last executing test programs: 565.096627ms ago: executing program 1 (id=19814): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x3, 0x0, &(0x7f0000000040)="976d90", 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf04", 0x0, 0x8000}, 0x50) 555.395548ms ago: executing program 1 (id=19816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 467.823862ms ago: executing program 1 (id=19821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff2) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f00000000c0)) 310.087752ms ago: executing program 3 (id=19823): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2b8c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b33, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) 237.422826ms ago: executing program 0 (id=19826): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 237.188716ms ago: executing program 2 (id=19827): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socketpair(0x11, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0xfd, 0x8, 0x7, 0x7, 0x0, 0xffffffffffffffff, 0x20, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x611, 0x4, @perf_config_ext={0x2, 0x5a}, 0x450, 0xfffffffffffffff4, 0x5, 0x7, 0x4, 0xffff, 0x6, 0x0, 0x8, 0x0, 0x3}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e000000144080511b1800089440460f0845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 236.934986ms ago: executing program 0 (id=19828): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x0, @ANYRES16], 0x48) 236.724286ms ago: executing program 4 (id=19829): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c77"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 236.123126ms ago: executing program 1 (id=19830): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 225.130627ms ago: executing program 0 (id=19831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x4, 0xe, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 221.715267ms ago: executing program 2 (id=19832): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xd3, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 177.40329ms ago: executing program 3 (id=19833): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 177.13265ms ago: executing program 1 (id=19834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 176.73896ms ago: executing program 0 (id=19835): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r1, 0x4, r1}, 0x10) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000020, &(0x7f0000000140)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 176.607749ms ago: executing program 3 (id=19836): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 176.232959ms ago: executing program 4 (id=19837): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10140) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 130.190683ms ago: executing program 1 (id=19838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x7b, &(0x7f0000000580)}, 0x10) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b25, &(0x7f0000000040)={'wlan1\x00', @random="01001400"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0xc}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000200)="9e36d448b388dd", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x280000, &(0x7f0000000000)="68c1b029646eeef73b4b3e500d", 0xd, 0x0, 0x0, 0x0) 129.697553ms ago: executing program 2 (id=19839): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 94.201014ms ago: executing program 4 (id=19840): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 94.024985ms ago: executing program 2 (id=19841): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x0, @ANYRES16], 0x48) 93.710984ms ago: executing program 3 (id=19842): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x42d6, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) 93.357544ms ago: executing program 2 (id=19843): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 81.166915ms ago: executing program 4 (id=19844): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 80.239765ms ago: executing program 0 (id=19845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 17.637299ms ago: executing program 0 (id=19846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 2829.583586][T25846] __dump_stack+0x21/0x30 [ 2829.587975][T25846] dump_stack_lvl+0x110/0x170 [ 2829.592681][T25846] ? show_regs_print_info+0x20/0x20 [ 2829.597894][T25846] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 2829.603393][T25846] dump_stack+0x15/0x20 [ 2829.607572][T25846] should_fail+0x3c1/0x510 [ 2829.612008][T25846] should_fail_alloc_page+0x55/0x80 [ 2829.617216][T25846] prepare_alloc_pages+0x156/0x610 [ 2829.622343][T25846] ? __alloc_pages_bulk+0xad0/0xad0 [ 2829.627548][T25846] __alloc_pages+0x11d/0x460 [ 2829.632143][T25846] ? prep_new_page+0x110/0x110 [ 2829.636914][T25846] ? unwind_get_return_address+0x4d/0x90 [ 2829.642583][T25846] ? cgroup_rstat_updated+0xf5/0x360 [ 2829.647877][T25846] ? arch_stack_walk+0xee/0x140 [ 2829.652737][T25846] get_zeroed_page+0x1b/0x40 [ 2829.657332][T25846] __pud_alloc+0x37/0x1a0 [ 2829.661670][T25846] do_handle_mm_fault+0x1bbc/0x1de0 [ 2829.666876][T25846] ? kasan_set_track+0x5b/0x70 [ 2829.671727][T25846] ? kasan_set_track+0x4a/0x70 [ 2829.676494][T25846] ? kasan_set_free_info+0x23/0x40 [ 2829.681613][T25846] ? ____kasan_slab_free+0x125/0x160 [ 2829.686899][T25846] ? __kasan_slab_free+0x11/0x20 [ 2829.691832][T25846] ? numa_migrate_prep+0xd0/0xd0 [ 2829.696765][T25846] ? vmacache_update+0xb7/0x120 [ 2829.701618][T25846] ? __find_vma+0x13b/0x150 [ 2829.706140][T25846] do_user_addr_fault+0x828/0x1250 [ 2829.711283][T25846] ? do_kern_addr_fault+0x80/0x80 [ 2829.716303][T25846] ? proc_fail_nth_write+0x180/0x200 [ 2829.721591][T25846] ? replace_fd+0x160/0x160 [ 2829.726103][T25846] ? __kasan_check_write+0x14/0x20 [ 2829.731219][T25846] ? _raw_spin_lock+0x94/0xf0 [ 2829.735896][T25846] ? _raw_spin_trylock_bh+0x150/0x150 [ 2829.741269][T25846] ? _find_next_bit+0x106/0x200 [ 2829.746120][T25846] exc_page_fault+0x51/0xb0 [ 2829.750626][T25846] asm_exc_page_fault+0x27/0x30 [ 2829.755493][T25846] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2829.761305][T25846] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 2829.780930][T25846] RSP: 0018:ffffc90000ca7e60 EFLAGS: 00050297 [ 2829.787011][T25846] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00002000000001c0 [ 2829.794993][T25846] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 2829.803059][T25846] RBP: ffffc90000ca7ec8 R08: ffff888111a93727 R09: 1ffff110223526e4 [ 2829.811041][T25846] R10: dffffc0000000000 R11: ffffed10223526e5 R12: 0000000000000003 [ 2829.819012][T25846] R13: 00002000000001c0 R14: 0000000000000004 R15: 0000000000000000 [ 2829.826988][T25846] ? __sys_socketpair+0xac/0x590 [ 2829.831947][T25846] __x64_sys_socketpair+0x9b/0xb0 [ 2829.836976][T25846] x64_sys_call+0x36/0x9a0 [ 2829.841391][T25846] do_syscall_64+0x4c/0xa0 [ 2829.845810][T25846] ? clear_bhb_loop+0x50/0xa0 [ 2829.850483][T25846] ? clear_bhb_loop+0x50/0xa0 [ 2829.855162][T25846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2829.861062][T25846] RIP: 0033:0x7f36fb4a2f79 [ 2829.865475][T25846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2829.885086][T25846] RSP: 002b:00007f36f9efe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2829.893509][T25846] RAX: ffffffffffffffda RBX: 00007f36fb71cfa0 RCX: 00007f36fb4a2f79 [ 2829.901487][T25846] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 2829.909461][T25846] RBP: 00007f36f9efe090 R08: 0000000000000000 R09: 0000000000000000 [ 2829.917434][T25846] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2829.925412][T25846] R13: 00007f36fb71d038 R14: 00007f36fb71cfa0 R15: 00007ffe93cc62e8 [ 2829.933421][T25846] [ 2829.972411][T25864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2829.980112][T25864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2829.989062][T25864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2829.996731][T25864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2830.117802][T25864] device bridge0 entered promiscuous mode [ 2830.286565][T25892] FAULT_INJECTION: forcing a failure. [ 2830.286565][T25892] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2830.305004][T25892] CPU: 1 PID: 25892 Comm: syz.4.19495 Tainted: G W syzkaller #0 [ 2830.313986][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2830.324047][T25892] Call Trace: [ 2830.327336][T25892] [ 2830.330295][T25892] __dump_stack+0x21/0x30 [ 2830.334642][T25892] dump_stack_lvl+0x110/0x170 [ 2830.339336][T25892] ? show_regs_print_info+0x20/0x20 [ 2830.344570][T25892] ? vfs_write+0xc72/0xfd0 [ 2830.349008][T25892] dump_stack+0x15/0x20 [ 2830.353173][T25892] should_fail+0x3c1/0x510 [ 2830.357614][T25892] should_fail_usercopy+0x1a/0x20 [ 2830.362659][T25892] _copy_from_user+0x20/0xd0 [ 2830.367256][T25892] __sys_bpf+0x258/0x7d0 [ 2830.371524][T25892] ? bpf_link_show_fdinfo+0x330/0x330 [ 2830.376907][T25892] ? debug_smp_processor_id+0x17/0x20 [ 2830.382285][T25892] __x64_sys_bpf+0x7c/0x90 [ 2830.386707][T25892] x64_sys_call+0x4b9/0x9a0 [ 2830.391228][T25892] do_syscall_64+0x4c/0xa0 [ 2830.395658][T25892] ? clear_bhb_loop+0x50/0xa0 [ 2830.400345][T25892] ? clear_bhb_loop+0x50/0xa0 [ 2830.405038][T25892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2830.410949][T25892] RIP: 0033:0x7fe05867af79 [ 2830.415399][T25892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2830.435013][T25892] RSP: 002b:00007fe0570d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2830.443539][T25892] RAX: ffffffffffffffda RBX: 00007fe0588f4fa0 RCX: 00007fe05867af79 [ 2830.451540][T25892] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005 [ 2830.459517][T25892] RBP: 00007fe0570d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2830.467505][T25892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2830.475488][T25892] R13: 00007fe0588f5038 R14: 00007fe0588f4fa0 R15: 00007ffc1ba27ee8 [ 2830.483471][T25892] [ 2830.586677][T25912] FAULT_INJECTION: forcing a failure. [ 2830.586677][T25912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2830.608840][T25912] CPU: 1 PID: 25912 Comm: syz.0.19508 Tainted: G W syzkaller #0 [ 2830.617822][T25912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2830.627984][T25912] Call Trace: [ 2830.631366][T25912] [ 2830.634311][T25912] __dump_stack+0x21/0x30 [ 2830.638675][T25912] dump_stack_lvl+0x110/0x170 [ 2830.643378][T25912] ? show_regs_print_info+0x20/0x20 [ 2830.648598][T25912] ? vfs_write+0xc72/0xfd0 [ 2830.653088][T25912] dump_stack+0x15/0x20 [ 2830.657297][T25912] should_fail+0x3c1/0x510 [ 2830.661818][T25912] should_fail_usercopy+0x1a/0x20 [ 2830.666956][T25912] _copy_from_user+0x20/0xd0 [ 2830.671563][T25912] __sys_bpf+0x258/0x7d0 [ 2830.675822][T25912] ? bpf_link_show_fdinfo+0x330/0x330 [ 2830.681218][T25912] ? debug_smp_processor_id+0x17/0x20 [ 2830.686601][T25912] __x64_sys_bpf+0x7c/0x90 [ 2830.691028][T25912] x64_sys_call+0x4b9/0x9a0 [ 2830.695551][T25912] do_syscall_64+0x4c/0xa0 [ 2830.699994][T25912] ? clear_bhb_loop+0x50/0xa0 [ 2830.704776][T25912] ? clear_bhb_loop+0x50/0xa0 [ 2830.709473][T25912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2830.715377][T25912] RIP: 0033:0x7f780d71bf79 [ 2830.719925][T25912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2830.739539][T25912] RSP: 002b:00007f780c177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2830.747961][T25912] RAX: ffffffffffffffda RBX: 00007f780d995fa0 RCX: 00007f780d71bf79 [ 2830.756025][T25912] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 2830.764000][T25912] RBP: 00007f780c177090 R08: 0000000000000000 R09: 0000000000000000 [ 2830.772022][T25912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2830.780000][T25912] R13: 00007f780d996038 R14: 00007f780d995fa0 R15: 00007ffc70046668 [ 2830.787983][T25912] [ 2830.864519][T25935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2830.871876][T25935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2830.929602][T25935] bridge0: