last executing test programs: 4.050848253s ago: executing program 1 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.925965592s ago: executing program 1 (id=1475): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESOCT=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'tunl0\x00', @multicast}) 3.639597125s ago: executing program 1 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000200007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x18) 3.639205306s ago: executing program 1 (id=1478): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005000000090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x2, &(0x7f0000000880)=@raw=[@jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0x2, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000008c0)='syzkaller\x00', 0x4a0f, 0xa6, &(0x7f0000000900)=""/166, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x2, 0x6, 0x3, 0x7e4a40d9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x10000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.959392561s ago: executing program 0 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r2}, 0x18) 2.878484377s ago: executing program 4 (id=1486): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000700000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000004c0)='kvm_unmap_hva_range\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8906, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000090000000000004bbb2b0843618f10e5fee25ce390009a897adf138935153c213f0000c50000000e800200f205f6b7d9be54bc7da5c6244794c67e1d801d501894fd75b6ccfe0b0f3694ee337656f7318f0efd6790039647152cef8f6e801d59c98e370b2ec0a642833017b69da9741bcf031144a22100711a3dae35c1f2951b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.828543792s ago: executing program 0 (id=1487): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f00000008c0)='syzkaller\x00', 0x4a0f, 0xa6, &(0x7f0000000900)=""/166, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x2, 0x6, 0x3, 0x7e4a40d9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x10000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.501520679s ago: executing program 4 (id=1490): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a94}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f00000000c0)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500d70000002020207b1af8ff0000005d4cbdfe000000000007010000f8ffffffb702000008000000b703000007000000850000000600000085000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500d70000002020207b1af8ff0000005d4cbdfe000000000007010000f8ffffffb702000008000000b703000007000000850000000600000085000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.466916402s ago: executing program 0 (id=1491): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x101, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r0, 0x7fff}, 0xc) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000400"/21], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x40800) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000bed22cce7e198edd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb71a00000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.395560267s ago: executing program 2 (id=1493): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (fail_nth: 8) 982.587171ms ago: executing program 3 (id=1496): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="59acc3849c1061f90142392448"], 0xfdef) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="0c9d56491a107194fff073a9002c834b287ede3a89bd88456ae1d704f96a53fd9aeae7b55a1533186e160be0e8adbeddacc6fc11b84d9fbf8b4c9493157bf70181666d4d2dcd24535d876e6ec28fbaa95738b957a2799bcab913f64a9c142256acff065badd18572fe2457cc5f0daa36b226992b947056faffcef4af7091f33ba1bdb1ffdaeeebdf4f87945b942629", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220018"], 0xfdef) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 956.060443ms ago: executing program 4 (id=1497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r2}, 0x18) 932.526475ms ago: executing program 4 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYBLOB="f902bac814ded1c22e01321d637b6379ca63ff29ba42d640882e36f5534ba3f79dd1dd761b6a45a6d7c7b190b7cde753fe860c5d3ffe0aa2dfae0109d231a73b1c2be68f5c10357b34c68847530aa1575d94bd7296b5f34e7f8d46a3436c0efc2b72d43df675b3469d5c59daf72d22d05bfef779b2a6584acfb5c3852587532637d787837462f482fc248195fbf5f8686d8e98e1ac8b606b3e879f586e7991a66663e042c297b536859102ddea294eac88c4374b75bfd375bcce68df7131", @ANYRES32=0x0, @ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000000000e1fbff00010000ff000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svcsock_tcp_state\x00', r1, 0x0, 0x4000000}, 0xfffffffffffffdf7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a0000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) 876.485839ms ago: executing program 0 (id=1499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r2, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x1}, @const={0x5, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x30, 0x61, 0x30, 0x30, 0x2e, 0x30]}}, &(0x7f0000000d00)=""/100, 0x49, 0x64, 0x1, 0x24, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r10, &(0x7f0000000680)="e88b9866d6"}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x22, &(0x7f0000000700)=@raw=[@ldst={0x1, 0x2, 0x6, 0x3, 0x0, 0x10, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9a87}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x6, 0x7, 0x9, 0x8}, @ldst={0x0, 0x2, 0x3, 0x4, 0x0, 0x20, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f0000000840)='GPL\x00', 0x6, 0xd3, &(0x7f0000000880)=""/211, 0x41100, 0x41, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000dc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0x8, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f40)=[0xffffffffffffffff, r11, r12], &(0x7f0000000f80)=[{0x2, 0x5, 0x0, 0x4}, {0x5, 0x5, 0x3, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8120036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r13, 0x4) 876.1736ms ago: executing program 2 (id=1500): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1, 0x0, 0x0, 0x17000000}, 0x0) 808.315435ms ago: executing program 0 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000107020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x18) 785.776137ms ago: executing program 0 (id=1502): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r3, 0x8982, 0x20000500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000100000002"], 0x0, 0x4e}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="1e00004000120000005000002df0acd92e93529179c14230e8269e17d57a82f7df69650ec6c8111e5d20aef880d5d7f2d1cd6fe47bc02e5b08c98b35ca8c9a7964f45f0b427fa1aebf962f2796454c84b41061a29aadd10286941db10bc21cbaf827e43bffb5c0ab13370eb4651e2a00fbcf22fd9b782c4f60eb0b195e520ec1dc55fcc4efe28ba2989037f0f945842c9d0cd5df95c4664ae9617698b6937b0cae46b03053870cd4aa3b4cbc94512c42676ce8f32df2e6302789e65857eb95fd", @ANYRES64], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x4, 0x8, 0x8, 0x1, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000003c0)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x7fff, 0x400}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)=[r4, r4, r4, r2], 0x0, 0x10, 0x4}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000002f7277e0f481ff2ed40bcd72395f70e4ba2ceaeeceba16f039f22567458d44d2f851cb30d0b2cbc94d3a131ddcef8d28472e6679aedb00"/74], 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x0, 0x80, 0xf6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff00, 0x2}, 0x1882a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 667.589386ms ago: executing program 2 (id=1503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x84, 0x5, 0x0, 0x0, 0x0, 0x0, 0x322c6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4, 0x1, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 606.183181ms ago: executing program 3 (id=1504): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x13, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='net_dev_start_xmit\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xfffffffffffffecf, 0x0, &(0x7f0000000a80)="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", 0x0, 0xfe, 0x60000000, 0x1, 0x49, &(0x7f0000000000)="e2", &(0x7f0000000c40)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc28b4d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x3, 0x0, 0x101}, 0x50) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="61202a3a2a2077df5f59414f6464a86da5906e58cc00"], 0x8) recvmsg$unix(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) 605.580621ms ago: executing program 2 (id=1514): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x84, 0x5, 0x0, 0x0, 0x0, 0x0, 0x322c6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4, 0x1, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 562.220615ms ago: executing program 2 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000000), 0x15) 527.716237ms ago: executing program 4 (id=1506): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) 515.616439ms ago: executing program 2 (id=1507): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x3, 0x80, 0xf6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff00, 0x2}, 0x1882a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x0, 0x6, 0xf, 0x0, 0x100000000, 0x10, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x6}, 0x8, 0x5, 0x3, 0x4, 0x6, 0x9, 0x7210, 0x0, 0xfff, 0x0, 0x3}, r2, 0x2, r1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000faffffff020000f2a1a81042b9624c637d8cbee70d000500000604000000000000000400000001000000050000000b000000f0"], &(0x7f0000000440)=""/93, 0x56, 0x5d, 0x1, 0x2, 0x10000, @value=r3}, 0x28) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000070000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)="4a4072f5816af9f03627826f", 0x0, 0x0, r4, 0x4}, 0x38) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@generic={0x0, r8}, 0x18) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 413.645777ms ago: executing program 3 (id=1508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r2}, 0x18) 333.446013ms ago: executing program 3 (id=1509): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x101, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r0, 0x7fff}, 0xc) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000400"/21], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x40800) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000bed22cce7e198edd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb71b00000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 332.458124ms ago: executing program 1 (id=1510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008c96"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000000000000104000000000000", @ANYRES32, @ANYBLOB="ff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000009000000fcffffffffff0000000000000000000000000000000e522a185b4f1bcb6ac6e371e2000e3901464667b8922bfdcca6f9ee0fc56f764d4e630437f4425ff509718c3583523752de9b8da0c227276000a5223853d1be191af617ffdfc3638429afc89ed78e302e73ff759e59383d5a13ae3ee9ec05f7fd4d92d9d53c6b881ddadef983b1687c0256a7bf5e8cd58a50591b7d5cfa2c6f6783f0eaa56eb095cab87167055af530d8f65e87969c04b7c44b8ea4401e974af7f074546bd3698d1d90b0e84e9e6dfe3ec1321e0ba656d737ac6ec1e502e049ad19213b777414dec98fc042f31adfb6a27bfd2aa5e73cd55a32bf490a9a2eae57390b42b6693731"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x31) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r0, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5f51}, [@map_fd={0x18, 0xb, 0x1, 0x0, r4}]}, &(0x7f0000000340)='syzkaller\x00', 0x2ed, 0x1b, &(0x7f0000000380)=""/27, 0x40f00, 0x25, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r3, r0, r2], 0x0, 0x10, 0x80}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x2108000, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r8, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 73.275264ms ago: executing program 1 (id=1511): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (fail_nth: 9) 73.054885ms ago: executing program 3 (id=1512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000010107020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x18) 47.221306ms ago: executing program 3 (id=1513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYBLOB="f902bac814ded1c22e01321d637b6379ca63ff29ba42d640882e36f5534ba3f79dd1dd761b6a45a6d7c7b190b7cde753fe860c5d3ffe0aa2dfae0109d231a73b1c2be68f5c10357b34c68847530aa1575d94bd7296b5f34e7f8d46a3436c0efc2b72d43df675b3469d5c59daf72d22d05bfef779b2a6584acfb5c3852587532637d787837462f482fc248195fbf5f8686d8e98e1ac8b606b3e879f586e7991a66663e042c297b536859102ddea294eac88c4374b75bfd375bcce68df7131", @ANYRES32=0x0, @ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000000000e1fbff00010000ff000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svcsock_tcp_state\x00', r1, 0x0, 0x4000000}, 0xfffffffffffffdf7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a0000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 0s ago: executing program 4 (id=1515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYBLOB="f902bac814ded1c22e01321d637b6379ca63ff29ba42d640882e36f5534ba3f79dd1dd761b6a45a6d7c7b190b7cde753fe860c5d3ffe0aa2dfae0109d231a73b1c2be68f5c10357b34c68847530aa1575d94bd7296b5f34e7f8d46a3436c0efc2b72d43df675b3469d5c59daf72d22d05bfef779b2a6584acfb5c3852587532637d787837462f482fc248195fbf5f8686d8e98e1ac8b606b3e879f586e7991a66663e042c297b536859102ddea294eac88c4374b75bfd375bcce68df7131", @ANYRES32=0x0, @ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000000000e1fbff00010000ff000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svcsock_tcp_state\x00', r1, 0x0, 0x4000000}, 0xfffffffffffffdf7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a0000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) kernel console output (not intermixed with test programs): 000000 [ 42.908338][ T1103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.916303][ T1103] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 42.924533][ T1103] [ 43.462530][ T30] audit: type=1400 audit(1755745926.081:129): avc: denied { create } for pid=1121 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.777416][ T1132] FAULT_INJECTION: forcing a failure. [ 43.777416][ T1132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 43.796053][ T1132] CPU: 1 PID: 1132 Comm: syz.1.257 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 43.806160][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.816403][ T1132] Call Trace: [ 43.819692][ T1132] [ 43.822629][ T1132] __dump_stack+0x21/0x30 [ 43.827090][ T1132] dump_stack_lvl+0xee/0x150 [ 43.831774][ T1132] ? show_regs_print_info+0x20/0x20 [ 43.836991][ T1132] ? _raw_spin_lock+0x8e/0xe0 [ 43.841684][ T1132] dump_stack+0x15/0x20 [ 43.846095][ T1132] should_fail+0x3c1/0x510 [ 43.850592][ T1132] should_fail_alloc_page+0x55/0x80 [ 43.855868][ T1132] prepare_alloc_pages+0x156/0x600 [ 43.860967][ T1132] ? __alloc_pages_bulk+0xab0/0xab0 [ 43.866149][ T1132] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 43.871778][ T1132] __alloc_pages+0x10a/0x440 [ 43.876372][ T1132] ? prep_new_page+0x110/0x110 [ 43.881123][ T1132] pcpu_populate_chunk+0x184/0xcb0 [ 43.886218][ T1132] ? _find_next_bit+0x1b5/0x200 [ 43.891262][ T1132] pcpu_alloc+0xc4d/0x1660 [ 43.895766][ T1132] __alloc_percpu_gfp+0x25/0x30 [ 43.900864][ T1132] bpf_map_alloc_percpu+0xc5/0x150 [ 43.906051][ T1132] htab_map_alloc+0xc1b/0x14f0 [ 43.910815][ T1132] map_create+0x455/0x21b0 [ 43.915326][ T1132] __sys_bpf+0x2cf/0x730 [ 43.919552][ T1132] ? bpf_link_show_fdinfo+0x310/0x310 [ 43.925014][ T1132] ? debug_smp_processor_id+0x17/0x20 [ 43.930378][ T1132] __x64_sys_bpf+0x7c/0x90 [ 43.935190][ T1132] x64_sys_call+0x4b9/0x9a0 [ 43.939874][ T1132] do_syscall_64+0x4c/0xa0 [ 43.944404][ T1132] ? clear_bhb_loop+0x50/0xa0 [ 43.949205][ T1132] ? clear_bhb_loop+0x50/0xa0 [ 43.954322][ T1132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.960385][ T1132] RIP: 0033:0x7f85d967abe9 [ 43.964804][ T1132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.984793][ T1132] RSP: 002b:00007f85d80e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.993263][ T1132] RAX: ffffffffffffffda RBX: 00007f85d98a1fa0 RCX: 00007f85d967abe9 [ 44.001344][ T1132] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 44.009309][ T1132] RBP: 00007f85d80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 44.017537][ T1132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.025667][ T1132] R13: 00007f85d98a2038 R14: 00007f85d98a1fa0 R15: 00007ffc83bd3d38 [ 44.033680][ T1132] [ 44.156452][ T1139] device pim6reg1 entered promiscuous mode [ 44.196635][ T1139] FAULT_INJECTION: forcing a failure. [ 44.196635][ T1139] name failslab, interval 1, probability 0, space 0, times 0 [ 44.220610][ T1139] CPU: 0 PID: 1139 Comm: syz.3.259 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 44.231253][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.241705][ T1139] Call Trace: [ 44.245164][ T1139] [ 44.248268][ T1139] __dump_stack+0x21/0x30 [ 44.252730][ T1139] dump_stack_lvl+0xee/0x150 [ 44.257364][ T1139] ? show_regs_print_info+0x20/0x20 [ 44.262614][ T1139] ? __kasan_check_write+0x14/0x20 [ 44.267774][ T1139] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 44.273406][ T1139] ? _raw_spin_lock+0xe0/0xe0 [ 44.278163][ T1139] ? kasan_quarantine_put+0x34/0x190 [ 44.283490][ T1139] dump_stack+0x15/0x20 [ 44.287677][ T1139] should_fail+0x3c1/0x510 [ 44.292135][ T1139] __should_failslab+0xa4/0xe0 [ 44.296961][ T1139] should_failslab+0x9/0x20 [ 44.301601][ T1139] slab_pre_alloc_hook+0x3b/0xe0 [ 44.306963][ T1139] kmem_cache_alloc_trace+0x48/0x270 [ 44.312309][ T1139] ? ____ip_mc_inc_group+0x1ab/0x860 [ 44.317741][ T1139] ____ip_mc_inc_group+0x1ab/0x860 [ 44.322906][ T1139] ip_mc_up+0x112/0x1f0 [ 44.327108][ T1139] inetdev_event+0xc5d/0x10a0 [ 44.331925][ T1139] ? devinet_exit_net+0x220/0x220 [ 44.336990][ T1139] ? up_read+0x56/0x1d0 [ 44.341256][ T1139] raw_notifier_call_chain+0x90/0x100 [ 44.346651][ T1139] __dev_notify_flags+0x28f/0x500 [ 44.351699][ T1139] ? __dev_change_flags+0x6a0/0x6a0 [ 44.356950][ T1139] ? __dev_change_flags+0x510/0x6a0 [ 44.362321][ T1139] ? dev_get_flags+0x1e0/0x1e0 [ 44.367202][ T1139] ? __kasan_slab_free+0x11/0x20 [ 44.372183][ T1139] dev_change_flags+0xe8/0x1a0 [ 44.377098][ T1139] dev_ifsioc+0x147/0xe70 [ 44.381523][ T1139] ? dev_ioctl+0xd10/0xd10 [ 44.386116][ T1139] ? __kasan_check_write+0x14/0x20 [ 44.391320][ T1139] ? mutex_lock+0x95/0x1a0 [ 44.395821][ T1139] ? wait_for_completion_killable_timeout+0x10/0x10 [ 44.402432][ T1139] ? dev_get_by_name_rcu+0xc8/0xf0 [ 44.407560][ T1139] dev_ioctl+0x560/0xd10 [ 44.412068][ T1139] sock_do_ioctl+0x22e/0x300 [ 44.416923][ T1139] ? sock_show_fdinfo+0xa0/0xa0 [ 44.421774][ T1139] ? selinux_file_ioctl+0x377/0x480 [ 44.427085][ T1139] sock_ioctl+0x4bc/0x6b0 [ 44.431506][ T1139] ? sock_poll+0x3d0/0x3d0 [ 44.435933][ T1139] ? __fget_files+0x2c4/0x320 [ 44.440699][ T1139] ? security_file_ioctl+0x84/0xa0 [ 44.445811][ T1139] ? sock_poll+0x3d0/0x3d0 [ 44.450361][ T1139] __se_sys_ioctl+0x121/0x1a0 [ 44.455047][ T1139] __x64_sys_ioctl+0x7b/0x90 [ 44.459639][ T1139] x64_sys_call+0x2f/0x9a0 [ 44.464262][ T1139] do_syscall_64+0x4c/0xa0 [ 44.468781][ T1139] ? clear_bhb_loop+0x50/0xa0 [ 44.473579][ T1139] ? clear_bhb_loop+0x50/0xa0 [ 44.478455][ T1139] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.484457][ T1139] RIP: 0033:0x7f301e113be9 [ 44.488881][ T1139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.508488][ T1139] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.517429][ T1139] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 44.525414][ T1139] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000a [ 44.533474][ T1139] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 44.541825][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.549840][ T1139] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 44.557958][ T1139] [ 44.858298][ T30] audit: type=1400 audit(1755745927.481:130): avc: denied { create } for pid=1156 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.324488][ T1173] FAULT_INJECTION: forcing a failure. [ 45.324488][ T1173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 45.338286][ T1173] CPU: 1 PID: 1173 Comm: syz.3.270 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 45.348381][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.358619][ T1173] Call Trace: [ 45.361899][ T1173] [ 45.364832][ T1173] __dump_stack+0x21/0x30 [ 45.369344][ T1173] dump_stack_lvl+0xee/0x150 [ 45.374024][ T1173] ? show_regs_print_info+0x20/0x20 [ 45.379429][ T1173] dump_stack+0x15/0x20 [ 45.383594][ T1173] should_fail+0x3c1/0x510 [ 45.388016][ T1173] should_fail_alloc_page+0x55/0x80 [ 45.393354][ T1173] prepare_alloc_pages+0x156/0x600 [ 45.398590][ T1173] ? __alloc_pages_bulk+0xab0/0xab0 [ 45.403886][ T1173] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 45.409612][ T1173] __alloc_pages+0x10a/0x440 [ 45.414206][ T1173] ? prep_new_page+0x110/0x110 [ 45.419064][ T1173] pcpu_populate_chunk+0x184/0xcb0 [ 45.424182][ T1173] ? _find_next_bit+0x1b5/0x200 [ 45.429390][ T1173] pcpu_alloc+0xc4d/0x1660 [ 45.433820][ T1173] __alloc_percpu_gfp+0x25/0x30 [ 45.438673][ T1173] bpf_map_alloc_percpu+0xc5/0x150 [ 45.443790][ T1173] htab_map_alloc+0xc1b/0x14f0 [ 45.448561][ T1173] map_create+0x455/0x21b0 [ 45.452986][ T1173] __sys_bpf+0x2cf/0x730 [ 45.457288][ T1173] ? bpf_link_show_fdinfo+0x310/0x310 [ 45.462809][ T1173] ? debug_smp_processor_id+0x17/0x20 [ 45.468183][ T1173] __x64_sys_bpf+0x7c/0x90 [ 45.472598][ T1173] x64_sys_call+0x4b9/0x9a0 [ 45.477300][ T1173] do_syscall_64+0x4c/0xa0 [ 45.481727][ T1173] ? clear_bhb_loop+0x50/0xa0 [ 45.486688][ T1173] ? clear_bhb_loop+0x50/0xa0 [ 45.491640][ T1173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.497542][ T1173] RIP: 0033:0x7f301e113be9 [ 45.501958][ T1173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.521561][ T1173] RSP: 002b:00007f301cb5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.529980][ T1173] RAX: ffffffffffffffda RBX: 00007f301e33b090 RCX: 00007f301e113be9 [ 45.537954][ T1173] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 45.546011][ T1173] RBP: 00007f301cb5b090 R08: 0000000000000000 R09: 0000000000000000 [ 45.553984][ T1173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.562216][ T1173] R13: 00007f301e33b128 R14: 00007f301e33b090 R15: 00007ffedecaa738 [ 45.570645][ T1173] [ 45.798270][ T1177] device pim6reg1 entered promiscuous mode [ 45.859322][ T1192] device pim6reg1 entered promiscuous mode [ 46.468917][ T1210] FAULT_INJECTION: forcing a failure. [ 46.468917][ T1210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 46.491435][ T1210] CPU: 1 PID: 1210 Comm: syz.2.283 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 46.501680][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.512009][ T1210] Call Trace: [ 46.515303][ T1210] [ 46.518275][ T1210] __dump_stack+0x21/0x30 [ 46.522620][ T1210] dump_stack_lvl+0xee/0x150 [ 46.527628][ T1210] ? show_regs_print_info+0x20/0x20 [ 46.532924][ T1210] ? get_page_from_freelist+0x2cc5/0x2d50 [ 46.538686][ T1210] dump_stack+0x15/0x20 [ 46.542847][ T1210] should_fail+0x3c1/0x510 [ 46.547474][ T1210] should_fail_alloc_page+0x55/0x80 [ 46.552876][ T1210] prepare_alloc_pages+0x156/0x600 [ 46.557975][ T1210] ? __alloc_pages_bulk+0xab0/0xab0 [ 46.563192][ T1210] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 46.569049][ T1210] __alloc_pages+0x10a/0x440 [ 46.573905][ T1210] ? prep_new_page+0x110/0x110 [ 46.578770][ T1210] pcpu_populate_chunk+0x184/0xcb0 [ 46.583882][ T1210] ? _find_next_bit+0x1b5/0x200 [ 46.589005][ T1210] pcpu_alloc+0xc4d/0x1660 [ 46.593417][ T1210] __alloc_percpu_gfp+0x25/0x30 [ 46.598791][ T1210] bpf_map_alloc_percpu+0xc5/0x150 [ 46.603895][ T1210] htab_map_alloc+0xc1b/0x14f0 [ 46.608662][ T1210] map_create+0x455/0x21b0 [ 46.613168][ T1210] __sys_bpf+0x2cf/0x730 [ 46.617407][ T1210] ? bpf_link_show_fdinfo+0x310/0x310 [ 46.622786][ T1210] ? debug_smp_processor_id+0x17/0x20 [ 46.628242][ T1210] __x64_sys_bpf+0x7c/0x90 [ 46.632778][ T1210] x64_sys_call+0x4b9/0x9a0 [ 46.637346][ T1210] do_syscall_64+0x4c/0xa0 [ 46.641780][ T1210] ? clear_bhb_loop+0x50/0xa0 [ 46.646672][ T1210] ? clear_bhb_loop+0x50/0xa0 [ 46.651386][ T1210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.657297][ T1210] RIP: 0033:0x7fa1320a7be9 [ 46.661844][ T1210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.681463][ T1210] RSP: 002b:00007fa130b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.690088][ T1210] RAX: ffffffffffffffda RBX: 00007fa1322cefa0 RCX: 00007fa1320a7be9 [ 46.698060][ T1210] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 46.706124][ T1210] RBP: 00007fa130b10090 R08: 0000000000000000 R09: 0000000000000000 [ 46.714093][ T1210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.722061][ T1210] R13: 00007fa1322cf038 R14: 00007fa1322cefa0 R15: 00007ffdd3bd2cb8 [ 46.730035][ T1210] [ 48.005639][ T1254] device sit0 left promiscuous mode [ 48.024102][ T1258] FAULT_INJECTION: forcing a failure. [ 48.024102][ T1258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.074910][ T1258] CPU: 1 PID: 1258 Comm: syz.3.300 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 48.085031][ T1258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.095126][ T1258] Call Trace: [ 48.098420][ T1258] [ 48.101366][ T1258] __dump_stack+0x21/0x30 [ 48.105789][ T1258] dump_stack_lvl+0xee/0x150 [ 48.110404][ T1258] ? show_regs_print_info+0x20/0x20 [ 48.115746][ T1258] ? preempt_schedule+0xa7/0xb0 [ 48.120624][ T1258] ? schedule_preempt_disabled+0x20/0x20 [ 48.126279][ T1258] dump_stack+0x15/0x20 [ 48.130452][ T1258] should_fail+0x3c1/0x510 [ 48.134902][ T1258] should_fail_alloc_page+0x55/0x80 [ 48.140292][ T1258] prepare_alloc_pages+0x156/0x600 [ 48.145488][ T1258] ? __alloc_pages_bulk+0xab0/0xab0 [ 48.150711][ T1258] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 48.156719][ T1258] __alloc_pages+0x10a/0x440 [ 48.161328][ T1258] ? prep_new_page+0x110/0x110 [ 48.166196][ T1258] pcpu_populate_chunk+0x184/0xcb0 [ 48.171564][ T1258] ? _find_next_bit+0x1b5/0x200 [ 48.176626][ T1258] pcpu_alloc+0xc4d/0x1660 [ 48.181162][ T1258] __alloc_percpu_gfp+0x25/0x30 [ 48.186045][ T1258] bpf_map_alloc_percpu+0xc5/0x150 [ 48.191465][ T1258] htab_map_alloc+0xc1b/0x14f0 [ 48.196340][ T1258] map_create+0x455/0x21b0 [ 48.200857][ T1258] __sys_bpf+0x2cf/0x730 [ 48.205385][ T1258] ? bpf_link_show_fdinfo+0x310/0x310 [ 48.210909][ T1258] ? debug_smp_processor_id+0x17/0x20 [ 48.216679][ T1258] __x64_sys_bpf+0x7c/0x90 [ 48.221203][ T1258] x64_sys_call+0x4b9/0x9a0 [ 48.225728][ T1258] do_syscall_64+0x4c/0xa0 [ 48.230158][ T1258] ? clear_bhb_loop+0x50/0xa0 [ 48.235030][ T1258] ? clear_bhb_loop+0x50/0xa0 [ 48.239736][ T1258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.245648][ T1258] RIP: 0033:0x7f301e113be9 [ 48.250162][ T1258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.269870][ T1258] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.278306][ T1258] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 48.286293][ T1258] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 48.294455][ T1258] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 48.302442][ T1258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.310692][ T1258] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 48.318879][ T1258] [ 48.415744][ T1254] device sit0 entered promiscuous mode [ 48.856232][ T30] audit: type=1400 audit(1755745931.481:131): avc: denied { create } for pid=1241 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.191186][ T1241] syz.4.296 (1241) used greatest stack depth: 20864 bytes left [ 50.262383][ T1326] device pim6reg1 entered promiscuous mode [ 50.751667][ T1332] device syzkaller0 entered promiscuous mode [ 51.187103][ T1352] device veth0_vlan left promiscuous mode [ 51.203518][ T1352] device veth0_vlan entered promiscuous mode [ 51.259165][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.280848][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.316351][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.492678][ T1375] FAULT_INJECTION: forcing a failure. [ 51.492678][ T1375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.510165][ T1375] CPU: 1 PID: 1375 Comm: syz.3.332 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 51.520390][ T1375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.530634][ T1375] Call Trace: [ 51.533933][ T1375] [ 51.536879][ T1375] __dump_stack+0x21/0x30 [ 51.541259][ T1375] dump_stack_lvl+0xee/0x150 [ 51.545858][ T1375] ? show_regs_print_info+0x20/0x20 [ 51.551153][ T1375] ? get_page_from_freelist+0x2cc5/0x2d50 [ 51.556899][ T1375] dump_stack+0x15/0x20 [ 51.561066][ T1375] should_fail+0x3c1/0x510 [ 51.565593][ T1375] should_fail_alloc_page+0x55/0x80 [ 51.570802][ T1375] prepare_alloc_pages+0x156/0x600 [ 51.575936][ T1375] ? __alloc_pages_bulk+0xab0/0xab0 [ 51.581928][ T1375] ? __bpf_trace_mm_page_alloc+0xc0/0xf0 [ 51.587844][ T1375] __alloc_pages+0x10a/0x440 [ 51.592458][ T1375] ? prep_new_page+0x110/0x110 [ 51.597270][ T1375] pcpu_populate_chunk+0x184/0xcb0 [ 51.602435][ T1375] ? _find_next_bit+0x1b5/0x200 [ 51.607304][ T1375] pcpu_alloc+0xc4d/0x1660 [ 51.611817][ T1375] __alloc_percpu_gfp+0x25/0x30 [ 51.616673][ T1375] bpf_map_alloc_percpu+0xc5/0x150 [ 51.621906][ T1375] htab_map_alloc+0xc1b/0x14f0 [ 51.626740][ T1375] map_create+0x455/0x21b0 [ 51.631161][ T1375] __sys_bpf+0x2cf/0x730 [ 51.635433][ T1375] ? bpf_link_show_fdinfo+0x310/0x310 [ 51.640902][ T1375] ? debug_smp_processor_id+0x17/0x20 [ 51.646546][ T1375] __x64_sys_bpf+0x7c/0x90 [ 51.651127][ T1375] x64_sys_call+0x4b9/0x9a0 [ 51.655644][ T1375] do_syscall_64+0x4c/0xa0 [ 51.660083][ T1375] ? clear_bhb_loop+0x50/0xa0 [ 51.664768][ T1375] ? clear_bhb_loop+0x50/0xa0 [ 51.669454][ T1375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.675359][ T1375] RIP: 0033:0x7f301e113be9 [ 51.679879][ T1375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.699788][ T1375] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.708218][ T1375] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 51.716295][ T1375] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 51.724359][ T1375] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.732334][ T1375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.740312][ T1375] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 51.748296][ T1375] [ 52.713062][ T1433] device pim6reg1 entered promiscuous mode [ 53.565783][ T30] audit: type=1400 audit(1755745936.191:132): avc: denied { create } for pid=1457 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.903464][ T1483] syzkaller0: tun_chr_ioctl cmd 35111 [ 55.860595][ T1547] device pim6reg1 entered promiscuous mode [ 55.942307][ T1547] FAULT_INJECTION: forcing a failure. [ 55.942307][ T1547] name failslab, interval 1, probability 0, space 0, times 0 [ 55.955030][ T1547] CPU: 0 PID: 1547 Comm: syz.2.384 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 55.965592][ T1547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.975776][ T1547] Call Trace: [ 55.979084][ T1547] [ 55.982027][ T1547] __dump_stack+0x21/0x30 [ 55.986392][ T1547] dump_stack_lvl+0xee/0x150 [ 55.991000][ T1547] ? show_regs_print_info+0x20/0x20 [ 55.996217][ T1547] ? pcpu_alloc+0x1126/0x1660 [ 56.001096][ T1547] dump_stack+0x15/0x20 [ 56.005363][ T1547] should_fail+0x3c1/0x510 [ 56.009785][ T1547] __should_failslab+0xa4/0xe0 [ 56.014555][ T1547] should_failslab+0x9/0x20 [ 56.019094][ T1547] slab_pre_alloc_hook+0x3b/0xe0 [ 56.024066][ T1547] ? __alloc_skb+0xe0/0x740 [ 56.028593][ T1547] kmem_cache_alloc+0x44/0x260 [ 56.033354][ T1547] __alloc_skb+0xe0/0x740 [ 56.037685][ T1547] inet6_rt_notify+0x287/0x470 [ 56.042532][ T1547] ? __se_sys_ioctl+0x121/0x1a0 [ 56.047386][ T1547] ? __x64_sys_ioctl+0x7b/0x90 [ 56.052244][ T1547] ? rt6_nh_dump_exceptions+0x690/0x690 [ 56.057979][ T1547] fib6_add+0x2279/0x3d10 [ 56.062314][ T1547] ? fib6_update_sernum_stub+0x190/0x190 [ 56.068046][ T1547] ? __kasan_check_write+0x14/0x20 [ 56.073163][ T1547] ? _raw_spin_lock_bh+0x8e/0xe0 [ 56.078099][ T1547] ? _raw_spin_lock_irq+0xe0/0xe0 [ 56.083124][ T1547] ip6_route_add+0x89/0x130 [ 56.087683][ T1547] addrconf_add_linklocal+0x3cf/0x620 [ 56.093055][ T1547] ? inet6_addr_del+0x540/0x540 [ 56.097911][ T1547] ? ipv6_generate_stable_address+0x48b/0x5e0 [ 56.103978][ T1547] addrconf_addr_gen+0x468/0x5b0 [ 56.108928][ T1547] ? ip6_route_add+0x104/0x130 [ 56.113698][ T1547] ? addrconf_sysctl_register+0x1a0/0x1a0 [ 56.119425][ T1547] ? addrconf_add_dev+0x329/0x430 [ 56.124455][ T1547] ? local_bh_enable+0x30/0x30 [ 56.129229][ T1547] ? __local_bh_enable_ip+0x58/0x80 [ 56.134455][ T1547] ? addrconf_permanent_addr+0x867/0x8c0 [ 56.140179][ T1547] ? __kasan_check_read+0x11/0x20 [ 56.145210][ T1547] addrconf_init_auto_addrs+0x842/0xb90 [ 56.150756][ T1547] ? addrconf_dad_run+0x5a0/0x5a0 [ 56.155777][ T1547] ? igmpv3_del_delrec+0x700/0x700 [ 56.160896][ T1547] ? __local_bh_enable_ip+0x58/0x80 [ 56.166133][ T1547] ? _raw_spin_unlock_bh+0x51/0x60 [ 56.171243][ T1547] ? __kasan_check_write+0x14/0x20 [ 56.176448][ T1547] ? tun_sock_write_space+0x13b/0x1b0 [ 56.181843][ T1547] ? __kasan_check_write+0x14/0x20 [ 56.187040][ T1547] ? mutex_unlock+0x89/0x220 [ 56.191713][ T1547] ? __mutex_lock_slowpath+0x10/0x10 [ 56.197084][ T1547] ? macsec_notify+0xff/0x490 [ 56.201772][ T1547] ? addrconf_link_ready+0x134/0x190 [ 56.207072][ T1547] addrconf_notify+0x95d/0xde0 [ 56.211847][ T1547] raw_notifier_call_chain+0x90/0x100 [ 56.217220][ T1547] __dev_notify_flags+0x28f/0x500 [ 56.222473][ T1547] ? __dev_change_flags+0x6a0/0x6a0 [ 56.227672][ T1547] ? __dev_change_flags+0x510/0x6a0 [ 56.232883][ T1547] ? dev_get_flags+0x1e0/0x1e0 [ 56.237661][ T1547] ? __kasan_slab_free+0x11/0x20 [ 56.242601][ T1547] dev_change_flags+0xe8/0x1a0 [ 56.247386][ T1547] dev_ifsioc+0x147/0xe70 [ 56.251716][ T1547] ? dev_ioctl+0xd10/0xd10 [ 56.256136][ T1547] ? __kasan_check_write+0x14/0x20 [ 56.261248][ T1547] ? mutex_lock+0x95/0x1a0 [ 56.265664][ T1547] ? wait_for_completion_killable_timeout+0x10/0x10 [ 56.272686][ T1547] ? dev_get_by_name_rcu+0xc8/0xf0 [ 56.277890][ T1547] dev_ioctl+0x560/0xd10 [ 56.282134][ T1547] sock_do_ioctl+0x22e/0x300 [ 56.286903][ T1547] ? sock_show_fdinfo+0xa0/0xa0 [ 56.291779][ T1547] ? selinux_file_ioctl+0x377/0x480 [ 56.296991][ T1547] sock_ioctl+0x4bc/0x6b0 [ 56.301351][ T1547] ? sock_poll+0x3d0/0x3d0 [ 56.305787][ T1547] ? __fget_files+0x2c4/0x320 [ 56.310727][ T1547] ? security_file_ioctl+0x84/0xa0 [ 56.315839][ T1547] ? sock_poll+0x3d0/0x3d0 [ 56.320258][ T1547] __se_sys_ioctl+0x121/0x1a0 [ 56.324935][ T1547] __x64_sys_ioctl+0x7b/0x90 [ 56.329524][ T1547] x64_sys_call+0x2f/0x9a0 [ 56.333941][ T1547] do_syscall_64+0x4c/0xa0 [ 56.338355][ T1547] ? clear_bhb_loop+0x50/0xa0 [ 56.343035][ T1547] ? clear_bhb_loop+0x50/0xa0 [ 56.347712][ T1547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.353614][ T1547] RIP: 0033:0x7fa1320a7be9 [ 56.358115][ T1547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.378553][ T1547] RSP: 002b:00007fa130b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.387019][ T1547] RAX: ffffffffffffffda RBX: 00007fa1322cefa0 RCX: 00007fa1320a7be9 [ 56.395065][ T1547] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000a [ 56.403065][ T1547] RBP: 00007fa130b10090 R08: 0000000000000000 R09: 0000000000000000 [ 56.411052][ T1547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.419073][ T1547] R13: 00007fa1322cf038 R14: 00007fa1322cefa0 R15: 00007ffdd3bd2cb8 [ 56.427239][ T1547] [ 57.041844][ T1577] device pim6reg1 entered promiscuous mode [ 57.606790][ T1592] device pim6reg1 entered promiscuous mode [ 57.613591][ T1592] FAULT_INJECTION: forcing a failure. [ 57.613591][ T1592] name failslab, interval 1, probability 0, space 0, times 0 [ 57.626466][ T1592] CPU: 0 PID: 1592 Comm: syz.0.399 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 57.637027][ T1592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.647397][ T1592] Call Trace: [ 57.650738][ T1592] [ 57.653718][ T1592] __dump_stack+0x21/0x30 [ 57.658090][ T1592] dump_stack_lvl+0xee/0x150 [ 57.662730][ T1592] ? show_regs_print_info+0x20/0x20 [ 57.667987][ T1592] ? pcpu_alloc+0x1126/0x1660 [ 57.672706][ T1592] dump_stack+0x15/0x20 [ 57.676877][ T1592] should_fail+0x3c1/0x510 [ 57.681295][ T1592] __should_failslab+0xa4/0xe0 [ 57.686145][ T1592] should_failslab+0x9/0x20 [ 57.690658][ T1592] slab_pre_alloc_hook+0x3b/0xe0 [ 57.695638][ T1592] ? __alloc_skb+0xe0/0x740 [ 57.700150][ T1592] kmem_cache_alloc+0x44/0x260 [ 57.705011][ T1592] __alloc_skb+0xe0/0x740 [ 57.709344][ T1592] inet6_rt_notify+0x287/0x470 [ 57.714221][ T1592] ? __se_sys_ioctl+0x121/0x1a0 [ 57.719270][ T1592] ? __x64_sys_ioctl+0x7b/0x90 [ 57.724057][ T1592] ? rt6_nh_dump_exceptions+0x690/0x690 [ 57.729615][ T1592] fib6_add+0x2279/0x3d10 [ 57.734101][ T1592] ? fib6_update_sernum_stub+0x190/0x190 [ 57.739773][ T1592] ? __kasan_check_write+0x14/0x20 [ 57.744889][ T1592] ? _raw_spin_lock_bh+0x8e/0xe0 [ 57.750000][ T1592] ? _raw_spin_lock_irq+0xe0/0xe0 [ 57.755019][ T1592] ip6_route_add+0x89/0x130 [ 57.759517][ T1592] addrconf_add_linklocal+0x3cf/0x620 [ 57.764902][ T1592] ? inet6_addr_del+0x540/0x540 [ 57.769768][ T1592] ? ipv6_generate_stable_address+0x48b/0x5e0 [ 57.775929][ T1592] addrconf_addr_gen+0x468/0x5b0 [ 57.780889][ T1592] ? ip6_route_add+0x104/0x130 [ 57.785763][ T1592] ? addrconf_sysctl_register+0x1a0/0x1a0 [ 57.791634][ T1592] ? addrconf_add_dev+0x329/0x430 [ 57.796770][ T1592] ? local_bh_enable+0x30/0x30 [ 57.801663][ T1592] ? __local_bh_enable_ip+0x58/0x80 [ 57.807241][ T1592] ? addrconf_permanent_addr+0x867/0x8c0 [ 57.812924][ T1592] ? __kasan_check_read+0x11/0x20 [ 57.818492][ T1592] addrconf_init_auto_addrs+0x842/0xb90 [ 57.824251][ T1592] ? addrconf_dad_run+0x5a0/0x5a0 [ 57.829477][ T1592] ? igmpv3_del_delrec+0x700/0x700 [ 57.834600][ T1592] ? __local_bh_enable_ip+0x58/0x80 [ 57.839810][ T1592] ? _raw_spin_unlock_bh+0x51/0x60 [ 57.844931][ T1592] ? __kasan_check_write+0x14/0x20 [ 57.850044][ T1592] ? tun_sock_write_space+0x13b/0x1b0 [ 57.855516][ T1592] ? __kasan_check_write+0x14/0x20 [ 57.860654][ T1592] ? mutex_unlock+0x89/0x220 [ 57.865266][ T1592] ? __mutex_lock_slowpath+0x10/0x10 [ 57.870643][ T1592] ? macsec_notify+0xff/0x490 [ 57.875341][ T1592] ? addrconf_link_ready+0x134/0x190 [ 57.880730][ T1592] addrconf_notify+0x95d/0xde0 [ 57.885526][ T1592] raw_notifier_call_chain+0x90/0x100 [ 57.890905][ T1592] __dev_notify_flags+0x28f/0x500 [ 57.895952][ T1592] ? __dev_change_flags+0x6a0/0x6a0 [ 57.901445][ T1592] ? __dev_change_flags+0x510/0x6a0 [ 57.906872][ T1592] ? dev_get_flags+0x1e0/0x1e0 [ 57.911671][ T1592] ? __kasan_slab_free+0x11/0x20 [ 57.916814][ T1592] dev_change_flags+0xe8/0x1a0 [ 57.921611][ T1592] dev_ifsioc+0x147/0xe70 [ 57.925954][ T1592] ? dev_ioctl+0xd10/0xd10 [ 57.930374][ T1592] ? __mutex_lock_slowpath+0xe/0x10 [ 57.935669][ T1592] ? mutex_lock+0x100/0x1a0 [ 57.940179][ T1592] ? wait_for_completion_killable_timeout+0x10/0x10 [ 57.946870][ T1592] ? dev_get_by_name_rcu+0xc8/0xf0 [ 57.952142][ T1592] dev_ioctl+0x560/0xd10 [ 57.956408][ T1592] sock_do_ioctl+0x22e/0x300 [ 57.961018][ T1592] ? sock_show_fdinfo+0xa0/0xa0 [ 57.965871][ T1592] ? selinux_file_ioctl+0x377/0x480 [ 57.971336][ T1592] sock_ioctl+0x4bc/0x6b0 [ 57.975671][ T1592] ? sock_poll+0x3d0/0x3d0 [ 57.980187][ T1592] ? __fget_files+0x2c4/0x320 [ 57.984886][ T1592] ? security_file_ioctl+0x84/0xa0 [ 57.990208][ T1592] ? sock_poll+0x3d0/0x3d0 [ 57.994625][ T1592] __se_sys_ioctl+0x121/0x1a0 [ 57.999322][ T1592] __x64_sys_ioctl+0x7b/0x90 [ 58.003918][ T1592] x64_sys_call+0x2f/0x9a0 [ 58.008479][ T1592] do_syscall_64+0x4c/0xa0 [ 58.012899][ T1592] ? clear_bhb_loop+0x50/0xa0 [ 58.017577][ T1592] ? clear_bhb_loop+0x50/0xa0 [ 58.022253][ T1592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.028148][ T1592] RIP: 0033:0x7fdffd690be9 [ 58.032566][ T1592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.052350][ T1592] RSP: 002b:00007fdffc0d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.060944][ T1592] RAX: ffffffffffffffda RBX: 00007fdffd8b8090 RCX: 00007fdffd690be9 [ 58.069011][ T1592] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000a [ 58.077245][ T1592] RBP: 00007fdffc0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 58.085234][ T1592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.093347][ T1592] R13: 00007fdffd8b8128 R14: 00007fdffd8b8090 R15: 00007fff597b6ae8 [ 58.101461][ T1592] [ 59.537612][ T1640] device wg2 entered promiscuous mode [ 60.023602][ T1662] device pim6reg1 entered promiscuous mode [ 60.311114][ T1683] device pim6reg1 entered promiscuous mode [ 60.330928][ T1683] FAULT_INJECTION: forcing a failure. [ 60.330928][ T1683] name failslab, interval 1, probability 0, space 0, times 0 [ 60.344760][ T1683] CPU: 0 PID: 1683 Comm: syz.4.430 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 60.354965][ T1683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.365061][ T1683] Call Trace: [ 60.368381][ T1683] [ 60.371329][ T1683] __dump_stack+0x21/0x30 [ 60.375806][ T1683] dump_stack_lvl+0xee/0x150 [ 60.380516][ T1683] ? show_regs_print_info+0x20/0x20 [ 60.385834][ T1683] dump_stack+0x15/0x20 [ 60.390056][ T1683] should_fail+0x3c1/0x510 [ 60.394605][ T1683] ? inet6_ifinfo_notify+0x6e/0x110 [ 60.399929][ T1683] __should_failslab+0xa4/0xe0 [ 60.404735][ T1683] should_failslab+0x9/0x20 [ 60.409376][ T1683] slab_pre_alloc_hook+0x3b/0xe0 [ 60.414340][ T1683] ? inet6_ifinfo_notify+0x6e/0x110 [ 60.419598][ T1683] ? inet6_ifinfo_notify+0x6e/0x110 [ 60.424975][ T1683] __kmalloc_track_caller+0x6c/0x2c0 [ 60.430298][ T1683] ? inet6_ifinfo_notify+0x6e/0x110 [ 60.435719][ T1683] ? inet6_ifinfo_notify+0x6e/0x110 [ 60.441222][ T1683] __alloc_skb+0x21a/0x740 [ 60.445701][ T1683] inet6_ifinfo_notify+0x6e/0x110 [ 60.450793][ T1683] addrconf_notify+0xade/0xde0 [ 60.455589][ T1683] raw_notifier_call_chain+0x90/0x100 [ 60.461086][ T1683] __dev_notify_flags+0x28f/0x500 [ 60.466234][ T1683] ? __dev_change_flags+0x6a0/0x6a0 [ 60.471630][ T1683] ? __dev_change_flags+0x510/0x6a0 [ 60.477051][ T1683] ? dev_get_flags+0x1e0/0x1e0 [ 60.481841][ T1683] ? __kasan_slab_free+0x11/0x20 [ 60.486818][ T1683] dev_change_flags+0xe8/0x1a0 [ 60.491695][ T1683] dev_ifsioc+0x147/0xe70 [ 60.496055][ T1683] ? dev_ioctl+0xd10/0xd10 [ 60.500511][ T1683] ? __kasan_check_write+0x14/0x20 [ 60.505662][ T1683] ? mutex_lock+0x95/0x1a0 [ 60.510115][ T1683] ? wait_for_completion_killable_timeout+0x10/0x10 [ 60.517000][ T1683] ? dev_get_by_name_rcu+0xc8/0xf0 [ 60.522200][ T1683] dev_ioctl+0x560/0xd10 [ 60.526830][ T1683] sock_do_ioctl+0x22e/0x300 [ 60.531488][ T1683] ? sock_show_fdinfo+0xa0/0xa0 [ 60.536379][ T1683] ? selinux_file_ioctl+0x377/0x480 [ 60.541634][ T1683] sock_ioctl+0x4bc/0x6b0 [ 60.546005][ T1683] ? sock_poll+0x3d0/0x3d0 [ 60.550464][ T1683] ? __fget_files+0x2c4/0x320 [ 60.555264][ T1683] ? security_file_ioctl+0x84/0xa0 [ 60.560424][ T1683] ? sock_poll+0x3d0/0x3d0 [ 60.564881][ T1683] __se_sys_ioctl+0x121/0x1a0 [ 60.569618][ T1683] __x64_sys_ioctl+0x7b/0x90 [ 60.574341][ T1683] x64_sys_call+0x2f/0x9a0 [ 60.578968][ T1683] do_syscall_64+0x4c/0xa0 [ 60.583408][ T1683] ? clear_bhb_loop+0x50/0xa0 [ 60.588138][ T1683] ? clear_bhb_loop+0x50/0xa0 [ 60.592946][ T1683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.598964][ T1683] RIP: 0033:0x7f4b07bd8be9 [ 60.603516][ T1683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.623430][ T1683] RSP: 002b:00007f4b06641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.632076][ T1683] RAX: ffffffffffffffda RBX: 00007f4b07dfffa0 RCX: 00007f4b07bd8be9 [ 60.640534][ T1683] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000a [ 60.648555][ T1683] RBP: 00007f4b06641090 R08: 0000000000000000 R09: 0000000000000000 [ 60.656670][ T1683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.664763][ T1683] R13: 00007f4b07e00038 R14: 00007f4b07dfffa0 R15: 00007fff5058d158 [ 60.672865][ T1683] [ 61.260194][ T1713] device pim6reg1 entered promiscuous mode [ 61.582884][ T1719] ip6_vti0: mtu greater than device maximum [ 61.979942][ T1732] device pim6reg1 entered promiscuous mode [ 61.986731][ T1732] FAULT_INJECTION: forcing a failure. [ 61.986731][ T1732] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.000629][ T1732] CPU: 1 PID: 1732 Comm: syz.4.445 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 62.011183][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.021428][ T1732] Call Trace: [ 62.024741][ T1732] [ 62.027673][ T1732] __dump_stack+0x21/0x30 [ 62.032260][ T1732] dump_stack_lvl+0xee/0x150 [ 62.036888][ T1732] ? show_regs_print_info+0x20/0x20 [ 62.042220][ T1732] dump_stack+0x15/0x20 [ 62.046378][ T1732] should_fail+0x3c1/0x510 [ 62.050802][ T1732] should_fail_usercopy+0x1a/0x20 [ 62.055828][ T1732] _copy_to_user+0x20/0x90 [ 62.060241][ T1732] simple_read_from_buffer+0xe9/0x160 [ 62.065798][ T1732] proc_fail_nth_read+0x19a/0x210 [ 62.070820][ T1732] ? proc_fault_inject_write+0x2f0/0x2f0 [ 62.076447][ T1732] ? security_file_permission+0x83/0xa0 [ 62.082048][ T1732] ? proc_fault_inject_write+0x2f0/0x2f0 [ 62.087683][ T1732] vfs_read+0x282/0xbe0 [ 62.091849][ T1732] ? kernel_read+0x1f0/0x1f0 [ 62.096434][ T1732] ? __kasan_check_write+0x14/0x20 [ 62.101538][ T1732] ? mutex_lock+0x95/0x1a0 [ 62.105959][ T1732] ? wait_for_completion_killable_timeout+0x10/0x10 [ 62.112798][ T1732] ? __fget_files+0x2c4/0x320 [ 62.117558][ T1732] ? __fdget_pos+0x2d2/0x380 [ 62.122147][ T1732] ? ksys_read+0x71/0x240 [ 62.126479][ T1732] ksys_read+0x140/0x240 [ 62.130891][ T1732] ? vfs_write+0xf70/0xf70 [ 62.135304][ T1732] ? __kasan_check_write+0x14/0x20 [ 62.140409][ T1732] ? switch_fpu_return+0x15d/0x2c0 [ 62.145525][ T1732] __x64_sys_read+0x7b/0x90 [ 62.150017][ T1732] x64_sys_call+0x96d/0x9a0 [ 62.154518][ T1732] do_syscall_64+0x4c/0xa0 [ 62.158935][ T1732] ? clear_bhb_loop+0x50/0xa0 [ 62.163619][ T1732] ? clear_bhb_loop+0x50/0xa0 [ 62.168308][ T1732] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.174541][ T1732] RIP: 0033:0x7f4b07bd75fc [ 62.178963][ T1732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.198577][ T1732] RSP: 002b:00007f4b06641030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.207079][ T1732] RAX: ffffffffffffffda RBX: 00007f4b07dfffa0 RCX: 00007f4b07bd75fc [ 62.215048][ T1732] RDX: 000000000000000f RSI: 00007f4b066410a0 RDI: 000000000000000b [ 62.223013][ T1732] RBP: 00007f4b06641090 R08: 0000000000000000 R09: 0000000000000000 [ 62.230990][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.238961][ T1732] R13: 00007f4b07e00038 R14: 00007f4b07dfffa0 R15: 00007fff5058d158 [ 62.246955][ T1732] [ 62.806848][ T1767] FAULT_INJECTION: forcing a failure. [ 62.806848][ T1767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.870890][ T1769] FAULT_INJECTION: forcing a failure. [ 62.870890][ T1769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.884414][ T1767] CPU: 0 PID: 1767 Comm: syz.2.456 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 62.894594][ T1767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.904787][ T1767] Call Trace: [ 62.908123][ T1767] [ 62.911069][ T1767] __dump_stack+0x21/0x30 [ 62.915425][ T1767] dump_stack_lvl+0xee/0x150 [ 62.920023][ T1767] ? show_regs_print_info+0x20/0x20 [ 62.925345][ T1767] dump_stack+0x15/0x20 [ 62.929540][ T1767] should_fail+0x3c1/0x510 [ 62.934105][ T1767] should_fail_usercopy+0x1a/0x20 [ 62.939174][ T1767] _copy_from_user+0x20/0xd0 [ 62.943900][ T1767] sock_do_ioctl+0x175/0x300 [ 62.948529][ T1767] ? sock_show_fdinfo+0xa0/0xa0 [ 62.953401][ T1767] ? selinux_file_ioctl+0x377/0x480 [ 62.958617][ T1767] sock_ioctl+0x4bc/0x6b0 [ 62.963032][ T1767] ? sock_poll+0x3d0/0x3d0 [ 62.967442][ T1767] ? __fget_files+0x2c4/0x320 [ 62.972111][ T1767] ? security_file_ioctl+0x84/0xa0 [ 62.977330][ T1767] ? sock_poll+0x3d0/0x3d0 [ 62.981740][ T1767] __se_sys_ioctl+0x121/0x1a0 [ 62.986946][ T1767] __x64_sys_ioctl+0x7b/0x90 [ 62.991531][ T1767] x64_sys_call+0x2f/0x9a0 [ 62.996043][ T1767] do_syscall_64+0x4c/0xa0 [ 63.000714][ T1767] ? clear_bhb_loop+0x50/0xa0 [ 63.005383][ T1767] ? clear_bhb_loop+0x50/0xa0 [ 63.010062][ T1767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.015943][ T1767] RIP: 0033:0x7fa1320a7be9 [ 63.020374][ T1767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.040193][ T1767] RSP: 002b:00007fa130b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.048693][ T1767] RAX: ffffffffffffffda RBX: 00007fa1322cefa0 RCX: 00007fa1320a7be9 [ 63.056741][ T1767] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 63.064711][ T1767] RBP: 00007fa130b10090 R08: 0000000000000000 R09: 0000000000000000 [ 63.072671][ T1767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.080649][ T1767] R13: 00007fa1322cf038 R14: 00007fa1322cefa0 R15: 00007ffdd3bd2cb8 [ 63.088804][ T1767] [ 63.091837][ T1769] CPU: 1 PID: 1769 Comm: syz.0.457 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 63.102012][ T1769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.112334][ T1769] Call Trace: [ 63.115611][ T1769] [ 63.118545][ T1769] __dump_stack+0x21/0x30 [ 63.123051][ T1769] dump_stack_lvl+0xee/0x150 [ 63.127635][ T1769] ? show_regs_print_info+0x20/0x20 [ 63.132841][ T1769] ? get_page_from_freelist+0x2cc5/0x2d50 [ 63.138743][ T1769] dump_stack+0x15/0x20 [ 63.142901][ T1769] should_fail+0x3c1/0x510 [ 63.147415][ T1769] should_fail_alloc_page+0x55/0x80 [ 63.152782][ T1769] prepare_alloc_pages+0x156/0x600 [ 63.158175][ T1769] ? __alloc_pages_bulk+0xab0/0xab0 [ 63.163373][ T1769] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 63.169006][ T1769] __alloc_pages+0x10a/0x440 [ 63.173850][ T1769] ? prep_new_page+0x110/0x110 [ 63.178614][ T1769] pcpu_populate_chunk+0x184/0xcb0 [ 63.183747][ T1769] ? _find_next_bit+0x1b5/0x200 [ 63.188679][ T1769] pcpu_alloc+0xc4d/0x1660 [ 63.193092][ T1769] __alloc_percpu_gfp+0x25/0x30 [ 63.197938][ T1769] bpf_map_alloc_percpu+0xc5/0x150 [ 63.203133][ T1769] htab_map_alloc+0xc1b/0x14f0 [ 63.208093][ T1769] map_create+0x455/0x21b0 [ 63.212540][ T1769] __sys_bpf+0x2cf/0x730 [ 63.216794][ T1769] ? bpf_link_show_fdinfo+0x310/0x310 [ 63.222300][ T1769] ? debug_smp_processor_id+0x17/0x20 [ 63.227675][ T1769] __x64_sys_bpf+0x7c/0x90 [ 63.232109][ T1769] x64_sys_call+0x4b9/0x9a0 [ 63.236728][ T1769] do_syscall_64+0x4c/0xa0 [ 63.241177][ T1769] ? clear_bhb_loop+0x50/0xa0 [ 63.245955][ T1769] ? clear_bhb_loop+0x50/0xa0 [ 63.250652][ T1769] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.256547][ T1769] RIP: 0033:0x7fdffd690be9 [ 63.261071][ T1769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.280765][ T1769] RSP: 002b:00007fdffc0f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.289706][ T1769] RAX: ffffffffffffffda RBX: 00007fdffd8b7fa0 RCX: 00007fdffd690be9 [ 63.297677][ T1769] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 63.305652][ T1769] RBP: 00007fdffc0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 63.313719][ T1769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.321868][ T1769] R13: 00007fdffd8b8038 R14: 00007fdffd8b7fa0 R15: 00007fff597b6ae8 [ 63.329848][ T1769] [ 63.516916][ T1774] device syzkaller0 entered promiscuous mode [ 63.561100][ T30] audit: type=1400 audit(1755745946.181:133): avc: denied { create } for pid=1770 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.947097][ T30] audit: type=1400 audit(1755745946.571:134): avc: denied { create } for pid=1784 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.211815][ T30] audit: type=1400 audit(1755745946.831:135): avc: denied { create } for pid=1799 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.513966][ T1885] device pim6reg1 entered promiscuous mode [ 65.736797][ T1920] FAULT_INJECTION: forcing a failure. [ 65.736797][ T1920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 65.774890][ T1920] CPU: 0 PID: 1920 Comm: syz.1.501 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 65.785252][ T1920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.795422][ T1920] Call Trace: [ 65.798718][ T1920] [ 65.801663][ T1920] __dump_stack+0x21/0x30 [ 65.806021][ T1920] dump_stack_lvl+0xee/0x150 [ 65.810758][ T1920] ? show_regs_print_info+0x20/0x20 [ 65.816030][ T1920] ? get_page_from_freelist+0x2cc5/0x2d50 [ 65.821780][ T1920] ? ktime_get_boot_fast_ns+0x1a1/0x1d0 [ 65.827416][ T1920] dump_stack+0x15/0x20 [ 65.831731][ T1920] should_fail+0x3c1/0x510 [ 65.836151][ T1920] should_fail_alloc_page+0x55/0x80 [ 65.841348][ T1920] prepare_alloc_pages+0x156/0x600 [ 65.846462][ T1920] ? __alloc_pages_bulk+0xab0/0xab0 [ 65.852054][ T1920] ? __bpf_trace_mm_page_alloc+0xc0/0xf0 [ 65.857698][ T1920] __alloc_pages+0x10a/0x440 [ 65.862300][ T1920] ? prep_new_page+0x110/0x110 [ 65.867059][ T1920] pcpu_populate_chunk+0x184/0xcb0 [ 65.872195][ T1920] ? _find_next_bit+0x1b5/0x200 [ 65.877057][ T1920] pcpu_alloc+0xc4d/0x1660 [ 65.881525][ T1920] __alloc_percpu_gfp+0x25/0x30 [ 65.886565][ T1920] bpf_map_alloc_percpu+0xc5/0x150 [ 65.891764][ T1920] htab_map_alloc+0xc1b/0x14f0 [ 65.896878][ T1920] map_create+0x455/0x21b0 [ 65.901376][ T1920] __sys_bpf+0x2cf/0x730 [ 65.905718][ T1920] ? bpf_link_show_fdinfo+0x310/0x310 [ 65.911193][ T1920] ? debug_smp_processor_id+0x17/0x20 [ 65.916737][ T1920] __x64_sys_bpf+0x7c/0x90 [ 65.921150][ T1920] x64_sys_call+0x4b9/0x9a0 [ 65.925651][ T1920] do_syscall_64+0x4c/0xa0 [ 65.930159][ T1920] ? clear_bhb_loop+0x50/0xa0 [ 65.934883][ T1920] ? clear_bhb_loop+0x50/0xa0 [ 65.939569][ T1920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.945461][ T1920] RIP: 0033:0x7f85d967abe9 [ 65.950065][ T1920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.970251][ T1920] RSP: 002b:00007f85d80e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.978800][ T1920] RAX: ffffffffffffffda RBX: 00007f85d98a1fa0 RCX: 00007f85d967abe9 [ 65.986791][ T1920] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 65.994940][ T1920] RBP: 00007f85d80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 66.002908][ T1920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.010876][ T1920] R13: 00007f85d98a2038 R14: 00007f85d98a1fa0 R15: 00007ffc83bd3d38 [ 66.018935][ T1920] [ 68.285131][ T2015] FAULT_INJECTION: forcing a failure. [ 68.285131][ T2015] name failslab, interval 1, probability 0, space 0, times 0 [ 68.297808][ T2015] CPU: 0 PID: 2015 Comm: syz.3.531 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 68.307899][ T2015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.317972][ T2015] Call Trace: [ 68.321257][ T2015] [ 68.324188][ T2015] __dump_stack+0x21/0x30 [ 68.328520][ T2015] dump_stack_lvl+0xee/0x150 [ 68.333123][ T2015] ? show_regs_print_info+0x20/0x20 [ 68.338315][ T2015] ? __kasan_record_aux_stack+0xd2/0x100 [ 68.344054][ T2015] dump_stack+0x15/0x20 [ 68.348232][ T2015] should_fail+0x3c1/0x510 [ 68.352661][ T2015] __should_failslab+0xa4/0xe0 [ 68.357431][ T2015] should_failslab+0x9/0x20 [ 68.362034][ T2015] slab_pre_alloc_hook+0x3b/0xe0 [ 68.366968][ T2015] ? __alloc_skb+0xe0/0x740 [ 68.371481][ T2015] kmem_cache_alloc+0x44/0x260 [ 68.376267][ T2015] ? queue_work_on+0xf8/0x140 [ 68.380965][ T2015] __alloc_skb+0xe0/0x740 [ 68.385297][ T2015] fdb_notify+0x78/0x130 [ 68.389626][ T2015] fdb_delete+0x896/0xb00 [ 68.394036][ T2015] fdb_delete_local+0x3c8/0x480 [ 68.399006][ T2015] br_fdb_changeaddr+0x1b3/0x1c0 [ 68.403953][ T2015] br_device_event+0x335/0x790 [ 68.408717][ T2015] ? br_boolopt_multi_get+0xf0/0xf0 [ 68.414020][ T2015] ? packet_notifier+0x8bc/0x8d0 [ 68.419124][ T2015] ? addrconf_notify+0x37b/0xde0 [ 68.424057][ T2015] raw_notifier_call_chain+0x90/0x100 [ 68.429685][ T2015] dev_set_mac_address+0x318/0x420 [ 68.434792][ T2015] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 68.440717][ T2015] dev_set_mac_address_user+0x31/0x50 [ 68.446202][ T2015] dev_ifsioc+0x757/0xe70 [ 68.450935][ T2015] ? dev_ioctl+0xd10/0xd10 [ 68.455362][ T2015] ? __kasan_check_write+0x14/0x20 [ 68.460475][ T2015] ? mutex_lock+0x95/0x1a0 [ 68.464886][ T2015] ? wait_for_completion_killable_timeout+0x10/0x10 [ 68.471830][ T2015] ? dev_get_by_name_rcu+0xc8/0xf0 [ 68.476936][ T2015] dev_ioctl+0x560/0xd10 [ 68.481173][ T2015] sock_do_ioctl+0x22e/0x300 [ 68.485761][ T2015] ? sock_show_fdinfo+0xa0/0xa0 [ 68.490702][ T2015] ? selinux_file_ioctl+0x377/0x480 [ 68.495898][ T2015] sock_ioctl+0x4bc/0x6b0 [ 68.500221][ T2015] ? sock_poll+0x3d0/0x3d0 [ 68.504739][ T2015] ? __fget_files+0x2c4/0x320 [ 68.509506][ T2015] ? security_file_ioctl+0x84/0xa0 [ 68.514612][ T2015] ? sock_poll+0x3d0/0x3d0 [ 68.519023][ T2015] __se_sys_ioctl+0x121/0x1a0 [ 68.523802][ T2015] __x64_sys_ioctl+0x7b/0x90 [ 68.528397][ T2015] x64_sys_call+0x2f/0x9a0 [ 68.532976][ T2015] do_syscall_64+0x4c/0xa0 [ 68.537400][ T2015] ? clear_bhb_loop+0x50/0xa0 [ 68.542105][ T2015] ? clear_bhb_loop+0x50/0xa0 [ 68.546806][ T2015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.552704][ T2015] RIP: 0033:0x7f301e113be9 [ 68.557118][ T2015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.576813][ T2015] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.585226][ T2015] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 68.593195][ T2015] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 68.601311][ T2015] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 68.609282][ T2015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.617337][ T2015] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 68.625350][ T2015] [ 69.788371][ T2064] FAULT_INJECTION: forcing a failure. [ 69.788371][ T2064] name failslab, interval 1, probability 0, space 0, times 0 [ 69.801149][ T2064] CPU: 0 PID: 2064 Comm: syz.3.546 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 69.811335][ T2064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.821410][ T2064] Call Trace: [ 69.824709][ T2064] [ 69.827746][ T2064] __dump_stack+0x21/0x30 [ 69.832107][ T2064] dump_stack_lvl+0xee/0x150 [ 69.836816][ T2064] ? show_regs_print_info+0x20/0x20 [ 69.842130][ T2064] dump_stack+0x15/0x20 [ 69.846399][ T2064] should_fail+0x3c1/0x510 [ 69.850865][ T2064] ? fdb_notify+0x78/0x130 [ 69.855391][ T2064] __should_failslab+0xa4/0xe0 [ 69.860182][ T2064] should_failslab+0x9/0x20 [ 69.864892][ T2064] slab_pre_alloc_hook+0x3b/0xe0 [ 69.869938][ T2064] ? fdb_notify+0x78/0x130 [ 69.874468][ T2064] ? fdb_notify+0x78/0x130 [ 69.878905][ T2064] __kmalloc_track_caller+0x6c/0x2c0 [ 69.884215][ T2064] ? fdb_notify+0x78/0x130 [ 69.888692][ T2064] ? fdb_notify+0x78/0x130 [ 69.893262][ T2064] __alloc_skb+0x21a/0x740 [ 69.898138][ T2064] fdb_notify+0x78/0x130 [ 69.902392][ T2064] fdb_delete+0x896/0xb00 [ 69.906729][ T2064] fdb_delete_local+0x3c8/0x480 [ 69.911576][ T2064] br_fdb_changeaddr+0x1b3/0x1c0 [ 69.916509][ T2064] br_device_event+0x335/0x790 [ 69.921271][ T2064] ? br_boolopt_multi_get+0xf0/0xf0 [ 69.926463][ T2064] ? packet_notifier+0x8bc/0x8d0 [ 69.931393][ T2064] ? addrconf_notify+0x37b/0xde0 [ 69.936422][ T2064] raw_notifier_call_chain+0x90/0x100 [ 69.941788][ T2064] dev_set_mac_address+0x318/0x420 [ 69.947017][ T2064] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 69.952919][ T2064] dev_set_mac_address_user+0x31/0x50 [ 69.958294][ T2064] dev_ifsioc+0x757/0xe70 [ 69.962622][ T2064] ? dev_ioctl+0xd10/0xd10 [ 69.967206][ T2064] ? __mutex_lock_slowpath+0xe/0x10 [ 69.972543][ T2064] ? mutex_lock+0x100/0x1a0 [ 69.977042][ T2064] ? wait_for_completion_killable_timeout+0x10/0x10 [ 69.983626][ T2064] ? dev_get_by_name_rcu+0xc8/0xf0 [ 69.988740][ T2064] dev_ioctl+0x560/0xd10 [ 69.993218][ T2064] sock_do_ioctl+0x22e/0x300 [ 69.997813][ T2064] ? sock_show_fdinfo+0xa0/0xa0 [ 70.002749][ T2064] ? selinux_file_ioctl+0x377/0x480 [ 70.008002][ T2064] sock_ioctl+0x4bc/0x6b0 [ 70.012329][ T2064] ? sock_poll+0x3d0/0x3d0 [ 70.016742][ T2064] ? __fget_files+0x2c4/0x320 [ 70.021430][ T2064] ? security_file_ioctl+0x84/0xa0 [ 70.026551][ T2064] ? sock_poll+0x3d0/0x3d0 [ 70.030963][ T2064] __se_sys_ioctl+0x121/0x1a0 [ 70.035636][ T2064] __x64_sys_ioctl+0x7b/0x90 [ 70.040239][ T2064] x64_sys_call+0x2f/0x9a0 [ 70.045093][ T2064] do_syscall_64+0x4c/0xa0 [ 70.049515][ T2064] ? clear_bhb_loop+0x50/0xa0 [ 70.054283][ T2064] ? clear_bhb_loop+0x50/0xa0 [ 70.058960][ T2064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.064848][ T2064] RIP: 0033:0x7f301e113be9 [ 70.069262][ T2064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.089448][ T2064] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.097962][ T2064] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 70.105941][ T2064] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 70.113926][ T2064] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 70.121910][ T2064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.130010][ T2064] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 70.137992][ T2064] [ 70.243280][ T2079] device sit0 entered promiscuous mode [ 70.301193][ T30] audit: type=1400 audit(1755745952.921:136): avc: denied { create } for pid=2087 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.320643][ T2085] device sit0 left promiscuous mode [ 70.347545][ T2085] device sit0 entered promiscuous mode [ 70.657790][ T2107] FAULT_INJECTION: forcing a failure. [ 70.657790][ T2107] name failslab, interval 1, probability 0, space 0, times 0 [ 70.670637][ T2107] CPU: 1 PID: 2107 Comm: syz.4.560 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 70.680898][ T2107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.691060][ T2107] Call Trace: [ 70.694357][ T2107] [ 70.697294][ T2107] __dump_stack+0x21/0x30 [ 70.701751][ T2107] dump_stack_lvl+0xee/0x150 [ 70.706442][ T2107] ? show_regs_print_info+0x20/0x20 [ 70.711800][ T2107] dump_stack+0x15/0x20 [ 70.715988][ T2107] should_fail+0x3c1/0x510 [ 70.720442][ T2107] __should_failslab+0xa4/0xe0 [ 70.725320][ T2107] should_failslab+0x9/0x20 [ 70.729844][ T2107] slab_pre_alloc_hook+0x3b/0xe0 [ 70.734889][ T2107] ? fdb_create+0x37/0xdb0 [ 70.739400][ T2107] kmem_cache_alloc+0x44/0x260 [ 70.744342][ T2107] fdb_create+0x37/0xdb0 [ 70.748591][ T2107] ? br_fdb_find_rcu+0x30/0x30 [ 70.753364][ T2107] ? fdb_delete_local+0x3c8/0x480 [ 70.758392][ T2107] fdb_insert+0x140/0x260 [ 70.762725][ T2107] br_fdb_changeaddr+0x187/0x1c0 [ 70.767753][ T2107] br_device_event+0x335/0x790 [ 70.772710][ T2107] ? br_boolopt_multi_get+0xf0/0xf0 [ 70.778127][ T2107] ? packet_notifier+0x8bc/0x8d0 [ 70.783090][ T2107] ? addrconf_notify+0x37b/0xde0 [ 70.788138][ T2107] raw_notifier_call_chain+0x90/0x100 [ 70.793520][ T2107] dev_set_mac_address+0x318/0x420 [ 70.798639][ T2107] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 70.804465][ T2107] dev_set_mac_address_user+0x31/0x50 [ 70.809887][ T2107] dev_ifsioc+0x757/0xe70 [ 70.814318][ T2107] ? dev_ioctl+0xd10/0xd10 [ 70.818743][ T2107] ? __kasan_check_write+0x14/0x20 [ 70.823906][ T2107] ? mutex_lock+0x95/0x1a0 [ 70.828542][ T2107] ? wait_for_completion_killable_timeout+0x10/0x10 [ 70.835139][ T2107] ? dev_get_by_name_rcu+0xc8/0xf0 [ 70.840290][ T2107] dev_ioctl+0x560/0xd10 [ 70.844711][ T2107] sock_do_ioctl+0x22e/0x300 [ 70.849344][ T2107] ? sock_show_fdinfo+0xa0/0xa0 [ 70.854219][ T2107] ? selinux_file_ioctl+0x377/0x480 [ 70.859461][ T2107] sock_ioctl+0x4bc/0x6b0 [ 70.863800][ T2107] ? sock_poll+0x3d0/0x3d0 [ 70.868232][ T2107] ? __fget_files+0x2c4/0x320 [ 70.873008][ T2107] ? security_file_ioctl+0x84/0xa0 [ 70.878127][ T2107] ? sock_poll+0x3d0/0x3d0 [ 70.882552][ T2107] __se_sys_ioctl+0x121/0x1a0 [ 70.887244][ T2107] __x64_sys_ioctl+0x7b/0x90 [ 70.892005][ T2107] x64_sys_call+0x2f/0x9a0 [ 70.896432][ T2107] do_syscall_64+0x4c/0xa0 [ 70.900853][ T2107] ? clear_bhb_loop+0x50/0xa0 [ 70.905787][ T2107] ? clear_bhb_loop+0x50/0xa0 [ 70.910585][ T2107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.916502][ T2107] RIP: 0033:0x7f4b07bd8be9 [ 70.920939][ T2107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.941123][ T2107] RSP: 002b:00007f4b06641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.949911][ T2107] RAX: ffffffffffffffda RBX: 00007f4b07dfffa0 RCX: 00007f4b07bd8be9 [ 70.958066][ T2107] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 70.966142][ T2107] RBP: 00007f4b06641090 R08: 0000000000000000 R09: 0000000000000000 [ 70.974215][ T2107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.982210][ T2107] R13: 00007f4b07e00038 R14: 00007f4b07dfffa0 R15: 00007fff5058d158 [ 70.990197][ T2107] [ 71.583121][ T30] audit: type=1400 audit(1755745954.201:137): avc: denied { create } for pid=2138 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.583750][ T2139] vlan0: mtu less than device minimum [ 71.834788][ T2149] device pim6reg1 entered promiscuous mode [ 71.905240][ T30] audit: type=1400 audit(1755745954.531:138): avc: denied { tracepoint } for pid=2155 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.936823][ T2156] device sit0 entered promiscuous mode [ 72.031446][ T2159] syz.2.576[2159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.032197][ T2159] syz.2.576[2159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.136597][ T2170] FAULT_INJECTION: forcing a failure. [ 72.136597][ T2170] name failslab, interval 1, probability 0, space 0, times 0 [ 72.160946][ T2170] CPU: 0 PID: 2170 Comm: syz.3.580 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 72.171316][ T2170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.181388][ T2170] Call Trace: [ 72.184680][ T2170] [ 72.187633][ T2170] __dump_stack+0x21/0x30 [ 72.192145][ T2170] dump_stack_lvl+0xee/0x150 [ 72.196940][ T2170] ? show_regs_print_info+0x20/0x20 [ 72.202154][ T2170] dump_stack+0x15/0x20 [ 72.206490][ T2170] should_fail+0x3c1/0x510 [ 72.211129][ T2170] __should_failslab+0xa4/0xe0 [ 72.216016][ T2170] should_failslab+0x9/0x20 [ 72.220648][ T2170] slab_pre_alloc_hook+0x3b/0xe0 [ 72.225860][ T2170] ? fdb_create+0x37/0xdb0 [ 72.230296][ T2170] kmem_cache_alloc+0x44/0x260 [ 72.235092][ T2170] fdb_create+0x37/0xdb0 [ 72.239458][ T2170] ? br_fdb_find_rcu+0x30/0x30 [ 72.244332][ T2170] ? fdb_delete_local+0x3c8/0x480 [ 72.249378][ T2170] fdb_insert+0x140/0x260 [ 72.253817][ T2170] br_fdb_changeaddr+0x187/0x1c0 [ 72.258796][ T2170] br_device_event+0x335/0x790 [ 72.263683][ T2170] ? br_boolopt_multi_get+0xf0/0xf0 [ 72.269109][ T2170] ? packet_notifier+0x8bc/0x8d0 [ 72.274239][ T2170] ? addrconf_notify+0x37b/0xde0 [ 72.279188][ T2170] raw_notifier_call_chain+0x90/0x100 [ 72.284781][ T2170] dev_set_mac_address+0x318/0x420 [ 72.289917][ T2170] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 72.295745][ T2170] dev_set_mac_address_user+0x31/0x50 [ 72.301319][ T2170] dev_ifsioc+0x757/0xe70 [ 72.305664][ T2170] ? dev_ioctl+0xd10/0xd10 [ 72.310129][ T2170] ? __mutex_lock_slowpath+0xe/0x10 [ 72.315617][ T2170] ? mutex_lock+0x100/0x1a0 [ 72.320138][ T2170] ? wait_for_completion_killable_timeout+0x10/0x10 [ 72.326850][ T2170] ? dev_get_by_name_rcu+0xc8/0xf0 [ 72.331994][ T2170] dev_ioctl+0x560/0xd10 [ 72.336453][ T2170] sock_do_ioctl+0x22e/0x300 [ 72.341068][ T2170] ? sock_show_fdinfo+0xa0/0xa0 [ 72.345947][ T2170] ? selinux_file_ioctl+0x377/0x480 [ 72.351164][ T2170] sock_ioctl+0x4bc/0x6b0 [ 72.355596][ T2170] ? sock_poll+0x3d0/0x3d0 [ 72.360028][ T2170] ? __fget_files+0x2c4/0x320 [ 72.364819][ T2170] ? security_file_ioctl+0x84/0xa0 [ 72.370057][ T2170] ? sock_poll+0x3d0/0x3d0 [ 72.374512][ T2170] __se_sys_ioctl+0x121/0x1a0 [ 72.379205][ T2170] __x64_sys_ioctl+0x7b/0x90 [ 72.383810][ T2170] x64_sys_call+0x2f/0x9a0 [ 72.388341][ T2170] do_syscall_64+0x4c/0xa0 [ 72.392774][ T2170] ? clear_bhb_loop+0x50/0xa0 [ 72.397648][ T2170] ? clear_bhb_loop+0x50/0xa0 [ 72.402430][ T2170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.408360][ T2170] RIP: 0033:0x7f301e113be9 [ 72.412799][ T2170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.432770][ T2170] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.441477][ T2170] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 72.449641][ T2170] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 72.457637][ T2170] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 72.465635][ T2170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.473995][ T2170] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 72.481996][ T2170] [ 72.613376][ T2174] device macsec0 entered promiscuous mode [ 72.627690][ T2177] device pim6reg1 entered promiscuous mode [ 72.886059][ T2190] device sit0 left promiscuous mode [ 72.902892][ T2193] device sit0 entered promiscuous mode [ 74.196989][ T2221] device pim6reg1 entered promiscuous mode [ 75.375234][ T2237] device sit0 left promiscuous mode [ 75.550145][ T2239] device sit0 entered promiscuous mode [ 77.984808][ C0] sched: RT throttling activated [ 82.073034][ T2415] FAULT_INJECTION: forcing a failure. [ 82.073034][ T2415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.088120][ T2415] CPU: 0 PID: 2415 Comm: syz.3.661 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 82.098556][ T2415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.108738][ T2415] Call Trace: [ 82.112037][ T2415] [ 82.115056][ T2415] __dump_stack+0x21/0x30 [ 82.119381][ T2415] dump_stack_lvl+0xee/0x150 [ 82.123994][ T2415] ? show_regs_print_info+0x20/0x20 [ 82.129799][ T2415] ? get_page_from_freelist+0x2cc5/0x2d50 [ 82.135529][ T2415] dump_stack+0x15/0x20 [ 82.139688][ T2415] should_fail+0x3c1/0x510 [ 82.144094][ T2415] should_fail_alloc_page+0x55/0x80 [ 82.149452][ T2415] prepare_alloc_pages+0x156/0x600 [ 82.154765][ T2415] ? __alloc_pages_bulk+0xab0/0xab0 [ 82.160095][ T2415] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 82.165740][ T2415] __alloc_pages+0x10a/0x440 [ 82.170431][ T2415] ? prep_new_page+0x110/0x110 [ 82.175188][ T2415] pcpu_populate_chunk+0x184/0xcb0 [ 82.180381][ T2415] ? _find_next_bit+0x1b5/0x200 [ 82.185328][ T2415] pcpu_alloc+0xc4d/0x1660 [ 82.189768][ T2415] __alloc_percpu_gfp+0x25/0x30 [ 82.194664][ T2415] bpf_map_alloc_percpu+0xc5/0x150 [ 82.199783][ T2415] htab_map_alloc+0xc1b/0x14f0 [ 82.204642][ T2415] map_create+0x455/0x21b0 [ 82.209176][ T2415] __sys_bpf+0x2cf/0x730 [ 82.213509][ T2415] ? bpf_link_show_fdinfo+0x310/0x310 [ 82.218893][ T2415] ? debug_smp_processor_id+0x17/0x20 [ 82.224287][ T2415] __x64_sys_bpf+0x7c/0x90 [ 82.228706][ T2415] x64_sys_call+0x4b9/0x9a0 [ 82.233205][ T2415] do_syscall_64+0x4c/0xa0 [ 82.237619][ T2415] ? clear_bhb_loop+0x50/0xa0 [ 82.242293][ T2415] ? clear_bhb_loop+0x50/0xa0 [ 82.246960][ T2415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.253051][ T2415] RIP: 0033:0x7f301e113be9 [ 82.257461][ T2415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.277604][ T2415] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.286018][ T2415] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 82.294101][ T2415] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 82.302408][ T2415] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 82.310921][ T2415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.318889][ T2415] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 82.326959][ T2415] [ 83.090825][ T2437] syz.2.668 uses obsolete (PF_INET,SOCK_PACKET) [ 83.128602][ T30] audit: type=1400 audit(1755745965.751:139): avc: denied { create } for pid=2434 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.936730][ T2482] device sit0 left promiscuous mode [ 84.996136][ T2482] device sit0 entered promiscuous mode [ 92.150621][ T2583] GPL: port 1(erspan0) entered blocking state [ 92.158139][ T2583] GPL: port 1(erspan0) entered disabled state [ 92.174239][ T2583] device erspan0 entered promiscuous mode [ 92.196054][ T2583] GPL: port 1(erspan0) entered blocking state [ 92.202953][ T2583] GPL: port 1(erspan0) entered forwarding state [ 92.829926][ T30] audit: type=1400 audit(1755745975.451:140): avc: denied { create } for pid=2599 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.919147][ T2604] device sit0 left promiscuous mode [ 92.952495][ T2604] device sit0 entered promiscuous mode [ 93.236360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): GPL: link becomes ready [ 96.097233][ T2698] FAULT_INJECTION: forcing a failure. [ 96.097233][ T2698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.130311][ T2698] CPU: 1 PID: 2698 Comm: syz.3.750 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 96.140451][ T2698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.150612][ T2698] Call Trace: [ 96.153900][ T2698] [ 96.156873][ T2698] __dump_stack+0x21/0x30 [ 96.161222][ T2698] dump_stack_lvl+0xee/0x150 [ 96.165828][ T2698] ? show_regs_print_info+0x20/0x20 [ 96.171167][ T2698] ? __this_cpu_preempt_check+0x13/0x20 [ 96.176722][ T2698] ? __perf_event_task_sched_in+0x1fb/0x280 [ 96.182660][ T2698] dump_stack+0x15/0x20 [ 96.186951][ T2698] should_fail+0x3c1/0x510 [ 96.191375][ T2698] should_fail_alloc_page+0x55/0x80 [ 96.196579][ T2698] prepare_alloc_pages+0x156/0x600 [ 96.201709][ T2698] ? __alloc_pages_bulk+0xab0/0xab0 [ 96.206939][ T2698] ? __schedule+0xb76/0x14c0 [ 96.211804][ T2698] __alloc_pages+0x10a/0x440 [ 96.216429][ T2698] ? prep_new_page+0x110/0x110 [ 96.221297][ T2698] ? preempt_schedule+0xa7/0xb0 [ 96.226161][ T2698] ? schedule_preempt_disabled+0x20/0x20 [ 96.231907][ T2698] pcpu_populate_chunk+0x184/0xcb0 [ 96.237036][ T2698] ? _find_next_bit+0x1b5/0x200 [ 96.241899][ T2698] pcpu_alloc+0xc4d/0x1660 [ 96.246332][ T2698] __alloc_percpu_gfp+0x25/0x30 [ 96.251291][ T2698] bpf_map_alloc_percpu+0xc5/0x150 [ 96.256415][ T2698] htab_map_alloc+0xc1b/0x14f0 [ 96.261185][ T2698] map_create+0x455/0x21b0 [ 96.265674][ T2698] __sys_bpf+0x2cf/0x730 [ 96.270137][ T2698] ? bpf_link_show_fdinfo+0x310/0x310 [ 96.275523][ T2698] ? debug_smp_processor_id+0x17/0x20 [ 96.280972][ T2698] __x64_sys_bpf+0x7c/0x90 [ 96.285402][ T2698] x64_sys_call+0x4b9/0x9a0 [ 96.289928][ T2698] do_syscall_64+0x4c/0xa0 [ 96.294358][ T2698] ? clear_bhb_loop+0x50/0xa0 [ 96.299053][ T2698] ? clear_bhb_loop+0x50/0xa0 [ 96.303751][ T2698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.309788][ T2698] RIP: 0033:0x7f301e113be9 [ 96.314194][ T2698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.333885][ T2698] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.342618][ T2698] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 96.350600][ T2698] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 96.358595][ T2698] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.366600][ T2698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.374585][ T2698] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 96.382580][ T2698] [ 96.413470][ T2700] device syzkaller0 entered promiscuous mode [ 98.769057][ T2807] FAULT_INJECTION: forcing a failure. [ 98.769057][ T2807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.782555][ T2807] CPU: 0 PID: 2807 Comm: syz.1.789 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 98.792665][ T2807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.802749][ T2807] Call Trace: [ 98.806062][ T2807] [ 98.809019][ T2807] __dump_stack+0x21/0x30 [ 98.813707][ T2807] dump_stack_lvl+0xee/0x150 [ 98.818349][ T2807] ? show_regs_print_info+0x20/0x20 [ 98.823583][ T2807] ? preempt_schedule+0xa7/0xb0 [ 98.828655][ T2807] ? schedule_preempt_disabled+0x20/0x20 [ 98.834754][ T2807] dump_stack+0x15/0x20 [ 98.839328][ T2807] should_fail+0x3c1/0x510 [ 98.843774][ T2807] should_fail_alloc_page+0x55/0x80 [ 98.849525][ T2807] prepare_alloc_pages+0x156/0x600 [ 98.854769][ T2807] ? __alloc_pages_bulk+0xab0/0xab0 [ 98.860091][ T2807] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 98.865725][ T2807] __alloc_pages+0x10a/0x440 [ 98.870408][ T2807] ? prep_new_page+0x110/0x110 [ 98.875445][ T2807] pcpu_populate_chunk+0x184/0xcb0 [ 98.880774][ T2807] ? _find_next_bit+0x1b5/0x200 [ 98.885622][ T2807] pcpu_alloc+0xc4d/0x1660 [ 98.890045][ T2807] __alloc_percpu_gfp+0x25/0x30 [ 98.894914][ T2807] bpf_map_alloc_percpu+0xc5/0x150 [ 98.900026][ T2807] htab_map_alloc+0xc1b/0x14f0 [ 98.904983][ T2807] map_create+0x455/0x21b0 [ 98.909395][ T2807] __sys_bpf+0x2cf/0x730 [ 98.913635][ T2807] ? bpf_link_show_fdinfo+0x310/0x310 [ 98.919013][ T2807] ? debug_smp_processor_id+0x17/0x20 [ 98.924568][ T2807] __x64_sys_bpf+0x7c/0x90 [ 98.929074][ T2807] x64_sys_call+0x4b9/0x9a0 [ 98.933607][ T2807] do_syscall_64+0x4c/0xa0 [ 98.938020][ T2807] ? clear_bhb_loop+0x50/0xa0 [ 98.943062][ T2807] ? clear_bhb_loop+0x50/0xa0 [ 98.947741][ T2807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.953638][ T2807] RIP: 0033:0x7f85d967abe9 [ 98.958068][ T2807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.977932][ T2807] RSP: 002b:00007f85d80e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.986450][ T2807] RAX: ffffffffffffffda RBX: 00007f85d98a1fa0 RCX: 00007f85d967abe9 [ 98.994416][ T2807] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 99.002473][ T2807] RBP: 00007f85d80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 99.010441][ T2807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.018407][ T2807] R13: 00007f85d98a2038 R14: 00007f85d98a1fa0 R15: 00007ffc83bd3d38 [ 99.026466][ T2807] [ 99.865747][ T2853] FAULT_INJECTION: forcing a failure. [ 99.865747][ T2853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.898831][ T2853] CPU: 0 PID: 2853 Comm: syz.3.804 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 99.909023][ T2853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.919251][ T2853] Call Trace: [ 99.922581][ T2853] [ 99.925634][ T2853] __dump_stack+0x21/0x30 [ 99.930085][ T2853] dump_stack_lvl+0xee/0x150 [ 99.934966][ T2853] ? show_regs_print_info+0x20/0x20 [ 99.940308][ T2853] ? get_page_from_freelist+0x2cc5/0x2d50 [ 99.946060][ T2853] dump_stack+0x15/0x20 [ 99.950248][ T2853] should_fail+0x3c1/0x510 [ 99.954693][ T2853] should_fail_alloc_page+0x55/0x80 [ 99.959920][ T2853] prepare_alloc_pages+0x156/0x600 [ 99.965064][ T2853] ? __alloc_pages_bulk+0xab0/0xab0 [ 99.970408][ T2853] ? __bpf_trace_mm_page_alloc+0xc0/0xf0 [ 99.976178][ T2853] __alloc_pages+0x10a/0x440 [ 99.980943][ T2853] ? prep_new_page+0x110/0x110 [ 99.985733][ T2853] ? __pcpu_chunk_move+0x275/0x310 [ 99.990963][ T2853] pcpu_populate_chunk+0x184/0xcb0 [ 99.996181][ T2853] ? _find_next_bit+0x1b5/0x200 [ 100.001143][ T2853] pcpu_alloc+0xc4d/0x1660 [ 100.005601][ T2853] __alloc_percpu_gfp+0x25/0x30 [ 100.010672][ T2853] bpf_map_alloc_percpu+0xc5/0x150 [ 100.015805][ T2853] htab_map_alloc+0xc1b/0x14f0 [ 100.020677][ T2853] map_create+0x455/0x21b0 [ 100.025138][ T2853] __sys_bpf+0x2cf/0x730 [ 100.029416][ T2853] ? bpf_link_show_fdinfo+0x310/0x310 [ 100.034783][ T2853] ? debug_smp_processor_id+0x17/0x20 [ 100.040168][ T2853] __x64_sys_bpf+0x7c/0x90 [ 100.044752][ T2853] x64_sys_call+0x4b9/0x9a0 [ 100.049245][ T2853] do_syscall_64+0x4c/0xa0 [ 100.053654][ T2853] ? clear_bhb_loop+0x50/0xa0 [ 100.058320][ T2853] ? clear_bhb_loop+0x50/0xa0 [ 100.063083][ T2853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.069011][ T2853] RIP: 0033:0x7f301e113be9 [ 100.073421][ T2853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.093386][ T2853] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.101906][ T2853] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 100.110045][ T2853] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 100.118184][ T2853] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.126259][ T2853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.134245][ T2853] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 100.142424][ T2853] [ 100.835591][ T2893] FAULT_INJECTION: forcing a failure. [ 100.835591][ T2893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.860946][ T2893] CPU: 0 PID: 2893 Comm: syz.1.819 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 100.871224][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.881594][ T2893] Call Trace: [ 100.884902][ T2893] [ 100.887893][ T2893] __dump_stack+0x21/0x30 [ 100.892644][ T2893] dump_stack_lvl+0xee/0x150 [ 100.897253][ T2893] ? show_regs_print_info+0x20/0x20 [ 100.902458][ T2893] ? get_page_from_freelist+0x2cc5/0x2d50 [ 100.908176][ T2893] dump_stack+0x15/0x20 [ 100.912325][ T2893] should_fail+0x3c1/0x510 [ 100.916734][ T2893] should_fail_alloc_page+0x55/0x80 [ 100.922030][ T2893] prepare_alloc_pages+0x156/0x600 [ 100.927289][ T2893] ? __alloc_pages_bulk+0xab0/0xab0 [ 100.932490][ T2893] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 100.938213][ T2893] __alloc_pages+0x10a/0x440 [ 100.942890][ T2893] ? prep_new_page+0x110/0x110 [ 100.947649][ T2893] pcpu_populate_chunk+0x184/0xcb0 [ 100.953283][ T2893] ? _find_next_bit+0x1b5/0x200 [ 100.958135][ T2893] pcpu_alloc+0xc4d/0x1660 [ 100.962559][ T2893] __alloc_percpu_gfp+0x25/0x30 [ 100.967485][ T2893] bpf_map_alloc_percpu+0xc5/0x150 [ 100.972604][ T2893] htab_map_alloc+0xc1b/0x14f0 [ 100.977371][ T2893] map_create+0x455/0x21b0 [ 100.981968][ T2893] __sys_bpf+0x2cf/0x730 [ 100.986204][ T2893] ? bpf_link_show_fdinfo+0x310/0x310 [ 100.991570][ T2893] ? bpf_trace_run2+0xb5/0x1b0 [ 100.996343][ T2893] ? __bpf_trace_sys_enter+0x62/0x70 [ 101.001628][ T2893] __x64_sys_bpf+0x7c/0x90 [ 101.006040][ T2893] x64_sys_call+0x4b9/0x9a0 [ 101.010624][ T2893] do_syscall_64+0x4c/0xa0 [ 101.015182][ T2893] ? clear_bhb_loop+0x50/0xa0 [ 101.019855][ T2893] ? clear_bhb_loop+0x50/0xa0 [ 101.024526][ T2893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.030506][ T2893] RIP: 0033:0x7f85d967abe9 [ 101.034922][ T2893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.055048][ T2893] RSP: 002b:00007f85d80e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.063556][ T2893] RAX: ffffffffffffffda RBX: 00007f85d98a1fa0 RCX: 00007f85d967abe9 [ 101.071614][ T2893] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 101.079605][ T2893] RBP: 00007f85d80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 101.087743][ T2893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.095891][ T2893] R13: 00007f85d98a2038 R14: 00007f85d98a1fa0 R15: 00007ffc83bd3d38 [ 101.103860][ T2893] [ 102.165186][ T2922] device pim6reg1 entered promiscuous mode [ 102.313054][ T2932] FAULT_INJECTION: forcing a failure. [ 102.313054][ T2932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.336136][ T2932] CPU: 1 PID: 2932 Comm: syz.3.833 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 102.346488][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.356946][ T2932] Call Trace: [ 102.360414][ T2932] [ 102.363446][ T2932] __dump_stack+0x21/0x30 [ 102.367788][ T2932] dump_stack_lvl+0xee/0x150 [ 102.372389][ T2932] ? show_regs_print_info+0x20/0x20 [ 102.377945][ T2932] ? get_page_from_freelist+0x2cc5/0x2d50 [ 102.383960][ T2932] dump_stack+0x15/0x20 [ 102.388223][ T2932] should_fail+0x3c1/0x510 [ 102.392802][ T2932] should_fail_alloc_page+0x55/0x80 [ 102.398100][ T2932] prepare_alloc_pages+0x156/0x600 [ 102.403228][ T2932] ? __alloc_pages_bulk+0xab0/0xab0 [ 102.408433][ T2932] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 102.414166][ T2932] __alloc_pages+0x10a/0x440 [ 102.418823][ T2932] ? prep_new_page+0x110/0x110 [ 102.423715][ T2932] pcpu_populate_chunk+0x184/0xcb0 [ 102.428938][ T2932] ? _find_next_bit+0x1b5/0x200 [ 102.433809][ T2932] pcpu_alloc+0xc4d/0x1660 [ 102.438250][ T2932] __alloc_percpu_gfp+0x25/0x30 [ 102.443198][ T2932] bpf_map_alloc_percpu+0xc5/0x150 [ 102.448321][ T2932] htab_map_alloc+0xc1b/0x14f0 [ 102.453363][ T2932] map_create+0x455/0x21b0 [ 102.458179][ T2932] __sys_bpf+0x2cf/0x730 [ 102.462544][ T2932] ? bpf_link_show_fdinfo+0x310/0x310 [ 102.468150][ T2932] ? debug_smp_processor_id+0x17/0x20 [ 102.473543][ T2932] __x64_sys_bpf+0x7c/0x90 [ 102.477984][ T2932] x64_sys_call+0x4b9/0x9a0 [ 102.482500][ T2932] do_syscall_64+0x4c/0xa0 [ 102.486928][ T2932] ? clear_bhb_loop+0x50/0xa0 [ 102.491626][ T2932] ? clear_bhb_loop+0x50/0xa0 [ 102.496399][ T2932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.502608][ T2932] RIP: 0033:0x7f301e113be9 [ 102.507126][ T2932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.527094][ T2932] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.535608][ T2932] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 102.543585][ T2932] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 102.551641][ T2932] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.560352][ T2932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.568456][ T2932] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 102.576429][ T2932] [ 103.518290][ T2972] FAULT_INJECTION: forcing a failure. [ 103.518290][ T2972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.564986][ T2972] CPU: 1 PID: 2972 Comm: syz.2.847 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 103.575281][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.585472][ T2972] Call Trace: [ 103.588777][ T2972] [ 103.591726][ T2972] __dump_stack+0x21/0x30 [ 103.596079][ T2972] dump_stack_lvl+0xee/0x150 [ 103.600681][ T2972] ? show_regs_print_info+0x20/0x20 [ 103.605897][ T2972] ? get_page_from_freelist+0x2cc5/0x2d50 [ 103.611639][ T2972] dump_stack+0x15/0x20 [ 103.615816][ T2972] should_fail+0x3c1/0x510 [ 103.620244][ T2972] should_fail_alloc_page+0x55/0x80 [ 103.625455][ T2972] prepare_alloc_pages+0x156/0x600 [ 103.630588][ T2972] ? __alloc_pages_bulk+0xab0/0xab0 [ 103.635800][ T2972] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 103.641461][ T2972] __alloc_pages+0x10a/0x440 [ 103.646301][ T2972] ? prep_new_page+0x110/0x110 [ 103.651098][ T2972] pcpu_populate_chunk+0x184/0xcb0 [ 103.656232][ T2972] ? _find_next_bit+0x1b5/0x200 [ 103.661189][ T2972] pcpu_alloc+0xc4d/0x1660 [ 103.665650][ T2972] __alloc_percpu_gfp+0x25/0x30 [ 103.670528][ T2972] bpf_map_alloc_percpu+0xc5/0x150 [ 103.675667][ T2972] htab_map_alloc+0xc1b/0x14f0 [ 103.680509][ T2972] map_create+0x455/0x21b0 [ 103.684965][ T2972] __sys_bpf+0x2cf/0x730 [ 103.689257][ T2972] ? bpf_link_show_fdinfo+0x310/0x310 [ 103.694637][ T2972] ? debug_smp_processor_id+0x17/0x20 [ 103.700026][ T2972] __x64_sys_bpf+0x7c/0x90 [ 103.704682][ T2972] x64_sys_call+0x4b9/0x9a0 [ 103.709223][ T2972] do_syscall_64+0x4c/0xa0 [ 103.713741][ T2972] ? clear_bhb_loop+0x50/0xa0 [ 103.718613][ T2972] ? clear_bhb_loop+0x50/0xa0 [ 103.723408][ T2972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.729324][ T2972] RIP: 0033:0x7fa1320a7be9 [ 103.733768][ T2972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.753653][ T2972] RSP: 002b:00007fa130b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.762455][ T2972] RAX: ffffffffffffffda RBX: 00007fa1322cefa0 RCX: 00007fa1320a7be9 [ 103.770542][ T2972] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 103.778724][ T2972] RBP: 00007fa130b10090 R08: 0000000000000000 R09: 0000000000000000 [ 103.786718][ T2972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.794715][ T2972] R13: 00007fa1322cf038 R14: 00007fa1322cefa0 R15: 00007ffdd3bd2cb8 [ 103.802721][ T2972] [ 103.843266][ T2981] device veth1_macvtap left promiscuous mode [ 103.849613][ T2981] device macsec0 entered promiscuous mode [ 105.540649][ T3040] device sit0 left promiscuous mode [ 105.595836][ T3047] device sit0 entered promiscuous mode [ 105.621272][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.621376][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.656112][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.675121][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.686912][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.698684][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.710087][ T3053] bond_slave_1: mtu less than device minimum [ 105.735583][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.735683][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.749096][ T3052] syz.3.874[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.708556][ T3092] FAULT_INJECTION: forcing a failure. [ 106.708556][ T3092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.744860][ T3092] CPU: 1 PID: 3092 Comm: syz.3.889 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 106.755333][ T3092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.765592][ T3092] Call Trace: [ 106.769206][ T3092] [ 106.772242][ T3092] __dump_stack+0x21/0x30 [ 106.776792][ T3092] dump_stack_lvl+0xee/0x150 [ 106.781485][ T3092] ? show_regs_print_info+0x20/0x20 [ 106.786745][ T3092] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 106.792233][ T3092] dump_stack+0x15/0x20 [ 106.796406][ T3092] should_fail+0x3c1/0x510 [ 106.800957][ T3092] should_fail_alloc_page+0x55/0x80 [ 106.806174][ T3092] prepare_alloc_pages+0x156/0x600 [ 106.811397][ T3092] ? __alloc_pages_bulk+0xab0/0xab0 [ 106.816610][ T3092] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 106.822352][ T3092] __alloc_pages+0x10a/0x440 [ 106.826954][ T3092] ? prep_new_page+0x110/0x110 [ 106.831830][ T3092] pcpu_populate_chunk+0x184/0xcb0 [ 106.837048][ T3092] ? _find_next_bit+0x1b5/0x200 [ 106.842191][ T3092] pcpu_alloc+0xc4d/0x1660 [ 106.846867][ T3092] __alloc_percpu_gfp+0x25/0x30 [ 106.851831][ T3092] bpf_map_alloc_percpu+0xc5/0x150 [ 106.856955][ T3092] htab_map_alloc+0xc1b/0x14f0 [ 106.861898][ T3092] map_create+0x455/0x21b0 [ 106.866314][ T3092] __sys_bpf+0x2cf/0x730 [ 106.870589][ T3092] ? bpf_link_show_fdinfo+0x310/0x310 [ 106.876037][ T3092] ? debug_smp_processor_id+0x17/0x20 [ 106.881413][ T3092] __x64_sys_bpf+0x7c/0x90 [ 106.885831][ T3092] x64_sys_call+0x4b9/0x9a0 [ 106.890342][ T3092] do_syscall_64+0x4c/0xa0 [ 106.894776][ T3092] ? clear_bhb_loop+0x50/0xa0 [ 106.899458][ T3092] ? clear_bhb_loop+0x50/0xa0 [ 106.904153][ T3092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.910060][ T3092] RIP: 0033:0x7f301e113be9 [ 106.914500][ T3092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.934117][ T3092] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.942552][ T3092] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 106.950540][ T3092] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 106.958738][ T3092] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 106.966735][ T3092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.974860][ T3092] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 106.982861][ T3092] [ 107.155255][ T3104] device syzkaller0 entered promiscuous mode [ 109.429714][ T30] audit: type=1400 audit(1755745992.051:141): avc: denied { create } for pid=3204 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.982220][ T3228] FAULT_INJECTION: forcing a failure. [ 109.982220][ T3228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 110.055034][ T3228] CPU: 0 PID: 3228 Comm: syz.3.934 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 110.065161][ T3228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.075475][ T3228] Call Trace: [ 110.078857][ T3228] [ 110.081799][ T3228] __dump_stack+0x21/0x30 [ 110.086144][ T3228] dump_stack_lvl+0xee/0x150 [ 110.090845][ T3228] ? show_regs_print_info+0x20/0x20 [ 110.096054][ T3228] ? get_page_from_freelist+0x2cc5/0x2d50 [ 110.101809][ T3228] dump_stack+0x15/0x20 [ 110.105981][ T3228] should_fail+0x3c1/0x510 [ 110.110431][ T3228] should_fail_alloc_page+0x55/0x80 [ 110.115736][ T3228] prepare_alloc_pages+0x156/0x600 [ 110.120876][ T3228] ? __alloc_pages_bulk+0xab0/0xab0 [ 110.126108][ T3228] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 110.131856][ T3228] __alloc_pages+0x10a/0x440 [ 110.136472][ T3228] ? prep_new_page+0x110/0x110 [ 110.141256][ T3228] pcpu_populate_chunk+0x184/0xcb0 [ 110.146469][ T3228] ? _find_next_bit+0x1b5/0x200 [ 110.151507][ T3228] pcpu_alloc+0xc4d/0x1660 [ 110.155944][ T3228] __alloc_percpu_gfp+0x25/0x30 [ 110.160828][ T3228] bpf_map_alloc_percpu+0xc5/0x150 [ 110.165965][ T3228] htab_map_alloc+0xc1b/0x14f0 [ 110.170767][ T3228] map_create+0x455/0x21b0 [ 110.175194][ T3228] __sys_bpf+0x2cf/0x730 [ 110.179449][ T3228] ? bpf_link_show_fdinfo+0x310/0x310 [ 110.184892][ T3228] ? bpf_trace_run2+0xb5/0x1b0 [ 110.189953][ T3228] ? __bpf_trace_sys_enter+0x62/0x70 [ 110.195281][ T3228] __x64_sys_bpf+0x7c/0x90 [ 110.199912][ T3228] x64_sys_call+0x4b9/0x9a0 [ 110.204453][ T3228] do_syscall_64+0x4c/0xa0 [ 110.208902][ T3228] ? clear_bhb_loop+0x50/0xa0 [ 110.213602][ T3228] ? clear_bhb_loop+0x50/0xa0 [ 110.218304][ T3228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.224249][ T3228] RIP: 0033:0x7f301e113be9 [ 110.228772][ T3228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.248568][ T3228] RSP: 002b:00007f301cb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.257027][ T3228] RAX: ffffffffffffffda RBX: 00007f301e33afa0 RCX: 00007f301e113be9 [ 110.265193][ T3228] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 110.273182][ T3228] RBP: 00007f301cb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 110.281425][ T3228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.289397][ T3228] R13: 00007f301e33b038 R14: 00007f301e33afa0 R15: 00007ffedecaa738 [ 110.297900][ T3228] [ 111.341535][ T3285] device sit0 left promiscuous mode [ 111.475371][ T3288] device sit0 entered promiscuous mode [ 112.906698][ T3317] device syzkaller0 entered promiscuous mode [ 117.980423][ T3493] device veth0_vlan left promiscuous mode [ 118.017537][ T3493] device veth0_vlan entered promiscuous mode [ 118.084983][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.096934][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 118.128670][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.425566][ T3543] FAULT_INJECTION: forcing a failure. [ 119.425566][ T3543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.452495][ T3543] CPU: 1 PID: 3543 Comm: syz.0.1049 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 119.462995][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.473362][ T3543] Call Trace: [ 119.476756][ T3543] [ 119.479772][ T3543] __dump_stack+0x21/0x30 [ 119.484203][ T3543] dump_stack_lvl+0xee/0x150 [ 119.488811][ T3543] ? show_regs_print_info+0x20/0x20 [ 119.494015][ T3543] ? __this_cpu_preempt_check+0x13/0x20 [ 119.499572][ T3543] ? __perf_event_task_sched_in+0x1fb/0x280 [ 119.505499][ T3543] dump_stack+0x15/0x20 [ 119.509678][ T3543] should_fail+0x3c1/0x510 [ 119.514121][ T3543] should_fail_alloc_page+0x55/0x80 [ 119.519387][ T3543] prepare_alloc_pages+0x156/0x600 [ 119.524526][ T3543] ? __alloc_pages_bulk+0xab0/0xab0 [ 119.529768][ T3543] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 119.535430][ T3543] __alloc_pages+0x10a/0x440 [ 119.540038][ T3543] ? prep_new_page+0x110/0x110 [ 119.544897][ T3543] ? __pcpu_chunk_move+0x275/0x310 [ 119.550017][ T3543] pcpu_populate_chunk+0x184/0xcb0 [ 119.555324][ T3543] ? _find_next_bit+0x1b5/0x200 [ 119.560180][ T3543] pcpu_alloc+0xc4d/0x1660 [ 119.564624][ T3543] __alloc_percpu_gfp+0x25/0x30 [ 119.569502][ T3543] bpf_map_alloc_percpu+0xc5/0x150 [ 119.574649][ T3543] htab_map_alloc+0xc1b/0x14f0 [ 119.579417][ T3543] map_create+0x455/0x21b0 [ 119.583833][ T3543] __sys_bpf+0x2cf/0x730 [ 119.588069][ T3543] ? bpf_link_show_fdinfo+0x310/0x310 [ 119.593525][ T3543] ? debug_smp_processor_id+0x17/0x20 [ 119.598894][ T3543] __x64_sys_bpf+0x7c/0x90 [ 119.603306][ T3543] x64_sys_call+0x4b9/0x9a0 [ 119.607897][ T3543] do_syscall_64+0x4c/0xa0 [ 119.612322][ T3543] ? clear_bhb_loop+0x50/0xa0 [ 119.617038][ T3543] ? clear_bhb_loop+0x50/0xa0 [ 119.621730][ T3543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.627716][ T3543] RIP: 0033:0x7fdffd690be9 [ 119.632127][ T3543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.651900][ T3543] RSP: 002b:00007fdffc0f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.660330][ T3543] RAX: ffffffffffffffda RBX: 00007fdffd8b7fa0 RCX: 00007fdffd690be9 [ 119.668337][ T3543] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 119.676324][ T3543] RBP: 00007fdffc0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 119.684463][ T3543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.692768][ T3543] R13: 00007fdffd8b8038 R14: 00007fdffd8b7fa0 R15: 00007fff597b6ae8 [ 119.700765][ T3543] [ 121.784082][ T3598] FAULT_INJECTION: forcing a failure. [ 121.784082][ T3598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.864737][ T3598] CPU: 0 PID: 3598 Comm: syz.4.1067 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 121.875039][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.885563][ T3598] Call Trace: [ 121.888963][ T3598] [ 121.892002][ T3598] __dump_stack+0x21/0x30 [ 121.896465][ T3598] dump_stack_lvl+0xee/0x150 [ 121.901077][ T3598] ? show_regs_print_info+0x20/0x20 [ 121.906289][ T3598] ? preempt_schedule+0xa7/0xb0 [ 121.911180][ T3598] ? schedule_preempt_disabled+0x20/0x20 [ 121.916837][ T3598] dump_stack+0x15/0x20 [ 121.921126][ T3598] should_fail+0x3c1/0x510 [ 121.925822][ T3598] should_fail_alloc_page+0x55/0x80 [ 121.931038][ T3598] prepare_alloc_pages+0x156/0x600 [ 121.936533][ T3598] ? __alloc_pages_bulk+0xab0/0xab0 [ 121.941743][ T3598] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 121.947398][ T3598] __alloc_pages+0x10a/0x440 [ 121.952183][ T3598] ? prep_new_page+0x110/0x110 [ 121.957062][ T3598] pcpu_populate_chunk+0x184/0xcb0 [ 121.962200][ T3598] ? _find_next_bit+0x1b5/0x200 [ 121.967072][ T3598] pcpu_alloc+0xc4d/0x1660 [ 121.971512][ T3598] __alloc_percpu_gfp+0x25/0x30 [ 121.976381][ T3598] bpf_map_alloc_percpu+0xc5/0x150 [ 121.981621][ T3598] htab_map_alloc+0xc1b/0x14f0 [ 121.986433][ T3598] map_create+0x455/0x21b0 [ 121.990872][ T3598] __sys_bpf+0x2cf/0x730 [ 121.995148][ T3598] ? bpf_link_show_fdinfo+0x310/0x310 [ 122.000638][ T3598] ? debug_smp_processor_id+0x17/0x20 [ 122.006124][ T3598] __x64_sys_bpf+0x7c/0x90 [ 122.010696][ T3598] x64_sys_call+0x4b9/0x9a0 [ 122.015224][ T3598] do_syscall_64+0x4c/0xa0 [ 122.019760][ T3598] ? clear_bhb_loop+0x50/0xa0 [ 122.024455][ T3598] ? clear_bhb_loop+0x50/0xa0 [ 122.029361][ T3598] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.035360][ T3598] RIP: 0033:0x7f4b07bd8be9 [ 122.040049][ T3598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.059782][ T3598] RSP: 002b:00007f4b06641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.068219][ T3598] RAX: ffffffffffffffda RBX: 00007f4b07dfffa0 RCX: 00007f4b07bd8be9 [ 122.076423][ T3598] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 122.084422][ T3598] RBP: 00007f4b06641090 R08: 0000000000000000 R09: 0000000000000000 [ 122.092421][ T3598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.100421][ T3598] R13: 00007f4b07e00038 R14: 00007f4b07dfffa0 R15: 00007fff5058d158 [ 122.108420][ T3598] [ 123.991255][ T3664] device veth0_vlan left promiscuous mode [ 124.024394][ T3664] device veth0_vlan entered promiscuous mode [ 125.384330][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.391591][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.606150][ T3775] FAULT_INJECTION: forcing a failure. [ 126.606150][ T3775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.620007][ T3775] CPU: 0 PID: 3775 Comm: syz.0.1130 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 126.630719][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.640789][ T3775] Call Trace: [ 126.644483][ T3775] [ 126.647544][ T3775] __dump_stack+0x21/0x30 [ 