last executing test programs: 1.790832426s ago: executing program 3 (id=10116): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2108, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001f80)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001fc0)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002080)={{r1, 0xffffffffffffffff}, &(0x7f0000002000), &(0x7f0000002040)='%pK \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0x9, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=@base={0x5, 0x6a, 0x5, 0xfff, 0x1, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0x11, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf8a, 0x0, 0x0, 0x0, 0xe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query]}, &(0x7f0000000840)='syzkaller\x00', 0x10, 0x1, &(0x7f0000000880)=""/1, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0x8, 0xd, 0x200}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000022c0)=[0xffffffffffffffff, r2, r3, r4, r5], &(0x7f0000002300)=[{0x3, 0x3, 0x7, 0xc}], 0x10, 0x1}, 0x94) r6 = perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0xf6, 0x2, 0x8, 0x1, 0x0, 0xe, 0x1040, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3660e6ec, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x8200, 0x5, 0x2, 0x8, 0x2, 0x101, 0x6, 0x0, 0x7ff, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2103, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x7}, 0x6400, 0x0, 0x0, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80043}, 0x0, 0xffffffffffffffff, r6, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r7, &(0x7f0000000640), &(0x7f0000000680)=""/8, 0x2}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="2d736574202b667265657a657216d86d656d6f7279202d657669636573202d63707561636374202d72646d612000000000000000000000000000000000000000000000742dbd5e46e18eb8a12e71f53a7a8b17f3b7089284e52d7bd9a9149c4a347bfae97df16d17"], 0x43) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000029c0)='cpu>00&|!') sendmsg$unix(0xffffffffffffffff, 0x0, 0x8841) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, &(0x7f0000000200)=""/103, &(0x7f0000000280), &(0x7f0000000300), 0x80, r10, 0x0, 0x7}, 0x38) 1.740020801s ago: executing program 4 (id=10117): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540), 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000009000000400000004000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f00000006c0), &(0x7f0000000700)=""/208}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000009e000000620a00ff000000006100081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000140)=""/149, 0x0, 0x9301, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x457, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000008c0)='GPL\x00', 0x8, 0x90, &(0x7f0000000900)=""/144, 0x41100, 0x5, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x4, 0x8, 0xfffeffff, 0xe1}, 0x10, r2, r1, 0x8, &(0x7f0000000a40)=[r0, r0, r0], &(0x7f0000000a80)=[{0x5, 0x3, 0x10, 0xa}, {0x3, 0x5, 0x2}, {0x5, 0x5, 0x3, 0x3}, {0x3, 0x2, 0x10, 0x2}, {0x1, 0x2, 0xd, 0xc}, {0x1, 0x1, 0x5, 0x9}, {0x1, 0x5, 0xd, 0x8}, {0x1, 0x5, 0x5, 0x9}], 0x10, 0x2}, 0x94) 1.739680751s ago: executing program 0 (id=10118): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000240)=r2, 0x4) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000062) socketpair(0x28, 0x4, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x12, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000020b7040000000000008500000033000000850000009e00000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000180)) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f00000001c0)=r5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000040)=r5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000580)='syzkaller\x00', 0xfffffffd, 0x43, &(0x7f00000005c0)=""/67, 0x41000, 0x70, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xf, 0x6, 0xad}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r2, r2, r8, r6, r6, r8], &(0x7f0000000780)=[{0x1, 0x5, 0x5, 0x6}, {0x3, 0x5, 0x10, 0x2}, {0x5, 0x5, 0xa}, {0x5, 0x1000, 0x8, 0xc}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x4, 0x6, 0xc}], 0x10, 0x3bd}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x448000, '\x00', 0x0, r7, 0x3, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000940)={r9, r10}, 0xc) 1.734254722s ago: executing program 1 (id=10119): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x3, 0x4, 0x3, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200042f"], 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', @random="0c0000000988"}) 1.674130718s ago: executing program 1 (id=10120): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x3, 0x4, 0x3, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200042f"], 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', @random="0c0000000988"}) 1.517747314s ago: executing program 4 (id=10122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r2}, &(0x7f0000000e00)=0x20000, &(0x7f0000000e40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r2, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r3}, &(0x7f0000000f80)=0x2000000, &(0x7f0000000fc0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001000)={r0, &(0x7f0000001040), 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x21, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="ff0100000d00000000000000020000000000f9eacd3368414f292bdfbb8d466add358e23c65b76a369cadbe123438b4d6c06f9e03f229a08942df134601cb231f08e9502250871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x3d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="210000ffffff7f002d0000000004000010000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0xf, 0x6, 0x7, 0x3, 0x80}, @call={0x85, 0x0, 0x0, 0x4f}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x46, 0xdd, &(0x7f0000000440)=""/221, 0x40e00, 0x1a, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000880)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x1, 0x1, 0x81}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r8], &(0x7f00000009c0)=[{0x4, 0x3, 0x9, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 1.517425404s ago: executing program 4 (id=10123): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xaa7d5eca8cbb40f5, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x8, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x4801}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @link_local}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0xfff, r3, 0x0, 0xa0028000}, 0x38) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xca, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000380)='!}^${.(\x00') 1.513212075s ago: executing program 1 (id=10124): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0xff8d, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.250828282s ago: executing program 1 (id=10125): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0xcf13f846fd42714) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, 0x0, &(0x7f0000000340)=""/204}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000480)='syz1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000007000000560000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f7ffffff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=r4, 0x4) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffeffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r5, 0x20, &(0x7f0000000cc0)={0x0, 0x0, 0x0, &(0x7f0000000d00)=""/4096, 0x1000}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000a40)="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", 0x1003, r1}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000007c0)='cpu&\t0\x06\t\t') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r3, &(0x7f0000000840), &(0x7f0000000880)=""/210}, 0x20) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) close(r6) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000005c0)=[{0x0, 0xb}], 0x1}, 0x10100) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079121c0000000000950000000000f800c6edec3cfc663ea8c275296858747148ee3efe7061a5cabbb4b1a0999037721b43bc65e3c77c1fcde0bfd1fc6e88c63d0bbfbe1a70d9a910df4b9a9bbdc2c0bc3b"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x24}, 0x94) 1.16621644s ago: executing program 3 (id=10126): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000840)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x87}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@float={0xc, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x5f, 0x30, 0xe, 0x61, 0x61, 0x61, 0x30, 0x30]}}, &(0x7f0000000100)=""/123, 0x2f, 0x7b, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x10001, 0x100, 0x1, 0x40, 0x1, 0x4000, '\x00', r0, r1, 0x1, 0x3, 0x4, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000240)="fa577ea1cb008769acbb44e961f22e603ee826b864159ed982b06b9c17abf8a3d1f0a128fb91a12d162192ad42db84a45bc8e6dc1497a3f413865a26c927ad6caa2551083ef4c6c1b6a1154ed3544031b5e8035748bb0fdbe567e610f86e3ec6f735b9bea7d2dd12975ec18a470b418d949041fa504708001438a18412e2148f2d9ea3347ed51fbcec218779458e20307bf3a93fc108408c07f05e1a1fa31f345fcc149936dcdec19f7f42a34290c907163c3b382056b8dc466e11f1f0e0936a533e8270981a831b8fab", &(0x7f0000000340)=""/122, 0x4}, 0x20) 1.029717985s ago: executing program 2 (id=10127): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.029060034s ago: executing program 3 (id=10128): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) socketpair(0x28, 0x1, 0x28, &(0x7f0000001400)) 1.011479176s ago: executing program 4 (id=10129): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x40042711, 0x0, 0x0, 0x0, 0x0, 0x0) 977.02539ms ago: executing program 3 (id=10130): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x3, 0x4, 0x3, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200042f"], 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', @random="0c0000000988"}) 976.59354ms ago: executing program 2 (id=10131): perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x7f, 0x40, 0x1, 0x0, 0x7, 0x1051a, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x821f, 0x1, 0x3b59, 0x8, 0x401, 0x90d3, 0x1, 0x0, 0x3, 0x0, 0x20000000c}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000007110000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4c"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00), 0x10}, 0x94) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000ac0)={0x0, 0x0}) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="12000000990000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000b80), 0x0}, 0x20) recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000cc0)={'bridge_slave_0\x00', @random="d22d8f281735"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000d40)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x40000000, 0x0, 