port 2(bridge_slave_1) entered blocking state [ 2830.938331][T25935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2830.953492][T25935] bridge0: port 1(bridge_slave_0) entered blocking state [ 2830.961862][T25935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2830.988305][T25949] FAULT_INJECTION: forcing a failure. [ 2830.988305][T25949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2831.042322][T25935] device bridge0 entered promiscuous mode [ 2831.066468][T25949] CPU: 1 PID: 25949 Comm: syz.0.19523 Tainted: G W syzkaller #0 [ 2831.075484][T25949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2831.085554][T25949] Call Trace: [ 2831.088839][T25949] [ 2831.091776][T25949] __dump_stack+0x21/0x30 [ 2831.096117][T25949] dump_stack_lvl+0x110/0x170 [ 2831.100806][T25949] ? show_regs_print_info+0x20/0x20 [ 2831.106018][T25949] ? vfs_write+0xc72/0xfd0 [ 2831.110456][T25949] dump_stack+0x15/0x20 [ 2831.114633][T25949] should_fail+0x3c1/0x510 [ 2831.119072][T25949] should_fail_usercopy+0x1a/0x20 [ 2831.124115][T25949] _copy_from_user+0x20/0xd0 [ 2831.128719][T25949] __sys_bpf+0x258/0x7d0 [ 2831.132973][T25949] ? bpf_link_show_fdinfo+0x330/0x330 [ 2831.138364][T25949] ? debug_smp_processor_id+0x17/0x20 [ 2831.143859][T25949] __x64_sys_bpf+0x7c/0x90 [ 2831.148312][T25949] x64_sys_call+0x4b9/0x9a0 [ 2831.152870][T25949] do_syscall_64+0x4c/0xa0 [ 2831.157370][T25949] ? clear_bhb_loop+0x50/0xa0 [ 2831.162063][T25949] ? clear_bhb_loop+0x50/0xa0 [ 2831.166749][T25949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2831.172671][T25949] RIP: 0033:0x7f780d71bf79 [ 2831.177101][T25949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2831.196713][T25949] RSP: 002b:00007f780c177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2831.205140][T25949] RAX: ffffffffffffffda RBX: 00007f780d995fa0 RCX: 00007f780d71bf79 [ 2831.213225][T25949] RDX: 0000000000000057 RSI: 0000200000000200 RDI: 0000000000000005 [ 2831.221216][T25949] RBP: 00007f780c177090 R08: 0000000000000000 R09: 0000000000000000 [ 2831.229215][T25949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2831.237184][T25949] R13: 00007f780d996038 R14: 00007f780d995fa0 R15: 00007ffc70046668 [ 2831.245165][T25949] [ 2831.307390][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2831.317353][T25966] FAULT_INJECTION: forcing a failure. [ 2831.317353][T25966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2831.355911][T25966] CPU: 0 PID: 25966 Comm: syz.0.19529 Tainted: G W syzkaller #0 [ 2831.364987][T25966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2831.375062][T25966] Call Trace: [ 2831.378348][T25966] [ 2831.381297][T25966] __dump_stack+0x21/0x30 [ 2831.385646][T25966] dump_stack_lvl+0x110/0x170 [ 2831.390326][T25966] ? show_regs_print_info+0x20/0x20 [ 2831.395552][T25966] ? vfs_write+0xc72/0xfd0 [ 2831.399990][T25966] dump_stack+0x15/0x20 [ 2831.404155][T25966] should_fail+0x3c1/0x510 [ 2831.408601][T25966] should_fail_usercopy+0x1a/0x20 [ 2831.413629][T25966] _copy_from_user+0x20/0xd0 [ 2831.418216][T25966] __sys_bpf+0x258/0x7d0 [ 2831.422456][T25966] ? bpf_link_show_fdinfo+0x330/0x330 [ 2831.427826][T25966] ? debug_smp_processor_id+0x17/0x20 [ 2831.433199][T25966] __x64_sys_bpf+0x7c/0x90 [ 2831.437624][T25966] x64_sys_call+0x4b9/0x9a0 [ 2831.442124][T25966] do_syscall_64+0x4c/0xa0 [ 2831.446544][T25966] ? clear_bhb_loop+0x50/0xa0 [ 2831.451214][T25966] ? clear_bhb_loop+0x50/0xa0 [ 2831.455895][T25966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2831.461804][T25966] RIP: 0033:0x7f780d71bf79 [ 2831.466220][T25966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2831.485845][T25966] RSP: 002b:00007f780c177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2831.494374][T25966] RAX: ffffffffffffffda RBX: 00007f780d995fa0 RCX: 00007f780d71bf79 [ 2831.502354][T25966] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 2831.510336][T25966] RBP: 00007f780c177090 R08: 0000000000000000 R09: 0000000000000000 [ 2831.518304][T25966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2831.526275][T25966] R13: 00007f780d996038 R14: 00007f780d995fa0 R15: 00007ffc70046668 [ 2831.534255][T25966] [ 2831.574492][T25960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2831.581800][T25960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.589376][T25960] device bridge_slave_0 entered promiscuous mode [ 2831.632452][T25960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2831.652274][T25960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2831.659861][T25960] device bridge_slave_1 entered promiscuous mode [ 2831.676229][T25992] FAULT_INJECTION: forcing a failure. [ 2831.676229][T25992] name failslab, interval 1, probability 0, space 0, times 1 [ 2831.765336][T25992] CPU: 0 PID: 25992 Comm: syz.4.19538 Tainted: G W syzkaller #0 [ 2831.774448][T25992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2831.784630][T25992] Call Trace: [ 2831.787926][T25992] [ 2831.790865][T25992] __dump_stack+0x21/0x30 [ 2831.795215][T25992] dump_stack_lvl+0x110/0x170 [ 2831.799942][T25992] ? show_regs_print_info+0x20/0x20 [ 2831.805159][T25992] dump_stack+0x15/0x20 [ 2831.809349][T25992] should_fail+0x3c1/0x510 [ 2831.813782][T25992] __should_failslab+0xa4/0xe0 [ 2831.818568][T25992] should_failslab+0x9/0x20 [ 2831.823095][T25992] slab_pre_alloc_hook+0x3b/0xe0 [ 2831.828162][T25992] ? dup_task_struct+0x57/0xc10 [ 2831.833019][T25992] kmem_cache_alloc+0x44/0x260 [ 2831.837796][T25992] ? _raw_spin_lock_irq+0x95/0xf0 [ 2831.842838][T25992] dup_task_struct+0x57/0xc10 [ 2831.847525][T25992] ? __kasan_check_write+0x14/0x20 [ 2831.852655][T25992] copy_process+0x5c4/0x3250 [ 2831.857264][T25992] ? kstrtol_from_user+0x2a0/0x2a0 [ 2831.862391][T25992] ? __kasan_check_write+0x14/0x20 [ 2831.867524][T25992] ? proc_fail_nth_write+0x180/0x200 [ 2831.872828][T25992] ? proc_fail_nth_read+0x220/0x220 [ 2831.878069][T25992] ? __pidfd_prepare+0x150/0x150 [ 2831.883024][T25992] kernel_clone+0x233/0x960 [ 2831.887644][T25992] ? create_io_thread+0x170/0x170 [ 2831.892721][T25992] ? __kasan_check_write+0x14/0x20 [ 2831.897840][T25992] ? mutex_unlock+0x8f/0x230 [ 2831.902445][T25992] __x64_sys_clone+0x198/0x210 [ 2831.907222][T25992] ? __kasan_check_write+0x14/0x20 [ 2831.912348][T25992] ? __ia32_sys_vfork+0x130/0x130 [ 2831.917388][T25992] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2831.923495][T25992] x64_sys_call+0x41f/0x9a0 [ 2831.928010][T25992] do_syscall_64+0x4c/0xa0 [ 2831.932439][T25992] ? clear_bhb_loop+0x50/0xa0 [ 2831.937132][T25992] ? clear_bhb_loop+0x50/0xa0 [ 2831.941827][T25992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2831.947736][T25992] RIP: 0033:0x7fe05867af79 [ 2831.952158][T25992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2831.971778][T25992] RSP: 002b:00007fe0570d5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2831.980211][T25992] RAX: ffffffffffffffda RBX: 00007fe0588f4fa0 RCX: 00007fe05867af79 [ 2831.988219][T25992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 2831.996212][T25992] RBP: 00007fe0570d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2832.004219][T25992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2832.012225][T25992] R13: 00007fe0588f5038 R14: 00007fe0588f4fa0 R15: 00007ffc1ba27ee8 [ 2832.020214][T25992] [ 2832.056561][T26011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2832.063701][T26011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2832.071766][T26011] device bridge0 left promiscuous mode [ 2832.102647][T25960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.109834][T25960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2832.117138][T25960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.124202][T25960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2832.137704][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2832.153345][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2832.187683][T26002] device veth0_vlan left promiscuous mode [ 2832.212144][T26002] device veth0_vlan entered promiscuous mode [ 2832.238571][T26011] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.246213][T26011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2832.254861][T26011] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.262490][T26011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2832.381639][T26011] device bridge0 entered promiscuous mode [ 2832.515532][T21833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2832.524802][T26025] FAULT_INJECTION: forcing a failure. [ 2832.524802][T26025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2832.544872][T21833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2832.563601][T26025] CPU: 1 PID: 26025 Comm: syz.1.19549 Tainted: G W syzkaller #0 [ 2832.572573][T26025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2832.582667][T26025] Call Trace: [ 2832.585988][T26025] [ 2832.588930][T26025] __dump_stack+0x21/0x30 [ 2832.593276][T26025] dump_stack_lvl+0x110/0x170 [ 2832.597968][T26025] ? show_regs_print_info+0x20/0x20 [ 2832.603203][T26025] ? kstrtouint_from_user+0x1c4/0x220 [ 2832.608606][T26025] dump_stack+0x15/0x20 [ 2832.612780][T26025] should_fail+0x3c1/0x510 [ 2832.617234][T26025] should_fail_usercopy+0x1a/0x20 [ 2832.622273][T26025] _copy_from_user+0x20/0xd0 [ 2832.626868][T26025] ___sys_recvmsg+0x173/0x5c0 [ 2832.631554][T26025] ? __sys_recvmsg+0x270/0x270 [ 2832.636333][T26025] ? vfs_write+0xc72/0xfd0 [ 2832.640762][T26025] ? __fdget+0x1a1/0x230 [ 2832.645044][T26025] __x64_sys_recvmsg+0x203/0x2f0 [ 2832.650003][T26025] ? ___sys_recvmsg+0x5c0/0x5c0 [ 2832.654861][T26025] ? ksys_write+0x1f4/0x250 [ 2832.659387][T26025] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2832.665466][T26025] x64_sys_call+0x705/0x9a0 [ 2832.669979][T26025] do_syscall_64+0x4c/0xa0 [ 2832.674409][T26025] ? clear_bhb_loop+0x50/0xa0 [ 2832.679110][T26025] ? clear_bhb_loop+0x50/0xa0 [ 2832.683806][T26025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2832.689717][T26025] RIP: 0033:0x7f7422b59f79 [ 2832.694229][T26025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2832.713881][T26025] RSP: 002b:00007f74215b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2832.722309][T26025] RAX: ffffffffffffffda RBX: 00007f7422dd3fa0 RCX: 00007f7422b59f79 [ 2832.730295][T26025] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 2832.738274][T26025] RBP: 00007f74215b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2832.746255][T26025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2832.754240][T26025] R13: 00007f7422dd4038 R14: 00007f7422dd3fa0 R15: 00007ffcf7e88118 [ 2832.762247][T26025] [ 2832.787003][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2832.823431][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2832.860709][ T1692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.867808][ T1692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2832.897597][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2832.915552][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2832.936061][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.943164][ T1692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2832.971528][T26040] FAULT_INJECTION: forcing a failure. [ 2832.971528][T26040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2832.984938][T26040] CPU: 1 PID: 26040 Comm: syz.0.19554 Tainted: G W syzkaller #0 [ 2832.993900][T26040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2833.003960][T26040] Call Trace: [ 2833.007247][T26040] [ 2833.010205][T26040] __dump_stack+0x21/0x30 [ 2833.014559][T26040] dump_stack_lvl+0x110/0x170 [ 2833.019247][T26040] ? show_regs_print_info+0x20/0x20 [ 2833.024452][T26040] ? ioctl_has_perm+0x3ab/0x4f0 [ 2833.029315][T26040] dump_stack+0x15/0x20 [ 2833.033478][T26040] should_fail+0x3c1/0x510 [ 2833.037901][T26040] should_fail_usercopy+0x1a/0x20 [ 2833.042934][T26040] _copy_from_user+0x20/0xd0 [ 2833.047546][T26040] __tun_chr_ioctl+0x1340/0x1ed0 [ 2833.052492][T26040] ? tun_flow_create+0x320/0x320 [ 2833.057437][T26040] ? mutex_unlock+0x8f/0x230 [ 2833.062012][T26040] ? __fget_files+0x2c4/0x320 [ 2833.066679][T26040] tun_chr_ioctl+0x2a/0x40 [ 2833.071087][T26040] ? tun_chr_poll+0x720/0x720 [ 2833.075746][T26040] __se_sys_ioctl+0x121/0x1a0 [ 2833.080417][T26040] __x64_sys_ioctl+0x7b/0x90 [ 2833.085003][T26040] x64_sys_call+0x2f/0x9a0 [ 2833.089407][T26040] do_syscall_64+0x4c/0xa0 [ 2833.093806][T26040] ? clear_bhb_loop+0x50/0xa0 [ 2833.098468][T26040] ? clear_bhb_loop+0x50/0xa0 [ 2833.103247][T26040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2833.109149][T26040] RIP: 0033:0x7f780d71bf79 [ 2833.113600][T26040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2833.133298][T26040] RSP: 002b:00007f780c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2833.141719][T26040] RAX: ffffffffffffffda RBX: 00007f780d996090 RCX: 00007f780d71bf79 [ 2833.149702][T26040] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 2833.157675][T26040] RBP: 00007f780c156090 R08: 0000000000000000 R09: 0000000000000000 [ 2833.165650][T26040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.173625][T26040] R13: 00007f780d996128 R14: 00007f780d996090 R15: 00007ffc70046668 [ 2833.181606][T26040] [ 2833.195798][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2833.214017][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2833.264344][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2833.272768][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2833.290571][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2833.300138][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2833.312297][T25960] device veth0_vlan entered promiscuous mode [ 2833.337736][T26050] FAULT_INJECTION: forcing a failure. [ 2833.337736][T26050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.351961][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2833.365632][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2833.397109][T26052] bridge0: port 2(bridge_slave_1) entered disabled state [ 2833.404243][T26052] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.411604][T26050] CPU: 1 PID: 26050 Comm: syz.3.19559 Tainted: G W syzkaller #0 [ 2833.420573][T26050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2833.430658][T26050] Call Trace: [ 2833.433953][T26050] [ 2833.436903][T26050] __dump_stack+0x21/0x30 [ 2833.441261][T26050] dump_stack_lvl+0x110/0x170 [ 2833.445967][T26050] ? show_regs_print_info+0x20/0x20 [ 2833.451207][T26050] ? vfs_write+0xc72/0xfd0 [ 2833.455648][T26050] dump_stack+0x15/0x20 [ 2833.459827][T26050] should_fail+0x3c1/0x510 [ 2833.464281][T26050] should_fail_usercopy+0x1a/0x20 [ 2833.469386][T26050] _copy_from_user+0x20/0xd0 [ 2833.474009][T26050] __sys_bpf+0x258/0x7d0 [ 2833.478284][T26050] ? bpf_link_show_fdinfo+0x330/0x330 [ 2833.483691][T26050] ? debug_smp_processor_id+0x17/0x20 [ 2833.489173][T26050] __x64_sys_bpf+0x7c/0x90 [ 2833.493606][T26050] x64_sys_call+0x4b9/0x9a0 [ 2833.498125][T26050] do_syscall_64+0x4c/0xa0 [ 2833.502560][T26050] ? clear_bhb_loop+0x50/0xa0 [ 2833.507258][T26050] ? clear_bhb_loop+0x50/0xa0 [ 2833.511956][T26050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2833.517872][T26050] RIP: 0033:0x7fd5f8faef79 [ 2833.522310][T26050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2833.541929][T26050] RSP: 002b:00007fd5f7a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2833.550365][T26050] RAX: ffffffffffffffda RBX: 00007fd5f9228fa0 RCX: 00007fd5f8faef79 [ 2833.558371][T26050] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 2833.566357][T26050] RBP: 00007fd5f7a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 2833.574342][T26050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.582325][T26050] R13: 00007fd5f9229038 R14: 00007fd5f9228fa0 R15: 00007fff4a421218 [ 2833.590319][T26050] [ 2833.599943][T26052] device bridge0 left promiscuous mode [ 2833.607327][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2833.614988][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2833.623750][ T5240] device bridge_slave_1 left promiscuous mode [ 2833.664884][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2833.672703][ T5240] device bridge_slave_0 left promiscuous mode [ 2833.684022][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.692438][ T5240] device veth1_macvtap left promiscuous mode [ 2833.698511][ T5240] device veth0_vlan left promiscuous mode [ 2833.825338][T26074] FAULT_INJECTION: forcing a failure. [ 2833.825338][T26074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.844471][T26074] CPU: 0 PID: 26074 Comm: syz.1.19569 Tainted: G W syzkaller #0 [ 2833.853448][T26074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2833.863492][T26074] Call Trace: [ 2833.866767][T26074] [ 2833.869717][T26074] __dump_stack+0x21/0x30 [ 2833.874064][T26074] dump_stack_lvl+0x110/0x170 [ 2833.878759][T26074] ? show_regs_print_info+0x20/0x20 [ 2833.883969][T26074] ? kstrtouint_from_user+0x1c4/0x220 [ 2833.889333][T26074] dump_stack+0x15/0x20 [ 2833.893478][T26074] should_fail+0x3c1/0x510 [ 2833.897889][T26074] should_fail_usercopy+0x1a/0x20 [ 2833.902914][T26074] _copy_from_user+0x20/0xd0 [ 2833.907516][T26074] ___sys_recvmsg+0x173/0x5c0 [ 2833.912206][T26074] ? __sys_recvmsg+0x270/0x270 [ 2833.917119][T26074] ? vfs_write+0xc72/0xfd0 [ 2833.921534][T26074] ? __fdget+0x1a1/0x230 [ 2833.925786][T26074] __x64_sys_recvmsg+0x203/0x2f0 [ 2833.930740][T26074] ? ___sys_recvmsg+0x5c0/0x5c0 [ 2833.935579][T26074] ? ksys_write+0x1f4/0x250 [ 2833.940071][T26074] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2833.946142][T26074] x64_sys_call+0x705/0x9a0 [ 2833.950673][T26074] do_syscall_64+0x4c/0xa0 [ 2833.955100][T26074] ? clear_bhb_loop+0x50/0xa0 [ 2833.959769][T26074] ? clear_bhb_loop+0x50/0xa0 [ 2833.964437][T26074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2833.970340][T26074] RIP: 0033:0x7f7422b59f79 [ 2833.974745][T26074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2833.994346][T26074] RSP: 002b:00007f74215b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2834.002755][T26074] RAX: ffffffffffffffda RBX: 00007f7422dd3fa0 RCX: 00007f7422b59f79 [ 2834.010727][T26074] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000004 [ 2834.018693][T26074] RBP: 00007f74215b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2834.026681][T26074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2834.034659][T26074] R13: 00007f7422dd4038 R14: 00007f7422dd3fa0 R15: 00007ffcf7e88118 [ 2834.042629][T26074] [ 2834.069108][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2834.079128][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2834.089366][T26052] bridge0: port 2(bridge_slave_1) entered blocking state [ 2834.096545][T26052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2834.104672][T26052] bridge0: port 1(bridge_slave_0) entered blocking state [ 2834.106768][ T30] audit: type=1400 audit(1770962515.143:149): avc: denied { append } for pid=26077 comm="syz.4.19571" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2834.112174][T26052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2834.153206][T26052] device bridge0 entered promiscuous mode [ 2834.208037][T26062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2834.215315][T26062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2834.255443][T26062] device bridge0 left promiscuous mode [ 2834.263730][T25960] device veth1_macvtap entered promiscuous mode [ 2834.281887][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2834.296797][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2834.305469][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2834.328757][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2834.364920][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2834.412228][T26093] FAULT_INJECTION: forcing a failure. [ 2834.412228][T26093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2834.457412][T26095] FAULT_INJECTION: forcing a failure. [ 2834.457412][T26095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2834.479251][T26095] CPU: 1 PID: 26095 Comm: syz.0.19578 Tainted: G W syzkaller #0 [ 2834.488237][T26095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2834.498311][T26095] Call Trace: [ 2834.501602][T26095] [ 2834.504536][T26095] __dump_stack+0x21/0x30 [ 2834.508877][T26095] dump_stack_lvl+0x110/0x170 [ 2834.513557][T26095] ? show_regs_print_info+0x20/0x20 [ 2834.518754][T26095] ? __stack_depot_save+0x34/0x480 [ 2834.523867][T26095] ? path_openat+0x280e/0x2f20 [ 2834.528626][T26095] dump_stack+0x15/0x20 [ 2834.532781][T26095] should_fail+0x3c1/0x510 [ 2834.537194][T26095] should_fail_usercopy+0x1a/0x20 [ 2834.542214][T26095] _copy_from_user+0x20/0xd0 [ 2834.546805][T26095] __copy_msghdr_from_user+0xc9/0x630 [ 2834.552178][T26095] ? _kstrtoull+0x3c0/0x4d0 [ 2834.556696][T26095] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 2834.561982][T26095] ? kstrtouint_from_user+0x1c4/0x220 [ 2834.567362][T26095] ___sys_sendmsg+0x19a/0x2e0 [ 2834.572053][T26095] ? __sys_sendmsg+0x280/0x280 [ 2834.576828][T26095] ? __fdget+0x1a1/0x230 [ 2834.581072][T26095] __x64_sys_sendmsg+0x206/0x2f0 [ 2834.586018][T26095] ? ___sys_sendmsg+0x2e0/0x2e0 [ 2834.590872][T26095] ? ksys_write+0x1f4/0x250 [ 2834.595395][T26095] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2834.601566][T26095] x64_sys_call+0x4b/0x9a0 [ 2834.605993][T26095] do_syscall_64+0x4c/0xa0 [ 2834.610419][T26095] ? clear_bhb_loop+0x50/0xa0 [ 2834.615099][T26095] ? clear_bhb_loop+0x50/0xa0 [ 2834.619780][T26095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2834.625682][T26095] RIP: 0033:0x7f780d71bf79 [ 2834.630108][T26095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2834.649720][T26095] RSP: 002b:00007f780c177028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2834.658133][T26095] RAX: ffffffffffffffda RBX: 00007f780d995fa0 RCX: 00007f780d71bf79 [ 2834.666106][T26095] RDX: 0000000000000011 RSI: 0000200000000180 RDI: 0000000000000004 [ 2834.674097][T26095] RBP: 00007f780c177090 R08: 0000000000000000 R09: 0000000000000000 [ 2834.682168][T26095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2834.690138][T26095] R13: 00007f780d996038 R14: 00007f780d995fa0 R15: 00007ffc70046668 [ 2834.698115][T26095] [ 2834.705862][T26093] CPU: 1 PID: 26093 Comm: syz.2.19518 Tainted: G W syzkaller #0 [ 2834.714839][T26093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2834.724914][T26093] Call Trace: [ 2834.728219][T26093] [ 2834.731164][T26093] __dump_stack+0x21/0x30 [ 2834.735514][T26093] dump_stack_lvl+0x110/0x170 [ 2834.740226][T26093] ? show_regs_print_info+0x20/0x20 [ 2834.745444][T26093] ? vfs_write+0xc72/0xfd0 [ 2834.749975][T26093] dump_stack+0x15/0x20 [ 2834.754151][T26093] should_fail+0x3c1/0x510 [ 2834.758621][T26093] should_fail_usercopy+0x1a/0x20 [ 2834.763674][T26093] _copy_from_user+0x20/0xd0 [ 2834.768303][T26093] __sys_bpf+0x258/0x7d0 [ 2834.772561][T26093] ? bpf_link_show_fdinfo+0x330/0x330 [ 2834.777978][T26093] ? debug_smp_processor_id+0x17/0x20 [ 2834.783463][T26093] __x64_sys_bpf+0x7c/0x90 [ 2834.787892][T26093] x64_sys_call+0x4b9/0x9a0 [ 2834.792490][T26093] do_syscall_64+0x4c/0xa0 [ 2834.796920][T26093] ? clear_bhb_loop+0x50/0xa0 [ 2834.801617][T26093] ? clear_bhb_loop+0x50/0xa0 [ 2834.806303][T26093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2834.812219][T26093] RIP: 0033:0x7f8f45614f79 [ 2834.816641][T26093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2834.836358][T26093] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2834.844792][T26093] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2834.852786][T26093] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 2834.860787][T26093] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2834.868772][T26093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2834.876759][T26093] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2834.884761][T26093] [ 2834.902633][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2835.031650][T26106] FAULT_INJECTION: forcing a failure. [ 2835.031650][T26106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2835.055156][T26106] CPU: 0 PID: 26106 Comm: syz.2.19584 Tainted: G W syzkaller #0 [ 2835.064149][T26106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2835.074258][T26106] Call Trace: [ 2835.077532][T26106] [ 2835.080454][T26106] __dump_stack+0x21/0x30 [ 2835.084782][T26106] dump_stack_lvl+0x110/0x170 [ 2835.089451][T26106] ? show_regs_print_info+0x20/0x20 [ 2835.094731][T26106] ? vfs_write+0xc72/0xfd0 [ 2835.099151][T26106] dump_stack+0x15/0x20 [ 2835.103328][T26106] should_fail+0x3c1/0x510 [ 2835.107761][T26106] should_fail_usercopy+0x1a/0x20 [ 2835.112799][T26106] _copy_from_user+0x20/0xd0 [ 2835.117424][T26106] __sys_bpf+0x258/0x7d0 [ 2835.121684][T26106] ? bpf_link_show_fdinfo+0x330/0x330 [ 2835.127081][T26106] ? debug_smp_processor_id+0x17/0x20 [ 2835.132467][T26106] __x64_sys_bpf+0x7c/0x90 [ 2835.137002][T26106] x64_sys_call+0x4b9/0x9a0 [ 2835.141522][T26106] do_syscall_64+0x4c/0xa0 [ 2835.145981][T26106] ? clear_bhb_loop+0x50/0xa0 [ 2835.150666][T26106] ? clear_bhb_loop+0x50/0xa0 [ 2835.155360][T26106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2835.161281][T26106] RIP: 0033:0x7f8f45614f79 [ 2835.165711][T26106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2835.185336][T26106] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2835.193791][T26106] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2835.201776][T26106] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2835.209761][T26106] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2835.217745][T26106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2835.225817][T26106] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2835.233815][T26106] [ 2835.427041][T26142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2835.434215][T26142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.455298][T26144] FAULT_INJECTION: forcing a failure. [ 2835.455298][T26144] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.469691][T26144] CPU: 0 PID: 26144 Comm: syz.2.19600 Tainted: G W syzkaller #0 [ 2835.470656][T26142] device bridge0 left promiscuous mode [ 2835.478658][T26144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2835.478672][T26144] Call Trace: [ 2835.478678][T26144] [ 2835.478684][T26144] __dump_stack+0x21/0x30 [ 2835.478708][T26144] dump_stack_lvl+0x110/0x170 [ 2835.509587][T26144] ? show_regs_print_info+0x20/0x20 [ 2835.514800][T26144] dump_stack+0x15/0x20 [ 2835.518968][T26144] should_fail+0x3c1/0x510 [ 2835.523390][T26144] __should_failslab+0xa4/0xe0 [ 2835.528162][T26144] should_failslab+0x9/0x20 [ 2835.532671][T26144] slab_pre_alloc_hook+0x3b/0xe0 [ 2835.537614][T26144] ? __alloc_skb+0xe0/0x740 [ 2835.542120][T26144] kmem_cache_alloc+0x44/0x260 [ 2835.546885][T26144] __alloc_skb+0xe0/0x740 [ 2835.551224][T26144] alloc_skb_with_frags+0xa8/0x620 [ 2835.556344][T26144] sock_alloc_send_pskb+0x87f/0x9a0 [ 2835.561551][T26144] ? sock_kzfree_s+0x60/0x60 [ 2835.566141][T26144] ? stack_trace_save+0xa6/0xf0 [ 2835.571002][T26144] tun_get_user+0xb41/0x3400 [ 2835.575609][T26144] ? kmem_cache_free+0xc0/0x320 [ 2835.580486][T26144] ? putname+0x111/0x160 [ 2835.584736][T26144] ? do_syscall_64+0x4c/0xa0 [ 2835.589338][T26144] ? tun_do_read+0x1d30/0x1d30 [ 2835.594120][T26144] ? kstrtouint_from_user+0x1c4/0x220 [ 2835.599534][T26144] ? kstrtol_from_user+0x2a0/0x2a0 [ 2835.604661][T26144] ? avc_policy_seqno+0x1b/0x70 [ 2835.609529][T26144] ? selinux_file_permission+0x2aa/0x510 [ 2835.615174][T26144] tun_chr_write_iter+0x1eb/0x2e0 [ 2835.620216][T26144] vfs_write+0x835/0xfd0 [ 2835.624472][T26144] ? file_end_write+0x1b0/0x1b0 [ 2835.629483][T26144] ? __fget_files+0x2c4/0x320 [ 2835.634211][T26144] ? __fdget_pos+0x1f7/0x380 [ 2835.638817][T26144] ? ksys_write+0x71/0x250 [ 2835.643262][T26144] ksys_write+0x149/0x250 [ 2835.647597][T26144] ? __ia32_sys_read+0x90/0x90 [ 2835.652362][T26144] ? debug_smp_processor_id+0x17/0x20 [ 2835.657740][T26144] __x64_sys_write+0x7b/0x90 [ 2835.662331][T26144] x64_sys_call+0x8ef/0x9a0 [ 2835.667385][T26144] do_syscall_64+0x4c/0xa0 [ 2835.671837][T26144] ? clear_bhb_loop+0x50/0xa0 [ 2835.676527][T26144] ? clear_bhb_loop+0x50/0xa0 [ 2835.681255][T26144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2835.687161][T26144] RIP: 0033:0x7f8f45614f79 [ 2835.691582][T26144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2835.711189][T26144] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2835.719603][T26144] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2835.727579][T26144] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 2835.735558][T26144] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2835.743531][T26144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2835.751630][T26144] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2835.759606][T26144] [ 2835.815645][T26142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2835.823105][T26142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2835.836076][T26142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2835.844206][T26142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2835.862363][T26142] device bridge0 entered promiscuous mode [ 2836.174499][T26165] FAULT_INJECTION: forcing a failure. [ 2836.174499][T26165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2836.288253][T26165] CPU: 0 PID: 26165 Comm: syz.0.19606 Tainted: G W syzkaller #0 [ 2836.297250][T26165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2836.307321][T26165] Call Trace: [ 2836.310611][T26165] [ 2836.313565][T26165] __dump_stack+0x21/0x30 [ 2836.317913][T26165] dump_stack_lvl+0x110/0x170 [ 2836.322610][T26165] ? show_regs_print_info+0x20/0x20 [ 2836.327825][T26165] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2836.334006][T26165] dump_stack+0x15/0x20 [ 2836.338192][T26165] should_fail+0x3c1/0x510 [ 2836.342628][T26165] should_fail_usercopy+0x1a/0x20 [ 2836.347676][T26165] _copy_from_user+0x20/0xd0 [ 2836.350933][T26174] FAULT_INJECTION: forcing a failure. [ 2836.350933][T26174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2836.352280][T26165] __sys_bpf+0x258/0x7d0 [ 2836.352300][T26165] ? bpf_link_show_fdinfo+0x330/0x330 [ 2836.352322][T26165] __x64_sys_bpf+0x7c/0x90 [ 2836.352338][T26165] x64_sys_call+0x4b9/0x9a0 [ 2836.352355][T26165] do_syscall_64+0x4c/0xa0 [ 2836.352373][T26165] ? clear_bhb_loop+0x50/0xa0 [ 2836.352388][T26165] ? clear_bhb_loop+0x50/0xa0 [ 2836.352403][T26165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2836.352424][T26165] RIP: 0033:0x7f780d71bf79 [ 2836.352439][T26165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2836.352454][T26165] RSP: 002b:00007f780c177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2836.352473][T26165] RAX: ffffffffffffffda RBX: 00007f780d995fa0 RCX: 00007f780d71bf79 [ 2836.352486][T26165] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2836.352498][T26165] RBP: 00007f780c177090 R08: 0000000000000000 R09: 0000000000000000 [ 2836.352509][T26165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2836.352520][T26165] R13: 00007f780d996038 R14: 00007f780d995fa0 R15: 00007ffc70046668 [ 2836.352536][T26165] [ 2836.488430][T26174] CPU: 1 PID: 26174 Comm: syz.1.19610 Tainted: G W syzkaller #0 [ 2836.497400][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2836.507498][T26174] Call Trace: [ 2836.510788][T26174] [ 2836.513726][T26174] __dump_stack+0x21/0x30 [ 2836.518060][T26174] dump_stack_lvl+0x110/0x170 [ 2836.522745][T26174] ? show_regs_print_info+0x20/0x20 [ 2836.527953][T26174] dump_stack+0x15/0x20 [ 2836.532110][T26174] should_fail+0x3c1/0x510 [ 2836.536560][T26174] should_fail_usercopy+0x1a/0x20 [ 2836.541584][T26174] _copy_from_user+0x20/0xd0 [ 2836.546174][T26174] sock_do_ioctl+0x188/0x310 [ 2836.550782][T26174] ? sock_show_fdinfo+0xa0/0xa0 [ 2836.555650][T26174] sock_ioctl+0x4a1/0x6e0 [ 2836.559988][T26174] ? sock_poll+0x3f0/0x3f0 [ 2836.564411][T26174] ? __fget_files+0x2c4/0x320 [ 2836.569106][T26174] ? security_file_ioctl+0x84/0xa0 [ 2836.574318][T26174] ? sock_poll+0x3f0/0x3f0 [ 2836.578741][T26174] __se_sys_ioctl+0x121/0x1a0 [ 2836.583425][T26174] __x64_sys_ioctl+0x7b/0x90 [ 2836.588017][T26174] x64_sys_call+0x2f/0x9a0 [ 2836.592433][T26174] do_syscall_64+0x4c/0xa0 [ 2836.596883][T26174] ? clear_bhb_loop+0x50/0xa0 [ 2836.601563][T26174] ? clear_bhb_loop+0x50/0xa0 [ 2836.606338][T26174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2836.612234][T26174] RIP: 0033:0x7f7422b59f79 [ 2836.616654][T26174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2836.636257][T26174] RSP: 002b:00007f74215b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2836.644678][T26174] RAX: ffffffffffffffda RBX: 00007f7422dd3fa0 RCX: 00007f7422b59f79 [ 2836.652659][T26174] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000012 [ 2836.660627][T26174] RBP: 00007f74215b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2836.668610][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2836.676578][T26174] R13: 00007f7422dd4038 R14: 00007f7422dd3fa0 R15: 00007ffcf7e88118 [ 2836.684557][T26174] [ 2836.772901][T26183] device syzkaller0 entered promiscuous mode [ 2837.324761][T26214] FAULT_INJECTION: forcing a failure. [ 2837.324761][T26214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2837.436326][T26214] CPU: 1 PID: 26214 Comm: syz.1.19625 Tainted: G W syzkaller #0 [ 2837.445321][T26214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2837.455405][T26214] Call Trace: [ 2837.458724][T26214] [ 2837.461667][T26214] __dump_stack+0x21/0x30 [ 2837.466140][T26214] dump_stack_lvl+0x110/0x170 [ 2837.470844][T26214] ? show_regs_print_info+0x20/0x20 [ 2837.476068][T26214] dump_stack+0x15/0x20 [ 2837.480233][T26214] should_fail+0x3c1/0x510 [ 2837.484664][T26214] should_fail_usercopy+0x1a/0x20 [ 2837.489739][T26214] _copy_from_user+0x20/0xd0 [ 2837.494344][T26214] __sys_bpf+0x258/0x7d0 [ 2837.498615][T26214] ? bpf_link_show_fdinfo+0x330/0x330 [ 2837.504011][T26214] __x64_sys_bpf+0x7c/0x90 [ 2837.508440][T26214] x64_sys_call+0x4b9/0x9a0 [ 2837.512953][T26214] do_syscall_64+0x4c/0xa0 [ 2837.517377][T26214] ? clear_bhb_loop+0x50/0xa0 [ 2837.522058][T26214] ? clear_bhb_loop+0x50/0xa0 [ 2837.526744][T26214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2837.532640][T26214] RIP: 0033:0x7f7422b59f79 [ 2837.537060][T26214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2837.556674][T26214] RSP: 002b:00007f74215b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2837.565099][T26214] RAX: ffffffffffffffda RBX: 00007f7422dd3fa0 RCX: 00007f7422b59f79 [ 2837.573087][T26214] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 2837.581069][T26214] RBP: 00007f74215b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2837.589045][T26214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2837.597021][T26214] R13: 00007f7422dd4038 R14: 00007f7422dd3fa0 R15: 00007ffcf7e88118 [ 2837.605028][T26214] [ 2837.948945][T26233] FAULT_INJECTION: forcing a failure. [ 2837.948945][T26233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2837.974210][T26233] CPU: 0 PID: 26233 Comm: syz.2.19632 Tainted: G W syzkaller #0 [ 2837.983214][T26233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2837.993294][T26233] Call Trace: [ 2837.996609][T26233] [ 2837.999558][T26233] __dump_stack+0x21/0x30 [ 2838.003924][T26233] dump_stack_lvl+0x110/0x170 [ 2838.008617][T26233] ? show_regs_print_info+0x20/0x20 [ 2838.013866][T26233] ? vfs_write+0xc72/0xfd0 [ 2838.018315][T26233] dump_stack+0x15/0x20 [ 2838.022485][T26233] should_fail+0x3c1/0x510 [ 2838.026917][T26233] should_fail_usercopy+0x1a/0x20 [ 2838.031956][T26233] _copy_from_user+0x20/0xd0 [ 2838.036554][T26233] __sys_bpf+0x258/0x7d0 [ 2838.040802][T26233] ? bpf_link_show_fdinfo+0x330/0x330 [ 2838.046190][T26233] ? debug_smp_processor_id+0x17/0x20 [ 2838.051583][T26233] __x64_sys_bpf+0x7c/0x90 [ 2838.056013][T26233] x64_sys_call+0x4b9/0x9a0 [ 