126.651977][ T3775] dump_stack_lvl+0xee/0x150 [ 126.656611][ T3775] ? show_regs_print_info+0x20/0x20 [ 126.662088][ T3775] ? bpf_trace_run3+0xd1/0x1e0 [ 126.666976][ T3775] dump_stack+0x15/0x20 [ 126.671143][ T3775] should_fail+0x3c1/0x510 [ 126.675570][ T3775] should_fail_usercopy+0x1a/0x20 [ 126.681039][ T3775] copy_fpstate_to_sigframe+0x6d4/0x9a0 [ 126.686696][ T3775] ? fpregs_set+0x540/0x540 [ 126.691221][ T3775] ? get_signal+0x13da/0x1480 [ 126.695909][ T3775] ? fpu__alloc_mathframe+0x88/0x150 [ 126.701216][ T3775] arch_do_signal_or_restart+0x5e3/0x10f0 [ 126.707734][ T3775] ? __send_signal+0x8f6/0xc30 [ 126.712605][ T3775] ? send_signal+0x422/0x580 [ 126.717239][ T3775] ? get_sigframe_size+0x10/0x10 [ 126.722684][ T3775] ? force_sig_info_to_task+0x344/0x3f0 [ 126.728262][ T3775] ? force_sig+0xb7/0x100 [ 126.732691][ T3775] ? send_sig+0x70/0x70 [ 126.736857][ T3775] exit_to_user_mode_loop+0xa7/0xe0 [ 126.742154][ T3775] exit_to_user_mode_prepare+0x5a/0xa0 [ 126.747625][ T3775] irqentry_exit_to_user_mode+0x9/0x10 [ 126.753093][ T3775] irqentry_exit+0x12/0x40 [ 126.757520][ T3775] exc_general_protection+0x1e4/0x270 [ 126.762900][ T3775] ? debug_smp_processor_id+0x17/0x20 [ 126.768518][ T3775] ? do_syscall_64+0x58/0xa0 [ 126.773139][ T3775] asm_exc_general_protection+0x27/0x30 [ 126.778718][ T3775] RIP: 0033:0x7fdffd669739 [ 126.783581][ T3775] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 126.803383][ T3775] RSP: 002b:00007fdffc0f87c8 EFLAGS: 00010283 [ 126.809549][ T3775] RAX: 0000000000000999 RBX: 00007fdffc0f8d30 RCX: 00007fdffd87a120 [ 126.817707][ T3775] RDX: 9999999999999999 RSI: 00007fdffd713b31 RDI: 9999999999999999 [ 126.825943][ T3775] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 126.834089][ T3775] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 126.842157][ T3775] R13: 00007fdffc0f8eb0 R14: 9999999999999999 R15: 0000000000000000 [ 126.850236][ T3775] [ 129.304473][ T3870] device sit0 left promiscuous mode [ 129.434202][ T3870] device sit0 entered promiscuous mode [ 132.014964][ T3951] FAULT_INJECTION: forcing a failure. [ 132.014964][ T3951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.034870][ T3951] CPU: 1 PID: 3951 Comm: syz.4.1195 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 132.045076][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.055252][ T3951] Call Trace: [ 132.058527][ T3951] [ 132.061632][ T3951] __dump_stack+0x21/0x30 [ 132.065967][ T3951] dump_stack_lvl+0xee/0x150 [ 132.070594][ T3951] ? show_regs_print_info+0x20/0x20 [ 132.076052][ T3951] ? probe_sched_wakeup+0x64/0x80 [ 132.081315][ T3951] dump_stack+0x15/0x20 [ 132.085562][ T3951] should_fail+0x3c1/0x510 [ 132.089982][ T3951] should_fail_alloc_page+0x55/0x80 [ 132.095336][ T3951] prepare_alloc_pages+0x156/0x600 [ 132.100481][ T3951] ? __alloc_pages_bulk+0xab0/0xab0 [ 132.105887][ T3951] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 132.111634][ T3951] __alloc_pages+0x10a/0x440 [ 132.116359][ T3951] ? prep_new_page+0x110/0x110 [ 132.121310][ T3951] pcpu_populate_chunk+0x184/0xcb0 [ 132.126482][ T3951] ? _find_next_bit+0x1b5/0x200 [ 132.131355][ T3951] pcpu_alloc+0xc4d/0x1660 [ 132.135786][ T3951] __alloc_percpu_gfp+0x25/0x30 [ 132.141046][ T3951] bpf_map_alloc_percpu+0xc5/0x150 [ 132.146165][ T3951] htab_map_alloc+0xc1b/0x14f0 [ 132.151017][ T3951] map_create+0x455/0x21b0 [ 132.155536][ T3951] __sys_bpf+0x2cf/0x730 [ 132.159785][ T3951] ? bpf_link_show_fdinfo+0x310/0x310 [ 132.165156][ T3951] ? debug_smp_processor_id+0x17/0x20 [ 132.170665][ T3951] __x64_sys_bpf+0x7c/0x90 [ 132.175302][ T3951] x64_sys_call+0x4b9/0x9a0 [ 132.180071][ T3951] do_syscall_64+0x4c/0xa0 [ 132.184665][ T3951] ? clear_bhb_loop+0x50/0xa0 [ 132.189459][ T3951] ? clear_bhb_loop+0x50/0xa0 [ 132.194166][ T3951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.200057][ T3951] RIP: 0033:0x7f4b07bd8be9 [ 132.204471][ T3951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.224175][ T3951] RSP: 002b:00007f4b06641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.232673][ T3951] RAX: ffffffffffffffda RBX: 00007f4b07dfffa0 RCX: 00007f4b07bd8be9 [ 132.240746][ T3951] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 132.248794][ T3951] RBP: 00007f4b06641090 R08: 0000000000000000 R09: 0000000000000000 [ 132.256760][ T3951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.264723][ T3951] R13: 00007f4b07e00038 R14: 00007f4b07dfffa0 R15: 00007fff5058d158 [ 132.272982][ T3951] [ 132.750371][ T3971] FAULT_INJECTION: forcing a failure. [ 132.750371][ T3971] name failslab, interval 1, probability 0, space 0, times 0 [ 132.763255][ T3971] CPU: 0 PID: 3971 Comm: syz.1.1203 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 132.773517][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.783751][ T3971] Call Trace: [ 132.787057][ T3971] [ 132.790037][ T3971] __dump_stack+0x21/0x30 [ 132.794395][ T3971] dump_stack_lvl+0xee/0x150 [ 132.799009][ T3971] ? show_regs_print_info+0x20/0x20 [ 132.804232][ T3971] dump_stack+0x15/0x20 [ 132.808587][ T3971] should_fail+0x3c1/0x510 [ 132.813180][ T3971] __should_failslab+0xa4/0xe0 [ 132.818149][ T3971] should_failslab+0x9/0x20 [ 132.822676][ T3971] slab_pre_alloc_hook+0x3b/0xe0 [ 132.827637][ T3971] kmem_cache_alloc_trace+0x48/0x270 [ 132.832938][ T3971] ? htab_map_alloc+0x9a/0x14f0 [ 132.839018][ T3971] htab_map_alloc+0x9a/0x14f0 [ 132.844491][ T3971] ? security_capable+0x87/0xb0 [ 132.849526][ T3971] ? capable+0x8a/0xe0 [ 132.853608][ T3971] ? htab_map_alloc_check+0x3d8/0x4c0 [ 132.859359][ T3971] map_create+0x455/0x21b0 [ 132.863876][ T3971] __sys_bpf+0x2cf/0x730 [ 132.868127][ T3971] ? bpf_link_show_fdinfo+0x310/0x310 [ 132.873516][ T3971] ? debug_smp_processor_id+0x17/0x20 [ 132.878903][ T3971] __x64_sys_bpf+0x7c/0x90 [ 132.883332][ T3971] x64_sys_call+0x4b9/0x9a0 [ 132.887945][ T3971] do_syscall_64+0x4c/0xa0 [ 132.892518][ T3971] ? clear_bhb_loop+0x50/0xa0 [ 132.897235][ T3971] ? clear_bhb_loop+0x50/0xa0 [ 132.901920][ T3971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.907913][ T3971] RIP: 0033:0x7f85d967abe9 [ 132.912684][ T3971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.932302][ T3971] RSP: 002b:00007f85d80e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.940835][ T3971] RAX: ffffffffffffffda RBX: 00007f85d98a1fa0 RCX: 00007f85d967abe9 [ 132.948921][ T3971] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 132.956913][ T3971] RBP: 00007f85d80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 132.965174][ T3971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.973171][ T3971] R13: 00007f85d98a2038 R14: 00007f85d98a1fa0 R15: 00007ffc83bd3d38 [ 132.981605][ T3971] [ 134.346935][ T3986] device veth1_macvtap left promiscuous mode [ 136.526790][ T4060] FAULT_INJECTION: forcing a failure. [ 136.526790][ T4060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.554888][ T4060] CPU: 0 PID: 4060 Comm: syz.0.1232 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 136.565214][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.575285][ T4060] Call Trace: [ 136.578580][ T4060] [ 136.581604][ T4060] __dump_stack+0x21/0x30 [ 136.585955][ T4060] dump_stack_lvl+0xee/0x150 [ 136.590672][ T4060] ? show_regs_print_info+0x20/0x20 [ 136.596051][ T4060] ? preempt_schedule+0xa7/0xb0 [ 136.601089][ T4060] ? schedule_preempt_disabled+0x20/0x20 [ 136.606721][ T4060] dump_stack+0x15/0x20 [ 136.610881][ T4060] should_fail+0x3c1/0x510 [ 136.615379][ T4060] should_fail_alloc_page+0x55/0x80 [ 136.620703][ T4060] prepare_alloc_pages+0x156/0x600 [ 136.625823][ T4060] ? __alloc_pages_bulk+0xab0/0xab0 [ 136.631044][ T4060] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 136.636854][ T4060] __alloc_pages+0x10a/0x440 [ 136.641530][ T4060] ? prep_new_page+0x110/0x110 [ 136.646295][ T4060] pcpu_populate_chunk+0x184/0xcb0 [ 136.651402][ T4060] ? _find_next_bit+0x1b5/0x200 [ 136.656247][ T4060] pcpu_alloc+0xc4d/0x1660 [ 136.660680][ T4060] __alloc_percpu_gfp+0x25/0x30 [ 136.665641][ T4060] bpf_map_alloc_percpu+0xc5/0x150 [ 136.670767][ T4060] htab_map_alloc+0xc1b/0x14f0 [ 136.675559][ T4060] map_create+0x455/0x21b0 [ 136.680156][ T4060] __sys_bpf+0x2cf/0x730 [ 136.684392][ T4060] ? bpf_link_show_fdinfo+0x310/0x310 [ 136.689806][ T4060] ? debug_smp_processor_id+0x17/0x20 [ 136.695180][ T4060] __x64_sys_bpf+0x7c/0x90 [ 136.699684][ T4060] x64_sys_call+0x4b9/0x9a0 [ 136.704185][ T4060] do_syscall_64+0x4c/0xa0 [ 136.708688][ T4060] ? clear_bhb_loop+0x50/0xa0 [ 136.713375][ T4060] ? clear_bhb_loop+0x50/0xa0 [ 136.718049][ T4060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.723937][ T4060] RIP: 0033:0x7fdffd690be9 [ 136.728350][ T4060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.748225][ T4060] RSP: 002b:00007fdffc0f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.756640][ T4060] RAX: ffffffffffffffda RBX: 00007fdffd8b7fa0 RCX: 00007fdffd690be9 [ 136.764761][ T4060] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 136.772754][ T4060] RBP: 00007fdffc0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 136.780828][ T4060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.788817][ T4060] R13: 00007fdffd8b8038 R14: 00007fdffd8b7fa0 R15: 00007fff597b6ae8 [ 136.796799][ T4060] [ 139.543102][ T30] audit: type=1400 audit(1755746022.161:142): avc: denied { create } for pid=4176 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.491220][ T4216] FAULT_INJECTION: forcing a failure. [ 140.491220][ T4216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.524904][ T4216] CPU: 0 PID: 4216 Comm: syz.4.1286 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 140.535112][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.545285][ T4216] Call Trace: [ 140.548758][ T4216] [ 140.551686][ T4216] __dump_stack+0x21/0x30 [ 140.556098][ T4216] dump_stack_lvl+0xee/0x150 [ 140.560762][ T4216] ? show_regs_print_info+0x20/0x20 [ 140.565953][ T4216] ? _raw_spin_lock+0x8e/0xe0 [ 140.570818][ T4216] dump_stack+0x15/0x20 [ 140.575092][ T4216] should_fail+0x3c1/0x510 [ 140.579507][ T4216] should_fail_alloc_page+0x55/0x80 [ 140.584700][ T4216] prepare_alloc_pages+0x156/0x600 [ 140.589985][ T4216] ? __alloc_pages_bulk+0xab0/0xab0 [ 140.595209][ T4216] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 140.600846][ T4216] __alloc_pages+0x10a/0x440 [ 140.605536][ T4216] ? prep_new_page+0x110/0x110 [ 140.610502][ T4216] pcpu_populate_chunk+0x184/0xcb0 [ 140.615723][ T4216] ? _find_next_bit+0x1b5/0x200 [ 140.620739][ T4216] pcpu_alloc+0xc4d/0x1660 [ 140.625254][ T4216] __alloc_percpu_gfp+0x25/0x30 [ 140.630105][ T4216] bpf_map_alloc_percpu+0xc5/0x150 [ 140.635294][ T4216] htab_map_alloc+0xc1b/0x14f0 [ 140.640056][ T4216] map_create+0x455/0x21b0 [ 140.644882][ T4216] __sys_bpf+0x2cf/0x730 [ 140.649132][ T4216] ? bpf_link_show_fdinfo+0x310/0x310 [ 140.654591][ T4216] ? debug_smp_processor_id+0x17/0x20 [ 140.660160][ T4216] __x64_sys_bpf+0x7c/0x90 [ 140.664601][ T4216] x64_sys_call+0x4b9/0x9a0 [ 140.669112][ T4216] do_syscall_64+0x4c/0xa0 [ 140.673548][ T4216] ? clear_bhb_loop+0x50/0xa0 [ 140.679062][ T4216] ? clear_bhb_loop+0x50/0xa0 [ 140.683745][ T4216] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.689632][ T4216] RIP: 0033:0x7f4b07bd8be9 [ 140.694164][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.713770][ T4216] RSP: 002b:00007f4b06641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.722184][ T4216] RAX: ffffffffffffffda RBX: 00007f4b07dfffa0 RCX: 00007f4b07bd8be9 [ 140.730302][ T4216] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 140.738273][ T4216] RBP: 00007f4b06641090 R08: 0000000000000000 R09: 0000000000000000 [ 140.746329][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.754407][ T4216] R13: 00007f4b07e00038 R14: 00007f4b07dfffa0 R15: 00007fff5058d158 [ 140.762564][ T4216] [ 142.846345][ T4301] FAULT_INJECTION: forcing a failure. [ 142.846345][ T4301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.874957][ T4301] CPU: 0 PID: 4301 Comm: syz.0.1315 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 142.885252][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.895320][ T4301] Call Trace: [ 142.898611][ T4301] [ 142.901676][ T4301] __dump_stack+0x21/0x30 [ 142.906292][ T4301] dump_stack_lvl+0xee/0x150 [ 142.910912][ T4301] ? show_regs_print_info+0x20/0x20 [ 142.916215][ T4301] ? _raw_spin_unlock+0x4d/0x70 [ 142.921066][ T4301] dump_stack+0x15/0x20 [ 142.925219][ T4301] should_fail+0x3c1/0x510 [ 142.929753][ T4301] should_fail_usercopy+0x1a/0x20 [ 142.934800][ T4301] _copy_from_user+0x20/0xd0 [ 142.939389][ T4301] __copy_msghdr_from_user+0xaf/0x5e0 [ 142.944862][ T4301] ? _kstrtoull+0x3c0/0x4d0 [ 142.949363][ T4301] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 142.954643][ T4301] ? kstrtouint_from_user+0x1a0/0x200 [ 142.960011][ T4301] ? bpf_prog_8f4d9728dfbc680e+0x21/0x4a8 [ 142.965787][ T4301] ? bpf_get_stackid_raw_tp+0x175/0x1b0 [ 142.971602][ T4301] ___sys_sendmsg+0x156/0x260 [ 142.976424][ T4301] ? __sys_sendmsg+0x250/0x250 [ 142.981317][ T4301] ? __fdget+0x1a1/0x230 [ 142.985559][ T4301] __x64_sys_sendmsg+0x1e2/0x2a0 [ 142.990494][ T4301] ? ___sys_sendmsg+0x260/0x260 [ 142.995473][ T4301] ? ksys_write+0x1eb/0x240 [ 143.000072][ T4301] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 143.006140][ T4301] x64_sys_call+0x4b/0x9a0 [ 143.010553][ T4301] do_syscall_64+0x4c/0xa0 [ 143.014966][ T4301] ? clear_bhb_loop+0x50/0xa0 [ 143.019835][ T4301] ? clear_bhb_loop+0x50/0xa0 [ 143.024508][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.030571][ T4301] RIP: 0033:0x7fdffd690be9 [ 143.034980][ T4301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.054669][ T4301] RSP: 002b:00007fdffc0f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.063096][ T4301] RAX: ffffffffffffffda RBX: 00007fdffd8b7fa0 RCX: 00007fdffd690be9 [ 143.071065][ T4301] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 143.079035][ T4301] RBP: 00007fdffc0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 143.087039][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.095004][ T4301] R13: 00007fdffd8b8038 R14: 00007fdffd8b7fa0 R15: 00007fff597b6ae8 [ 143.102993][ T4301] [ 143.977455][ T4347] FAULT_INJECTION: forcing a failure. [ 143.977455][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.990954][ T4347] CPU: 0 PID: 4347 Comm: syz.0.1332 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 144.001656][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.011727][ T4347] Call Trace: [ 144.015011][ T4347] [ 144.018120][ T4347] __dump_stack+0x21/0x30 [ 144.022459][ T4347] dump_stack_lvl+0xee/0x150 [ 144.027136][ T4347] ? show_regs_print_info+0x20/0x20 [ 144.032416][ T4347] ? stack_trace_save+0x98/0xe0 [ 144.037353][ T4347] ? _raw_spin_unlock+0x4d/0x70 [ 144.042376][ T4347] dump_stack+0x15/0x20 [ 144.046523][ T4347] should_fail+0x3c1/0x510 [ 144.050933][ T4347] should_fail_usercopy+0x1a/0x20 [ 144.055957][ T4347] _copy_from_user+0x20/0xd0 [ 144.060725][ T4347] iovec_from_user+0x1bc/0x2f0 [ 144.065490][ T4347] ? __copy_msghdr_from_user+0x302/0x5e0 [ 144.071124][ T4347] ? _kstrtoull+0x3c0/0x4d0 [ 144.075899][ T4347] __import_iovec+0x71/0x400 [ 144.080790][ T4347] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 144.086397][ T4347] ? kstrtouint_from_user+0x1a0/0x200 [ 144.091767][ T4347] import_iovec+0x7c/0xb0 [ 144.096089][ T4347] ___sys_sendmsg+0x1b9/0x260 [ 144.100772][ T4347] ? __sys_sendmsg+0x250/0x250 [ 144.105798][ T4347] ? __fdget+0x1a1/0x230 [ 144.110035][ T4347] __x64_sys_sendmsg+0x1e2/0x2a0 [ 144.115139][ T4347] ? ___sys_sendmsg+0x260/0x260 [ 144.120090][ T4347] ? ksys_write+0x1eb/0x240 [ 144.124587][ T4347] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 144.130649][ T4347] x64_sys_call+0x4b/0x9a0 [ 144.135061][ T4347] do_syscall_64+0x4c/0xa0 [ 144.139479][ T4347] ? clear_bhb_loop+0x50/0xa0 [ 144.144155][ T4347] ? clear_bhb_loop+0x50/0xa0 [ 144.148915][ T4347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.154897][ T4347] RIP: 0033:0x7fdffd690be9 [ 144.159313][ T4347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.179089][ T4347] RSP: 002b:00007fdffc0f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.187595][ T4347] RAX: ffffffffffffffda RBX: 00007fdffd8b7fa0 RCX: 00007fdffd690be9 [ 144.195652][ T4347] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 144.203621][ T4347] RBP: 00007fdffc0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 144.211589][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.219645][ T4347] R13: 00007fdffd8b8038 