0xf, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000e80)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000ec0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000f40)={'sit0\x00', @random="4f33e363a4b1"}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000000000000711806000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=r7, 0x13) 881.2206ms ago: executing program 3 (id=10132): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r1 = getpid() r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000002, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='GPL\x00', 0x5, 0x252, &(0x7f0000001180)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r1, r2, 0x0, 0xfffffffffffffdee, &(0x7f00000012c0)='\\{\x00'}, 0x12) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 860.586382ms ago: executing program 0 (id=10133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4da1a}, [@generic={0x6b, 0x1, 0x1, 0x69}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000070000000000000009000000731106000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88541, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x40) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x1000, '\x00', r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16=r5, @ANYRES32=r5, @ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) 520.862407ms ago: executing program 0 (id=10134): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xaf0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='N-'], 0x31) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) ioctl$TUNSETTXFILTER(r4, 0x40086602, &(0x7f00000000c0)={0x1, 0x6, [@broadcast, @multicast, @broadcast, @broadcast, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}]}) 519.950417ms ago: executing program 2 (id=10135): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x3, 0x4, 0x3, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200042f"], 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', @random="0c0000000988"}) 519.774827ms ago: executing program 0 (id=10136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x10, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063019e00000000009500090000000000"], &(0x7f0000000600)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x0, 0x10, &(0x7f0000000780), 0x85}, 0x52) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x7}, 0x10) 469.721692ms ago: executing program 4 (id=10137): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2108, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001f80)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001fc0)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002080)={{r1, 0xffffffffffffffff}, &(0x7f0000002000), &(0x7f0000002040)='%pK \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0x9, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=@base={0x5, 0x6a, 0x5, 0xfff, 0x1, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0x11, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf8a, 0x0, 0x0, 0x0, 0xe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query]}, &(0x7f0000000840)='syzkaller\x00', 0x10, 0x1, &(0x7f0000000880)=""/1, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0x8, 0xd, 0x200}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000022c0)=[0xffffffffffffffff, r2, r3, r4, r5], &(0x7f0000002300)=[{0x3, 0x3, 0x7, 0xc}], 0x10, 0x1}, 0x94) r6 = perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0xf6, 0x2, 0x8, 0x1, 0x0, 0xe, 0x1040, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3660e6ec, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x8200, 0x5, 0x2, 0x8, 0x2, 0x101, 0x6, 0x0, 0x7ff, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2103, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x7}, 0x6400, 0x0, 0x0, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80043}, 0x0, 0xffffffffffffffff, r6, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r7, &(0x7f0000000640), &(0x7f0000000680)=""/8, 0x2}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="2d736574202b667265657a657216d86d656d6f7279202d657669636573202d63707561636374202d72646d612000000000000000000000000000000000000000000000742dbd5e46e18eb8a12e71f53a7a8b17f3b7089284e52d7bd9a9149c4a347bfae97df16d17"], 0x43) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000029c0)='cpu>00&|!') sendmsg$unix(0xffffffffffffffff, 0x0, 0x8841) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, &(0x7f0000000200)=""/103, &(0x7f0000000280), &(0x7f0000000300), 0x80, r10, 0x0, 0x7}, 0x38) 469.409132ms ago: executing program 0 (id=10138): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) 469.074462ms ago: executing program 0 (id=10139): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 435.139135ms ago: executing program 3 (id=10140): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xaa7d5eca8cbb40f5, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x8, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x4801}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @link_local}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0xfff, r3, 0x0, 0xa0028000}, 0x38) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xca, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000380)='!}^${.(\x00') 382.893401ms ago: executing program 1 (id=10141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001380)=[{0x3, 0x5, 0x2, 0x3}], 0x10, 0x4273}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1341, 0x0) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000002c0), 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair(0x5, 0x80000, 0x8, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x808200, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000000)={'batadv_slave_0\x00', 0x10}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) close(0x4) 337.827066ms ago: executing program 2 (id=10142): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x3, 0x4, 0x3, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, 0x0, 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', @random="0c0000000988"}) 252.426374ms ago: executing program 4 (id=10143): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3500, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x6, 0x0, &(0x7f0000000380)="b10100000035", 0x0, 0x0, 0x700}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000110400000002"], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 152.608124ms ago: executing program 2 (id=10144): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="18083f00000000b0000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000fc9400000006000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 144.397195ms ago: executing program 1 (id=10145): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESDEC=r1], 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000540000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) close(r2) 0s ago: executing program 2 (id=10146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071122200000000009500000700000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socketpair(0x9, 0x800, 0x5c, &(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x1ea, 0x2, 0x6, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @generic={0x4, 0x4, 0x3, 0x8000, 0x8}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x3c, &(0x7f0000000400)=""/60, 0x41000, 0x62, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xa, 0xaf0f1130, 0x5}, 0x10, 0x21b8c, r0, 0x0, &(0x7f0000000640)=[r4], &(0x7f0000000680), 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): 6] ? __alloc_skb+0x459/0x730 [ 1088.571418][T25476] alloc_skb_with_frags+0x20c/0x620 [ 1088.576650][T25476] sock_alloc_send_pskb+0x87f/0x9a0 [ 1088.581885][T25476] ? sock_kzfree_s+0x60/0x60 [ 1088.586506][T25476] ? iov_iter_advance+0x1f9/0x360 [ 1088.591565][T25476] tun_get_user+0xaab/0x33e0 [ 1088.596187][T25476] ? do_sys_openat2+0x6df/0x7f0 [ 1088.601067][T25476] ? __x64_sys_openat+0x136/0x160 [ 1088.606141][T25476] ? x64_sys_call+0x219/0x9a0 [ 1088.610871][T25476] ? msr_save_cpuid_features+0xb0/0xd0 [ 1088.616391][T25476] ? tun_do_read+0x1d70/0x1d70 [ 1088.621189][T25476] ? kstrtouint_from_user+0x1c4/0x220 [ 1088.626591][T25476] ? kstrtol_from_user+0x2a0/0x2a0 [ 1088.631732][T25476] ? avc_policy_seqno+0x1b/0x70 [ 1088.636622][T25476] ? selinux_file_permission+0x2aa/0x510 [ 1088.642292][T25476] tun_chr_write_iter+0x1ed/0x2f0 [ 1088.647353][T25476] vfs_write+0x831/0xfd0 [ 1088.651626][T25476] ? file_end_write+0x1b0/0x1b0 [ 1088.656510][T25476] ? __fget_files+0x2e1/0x340 [ 1088.661217][T25476] ? __fdget_pos+0x1f7/0x380 [ 1088.665834][T25476] ? ksys_write+0x70/0x260 [ 1088.670279][T25476] ksys_write+0x14a/0x260 [ 1088.674635][T25476] ? __ia32_sys_read+0x90/0x90 [ 1088.679429][T25476] ? debug_smp_processor_id+0x17/0x20 [ 1088.684837][T25476] __x64_sys_write+0x7b/0x90 [ 1088.689460][T25476] x64_sys_call+0x8ef/0x9a0 [ 1088.694007][T25476] do_syscall_64+0x4c/0xa0 [ 1088.698455][T25476] ? clear_bhb_loop+0x50/0xa0 [ 1088.703161][T25476] ? clear_bhb_loop+0x50/0xa0 [ 1088.707867][T25476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1088.713813][T25476] RIP: 0033:0x7f6c93acdb19 [ 1088.718268][T25476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.737902][T25476] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1088.746428][T25476] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1088.754463][T25476] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1088.762460][T25476] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.770454][T25476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.778457][T25476] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1088.786468][T25476] [ 1089.482038][T25504] device syzkaller0 entered promiscuous mode [ 1090.793706][T25559] device sit0 entered promiscuous mode [ 1092.167546][T25573] tap0: tun_chr_ioctl cmd 1074812118 [ 1092.205596][T25573] tap0: tun_chr_ioctl cmd 2147767517 [ 1092.485619][T25577] device sit0 entered promiscuous mode [ 1092.943467][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1092.965132][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1093.023516][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1093.074252][ T564] bridge0: port 3(vlan1) entered blocking state [ 1093.080706][ T564] bridge0: port 3(vlan1) entered forwarding state [ 1093.202134][T25602] device syzkaller0 entered promiscuous mode [ 1093.549831][T25612] device syzkaller0 entered promiscuous mode [ 1093.955502][T25614] device sit0 entered promiscuous mode [ 1094.423880][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1094.437015][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1094.457862][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1094.478423][ T45] bridge0: port 4(vlan1) entered blocking state [ 1094.484751][ T45] bridge0: port 4(vlan1) entered forwarding state [ 1094.552147][T25640] device syzkaller0 entered promiscuous mode [ 1095.971063][T25671] device syzkaller0 entered promiscuous mode [ 1096.059232][T25679] device