323] copy_process+0x1291/0x3230 [ 59.800081][ T2323] ? proc_fail_nth_write+0x20b/0x290 [ 59.805203][ T2323] ? fork_idle+0x290/0x290 [ 59.809453][ T2323] ? memset+0x1f/0x40 [ 59.813270][ T2323] ? fsnotify+0x1280/0x1340 [ 59.817612][ T2323] ? __kernel_write+0x350/0x350 [ 59.822299][ T2323] _do_fork+0x197/0x900 [ 59.826290][ T2323] ? debug_smp_processor_id+0x20/0x20 [ 59.831499][ T2323] ? __fsnotify_parent+0x310/0x310 [ 59.836453][ T2323] ? copy_process+0x3230/0x3230 [ 59.841132][ T2323] ? __sb_end_write+0xc4/0x120 [ 59.845734][ T2323] __x64_sys_clone+0x26b/0x2c0 [ 59.850337][ T2323] ? fput_many+0x15e/0x1b0 [ 59.854590][ T2323] ? __ia32_sys_vfork+0x110/0x110 [ 59.859456][ T2323] ? do_syscall_64+0x56/0x1c0 [ 59.863958][ T2323] ? do_syscall_64+0x72/0x1c0 [ 59.868475][ T2323] do_syscall_64+0xca/0x1c0 [ 59.872815][ T2323] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 59.878540][ T2323] RIP: 0033:0x7f6c901a8da9 [ 59.882793][ T2323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.902231][ T2323] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 59.910478][ T2323] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 59.918287][ T2323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 59.926101][ T2323] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 59.933909][ T2323] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 59.941983][ T2323] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 59.959104][ T23] audit: type=1400 audit(1738425526.470:142): avc: denied { remove_name } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=407 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.013829][ T23] audit: type=1400 audit(1738425526.470:143): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=407 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.231584][ T2341] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.311061][ T2346] O3ãc¤±: renamed from bridge_slave_0 [ 60.453624][ T2354] device syzkaller0 entered promiscuous mode [ 60.532328][ T2362] FAULT_INJECTION: forcing a failure. [ 60.532328][ T2362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.545563][ T2362] CPU: 0 PID: 2362 Comm: syz.0.601 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 60.555078][ T2362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.564969][ T2362] Call Trace: [ 60.568113][ T2362] dump_stack+0x1d8/0x241 [ 60.572264][ T2362] ? apic_timer_interrupt+0xa/0x20 [ 60.577207][ T2362] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 60.582852][ T2362] ? should_fail+0x700/0x880 [ 60.587270][ T2362] ? should_fail+0x71a/0x880 [ 60.591702][ T2362] should_fail+0x71f/0x880 [ 60.595960][ T2362] ? apic_timer_interrupt+0xa/0x20 [ 60.600903][ T2362] ? setup_fault_attr+0x3d0/0x3d0 [ 60.605765][ T2362] __alloc_pages_nodemask+0x1b4/0x840 [ 60.610972][ T2362] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 60.616352][ T2362] ? apic_timer_interrupt+0xa/0x20 [ 60.621298][ T2362] ? apic_timer_interrupt+0xa/0x20 [ 60.626245][ T2362] pte_alloc_one+0x1b/0xb0 [ 60.630494][ T2362] __pte_alloc+0x1d/0x1c0 [ 60.634664][ T2362] copy_page_range+0x1c24/0x26f0 [ 60.639446][ T2362] ? pfn_valid+0x1b0/0x1b0 [ 60.643689][ T2362] ? up_write+0xa6/0x270 [ 60.647774][ T2362] ? memset+0x1f/0x40 [ 60.651591][ T2362] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 60.657143][ T2362] copy_mm+0xb23/0x10d0 [ 60.661139][ T2362] ? copy_signal+0x5d0/0x5d0 [ 60.665561][ T2362] ? __init_rwsem+0xd6/0x210 [ 60.669986][ T2362] ? copy_signal+0x4b3/0x5d0 [ 60.674415][ T2362] copy_process+0x1291/0x3230 [ 60.678930][ T2362] ? proc_fail_nth_write+0x20b/0x290 [ 60.684053][ T2362] ? fork_idle+0x290/0x290 [ 60.688297][ T2362] ? memset+0x1f/0x40 [ 60.692117][ T2362] ? fsnotify+0x1280/0x1340 [ 60.696463][ T2362] ? __kernel_write+0x350/0x350 [ 60.701146][ T2362] _do_fork+0x197/0x900 [ 60.705141][ T2362] ? debug_smp_processor_id+0x20/0x20 [ 60.710348][ T2362] ? __fsnotify_parent+0x310/0x310 [ 60.715293][ T2362] ? copy_process+0x3230/0x3230 [ 60.719982][ T2362] ? apic_timer_interrupt+0xa/0x20 [ 60.724934][ T2362] __x64_sys_clone+0x26b/0x2c0 [ 60.729529][ T2362] ? fput_many+0x15e/0x1b0 [ 60.733784][ T2362] ? __ia32_sys_vfork+0x110/0x110 [ 60.738646][ T2362] ? do_syscall_64+0x1f/0x1c0 [ 60.743501][ T2362] do_syscall_64+0xca/0x1c0 [ 60.747842][ T2362] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 60.753567][ T2362] RIP: 0033:0x7f33b2ee6da9 [ 60.757836][ T2362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.777261][ T2362] RSP: 002b:00007f33b1550fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 60.785509][ T2362] RAX: ffffffffffffffda RBX: 00007f33b30fffa0 RCX: 00007f33b2ee6da9 [ 60.793317][ T2362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 60.801131][ T2362] RBP: 00007f33b1551090 R08: 0000000000000000 R09: 0000000000000000 [ 60.808942][ T2362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 60.816755][ T2362] R13: 0000000000000000 R14: 00007f33b30fffa0 R15: 00007ffebcd5e698 [ 60.844449][ T2350] device syzkaller0 entered promiscuous mode [ 61.124952][ T23] audit: type=1400 audit(1738425527.630:144): avc: denied { create } for pid=2384 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.432276][ T2397] FAULT_INJECTION: forcing a failure. [ 61.432276][ T2397] name failslab, interval 1, probability 0, space 0, times 0 [ 61.496097][ T2397] CPU: 1 PID: 2397 Comm: syz.2.616 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 61.505620][ T2397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.515509][ T2397] Call Trace: [ 61.518647][ T2397] dump_stack+0x1d8/0x241 [ 61.522808][ T2397] ? panic+0x89d/0x89d [ 61.526710][ T2397] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 61.532352][ T2397] ? ___ratelimit+0xb5/0x580 [ 61.536780][ T2397] should_fail+0x71f/0x880 [ 61.541032][ T2397] ? apic_timer_interrupt+0xa/0x20 [ 61.545982][ T2397] ? setup_fault_attr+0x3d0/0x3d0 [ 61.550839][ T2397] ? up_write+0xa6/0x270 [ 61.554920][ T2397] ? memset+0x1f/0x40 [ 61.558737][ T2397] ? copy_mm+0x75e/0x10d0 [ 61.562904][ T2397] should_failslab+0x5/0x20 [ 61.567244][ T2397] kmem_cache_alloc+0x28/0x250 [ 61.571842][ T2397] copy_mm+0x75e/0x10d0 [ 61.575838][ T2397] ? copy_signal+0x5d0/0x5d0 [ 61.580262][ T2397] ? __init_rwsem+0xd6/0x210 [ 61.584687][ T2397] ? copy_signal+0x4b3/0x5d0 [ 61.589116][ T2397] copy_process+0x1291/0x3230 [ 61.593630][ T2397] ? proc_fail_nth_write+0x20b/0x290 [ 61.598753][ T2397] ? fork_idle+0x290/0x290 [ 61.603000][ T2397] ? memset+0x1f/0x40 [ 61.606820][ T2397] ? fsnotify+0x1280/0x1340 [ 61.611161][ T2397] ? __kernel_write+0x350/0x350 [ 61.615846][ T2397] _do_fork+0x197/0x900 [ 61.619841][ T2397] ? debug_smp_processor_id+0x20/0x20 [ 61.625047][ T2397] ? __fsnotify_parent+0x310/0x310 [ 61.629994][ T2397] ? copy_process+0x3230/0x3230 [ 61.634683][ T2397] ? __sb_end_write+0xc4/0x120 [ 61.639283][ T2397] __x64_sys_clone+0x26b/0x2c0 [ 61.643881][ T2397] ? fput_many+0x15e/0x1b0 [ 61.648137][ T2397] ? __ia32_sys_vfork+0x110/0x110 [ 61.652996][ T2397] ? do_syscall_64+0x1f/0x1c0 [ 61.657509][ T2397] do_syscall_64+0xca/0x1c0 [ 61.661851][ T2397] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 61.667575][ T2397] RIP: 0033:0x7f64b4540da9 [ 61.671829][ T2397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.691269][ T2397] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 61.699514][ T2397] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 61.707326][ T2397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 61.715137][ T2397] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 61.722946][ T2397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 61.730759][ T2397] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 62.255558][ T2449] FAULT_INJECTION: forcing a failure. [ 62.255558][ T2449] name failslab, interval 1, probability 0, space 0, times 0 [ 62.273028][ T2449] CPU: 0 PID: 2449 Comm: syz.1.634 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 62.282548][ T2449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.292436][ T2449] Call Trace: [ 62.295572][ T2449] dump_stack+0x1d8/0x241 [ 62.299734][ T2449] ? panic+0x89d/0x89d [ 62.303651][ T2449] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 62.309288][ T2449] should_fail+0x71f/0x880 [ 62.313537][ T2449] ? setup_fault_attr+0x3d0/0x3d0 [ 62.318403][ T2449] ? init_admin_reserve+0xa0/0xa0 [ 62.323259][ T2449] ? memset+0x1f/0x40 [ 62.327074][ T2449] ? copy_mm+0x75e/0x10d0 [ 62.331242][ T2449] should_failslab+0x5/0x20 [ 62.335582][ T2449] kmem_cache_alloc+0x28/0x250 [ 62.340181][ T2449] copy_mm+0x75e/0x10d0 [ 62.344179][ T2449] ? copy_signal+0x5d0/0x5d0 [ 62.348601][ T2449] ? __init_rwsem+0xd6/0x210 [ 62.353026][ T2449] ? copy_signal+0x4b3/0x5d0 [ 62.357454][ T2449] copy_process+0x1291/0x3230 [ 62.361967][ T2449] ? proc_fail_nth_write+0x20b/0x290 [ 62.367089][ T2449] ? fork_idle+0x290/0x290 [ 62.371336][ T2449] ? memset+0x1f/0x40 [ 62.375155][ T2449] ? fsnotify+0x1280/0x1340 [ 62.379503][ T2449] ? vfs_write+0x2a1/0x4e0 [ 62.383748][ T2449] ? __fsnotify_parent+0x88/0x310 [ 62.388615][ T2449] _do_fork+0x197/0x900 [ 62.392605][ T2449] ? debug_smp_processor_id+0x20/0x20 [ 62.397813][ T2449] ? __fsnotify_parent+0x310/0x310 [ 62.402757][ T2449] ? copy_process+0x3230/0x3230 [ 62.407447][ T2449] ? __sb_end_write+0xc4/0x120 [ 62.412049][ T2449] __x64_sys_clone+0x26b/0x2c0 [ 62.416643][ T2449] ? fput_many+0x15e/0x1b0 [ 62.420901][ T2449] ? __ia32_sys_vfork+0x110/0x110 [ 62.425762][ T2449] do_syscall_64+0xca/0x1c0 [ 62.430102][ T2449] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 62.435825][ T2449] RIP: 0033:0x7f1843d1ada9 [ 62.440080][ T2449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.459517][ T2449] RSP: 002b:00007f1842384fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 62.467765][ T2449] RAX: ffffffffffffffda RBX: 00007f1843f33fa0 RCX: 00007f1843d1ada9 [ 62.475574][ T2449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 62.483386][ T2449] RBP: 00007f1842385090 R08: 0000000000000000 R09: 0000000000000000 [ 62.491197][ T2449] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 62.499010][ T2449] R13: 0000000000000000 R14: 00007f1843f33fa0 R15: 00007fffee65a9a8 [ 62.950453][ T2492] FAULT_INJECTION: forcing a failure. [ 62.950453][ T2492] name failslab, interval 1, probability 0, space 0, times 0 [ 62.970997][ T23] audit: type=1400 audit(1738425529.480:145): avc: denied { tracepoint } for pid=2499 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.987694][ T2492] CPU: 1 PID: 2492 Comm: syz.4.648 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 62.999872][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.009764][ T2492] Call Trace: [ 63.012899][ T2492] dump_stack+0x1d8/0x241 [ 63.017061][ T2492] ? panic+0x89d/0x89d [ 63.020967][ T2492] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 63.026611][ T2492] should_fail+0x71f/0x880 [ 63.030860][ T2492] ? setup_fault_attr+0x3d0/0x3d0 [ 63.035723][ T2492] ? up_write+0xa6/0x270 [ 63.039803][ T2492] ? apic_timer_interrupt+0xa/0x20 [ 63.044748][ T2492] ? copy_mm+0x75e/0x10d0 [ 63.048914][ T2492] should_failslab+0x5/0x20 [ 63.053258][ T2492] kmem_cache_alloc+0x28/0x250 [ 63.057858][ T2492] copy_mm+0x75e/0x10d0 [ 63.061855][ T2492] ? copy_signal+0x5d0/0x5d0 [ 63.066273][ T2492] ? __init_rwsem+0xd6/0x210 [ 63.070697][ T2492] ? copy_signal+0x4b3/0x5d0 [ 63.075131][ T2492] copy_process+0x1291/0x3230 [ 63.079644][ T2492] ? proc_fail_nth_write+0x20b/0x290 [ 63.084767][ T2492] ? fork_idle+0x290/0x290 [ 63.089014][ T2492] ? memset+0x1f/0x40 [ 63.092832][ T2492] ? fsnotify+0x1280/0x1340 [ 63.097176][ T2492] ? __kernel_write+0x350/0x350 [ 63.101860][ T2492] _do_fork+0x197/0x900 [ 63.105854][ T2492] ? debug_smp_processor_id+0x20/0x20 [ 63.111061][ T2492] ? __fsnotify_parent+0x310/0x310 [ 63.116011][ T2492] ? copy_process+0x3230/0x3230 [ 63.120698][ T2492] ? __x64_sys_clone+0x247/0x2c0 [ 63.125470][ T2492] ? __x64_sys_clone+0x263/0x2c0 [ 63.130247][ T2492] __x64_sys_clone+0x26b/0x2c0 [ 63.134845][ T2492] ? fput_many+0x15e/0x1b0 [ 63.139091][ T2492] ? __ia32_sys_vfork+0x110/0x110 [ 63.143950][ T2492] ? __fdget+0x189/0x200 [ 63.148030][ T2492] do_syscall_64+0xca/0x1c0 [ 63.152369][ T2492] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 63.158095][ T2492] RIP: 0033:0x7f1bcaef7da9 [ 63.162347][ T2492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.181787][ T2492] RSP: 002b:00007f1bc9561fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 63.190033][ T2492] RAX: ffffffffffffffda RBX: 00007f1bcb110fa0 RCX: 00007f1bcaef7da9 [ 63.197844][ T2492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 63.205655][ T2492] RBP: 00007f1bc9562090 R08: 0000000000000000 R09: 0000000000000000 [ 63.213467][ T2492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 63.221283][ T2492] R13: 0000000000000000 R14: 00007f1bcb110fa0 R15: 00007ffcbe18a358 [ 63.688127][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.704244][ T2527] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.711112][ T2527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.734576][ T2527] device bridge0 entered promiscuous mode [ 64.153356][ T2552] FAULT_INJECTION: forcing a failure. [ 64.153356][ T2552] name failslab, interval 