2838.060532][T26233] do_syscall_64+0x4c/0xa0 [ 2838.064958][T26233] ? clear_bhb_loop+0x50/0xa0 [ 2838.069645][T26233] ? clear_bhb_loop+0x50/0xa0 [ 2838.074334][T26233] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2838.080244][T26233] RIP: 0033:0x7f8f45614f79 [ 2838.084681][T26233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2838.104305][T26233] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2838.112732][T26233] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2838.120726][T26233] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 2838.128708][T26233] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2838.136692][T26233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2838.144754][T26233] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2838.152739][T26233] [ 2839.602350][T26286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.632568][T26286] bridge0: port 1(bridge_slave_0) entered disabled state [ 2839.654272][T26286] device bridge_slave_0 entered promiscuous mode [ 2839.696170][T26286] bridge0: port 2(bridge_slave_1) entered blocking state [ 2839.709703][T26286] bridge0: port 2(bridge_slave_1) entered disabled state [ 2839.746635][T26286] device bridge_slave_1 entered promiscuous mode [ 2839.820159][T26303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2839.827749][T26303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2839.838890][T26303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.847745][T26303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2839.859413][T26303] device bridge0 entered promiscuous mode [ 2840.199901][T26286] bridge0: port 2(bridge_slave_1) entered blocking state [ 2840.206997][T26286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2840.214325][T26286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.221417][T26286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2840.342944][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2840.367032][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2840.377176][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2840.395406][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2840.436515][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2840.465013][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2840.488024][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.495176][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2840.521123][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2840.529716][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2840.541922][T26358] FAULT_INJECTION: forcing a failure. [ 2840.541922][T26358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2840.553260][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2840.562138][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2840.567463][T26358] CPU: 0 PID: 26358 Comm: syz.2.19679 Tainted: G W syzkaller #0 [ 2840.578356][T26358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2840.588407][T26358] Call Trace: [ 2840.591678][T26358] [ 2840.594601][T26358] __dump_stack+0x21/0x30 [ 2840.598964][T26358] dump_stack_lvl+0x110/0x170 [ 2840.603648][T26358] ? show_regs_print_info+0x20/0x20 [ 2840.608842][T26358] dump_stack+0x15/0x20 [ 2840.612999][T26358] should_fail+0x3c1/0x510 [ 2840.617422][T26358] should_fail_usercopy+0x1a/0x20 [ 2840.622716][T26358] _copy_from_user+0x20/0xd0 [ 2840.627305][T26358] sock_do_ioctl+0x188/0x310 [ 2840.631893][T26358] ? sock_show_fdinfo+0xa0/0xa0 [ 2840.636742][T26358] ? selinux_file_ioctl+0x3a0/0x4d0 [ 2840.641966][T26358] sock_ioctl+0x4a1/0x6e0 [ 2840.646307][T26358] ? sock_poll+0x3f0/0x3f0 [ 2840.650737][T26358] ? __fget_files+0x2c4/0x320 [ 2840.655451][T26358] ? security_file_ioctl+0x84/0xa0 [ 2840.660587][T26358] ? sock_poll+0x3f0/0x3f0 [ 2840.665124][T26358] __se_sys_ioctl+0x121/0x1a0 [ 2840.669829][T26358] __x64_sys_ioctl+0x7b/0x90 [ 2840.674443][T26358] x64_sys_call+0x2f/0x9a0 [ 2840.678886][T26358] do_syscall_64+0x4c/0xa0 [ 2840.683319][T26358] ? clear_bhb_loop+0x50/0xa0 [ 2840.688015][T26358] ? clear_bhb_loop+0x50/0xa0 [ 2840.692805][T26358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2840.698728][T26358] RIP: 0033:0x7f8f45614f79 [ 2840.703275][T26358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2840.722907][T26358] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2840.731345][T26358] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2840.739359][T26358] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000044 [ 2840.747532][T26358] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2840.755523][T26358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2840.763611][T26358] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2840.771617][T26358] [ 2840.793015][T26364] device syzkaller0 entered promiscuous mode [ 2840.803491][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2840.811827][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2840.820288][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2840.828773][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2840.860241][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2840.871613][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2840.888074][T26286] device veth0_vlan entered promiscuous mode [ 2840.894370][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2840.902780][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2840.911498][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2840.919369][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2840.948998][T26286] device veth1_macvtap entered promiscuous mode [ 2840.976825][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2840.985069][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2841.009797][T26379] FAULT_INJECTION: forcing a failure. [ 2841.009797][T26379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2841.036200][T26379] CPU: 1 PID: 26379 Comm: syz.2.19686 Tainted: G W syzkaller #0 [ 2841.045266][T26379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2841.055348][T26379] Call Trace: [ 2841.058643][T26379] [ 2841.061581][T26379] __dump_stack+0x21/0x30 [ 2841.065943][T26379] dump_stack_lvl+0x110/0x170 [ 2841.070626][T26379] ? show_regs_print_info+0x20/0x20 [ 2841.075837][T26379] ? vfs_write+0xc72/0xfd0 [ 2841.080258][T26379] dump_stack+0x15/0x20 [ 2841.084425][T26379] should_fail+0x3c1/0x510 [ 2841.088849][T26379] should_fail_usercopy+0x1a/0x20 [ 2841.093878][T26379] _copy_from_user+0x20/0xd0 [ 2841.098555][T26379] __sys_bpf+0x258/0x7d0 [ 2841.102796][T26379] ? bpf_link_show_fdinfo+0x330/0x330 [ 2841.108185][T26379] ? debug_smp_processor_id+0x17/0x20 [ 2841.113566][T26379] __x64_sys_bpf+0x7c/0x90 [ 2841.117978][T26379] x64_sys_call+0x4b9/0x9a0 [ 2841.122480][T26379] do_syscall_64+0x4c/0xa0 [ 2841.126894][T26379] ? clear_bhb_loop+0x50/0xa0 [ 2841.131573][T26379] ? clear_bhb_loop+0x50/0xa0 [ 2841.136255][T26379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2841.142151][T26379] RIP: 0033:0x7f8f45614f79 [ 2841.146573][T26379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2841.166178][T26379] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2841.174593][T26379] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2841.182582][T26379] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 2841.190555][T26379] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2841.198534][T26379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2841.206536][T26379] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2841.214515][T26379] [ 2841.217932][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2841.237826][T26382] tap0: tun_chr_ioctl cmd 1074025677 [ 2841.243170][T26382] tap0: linktype set to 805 [ 2841.257063][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2841.288391][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2841.323519][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2841.380582][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2841.389450][T26392] FAULT_INJECTION: forcing a failure. [ 2841.389450][T26392] name failslab, interval 1, probability 0, space 0, times 0 [ 2841.566814][T26396] bridge0: port 2(bridge_slave_1) entered disabled state [ 2841.573991][T26396] bridge0: port 1(bridge_slave_0) entered disabled state [ 2841.598544][T26396] device bridge0 left promiscuous mode [ 2841.603184][T26392] CPU: 1 PID: 26392 Comm: syz.0.19647 Tainted: G W syzkaller #0 [ 2841.613082][T26392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2841.623135][T26392] Call Trace: [ 2841.626433][T26392] [ 2841.629382][T26392] __dump_stack+0x21/0x30 [ 2841.633741][T26392] dump_stack_lvl+0x110/0x170 [ 2841.638436][T26392] ? show_regs_print_info+0x20/0x20 [ 2841.643649][T26392] dump_stack+0x15/0x20 [ 2841.647816][T26392] should_fail+0x3c1/0x510 [ 2841.652237][T26392] __should_failslab+0xa4/0xe0 [ 2841.657010][T26392] should_failslab+0x9/0x20 [ 2841.661525][T26392] slab_pre_alloc_hook+0x3b/0xe0 [ 2841.666642][T26392] ? dup_task_struct+0x57/0xc10 [ 2841.671522][T26392] kmem_cache_alloc+0x44/0x260 [ 2841.676307][T26392] ? _raw_spin_lock_irq+0x95/0xf0 [ 2841.681351][T26392] dup_task_struct+0x57/0xc10 [ 2841.686066][T26392] ? __kasan_check_write+0x14/0x20 [ 2841.691292][T26392] copy_process+0x5c4/0x3250 [ 2841.695911][T26392] ? kstrtol_from_user+0x2a0/0x2a0 [ 2841.701030][T26392] ? __kasan_check_write+0x14/0x20 [ 2841.706172][T26392] ? proc_fail_nth_write+0x180/0x200 [ 2841.711487][T26392] ? proc_fail_nth_read+0x220/0x220 [ 2841.716790][T26392] ? __pidfd_prepare+0x150/0x150 [ 2841.721752][T26392] kernel_clone+0x233/0x960 [ 2841.726262][T26392] ? create_io_thread+0x170/0x170 [ 2841.731315][T26392] ? __kasan_check_write+0x14/0x20 [ 2841.736431][T26392] ? mutex_unlock+0x8f/0x230 [ 2841.741032][T26392] __x64_sys_clone+0x198/0x210 [ 2841.745801][T26392] ? __kasan_check_write+0x14/0x20 [ 2841.750938][T26392] ? __ia32_sys_vfork+0x130/0x130 [ 2841.755970][T26392] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2841.762049][T26392] x64_sys_call+0x41f/0x9a0 [ 2841.766561][T26392] do_syscall_64+0x4c/0xa0 [ 2841.770999][T26392] ? clear_bhb_loop+0x50/0xa0 [ 2841.775679][T26392] ? clear_bhb_loop+0x50/0xa0 [ 2841.780366][T26392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2841.786259][T26392] RIP: 0033:0x7fa92f8fcf79 [ 2841.790671][T26392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2841.810289][T26392] RSP: 002b:00007fa92e357fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2841.818698][T26392] RAX: ffffffffffffffda RBX: 00007fa92fb76fa0 RCX: 00007fa92f8fcf79 [ 2841.826666][T26392] RDX: 0000200000000140 RSI: 0000000000000400 RDI: 0000000004001000 [ 2841.834664][T26392] RBP: 00007fa92e358090 R08: 0000000000000000 R09: 0000000000000000 [ 2841.842641][T26392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2841.850652][T26392] R13: 00007fa92fb77038 R14: 00007fa92fb76fa0 R15: 00007ffd29ff3d28 [ 2841.858747][T26392] [ 2841.871598][T26398] bridge0: port 2(bridge_slave_1) entered blocking state [ 2841.878992][T26398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2841.889642][T26398] bridge0: port 1(bridge_slave_0) entered blocking state [ 2841.897340][T26398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2841.917070][T26402] FAULT_INJECTION: forcing a failure. [ 2841.917070][T26402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2841.919142][T26398] device bridge0 entered promiscuous mode [ 2841.986737][T21833] device bridge_slave_1 left promiscuous mode [ 2841.989171][T26402] CPU: 1 PID: 26402 Comm: syz.4.19695 Tainted: G W syzkaller #0 [ 2841.997247][T21833] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.001791][T26402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2842.001804][T26402] Call Trace: [ 2842.001810][T26402] [ 2842.025094][T26402] __dump_stack+0x21/0x30 [ 2842.029466][T26402] dump_stack_lvl+0x110/0x170 [ 2842.034227][T26402] ? show_regs_print_info+0x20/0x20 [ 2842.039486][T26402] ? vfs_write+0xc72/0xfd0 [ 2842.043920][T26402] dump_stack+0x15/0x20 [ 2842.048099][T26402] should_fail+0x3c1/0x510 [ 2842.052558][T26402] should_fail_usercopy+0x1a/0x20 [ 2842.057605][T26402] _copy_from_user+0x20/0xd0 [ 2842.062205][T26402] __sys_bpf+0x258/0x7d0 [ 2842.066462][T26402] ? bpf_link_show_fdinfo+0x330/0x330 [ 2842.071842][T26402] ? debug_smp_processor_id+0x17/0x20 [ 2842.077236][T26402] __x64_sys_bpf+0x7c/0x90 [ 2842.081683][T26402] x64_sys_call+0x4b9/0x9a0 [ 2842.086210][T26402] do_syscall_64+0x4c/0xa0 [ 2842.090645][T26402] ? clear_bhb_loop+0x50/0xa0 [ 2842.095334][T26402] ? clear_bhb_loop+0x50/0xa0 [ 2842.100055][T26402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2842.106066][T26402] RIP: 0033:0x7fe05867af79 [ 2842.110496][T26402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2842.130113][T26402] RSP: 002b:00007fe0570d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2842.138539][T26402] RAX: ffffffffffffffda RBX: 00007fe0588f4fa0 RCX: 00007fe05867af79 [ 2842.146520][T26402] RDX: 000000000000000c RSI: 00002000000000c0 RDI: 000000000000000a [ 2842.154499][T26402] RBP: 00007fe0570d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2842.162481][T26402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2842.170452][T26402] R13: 00007fe0588f5038 R14: 00007fe0588f4fa0 R15: 00007ffc1ba27ee8 [ 2842.178428][T26402] [ 2842.187057][T21833] device bridge_slave_0 left promiscuous mode [ 2842.193236][T21833] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.206034][T21833] device veth1_macvtap left promiscuous mode [ 2842.214386][T21833] device veth0_vlan left promiscuous mode [ 2842.663051][T26431] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.670237][T26431] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.680710][T26434] FAULT_INJECTION: forcing a failure. [ 2842.680710][T26434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2842.692096][T26431] device bridge0 left promiscuous mode [ 2842.732654][T26431] bridge0: port 2(bridge_slave_1) entered blocking state [ 2842.740243][T26431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2842.745574][T26434] CPU: 0 PID: 26434 Comm: syz.2.19708 Tainted: G W syzkaller #0 [ 2842.752106][T26431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2842.756495][T26434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2842.756508][T26434] Call Trace: [ 2842.756514][T26434] [ 2842.756520][T26434] __dump_stack+0x21/0x30 [ 2842.756544][T26434] dump_stack_lvl+0x110/0x170 [ 2842.756562][T26434] ? show_regs_print_info+0x20/0x20 [ 2842.756582][T26434] ? has_cap_mac_admin+0x370/0x370 [ 2842.756600][T26434] dump_stack+0x15/0x20 [ 2842.756617][T26434] should_fail+0x3c1/0x510 [ 2842.756635][T26434] should_fail_usercopy+0x1a/0x20 [ 2842.756651][T26434] _copy_from_user+0x20/0xd0 [ 2842.756666][T26434] get_user_ifreq+0x6c/0x180 [ 2842.756682][T26434] sock_ioctl+0x606/0x6e0 [ 2842.756698][T26434] ? sock_poll+0x3f0/0x3f0 [ 2842.756715][T26434] ? security_file_ioctl+0x84/0xa0 [ 2842.756733][T26434] ? sock_poll+0x3f0/0x3f0 [ 2842.756748][T26434] __se_sys_ioctl+0x121/0x1a0 [ 2842.756768][T26434] __x64_sys_ioctl+0x7b/0x90 [ 2842.756787][T26434] x64_sys_call+0x2f/0x9a0 [ 2842.756804][T26434] do_syscall_64+0x4c/0xa0 [ 2842.756821][T26434] ? clear_bhb_loop+0x50/0xa0 [ 2842.756836][T26434] ? clear_bhb_loop+0x50/0xa0 [ 2842.756852][T26434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2842.756873][T26434] RIP: 0033:0x7f8f45614f79 [ 2842.756888][T26434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2842.756903][T26434] RSP: 002b:00007f8f44070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2842.756922][T26434] RAX: ffffffffffffffda RBX: 00007f8f4588efa0 RCX: 00007f8f45614f79 [ 2842.756935][T26434] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 2842.756946][T26434] RBP: 00007f8f44070090 R08: 0000000000000000 R09: 0000000000000000 [ 2842.756958][T26434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2842.756968][T26434] R13: 00007f8f4588f038 R14: 00007f8f4588efa0 R15: 00007ffc3a12fb08 [ 2842.756983][T26434] [ 2842.923517][T26436] FAULT_INJECTION: forcing a failure. [ 2842.923517][T26436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2842.926168][T26431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2842.944370][T26436] CPU: 0 PID: 26436 Comm: syz.1.19707 Tainted: G W syzkaller #0 [ 2842.991472][T26436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2843.001536][T26436] Call Trace: [ 2843.004827][T26436] [ 2843.007787][T26436] __dump_stack+0x21/0x30 [ 2843.012134][T26436] dump_stack_lvl+0x110/0x170 [ 2843.016839][T26436] ? show_regs_print_info+0x20/0x20 [ 2843.022042][T26436] ? vfs_write+0xc72/0xfd0 [ 2843.026464][T26436] dump_stack+0x15/0x20 [ 2843.030621][T26436] should_fail+0x3c1/0x510 [ 2843.035057][T26436] should_fail_usercopy+0x1a/0x20 [ 2843.040085][T26436] _copy_from_user+0x20/0xd0 [ 2843.044676][T26436] __sys_bpf+0x258/0x7d0 [ 2843.048926][T26436] ? bpf_link_show_fdinfo+0x330/0x330 [ 2843.054302][T26436] ? debug_smp_processor_id+0x17/0x20 [ 2843.059685][T26436] __x64_sys_bpf+0x7c/0x90 [ 2843.064103][T26436] x64_sys_call+0x4b9/0x9a0 [ 2843.068613][T26436] do_syscall_64+0x4c/0xa0 [ 2843.073034][T26436] ? clear_bhb_loop+0x50/0xa0 [ 2843.077718][T26436] ? clear_bhb_loop+0x50/0xa0 [ 2843.082390][T26436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2843.088382][T26436] RIP: 0033:0x7f7422b59f79 [ 2843.092796][T26436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2843.112402][T26436] RSP: 002b:00007f74215b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2843.120822][T26436] RAX: ffffffffffffffda RBX: 00007f7422dd3fa0 RCX: 00007f7422b59f79 [ 2843.128887][T26436] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2843.136861][T26436] RBP: 00007f74215b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2843.144875][T26436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2843.152865][T26436] R13: 00007f7422dd4038 R14: 00007f7422dd3fa0 R15: 00007ffcf7e88118 [ 2843.160856][T26436] [ 2843.169030][T26431] device bridge0 entered promiscuous mode [ 2843.195038][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2843.418209][T26438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2843.425295][T26438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2843.468498][T26438] device bridge_slave_0 entered promiscuous mode [ 2843.492240][T26438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2843.516149][T26438] bridge0: port 2(bridge_slave_1) entered disabled state [ 2843.542069][T26438] device bridge_slave_1 entered promiscuous mode [ 2843.787726][T26465] device veth1_macvtap left promiscuous mode [ 2843.805867][T26465] device macsec0 left promiscuous mode [ 2843.812796][T26467] device veth1_macvtap entered promiscuous mode [ 2843.819529][T26467] device macsec0 entered promiscuous mode [ 2843.832545][T26438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2843.839629][T26438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2843.846960][T26438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2843.854006][T26438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2843.988422][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2844.005496][T26470] FAULT_INJECTION: forcing a failure. [ 2844.005496][T26470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2844.027273][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2844.045857][T26470] CPU: 1 PID: 26470 Comm: syz.2.19715 Tainted: G W syzkaller #0 [ 2844.054833][T26470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2844.064913][T26470] Call Trace: [ 2844.068217][T26470] [ 2844.071159][T26470] __dump_stack+0x21/0x30 [ 2844.075517][T26470] dump_stack_lvl+0x110/0x170 [ 2844.080218][T26470] ? show_regs_print_info+0x20/0x20 [ 2844.085448][T26470] dump_stack+0x15/0x20 [ 2844.089617][T26470] should_fail+0x3c1/0x510 [ 2844.094042][T26470] should_fail_usercopy+0x1a/0x20 [ 2844.099081][T26470] _copy_from_user+0x20/0xd0 [ 2844.103730][T26470] sock_do_ioctl+0x188/0x310 [ 2844.108334][T26470] ? sock_show_fdinfo+0xa0/0xa0 [ 2844.113195][T26470] ? selinux_file_ioctl+0x3a0/0x4d0 [ 2844.118413][T26470] sock_ioctl+0x4a1/0x6e0 [ 2844.122769][T26470] ? sock_poll+0x3f0/0x3f0 [ 2844.127198][T26470] ? __fget_files+0x2c4/0x320 [ 2844.131891][T26470] ? security_file_ioctl+0x84/0xa0 [ 2844.137017][T26470] ? sock_poll+0x3f0/0x3f0 [ 2844.141446][T26470] __se_sys_ioctl+0x121/0x1a0 [ 2844.146146][T26470] __x64_sys_ioctl+0x7b/0x90 [ 2844.150755][T26470] x64_sys_call+0x2f/0x9a0 [ 2844.155189][T26470] do_syscall_64+0x4c/0xa0 [ 2844.159633][T26470] ? clear_bhb_loop+0x50/0xa0 [ 2844.164325][T26470] ? clear_bhb_loop+0x50/0xa0 [ 2844.169048][T26470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2844.174989][T26470] RIP: 0033:0x7f8f45614f79 [ 2844.179420][T26470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2844.199037][T26470] RSP: 002b:00007f8f4404f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2844.207468][T26470] RAX: ffffffffffffffda RBX: 00007f8f4588f090 RCX: 00007f8f45614f79 [ 2844.215457][T26470] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000008 [ 2844.223441][T26470] RBP: 00007f8f4404f090 R08: 0000000000000000 R09: 0000000000000000 [ 2844.231422][T26470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2844.239404][T26470] R13: 00007f8f4588f128 R14: 00007f8f4588f090 R15: 00007ffc3a12fb08 [ 2844.247396][T26470] [ 2844.285911][T26473] device veth1_macvtap left promiscuous mode [ 2844.296133][T26473] device macsec0 left promiscuous mode [ 2844.303777][T26469] device veth1_macvtap left promiscuous mode [ 2844.356380][T26477] device syzkaller0 entered promiscuous mode [ 2844.376557][T26472] device veth1_macvtap entered promiscuous mode [ 2844.413334][T26472] device macsec0 entered promiscuous mode [ 2844.448680][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2844.459868][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2844.468226][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2844.493091][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2844.501627][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2844.512010][ T1692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2844.519080][ T1692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2844.527278][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2844.535682][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2844.587036][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2844.594226][ T1692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2844.618292][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2844.627966][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2844.675980][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2844.691180][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2844.802838][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2844.895850][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2845.012547][T26438] device veth0_vlan entered promiscuous mode [ 2845.043862][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2845.056599][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2845.068429][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2845.076006][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2845.109985][T26438] device veth1_macvtap entered promiscuous mode [ 2845.206392][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2845.214662][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2845.294857][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2845.396544][T21833] device bridge_slave_1 left promiscuous mode [ 2845.402827][T21833] bridge0: port 2(bridge_slave_1) entered disabled state [ 2845.482436][T21833] device bridge_slave_0 left promiscuous mode [ 2845.526135][T21833] bridge0: port 1(bridge_slave_0) entered disabled state [ 2845.549872][T21833] device veth1_macvtap left promiscuous mode [ 2845.605929][T21833] device veth0_vlan left promiscuous mode [ 2846.016431][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2846.036044][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2846.044572][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2846.053123][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2846.636794][T26531] bridge0: port 1(bridge_slave_0) entered blocking state [ 2846.679519][T26531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2846.705173][T26531] device bridge_slave_0 entered promiscuous mode [ 2846.726580][T26531] bridge0: port 2(bridge_slave_1) entered blocking state [ 2846.767619][T26531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2846.775477][T26531] device bridge_slave_1 entered promiscuous mode [ 2847.195034][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2847.203154][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2847.276800][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2847.285279][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2847.298217][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2847.305298][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2847.313799][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2847.322222][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2847.346130][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.353285][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2847.360894][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2847.369140][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2847.377189][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2847.385309][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2847.393798][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2847.416260][T21833] device bridge_slave_1 left promiscuous mode [ 2847.422566][T21833] bridge0: port 2(bridge_slave_1) entered disabled state [ 2849.355229][T21833] device bridge_slave_0 left promiscuous mode [ 2849.371029][T21833] bridge0: port 1(bridge_slave_0) entered disabled state [ 2849.389320][T21833] device veth0_vlan left promiscuous mode [ 2849.469977][T26531] device veth0_vlan entered promiscuous mode [ 2849.479794][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2849.489652][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2849.498180][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2849.506845][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2849.515525][T26598] device sit0 entered promiscuous mode [ 2849.597233][T26606] syz.3.19771[26606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2849.597306][T26606] syz.3.19771[26606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2849.664692][T26531] device veth1_macvtap entered promiscuous mode [ 2849.683581][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2849.693429][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2849.708836][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2849.735524][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2849.757930][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2849.778523][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2849.786931][T25379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2849.816453][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2849.825051][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2849.864997][T26622] bridge0: port 2(bridge_slave_1) entered disabled state [ 2849.873116][T26622] bridge0: port 1(bridge_slave_0) entered disabled state [ 2849.889677][T26622] device bridge0 left promiscuous mode [ 2849.921131][T26622] device bridge_slave_1 left promiscuous mode [ 2849.935454][T26622] bridge0: port 2(bridge_slave_1) entered disabled state [ 2849.955351][T26622] device bridge_slave_0 left promiscuous mode [ 2849.962334][T26622] bridge0: port 1(bridge_slave_0) entered disabled state [ 2850.727352][T26746] bridge0: port 2(bridge_slave_1) entered disabled state [ 2850.734770][T26746] bridge0: port 1(bridge_slave_0) entered disabled state [ 2950.935738][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2950.942721][ C1] rcu: 0-...!: (1 GPs behind) idle=6fb/1/0x4000000000000000 softirq=303291/303304 fqs=0 last_accelerate: e3fb/0b2e dyntick_enabled: 1 [ 2950.956509][ C1] (detected by 1, t=10006 jiffies, g=371613, q=505) [ 2950.963179][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2950.968429][ C0] NMI backtrace for cpu 0 [ 2950.968439][ C0] CPU: 0 PID: 26776 Comm: syz.4.19850 Tainted: G W syzkaller #0 [ 2950.968456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2950.968466][ C0] RIP: 0010:kvm_wait+0xdf/0x150 [ 2950.968488][ C0] Code: 43 c6 44 37 04 f8 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 93 66 90 0f 00 2d 42 1d d6 03 f4 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 2950.968501][ C0] RSP: 0018:ffffc90000e77540 EFLAGS: 00000046 [ 2950.968514][ C0] RAX: 0000000000000003 RBX: ffff88812dd608ec RCX: ffffffff81500909 [ 2950.968525][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88812dd608ec [ 2950.968535][ C0] RBP: ffffc90000e775d0 R08: ffff88812dd608ec R09: 1ffff11025bac11d [ 2950.968546][ C0] R10: dffffc0000000000 R11: ffffed1025bac11e R12: 1ffff1103ee00001 [ 2950.968558][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff920001ceea8 [ 2950.968570][ C0] FS: 00007fe0570d66c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2950.968583][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2950.968594][ C0] CR2: 00007fd5f9d586b8 CR3: 000000012d19c000 CR4: 00000000003506b0 [ 2950.968609][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2950.968618][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2950.968627][ C0] Call Trace: [ 2950.968634][ C0] [ 2950.968642][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 2950.968670][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 2950.968688][ C0] ? __set_page_owner+0x2c2/0x2e0 [ 2950.968704][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 2950.968721][ C0] ? prep_new_page+0x1c/0x110 [ 2950.968737][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 2950.968752][ C0] _raw_spin_lock_irq+0xe5/0xf0 [ 2950.968768][ C0] ? _raw_spin_lock_irqsave+0x130/0x130 [ 2950.968784][ C0] ? debug_smp_processor_id+0x17/0x20 [ 2950.968798][ C0] ? perf_trace_buf_alloc+0x1b8/0x320 [ 2950.968824][ C0] perf_trace_sched_blocked_reason+0x24f/0x4b0 [ 2950.968839][ C0] ? trace_event_raw_event_sched_blocked_reason+0x370/0x370 [ 2950.968857][ C0] try_to_wake_up+0xea1/0x1160 [ 2950.968871][ C0] ? __kasan_check_write+0x14/0x20 [ 2950.968888][ C0] wake_up_q+0xdf/0x1c0 [ 2950.968902][ C0] __mutex_unlock_slowpath+0x298/0x3f0 [ 2950.968917][ C0] ? __alloc_pages+0x1a2/0x460 [ 2950.968930][ C0] ? mutex_unlock+0x230/0x230 [ 2950.968943][ C0] ? vmap_pages_range_noflush+0x658/0x6e0 [ 2950.968961][ C0] mutex_unlock+0xe4/0x230 [ 2950.968974][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 2950.968988][ C0] ? _find_next_bit+0x1fa/0x200 [ 2950.969004][ C0] ? __bitmap_set+0x131/0x170 [ 2950.969018][ C0] pcpu_alloc+0xf78/0x16e0 [ 2950.969038][ C0] __alloc_percpu_gfp+0x25/0x30 [ 2950.969053][ C0] bpf_map_alloc_percpu+0xc5/0x150 [ 2950.969070][ C0] htab_map_alloc+0xc1b/0x14f0 [ 2950.969089][ C0] map_create+0x455/0x21b0 [ 2950.969102][ C0] __sys_bpf+0x2ff/0x7d0 [ 2950.969115][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 2950.969133][ C0] __x64_sys_bpf+0x7c/0x90 [ 2950.969145][ C0] x64_sys_call+0x4b9/0x9a0 [ 2950.969159][ C0] do_syscall_64+0x4c/0xa0 [ 2950.969174][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2950.969187][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2950.969199][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2950.969216][ C0] RIP: 0033:0x7fe05867af79 [ 2950.969237][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2950.969249][ C0] RSP: 002b:00007fe0570d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2950.969263][ C0] RAX: ffffffffffffffda RBX: 00007fe0588f4fa0 RCX: 00007fe05867af79 [ 2950.969275][ C0] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 2950.969284][ C0] RBP: 00007fe0587117e0 R08: 0000000000000000 R09: 0000000000000000 [ 2950.969293][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2950.969302][ C0] R13: 00007fe0588f5038 R14: 00007fe0588f4fa0 R15: 00007ffc1ba27ee8 [ 2950.969316][ C0] [ 2950.969379][ C1] rcu: rcu_preempt kthread starved for 10006 jiffies! g371613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2951.377435][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2951.387388][ C1] rcu: RCU grace-period kthread stack dump: [ 2951.393259][ C1] task:rcu_preempt state:R running task stack:28640 pid: 14 ppid: 2 flags:0x00004000 [ 2951.404009][ C1] Call Trace: [ 2951.407272][ C1] [ 2951.410197][ C1] __schedule+0xb6e/0x14c0 [ 2951.414613][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2951.420496][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2951.426292][ C1] ? __mod_timer+0x7da/0xb50 [ 2951.430869][ C1] schedule+0x11e/0x1e0 [ 2951.435013][ C1] schedule_timeout+0x159/0x340 [ 2951.439868][ C1] ? console_conditional_schedule+0x30/0x30 [ 2951.445918][ C1] ? update_process_times+0x200/0x200 [ 2951.451275][ C1] ? prepare_to_swait_event+0x308/0x320 [ 2951.456810][ C1] rcu_gp_fqs_loop+0x2ae/0xf80 [ 2951.461560][ C1] ? __kasan_check_write+0x14/0x20 [ 2951.466685][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2951.472043][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 2951.477139][ C1] ? rcu_gp_init+0xc00/0xc00 [ 2951.481720][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2951.486906][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 2951.491484][ C1] rcu_gp_kthread+0x9b/0x360 [ 2951.496066][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 2951.500728][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 2951.505405][ C1] ? __kasan_check_read+0x11/0x20 [ 2951.510445][ C1] ? __kthread_parkme+0xac/0x200 [ 2951.515376][ C1] kthread+0x411/0x500 [ 2951.519463][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 2951.524140][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2951.528715][ C1] ret_from_fork+0x1f/0x30 [ 2951.533127][ C1] [ 2951.536138][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2951.542439][ C1] NMI backtrace for cpu 1 [ 2951.546748][ C1] CPU: 1 PID: 26740 Comm: syz.2.19832 Tainted: G W syzkaller #0 [ 2951.555686][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2951.565740][ C1] Call Trace: [ 2951.569003][ C1] [ 2951.571837][ C1] __dump_stack+0x21/0x30 [ 2951.576157][ C1] dump_stack_lvl+0x110/0x170 [ 2951.580817][ C1] ? show_regs_print_info+0x20/0x20 [ 2951.586003][ C1] dump_stack+0x15/0x20 [ 2951.590151][ C1] nmi_cpu_backtrace+0x2af/0x2c0 [ 2951.595079][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 2951.601227][ C1] ? load_image+0x3e0/0x3e0 [ 2951.605716][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2951.611767][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2951.617819][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 2951.623785][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2951.629676][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 2951.635819][ C1] print_other_cpu_stall+0xe33/0x1010 [ 2951.641186][ C1] ? print_cpu_stall+0x600/0x600 [ 2951.646123][ C1] ? tick_nohz_handler+0x300/0x300 [ 2951.651232][ C1] ? accumulate_nsecs_to_secs+0xb1/0x250 [ 2951.656853][ C1] ? cgroup_rstat_updated+0xf5/0x360 [ 2951.662127][ C1] ? timekeeping_update+0x397/0x470 [ 2951.667317][ C1] rcu_sched_clock_irq+0x8b2/0x12c0 [ 2951.672513][ C1] ? rcu_boost_kthread_setaffinity+0x320/0x320 [ 2951.678659][ C1] ? hrtimer_run_queues+0x166/0x430 [ 2951.683863][ C1] update_process_times+0x198/0x200 [ 2951.689063][ C1] tick_sched_timer+0x17c/0x240 [ 2951.693905][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 2951.699438][ C1] __hrtimer_run_queues+0x3b9/0x9f0 [ 2951.704658][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 2951.709759][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 2951.715812][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 2951.720741][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 2951.726620][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2951.732235][ C1] [ 2951.735152][ C1] [ 2951.738074][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2951.744039][ C1] RIP: 0010:smp_call_function_many_cond+0x8ed/0xa10 [ 2951.750635][ C1] Code: 1f 89 de 83 e6 01 31 ff e8 e0 4e 0a 00 83 e3 01 48 8b 5c 24 10 75 07 e8 21 4b 0a 00 eb 42 f3 90 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 fb 4a [ 2951.770224][ C1] RSP: 0018:ffffc90000c87680 EFLAGS: 00000293 [ 2951.776360][ C1] RAX: dffffc0000000000 RBX: ffff8881f7138e80 RCX: ffff88811a9b4f00 [ 2951.784317][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2951.792276][ C1] RBP: ffffc90000c87798 R08: ffff8881f7138e97 R09: 1ffff1103ee271d2 [ 2951.800233][ C1] R10: dffffc0000000000 R11: ffffed103ee271d3 R12: 1ffff1103ee271d0 [ 2951.808187][ C1] R13: 1ffff1103ee07af9 R14: 0000000000000000 R15: ffff8881f703d7c8 [ 2951.816165][ C1] ? text_poke_sync+0x30/0x30 [ 2951.820828][ C1] ? smp_call_function_many+0x40/0x40 [ 2951.826303][ C1] ? khugepaged_scan_mm_slot+0x156f/0x6540 [ 2951.832115][ C1] ? text_poke+0x20/0x20 [ 2951.836337][ C1] ? text_poke_loc_init+0x396/0x5b0 [ 2951.841520][ C1] ? text_poke_sync+0x30/0x30 [ 2951.846181][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 2951.851289][ C1] text_poke_bp_batch+0x1d4/0x600 [ 2951.856415][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 2951.861598][ C1] ? __kasan_check_write+0x14/0x20 [ 2951.866693][ C1] ? mutex_lock+0x9b/0x1c0 [ 2951.871092][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2951.877668][ C1] ? text_poke_queue+0xdf/0x180 [ 2951.882508][ C1] text_poke_finish+0x1a/0x30 [ 2951.887165][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 2951.893227][ C1] __jump_label_update+0x37c/0x3a0 [ 2951.898331][ C1] jump_label_update+0x39b/0x450 [ 2951.903435][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 2951.909319][ C1] static_key_disable+0x1a/0x30 [ 2951.914155][ C1] tracepoint_probe_unregister+0x62b/0x8d0 [ 2951.919949][ C1] trace_event_reg+0x225/0x270 [ 2951.924705][ C1] perf_trace_event_unreg+0xbb/0x1b0 [ 2951.929979][ C1] perf_trace_destroy+0xad/0x170 [ 2951.934905][ C1] tp_perf_event_destroy+0x15/0x20 [ 2951.940029][ C1] ? perf_swevent_read+0x10/0x10 [ 2951.944954][ C1] _free_event+0x9bf/0xcd0 [ 2951.949358][ C1] perf_event_release_kernel+0x825/0x8c0 [ 2951.954997][ C1] ? perf_event_read_local+0x730/0x730 [ 2951.960446][ C1] ? kasan_quarantine_put+0x34/0x190 [ 2951.965716][ C1] perf_release+0x3b/0x40 [ 2951.970130][ C1] ? perf_mmap+0x1290/0x1290 [ 2951.974706][ C1] __fput+0x20b/0x8b0 [ 2951.978702][ C1] ____fput+0x15/0x20 [ 2951.982671][ C1] task_work_run+0x127/0x190 [ 2951.987260][ C1] do_exit+0xa9e/0x27e0 [ 2951.991403][ C1] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 2951.997113][ C1] ? put_task_struct+0x90/0x90 [ 2952.001863][ C1] ? __kasan_check_write+0x14/0x20 [ 2952.006960][ C1] __x64_sys_exit+0x40/0x40 [ 2952.011450][ C1] x64_sys_call+0x44/0x9a0 [ 2952.015859][ C1] do_syscall_64+0x4c/0xa0 [ 2952.020265][ C1] ? clear_bhb_loop+0x50/0xa0 [ 2952.024929][ C1] ? clear_bhb_loop+0x50/0xa0 [ 2952.029620][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2952.035498][ C1] RIP: 0033:0x7f049c693f79 [ 2952.039904][ C1] Code: Unable to access opcode bytes at RIP 0x7f049c693f4f. [ 2952.047253][ C1] RSP: 002b:00007f049b0eefd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 2952.055666][ C1] RAX: ffffffffffffffda RBX: 00007f049c90dfa0 RCX: 00007f049c693f79 [ 2952.063641][ C1] RDX: 00007f049b0ef9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 2952.071604][ C1] RBP: 00007f049c72a7e0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.079562][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2952.087776][ C1] R13: 00007f049c90e038 R14: 00007f049c90dfa0 R15: 00007ffc608cea98 [ 2952.095747][ C1] [ 3103.215890][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz.2.19832:26740] [ 3103.224385][ C1] Modules linked in: [ 3103.228268][ C1] CPU: 1 PID: 26740 Comm: syz.2.19832 Tainted: G W syzkaller #0 [ 3103.237181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3103.247327][ C1] RIP: 0010:smp_call_function_many_cond+0x8e3/0xa10 [ 3103.253912][ C1] Code: 84 c0 0f 85 9d 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 e0 4e 0a 00 83 e3 01 48 8b 5c 24 10 75 07 e8 21 4b 0a 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 3103.273502][ C1] RSP: 0018:ffffc90000c87680 EFLAGS: 00000293 [ 3103.279556][ C1] RAX: ffffffff815f8205 RBX: ffff8881f7138e80 RCX: ffff88811a9b4f00 [ 3103.287511][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 3103.295466][ C1] RBP: ffffc90000c87798 R08: ffff8881f7138e97 R09: 1ffff1103ee271d2 [ 3103.303546][ C1] R10: dffffc0000000000 R11: ffffed103ee271d3 R12: 1ffff1103ee271d0 [ 3103.311587][ C1] R13: 1ffff1103ee07af9 R14: 0000000000000000 R15: ffff8881f703d7c8 [ 3103.319561][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3103.328478][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3103.335048][ C1] CR2: 00002000002e8000 CR3: 000000000660f000 CR4: 00000000003506a0 [ 3103.343011][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3103.350964][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3103.358916][ C1] Call Trace: [ 3103.362192][ C1] [ 3103.365114][ C1] ? text_poke_sync+0x30/0x30 [ 3103.369797][ C1] ? smp_call_function_many+0x40/0x40 [ 3103.375153][ C1] ? khugepaged_scan_mm_slot+0x156f/0x6540 [ 3103.380971][ C1] ? text_poke+0x20/0x20 [ 3103.385209][ C1] ? text_poke_loc_init+0x396/0x5b0 [ 3103.390394][ C1] ? text_poke_sync+0x30/0x30 [ 3103.395054][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 3103.400155][ C1] text_poke_bp_batch+0x1d4/0x600 [ 3103.405171][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 3103.410360][ C1] ? __kasan_check_write+0x14/0x20 [ 3103.415456][ C1] ? mutex_lock+0x9b/0x1c0 [ 3103.419873][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 3103.426446][ C1] ? text_poke_queue+0xdf/0x180 [ 3103.431369][ C1] text_poke_finish+0x1a/0x30 [ 3103.436119][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 3103.442094][ C1] __jump_label_update+0x37c/0x3a0 [ 3103.447195][ C1] jump_label_update+0x39b/0x450 [ 3103.452119][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 3103.457998][ C1] static_key_disable+0x1a/0x30 [ 3103.462833][ C1] tracepoint_probe_unregister+0x62b/0x8d0 [ 3103.468638][ C1] trace_event_reg+0x225/0x270 [ 3103.473383][ C1] perf_trace_event_unreg+0xbb/0x1b0 [ 3103.478650][ C1] perf_trace_destroy+0xad/0x170 [ 3103.483567][ C1] tp_perf_event_destroy+0x15/0x20 [ 3103.488669][ C1] ? perf_swevent_read+0x10/0x10 [ 3103.493599][ C1] _free_event+0x9bf/0xcd0 [ 3103.498028][ C1] perf_event_release_kernel+0x825/0x8c0 [ 3103.503651][ C1] ? perf_event_read_local+0x730/0x730 [ 3103.509106][ C1] ? kasan_quarantine_put+0x34/0x190 [ 3103.514403][ C1] perf_release+0x3b/0x40 [ 3103.518725][ C1] ? perf_mmap+0x1290/0x1290 [ 3103.523300][ C1] __fput+0x20b/0x8b0 [ 3103.527278][ C1] ____fput+0x15/0x20 [ 3103.531253][ C1] task_work_run+0x127/0x190 [ 3103.535829][ C1] do_exit+0xa9e/0x27e0 [ 3103.539974][ C1] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 3103.545693][ C1] ? put_task_struct+0x90/0x90 [ 3103.550451][ C1] ? __kasan_check_write+0x14/0x20 [ 3103.555567][ C1] __x64_sys_exit+0x40/0x40 [ 3103.560084][ C1] x64_sys_call+0x44/0x9a0 [ 3103.564486][ C1] do_syscall_64+0x4c/0xa0 [ 3103.568939][ C1] ? clear_bhb_loop+0x50/0xa0 [ 3103.573622][ C1] ? clear_bhb_loop+0x50/0xa0 [ 3103.578284][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3103.584170][ C1] RIP: 0033:0x7f049c693f79 [ 3103.588571][ C1] Code: Unable to access opcode bytes at RIP 0x7f049c693f4f. [ 3103.595923][ C1] RSP: 002b:00007f049b0eefd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 3103.604339][ C1] RAX: ffffffffffffffda RBX: 00007f049c90dfa0 RCX: 00007f049c693f79 [ 3103.612299][ C1] RDX: 00007f049b0ef9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 3103.620248][ C1] RBP: 00007f049c72a7e0 R08: 0000000000000000 R09: 0000000000000000 [ 3103.628206][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3103.636168][ C1] R13: 00007f049c90e038 R14: 00007f049c90dfa0 R15: 00007ffc608cea98 [ 3103.644208][ C1] [ 3103.647211][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3103.652438][ C0] NMI backtrace for cpu 0 [ 3103.652447][ C0] CPU: 0 PID: 26776 Comm: syz.4.19850 Tainted: G W syzkaller #0 [ 3103.652462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3103.652470][ C0] RIP: 0010:kvm_wait+0xdf/0x150 [ 3103.652488][ C0] Code: 43 c6 44 37 04 f8 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 93 66 90 0f 00 2d 42 1d d6 03 f4 87 fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07 [ 3103.652501][ C0] RSP: 0018:ffffc90000e77540 EFLAGS: 00000046 [ 3103.652514][ C0] RAX: 0000000000000003 RBX: ffff88812dd608ec RCX: ffffffff81500909 [ 3103.652524][ C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88812dd608ec [ 3103.652534][ C0] RBP: ffffc90000e775d0 R08: ffff88812dd608ec R09: 1ffff11025bac11d [ 3103.652545][ C0] R10: dffffc0000000000 R11: ffffed1025bac11e R12: 1ffff1103ee00001 [ 3103.652557][ C0] R13: ffff8881f7038ad4 R14: dffffc0000000000 R15: 1ffff920001ceea8 [ 3103.652568][ C0] FS: 00007fe0570d66c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3103.652582][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3103.652592][ C0] CR2: 00007fd5f9d586b8 CR3: 000000012d19c000 CR4: 00000000003506b0 [ 3103.652607][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3103.652616][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3103.652625][ C0] Call Trace: [ 3103.652631][ C0] [ 3103.652637][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 3103.652664][ C0] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 3103.652691][ C0] ? __set_page_owner+0x2c2/0x2e0 [ 3103.652716][ C0] ? __pv_queued_spin_unlock_slowpath+0x300/0x300 [ 3103.652744][ C0] ? prep_new_page+0x1c/0x110 [ 3103.652770][ C0] queued_spin_lock_slowpath+0x47/0x50 [ 3103.652794][ C0] _raw_spin_lock_irq+0xe5/0xf0 [ 3103.652831][ C0] ? _raw_spin_lock_irqsave+0x130/0x130 [ 3103.652848][ C0] ? debug_smp_processor_id+0x17/0x20 [ 3103.652875][ C0] ? perf_trace_buf_alloc+0x1b8/0x320 [ 3103.652890][ C0] perf_trace_sched_blocked_reason+0x24f/0x4b0 [ 3103.652924][ C0] ? trace_event_raw_event_sched_blocked_reason+0x370/0x370 [ 3103.652943][ C0] try_to_wake_up+0xea1/0x1160 [ 3103.652959][ C0] ? __kasan_check_write+0x14/0x20 [ 3103.652976][ C0] wake_up_q+0xdf/0x1c0 [ 3103.652992][ C0] __mutex_unlock_slowpath+0x298/0x3f0 [ 3103.653007][ C0] ? __alloc_pages+0x1a2/0x460 [ 3103.653022][ C0] ? mutex_unlock+0x230/0x230 [ 3103.653036][ C0] ? vmap_pages_range_noflush+0x658/0x6e0 [ 3103.653055][ C0] mutex_unlock+0xe4/0x230 [ 3103.653069][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 3103.653083][ C0] ? _find_next_bit+0x1fa/0x200 [ 3103.653100][ C0] ? __bitmap_set+0x131/0x170 [ 3103.653114][ C0] pcpu_alloc+0xf78/0x16e0 [ 3103.653136][ C0] __alloc_percpu_gfp+0x25/0x30 [ 3103.653165][ C0] bpf_map_alloc_percpu+0xc5/0x150 [ 3103.653183][ C0] htab_map_alloc+0xc1b/0x14f0 [ 3103.653203][ C0] map_create+0x455/0x21b0 [ 3103.653217][ C0] __sys_bpf+0x2ff/0x7d0 [ 3103.653231][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 3103.653250][ C0] __x64_sys_bpf+0x7c/0x90 [ 3103.653264][ C0] x64_sys_call+0x4b9/0x9a0 [ 3103.653278][ C0] do_syscall_64+0x4c/0xa0 [ 3103.653294][ C0] ? clear_bhb_loop+0x50/0xa0 [ 3103.653307][ C0] ? clear_bhb_loop+0x50/0xa0 [ 3103.653320][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3103.653338][ C0] RIP: 0033:0x7fe05867af79 [ 3103.653352][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3103.653365][ C0] RSP: 002b:00007fe0570d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3103.653380][ C0] RAX: ffffffffffffffda RBX: 00007fe0588f4fa0 RCX: 00007fe05867af79 [ 3103.653391][ C0] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 3103.653401][ C0] RBP: 00007fe0587117e0 R08: 0000000000000000 R09: 0000000000000000 [ 3103.653411][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3103.653420][ C0] R13: 00007fe0588f5038 R14: 00007fe0588f4fa0 R15: 00007ffc1ba27ee8 [ 3103.653435][ C0]