sit0 left promiscuous mode [ 1096.279205][T25686] device sit0 entered promiscuous mode [ 1098.484221][T25747] device sit0 left promiscuous mode [ 1098.996613][T25747] device sit0 entered promiscuous mode [ 1099.136326][T25768] bridge0: port 4(ip6gretap0) entered blocking state [ 1099.160779][T25768] bridge0: port 4(ip6gretap0) entered disabled state [ 1099.172808][T25768] device ip6gretap0 entered promiscuous mode [ 1099.202247][T25768] bridge0: port 4(ip6gretap0) entered blocking state [ 1099.209280][T25768] bridge0: port 4(ip6gretap0) entered forwarding state [ 1099.432803][T25778] device syzkaller0 entered promiscuous mode [ 1100.035231][T25798] device syzkaller0 entered promiscuous mode [ 1100.591249][T25812] bridge0: port 3(vlan1) entered disabled state [ 1100.773561][T25817] device syzkaller0 entered promiscuous mode [ 1100.879475][T25823] device syzkaller0 entered promiscuous mode [ 1100.886293][ T30] audit: type=1400 audit(1793807937.560:152): avc: denied { setattr } for pid=25826 comm="syz.3.8853" path="/net/tun" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1101.050103][T25834] 81: renamed from syzkaller0 [ 1101.214741][T25842] FAULT_INJECTION: forcing a failure. [ 1101.214741][T25842] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.227665][T25842] CPU: 1 PID: 25842 Comm: syz.2.8860 Tainted: G W syzkaller #0 [ 1101.236547][T25842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1101.246619][T25842] Call Trace: [ 1101.249915][T25842] [ 1101.252865][T25842] __dump_stack+0x21/0x30 [ 1101.257227][T25842] dump_stack_lvl+0x110/0x170 [ 1101.261944][T25842] ? show_regs_print_info+0x20/0x20 [ 1101.267178][T25842] ? dump_stack+0x9/0x20 [ 1101.271461][T25842] dump_stack+0x15/0x20 [ 1101.275643][T25842] should_fail+0x3ab/0x500 [ 1101.280083][T25842] __should_failslab+0xa4/0xe0 [ 1101.284872][T25842] should_failslab+0x9/0x20 [ 1101.289406][T25842] slab_pre_alloc_hook+0x39/0xd0 [ 1101.294370][T25842] kmem_cache_alloc_trace+0x48/0x270 [ 1101.299703][T25842] ? __get_vm_area_node+0x11d/0x350 [ 1101.304927][T25842] __get_vm_area_node+0x11d/0x350 [ 1101.309977][T25842] __vmalloc_node_range+0xe8/0xad0 [ 1101.315113][T25842] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.320680][T25842] ? selinux_capset+0xf0/0xf0 [ 1101.325387][T25842] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.330954][T25842] __vmalloc+0x79/0x90 [ 1101.335041][T25842] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.340607][T25842] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.346009][T25842] ? bpf_prog_alloc+0x15/0x1e0 [ 1101.350794][T25842] bpf_prog_alloc+0x1f/0x1e0 [ 1101.355403][T25842] bpf_prog_load+0x80e/0x1620 [ 1101.360099][T25842] ? map_freeze+0x370/0x370 [ 1101.364628][T25842] ? selinux_bpf+0xc7/0xf0 [ 1101.369069][T25842] ? security_bpf+0x82/0xa0 [ 1101.373592][T25842] __sys_bpf+0x51d/0x7d0 [ 1101.377854][T25842] ? bpf_link_show_fdinfo+0x330/0x330 [ 1101.383282][T25842] ? perf_trace_sys_enter+0x130/0x150 [ 1101.388684][T25842] __x64_sys_bpf+0x7c/0x90 [ 1101.393127][T25842] x64_sys_call+0x4b9/0x9a0 [ 1101.397653][T25842] do_syscall_64+0x4c/0xa0 [ 1101.402092][T25842] ? clear_bhb_loop+0x50/0xa0 [ 1101.406795][T25842] ? clear_bhb_loop+0x50/0xa0 [ 1101.411504][T25842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1101.417419][T25842] RIP: 0033:0x7f3ccc67db19 [ 1101.421856][T25842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.441491][T25842] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1101.449930][T25842] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1101.457947][T25842] RDX: 000000000000003f RSI: 0000200000000480 RDI: 0000000000000005 [ 1101.465938][T25842] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.473926][T25842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.481916][T25842] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1101.489914][T25842] [ 1101.494392][T25842] warn_alloc: 1 callbacks suppressed [ 1101.494421][T25842] syz.2.8860: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 1101.517712][T25842] CPU: 0 PID: 25842 Comm: syz.2.8860 Tainted: G W syzkaller #0 [ 1101.526599][T25842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1101.536675][T25842] Call Trace: [ 1101.539984][T25842] [ 1101.542941][T25842] __dump_stack+0x21/0x30 [ 1101.547297][T25842] dump_stack_lvl+0x110/0x170 [ 1101.551995][T25842] ? show_regs_print_info+0x20/0x20 [ 1101.557208][T25842] ? pr_cont_kernfs_name+0xe3/0xf0 [ 1101.562342][T25842] dump_stack+0x15/0x20 [ 1101.566542][T25842] warn_alloc+0x1dc/0x200 [ 1101.570910][T25842] ? __should_failslab+0xa4/0xe0 [ 1101.575859][T25842] ? zone_watermark_ok_safe+0x270/0x270 [ 1101.581417][T25842] ? kmem_cache_alloc_trace+0x119/0x270 [ 1101.586987][T25842] __vmalloc_node_range+0x15e/0xad0 [ 1101.592199][T25842] ? selinux_capset+0xf0/0xf0 [ 1101.596928][T25842] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.602492][T25842] __vmalloc+0x79/0x90 [ 1101.606659][T25842] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.612220][T25842] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1101.617605][T25842] ? bpf_prog_alloc+0x15/0x1e0 [ 1101.622387][T25842] bpf_prog_alloc+0x1f/0x1e0 [ 1101.627005][T25842] bpf_prog_load+0x80e/0x1620 [ 1101.631699][T25842] ? map_freeze+0x370/0x370 [ 1101.636226][T25842] ? selinux_bpf+0xc7/0xf0 [ 1101.640661][T25842] ? security_bpf+0x82/0xa0 [ 1101.645177][T25842] __sys_bpf+0x51d/0x7d0 [ 1101.649439][T25842] ? bpf_link_show_fdinfo+0x330/0x330 [ 1101.654830][T25842] ? perf_trace_sys_enter+0x130/0x150 [ 1101.660228][T25842] __x64_sys_bpf+0x7c/0x90 [ 1101.664655][T25842] x64_sys_call+0x4b9/0x9a0 [ 1101.669195][T25842] do_syscall_64+0x4c/0xa0 [ 1101.673625][T25842] ? clear_bhb_loop+0x50/0xa0 [ 1101.678343][T25842] ? clear_bhb_loop+0x50/0xa0 [ 1101.683038][T25842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1101.688950][T25842] RIP: 0033:0x7f3ccc67db19 [ 1101.693381][T25842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.713019][T25842] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1101.721451][T25842] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1101.729446][T25842] RDX: 000000000000003f RSI: 0000200000000480 RDI: 0000000000000005 [ 1101.737448][T25842] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.745449][T25842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.753520][T25842] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1101.761515][T25842] [ 1101.777108][T25842] Mem-Info: [ 1101.780388][T25842] active_anon:40 inactive_anon:30376 isolated_anon:0 [ 1101.780388][T25842] active_file:24777 inactive_file:3801 isolated_file:0 [ 1101.780388][T25842] unevictable:0 dirty:198 writeback:0 [ 1101.780388][T25842] slab_reclaimable:8204 slab_unreclaimable:78291 [ 1101.780388][T25842] mapped:35271 shmem:15999 pagetables:585 bounce:0 [ 1101.780388][T25842] kernel_misc_reclaimable:0 [ 1101.780388][T25842] free:1504661 free_pcp:16992 free_cma:0 [ 1101.876317][T25842] Node 0 active_anon:160kB inactive_anon:107404kB active_file:99108kB inactive_file:15204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141084kB dirty:792kB writeback:0kB shmem:49696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:6524kB pagetables:2440kB all_unreclaimable? no [ 1101.909348][T25842] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982728kB mlocked:0kB bounce:0kB free_pcp:3956kB local_pcp:0kB free_cma:0kB [ 1101.977771][T25842] lowmem_reserve[]: 0 3941 3941 [ 1102.000719][T25842] Normal free:3042828kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:160kB inactive_anon:114764kB active_file:99108kB inactive_file:15204kB unevictable:0kB writepending:784kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:69328kB local_pcp:16460kB free_cma:0kB [ 1102.098665][T25863] device syzkaller0 entered promiscuous mode [ 1102.118456][T25842] lowmem_reserve[]: 0 0 0 [ 1102.124869][T25842] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 1102.142582][T25842] Normal: 4048*4kB (UME) 2609*8kB (UME) 1096*16kB (UME) 808*32kB (UME) 207*64kB [ 1102.149147][T25863] FAULT_INJECTION: forcing a failure. [ 1102.149147][T25863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1102.176470][T25842] (UME) 64*128kB (UME) 37*256kB (UME) 22*512kB (UME) 10*1024kB (UM) 5*2048kB (UE) 711*4096kB (UM) = 3055368kB [ 1102.192093][T25863] CPU: 1 PID: 25863 Comm: syz.3.8864 Tainted: G W syzkaller #0 [ 1102.200991][T25863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1102.211073][T25863] Call Trace: [ 1102.214370][T25863] [ 1102.217332][T25863] __dump_stack+0x21/0x30 [ 1102.221696][T25863] dump_stack_lvl+0x110/0x170 [ 1102.226400][T25863] ? show_regs_print_info+0x20/0x20 [ 1102.231621][T25863] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1102.237204][T25863] ? __alloc_skb+0x210/0x730 [ 1102.241829][T25863] dump_stack+0x15/0x20 [ 1102.246010][T25863] should_fail+0x3ab/0x500 [ 1102.250456][T25863] should_fail_alloc_page+0x55/0x80 [ 1102.255697][T25863] prepare_alloc_pages+0x13f/0x590 [ 1102.260847][T25863] ? __alloc_pages_bulk+0xab0/0xab0 [ 1102.266083][T25863] __alloc_pages+0x11d/0x460 [ 1102.270751][T25863] ? zone_watermark_fast+0x250/0x250 [ 1102.276066][T25863] ? __alloc_skb+0x459/0x730 [ 1102.280691][T25863] alloc_skb_with_frags+0x20c/0x620 [ 1102.285922][T25863] sock_alloc_send_pskb+0x87f/0x9a0 [ 1102.291157][T25863] ? sock_kzfree_s+0x60/0x60 [ 1102.295781][T25863] ? iov_iter_advance+0x1f9/0x360 [ 1102.300836][T25863] tun_get_user+0xaab/0x33e0 [ 1102.305486][T25863] ? do_sys_openat2+0x6df/0x7f0 [ 1102.310409][T25863] ? __x64_sys_openat+0x136/0x160 [ 1102.315486][T25863] ? x64_sys_call+0x219/0x9a0 [ 1102.320193][T25863] ? msr_save_cpuid_features+0xb0/0xd0 [ 1102.325691][T25863] ? tun_do_read+0x1d70/0x1d70 [ 1102.330493][T25863] ? kstrtouint_from_user+0x1c4/0x220 [ 1102.335897][T25863] ? kstrtol_from_user+0x2a0/0x2a0 [ 1102.341038][T25863] ? avc_policy_seqno+0x1b/0x70 [ 1102.345919][T25863] ? selinux_file_permission+0x2aa/0x510 [ 1102.351619][T25863] tun_chr_write_iter+0x1ed/0x2f0 [ 1102.356684][T25863] vfs_write+0x831/0xfd0 [ 1102.360977][T25863] ? file_end_write+0x1b0/0x1b0 [ 1102.365852][T25863] ? __fget_files+0x2e1/0x340 [ 1102.370557][T25863] ? __fdget_pos+0x1f7/0x380 [ 1102.375170][T25863] ? ksys_write+0x70/0x260 [ 1102.379617][T25863] ksys_write+0x14a/0x260 [ 1102.383979][T25863] ? __ia32_sys_read+0x90/0x90 [ 1102.388780][T25863] ? debug_smp_processor_id+0x17/0x20 [ 1102.394182][T25863] ? perf_trace_sys_enter+0x30/0x150 [ 1102.399504][T25863] __x64_sys_write+0x7b/0x90 [ 1102.404122][T25863] x64_sys_call+0x8ef/0x9a0 [ 1102.408673][T25863] do_syscall_64+0x4c/0xa0 [ 1102.413124][T25863] ? clear_bhb_loop+0x50/0xa0 [ 1102.417831][T25863] ? clear_bhb_loop+0x50/0xa0 [ 1102.422538][T25863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1102.428464][T25863] RIP: 0033:0x7f3b10b65b19 [ 1102.432909][T25863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.446497][T25842] 