1, probability 0, space 0, times 0 [ 64.187677][ T2552] CPU: 0 PID: 2552 Comm: syz.2.663 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 64.197198][ T2552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.207097][ T2552] Call Trace: [ 64.210226][ T2552] dump_stack+0x1d8/0x241 [ 64.214387][ T2552] ? panic+0x89d/0x89d [ 64.218293][ T2552] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 64.223937][ T2552] should_fail+0x71f/0x880 [ 64.228190][ T2552] ? apic_timer_interrupt+0xa/0x20 [ 64.233135][ T2552] ? setup_fault_attr+0x3d0/0x3d0 [ 64.237996][ T2552] ? __should_failslab+0x102/0x150 [ 64.242941][ T2552] ? copy_mm+0x75e/0x10d0 [ 64.247109][ T2552] should_failslab+0x5/0x20 [ 64.251449][ T2552] kmem_cache_alloc+0x28/0x250 [ 64.256047][ T2552] copy_mm+0x75e/0x10d0 [ 64.260044][ T2552] ? copy_signal+0x5d0/0x5d0 [ 64.264467][ T2552] ? __init_rwsem+0xd6/0x210 [ 64.268893][ T2552] ? copy_signal+0x4b3/0x5d0 [ 64.273321][ T2552] copy_process+0x1291/0x3230 [ 64.277843][ T2552] ? proc_fail_nth_write+0x20b/0x290 [ 64.282958][ T2552] ? fork_idle+0x290/0x290 [ 64.287205][ T2552] ? memset+0x1f/0x40 [ 64.291027][ T2552] ? fsnotify+0x1280/0x1340 [ 64.295366][ T2552] ? __kernel_write+0x350/0x350 [ 64.300060][ T2552] _do_fork+0x197/0x900 [ 64.304046][ T2552] ? debug_smp_processor_id+0x20/0x20 [ 64.309252][ T2552] ? __sb_end_write+0x1f/0x120 [ 64.313851][ T2552] ? copy_process+0x3230/0x3230 [ 64.318539][ T2552] ? __sb_end_write+0x4d/0x120 [ 64.323140][ T2552] ? __sb_end_write+0xc4/0x120 [ 64.327741][ T2552] __x64_sys_clone+0x26b/0x2c0 [ 64.332339][ T2552] ? fput_many+0x15e/0x1b0 [ 64.336594][ T2552] ? __ia32_sys_vfork+0x110/0x110 [ 64.341457][ T2552] ? do_syscall_64+0x7f/0x1c0 [ 64.345972][ T2552] do_syscall_64+0xca/0x1c0 [ 64.350308][ T2552] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 64.356034][ T2552] RIP: 0033:0x7f64b4540da9 [ 64.360290][ T2552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.379726][ T2552] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 64.387977][ T2552] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 64.395782][ T2552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 64.403594][ T2552] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 64.411405][ T2552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 64.419219][ T2552] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 65.071449][ T2582] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.078444][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.086819][ T2582] device bridge0 left promiscuous mode [ 65.221798][ T23] audit: type=1400 audit(1738425531.730:146): avc: denied { create } for pid=2594 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.288254][ T2600] FAULT_INJECTION: forcing a failure. [ 65.288254][ T2600] name failslab, interval 1, probability 0, space 0, times 0 [ 65.302929][ T2600] CPU: 1 PID: 2600 Comm: syz.1.677 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 65.312448][ T2600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.322339][ T2600] Call Trace: [ 65.325475][ T2600] dump_stack+0x1d8/0x241 [ 65.329637][ T2600] ? panic+0x89d/0x89d [ 65.333547][ T2600] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 65.339189][ T2600] should_fail+0x71f/0x880 [ 65.343442][ T2600] ? setup_fault_attr+0x3d0/0x3d0 [ 65.348297][ T2600] ? up_write+0xa6/0x270 [ 65.352374][ T2600] ? apic_timer_interrupt+0xa/0x20 [ 65.357328][ T2600] ? copy_mm+0x75e/0x10d0 [ 65.361488][ T2600] should_failslab+0x5/0x20 [ 65.365824][ T2600] kmem_cache_alloc+0x28/0x250 [ 65.370422][ T2600] copy_mm+0x75e/0x10d0 [ 65.374423][ T2600] ? copy_signal+0x5d0/0x5d0 [ 65.378842][ T2600] ? __init_rwsem+0xd6/0x210 [ 65.383267][ T2600] ? copy_signal+0x4b3/0x5d0 [ 65.387699][ T2600] copy_process+0x1291/0x3230 [ 65.392214][ T2600] ? __free_pages_core+0x2c0/0x2c0 [ 65.397166][ T2600] ? fork_idle+0x290/0x290 [ 65.401412][ T2600] ? finish_task_switch+0x252/0x590 [ 65.406452][ T2600] _do_fork+0x197/0x900 [ 65.410436][ T2600] ? copy_process+0x3230/0x3230 [ 65.415122][ T2600] ? __x64_sys_clone+0x247/0x2c0 [ 65.419908][ T2600] ? __x64_sys_clone+0x263/0x2c0 [ 65.424670][ T2600] __x64_sys_clone+0x26b/0x2c0 [ 65.429269][ T2600] ? fput_many+0x15e/0x1b0 [ 65.433523][ T2600] ? __ia32_sys_vfork+0x110/0x110 [ 65.438398][ T2600] ? do_syscall_64+0x1f/0x1c0 [ 65.442896][ T2600] do_syscall_64+0xca/0x1c0 [ 65.447240][ T2600] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 65.452975][ T2600] RIP: 0033:0x7f1843d1ada9 [ 65.457217][ T2600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.476662][ T2600] RSP: 002b:00007f1842384fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 65.484907][ T2600] RAX: ffffffffffffffda RBX: 00007f1843f33fa0 RCX: 00007f1843d1ada9 [ 65.492711][ T2600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 65.500525][ T2600] RBP: 00007f1842385090 R08: 0000000000000000 R09: 0000000000000000 [ 65.508342][ T2600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 65.516156][ T2600] R13: 0000000000000000 R14: 00007f1843f33fa0 R15: 00007fffee65a9a8 [ 65.535614][ T2610] device pim6reg1 entered promiscuous mode [ 65.903403][ T2641] FAULT_INJECTION: forcing a failure. [ 65.903403][ T2641] name failslab, interval 1, probability 0, space 0, times 0 [ 65.940518][ T2641] CPU: 0 PID: 2641 Comm: syz.2.691 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 65.950046][ T2641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.959940][ T2641] Call Trace: [ 65.963075][ T2641] dump_stack+0x1d8/0x241 [ 65.967239][ T2641] ? panic+0x89d/0x89d [ 65.971145][ T2641] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 65.976918][ T2641] ? should_fail+0x3c3/0x880 [ 65.981344][ T2641] should_fail+0x71f/0x880 [ 65.985596][ T2641] ? setup_fault_attr+0x3d0/0x3d0 [ 65.990453][ T2641] ? up_write+0xa6/0x270 [ 65.994533][ T2641] ? percpu_counter_add_batch+0x14d/0x170 [ 66.000089][ T2641] ? copy_mm+0x75e/0x10d0 [ 66.004255][ T2641] should_failslab+0x5/0x20 [ 66.008595][ T2641] kmem_cache_alloc+0x28/0x250 [ 66.013195][ T2641] copy_mm+0x75e/0x10d0 [ 66.017189][ T2641] ? copy_signal+0x5d0/0x5d0 [ 66.021613][ T2641] ? __init_rwsem+0xd6/0x210 [ 66.026039][ T2641] ? copy_signal+0x4b3/0x5d0 [ 66.030467][ T2641] copy_process+0x1291/0x3230 [ 66.034987][ T2641] ? proc_fail_nth_write+0x20b/0x290 [ 66.040106][ T2641] ? fork_idle+0x290/0x290 [ 66.044354][ T2641] ? memset+0x1f/0x40 [ 66.048173][ T2641] ? fsnotify+0x1280/0x1340 [ 66.052510][ T2641] ? __kernel_write+0x350/0x350 [ 66.057200][ T2641] _do_fork+0x197/0x900 [ 66.061191][ T2641] ? debug_smp_processor_id+0x20/0x20 [ 66.066398][ T2641] ? __fsnotify_parent+0x310/0x310 [ 66.071346][ T2641] ? copy_process+0x3230/0x3230 [ 66.076034][ T2641] ? __x64_sys_clone+0x247/0x2c0 [ 66.080805][ T2641] ? __x64_sys_clone+0x263/0x2c0 [ 66.085580][ T2641] __x64_sys_clone+0x26b/0x2c0 [ 66.090178][ T2641] ? fput_many+0x15e/0x1b0 [ 66.094432][ T2641] ? __ia32_sys_vfork+0x110/0x110 [ 66.099297][ T2641] do_syscall_64+0xca/0x1c0 [ 66.103633][ T2641] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 66.109364][ T2641] RIP: 0033:0x7f64b4540da9 [ 66.113616][ T2641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.133051][ T2641] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 66.141299][ T2641] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 66.149111][ T2641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 66.156921][ T2641] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 66.164730][ T2641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 66.172543][ T2641] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 66.476223][ T13] cfg80211: failed to load regulatory.db [ 66.735688][ T2694] device wg2 entered promiscuous mode [ 66.741431][ T2691] FAULT_INJECTION: forcing a failure. [ 66.741431][ T2691] name failslab, interval 1, probability 0, space 0, times 0 [ 66.758227][ T2691] CPU: 1 PID: 2691 Comm: syz.3.708 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 66.767745][ T2691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.777640][ T2691] Call Trace: [ 66.780776][ T2691] dump_stack+0x1d8/0x241 [ 66.784935][ T2691] ? panic+0x89d/0x89d [ 66.788839][ T2691] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 66.794483][ T2691] ? should_fail+0x3e3/0x880 [ 66.798909][ T2691] should_fail+0x71f/0x880 [ 66.803164][ T2691] ? setup_fault_attr+0x3d0/0x3d0 [ 66.808024][ T2691] ? vma_interval_tree_augment_rotate+0x1c0/0x1c0 [ 66.814274][ T2691] ? anon_vma_clone+0x47d/0x4d0 [ 66.818959][ T2691] ? anon_vma_fork+0xed/0x560 [ 66.823469][ T2691] should_failslab+0x5/0x20 [ 66.827820][ T2691] kmem_cache_alloc+0x28/0x250 [ 66.832411][ T2691] anon_vma_fork+0xed/0x560 [ 66.836752][ T2691] ? dup_userfaultfd+0x9c/0x5d0 [ 66.841434][ T2691] ? copy_mm+0x75e/0x10d0 [ 66.845601][ T2691] copy_mm+0x842/0x10d0 [ 66.849596][ T2691] ? copy_signal+0x5d0/0x5d0 [ 66.854023][ T2691] ? __init_rwsem+0xd6/0x210 [ 66.858444][ T2691] ? copy_signal+0x4b3/0x5d0 [ 66.862876][ T2691] copy_process+0x1291/0x3230 [ 66.867389][ T2691] ? proc_fail_nth_write+0x20b/0x290 [ 66.872511][ T2691] ? apic_timer_interrupt+0xa/0x20 [ 66.877458][ T2691] ? fork_idle+0x290/0x290 [ 66.881707][ T2691] ? memset+0x1f/0x40 [ 66.885525][ T2691] ? fsnotify+0x1280/0x1340 [ 66.889872][ T2691] ? __kernel_write+0x350/0x350 [ 66.894553][ T2691] _do_fork+0x197/0x900 [ 66.898546][ T2691] ? debug_smp_processor_id+0x20/0x20 [ 66.903753][ T2691] ? __fsnotify_parent+0x310/0x310 [ 66.908699][ T2691] ? copy_process+0x3230/0x3230 [ 66.913387][ T2691] ? apic_timer_interrupt+0xa/0x20 [ 66.918335][ T2691] __x64_sys_clone+0x26b/0x2c0 [ 66.922934][ T2691] ? fput_many+0x15e/0x1b0 [ 66.927192][ T2691] ? __ia32_sys_vfork+0x110/0x110 [ 66.932047][ T2691] ? do_syscall_64+0x1f/0x1c0 [ 66.936562][ T2691] do_syscall_64+0xca/0x1c0 [ 66.940901][ T2691] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 66.946630][ T2691] RIP: 0033:0x7f6c901a8da9 [ 66.950881][ T2691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.970319][ T2691] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 66.978568][ T2691] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 66.986377][ T2691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 66.994193][ T2691] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 67.002000][ T2691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 67.009814][ T2691] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 67.247181][ T23] audit: type=1400 audit(1738425533.760:147): avc: denied { setattr } for pid=2733 comm="syz.3.723" path="/net/tun" dev="devtmpfs" ino=10714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 67.347123][ T2740] device syzkaller0 entered promiscuous mode [ 67.408199][ T2744] FAULT_INJECTION: forcing a failure. [ 67.408199][ T2744] name failslab, interval 1, probability 0, space 0, times 0 [ 67.447749][ T2744] CPU: 1 PID: 2744 Comm: syz.3.726 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 67.457270][ T2744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.467166][ T2744] Call Trace: [ 67.470298][ T2744] dump_stack+0x1d8/0x241 [ 67.474461][ T2744] ? panic+0x89d/0x89d [ 67.478368][ T2744] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 67.484054][ T2744] should_fail+0x71f/0x880 [ 67.488265][ T2744] ? setup_fault_attr+0x3d0/0x3d0 [ 67.493126][ T2744] ? memset+0x2b/0x40 [ 67.496943][ T2744] ? anon_vma_clone+0x9d/0x4d0 [ 67.501543][ T2744] should_failslab+0x5/0x20 [ 67.505881][ T2744] kmem_cache_alloc+0x28/0x250 [ 67.510485][ T2744] anon_vma_clone+0x9d/0x4d0 [ 67.514911][ T2744] anon_vma_fork+0x8c/0x560 [ 67.519253][ T2744] ? dup_userfaultfd+0x9c/0x5d0 [ 67.523934][ T2744] ? copy_mm+0x75e/0x10d0 [ 67.528101][ T2744] copy_mm+0x842/0x10d0 [ 67.532099][ T2744] ? copy_signal+0x5d0/0x5d0 [ 67.536519][ T2744] ? __init_rwsem+0xd6/0x210 [ 67.540946][ T2744] ? copy_signal+0x4b3/0x5d0 [ 67.545374][ T2744] copy_process+0x1291/0x3230 [ 67.549999][ T2744] ? proc_fail_nth_write+0x20b/0x290 [ 67.555119][ T2744] ? fork_idle+0x290/0x290 [ 67.559366][ T2744] ? _do_fork+0xd7/0x900 [ 67.563445][ T2744] _do_fork+0x197/0x900 [ 67.567433][ T2744] ? debug_smp_processor_id+0x20/0x20 [ 67.572640][ T2744] ? __fsnotify_parent+0x310/0x310 [ 67.577591][ T2744] ? copy_process+0x3230/0x3230 [ 67.582279][ T2744] ? __sb_end_write+0xc4/0x120 [ 67.586876][ T2744] __x64_sys_clone+0x26b/0x2c0 [ 67.591475][ T2744] ? fput_many+0x15e/0x1b0 [ 67.595734][ T2744] ? __ia32_sys_vfork+0x110/0x110 [ 67.600588][ T2744] ? do_syscall_64+0x7f/0x1c0 [ 67.605104][ T2744] do_syscall_64+0xca/0x1c0 [ 67.609444][ T2744] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 67.615170][ T2744] RIP: 0033:0x7f6c901a8da9 [ 67.619421][ T2744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.638860][ T2744] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 67.647111][ T2744] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 67.654916][ T2744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 67.662729][ T2744] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 67.670539][ T2744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 67.678352][ T2744] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 68.071911][ T2768] device syzkaller0 entered promiscuous mode [ 