R14: 00007fdffd8b7fa0 R15: 00007fff597b6ae8 [ 144.227616][ T4347] [ 144.326929][ T4352] FAULT_INJECTION: forcing a failure. [ 144.326929][ T4352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.354863][ T4352] CPU: 0 PID: 4352 Comm: syz.0.1333 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 144.365240][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.375839][ T4352] Call Trace: [ 144.379140][ T4352] [ 144.382076][ T4352] __dump_stack+0x21/0x30 [ 144.386622][ T4352] dump_stack_lvl+0xee/0x150 [ 144.391232][ T4352] ? show_regs_print_info+0x20/0x20 [ 144.396447][ T4352] ? get_page_from_freelist+0x2cc5/0x2d50 [ 144.402617][ T4352] dump_stack+0x15/0x20 [ 144.406981][ T4352] should_fail+0x3c1/0x510 [ 144.411441][ T4352] should_fail_alloc_page+0x55/0x80 [ 144.416655][ T4352] prepare_alloc_pages+0x156/0x600 [ 144.421979][ T4352] ? __alloc_pages_bulk+0xab0/0xab0 [ 144.427181][ T4352] ? pcpu_chunk_refresh_hint+0x7e5/0x930 [ 144.432863][ T4352] __alloc_pages+0x10a/0x440 [ 144.437467][ T4352] ? prep_new_page+0x110/0x110 [ 144.442346][ T4352] pcpu_populate_chunk+0x184/0xcb0 [ 144.447597][ T4352] ? _find_next_bit+0x1b5/0x200 [ 144.452810][ T4352] pcpu_alloc+0xc4d/0x1660 [ 144.457237][ T4352] __alloc_percpu_gfp+0x25/0x30 [ 144.462367][ T4352] bpf_map_alloc_percpu+0xc5/0x150 [ 144.467553][ T4352] htab_map_alloc+0xc1b/0x14f0 [ 144.472329][ T4352] map_create+0x455/0x21b0 [ 144.476843][ T4352] __sys_bpf+0x2cf/0x730 [ 144.481360][ T4352] ? bpf_link_show_fdinfo+0x310/0x310 [ 144.486837][ T4352] ? debug_smp_processor_id+0x17/0x20 [ 144.492333][ T4352] __x64_sys_bpf+0x7c/0x90 [ 144.496776][ T4352] x64_sys_call+0x4b9/0x9a0 [ 144.501406][ T4352] do_syscall_64+0x4c/0xa0 [ 144.506005][ T4352] ? clear_bhb_loop+0x50/0xa0 [ 144.510709][ T4352] ? clear_bhb_loop+0x50/0xa0 [ 144.515394][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.521382][ T4352] RIP: 0033:0x7fdffd690be9 [ 144.525985][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.545667][ T4352] RSP: 002b:00007fdffc0f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.554183][ T4352] RAX: ffffffffffffffda RBX: 00007fdffd8b7fa0 RCX: 00007fdffd690be9 [ 144.562343][ T4352] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 144.570586][ T4352] RBP: 00007fdffc0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 144.578554][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 144.586536][ T4352] R13: 00007fdffd8b8038 R14: 00007fdffd8b7fa0 R15: 00007fff597b6ae8 [ 144.594653][ T4352] [ 149.664343][ T4564] FAULT_INJECTION: forcing a failure. [ 149.664343][ T4564] name failslab, interval 1, probability 0, space 0, times 0 [ 149.793235][ T4564] CPU: 1 PID: 4564 Comm: syz.2.1402 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 149.803535][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.813793][ T4564] Call Trace: [ 149.817082][ T4564] [ 149.820023][ T4564] __dump_stack+0x21/0x30 [ 149.824817][ T4564] dump_stack_lvl+0xee/0x150 [ 149.829708][ T4564] ? show_regs_print_info+0x20/0x20 [ 149.834932][ T4564] dump_stack+0x15/0x20 [ 149.839391][ T4564] should_fail+0x3c1/0x510 [ 149.843920][ T4564] __should_failslab+0xa4/0xe0 [ 149.848708][ T4564] should_failslab+0x9/0x20 [ 149.853241][ T4564] slab_pre_alloc_hook+0x3b/0xe0 [ 149.858753][ T4564] ? dup_task_struct+0x57/0xc10 [ 149.863703][ T4564] kmem_cache_alloc+0x44/0x260 [ 149.868491][ T4564] ? _raw_spin_lock_irq+0x8f/0xe0 [ 149.873511][ T4564] dup_task_struct+0x57/0xc10 [ 149.878192][ T4564] ? __kasan_check_write+0x14/0x20 [ 149.883301][ T4564] ? recalc_sigpending+0x1ac/0x230 [ 149.888420][ T4564] copy_process+0x5a9/0x3210 [ 149.893028][ T4564] ? kstrtol_from_user+0x260/0x260 [ 149.898160][ T4564] ? __kasan_check_write+0x14/0x20 [ 149.903501][ T4564] ? proc_fail_nth_write+0x17a/0x1f0 [ 149.908883][ T4564] ? proc_fail_nth_read+0x210/0x210 [ 149.914100][ T4564] ? __pidfd_prepare+0x150/0x150 [ 149.919134][ T4564] ? security_file_permission+0x83/0xa0 [ 149.924690][ T4564] kernel_clone+0x23f/0x940 [ 149.929213][ T4564] ? create_io_thread+0x130/0x130 [ 149.934480][ T4564] ? __kasan_check_write+0x14/0x20 [ 149.939693][ T4564] ? mutex_unlock+0x89/0x220 [ 149.944322][ T4564] __x64_sys_clone+0x176/0x1d0 [ 149.949114][ T4564] ? __kasan_check_write+0x14/0x20 [ 149.954259][ T4564] ? __ia32_sys_vfork+0xf0/0xf0 [ 149.959125][ T4564] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 149.965203][ T4564] x64_sys_call+0x41f/0x9a0 [ 149.970597][ T4564] do_syscall_64+0x4c/0xa0 [ 149.975026][ T4564] ? clear_bhb_loop+0x50/0xa0 [ 149.979803][ T4564] ? clear_bhb_loop+0x50/0xa0 [ 149.984586][ T4564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.990585][ T4564] RIP: 0033:0x7fa1320a7be9 [ 149.995011][ T4564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.014727][ T4564] RSP: 002b:00007fa130b0ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 150.023179][ T4564] RAX: ffffffffffffffda RBX: 00007fa1322cefa0 RCX: 00007fa1320a7be9 [ 150.031166][ T4564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 150.039349][ T4564] RBP: 00007fa130b10090 R08: 0000000000000000 R09: 0000000000000000 [ 150.047317][ T4564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 150.055279][ T4564] R13: 00007fa1322cf038 R14: 00007fa1322cefa0 R15: 00007ffdd3bd2cb8 [ 150.063367][ T4564] [ 153.929696][ T4713] device veth0_vlan left promiscuous mode [ 153.962871][ T4713] device veth0_vlan entered promiscuous mode [ 154.104923][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.162786][ T4819] FAULT_INJECTION: forcing a failure. [ 157.162786][ T4819] name failslab, interval 1, probability 0, space 0, times 0 [ 157.180269][ T4819] CPU: 1 PID: 4819 Comm: syz.2.1493 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 157.190646][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.200987][ T4819] Call Trace: [ 157.204370][ T4819] [ 157.207539][ T4819] __dump_stack+0x21/0x30 [ 157.211898][ T4819] dump_stack_lvl+0xee/0x150 [ 157.216743][ T4819] ? show_regs_print_info+0x20/0x20 [ 157.221973][ T4819] ? do_user_addr_fault+0xa64/0x1180 [ 157.227503][ T4819] ? __kasan_check_write+0x14/0x20 [ 157.232637][ T4819] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 157.238208][ T4819] dump_stack+0x15/0x20 [ 157.242479][ T4819] should_fail+0x3c1/0x510 [ 157.247011][ T4819] __should_failslab+0xa4/0xe0 [ 157.251915][ T4819] should_failslab+0x9/0x20 [ 157.256610][ T4819] slab_pre_alloc_hook+0x3b/0xe0 [ 157.261568][ T4819] ? skb_clone+0x1cf/0x360 [ 157.266001][ T4819] kmem_cache_alloc+0x44/0x260 [ 157.270803][ T4819] skb_clone+0x1cf/0x360 [ 157.275056][ T4819] ? __kasan_check_write+0x14/0x20 [ 157.280185][ T4819] sk_psock_verdict_recv+0x53/0x800 [ 157.285414][ T4819] unix_read_sock+0x10a/0x2c0 [ 157.290102][ T4819] ? sk_psock_skb_redirect+0x440/0x440 [ 157.295578][ T4819] ? unix_stream_splice_actor+0x120/0x120 [ 157.301643][ T4819] ? copy_page_from_iter+0x2e1/0x680 [ 157.307194][ T4819] ? copy_user_enhanced_fast_string+0xe/0x40 [ 157.313477][ T4819] ? sk_psock_skb_redirect+0x440/0x440 [ 157.319048][ T4819] ? unix_set_peek_off+0xa0/0xa0 [ 157.324096][ T4819] unix_stream_read_sock+0x61/0x90 [ 157.329764][ T4819] sk_psock_verdict_data_ready+0x115/0x170 [ 157.335596][ T4819] ? sk_psock_start_verdict+0xc0/0xc0 [ 157.341455][ T4819] ? _raw_spin_lock+0x8e/0xe0 [ 157.346186][ T4819] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 157.352212][ T4819] ? skb_queue_tail+0xcb/0xf0 [ 157.356889][ T4819] unix_stream_sendmsg+0x7c4/0xc80 [ 157.362207][ T4819] ? unix_show_fdinfo+0xa0/0xa0 [ 157.367099][ T4819] ? security_socket_sendmsg+0x82/0xa0 [ 157.372753][ T4819] ? unix_show_fdinfo+0xa0/0xa0 [ 157.377884][ T4819] ____sys_sendmsg+0x5a2/0x8c0 [ 157.382671][ T4819] ? __sys_sendmsg_sock+0x40/0x40 [ 157.387917][ T4819] ? import_iovec+0x7c/0xb0 [ 157.392782][ T4819] ___sys_sendmsg+0x1f0/0x260 [ 157.397574][ T4819] ? __sys_sendmsg+0x250/0x250 [ 157.402379][ T4819] ? __fdget+0x1a1/0x230 [ 157.406740][ T4819] __x64_sys_sendmsg+0x1e2/0x2a0 [ 157.411677][ T4819] ? ___sys_sendmsg+0x260/0x260 [ 157.416572][ T4819] ? ksys_write+0x1eb/0x240 [ 157.421090][ T4819] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 157.427278][ T4819] x64_sys_call+0x4b/0x9a0 [ 157.431898][ T4819] do_syscall_64+0x4c/0xa0 [ 157.436412][ T4819] ? clear_bhb_loop+0x50/0xa0 [ 157.441414][ T4819] ? clear_bhb_loop+0x50/0xa0 [ 157.446518][ T4819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.452562][ T4819] RIP: 0033:0x7fa1320a7be9 [ 157.457188][ T4819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.477394][ T4819] RSP: 002b:00007fa130b10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.486012][ T4819] RAX: ffffffffffffffda RBX: 00007fa1322cefa0 RCX: 00007fa1320a7be9 [ 157.493997][ T4819] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 157.502291][ T4819] RBP: 00007fa130b10090 R08: 0000000000000000 R09: 0000000000000000 [ 157.510267][ T4819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.518323][ T4819] R13: 00007fa1322cf038 R14: 00007fa1322cefa0 R15: 00007ffdd3bd2cb8 [ 157.526396][ T4819] [ 157.536807][ T4809] device wg2 left promiscuous mode [ 157.560454][ T4810] device wg2 entered promiscuous mode [ 158.065026][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.518154][ T4878] FAULT_INJECTION: forcing a failure. [ 158.518154][ T4878] name failslab, interval 1, probability 0, space 0, times 0 [ 158.562019][ T4878] CPU: 0 PID: 4878 Comm: syz.1.1511 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 158.572317][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.582603][ T4878] Call Trace: [ 158.585980][ T4878] [ 158.588919][ T4878] __dump_stack+0x21/0x30 [ 158.593320][ T4878] dump_stack_lvl+0xee/0x150 [ 158.598320][ T4878] ? show_regs_print_info+0x20/0x20 [ 158.603711][ T4878] dump_stack+0x15/0x20 [ 158.608049][ T4878] should_fail+0x3c1/0x510 [ 158.613001][ T4878] __should_failslab+0xa4/0xe0 [ 158.617766][ T4878] should_failslab+0x9/0x20 [ 158.622276][ T4878] slab_pre_alloc_hook+0x3b/0xe0 [ 158.627410][ T4878] kmem_cache_alloc_trace+0x48/0x270 [ 158.632697][ T4878] ? sk_psock_skb_ingress_self+0x5f/0x330 [ 158.638417][ T4878] ? migrate_disable+0x180/0x180 [ 158.643373][ T4878] sk_psock_skb_ingress_self+0x5f/0x330 [ 158.648916][ T4878] ? migrate_disable+0xd6/0x180 [ 158.653852][ T4878] sk_psock_verdict_recv+0x636/0x800 [ 158.659226][ T4878] unix_read_sock+0x10a/0x2c0 [ 158.663903][ T4878] ? sk_psock_skb_redirect+0x440/0x440 [ 158.669393][ T4878] ? unix_stream_splice_actor+0x120/0x120 [ 158.675490][ T4878] ? copy_page_from_iter+0x2e1/0x680 [ 158.680779][ T4878] ? copy_user_enhanced_fast_string+0xe/0x40 [ 158.686762][ T4878] ? sk_psock_skb_redirect+0x440/0x440 [ 158.692337][ T4878] ? unix_set_peek_off+0xa0/0xa0 [ 158.697371][ T4878] unix_stream_read_sock+0x61/0x90 [ 158.702477][ T4878] sk_psock_verdict_data_ready+0x115/0x170 [ 158.708366][ T4878] ? sk_psock_start_verdict+0xc0/0xc0 [ 158.713824][ T4878] ? _raw_spin_lock+0x8e/0xe0 [ 158.718510][ T4878] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 158.724318][ T4878] ? skb_queue_tail+0xcb/0xf0 [ 158.728998][ T4878] unix_stream_sendmsg+0x7c4/0xc80 [ 158.734107][ T4878] ? unix_show_fdinfo+0xa0/0xa0 [ 158.738961][ T4878] ? security_socket_sendmsg+0x82/0xa0 [ 158.744420][ T4878] ? unix_show_fdinfo+0xa0/0xa0 [ 158.749443][ T4878] ____sys_sendmsg+0x5a2/0x8c0 [ 158.754382][ T4878] ? __sys_sendmsg_sock+0x40/0x40 [ 158.759406][ T4878] ? import_iovec+0x7c/0xb0 [ 158.763927][ T4878] ___sys_sendmsg+0x1f0/0x260 [ 158.768863][ T4878] ? __sys_sendmsg+0x250/0x250 [ 158.773735][ T4878] ? __fdget+0x1a1/0x230 [ 158.778218][ T4878] __x64_sys_sendmsg+0x1e2/0x2a0 [ 158.783279][ T4878] ? ___sys_sendmsg+0x260/0x260 [ 158.788215][ T4878] ? ksys_write+0x1eb/0x240 [ 158.792804][ T4878] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 158.798881][ T4878] x64_sys_call+0x4b/0x9a0 [ 158.803383][ T4878] do_syscall_64+0x4c/0xa0 [ 158.807800][ T4878] ? clear_bhb_loop+0x50/0xa0 [ 158.812487][ T4878] ? clear_bhb_loop+0x50/0xa0 [ 158.817163][ T4878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.823147][ T4878] RIP: 0033:0x7f85d967abe9 [ 158.827663][ T4878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.847527][ T4878] RSP: 002b:00007f85d80e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.856380][ T4878] RAX: ffffffffffffffda RBX: 00007f85d98a1fa0 RCX: 00007f85d967abe9 [ 158.864351][ T4878] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 158.872580][ T4878] RBP: 00007f85d80e3090 R08: 0000000000000000 R09: 0000000000000000 [ 158.880573][ T4878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.888651][ T4878] R13: 00007f85d98a2038 R14: 00007f85d98a1fa0 R15: 00007ffc83bd3d38 [ 158.896637][ T4878] [ 158.909827][ T401] ------------[ cut here ]------------ [ 158.927530][ T401] kernel BUG at net/core/skbuff.c:1727! [ 158.955612][ T401] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 158.961829][ T401] CPU: 1 PID: 401 Comm: kworker/1:3 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 158.972005][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.982190][ T401] Workqueue: events sk_psock_backlog [ 158.987515][ T401] RIP: 0010:pskb_expand_head+0x11a5/0x11d0 [ 158.993354][ T401] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c de f3 ff ff 4c 89 e7 e8 4c 06 f4 fd e9 d1 f3 ff ff e8 82 8b b5 fd 0f 0b e8 7b 8b b5 fd <0f> 0b 48 8b 4d d0 80 e1 07 80 c1 03 38 c1 0f 8c b2 fa ff ff 48 8b [ 159.013691][ T401] RSP: 0018:ffffc90007a17a08 EFLAGS: 00010293 [ 159.019791][ T401] RAX: ffffffff83b32455 RBX: dffffc0000000000 RCX: ffff8881101fbb40 [ 159.028045][ T401] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 159.036139][ T401] RBP: ffffc90007a17aa8 R08: dffffc0000000000 R09: ffffed10220df7d6 [ 159.044140][ T401] R10: ffffed10220df7d6 R11: 1ffff110220df7d5 R12: 0000000000000e80 [ 159.052227][ T401] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000008080 [ 159.060219][ T401] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 159.069170][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.075786][ T401] CR2: 00000000508f0000 CR3: 00000001401d0000 CR4: 00000000003506a0 [ 159.083971][ T401] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.092058][ T401] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 159.100133][ T401] Call Trace: [ 159.103427][ T401] [ 159.106510][ T401] __pskb_pull_tail+0xb1/0x1480 [ 159.111381][ T401] sk_psock_skb_ingress_enqueue+0x67/0x410 [ 159.117366][ T401] ? kmem_cache_alloc_trace+0x119/0x270 [ 159.122947][ T401] ? sk_psock_backlog+0x876/0x1230 [ 159.128082][ T401] sk_psock_backlog+0xa72/0x1230 [ 159.133246][ T401] ? sk_psock_init+0x6f0/0x6f0 [ 159.138108][ T401] ? __schedule+0xb76/0x14c0 [ 159.142719][ T401] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 159.148702][ T401] process_one_work+0x6be/0xba0 [ 159.153607][ T401] worker_thread+0xa59/0x1200 [ 159.158303][ T401] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 159.164009][ T401] ? __kthread_parkme+0xac/0x200 [ 159.169272][ T401] kthread+0x411/0x500 [ 159.173799][ T401] ? worker_clr_flags+0x190/0x190 [ 159.179113][ T401] ? kthread_blkcg+0xd0/0xd0 [ 159.183891][ T401] ret_from_fork+0x1f/0x30 [ 159.188318][ T401] [ 159.191330][ T401] Modules linked in: [ 159.242261][ T401] ---[ end trace e14ff8168494d685 ]--- [ 159.248173][ T401] RIP: 0010:pskb_expand_head+0x11a5/0x11d0 [ 159.254011][ T401] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c de f3 ff ff 4c 89 e7 e8 4c 06 f4 fd e9 d1 f3 ff ff e8 82 8b b5 fd 0f 0b e8 7b 8b b5 fd <0f> 0b 48 8b 4d d0 80 e1 07 80 c1 03 38 c1 0f 8c b2 fa ff ff 48 8b [ 159.300826][ T401] RSP: 0018:ffffc90007a17a08 EFLAGS: 00010293 [ 159.332439][ T401] RAX: ffffffff83b32455 RBX: dffffc0000000000 RCX: ffff8881101fbb40 [ 159.370076][ T401] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 159.409718][ T401] RBP: ffffc90007a17aa8 R08: dffffc0000000000 R09: ffffed10220df7d6 [ 159.434846][ T401] R10: ffffed10220df7d6 R11: 1ffff110220df7d5 R12: 0000000000000e80 [ 159.443045][ T401] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000008080 [ 159.484870][ T401] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 159.493956][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.543790][ T401] CR2: 0000200000212000 CR3: 00000001401d0000 CR4: 00000000003506a0 [ 159.556137][ T401] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.564247][ T401] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 159.572605][ T401] Kernel panic - not syncing: Fatal exception [ 159.578980][ T401] Kernel Offset: disabled [ 159.583572][ T401] Rebooting in 86400 seconds..