36943 total pagecache pages [ 1102.452552][T25863] RSP: 002b:00007f3b0f5bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1102.452579][T25863] RAX: ffffffffffffffda RBX: 00007f3b10debfa0 RCX: 00007f3b10b65b19 [ 1102.452596][T25863] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000009 [ 1102.452610][T25863] RBP: 00007f3b0f5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.452623][T25863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.452642][T25863] R13: 00007f3b10dec038 R14: 00007f3b10debfa0 R15: 00007ffdce00c8f8 [ 1102.466448][T25842] 0 pages in swap cache [ 1102.473724][T25863] [ 1102.556319][T25842] Swap cache stats: add 0, delete 0, find 0/0 [ 1102.565321][T25842] Free swap = 124996kB [ 1102.575390][T25842] Total swap = 124996kB [ 1102.582926][T25842] 2097051 pages RAM [ 1102.613025][T25842] 0 pages HighMem/MovableOnly [ 1102.624695][T25842] 342345 pages reserved [ 1102.637443][T25842] 0 pages cma reserved [ 1102.702032][T25888] device syzkaller0 entered promiscuous mode [ 1103.337769][T25925] device sit0 left promiscuous mode [ 1104.424284][T25948] device syzkaller0 entered promiscuous mode [ 1104.511340][T25958] device syzkaller0 entered promiscuous mode [ 1104.518050][T25960] device sit0 left promiscuous mode [ 1104.528055][T25958] FAULT_INJECTION: forcing a failure. [ 1104.528055][T25958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1104.542503][T25958] CPU: 1 PID: 25958 Comm: syz.1.8899 Tainted: G W syzkaller #0 [ 1104.551509][T25958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1104.561589][T25958] Call Trace: [ 1104.564914][T25958] [ 1104.567905][T25958] __dump_stack+0x21/0x30 [ 1104.572321][T25958] dump_stack_lvl+0x110/0x170 [ 1104.577031][T25958] ? show_regs_print_info+0x20/0x20 [ 1104.582267][T25958] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1104.587847][T25958] ? __alloc_skb+0x210/0x730 [ 1104.592474][T25958] dump_stack+0x15/0x20 [ 1104.596654][T25958] should_fail+0x3ab/0x500 [ 1104.601091][T25958] should_fail_alloc_page+0x55/0x80 [ 1104.606323][T25958] prepare_alloc_pages+0x13f/0x590 [ 1104.611460][T25958] ? __alloc_pages_bulk+0xab0/0xab0 [ 1104.616690][T25958] __alloc_pages+0x11d/0x460 [ 1104.621305][T25958] ? zone_watermark_fast+0x250/0x250 [ 1104.626619][T25958] ? __alloc_skb+0x459/0x730 [ 1104.631237][T25958] alloc_skb_with_frags+0x20c/0x620 [ 1104.636470][T25958] sock_alloc_send_pskb+0x87f/0x9a0 [ 1104.641781][T25958] ? sock_kzfree_s+0x60/0x60 [ 1104.646393][T25958] ? iov_iter_advance+0x1f9/0x360 [ 1104.651445][T25958] tun_get_user+0xaab/0x33e0 [ 1104.656057][T25958] ? do_sys_openat2+0x6df/0x7f0 [ 1104.660939][T25958] ? __x64_sys_openat+0x136/0x160 [ 1104.665990][T25958] ? x64_sys_call+0x219/0x9a0 [ 1104.670692][T25958] ? msr_save_cpuid_features+0xb0/0xd0 [ 1104.676175][T25958] ? tun_do_read+0x1d70/0x1d70 [ 1104.680962][T25958] ? kstrtouint_from_user+0x1c4/0x220 [ 1104.686356][T25958] ? kstrtol_from_user+0x2a0/0x2a0 [ 1104.691614][T25958] ? avc_policy_seqno+0x1b/0x70 [ 1104.696491][T25958] ? selinux_file_permission+0x2aa/0x510 [ 1104.702166][T25958] tun_chr_write_iter+0x1ed/0x2f0 [ 1104.707219][T25958] vfs_write+0x831/0xfd0 [ 1104.711483][T25958] ? file_end_write+0x1b0/0x1b0 [ 1104.716355][T25958] ? __fget_files+0x2e1/0x340 [ 1104.721071][T25958] ? __fdget_pos+0x1f7/0x380 [ 1104.725694][T25958] ? ksys_write+0x70/0x260 [ 1104.730131][T25958] ksys_write+0x14a/0x260 [ 1104.734489][T25958] ? __ia32_sys_read+0x90/0x90 [ 1104.739292][T25958] ? debug_smp_processor_id+0x17/0x20 [ 1104.744725][T25958] __x64_sys_write+0x7b/0x90 [ 1104.749346][T25958] x64_sys_call+0x8ef/0x9a0 [ 1104.753914][T25958] do_syscall_64+0x4c/0xa0 [ 1104.758373][T25958] ? clear_bhb_loop+0x50/0xa0 [ 1104.763081][T25958] ? clear_bhb_loop+0x50/0xa0 [ 1104.767792][T25958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1104.773739][T25958] RIP: 0033:0x7fa9f36b0b19 [ 1104.778178][T25958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.797821][T25958] RSP: 002b:00007fa9f2108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1104.806378][T25958] RAX: ffffffffffffffda RBX: 00007fa9f3936fa0 RCX: 00007fa9f36b0b19 [ 1104.814397][T25958] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1104.822485][T25958] RBP: 00007fa9f2108090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.830490][T25958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.838498][T25958] R13: 00007fa9f3937038 R14: 00007fa9f3936fa0 R15: 00007fffeeb4a638 [ 1104.846501][T25958] [ 1106.225946][T26005] bridge0: port 4(vlan1) entered disabled state [ 1107.215787][T26044] device syzkaller0 entered promiscuous mode [ 1107.664262][T26065] device sit0 left promiscuous mode [ 1109.153937][T26108] device syzkaller0 entered promiscuous mode [ 1109.500275][T26127] FAULT_INJECTION: forcing a failure. [ 1109.500275][T26127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.555641][T26127] CPU: 1 PID: 26127 Comm: syz.2.8956 Tainted: G W syzkaller #0 [ 1109.564555][T26127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1109.574643][T26127] Call Trace: [ 1109.577953][T26127] [ 1109.580906][T26127] __dump_stack+0x21/0x30 [ 1109.585376][T26127] dump_stack_lvl+0x110/0x170 [ 1109.590371][T26127] ? show_regs_print_info+0x20/0x20 [ 1109.595674][T26127] ? vfs_write+0xc72/0xfd0 [ 1109.600135][T26127] dump_stack+0x15/0x20 [ 1109.604345][T26127] should_fail+0x3ab/0x500 [ 1109.608800][T26127] should_fail_usercopy+0x1a/0x20 [ 1109.613849][T26127] _copy_from_user+0x20/0xd0 [ 1109.618776][T26127] __sys_bpf+0x258/0x7d0 [ 1109.623055][T26127] ? bpf_link_show_fdinfo+0x330/0x330 [ 1109.628457][T26127] ? debug_smp_processor_id+0x17/0x20 [ 1109.633861][T26127] __x64_sys_bpf+0x7c/0x90 [ 1109.638437][T26127] x64_sys_call+0x4b9/0x9a0 [ 1109.642975][T26127] do_syscall_64+0x4c/0xa0 [ 1109.647417][T26127] ? clear_bhb_loop+0x50/0xa0 [ 1109.652218][T26127] ? clear_bhb_loop+0x50/0xa0 [ 1109.656926][T26127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1109.662854][T26127] RIP: 0033:0x7f3ccc67db19 [ 1109.667315][T26127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.687127][T26127] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1109.695570][T26127] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1109.703582][T26127] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1109.711582][T26127] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.719605][T26127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.727599][T26127] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1109.735607][T26127] [ 1109.958049][T26144] device syzkaller0 entered promiscuous mode [ 1110.253562][T26152] device syzkaller0 entered promiscuous mode [ 1110.585001][T26177] device syzkaller0 entered promiscuous mode [ 1112.365033][ T30] audit: type=1400 audit(1793807949.040:153): avc: denied { attach_queue } for pid=26240 comm="syz.4.8998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1112.408511][T26248] FAULT_INJECTION: forcing a failure. [ 1112.408511][T26248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.442351][T26248] CPU: 1 PID: 26248 Comm: syz.0.9000 Tainted: G W syzkaller #0 [ 1112.451267][T26248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1112.461349][T26248] Call Trace: [ 1112.464647][T26248] [ 1112.467607][T26248] __dump_stack+0x21/0x30 [ 1112.471967][T26248] dump_stack_lvl+0x110/0x170 [ 1112.476674][T26248] ? show_regs_print_info+0x20/0x20 [ 1112.481895][T26248] ? has_cap_mac_admin+0x370/0x370 [ 1112.487045][T26248] dump_stack+0x15/0x20 [ 1112.491229][T26248] should_fail+0x3ab/0x500 [ 1112.495704][T26248] should_fail_usercopy+0x1a/0x20 [ 1112.500750][T26248] _copy_from_user+0x20/0xd0 [ 1112.505360][T26248] get_user_ifreq+0x6c/0x180 [ 1112.509974][T26248] sock_ioctl+0x5ee/0x6d0 [ 1112.514327][T26248] ? sock_poll+0x3f0/0x3f0 [ 1112.518766][T26248] ? security_file_ioctl+0x84/0xa0 [ 1112.523901][T26248] ? sock_poll+0x3f0/0x3f0 [ 1112.528342][T26248] __se_sys_ioctl+0x121/0x1a0 [ 1112.533043][T26248] __x64_sys_ioctl+0x7b/0x90 [ 1112.537663][T26248] x64_sys_call+0x2f/0x9a0 [ 1112.542105][T26248] do_syscall_64+0x4c/0xa0 [ 1112.546547][T26248] ? clear_bhb_loop+0x50/0xa0 [ 1112.551250][T26248] ? clear_bhb_loop+0x50/0xa0 [ 1112.555968][T26248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1112.561977][T26248] RIP: 0033:0x7f8d46772b19 [ 1112.566418][T26248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.586139][T26248] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.594588][T26248] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1112.602600][T26248] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 1112.610683][T26248] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.618677][T26248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.626665][T26248] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1112.634665][T26248] [ 1112.687996][T26257] device syzkaller0 entered promiscuous mode [ 1113.319058][ T30] audit: type=1400 audit(1793807950.000:154): avc: denied { create } for pid=26278 comm="syz.1.9012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1115.360865][T26360] device syzkaller0 entered promiscuous mode [ 1116.337024][T26421] device syzkaller0 entered promiscuous mode [ 1116.380960][T26421] FAULT_INJECTION: forcing a failure. [ 1116.380960][T26421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1116.507666][T26421] CPU: 0 PID: 26421 Comm: syz.0.9055 Tainted: G W syzkaller #0 [ 1116.516589][T26421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1116.526672][T26421] Call Trace: [ 1116.530000][T26421] [ 1116.533042][T26421] __dump_stack+0x21/0x30 [ 1116.537402][T26421] dump_stack_lvl+0x110/0x170 [ 1116.542127][T26421] ? show_regs_print_info+0x20/0x20 [ 1116.547353][T26421] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1116.552942][T26421] ? __alloc_skb+0x210/0x730 [ 1116.557556][T26421] dump_stack+0x15/0x20 [ 1116.561737][T26421] should_fail+0x3ab/0x500 [ 1116.566178][T26421] should_fail_alloc_page+0x55/0x80 [ 1116.571403][T26421] prepare_alloc_pages+0x13f/0x590 [ 1116.576545][T26421] ? __alloc_pages_bulk+0xab0/0xab0 [ 1116.581769][T26421] __alloc_pages+0x11d/0x460 [ 1116.586401][T26421] ? zone_watermark_fast+0x250/0x250 [ 1116.591716][T26421] ? __alloc_skb+0x459/0x730 [ 1116.596327][T26421] alloc_skb_with_frags+0x20c/0x620 [ 1116.601814][T26421] sock_alloc_send_pskb+0x87f/0x9a0 [ 1116.607042][T26421] ? sock_kzfree_s+0x60/0x60 [ 1116.611748][T26421] ? iov_iter_advance+0x1f9/0x360 [ 1116.616806][T26421] tun_get_user+0xaab/0x33e0 [ 1116.621427][T26421] ? do_sys_openat2+0x6df/0x7f0 [ 1116.626294][T26421] ? __x64_sys_openat+0x136/0x160 [ 1116.631344][T26421] ? x64_sys_call+0x219/0x9a0 [ 1116.636049][T26421] ? msr_save_cpuid_features+0xb0/0xd0 [ 1116.641533][T26421] ? tun_do_read+0x1d70/0x1d70 [ 1116.646339][T26421] ? kstrtouint_from_user+0x1c4/0x220 [ 1116.651737][T26421] ? kstrtol_from_user+0x2a0/0x2a0 [ 1116.656874][T26421] ? avc_policy_seqno+0x1b/0x70 [ 1116.661745][T26421] ? selinux_file_permission+0x2aa/0x510 [ 1116.667409][T26421] tun_chr_write_iter+0x1ed/0x2f0 [ 1116.672476][T26421] vfs_write+0x831/0xfd0 [ 1116.676750][T26421] ? file_end_write+0x1b0/0x1b0 [ 1116.681623][T26421] ? __fget_files+0x2e1/0x340 [ 1116.686428][T26421] ? __fdget_pos+0x1f7/0x380 [ 1116.691065][T26421] ? ksys_write+0x70/0x260 [ 1116.695529][T26421] ksys_write+0x14a/0x260 [ 1116.699888][T26421] ? __ia32_sys_read+0x90/0x90 [ 1116.704673][T26421] ? debug_smp_processor_id+0x17/0x20 [ 1116.710070][T26421] __x64_sys_write+0x7b/0x90 [ 1116.714679][T26421] x64_sys_call+0x8ef/0x9a0 [ 1116.719227][T26421] do_syscall_64+0x4c/0xa0 [ 1116.723665][T26421] ? clear_bhb_loop+0x50/0xa0 [ 1116.728394][T26421] ? clear_bhb_loop+0x50/0xa0 [ 1116.733097][T26421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1116.739009][T26421] RIP: 0033:0x7f8d46772b19 [ 1116.743482][T26421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.763128][T26421] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1116.771572][T26421] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1116.779562][T26421] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000009 [ 1116.787544][T26421] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.795532][T26421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.803603][T26421] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1116.811632][T26421] [ 1117.193718][T26444] device syzkaller0 entered promiscuous mode [ 1119.267882][ T30] audit: type=1400 audit(1793807955.950:155): avc: denied { create } for pid=26486 comm="syz.1.