68.079496][ T2791] FAULT_INJECTION: forcing a failure. [ 68.079496][ T2791] name failslab, interval 1, probability 0, space 0, times 0 [ 68.093866][ T2791] CPU: 0 PID: 2791 Comm: syz.2.741 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 68.103382][ T2791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.113271][ T2791] Call Trace: [ 68.116408][ T2791] dump_stack+0x1d8/0x241 [ 68.120565][ T2791] ? panic+0x89d/0x89d [ 68.124472][ T2791] ? __kasan_kmalloc+0x1d9/0x210 [ 68.129244][ T2791] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 68.134888][ T2791] ? kmem_cache_alloc+0xd9/0x250 [ 68.139658][ T2791] ? copy_mm+0x75e/0x10d0 [ 68.143830][ T2791] ? copy_process+0x1291/0x3230 [ 68.148514][ T2791] ? __x64_sys_clone+0x26b/0x2c0 [ 68.153288][ T2791] ? do_syscall_64+0xca/0x1c0 [ 68.157801][ T2791] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 68.163701][ T2791] should_fail+0x71f/0x880 [ 68.167958][ T2791] ? anon_vma_clone+0x9d/0x4d0 [ 68.172556][ T2791] ? setup_fault_attr+0x3d0/0x3d0 [ 68.177416][ T2791] ? __should_failslab+0xad/0x150 [ 68.182275][ T2791] ? should_fail+0x1/0x880 [ 68.186528][ T2791] ? anon_vma_clone+0x9d/0x4d0 [ 68.191133][ T2791] should_failslab+0x5/0x20 [ 68.195467][ T2791] kmem_cache_alloc+0x28/0x250 [ 68.200071][ T2791] anon_vma_clone+0x9d/0x4d0 [ 68.204497][ T2791] anon_vma_fork+0x8c/0x560 [ 68.208836][ T2791] ? dup_userfaultfd+0x9c/0x5d0 [ 68.213521][ T2791] ? copy_mm+0x75e/0x10d0 [ 68.217689][ T2791] copy_mm+0x842/0x10d0 [ 68.221681][ T2791] ? apic_timer_interrupt+0xa/0x20 [ 68.226630][ T2791] ? copy_signal+0x5d0/0x5d0 [ 68.231054][ T2791] ? __init_rwsem+0xd6/0x210 [ 68.235480][ T2791] ? copy_signal+0x4b3/0x5d0 [ 68.239909][ T2791] copy_process+0x1291/0x3230 [ 68.244425][ T2791] ? proc_fail_nth_write+0x20b/0x290 [ 68.249547][ T2791] ? fork_idle+0x290/0x290 [ 68.253803][ T2791] ? memset+0x1f/0x40 [ 68.257617][ T2791] ? fsnotify+0x1280/0x1340 [ 68.261958][ T2791] ? __kernel_write+0x350/0x350 [ 68.266764][ T2791] _do_fork+0x197/0x900 [ 68.270755][ T2791] ? debug_smp_processor_id+0x20/0x20 [ 68.275962][ T2791] ? __fsnotify_parent+0x310/0x310 [ 68.280908][ T2791] ? copy_process+0x3230/0x3230 [ 68.285596][ T2791] __x64_sys_clone+0x26b/0x2c0 [ 68.290196][ T2791] ? fput_many+0x15e/0x1b0 [ 68.294452][ T2791] ? __ia32_sys_vfork+0x110/0x110 [ 68.299310][ T2791] ? do_syscall_64+0x7f/0x1c0 [ 68.303826][ T2791] do_syscall_64+0xca/0x1c0 [ 68.308162][ T2791] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 68.313888][ T2791] RIP: 0033:0x7f64b4540da9 [ 68.318144][ T2791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.337583][ T2791] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 68.345826][ T2791] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 68.353637][ T2791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 68.361449][ T2791] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 68.369260][ T2791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 68.377074][ T2791] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 68.974023][ T23] audit: type=1400 audit(1738425535.480:148): avc: denied { create } for pid=2823 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 69.069232][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.082918][ T2832] device bridge0 left promiscuous mode [ 69.111562][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.118424][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.128357][ T2836] FAULT_INJECTION: forcing a failure. [ 69.128357][ T2836] name failslab, interval 1, probability 0, space 0, times 0 [ 69.136151][ T2832] device bridge0 entered promiscuous mode [ 69.142332][ T2836] CPU: 1 PID: 2836 Comm: syz.3.754 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 69.155847][ T2836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.165739][ T2836] Call Trace: [ 69.168873][ T2836] dump_stack+0x1d8/0x241 [ 69.173033][ T2836] ? panic+0x89d/0x89d [ 69.176943][ T2836] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 69.182580][ T2836] should_fail+0x71f/0x880 [ 69.186834][ T2836] ? setup_fault_attr+0x3d0/0x3d0 [ 69.191693][ T2836] ? percpu_counter_add_batch+0x14d/0x170 [ 69.197251][ T2836] ? copy_mm+0x75e/0x10d0 [ 69.201416][ T2836] should_failslab+0x5/0x20 [ 69.205758][ T2836] kmem_cache_alloc+0x28/0x250 [ 69.210357][ T2836] copy_mm+0x75e/0x10d0 [ 69.214351][ T2836] ? copy_signal+0x5d0/0x5d0 [ 69.218773][ T2836] ? __init_rwsem+0xd6/0x210 [ 69.223199][ T2836] ? copy_signal+0x4b3/0x5d0 [ 69.227627][ T2836] copy_process+0x1291/0x3230 [ 69.232141][ T2836] ? proc_fail_nth_write+0x20b/0x290 [ 69.237262][ T2836] ? fork_idle+0x290/0x290 [ 69.241512][ T2836] ? memset+0x1f/0x40 [ 69.245332][ T2836] ? fsnotify+0x1280/0x1340 [ 69.249672][ T2836] ? __kernel_write+0x350/0x350 [ 69.254360][ T2836] _do_fork+0x197/0x900 [ 69.258352][ T2836] ? debug_smp_processor_id+0x20/0x20 [ 69.263559][ T2836] ? __fsnotify_parent+0x310/0x310 [ 69.268506][ T2836] ? copy_process+0x3230/0x3230 [ 69.273194][ T2836] ? __sb_end_write+0xc4/0x120 [ 69.277807][ T2836] __x64_sys_clone+0x26b/0x2c0 [ 69.282396][ T2836] ? fput_many+0x15e/0x1b0 [ 69.286651][ T2836] ? __ia32_sys_vfork+0x110/0x110 [ 69.291513][ T2836] ? do_syscall_64+0x1f/0x1c0 [ 69.296024][ T2836] do_syscall_64+0xca/0x1c0 [ 69.300369][ T2836] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 69.306092][ T2836] RIP: 0033:0x7f6c901a8da9 [ 69.310343][ T2836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.329782][ T2836] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 69.338026][ T2836] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 69.345837][ T2836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 69.353648][ T2836] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 69.361458][ T2836] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 69.369269][ T2836] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 69.452067][ T2832] device syzkaller0 entered promiscuous mode [ 69.959714][ T2877] FAULT_INJECTION: forcing a failure. [ 69.959714][ T2877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.972863][ T2877] CPU: 1 PID: 2877 Comm: syz.3.768 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 69.982368][ T2877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.992261][ T2877] Call Trace: [ 69.995394][ T2877] dump_stack+0x1d8/0x241 [ 69.999568][ T2877] ? panic+0x89d/0x89d [ 70.003464][ T2877] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 70.009103][ T2877] ? check_preemption_disabled+0x9f/0x320 [ 70.014656][ T2877] ? __unwind_start+0x708/0x890 [ 70.019344][ T2877] ? debug_smp_processor_id+0x20/0x20 [ 70.024551][ T2877] should_fail+0x71f/0x880 [ 70.028807][ T2877] ? setup_fault_attr+0x3d0/0x3d0 [ 70.033672][ T2877] __alloc_pages_nodemask+0x1b4/0x840 [ 70.038876][ T2877] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 70.044261][ T2877] ? __kasan_kmalloc+0x1d9/0x210 [ 70.049026][ T2877] ? __kasan_kmalloc+0x171/0x210 [ 70.053801][ T2877] ? kmem_cache_alloc+0xd9/0x250 [ 70.058580][ T2877] pte_alloc_one+0x1b/0xb0 [ 70.062828][ T2877] __pte_alloc+0x1d/0x1c0 [ 70.066994][ T2877] copy_page_range+0x1c24/0x26f0 [ 70.071772][ T2877] ? pfn_valid+0x1b0/0x1b0 [ 70.076021][ T2877] ? up_write+0xa6/0x270 [ 70.080099][ T2877] ? memset+0x1f/0x40 [ 70.083925][ T2877] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 70.089473][ T2877] copy_mm+0xb23/0x10d0 [ 70.093469][ T2877] ? copy_signal+0x5d0/0x5d0 [ 70.097891][ T2877] ? __init_rwsem+0xd6/0x210 [ 70.102317][ T2877] ? copy_signal+0x4b3/0x5d0 [ 70.106748][ T2877] copy_process+0x1291/0x3230 [ 70.111261][ T2877] ? proc_fail_nth_write+0x20b/0x290 [ 70.116383][ T2877] ? fork_idle+0x290/0x290 [ 70.120631][ T2877] ? memset+0x1f/0x40 [ 70.124449][ T2877] ? fsnotify+0x1280/0x1340 [ 70.128791][ T2877] ? __kernel_write+0x350/0x350 [ 70.133477][ T2877] _do_fork+0x197/0x900 [ 70.137470][ T2877] ? debug_smp_processor_id+0x20/0x20 [ 70.142678][ T2877] ? __fsnotify_parent+0x310/0x310 [ 70.147630][ T2877] ? copy_process+0x3230/0x3230 [ 70.152312][ T2877] ? __x64_sys_clone+0x247/0x2c0 [ 70.157084][ T2877] ? __x64_sys_clone+0x263/0x2c0 [ 70.161862][ T2877] __x64_sys_clone+0x26b/0x2c0 [ 70.166460][ T2877] ? fput_many+0x15e/0x1b0 [ 70.170713][ T2877] ? __ia32_sys_vfork+0x110/0x110 [ 70.175573][ T2877] ? do_syscall_64+0x1f/0x1c0 [ 70.180087][ T2877] do_syscall_64+0xca/0x1c0 [ 70.184427][ T2877] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 70.190153][ T2877] RIP: 0033:0x7f6c901a8da9 [ 70.194405][ T2877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.213844][ T2877] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 70.222091][ T2877] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 70.229901][ T2877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 70.237712][ T2877] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 70.245524][ T2877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 70.253338][ T2877] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 70.322562][ T2866] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.333665][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.341092][ T2866] device bridge_slave_0 entered promiscuous mode [ 70.348317][ T2866] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.355199][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.362544][ T2866] device bridge_slave_1 entered promiscuous mode [ 70.441116][ T2881] device syzkaller0 entered promiscuous mode [ 70.627690][ T2866] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.634535][ T2866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.641679][ T2866] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.648438][ T2866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.681498][ T1117] device bridge_slave_1 left promiscuous mode [ 70.687976][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.695204][ T1117] device bridge_slave_0 left promiscuous mode [ 70.701193][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.844245][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.854938][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.868805][ T2915] FAULT_INJECTION: forcing a failure. [ 70.868805][ T2915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.882765][ T2915] CPU: 0 PID: 2915 Comm: syz.3.780 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 70.883535][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.892274][ T2915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.892278][ T2915] Call Trace: [ 70.892293][ T2915] dump_stack+0x1d8/0x241 [ 70.892302][ T2915] ? panic+0x89d/0x89d [ 70.892310][ T2915] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 70.892318][ T2915] ? check_preemption_disabled+0x9f/0x320 [ 70.892327][ T2915] ? apic_timer_interrupt+0xa/0x20 [ 70.892336][ T2915] ? debug_smp_processor_id+0x20/0x20 [ 70.892345][ T2915] should_fail+0x71f/0x880 [ 70.892354][ T2915] ? setup_fault_attr+0x3d0/0x3d0 [ 70.892362][ T2915] ? __kernel_text_address+0x94/0x100 [ 70.892372][ T2915] ? unwind_get_return_address+0x49/0x80 [ 70.892383][ T2915] __alloc_pages_nodemask+0x1b4/0x840 [ 70.892400][ T2915] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 70.899866][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.909204][ T2915] ? __kasan_kmalloc+0x1d9/0x210 [ 70.909212][ T2915] ? __kasan_kmalloc+0x171/0x210 [ 70.909219][ T2915] ? kmem_cache_alloc+0xd9/0x250 [ 70.909234][ T2915] ? apic_timer_interrupt+0xa/0x20 [ 70.998434][ T2915] pte_alloc_one+0x1b/0xb0 [ 71.002678][ T2915] __pte_alloc+0x1d/0x1c0 [ 71.006845][ T2915] copy_page_range+0x1c24/0x26f0 [ 71.011629][ T2915] ? pfn_valid+0x1b0/0x1b0 [ 71.015870][ T2915] ? up_write+0xa6/0x270 [ 71.019947][ T2915] ? memset+0x1f/0x40 [ 71.023772][ T2915] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 71.029321][ T2915] copy_mm+0xb23/0x10d0 [ 71.033317][ T2915] ? copy_signal+0x5d0/0x5d0 [ 71.037740][ T2915] ? __init_rwsem+0xd6/0x210 [ 71.042167][ T2915] ? copy_signal+0x4b3/0x5d0 [ 71.046597][ T2915] copy_process+0x1291/0x3230 [ 71.051109][ T2915] ? proc_fail_nth_write+0x20b/0x290 [ 71.056231][ T2915] ? fork_idle+0x290/0x290 [ 71.060478][ T2915] ? memset+0x1f/0x40 [ 71.064298][ T2915] ? fsnotify+0x1280/0x1340 [ 71.068639][ T2915] ? __kernel_write+0x350/0x350 [ 71.073327][ T2915] _do_fork+0x197/0x900 [ 71.077323][ T2915] ? debug_smp_processor_id+0x20/0x20 [ 71.082526][ T2915] ? __fsnotify_parent+0x310/0x310 [ 71.087474][ T2915] ? copy_process+0x3230/0x3230 [ 71.092161][ T2915] ? __sb_end_write+0xc4/0x120 [ 71.096764][ T2915] __x64_sys_clone+0x26b/0x2c0 [ 71.101361][ T2915] ? fput_many+0x15e/0x1b0 [ 71.105619][ T2915] ? __ia32_sys_vfork+0x110/0x110 [ 71.110479][ T2915] ? do_syscall_64+0x1f/0x1c0 [ 71.114986][ T2915] do_syscall_64+0xca/0x1c0 [ 71.119328][ T2915] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.125055][ T2915] RIP: 0033:0x7f6c901a8da9 [ 71.129308][ T2915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.148747][ T2915] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 71.156993][ T2915] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 71.164804][ T2915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 71.172622][ T2915] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 71.180426][ T2915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 71.188239][ T2915] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 71.202971][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.216078][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.225008][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.234329][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.242253][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.250248][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.258324][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.265165][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.272368][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.280475][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.287318][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.294501][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.302317][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.318959][ T23] audit: type=1400 audit(1738425537.830:149): avc: denied { mounton } for pid=2866 comm="syz-executor" path="/root/syzkaller.rCVjoK/syz-tmp/newroot/dev" dev="tmpfs" ino=27001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.352945][ T23] audit: type=1400 audit(1738425537.860:150): avc: denied { mounton } for pid=2866 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=12732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.419587][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.429294][ T2937] device bridge0 left promiscuous mode [ 71.495629][ T2937] syz.4.786 (2937) used obsolete PPPIOCDETACH ioctl [ 71.743762][ T2959] FAULT_INJECTION: forcing a failure. [ 71.743762][ T2959] name failslab, interval 1, probability 0, space 0, times 0 [ 71.757635][ T2959] CPU: 1 PID: 2959 Comm: syz.2.793 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 71.767153][ T2959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.777042][ T2959] Call Trace: [ 71.780175][ T2959] dump_stack+0x1d8/0x241 [ 71.784335][ T2959] ? panic+0x89d/0x89d [ 71.788242][ T2959] ? __kasan_kmalloc+0x1d9/0x210 [ 71.793016][ T2959] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 71.798658][ T2959] ? kmem_cache_alloc+0xd9/0x250 [ 71.803430][ T2959] ? copy_mm+0x75e/0x10d0 [ 71.807598][ T2959] ? copy_process+0x1291/0x3230 [ 71.812284][ T2959] ? __x64_sys_clone+0x26b/0x2c0 [ 71.817058][ T2959] ? do_syscall_64+0xca/0x1c0 [ 71.821572][ T2959] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.827474][ T2959] should_fail+0x71f/0x880 [ 71.831727][ T2959] ? setup_fault_attr+0x3d0/0x3d0 [ 71.836588][ T2959] ? anon_vma_clone+0x9d/0x4d0 [ 71.841188][ T2959] should_failslab+0x5/0x20 [ 71.845525][ T2959] kmem_cache_alloc+0x28/0x250 [ 71.850128][ T2959] anon_vma_clone+0x9d/0x4d0 [ 71.854553][ T2959] anon_vma_fork+0x8c/0x560 [ 71.858892][ T2959] ? dup_userfaultfd+0x9c/0x5d0 [ 71.863578][ T2959] ? copy_mm+0x75e/0x10d0 [ 71.867745][ T2959] copy_mm+0x842/0x10d0 [ 71.871740][ T2959] ? copy_signal+0x5d0/0x5d0 [ 71.876164][ T2959] ? __init_rwsem+0xd6/0x210 [ 71.880591][ T2959] ? copy_signal+0x4b3/0x5d0 [ 71.885017][ T2959] copy_process+0x1291/0x3230 [ 71.889534][ T2959] ? proc_fail_nth_write+0x20b/0x290 [ 71.894655][ T2959] ? fork_idle+0x290/0x290 [ 71.898902][ T2959] ? memset+0x1f/0x40 [ 71.902721][ T2959] ? fsnotify+0x1280/0x1340 [ 71.907063][ T2959] ? __kernel_write+0x350/0x350 [ 71.911751][ T2959] _do_fork+0x197/0x900 [ 71.915742][ T2959] ? debug_smp_processor_id+0x20/0x20 [ 71.920950][ T2959] ? __fsnotify_parent+0x310/0x310 [ 71.925899][ T2959] ? copy_process+0x3230/0x3230 [ 71.930590][ T2959] ? apic_timer_interrupt+0xa/0x20 [ 71.935531][ T2959] __x64_sys_clone+0x26b/0x2c0 [ 71.940133][ T2959] ? __ia32_sys_vfork+0x110/0x110 [ 71.944995][ T2959] do_syscall_64+0xca/0x1c0 [ 71.949332][ T2959] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.955058][ T2959] RIP: 0033:0x7f64b4540da9 [ 71.959313][ T2959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.978751][ T2959] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 71.986996][ T2959] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 71.994806][ T2959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 72.002619][ T2959] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 72.010432][ T2959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 72.018242][ T2959] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 72.098176][ T2948] device syzkaller0 entered promiscuous mode [ 72.264251][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.285955][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.293334][ T2950] device bridge_slave_0 entered promiscuous mode [ 72.329987][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.362535][ T2950] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.392204][ T23] audit: type=1400 audit(1738425538.900:151): avc: denied { create } for pid=2990 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.416497][ T2950] device bridge_slave_1 entered promiscuous mode [ 72.574800][ T3011] FAULT_INJECTION: forcing a failure. [ 72.574800][ T3011] name failslab, interval 1, probability 0, space 0, times 0 [ 72.596165][ T3011] CPU: 0 PID: 3011 Comm: syz.3.806 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 72.605691][ T3011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.615579][ T3011] Call Trace: [ 72.618716][ T3011] dump_stack+0x1d8/0x241 [ 72.622878][ T3011] ? panic+0x89d/0x89d [ 72.626789][ T3011] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 72.632428][ T3011] ? should_fail+0x194/0x880 [ 72.636855][ T3011] should_fail+0x71f/0x880 [ 72.641107][ T3011] ? setup_fault_attr+0x3d0/0x3d0 [ 72.645969][ T3011] ? anon_vma_clone+0x9d/0x4d0 [ 72.650564][ T3011] should_failslab+0x5/0x20 [ 72.654903][ T3011] kmem_cache_alloc+0x28/0x250 [ 72.659521][ T3011] anon_vma_clone+0x9d/0x4d0 [ 72.663942][ T3011] anon_vma_fork+0x8c/0x560 [ 72.668271][ T3011] ? dup_userfaultfd+0x9c/0x5d0 [ 72.672954][ T3011] ? copy_mm+0x75e/0x10d0 [ 72.677131][ T3011] copy_mm+0x842/0x10d0 [ 72.681118][ T3011] ? copy_signal+0x5d0/0x5d0 [ 72.685539][ T3011] ? __init_rwsem+0xd6/0x210 [ 72.689967][ T3011] ? copy_signal+0x4b3/0x5d0 [ 72.694396][ T3011] copy_process+0x1291/0x3230 [ 72.698914][ T3011] ? proc_fail_nth_write+0x20b/0x290 [ 72.704030][ T3011] ? fork_idle+0x290/0x290 [ 72.708278][ T3011] ? memset+0x1f/0x40 [ 72.712097][ T3011] ? fsnotify+0x1280/0x1340 [ 72.716442][ T3011] ? __kernel_write+0x350/0x350 [ 72.721128][ T3011] _do_fork+0x197/0x900 [ 72.725119][ T3011] ? debug_smp_processor_id+0x20/0x20 [ 72.730328][ T3011] ? __fsnotify_parent+0x310/0x310 [ 72.735276][ T3011] ? copy_process+0x3230/0x3230 [ 72.739961][ T3011] ? apic_timer_interrupt+0xa/0x20 [ 72.744911][ T3011] __x64_sys_clone+0x26b/0x2c0 [ 72.749505][ T3011] ? fput_many+0x15e/0x1b0 [ 72.753761][ T3011] ? __ia32_sys_vfork+0x110/0x110 [ 72.758623][ T3011] ? do_syscall_64+0x1f/0x1c0 [ 72.763135][ T3011] do_syscall_64+0xca/0x1c0 [ 72.767474][ T3011] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.773204][ T3011] RIP: 0033:0x7f6c901a8da9 [ 72.777454][ T3011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.796892][ T3011] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 72.805138][ T3011] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 72.812949][ T3011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 72.820760][ T3011] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 72.828570][ T3011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 72.836384][ T3011] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 72.862126][ T3022] FAULT_INJECTION: forcing a failure. [ 72.862126][ T3022] name failslab, interval 1, probability 0, space 0, times 0 [ 72.876047][ T3022] CPU: 1 PID: 3022 Comm: syz.4.809 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 72.885561][ T3022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.895450][ T3022] Call Trace: [ 72.898588][ T3022] dump_stack+0x1d8/0x241 [ 72.902753][ T3022] ? panic+0x89d/0x89d [ 72.904399][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.906656][ T3022] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 72.906664][ T3022] ? should_fail+0x3c3/0x880 [ 72.906677][ T3022] should_fail+0x71f/0x880 [ 72.913506][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.919149][ T3022] ? setup_fault_attr+0x3d0/0x3d0 [ 72.919158][ T3022] ? avc_denied+0x1d0/0x1d0 [ 72.919169][ T3022] ? __get_vm_area_node+0x183/0x310 [ 72.919183][ T3022] should_failslab+0x5/0x20 [ 72.953445][ T3022] kmem_cache_alloc_trace+0x28/0x260 [ 72.958563][ T3022] __get_vm_area_node+0x183/0x310 [ 72.963421][ T3022] ? selinux_capable+0x2f1/0x430 [ 72.968195][ T3022] __vmalloc_node_range+0xee/0x710 [ 72.973142][ T3022] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 72.978523][ T3022] __vmalloc+0x40/0x50 [ 72.982431][ T3022] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 72.987807][ T3022] bpf_prog_alloc_no_stats+0x6b/0x240 [ 72.993016][ T3022] bpf_prog_alloc+0x1a/0x1e0 [ 72.997445][ T3022] __se_sys_bpf+0x5e76/0xbcb0 [ 73.001958][ T3022] ? stack_trace_save+0x1c0/0x1c0 [ 73.006811][ T3022] ? apic_timer_interrupt+0xa/0x20 [ 73.011762][ T3022] ? _kstrtoull+0x35/0x4a0 [ 73.016009][ T3022] ? _kstrtoull+0x1f9/0x4a0 [ 73.020352][ T3022] ? _kstrtoull+0x2d9/0x4a0 [ 73.024690][ T3022] ? _kstrtoull+0x390/0x4a0 [ 73.029029][ T3022] ? __x64_sys_bpf+0x80/0x80 [ 73.033465][ T3022] ? kstrtouint_from_user+0x20a/0x2a0 [ 73.038666][ T3022] ? kstrtol_from_user+0x310/0x310 [ 73.043614][ T3022] ? get_pid_task+0xde/0x130 [ 73.048038][ T3022] ? proc_fail_nth_write+0x20b/0x290 [ 73.053157][ T3022] ? proc_fail_nth_read+0x210/0x210 [ 73.058193][ T3022] ? proc_fail_nth_read+0x210/0x210 [ 73.063227][ T3022] ? memset+0x1f/0x40 [ 73.067047][ T3022] ? fsnotify+0x1280/0x1340 [ 73.071388][ T3022] ? __kernel_write+0x350/0x350 [ 73.076074][ T3022] ? check_preemption_disabled+0x9f/0x320 [ 73.081631][ T3022] ? debug_smp_processor_id+0x20/0x20 [ 73.086837][ T3022] ? __fsnotify_parent+0x310/0x310 [ 73.091787][ T3022] ? apic_timer_interrupt+0xa/0x20 [ 73.096730][ T3022] ? ksys_write+0x1a6/0x2c0 [ 73.101069][ T3022] ? fput_many+0x15e/0x1b0 [ 73.105324][ T3022] ? check_preemption_disabled+0x153/0x320 [ 73.110967][ T3022] ? do_syscall_64+0x7f/0x1c0 [ 73.115477][ T3022] do_syscall_64+0xca/0x1c0 [ 73.119819][ T3022] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 73.125546][ T3022] RIP: 0033:0x7f1bcaef7da9 [ 73.129801][ T3022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.149236][ T3022] RSP: 002b:00007f1bc9562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.157484][ T3022] RAX: ffffffffffffffda RBX: 00007f1bcb110fa0 RCX: 00007f1bcaef7da9 [ 73.165292][ T3022] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 73.173102][ T3022] RBP: 00007f1bc9562090 R08: 0000000000000000 R09: 0000000000000000 [ 73.180916][ T3022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.188731][ T3022] R13: 0000000000000000 R14: 00007f1bcb110fa0 R15: 00007ffcbe18a358 [ 73.203960][ T3022] syz.4.809: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 73.204185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.223189][ T3022] ,cpuset=syz4,mems_allowed=0 [ 73.227862][ T3022] CPU: 1 PID: 3022 Comm: syz.4.809 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 73.237311][ T3022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.247204][ T3022] Call Trace: [ 73.250343][ T3022] dump_stack+0x1d8/0x241 [ 73.254498][ T3022] ? panic+0x89d/0x89d [ 73.258405][ T3022] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 73.264048][ T3022] ? _raw_spin_unlock_irqrestore+0x4d/0x80 [ 73.269693][ T3022] warn_alloc+0x271/0x3e0 [ 73.273852][ T3022] ? setup_fault_attr+0x3d0/0x3d0 [ 73.278712][ T3022] ? should_fail+0x491/0x880 [ 73.283139][ T3022] ? zone_watermark_ok_safe+0x280/0x280 [ 73.288522][ T3022] ? kmem_cache_alloc_trace+0x28/0x260 [ 73.293816][ T3022] ? __get_vm_area_node+0x301/0x310 [ 73.298849][ T3022] ? selinux_capable+0x2f1/0x430 [ 73.303627][ T3022] __vmalloc_node_range+0x29b/0x710 [ 73.308673][ T3022] __vmalloc+0x40/0x50 [ 73.312570][ T3022] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 73.317947][ T3022] bpf_prog_alloc_no_stats+0x6b/0x240 [ 73.323155][ T3022] bpf_prog_alloc+0x1a/0x1e0 [ 73.327582][ T3022] __se_sys_bpf+0x5e76/0xbcb0 [ 73.332096][ T3022] ? stack_trace_save+0x1c0/0x1c0 [ 73.336956][ T3022] ? apic_timer_interrupt+0xa/0x20 [ 73.341905][ T3022] ? _kstrtoull+0x35/0x4a0 [ 73.346151][ T3022] ? _kstrtoull+0x1f9/0x4a0 [ 73.350493][ T3022] ? _kstrtoull+0x2d9/0x4a0 [ 73.354834][ T3022] ? _kstrtoull+0x390/0x4a0 [ 73.359170][ T3022] ? __x64_sys_bpf+0x80/0x80 [ 73.363599][ T3022] ? kstrtouint_from_user+0x20a/0x2a0 [ 73.368807][ T3022] ? kstrtol_from_user+0x310/0x310 [ 73.373755][ T3022] ? get_pid_task+0xde/0x130 [ 73.378182][ T3022] ? proc_fail_nth_write+0x20b/0x290 [ 73.383300][ T3022] ? proc_fail_nth_read+0x210/0x210 [ 73.388335][ T3022] ? proc_fail_nth_read+0x210/0x210 [ 73.393367][ T3022] ? memset+0x1f/0x40 [ 73.397186][ T3022] ? fsnotify+0x1280/0x1340 [ 73.401529][ T3022] ? __kernel_write+0x350/0x350 [ 73.406216][ T3022] ? check_preemption_disabled+0x9f/0x320 [ 73.411769][ T3022] ? debug_smp_processor_id+0x20/0x20 [ 73.416977][ T3022] ? __fsnotify_parent+0x310/0x310 [ 73.421927][ T3022] ? apic_timer_interrupt+0xa/0x20 [ 73.426870][ T3022] ? ksys_write+0x1a6/0x2c0 [ 73.431208][ T3022] ? fput_many+0x15e/0x1b0 [ 73.435463][ T3022] ? check_preemption_disabled+0x153/0x320 [ 73.441118][ T3022] ? do_syscall_64+0x7f/0x1c0 [ 73.445619][ T3022] do_syscall_64+0xca/0x1c0 [ 73.449960][ T3022] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 73.455685][ T3022] RIP: 0033:0x7f1bcaef7da9 [ 73.459939][ T3022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.479378][ T3022] RSP: 002b:00007f1bc9562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.487624][ T3022] RAX: ffffffffffffffda RBX: 00007f1bcb110fa0 RCX: 00007f1bcaef7da9 [ 73.495435][ T3022] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 73.503245][ T3022] RBP: 00007f1bc9562090 R08: 0000000000000000 R09: 0000000000000000 [ 73.511056][ T3022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.518869][ T3022] R13: 0000000000000000 R14: 00007f1bcb110fa0 R15: 00007ffcbe18a358 [ 73.533094][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.536065][ T3022] Mem-Info: [ 73.544037][ T3022] active_anon:11238 inactive_anon:137 isolated_anon:0 [ 73.544037][ T3022] active_file:18913 inactive_file:5433 isolated_file:0 [ 73.544037][ T3022] unevictable:0 dirty:216 writeback:0 unstable:0 [ 73.544037][ T3022] slab_reclaimable:6225 slab_unreclaimable:74519 [ 73.544037][ T3022] mapped:28549 shmem:235 pagetables:398 bounce:0 [ 73.544037][ T3022] free:1577426 free_pcp:1131 free_cma:0 [ 73.553127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.590258][ T3022] Node 0 active_anon:44952kB inactive_anon:548kB active_file:75652kB inactive_file:21732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114196kB dirty:864kB writeback:0kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 73.620623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.627456][ T3022] DMA free:15908kB min:500kB low:624kB high:748kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.658148][ T3022] lowmem_reserve[]: 0 2888 6828 6828 [ 73.663442][ T3022] DMA32 free:2960296kB min:93324kB low:116652kB high:139980kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2963272kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:2976kB local_pcp:1476kB free_cma:0kB [ 73.672595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.718389][ T3022] lowmem_reserve[]: 0 0 3940 3940 [ 73.723483][ T3022] Normal free:3333156kB min:127352kB low:159188kB high:191024kB active_anon:44952kB inactive_anon:548kB active_file:75652kB inactive_file:21732kB unevictable:0kB writepending:864kB present:5242880kB managed:4035536kB mlocked:0kB kernel_stack:5056kB pagetables:1592kB bounce:0kB free_pcp:1504kB local_pcp:1024kB free_cma:0kB [ 73.745305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.765938][ T3022] lowmem_reserve[]: 0 0 0 0 [ 73.771014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.773757][ T3022] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15908kB [ 73.792326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.792983][ T3022] DMA32: 6*4kB (M) 2*8kB (M) 4*16kB (M) 4*32kB (M) 5*64kB (M) 5*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 720*4096kB (M) = 2960296kB [ 73.815436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.816707][ T3022] Normal: 287*4kB (UME) 469*8kB (UME) 411*16kB (ME) 447*32kB (UME) 334*64kB (UME) 177*128kB (UM) 87*256kB (UM) 37*512kB (UM) 11*1024kB (UME) 6*2048kB (UME) 781*4096kB (M) = 3333556kB [ 73.823060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.840952][ T3022] 24580 total pagecache pages [ 73.847630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.852071][ T3022] 0 pages in swap cache [ 73.860035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.871913][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.878753][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.886047][ T3022] Swap cache stats: add 0, delete 0, find 0/0 [ 73.894061][ T3022] Free swap = 124996kB [ 73.898271][ T3022] Total swap = 124996kB [ 73.912206][ T3022] 2097051 pages RAM [ 73.916349][ T3022] 0 pages HighMem/MovableOnly [ 73.920937][ T3022] 343372 pages reserved [ 73.924831][ T3022] 0 pages cma reserved [ 74.840357][ T3067] FAULT_INJECTION: forcing a failure. [ 74.840357][ T3067] name failslab, interval 1, probability 0, space 0, times 0 [ 75.014320][ T3067] CPU: 1 PID: 3067 Comm: syz.2.821 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 75.023848][ T3067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 75.033741][ T3067] Call Trace: [ 75.036877][ T3067] dump_stack+0x1d8/0x241 [ 75.041038][ T3067] ? panic+0x89d/0x89d [ 75.044941][ T3067] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 75.050588][ T3067] should_fail+0x71f/0x880 [ 75.054838][ T3067] ? setup_fault_attr+0x3d0/0x3d0 [ 75.059695][ T3067] ? up_write+0xa6/0x270 [ 75.063774][ T3067] ? percpu_counter_add_batch+0x14d/0x170 [ 75.069329][ T3067] ? copy_mm+0x75e/0x10d0 [ 75.073500][ T3067] should_failslab+0x5/0x20 [ 75.077835][ T3067] kmem_cache_alloc+0x28/0x250 [ 75.082438][ T3067] copy_mm+0x75e/0x10d0 [ 75.086432][ T3067] ? copy_signal+0x5d0/0x5d0 [ 75.090855][ T3067] ? __init_rwsem+0xd6/0x210 [ 75.095284][ T3067] ? copy_signal+0x4b3/0x5d0 [ 75.099712][ T3067] copy_process+0x1291/0x3230 [ 75.104230][ T3067] ? fork_idle+0x290/0x290 [ 75.108474][ T3067] ? memset+0x1f/0x40 [ 75.112292][ T3067] ? fsnotify+0x1280/0x1340 [ 75.116633][ T3067] ? __kernel_write+0x350/0x350 [ 75.121321][ T3067] _do_fork+0x197/0x900 [ 75.125313][ T3067] ? debug_smp_processor_id+0x20/0x20 [ 75.130520][ T3067] ? __fsnotify_parent+0x310/0x310 [ 75.135468][ T3067] ? copy_process+0x3230/0x3230 [ 75.140153][ T3067] ? __sb_end_write+0xc4/0x120 [ 75.144755][ T3067] __x64_sys_clone+0x26b/0x2c0 [ 75.149350][ T3067] ? fput_many+0x15e/0x1b0 [ 75.153610][ T3067] ? __ia32_sys_vfork+0x110/0x110 [ 75.158471][ T3067] do_syscall_64+0xca/0x1c0 [ 75.162809][ T3067] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 75.168534][ T3067] RIP: 0033:0x7f64b4540da9 [ 75.172791][ T3067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.192227][ T3067] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 75.200473][ T3067] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 75.208282][ T3067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 75.216095][ T3067] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 75.223906][ T3067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 75.231723][ T3067] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 75.380962][ T1117] device bridge_slave_1 left promiscuous mode [ 75.391544][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.413086][ T1117] device bridge_slave_0 left promiscuous mode [ 75.421459][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.563648][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.580322][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.604432][ T3057] device bridge_slave_0 entered promiscuous mode [ 75.625479][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.641037][ T3057] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.650193][ T3057] device bridge_slave_1 entered promiscuous mode [ 75.709296][ T3107] device pim6reg1 entered promiscuous mode [ 75.817825][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.824685][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.831828][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.838579][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.866339][ T3118] FAULT_INJECTION: forcing a failure. [ 75.866339][ T3118] name failslab, interval 1, probability 0, space 0, times 0 [ 75.885976][ T3118] CPU: 1 PID: 3118 Comm: syz.3.836 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 75.895495][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 75.905387][ T3118] Call Trace: [ 75.908526][ T3118] dump_stack+0x1d8/0x241 [ 75.912686][ T3118] ? panic+0x89d/0x89d [ 75.916593][ T3118] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 75.922238][ T3118] should_fail+0x71f/0x880 [ 75.926488][ T3118] ? setup_fault_attr+0x3d0/0x3d0 [ 75.931346][ T3118] ? memset+0x1f/0x40 [ 75.935170][ T3118] ? anon_vma_clone+0x9d/0x4d0 [ 75.939767][ T3118] should_failslab+0x5/0x20 [ 75.944105][ T3118] kmem_cache_alloc+0x28/0x250 [ 75.948709][ T3118] anon_vma_clone+0x9d/0x4d0 [ 75.953132][ T3118] anon_vma_fork+0x8c/0x560 [ 75.957469][ T3118] ? dup_userfaultfd+0x9c/0x5d0 [ 75.962159][ T3118] copy_mm+0x842/0x10d0 [ 75.966153][ T3118] ? copy_signal+0x5d0/0x5d0 [ 75.970577][ T3118] ? __init_rwsem+0xd6/0x210 [ 75.975000][ T3118] ? copy_signal+0x4b3/0x5d0 [ 75.979431][ T3118] copy_process+0x1291/0x3230 [ 75.983943][ T3118] ? proc_fail_nth_write+0x20b/0x290 [ 75.989062][ T3118] ? apic_timer_interrupt+0xa/0x20 [ 75.994015][ T3118] ? fork_idle+0x290/0x290 [ 75.998266][ T3118] ? _do_fork+0xa5/0x900 [ 76.002343][ T3118] ? check_memory_region+0x1/0x280 [ 76.007295][ T3118] _do_fork+0x197/0x900 [ 76.011287][ T3118] ? debug_smp_processor_id+0x20/0x20 [ 76.016490][ T3118] ? __fsnotify_parent+0x310/0x310 [ 76.021437][ T3118] ? copy_process+0x3230/0x3230 [ 76.026123][ T3118] ? apic_timer_interrupt+0xa/0x20 [ 76.031073][ T3118] __x64_sys_clone+0x26b/0x2c0 [ 76.035671][ T3118] ? fput_many+0x15e/0x1b0 [ 76.039925][ T3118] ? __ia32_sys_vfork+0x110/0x110 [ 76.044787][ T3118] do_syscall_64+0xca/0x1c0 [ 76.049125][ T3118] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 76.054853][ T3118] RIP: 0033:0x7f6c901a8da9 [ 76.059105][ T3118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.078541][ T3118] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 76.086788][ T3118] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 76.094600][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 76.102411][ T3118] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 76.110222][ T3118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 76.118037][ T3118] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 76.134903][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.148455][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.230021][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.244421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.292105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.330535][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.348913][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.355751][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.415612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.465664][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.474256][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.481117][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.506390][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.533118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.547825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.556780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.641643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.720270][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.774182][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.819387][ T3180] FAULT_INJECTION: forcing a failure. [ 76.819387][ T3180] name failslab, interval 1, probability 0, space 0, times 0 [ 76.833801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.859949][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.900229][ T3180] CPU: 0 PID: 3180 Comm: syz.4.852 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 76.909753][ T3180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.919646][ T3180] Call Trace: [ 76.922782][ T3180] dump_stack+0x1d8/0x241 [ 76.926943][ T3180] ? panic+0x89d/0x89d [ 76.930852][ T3180] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 76.936494][ T3180] should_fail+0x71f/0x880 [ 76.940758][ T3180] ? setup_fault_attr+0x3d0/0x3d0 [ 76.945858][ T3180] ? anon_vma_clone+0x9d/0x4d0 [ 76.950449][ T3180] should_failslab+0x5/0x20 [ 76.954783][ T3180] kmem_cache_alloc+0x28/0x250 [ 76.959378][ T3180] anon_vma_clone+0x9d/0x4d0 [ 76.963804][ T3180] anon_vma_fork+0x8c/0x560 [ 76.968144][ T3180] ? dup_userfaultfd+0x9c/0x5d0 [ 76.972830][ T3180] ? copy_mm+0x75e/0x10d0 [ 76.976994][ T3180] copy_mm+0x842/0x10d0 [ 76.980991][ T3180] ? copy_signal+0x5d0/0x5d0 [ 76.983512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.985418][ T3180] ? __init_rwsem+0xd6/0x210 [ 76.997570][ T3180] ? copy_signal+0x4b3/0x5d0 [ 77.002081][ T3180] copy_process+0x1291/0x3230 [ 77.006686][ T3180] ? proc_fail_nth_write+0x20b/0x290 [ 77.011810][ T3180] ? fork_idle+0x290/0x290 [ 77.016053][ T3180] ? memset+0x1f/0x40 [ 77.019872][ T3180] ? fsnotify+0x1280/0x1340 [ 77.024215][ T3180] ? __kernel_write+0x350/0x350 [ 77.028900][ T3180] _do_fork+0x197/0x900 [ 77.032894][ T3180] ? debug_smp_processor_id+0x20/0x20 [ 77.038097][ T3180] ? __fsnotify_parent+0x310/0x310 [ 77.043045][ T3180] ? copy_process+0x3230/0x3230 [ 77.047735][ T3180] ? __sb_end_write+0xc4/0x120 [ 77.052339][ T3180] __x64_sys_clone+0x26b/0x2c0 [ 77.056933][ T3180] ? fput_many+0x15e/0x1b0 [ 77.061187][ T3180] ? __ia32_sys_vfork+0x110/0x110 [ 77.066047][ T3180] ? do_syscall_64+0x1f/0x1c0 [ 77.070647][ T3180] do_syscall_64+0xca/0x1c0 [ 77.074988][ T3180] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 77.080714][ T3180] RIP: 0033:0x7f1bcaef7da9 [ 77.084967][ T3180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.104405][ T3180] RSP: 002b:00007f1bc9561fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 77.112655][ T3180] RAX: ffffffffffffffda RBX: 00007f1bcb110fa0 RCX: 00007f1bcaef7da9 [ 77.120462][ T3180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 77.128273][ T3180] RBP: 00007f1bc9562090 R08: 0000000000000000 R09: 0000000000000000 [ 77.136083][ T3180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 77.143897][ T3180] R13: 0000000000000000 R14: 00007f1bcb110fa0 R15: 00007ffcbe18a358 [ 77.166429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.175444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.195029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.215450][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.382850][ T3201] device syzkaller0 entered promiscuous mode [ 77.856133][ T1117] device bridge_slave_1 left promiscuous mode [ 77.862085][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.869374][ T1117] device bridge_slave_0 left promiscuous mode [ 77.875279][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.109765][ T3221] bridge0: port 3(dummy0) entered blocking state [ 78.116795][ T3221] bridge0: port 3(dummy0) entered disabled state [ 78.123446][ T3221] device dummy0 entered promiscuous mode [ 78.273558][ T3220] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.288347][ T3220] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.317964][ T3220] device bridge_slave_0 entered promiscuous mode [ 78.359652][ T3220] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.378542][ T3243] FAULT_INJECTION: forcing a failure. [ 78.378542][ T3243] name failslab, interval 1, probability 0, space 0, times 0 [ 78.391023][ T3220] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.406476][ T3220] device bridge_slave_1 entered promiscuous mode [ 78.424941][ T3243] CPU: 0 PID: 3243 Comm: syz.2.870 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 78.434457][ T3243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.444350][ T3243] Call Trace: [ 78.447485][ T3243] dump_stack+0x1d8/0x241 [ 78.451649][ T3243] ? panic+0x89d/0x89d [ 78.455555][ T3243] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 78.461197][ T3243] ? should_fail+0x3c3/0x880 [ 78.465622][ T3243] should_fail+0x71f/0x880 [ 78.469881][ T3243] ? setup_fault_attr+0x3d0/0x3d0 [ 78.474736][ T3243] ? anon_vma_fork+0x1ed/0x560 [ 78.479336][ T3243] should_failslab+0x5/0x20 [ 78.483676][ T3243] kmem_cache_alloc+0x28/0x250 [ 78.488276][ T3243] anon_vma_fork+0x1ed/0x560 [ 78.492702][ T3243] ? dup_userfaultfd+0x9c/0x5d0 [ 78.497390][ T3243] ? copy_mm+0x75e/0x10d0 [ 78.501557][ T3243] copy_mm+0x842/0x10d0 [ 78.505550][ T3243] ? copy_signal+0x5d0/0x5d0 [ 78.509975][ T3243] ? __init_rwsem+0xd6/0x210 [ 78.514403][ T3243] ? copy_signal+0x4b3/0x5d0 [ 78.518830][ T3243] copy_process+0x1291/0x3230 [ 78.523344][ T3243] ? proc_fail_nth_write+0x20b/0x290 [ 78.528461][ T3243] ? debug_smp_processor_id+0x20/0x20 [ 78.533674][ T3243] ? fork_idle+0x290/0x290 [ 78.537920][ T3243] ? memset+0x1f/0x40 [ 78.541743][ T3243] ? fsnotify+0x1280/0x1340 [ 78.546082][ T3243] ? __kernel_write+0x350/0x350 [ 78.550769][ T3243] _do_fork+0x197/0x900 [ 78.554763][ T3243] ? debug_smp_processor_id+0x20/0x20 [ 78.559972][ T3243] ? __fsnotify_parent+0x310/0x310 [ 78.564914][ T3243] ? copy_process+0x3230/0x3230 [ 78.569603][ T3243] ? apic_timer_interrupt+0xa/0x20 [ 78.574551][ T3243] __x64_sys_clone+0x26b/0x2c0 [ 78.579147][ T3243] ? fput_many+0x15e/0x1b0 [ 78.583402][ T3243] ? __ia32_sys_vfork+0x110/0x110 [ 78.588267][ T3243] do_syscall_64+0xca/0x1c0 [ 78.592602][ T3243] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 78.598336][ T3243] RIP: 0033:0x7f64b4540da9 [ 78.602583][ T3243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.622019][ T3243] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 78.630271][ T3243] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 78.638076][ T3243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 78.645888][ T3243] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 78.653700][ T3243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 78.661511][ T3243] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 78.818682][ T3220] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.825541][ T3220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.832668][ T3220] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.839430][ T3220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.915405][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.926783][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.937895][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.983890][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.150228][ T23] audit: type=1400 audit(1738425545.660:152): avc: denied { create } for pid=3260 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 79.254260][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.263988][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.270874][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.278062][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.286137][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.292961][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.309955][ T3284] FAULT_INJECTION: forcing a failure. [ 79.309955][ T3284] name failslab, interval 1, probability 0, space 0, times 0 [ 79.349135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.355409][ T3284] CPU: 0 PID: 3284 Comm: syz.2.885 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 79.366304][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.376192][ T3284] Call Trace: [ 79.376268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.379327][ T3284] dump_stack+0x1d8/0x241 [ 79.379339][ T3284] ? panic+0x89d/0x89d [ 79.394954][ T3284] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 79.400592][ T3284] should_fail+0x71f/0x880 [ 79.404844][ T3284] ? setup_fault_attr+0x3d0/0x3d0 [ 79.409704][ T3284] ? memset+0x1f/0x40 [ 79.413522][ T3284] ? anon_vma_clone+0x9d/0x4d0 [ 79.418124][ T3284] should_failslab+0x5/0x20 [ 79.422460][ T3284] kmem_cache_alloc+0x28/0x250 [ 79.427065][ T3284] anon_vma_clone+0x9d/0x4d0 [ 79.431488][ T3284] anon_vma_fork+0x8c/0x560 [ 79.435827][ T3284] ? dup_userfaultfd+0x9c/0x5d0 [ 79.440511][ T3284] ? copy_mm+0x75e/0x10d0 [ 79.444679][ T3284] copy_mm+0x842/0x10d0 [ 79.448681][ T3284] ? copy_signal+0x5d0/0x5d0 [ 79.453103][ T3284] ? __init_rwsem+0xd6/0x210 [ 79.457523][ T3284] ? copy_signal+0x4b3/0x5d0 [ 79.461953][ T3284] copy_process+0x1291/0x3230 [ 79.466467][ T3284] ? proc_fail_nth_write+0x20b/0x290 [ 79.471587][ T3284] ? fork_idle+0x290/0x290 [ 79.475839][ T3284] ? memset+0x1f/0x40 [ 79.479657][ T3284] ? fsnotify+0x1280/0x1340 [ 79.483997][ T3284] ? __kernel_write+0x350/0x350 [ 79.488684][ T3284] _do_fork+0x197/0x900 [ 79.492674][ T3284] ? debug_smp_processor_id+0x20/0x20 [ 79.497881][ T3284] ? __fsnotify_parent+0x310/0x310 [ 79.502829][ T3284] ? copy_process+0x3230/0x3230 [ 79.507517][ T3284] ? __x64_sys_clone+0x247/0x2c0 [ 79.512292][ T3284] __x64_sys_clone+0x26b/0x2c0 [ 79.517012][ T3284] ? fput_many+0x15e/0x1b0 [ 79.521260][ T3284] ? __ia32_sys_vfork+0x110/0x110 [ 79.526116][ T3284] ? do_syscall_64+0x7f/0x1c0 [ 79.530630][ T3284] do_syscall_64+0xca/0x1c0 [ 79.534979][ T3284] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 79.540693][ T3284] RIP: 0033:0x7f64b4540da9 [ 79.544943][ T3284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.564385][ T3284] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 79.572635][ T3284] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 79.580440][ T3284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 79.588250][ T3284] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 79.596061][ T3284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 79.603874][ T3284] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 79.612237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.661816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.716061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.729401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.741244][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.750748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.776163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.784619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.810678][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.821329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.830348][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.839431][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.907359][ T3319] device syzkaller0 entered promiscuous mode [ 80.333439][ T1117] device bridge_slave_1 left promiscuous mode [ 80.339452][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.346662][ T1117] device bridge_slave_0 left promiscuous mode [ 80.352620][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.867818][ T3345] FAULT_INJECTION: forcing a failure. [ 80.867818][ T3345] name failslab, interval 1, probability 0, space 0, times 0 [ 80.902129][ T3345] CPU: 1 PID: 3345 Comm: syz.3.902 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 80.911664][ T3345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.921551][ T3345] Call Trace: [ 80.924689][ T3345] dump_stack+0x1d8/0x241 [ 80.928855][ T3345] ? panic+0x89d/0x89d [ 80.932759][ T3345] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 80.938401][ T3345] should_fail+0x71f/0x880 [ 80.942654][ T3345] ? setup_fault_attr+0x3d0/0x3d0 [ 80.947511][ T3345] ? anon_vma_clone+0x9d/0x4d0 [ 80.952111][ T3345] should_failslab+0x5/0x20 [ 80.956449][ T3345] kmem_cache_alloc+0x28/0x250 [ 80.961052][ T3345] anon_vma_clone+0x9d/0x4d0 [ 80.965478][ T3345] anon_vma_fork+0x8c/0x560 [ 80.969820][ T3345] ? dup_userfaultfd+0x9c/0x5d0 [ 80.974503][ T3345] ? copy_mm+0x75e/0x10d0 [ 80.978668][ T3345] copy_mm+0x842/0x10d0 [ 80.982665][ T3345] ? copy_signal+0x5d0/0x5d0 [ 80.987088][ T3345] ? __init_rwsem+0xd6/0x210 [ 80.991511][ T3345] ? copy_signal+0x4b3/0x5d0 [ 80.995942][ T3345] copy_process+0x1291/0x3230 [ 81.000457][ T3345] ? proc_fail_nth_write+0x20b/0x290 [ 81.005578][ T3345] ? fork_idle+0x290/0x290 [ 81.009830][ T3345] _do_fork+0x197/0x900 [ 81.013820][ T3345] ? debug_smp_processor_id+0x20/0x20 [ 81.019029][ T3345] ? __fsnotify_parent+0x310/0x310 [ 81.023976][ T3345] ? copy_process+0x3230/0x3230 [ 81.028661][ T3345] ? __sb_end_write+0xc4/0x120 [ 81.033262][ T3345] __x64_sys_clone+0x26b/0x2c0 [ 81.037859][ T3345] ? fput_many+0x15e/0x1b0 [ 81.042118][ T3345] ? __ia32_sys_vfork+0x110/0x110 [ 81.046980][ T3345] ? __fdget+0x189/0x200 [ 81.051057][ T3345] do_syscall_64+0xca/0x1c0 [ 81.055397][ T3345] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.061125][ T3345] RIP: 0033:0x7f6c901a8da9 [ 81.065376][ T3345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.084813][ T3345] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.093059][ T3345] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 81.100878][ T3345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 81.108683][ T3345] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 81.116494][ T3345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 81.124305][ T3345] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 81.504595][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.511451][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.519061][ T3365] device bridge_slave_0 entered promiscuous mode [ 81.530291][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.543048][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.550682][ T3365] device bridge_slave_1 entered promiscuous mode [ 81.661001][ T3411] FAULT_INJECTION: forcing a failure. [ 81.661001][ T3411] name failslab, interval 1, probability 0, space 0, times 0 [ 81.677807][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.683737][ T3411] CPU: 1 PID: 3411 Comm: syz.1.923 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 81.694273][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.695012][ T3416] device bridge0 left promiscuous mode [ 81.704166][ T3411] Call Trace: [ 81.704182][ T3411] dump_stack+0x1d8/0x241 [ 81.704190][ T3411] ? panic+0x89d/0x89d [ 81.704204][ T3411] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 81.726309][ T3411] should_fail+0x71f/0x880 [ 81.730562][ T3411] ? setup_fault_attr+0x3d0/0x3d0 [ 81.735419][ T3411] ? anon_vma_fork+0x1ed/0x560 [ 81.740020][ T3411] should_failslab+0x5/0x20 [ 81.744358][ T3411] kmem_cache_alloc+0x28/0x250 [ 81.748959][ T3411] anon_vma_fork+0x1ed/0x560 [ 81.753386][ T3411] ? dup_userfaultfd+0x9c/0x5d0 [ 81.758074][ T3411] copy_mm+0x842/0x10d0 [ 81.762071][ T3411] ? copy_signal+0x5d0/0x5d0 [ 81.766492][ T3411] ? __init_rwsem+0xd6/0x210 [ 81.770918][ T3411] ? copy_signal+0x4b3/0x5d0 [ 81.775345][ T3411] copy_process+0x1291/0x3230 [ 81.779861][ T3411] ? proc_fail_nth_write+0x20b/0x290 [ 81.784986][ T3411] ? fork_idle+0x290/0x290 [ 81.789228][ T3411] ? memset+0x1f/0x40 [ 81.793050][ T3411] ? fsnotify+0x1280/0x1340 [ 81.797393][ T3411] ? __kernel_write+0x350/0x350 [ 81.802079][ T3411] _do_fork+0x197/0x900 [ 81.806070][ T3411] ? debug_smp_processor_id+0x20/0x20 [ 81.811275][ T3411] ? __fsnotify_parent+0x310/0x310 [ 81.816226][ T3411] ? copy_process+0x3230/0x3230 [ 81.820917][ T3411] ? __x64_sys_clone+0x247/0x2c0 [ 81.825683][ T3411] ? __x64_sys_clone+0x263/0x2c0 [ 81.830463][ T3411] __x64_sys_clone+0x26b/0x2c0 [ 81.835060][ T3411] ? fput_many+0x15e/0x1b0 [ 81.839314][ T3411] ? __ia32_sys_vfork+0x110/0x110 [ 81.844175][ T3411] do_syscall_64+0xca/0x1c0 [ 81.848512][ T3411] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.854237][ T3411] RIP: 0033:0x7f1843d1ada9 [ 81.858490][ T3411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.877931][ T3411] RSP: 002b:00007f1842384fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.886176][ T3411] RAX: ffffffffffffffda RBX: 00007f1843f33fa0 RCX: 00007f1843d1ada9 [ 81.893986][ T3411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 81.901798][ T3411] RBP: 00007f1842385090 R08: 0000000000000000 R09: 0000000000000000 [ 81.909609][ T3411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 81.917421][ T3411] R13: 0000000000000000 R14: 00007f1843f33fa0 R15: 00007fffee65a9a8 [ 81.998757][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.005612][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.012741][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.019502][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.154235][ T3432] device syzkaller0 entered promiscuous mode [ 82.473558][ T3422] device syzkaller0 entered promiscuous mode [ 82.532429][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.548206][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.622045][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.633899][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.665776][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.674569][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.680162][ T3458] FAULT_INJECTION: forcing a failure. [ 82.680162][ T3458] name failslab, interval 1, probability 0, space 0, times 0 [ 82.683210][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.696329][ T3458] CPU: 1 PID: 3458 Comm: syz.2.935 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 82.701626][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.711158][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.711161][ T3458] Call Trace: [ 82.711177][ T3458] dump_stack+0x1d8/0x241 [ 82.711189][ T3458] ? panic+0x89d/0x89d [ 82.719382][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.728102][ T3458] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 82.728109][ T3458] ? should_fail+0x3c3/0x880 [ 82.728121][ T3458] should_fail+0x71f/0x880 [ 82.731552][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.735382][ T3458] ? setup_fault_attr+0x3d0/0x3d0 [ 82.739895][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.747185][ T3458] ? memset+0x1f/0x40 [ 82.747194][ T3458] ? anon_vma_clone+0x9d/0x4d0 [ 82.747203][ T3458] should_failslab+0x5/0x20 [ 82.747217][ T3458] kmem_cache_alloc+0x28/0x250 [ 82.752824][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.757250][ T3458] anon_vma_clone+0x9d/0x4d0 [ 82.757265][ T3458] anon_vma_fork+0x8c/0x560 [ 82.771857][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.774184][ T3458] ? dup_userfaultfd+0x9c/0x5d0 [ 82.781532][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.784852][ T3458] ? copy_mm+0x75e/0x10d0 [ 82.784867][ T3458] copy_mm+0x842/0x10d0 [ 82.790361][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.793798][ T3458] ? copy_signal+0x5d0/0x5d0 [ 82.798850][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.805424][ T3458] ? __init_rwsem+0xd6/0x210 [ 82.805436][ T3458] ? copy_signal+0x4b3/0x5d0 [ 82.855720][ T3456] device syzkaller0 entered promiscuous mode [ 82.861847][ T3458] copy_process+0x1291/0x3230 [ 82.861860][ T3458] ? proc_fail_nth_write+0x20b/0x290 [ 82.861875][ T3458] ? fork_idle+0x290/0x290 [ 82.890398][ T3458] ? memset+0x1f/0x40 [ 82.894219][ T3458] ? fsnotify+0x1280/0x1340 [ 82.898558][ T3458] ? __kernel_write+0x350/0x350 [ 82.903244][ T3458] _do_fork+0x197/0x900 [ 82.907235][ T3458] ? debug_smp_processor_id+0x20/0x20 [ 82.912442][ T3458] ? __fsnotify_parent+0x310/0x310 [ 82.917392][ T3458] ? copy_process+0x3230/0x3230 [ 82.922083][ T3458] ? __sb_end_write+0xc4/0x120 [ 82.926682][ T3458] __x64_sys_clone+0x26b/0x2c0 [ 82.931277][ T3458] ? fput_many+0x15e/0x1b0 [ 82.935532][ T3458] ? __ia32_sys_vfork+0x110/0x110 [ 82.940391][ T3458] ? do_syscall_64+0x1f/0x1c0 [ 82.944903][ T3458] do_syscall_64+0xca/0x1c0 [ 82.949244][ T3458] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 82.954970][ T3458] RIP: 0033:0x7f64b4540da9 [ 82.959223][ T3458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.978660][ T3458] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 82.986907][ T3458] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 82.994718][ T3458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 83.002529][ T3458] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 83.010339][ T3458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 83.018152][ T3458] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 83.079304][ T1117] device bridge_slave_1 left promiscuous mode [ 83.085258][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.101937][ T1117] device bridge_slave_0 left promiscuous mode [ 83.110326][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.234465][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.252948][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.273943][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.282480][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.342015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.356474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.429278][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.440252][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.462124][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.475810][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.498099][ T3495] FAULT_INJECTION: forcing a failure. [ 83.498099][ T3495] name failslab, interval 1, probability 0, space 0, times 0 [ 83.511436][ T3495] CPU: 1 PID: 3495 Comm: syz.1.948 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 83.520941][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.530834][ T3495] Call Trace: [ 83.533968][ T3495] dump_stack+0x1d8/0x241 [ 83.538128][ T3495] ? panic+0x89d/0x89d [ 83.542035][ T3495] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 83.547688][ T3495] should_fail+0x71f/0x880 [ 83.551939][ T3495] ? setup_fault_attr+0x3d0/0x3d0 [ 83.556796][ T3495] ? percpu_counter_add_batch+0x14d/0x170 [ 83.562350][ T3495] ? copy_mm+0x75e/0x10d0 [ 83.566520][ T3495] should_failslab+0x5/0x20 [ 83.570858][ T3495] kmem_cache_alloc+0x28/0x250 [ 83.575452][ T3495] copy_mm+0x75e/0x10d0 [ 83.579446][ T3495] ? apic_timer_interrupt+0xa/0x20 [ 83.584394][ T3495] ? copy_signal+0x5d0/0x5d0 [ 83.588819][ T3495] ? __init_rwsem+0xd6/0x210 [ 83.593241][ T3495] ? copy_signal+0x4b3/0x5d0 [ 83.597667][ T3495] copy_process+0x1291/0x3230 [ 83.602184][ T3495] ? proc_fail_nth_write+0x20b/0x290 [ 83.607304][ T3495] ? fork_idle+0x290/0x290 [ 83.611554][ T3495] ? memset+0x1f/0x40 [ 83.615372][ T3495] ? fsnotify+0x1280/0x1340 [ 83.619720][ T3495] ? __kernel_write+0x350/0x350 [ 83.624401][ T3495] _do_fork+0x197/0x900 [ 83.628396][ T3495] ? debug_smp_processor_id+0x20/0x20 [ 83.633601][ T3495] ? __fsnotify_parent+0x310/0x310 [ 83.638550][ T3495] ? copy_process+0x3230/0x3230 [ 83.643236][ T3495] ? __sb_end_write+0xc4/0x120 [ 83.647837][ T3495] __x64_sys_clone+0x26b/0x2c0 [ 83.652436][ T3495] ? fput_many+0x15e/0x1b0 [ 83.656689][ T3495] ? __ia32_sys_vfork+0x110/0x110 [ 83.661551][ T3495] ? do_syscall_64+0x1f/0x1c0 [ 83.666062][ T3495] do_syscall_64+0xca/0x1c0 [ 83.670401][ T3495] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 83.676129][ T3495] RIP: 0033:0x7f1843d1ada9 [ 83.680383][ T3495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.699820][ T3495] RSP: 002b:00007f1842384fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 83.708064][ T3495] RAX: ffffffffffffffda RBX: 00007f1843f33fa0 RCX: 00007f1843d1ada9 [ 83.715876][ T3495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 83.723688][ T3495] RBP: 00007f1842385090 R08: 0000000000000000 R09: 0000000000000000 [ 83.731499][ T3495] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 83.739315][ T3495] R13: 0000000000000000 R14: 00007f1843f33fa0 R15: 00007fffee65a9a8 [ 84.652679][ T3530] FAULT_INJECTION: forcing a failure. [ 84.652679][ T3530] name failslab, interval 1, probability 0, space 0, times 0 [ 84.676356][ T3530] CPU: 1 PID: 3530 Comm: syz.2.959 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 84.685878][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.695770][ T3530] Call Trace: [ 84.698906][ T3530] dump_stack+0x1d8/0x241 [ 84.703071][ T3530] ? panic+0x89d/0x89d [ 84.706974][ T3530] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 84.712616][ T3530] should_fail+0x71f/0x880 [ 84.716871][ T3530] ? setup_fault_attr+0x3d0/0x3d0 [ 84.721731][ T3530] ? anon_vma_fork+0x1ed/0x560 [ 84.726329][ T3530] should_failslab+0x5/0x20 [ 84.730667][ T3530] kmem_cache_alloc+0x28/0x250 [ 84.735266][ T3530] anon_vma_fork+0x1ed/0x560 [ 84.739699][ T3530] ? dup_userfaultfd+0x9c/0x5d0 [ 84.744378][ T3530] ? copy_mm+0x75e/0x10d0 [ 84.748548][ T3530] copy_mm+0x842/0x10d0 [ 84.752544][ T3530] ? copy_signal+0x5d0/0x5d0 [ 84.756966][ T3530] ? __init_rwsem+0xd6/0x210 [ 84.761390][ T3530] ? copy_signal+0x4b3/0x5d0 [ 84.765817][ T3530] copy_process+0x1291/0x3230 [ 84.770335][ T3530] ? proc_fail_nth_write+0x20b/0x290 [ 84.775450][ T3530] ? fork_idle+0x290/0x290 [ 84.779698][ T3530] ? memset+0x1f/0x40 [ 84.783520][ T3530] ? fsnotify+0x1280/0x1340 [ 84.787859][ T3530] ? __kernel_write+0x350/0x350 [ 84.792546][ T3530] _do_fork+0x197/0x900 [ 84.796540][ T3530] ? debug_smp_processor_id+0x20/0x20 [ 84.801745][ T3530] ? __fsnotify_parent+0x310/0x310 [ 84.806695][ T3530] ? copy_process+0x3230/0x3230 [ 84.811380][ T3530] ? __sb_end_write+0xc4/0x120 [ 84.815980][ T3530] __x64_sys_clone+0x26b/0x2c0 [ 84.820580][ T3530] ? fput_many+0x15e/0x1b0 [ 84.824834][ T3530] ? __ia32_sys_vfork+0x110/0x110 [ 84.829696][ T3530] ? do_syscall_64+0x56/0x1c0 [ 84.834209][ T3530] do_syscall_64+0xca/0x1c0 [ 84.838555][ T3530] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 84.844275][ T3530] RIP: 0033:0x7f64b4540da9 [ 84.848530][ T3530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.867967][ T3530] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 84.876212][ T3530] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 84.884027][ T3530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 84.891836][ T3530] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 84.899649][ T3530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 84.907456][ T3530] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 85.096343][ T1117] device bridge_slave_1 left promiscuous mode [ 85.106140][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.139696][ T1117] device bridge_slave_0 left promiscuous mode [ 85.149973][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.344121][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.351013][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.362752][ T3524] device bridge_slave_0 entered promiscuous mode [ 85.370279][ T3562] device pim6reg1 entered promiscuous mode [ 85.389234][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.409362][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.426798][ T3524] device bridge_slave_1 entered promiscuous mode [ 85.482556][ T3575] FAULT_INJECTION: forcing a failure. [ 85.482556][ T3575] name failslab, interval 1, probability 0, space 0, times 0 [ 85.531927][ T3575] CPU: 1 PID: 3575 Comm: syz.2.972 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 85.541452][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 85.544887][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.551339][ T3575] Call Trace: [ 85.551356][ T3575] dump_stack+0x1d8/0x241 [ 85.551370][ T3575] ? panic+0x89d/0x89d [ 85.558211][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.561329][ T3575] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 85.565601][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.569400][ T3575] should_fail+0x71f/0x880 [ 85.569410][ T3575] ? setup_fault_attr+0x3d0/0x3d0 [ 85.569423][ T3575] ? apic_timer_interrupt+0xa/0x20 [ 85.576441][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.582073][ T3575] ? anon_vma_clone+0x9d/0x4d0 [ 85.582082][ T3575] should_failslab+0x5/0x20 [ 85.582095][ T3575] kmem_cache_alloc+0x28/0x250 [ 85.623568][ T3575] anon_vma_clone+0x9d/0x4d0 [ 85.627994][ T3575] anon_vma_fork+0x8c/0x560 [ 85.632331][ T3575] ? dup_userfaultfd+0x9c/0x5d0 [ 85.637014][ T3575] ? copy_mm+0x75e/0x10d0 [ 85.641183][ T3575] copy_mm+0x842/0x10d0 [ 85.645180][ T3575] ? copy_signal+0x5d0/0x5d0 [ 85.649602][ T3575] ? __init_rwsem+0xd6/0x210 [ 85.654026][ T3575] ? copy_signal+0x4b3/0x5d0 [ 85.658461][ T3575] copy_process+0x1291/0x3230 [ 85.662973][ T3575] ? proc_fail_nth_write+0x20b/0x290 [ 85.668089][ T3575] ? apic_timer_interrupt+0xa/0x20 [ 85.673035][ T3575] ? fork_idle+0x290/0x290 [ 85.677281][ T3575] ? memset+0x1f/0x40 [ 85.681099][ T3575] ? fsnotify+0x1280/0x1340 [ 85.685439][ T3575] ? __kernel_write+0x350/0x350 [ 85.690128][ T3575] _do_fork+0x197/0x900 [ 85.694119][ T3575] ? debug_smp_processor_id+0x20/0x20 [ 85.699326][ T3575] ? __fsnotify_parent+0x310/0x310 [ 85.704273][ T3575] ? copy_process+0x3230/0x3230 [ 85.708966][ T3575] __x64_sys_clone+0x26b/0x2c0 [ 85.713561][ T3575] ? fput_many+0x15e/0x1b0 [ 85.717820][ T3575] ? __ia32_sys_vfork+0x110/0x110 [ 85.722676][ T3575] ? do_syscall_64+0x7f/0x1c0 [ 85.727190][ T3575] do_syscall_64+0xca/0x1c0 [ 85.731530][ T3575] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 85.737254][ T3575] RIP: 0033:0x7f64b4540da9 [ 85.741510][ T3575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.760946][ T3575] RSP: 002b:00007f64b2baafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 85.769196][ T3575] RAX: ffffffffffffffda RBX: 00007f64b4759fa0 RCX: 00007f64b4540da9 [ 85.777005][ T3575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 85.784820][ T3575] RBP: 00007f64b2bab090 R08: 0000000000000000 R09: 0000000000000000 [ 85.792626][ T3575] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 85.800439][ T3575] R13: 0000000000000000 R14: 00007f64b4759fa0 R15: 00007ffd4111eff8 [ 85.820530][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.836358][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.851109][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.867148][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.875678][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.884256][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.892456][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.900842][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.909778][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.925012][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.023924][ T23] audit: type=1400 audit(1738425552.530:153): avc: denied { create } for pid=3607 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.185666][ T3628] FAULT_INJECTION: forcing a failure. [ 87.185666][ T3628] name failslab, interval 1, probability 0, space 0, times 0 [ 87.199037][ T3628] CPU: 0 PID: 3628 Comm: syz.4.989 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 87.208544][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.218441][ T3628] Call Trace: [ 87.221574][ T3628] dump_stack+0x1d8/0x241 [ 87.225738][ T3628] ? panic+0x89d/0x89d [ 87.229644][ T3628] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 87.235287][ T3628] should_fail+0x71f/0x880 [ 87.239537][ T3628] ? setup_fault_attr+0x3d0/0x3d0 [ 87.244401][ T3628] ? percpu_counter_add_batch+0x14d/0x170 [ 87.249952][ T3628] ? copy_mm+0x75e/0x10d0 [ 87.254120][ T3628] should_failslab+0x5/0x20 [ 87.258459][ T3628] kmem_cache_alloc+0x28/0x250 [ 87.263067][ T3628] copy_mm+0x75e/0x10d0 [ 87.267054][ T3628] ? copy_signal+0x5d0/0x5d0 [ 87.271484][ T3628] ? __init_rwsem+0xd6/0x210 [ 87.275903][ T3628] ? copy_signal+0x4b3/0x5d0 [ 87.280339][ T3628] copy_process+0x1291/0x3230 [ 87.284844][ T3628] ? proc_fail_nth_write+0x20b/0x290 [ 87.289967][ T3628] ? fork_idle+0x290/0x290 [ 87.294216][ T3628] ? memset+0x1f/0x40 [ 87.298035][ T3628] ? fsnotify+0x1280/0x1340 [ 87.302375][ T3628] ? __kernel_write+0x350/0x350 [ 87.307066][ T3628] _do_fork+0x197/0x900 [ 87.311053][ T3628] ? debug_smp_processor_id+0x20/0x20 [ 87.316261][ T3628] ? __fsnotify_parent+0x310/0x310 [ 87.321211][ T3628] ? copy_process+0x3230/0x3230 [ 87.325895][ T3628] ? __sb_end_write+0xc4/0x120 [ 87.330499][ T3628] __x64_sys_clone+0x26b/0x2c0 [ 87.335093][ T3628] ? fput_many+0x15e/0x1b0 [ 87.339351][ T3628] ? __ia32_sys_vfork+0x110/0x110 [ 87.344214][ T3628] ? do_syscall_64+0x1f/0x1c0 [ 87.348722][ T3628] do_syscall_64+0xca/0x1c0 [ 87.353064][ T3628] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 87.358790][ T3628] RIP: 0033:0x7f1bcaef7da9 [ 87.363043][ T3628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.382480][ T3628] RSP: 002b:00007f1bc9561fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 87.390728][ T3628] RAX: ffffffffffffffda RBX: 00007f1bcb110fa0 RCX: 00007f1bcaef7da9 [ 87.398538][ T3628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 87.406349][ T3628] RBP: 00007f1bc9562090 R08: 0000000000000000 R09: 0000000000000000 [ 87.414157][ T3628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 87.421972][ T3628] R13: 0000000000000000 R14: 00007f1bcb110fa0 R15: 00007ffcbe18a358 [ 87.434174][ T23] audit: type=1400 audit(1738425553.940:154): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=24008 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.459576][ T23] audit: type=1400 audit(1738425553.940:155): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=24008 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.545994][ T23] audit: type=1400 audit(1738425553.940:156): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=24008 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.602533][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.619517][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.635704][ T3639] device bridge_slave_0 entered promiscuous mode [ 87.696115][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.703437][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.713699][ T3639] device bridge_slave_1 entered promiscuous mode [ 87.921898][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.928758][ T3639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.935864][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.942655][ T3639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.974682][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.983518][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.991282][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.017814][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.026991][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.033813][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.055947][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.064001][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.070853][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.085916][ T23] audit: type=1400 audit(1738425554.590:157): avc: denied { append } for pid=3680 comm="syz.1.1000" name="ppp" dev="devtmpfs" ino=10762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.135710][ T23] audit: type=1400 audit(1738425554.590:158): avc: denied { create } for pid=3680 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.176278][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.189320][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.229515][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.240707][ T3705] kasan: CONFIG_KASAN_INLINE enabled [ 88.245810][ T3705] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 88.259253][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.280568][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.285582][ T3705] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 88.294773][ T3705] CPU: 1 PID: 3705 Comm: syz.3.1010 Not tainted 5.4.289-syzkaller-00028-g3f2c17e79750 #0 [ 88.304401][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.314307][ T3705] RIP: 0010:inherit_task_group+0x1bf/0x390 [ 88.319938][ T3705] Code: c5 8c 00 00 00 48 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 86 01 00 00 8b 5d 00 49 81 c7 8c 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 85 01 00 00 41 89 1f 45 31 ff e9 f4 00 [ 88.339379][ T3705] RSP: 0018:ffff8881e48c79c8 EFLAGS: 00010207 [ 88.345281][ T3705] RAX: 0000000000000011 RBX: 0000000000000000 RCX: ffff8881e1c28fc0 [ 88.353093][ T3705] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881ef264090 [ 88.360904][ T3705] RBP: ffff8881ef26408c R08: dffffc0000000000 R09: ffffed103edcb12c [ 88.368714][ T3705] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 88.376526][ T3705] R13: ffff8881e48c7ac0 R14: ffff8881ef264010 R15: 000000000000008c [ 88.384339][ T3705] FS: 00007f6c8e8136c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.393107][ T3705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.399527][ T3705] CR2: 0000000000000004 CR3: 00000001cd897000 CR4: 00000000003406a0 [ 88.407340][ T3705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.415148][ T3705] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 88.422960][ T3705] Call Trace: [ 88.426097][ T3705] ? __die+0xb4/0x100 [ 88.429915][ T3705] ? die+0x26/0x50 [ 88.433464][ T3705] ? do_general_protection+0x266/0x3c0 [ 88.438760][ T3705] ? do_trap+0x340/0x340 [ 88.442840][ T3705] ? inherit_event+0x4e7/0xca0 [ 88.447440][ T3705] ? general_protection+0x28/0x30 [ 88.452304][ T3705] ? inherit_task_group+0x1bf/0x390 [ 88.457336][ T3705] ? inherit_task_group+0x2e2/0x390 [ 88.462369][ T3705] ? _raw_spin_unlock_irqrestore+0x4d/0x80 [ 88.468009][ T3705] perf_event_init_task+0x331/0x770 [ 88.473044][ T3705] ? perf_event_attrs+0x20/0x20 [ 88.477726][ T3705] ? memset+0x1f/0x40 [ 88.481566][ T3705] ? sched_fork+0x5e4/0xd70 [ 88.485892][ T3705] copy_process+0xf2b/0x3230 [ 88.490318][ T3705] ? proc_fail_nth_write+0x20b/0x290 [ 88.495437][ T3705] ? fork_idle+0x290/0x290 [ 88.499685][ T3705] ? memset+0x1f/0x40 [ 88.503506][ T3705] ? fsnotify+0x1280/0x1340 [ 88.507845][ T3705] ? __fsnotify_parent+0xe2/0x310 [ 88.512706][ T3705] ? __fsnotify_parent+0xec/0x310 [ 88.517570][ T3705] _do_fork+0x197/0x900 [ 88.521560][ T3705] ? debug_smp_processor_id+0x20/0x20 [ 88.526767][ T3705] ? __fsnotify_parent+0x310/0x310 [ 88.531714][ T3705] ? copy_process+0x3230/0x3230 [ 88.536403][ T3705] ? __sb_end_write+0xc4/0x120 [ 88.541017][ T3705] __x64_sys_clone+0x26b/0x2c0 [ 88.545604][ T3705] ? fput_many+0x15e/0x1b0 [ 88.549858][ T3705] ? __ia32_sys_vfork+0x110/0x110 [ 88.554717][ T3705] ? __fdget+0x189/0x200 [ 88.558798][ T3705] do_syscall_64+0xca/0x1c0 [ 88.563138][ T3705] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 88.568864][ T3705] RIP: 0033:0x7f6c901a8da9 [ 88.573118][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.592557][ T3705] RSP: 002b:00007f6c8e812fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 88.600802][ T3705] RAX: ffffffffffffffda RBX: 00007f6c903c1fa0 RCX: 00007f6c901a8da9 [ 88.608612][ T3705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 88.616424][ T3705] RBP: 00007f6c8e813090 R08: 0000000000000000 R09: 0000000000000000 [ 88.624235][ T3705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.632045][ T3705] R13: 0000000000000000 R14: 00007f6c903c1fa0 R15: 00007ffe5f669b68 [ 88.639862][ T3705] Modules linked in: [ 88.649405][ T23] audit: type=1400 audit(1738425555.160:159): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=24008 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.677098][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.684975][ T23] audit: type=1400 audit(1738425555.160:160): avc: denied { unlink } for pid=145 comm="syslogd" name="messages.0" dev="tmpfs" ino=407 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.712145][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.723037][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.731189][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.739662][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.747724][ T23] audit: type=1400 audit(1738425555.160:161): avc: denied { create } for pid=145 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.756014][ T3705] ---[ end trace f4917a448003cc3b ]--- [ 88.778411][ T3705] RIP: 0010:inherit_task_group+0x1bf/0x390 [ 88.788100][ T3705] Code: c5 8c 00 00 00 48 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 86 01 00 00 8b 5d 00 49 81 c7 8c 00 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 85 01 00 00 41 89 1f 45 31 ff e9 f4 00 [ 88.814934][ T3705] RSP: 0018:ffff8881e48c79c8 EFLAGS: 00010207 [ 88.816349][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.822647][ T3705] RAX: 0000000000000011 RBX: 0000000000000000 RCX: ffff8881e1c28fc0 [ 88.837093][ T3705] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881ef264090 [ 88.844915][ T3705] RBP: ffff8881ef26408c R08: dffffc0000000000 R09: ffffed103edcb12c [ 88.852956][ T3705] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 88.861249][ T3705] R13: ffff8881e48c7ac0 R14: ffff8881ef264010 R15: 000000000000008c [ 88.866290][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.869304][ T3705] FS: 00007f6c8e8136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 88.895931][ T3705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.926225][ T3705] CR2: 0000560c2c165d90 CR3: 00000001cd897000 CR4: 00000000003406b0 [ 88.934372][ T3705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.944861][ T3705] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 88.953836][ T3705] Kernel panic - not syncing: Fatal exception [ 88.959881][ T3705] Kernel Offset: disabled [ 88.963997][ T3705] Rebooting in 86400 seconds..