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 1120.701775][T26530] device syzkaller0 entered promiscuous mode [ 1120.723421][T26530] FAULT_INJECTION: forcing a failure. [ 1120.723421][T26530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1120.765201][T26530] CPU: 0 PID: 26530 Comm: syz.2.9091 Tainted: G W syzkaller #0 [ 1120.774387][T26530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1120.784481][T26530] Call Trace: [ 1120.787776][T26530] [ 1120.790723][T26530] __dump_stack+0x21/0x30 [ 1120.795072][T26530] dump_stack_lvl+0x110/0x170 [ 1120.799785][T26530] ? show_regs_print_info+0x20/0x20 [ 1120.805016][T26530] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1120.810623][T26530] ? __alloc_skb+0x210/0x730 [ 1120.815273][T26530] dump_stack+0x15/0x20 [ 1120.819470][T26530] should_fail+0x3ab/0x500 [ 1120.824017][T26530] should_fail_alloc_page+0x55/0x80 [ 1120.829243][T26530] prepare_alloc_pages+0x13f/0x590 [ 1120.834378][T26530] ? __alloc_pages_bulk+0xab0/0xab0 [ 1120.839595][T26530] __alloc_pages+0x11d/0x460 [ 1120.844224][T26530] ? zone_watermark_fast+0x250/0x250 [ 1120.849537][T26530] ? __alloc_skb+0x459/0x730 [ 1120.854146][T26530] alloc_skb_with_frags+0x20c/0x620 [ 1120.859379][T26530] sock_alloc_send_pskb+0x87f/0x9a0 [ 1120.864695][T26530] ? sock_kzfree_s+0x60/0x60 [ 1120.869306][T26530] ? iov_iter_advance+0x1f9/0x360 [ 1120.874352][T26530] tun_get_user+0xaab/0x33e0 [ 1120.878964][T26530] ? do_sys_openat2+0x6df/0x7f0 [ 1120.883827][T26530] ? __x64_sys_openat+0x136/0x160 [ 1120.888867][T26530] ? x64_sys_call+0x219/0x9a0 [ 1120.893563][T26530] ? msr_save_cpuid_features+0xb0/0xd0 [ 1120.899042][T26530] ? tun_do_read+0x1d70/0x1d70 [ 1120.903827][T26530] ? kstrtouint_from_user+0x1c4/0x220 [ 1120.909213][T26530] ? kstrtol_from_user+0x2a0/0x2a0 [ 1120.914346][T26530] ? avc_policy_seqno+0x1b/0x70 [ 1120.919217][T26530] ? selinux_file_permission+0x2aa/0x510 [ 1120.924867][T26530] tun_chr_write_iter+0x1ed/0x2f0 [ 1120.930019][T26530] vfs_write+0x831/0xfd0 [ 1120.934291][T26530] ? file_end_write+0x1b0/0x1b0 [ 1120.939169][T26530] ? __fget_files+0x2e1/0x340 [ 1120.943872][T26530] ? __fdget_pos+0x1f7/0x380 [ 1120.948484][T26530] ? ksys_write+0x70/0x260 [ 1120.952916][T26530] ksys_write+0x14a/0x260 [ 1120.957267][T26530] ? __ia32_sys_read+0x90/0x90 [ 1120.962048][T26530] ? debug_smp_processor_id+0x17/0x20 [ 1120.967449][T26530] __x64_sys_write+0x7b/0x90 [ 1120.972059][T26530] x64_sys_call+0x8ef/0x9a0 [ 1120.976584][T26530] do_syscall_64+0x4c/0xa0 [ 1120.981026][T26530] ? clear_bhb_loop+0x50/0xa0 [ 1120.985725][T26530] ? clear_bhb_loop+0x50/0xa0 [ 1120.990416][T26530] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1120.996345][T26530] RIP: 0033:0x7f3ccc67db19 [ 1121.000776][T26530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.020484][T26530] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1121.028914][T26530] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1121.036900][T26530] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1121.044894][T26530] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.052883][T26530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.060867][T26530] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1121.068862][T26530] [ 1121.852431][T26574] device syzkaller0 entered promiscuous mode [ 1122.060319][T26583] FAULT_INJECTION: forcing a failure. [ 1122.060319][T26583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.168950][T26583] CPU: 1 PID: 26583 Comm: syz.4.9109 Tainted: G W syzkaller #0 [ 1122.177865][T26583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1122.187959][T26583] Call Trace: [ 1122.191266][T26583] [ 1122.194230][T26583] __dump_stack+0x21/0x30 [ 1122.198597][T26583] dump_stack_lvl+0x110/0x170 [ 1122.203304][T26583] ? show_regs_print_info+0x20/0x20 [ 1122.208534][T26583] ? vfs_write+0xc72/0xfd0 [ 1122.212981][T26583] dump_stack+0x15/0x20 [ 1122.217171][T26583] should_fail+0x3ab/0x500 [ 1122.221616][T26583] should_fail_usercopy+0x1a/0x20 [ 1122.226665][T26583] _copy_from_user+0x20/0xd0 [ 1122.231278][T26583] __sys_bpf+0x258/0x7d0 [ 1122.235546][T26583] ? bpf_link_show_fdinfo+0x330/0x330 [ 1122.240943][T26583] ? debug_smp_processor_id+0x17/0x20 [ 1122.246347][T26583] ? perf_trace_sys_enter+0x30/0x150 [ 1122.251663][T26583] __x64_sys_bpf+0x7c/0x90 [ 1122.256121][T26583] x64_sys_call+0x4b9/0x9a0 [ 1122.260649][T26583] do_syscall_64+0x4c/0xa0 [ 1122.265091][T26583] ? clear_bhb_loop+0x50/0xa0 [ 1122.269791][T26583] ? clear_bhb_loop+0x50/0xa0 [ 1122.274494][T26583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1122.280437][T26583] RIP: 0033:0x7f6c93acdb19 [ 1122.284879][T26583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.304530][T26583] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1122.312979][T26583] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1122.321003][T26583] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 1800000000000000 [ 1122.329003][T26583] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.336993][T26583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.344986][T26583] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1122.353019][T26583] [ 1122.534273][T26595] device syzkaller0 entered promiscuous mode [ 1122.551449][T26595] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1123.503250][T26641] FAULT_INJECTION: forcing a failure. [ 1123.503250][T26641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.545750][T26641] CPU: 0 PID: 26641 Comm: syz.2.9130 Tainted: G W syzkaller #0 [ 1123.554665][T26641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1123.564894][T26641] Call Trace: [ 1123.568202][T26641] [ 1123.571145][T26641] __dump_stack+0x21/0x30 [ 1123.575510][T26641] dump_stack_lvl+0x110/0x170 [ 1123.580217][T26641] ? show_regs_print_info+0x20/0x20 [ 1123.585439][T26641] dump_stack+0x15/0x20 [ 1123.589625][T26641] should_fail+0x3ab/0x500 [ 1123.594060][T26641] should_fail_usercopy+0x1a/0x20 [ 1123.599106][T26641] strncpy_from_user+0x24/0x2d0 [ 1123.603998][T26641] bpf_prog_load+0x1ee/0x1620 [ 1123.608791][T26641] ? map_freeze+0x370/0x370 [ 1123.613402][T26641] ? selinux_bpf+0xc7/0xf0 [ 1123.617832][T26641] ? security_bpf+0x82/0xa0 [ 1123.622351][T26641] __sys_bpf+0x51d/0x7d0 [ 1123.626608][T26641] ? bpf_link_show_fdinfo+0x330/0x330 [ 1123.632016][T26641] ? debug_smp_processor_id+0x17/0x20 [ 1123.637405][T26641] __x64_sys_bpf+0x7c/0x90 [ 1123.641847][T26641] x64_sys_call+0x4b9/0x9a0 [ 1123.646362][T26641] do_syscall_64+0x4c/0xa0 [ 1123.650791][T26641] ? clear_bhb_loop+0x50/0xa0 [ 1123.655484][T26641] ? clear_bhb_loop+0x50/0xa0 [ 1123.660183][T26641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1123.666109][T26641] RIP: 0033:0x7f3ccc67db19 [ 1123.670551][T26641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.690259][T26641] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1123.698698][T26641] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1123.706694][T26641] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1123.714766][T26641] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.722753][T26641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.730732][T26641] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1123.738725][T26641] [ 1124.065615][T26660] device syzkaller0 entered promiscuous mode [ 1125.122390][T26692] device syzkaller0 entered promiscuous mode [ 1125.290206][T26703] FAULT_INJECTION: forcing a failure. [ 1125.290206][T26703] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.302974][T26703] CPU: 0 PID: 26703 Comm: syz.0.9154 Tainted: G W syzkaller #0 [ 1125.311850][T26703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1125.322017][T26703] Call Trace: [ 1125.325322][T26703] [ 1125.328271][T26703] __dump_stack+0x21/0x30 [ 1125.332632][T26703] dump_stack_lvl+0x110/0x170 [ 1125.337337][T26703] ? show_regs_print_info+0x20/0x20 [ 1125.342673][T26703] ? kstrtouint_from_user+0x1c4/0x220 [ 1125.348077][T26703] dump_stack+0x15/0x20 [ 1125.352344][T26703] should_fail+0x3ab/0x500 [ 1125.356788][T26703] __should_failslab+0xa4/0xe0 [ 1125.361575][T26703] should_failslab+0x9/0x20 [ 1125.366106][T26703] slab_pre_alloc_hook+0x39/0xd0 [ 1125.371077][T26703] __kmalloc+0x6d/0x2c0 [ 1125.375252][T26703] ? kvmalloc_node+0x211/0x320 [ 1125.380126][T26703] kvmalloc_node+0x211/0x320 [ 1125.384733][T26703] ? vm_mmap+0xb0/0xb0 [ 1125.388850][T26703] map_update_elem+0x312/0x780 [ 1125.393649][T26703] __sys_bpf+0x456/0x7d0 [ 1125.398019][T26703] ? bpf_link_show_fdinfo+0x330/0x330 [ 1125.403420][T26703] ? debug_smp_processor_id+0x17/0x20 [ 1125.408904][T26703] __x64_sys_bpf+0x7c/0x90 [ 1125.413341][T26703] x64_sys_call+0x4b9/0x9a0 [ 1125.417889][T26703] do_syscall_64+0x4c/0xa0 [ 1125.422332][T26703] ? clear_bhb_loop+0x50/0xa0 [ 1125.427031][T26703] ? clear_bhb_loop+0x50/0xa0 [ 1125.431739][T26703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1125.437661][T26703] RIP: 0033:0x7f8d46772b19 [ 1125.442098][T26703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.461727][T26703] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1125.470188][T26703] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1125.478186][T26703] RDX: 0000000000000020 RSI: 0000200000000940 RDI: 0000000000000002 [ 1125.486207][T26703] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.494204][T26703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.502201][T26703] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1125.510224][T26703] [ 1127.456881][T26788] device syzkaller0 entered promiscuous mode [ 1127.760142][T26780] FAULT_INJECTION: forcing a failure. [ 1127.760142][T26780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.832838][T26780] CPU: 1 PID: 26780 Comm: syz.1.9172 Tainted: G W syzkaller #0 [ 1127.841766][T26780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1127.851850][T26780] Call Trace: [ 1127.855149][T26780] [ 1127.858099][T26780] __dump_stack+0x21/0x30 [ 1127.862458][T26780] dump_stack_lvl+0x110/0x170 [ 1127.867157][T26780] ? show_regs_print_info+0x20/0x20 [ 1127.872380][T26780] ? avc_denied+0x1b0/0x1b0 [ 1127.876913][T26780] dump_stack+0x15/0x20 [ 1127.881100][T26780] should_fail+0x3ab/0x500 [ 1127.885552][T26780] should_fail_usercopy+0x1a/0x20 [ 1127.890599][T26780] copy_page_from_iter+0x2f6/0x680 [ 1127.895735][T26780] pipe_write+0x90b/0x1910 [ 1127.900174][T26780] ? pipe_write+0xf1/0x1910 [ 1127.904804][T26780] ? pipe_read+0x1050/0x1050 [ 1127.909438][T26780] ? selinux_file_permission+0x3f4/0x510 [ 1127.915114][T26780] ? memset+0x35/0x40 [ 1127.919126][T26780] ? iov_iter_init+0xbc/0x180 [ 1127.923827][T26780] vfs_write+0x831/0xfd0 [ 1127.928095][T26780] ? file_end_write+0x1b0/0x1b0 [ 1127.932974][T26780] ? __fget_files+0x2e1/0x340 [ 1127.937820][T26780] ? __fdget_pos+0x1f7/0x380 [ 1127.942482][T26780] ? ksys_write+0x70/0x260 [ 1127.946934][T26780] ksys_write+0x14a/0x260 [ 1127.951308][T26780] ? __ia32_sys_read+0x90/0x90 [ 1127.956106][T26780] ? debug_smp_processor_id+0x17/0x20 [ 1127.961517][T26780] __x64_sys_write+0x7b/0x90 [ 1127.966142][T26780] x64_sys_call+0x8ef/0x9a0 [ 1127.970687][T26780] do_syscall_64+0x4c/0xa0 [ 1127.975132][T26780] ? clear_bhb_loop+0x50/0xa0 [ 1127.979855][T26780] ? clear_bhb_loop+0x50/0xa0 [ 1127.984566][T26780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.990502][T26780] RIP: 0033:0x7fa9f367134e [ 1127.994949][T26780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1128.014709][T26780] RSP: 002b:00007fa9f20e6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1128.023247][T26780] RAX: ffffffffffffffda RBX: 00007fa9f20e76c0 RCX: 00007fa9f367134e [ 1128.031270][T26780] RDX: 0000000000000029 RSI: 00007fa9f20e6e90 RDI: 0000000000000002 [ 1128.039293][T26780] RBP: 00007fa9f20e6e90 R08: 0000000000000000 R09: 0000000000000000 [ 1128.047296][T26780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 1128.055298][T26780] R13: 00007fa9f390b7a0 R14: 00007fa9f39024a0 R15: 0000000000000001 [ 1128.063317][T26780] [ 1131.973878][T26880] device syzkaller0 entered promiscuous mode [ 1132.037681][T26884] device syzkaller0 entered promiscuous mode [ 1132.358570][ T30] audit: type=1400 audit(1793807969.040:156): avc: denied { setattr } for pid=26907 comm="syz.0.9218" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1132.915121][T26927] device syzkaller0 entered promiscuous mode [ 1132.942101][T26927] FAULT_INJECTION: forcing a failure. [ 1132.942101][T26927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1132.956486][T26927] CPU: 0 PID: 26927 Comm: syz.4.9225 Tainted: G W syzkaller #0 [ 1132.965383][T26927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1132.975455][T26927] Call Trace: [ 1132.978932][T26927] [ 1132.981887][T26927] __dump_stack+0x21/0x30 [ 1132.986245][T26927] dump_stack_lvl+0x110/0x170 [ 1132.990956][T26927] ? show_regs_print_info+0x20/0x20 [ 1132.996181][T26927] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1133.001778][T26927] ? __alloc_skb+0x210/0x730 [ 1133.006399][T26927] dump_stack+0x15/0x20 [ 1133.010769][T26927] should_fail+0x3ab/0x500 [ 1133.015264][T26927] should_fail_alloc_page+0x55/0x80 [ 1133.020496][T26927] prepare_alloc_pages+0x13f/0x590 [ 1133.025643][T26927] ? __alloc_pages_bulk+0xab0/0xab0 [ 1133.030881][T26927] __alloc_pages+0x11d/0x460 [ 1133.035500][T26927] ? zone_watermark_fast+0x250/0x250 [ 1133.040815][T26927] ? __alloc_skb+0x459/0x730 [ 1133.045430][T26927] alloc_skb_with_frags+0x20c/0x620 [ 1133.050669][T26927] sock_alloc_send_pskb+0x87f/0x9a0 [ 1133.055909][T26927] ? sock_kzfree_s+0x60/0x60 [ 1133.060529][T26927] ? iov_iter_advance+0x1f9/0x360 [ 1133.065607][T26927] tun_get_user+0xaab/0x33e0 [ 1133.070226][T26927] ? do_sys_openat2+0x6df/0x7f0 [ 1133.075099][T26927] ? __x64_sys_openat+0x136/0x160 [ 1133.080142][T26927] ? x64_sys_call+0x219/0x9a0 [ 1133.084949][T26927] ? msr_save_cpuid_features+0xb0/0xd0 [ 1133.090446][T26927] ? tun_do_read+0x1d70/0x1d70 [ 1133.095329][T26927] ? kstrtouint_from_user+0x1c4/0x220 [ 1133.100740][T26927] ? kstrtol_from_user+0x2a0/0x2a0 [ 1133.105907][T26927] ? avc_policy_seqno+0x1b/0x70 [ 1133.110799][T26927] ? selinux_file_permission+0x2aa/0x510 [ 1133.116459][T26927] tun_chr_write_iter+0x1ed/0x2f0 [ 1133.121516][T26927] vfs_write+0x831/0xfd0 [ 1133.125792][T26927] ? file_end_write+0x1b0/0x1b0 [ 1133.130683][T26927] ? __fget_files+0x2e1/0x340 [ 1133.135400][T26927] ? __fdget_pos+0x1f7/0x380 [ 1133.140013][T26927] ? ksys_write+0x70/0x260 [ 1133.144452][T26927] ksys_write+0x14a/0x260 [ 1133.148894][T26927] ? __ia32_sys_read+0x90/0x90 [ 1133.153687][T26927] ? debug_smp_processor_id+0x17/0x20 [ 1133.159095][T26927] __x64_sys_write+0x7b/0x90 [ 1133.163746][T26927] x64_sys_call+0x8ef/0x9a0 [ 1133.168278][T26927] do_syscall_64+0x4c/0xa0 [ 1133.172731][T26927] ? clear_bhb_loop+0x50/0xa0 [ 1133.177446][T26927] ? clear_bhb_loop+0x50/0xa0 [ 1133.182153][T26927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1133.188092][T26927] RIP: 0033:0x7f6c93acdb19 [ 1133.192613][T26927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.212268][T26927] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1133.220716][T26927] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1133.228710][T26927] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000009 [ 1133.236724][T26927] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.244731][T26927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.252720][T26927] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1133.260756][T26927] [ 1133.282270][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1133.306883][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1133.334779][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1133.354870][ T5077] bridge0: port 3(vlan1) entered blocking state [ 1133.361195][ T5077] bridge0: port 3(vlan1) entered forwarding state [ 1133.637782][ T30] audit: type=1400 audit(1793807970.320:157): avc: denied { ioctl } for pid=26945 comm="syz.0.9233" path="socket:[121901]" dev="sockfs" ino=121901 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1133.791340][T26963] device syzkaller0 entered promiscuous mode [ 1134.113462][T26969] device syzkaller0 entered promiscuous mode [ 1134.568228][T26987] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1135.194923][T27032] device syzkaller0 entered promiscuous mode [ 1135.246774][T27032] FAULT_INJECTION: forcing a failure. [ 1135.246774][T27032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1135.396237][T27032] CPU: 1 PID: 27032 Comm: syz.3.9262 Tainted: G W syzkaller #0 [ 1135.405149][T27032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1135.415233][T27032] Call Trace: [ 1135.418540][T27032] [ 1135.421495][T27032] __dump_stack+0x21/0x30 [ 1135.425859][T27032] dump_stack_lvl+0x110/0x170 [ 1135.430571][T27032] ? show_regs_print_info+0x20/0x20 [ 1135.435795][T27032] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1135.441370][T27032] ? __alloc_skb+0x210/0x730 [ 1135.446014][T27032] dump_stack+0x15/0x20 [ 1135.450200][T27032] should_fail+0x3ab/0x500 [ 1135.454646][T27032] should_fail_alloc_page+0x55/0x80 [ 1135.459895][T27032] prepare_alloc_pages+0x13f/0x590 [ 1135.465041][T27032] ? __alloc_pages_bulk+0xab0/0xab0 [ 1135.470278][T27032] __alloc_pages+0x11d/0x460 [ 1135.474917][T27032] ? zone_watermark_fast+0x250/0x250 [ 1135.480233][T27032] ? __alloc_skb+0x459/0x730 [ 1135.484872][T27032] alloc_skb_with_frags+0x20c/0x620 [ 1135.490105][T27032] sock_alloc_send_pskb+0x87f/0x9a0 [ 1135.495339][T27032] ? sock_kzfree_s+0x60/0x60 [ 1135.499961][T27032] ? iov_iter_advance+0x1f9/0x360 [ 1135.505028][T27032] tun_get_user+0xaab/0x33e0 [ 1135.509658][T27032] ? do_sys_openat2+0x6df/0x7f0 [ 1135.514534][T27032] ? __x64_sys_openat+0x136/0x160 [ 1135.519671][T27032] ? x64_sys_call+0x219/0x9a0 [ 1135.524374][T27032] ? msr_save_cpuid_features+0xb0/0xd0 [ 1135.529877][T27032] ? tun_do_read+0x1d70/0x1d70 [ 1135.534672][T27032] ? kstrtouint_from_user+0x1c4/0x220 [ 1135.540078][T27032] ? kstrtol_from_user+0x2a0/0x2a0 [ 1135.545221][T27032] ? avc_policy_seqno+0x1b/0x70 [ 1135.550186][T27032] ? selinux_file_permission+0x2aa/0x510 [ 1135.555850][T27032] tun_chr_write_iter+0x1ed/0x2f0 [ 1135.560908][T27032] vfs_write+0x831/0xfd0 [ 1135.565183][T27032] ? file_end_write+0x1b0/0x1b0 [ 1135.570068][T27032] ? __fget_files+0x2e1/0x340 [ 1135.574781][T27032] ? __fdget_pos+0x1f7/0x380 [ 1135.579398][T27032] ? ksys_write+0x70/0x260 [ 1135.583843][T27032] ksys_write+0x14a/0x260 [ 1135.588207][T27032] ? __ia32_sys_read+0x90/0x90 [ 1135.593008][T27032] ? debug_smp_processor_id+0x17/0x20 [ 1135.598414][T27032] __x64_sys_write+0x7b/0x90 [ 1135.603039][T27032] x64_sys_call+0x8ef/0x9a0 [ 1135.607572][T27032] do_syscall_64+0x4c/0xa0 [ 1135.612022][T27032] ? clear_bhb_loop+0x50/0xa0 [ 1135.616731][T27032] ? clear_bhb_loop+0x50/0xa0 [ 1135.621445][T27032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1135.627371][T27032] RIP: 0033:0x7f3b10b65b19 [ 1135.631817][T27032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.651455][T27032] RSP: 002b:00007f3b0f5bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1135.659913][T27032] RAX: ffffffffffffffda RBX: 00007f3b10debfa0 RCX: 00007f3b10b65b19 [ 1135.667920][T27032] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1135.675953][T27032] RBP: 00007f3b0f5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.683964][T27032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.691972][T27032] R13: 00007f3b10dec038 R14: 00007f3b10debfa0 R15: 00007ffdce00c8f8 [ 1135.699989][T27032] [ 1135.861522][T27048] device syzkaller0 entered promiscuous mode [ 1136.439557][T27077] device syzkaller0 entered promiscuous mode [ 1136.547558][T27090] FAULT_INJECTION: forcing a failure. [ 1136.547558][T27090] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.634029][T27090] CPU: 1 PID: 27090 Comm: syz.4.9283 Tainted: G W syzkaller #0 [ 1136.642948][T27090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1136.653032][T27090] Call Trace: [ 1136.656350][T27090] [ 1136.659308][T27090] __dump_stack+0x21/0x30 [ 1136.663672][T27090] dump_stack_lvl+0x110/0x170 [ 1136.668492][T27090] ? show_regs_print_info+0x20/0x20 [ 1136.673723][T27090] dump_stack+0x15/0x20 [ 1136.677950][T27090] should_fail+0x3ab/0x500 [ 1136.682401][T27090] __should_failslab+0xa4/0xe0 [ 1136.687205][T27090] should_failslab+0x9/0x20 [ 1136.691736][T27090] slab_pre_alloc_hook+0x39/0xd0 [ 1136.696702][T27090] kmem_cache_alloc_trace+0x48/0x270 [ 1136.702019][T27090] ? htab_map_alloc+0x9c/0x15d0 [ 1136.706907][T27090] htab_map_alloc+0x9c/0x15d0 [ 1136.711616][T27090] ? security_capable+0x87/0xb0 [ 1136.716529][T27090] ? capable+0x8a/0xe0 [ 1136.720648][T27090] ? htab_map_alloc_check+0x3d8/0x4c0 [ 1136.726055][T27090] map_create+0x3f4/0x1fa0 [ 1136.730597][T27090] __sys_bpf+0x2ff/0x7d0 [ 1136.735011][T27090] ? bpf_link_show_fdinfo+0x330/0x330 [ 1136.740424][T27090] ? debug_smp_processor_id+0x17/0x20 [ 1136.745827][T27090] ? perf_trace_sys_enter+0x30/0x150 [ 1136.751226][T27090] __x64_sys_bpf+0x7c/0x90 [ 1136.755669][T27090] x64_sys_call+0x4b9/0x9a0 [ 1136.760497][T27090] do_syscall_64+0x4c/0xa0 [ 1136.764970][T27090] ? clear_bhb_loop+0x50/0xa0 [ 1136.769674][T27090] ? clear_bhb_loop+0x50/0xa0 [ 1136.774381][T27090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1136.780297][T27090] RIP: 0033:0x7f6c93acdb19 [ 1136.784747][T27090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.804393][T27090] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1136.812840][T27090] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1136.820843][T27090] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 1800000000000000 [ 1136.829371][T27090] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.837366][T27090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.845354][T27090] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1136.853385][T27090] [ 1137.014811][T27103] device syzkaller0 entered promiscuous mode [ 1137.281813][T27117] device syzkaller0 entered promiscuous mode [ 1137.633156][T27143] FAULT_INJECTION: forcing a failure. [ 1137.633156][T27143] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.790194][T27143] CPU: 0 PID: 27143 Comm: syz.4.9304 Tainted: G W syzkaller #0 [ 1137.799228][T27143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1137.809353][T27143] Call Trace: [ 1137.812664][T27143] [ 1137.815626][T27143] __dump_stack+0x21/0x30 [ 1137.820020][T27143] dump_stack_lvl+0x110/0x170 [ 1137.824908][T27143] ? show_regs_print_info+0x20/0x20 [ 1137.830146][T27143] ? __kernel_text_address+0xa0/0x100 [ 1137.835558][T27143] ? unwind_get_return_address+0x4d/0x90 [ 1137.841238][T27143] dump_stack+0x15/0x20 [ 1137.845428][T27143] should_fail+0x3ab/0x500 [ 1137.849906][T27143] __should_failslab+0xa4/0xe0 [ 1137.854703][T27143] should_failslab+0x9/0x20 [ 1137.859244][T27143] slab_pre_alloc_hook+0x39/0xd0 [ 1137.864214][T27143] kmem_cache_alloc_trace+0x48/0x270 [ 1137.869540][T27143] ? __get_vm_area_node+0x11d/0x350 [ 1137.874770][T27143] __get_vm_area_node+0x11d/0x350 [ 1137.879856][T27143] __vmalloc_node_range+0xe8/0xad0 [ 1137.885002][T27143] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1137.890716][T27143] ? selinux_capset+0xf0/0xf0 [ 1137.895453][T27143] ? _kstrtoull+0x3bb/0x4c0 [ 1137.900000][T27143] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1137.905612][T27143] __vmalloc+0x79/0x90 [ 1137.909731][T27143] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1137.915453][T27143] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1137.920865][T27143] ? bpf_prog_alloc+0x15/0x1e0 [ 1137.925662][T27143] bpf_prog_alloc+0x1f/0x1e0 [ 1137.930362][T27143] bpf_prog_load+0x80e/0x1620 [ 1137.935060][T27143] ? map_freeze+0x370/0x370 [ 1137.939599][T27143] ? selinux_bpf+0xc7/0xf0 [ 1137.944047][T27143] ? security_bpf+0x82/0xa0 [ 1137.948574][T27143] __sys_bpf+0x51d/0x7d0 [ 1137.952839][T27143] ? bpf_link_show_fdinfo+0x330/0x330 [ 1137.958233][T27143] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1137.964412][T27143] __x64_sys_bpf+0x7c/0x90 [ 1137.968866][T27143] x64_sys_call+0x4b9/0x9a0 [ 1137.973383][T27143] do_syscall_64+0x4c/0xa0 [ 1137.977814][T27143] ? clear_bhb_loop+0x50/0xa0 [ 1137.982505][T27143] ? clear_bhb_loop+0x50/0xa0 [ 1137.987203][T27143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1137.993142][T27143] RIP: 0033:0x7f6c93acdb19 [ 1137.997572][T27143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.017226][T27143] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1138.025663][T27143] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1138.033660][T27143] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1138.041652][T27143] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.049793][T27143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.057808][T27143] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1138.065815][T27143] [ 1138.528100][T27143] syz.4.9304: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 1138.544984][T27143] CPU: 0 PID: 27143 Comm: syz.4.9304 Tainted: G W syzkaller #0 [ 1138.553902][T27143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1138.563995][T27143] Call Trace: [ 1138.567297][T27143] [ 1138.570253][T27143] __dump_stack+0x21/0x30 [ 1138.574608][T27143] dump_stack_lvl+0x110/0x170 [ 1138.579308][T27143] ? show_regs_print_info+0x20/0x20 [ 1138.584522][T27143] ? pr_cont_kernfs_name+0xe3/0xf0 [ 1138.589658][T27143] dump_stack+0x15/0x20 [ 1138.593834][T27143] warn_alloc+0x1dc/0x200 [ 1138.598182][T27143] ? __should_failslab+0xa4/0xe0 [ 1138.603142][T27143] ? zone_watermark_ok_safe+0x270/0x270 [ 1138.608708][T27143] ? kmem_cache_alloc_trace+0x119/0x270 [ 1138.614277][T27143] __vmalloc_node_range+0x15e/0xad0 [ 1138.619576][T27143] ? selinux_capset+0xf0/0xf0 [ 1138.624277][T27143] ? _kstrtoull+0x3bb/0x4c0 [ 1138.628795][T27143] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1138.634361][T27143] __vmalloc+0x79/0x90 [ 1138.638474][T27143] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1138.644058][T27143] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1138.649446][T27143] ? bpf_prog_alloc+0x15/0x1e0 [ 1138.654225][T27143] bpf_prog_alloc+0x1f/0x1e0 [ 1138.658827][T27143] bpf_prog_load+0x80e/0x1620 [ 1138.663520][T27143] ? map_freeze+0x370/0x370 [ 1138.668043][T27143] ? selinux_bpf+0xc7/0xf0 [ 1138.672495][T27143] ? security_bpf+0x82/0xa0 [ 1138.677118][T27143] __sys_bpf+0x51d/0x7d0 [ 1138.681375][T27143] ? bpf_link_show_fdinfo+0x330/0x330 [ 1138.686764][T27143] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1138.692943][T27143] __x64_sys_bpf+0x7c/0x90 [ 1138.697379][T27143] x64_sys_call+0x4b9/0x9a0 [ 1138.701894][T27143] do_syscall_64+0x4c/0xa0 [ 1138.706322][T27143] ? clear_bhb_loop+0x50/0xa0 [ 1138.711015][T27143] ? clear_bhb_loop+0x50/0xa0 [ 1138.715711][T27143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1138.721621][T27143] RIP: 0033:0x7f6c93acdb19 [ 1138.726059][T27143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.745845][T27143] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1138.754306][T27143] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1138.762314][T27143] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1138.770303][T27143] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.778292][T27143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.786281][T27143] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1138.794282][T27143] [ 1138.813387][T27143] Mem-Info: [ 1138.816818][T27143] active_anon:40 inactive_anon:23750 isolated_anon:0 [ 1138.816818][T27143] active_file:24861 inactive_file:3733 isolated_file:0 [ 1138.816818][T27143] unevictable:0 dirty:451 writeback:0 [ 1138.816818][T27143] slab_reclaimable:8158 slab_unreclaimable:79536 [ 1138.816818][T27143] mapped:44100 shmem:9230 pagetables:645 bounce:0 [ 1138.816818][T27143] kernel_misc_reclaimable:0 [ 1138.816818][T27143] free:1507031 free_pcp:19754 free_cma:0 [ 1138.882857][T27143] Node 0 active_anon:160kB inactive_anon:97700kB active_file:99444kB inactive_file:14932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179300kB dirty:1804kB writeback:0kB shmem:39920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:6460kB pagetables:2580kB all_unreclaimable? no [ 1138.968421][T27143] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982728kB mlocked:0kB bounce:0kB free_pcp:3956kB local_pcp:3956kB free_cma:0kB [ 1138.998220][T27143] lowmem_reserve[]: 0 3941 3941 [ 1139.003594][T27143] Normal free:3049352kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:160kB inactive_anon:101692kB active_file:99444kB inactive_file:16596kB unevictable:0kB writepending:1812kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:65780kB local_pcp:24224kB free_cma:0kB [ 1139.035734][T27143] lowmem_reserve[]: 0 0 0 [ 1139.040330][T27143] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 1139.073587][T27143] Normal: 1808*4kB (UME) 1831*8kB (UME) 749*16kB (UME) 754*32kB (UME) 390*64kB (UME) 145*128kB (UME) 67*256kB (UME) 30*512kB (UME) 11*1024kB (UM) 2*2048kB (UE) 708*4096kB (UM) = 3049352kB [ 1139.094998][T27143] 40407 total pagecache pages [ 1139.169001][T27143] 0 pages in swap cache [ 1139.200823][T27143] Swap cache stats: add 0, delete 0, find 0/0 [ 1139.256720][T27143] Free swap = 124996kB [ 1139.292272][T27143] Total swap = 124996kB [ 1139.322830][T27143] 2097051 pages RAM [ 1139.356726][T27143] 0 pages HighMem/MovableOnly [ 1139.366301][T27143] 342345 pages reserved [ 1139.370683][T27143] 0 pages cma reserved [ 1139.473881][T27186] device syzkaller0 entered promiscuous mode [ 1139.562203][T27190] device syzkaller0 entered promiscuous mode [ 1140.311497][T27246] FAULT_INJECTION: forcing a failure. [ 1140.311497][T27246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.427640][T27246] CPU: 0 PID: 27246 Comm: syz.3.9340 Tainted: G W syzkaller #0 [ 1140.436550][T27246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1140.446631][T27246] Call Trace: [ 1140.449949][T27246] [ 1140.452899][T27246] __dump_stack+0x21/0x30 [ 1140.457253][T27246] dump_stack_lvl+0x110/0x170 [ 1140.461942][T27246] ? show_regs_print_info+0x20/0x20 [ 1140.467190][T27246] dump_stack+0x15/0x20 [ 1140.471359][T27246] should_fail+0x3ab/0x500 [ 1140.475810][T27246] should_fail_usercopy+0x1a/0x20 [ 1140.480851][T27246] _copy_to_user+0x20/0x90 [ 1140.485385][T27246] simple_read_from_buffer+0xe9/0x160 [ 1140.490775][T27246] proc_fail_nth_read+0x1a6/0x220 [ 1140.495813][T27246] ? proc_fault_inject_write+0x310/0x310 [ 1140.501462][T27246] ? security_file_permission+0x83/0xa0 [ 1140.507028][T27246] ? proc_fault_inject_write+0x310/0x310 [ 1140.512677][T27246] vfs_read+0x28c/0xc20 [ 1140.516840][T27246] ? kernel_read+0x1f0/0x1f0 [ 1140.521436][T27246] ? __kasan_check_write+0x14/0x20 [ 1140.526556][T27246] ? mutex_lock+0x9b/0x1c0 [ 1140.530984][T27246] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1140.537674][T27246] ? __fget_files+0x2e1/0x340 [ 1140.542361][T27246] ? __fdget_pos+0x2d2/0x380 [ 1140.546971][T27246] ? ksys_read+0x70/0x260 [ 1140.551511][T27246] ksys_read+0x14a/0x260 [ 1140.555782][T27246] ? vfs_write+0xfd0/0xfd0 [ 1140.560209][T27246] ? debug_smp_processor_id+0x17/0x20 [ 1140.565614][T27246] __x64_sys_read+0x7b/0x90 [ 1140.570131][T27246] x64_sys_call+0x96d/0x9a0 [ 1140.574647][T27246] do_syscall_64+0x4c/0xa0 [ 1140.579073][T27246] ? clear_bhb_loop+0x50/0xa0 [ 1140.583762][T27246] ? clear_bhb_loop+0x50/0xa0 [ 1140.588458][T27246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1140.594370][T27246] RIP: 0033:0x7f3b10b2634e [ 1140.598810][T27246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1140.618537][T27246] RSP: 002b:00007f3b0f5bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1140.626968][T27246] RAX: ffffffffffffffda RBX: 00007f3b0f5bd6c0 RCX: 00007f3b10b2634e [ 1140.634957][T27246] RDX: 000000000000000f RSI: 00007f3b0f5bd0a0 RDI: 0000000000000005 [ 1140.642971][T27246] RBP: 00007f3b0f5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.650969][T27246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.658963][T27246] R13: 00007f3b10dec038 R14: 00007f3b10debfa0 R15: 00007ffdce00c8f8 [ 1140.666963][T27246] [ 1141.622696][T27284] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1142.078974][T27299] device syzkaller0 entered promiscuous mode [ 1142.868399][T27329] FAULT_INJECTION: forcing a failure. [ 1142.868399][T27329] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.881339][T27329] CPU: 0 PID: 27329 Comm: syz.0.9367 Tainted: G W syzkaller #0 [ 1142.890401][T27329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1142.900505][T27329] Call Trace: [ 1142.903808][T27329] [ 1142.906755][T27329] __dump_stack+0x21/0x30 [ 1142.911120][T27329] dump_stack_lvl+0x110/0x170 [ 1142.915822][T27329] ? show_regs_print_info+0x20/0x20 [ 1142.921050][T27329] dump_stack+0x15/0x20 [ 1142.925238][T27329] should_fail+0x3ab/0x500 [ 1142.929682][T27329] __should_failslab+0xa4/0xe0 [ 1142.934587][T27329] should_failslab+0x9/0x20 [ 1142.939134][T27329] slab_pre_alloc_hook+0x39/0xd0 [ 1142.944120][T27329] ? sk_prot_alloc+0x5f/0x320 [ 1142.948825][T27329] kmem_cache_alloc+0x44/0x260 [ 1142.953636][T27329] sk_prot_alloc+0x5f/0x320 [ 1142.958166][T27329] sk_alloc+0x38/0x430 [ 1142.962260][T27329] __vsock_create+0x3e/0x940 [ 1142.966880][T27329] vsock_create+0x13b/0x3f0 [ 1142.971503][T27329] __sock_create+0x38d/0x7a0 [ 1142.976135][T27329] __sys_socketpair+0x218/0x590 [ 1142.981018][T27329] __x64_sys_socketpair+0x9b/0xb0 [ 1142.986097][T27329] x64_sys_call+0x36/0x9a0 [ 1142.990546][T27329] do_syscall_64+0x4c/0xa0 [ 1142.994986][T27329] ? clear_bhb_loop+0x50/0xa0 [ 1142.999686][T27329] ? clear_bhb_loop+0x50/0xa0 [ 1143.004393][T27329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1143.010343][T27329] RIP: 0033:0x7f8d46772b19 [ 1143.014955][T27329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.034689][T27329] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1143.043144][T27329] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1143.051145][T27329] RDX: 0000000000000028 RSI: 0000000000000001 RDI: 0000000000000028 [ 1143.059134][T27329] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.067118][T27329] R10: 0000200000001400 R11: 0000000000000246 R12: 0000000000000002 [ 1143.075111][T27329] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1143.083119][T27329] [ 1145.360427][T27428] bridge0: port 3(vlan1) entered disabled state [ 1145.615622][T27456] device syzkaller0 entered promiscuous mode [ 1145.829328][T27463] device syzkaller0 entered promiscuous mode [ 1145.965004][T27470] device syzkaller0 entered promiscuous mode [ 1147.185300][T27506] device syzkaller0 entered promiscuous mode [ 1149.445175][T27573] device syzkaller0 entered promiscuous mode [ 1150.619352][T27625] device syzkaller0 entered promiscuous mode [ 1150.745351][T27623] FAULT_INJECTION: forcing a failure. [ 1150.745351][T27623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1150.776793][T27630] FAULT_INJECTION: forcing a failure. [ 1150.776793][T27630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1150.864561][T27630] CPU: 0 PID: 27630 Comm: syz.1.9462 Tainted: G W syzkaller #0 [ 1150.873483][T27630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1150.883789][T27630] Call Trace: [ 1150.887099][T27630] [ 1150.890057][T27630] __dump_stack+0x21/0x30 [ 1150.894415][T27630] dump_stack_lvl+0x110/0x170 [ 1150.899126][T27630] ? show_regs_print_info+0x20/0x20 [ 1150.904348][T27630] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1150.909947][T27630] ? __alloc_skb+0x210/0x730 [ 1150.914588][T27630] dump_stack+0x15/0x20 [ 1150.918775][T27630] should_fail+0x3ab/0x500 [ 1150.923229][T27630] should_fail_alloc_page+0x55/0x80 [ 1150.928466][T27630] prepare_alloc_pages+0x13f/0x590 [ 1150.933621][T27630] ? __alloc_pages_bulk+0xab0/0xab0 [ 1150.938855][T27630] __alloc_pages+0x11d/0x460 [ 1150.943476][T27630] ? zone_watermark_fast+0x250/0x250 [ 1150.948788][T27630] ? __alloc_skb+0x459/0x730 [ 1150.953403][T27630] alloc_skb_with_frags+0x20c/0x620 [ 1150.958639][T27630] sock_alloc_send_pskb+0x87f/0x9a0 [ 1150.963874][T27630] ? sock_kzfree_s+0x60/0x60 [ 1150.968502][T27630] ? iov_iter_advance+0x1f9/0x360 [ 1150.973551][T27630] tun_get_user+0xaab/0x33e0 [ 1150.978171][T27630] ? do_sys_openat2+0x6df/0x7f0 [ 1150.983035][T27630] ? __x64_sys_openat+0x136/0x160 [ 1150.988073][T27630] ? x64_sys_call+0x219/0x9a0 [ 1150.992764][T27630] ? msr_save_cpuid_features+0xb0/0xd0 [ 1150.998240][T27630] ? tun_do_read+0x1d70/0x1d70 [ 1151.003019][T27630] ? kstrtouint_from_user+0x1c4/0x220 [ 1151.008413][T27630] ? kstrtol_from_user+0x2a0/0x2a0 [ 1151.013536][T27630] ? avc_policy_seqno+0x1b/0x70 [ 1151.018412][T27630] ? selinux_file_permission+0x2aa/0x510 [ 1151.024059][T27630] tun_chr_write_iter+0x1ed/0x2f0 [ 1151.029098][T27630] vfs_write+0x831/0xfd0 [ 1151.033377][T27630] ? file_end_write+0x1b0/0x1b0 [ 1151.038260][T27630] ? __fget_files+0x2e1/0x340 [ 1151.042958][T27630] ? __fdget_pos+0x1f7/0x380 [ 1151.047561][T27630] ? ksys_write+0x70/0x260 [ 1151.051990][T27630] ksys_write+0x14a/0x260 [ 1151.056329][T27630] ? __ia32_sys_read+0x90/0x90 [ 1151.061107][T27630] ? sched_clock_cpu+0x18/0x3d0 [ 1151.065975][T27630] ? debug_smp_processor_id+0x17/0x20 [ 1151.071360][T27630] __x64_sys_write+0x7b/0x90 [ 1151.075962][T27630] x64_sys_call+0x8ef/0x9a0 [ 1151.080483][T27630] do_syscall_64+0x4c/0xa0 [ 1151.084932][T27630] ? clear_bhb_loop+0x50/0xa0 [ 1151.089620][T27630] ? clear_bhb_loop+0x50/0xa0 [ 1151.094315][T27630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1151.100219][T27630] RIP: 0033:0x7fa9f36b0b19 [ 1151.104647][T27630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.124272][T27630] RSP: 002b:00007fa9f20c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.132698][T27630] RAX: ffffffffffffffda RBX: 00007fa9f3937180 RCX: 00007fa9f36b0b19 [ 1151.140775][T27630] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1151.148761][T27630] RBP: 00007fa9f20c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.156764][T27630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.164830][T27630] R13: 00007fa9f3937218 R14: 00007fa9f3937180 R15: 00007fffeeb4a638 [ 1151.172824][T27630] [ 1151.292404][T27623] CPU: 0 PID: 27623 Comm: syz.0.9460 Tainted: G W syzkaller #0 [ 1151.301324][T27623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1151.311426][T27623] Call Trace: [ 1151.314725][T27623] [ 1151.317672][T27623] __dump_stack+0x21/0x30 [ 1151.322024][T27623] dump_stack_lvl+0x110/0x170 [ 1151.326723][T27623] ? show_regs_print_info+0x20/0x20 [ 1151.331944][T27623] dump_stack+0x15/0x20 [ 1151.336148][T27623] should_fail+0x3ab/0x500 [ 1151.340599][T27623] should_fail_alloc_page+0x55/0x80 [ 1151.345823][T27623] prepare_alloc_pages+0x13f/0x590 [ 1151.350964][T27623] ? __alloc_pages_bulk+0xab0/0xab0 [ 1151.356188][T27623] ? __alloc_pages_bulk+0x492/0xab0 [ 1151.361434][T27623] __alloc_pages+0x11d/0x460 [ 1151.366044][T27623] ? zone_watermark_fast+0x250/0x250 [ 1151.371354][T27623] ? __kmalloc+0x13d/0x2c0 [ 1151.375791][T27623] __vmalloc_node_range+0x507/0xad0 [ 1151.381013][T27623] dup_task_struct+0x41e/0xc70 [ 1151.385801][T27623] ? copy_process+0x5e0/0x3230 [ 1151.390608][T27623] copy_process+0x5e0/0x3230 [ 1151.395333][T27623] ? __kasan_check_write+0x14/0x20 [ 1151.400481][T27623] ? proc_fail_nth_write+0x180/0x200 [ 1151.405794][T27623] ? __pidfd_prepare+0x150/0x150 [ 1151.410764][T27623] kernel_clone+0x233/0x960 [ 1151.415293][T27623] ? create_io_thread+0x170/0x170 [ 1151.420345][T27623] ? __kasan_check_write+0x14/0x20 [ 1151.425582][T27623] ? mutex_unlock+0x8f/0x230 [ 1151.430198][T27623] __x64_sys_clone+0x198/0x210 [ 1151.435027][T27623] ? __kasan_check_write+0x14/0x20 [ 1151.440160][T27623] ? __ia32_sys_vfork+0x130/0x130 [ 1151.445210][T27623] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1151.451301][T27623] x64_sys_call+0x41f/0x9a0 [ 1151.455840][T27623] do_syscall_64+0x4c/0xa0 [ 1151.460284][T27623] ? clear_bhb_loop+0x50/0xa0 [ 1151.464982][T27623] ? clear_bhb_loop+0x50/0xa0 [ 1151.469680][T27623] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1151.475605][T27623] RIP: 0033:0x7f8d46772b19 [ 1151.480049][T27623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.499676][T27623] RSP: 002b:00007f8d451c9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1151.508137][T27623] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1151.516172][T27623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 1151.524172][T27623] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.532173][T27623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1151.540163][T27623] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1151.548199][T27623] [ 1152.120490][T27646] device syzkaller0 entered promiscuous mode [ 1152.158498][T27649] FAULT_INJECTION: forcing a failure. [ 1152.158498][T27649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.206738][T27649] CPU: 1 PID: 27649 Comm: syz.1.9466 Tainted: G W syzkaller #0 [ 1152.215760][T27649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1152.225837][T27649] Call Trace: [ 1152.229149][T27649] [ 1152.232126][T27649] __dump_stack+0x21/0x30 [ 1152.236486][T27649] dump_stack_lvl+0x110/0x170 [ 1152.241208][T27649] ? show_regs_print_info+0x20/0x20 [ 1152.246434][T27649] dump_stack+0x15/0x20 [ 1152.250615][T27649] should_fail+0x3ab/0x500 [ 1152.255060][T27649] should_fail_usercopy+0x1a/0x20 [ 1152.260116][T27649] _copy_to_user+0x20/0x90 [ 1152.264559][T27649] simple_read_from_buffer+0xe9/0x160 [ 1152.269972][T27649] proc_fail_nth_read+0x1a6/0x220 [ 1152.275031][T27649] ? proc_fault_inject_write+0x310/0x310 [ 1152.280698][T27649] ? security_file_permission+0x83/0xa0 [ 1152.286303][T27649] ? proc_fault_inject_write+0x310/0x310 [ 1152.291970][T27649] vfs_read+0x28c/0xc20 [ 1152.296180][T27649] ? kernel_read+0x1f0/0x1f0 [ 1152.300803][T27649] ? __kasan_check_write+0x14/0x20 [ 1152.305948][T27649] ? mutex_lock+0x9b/0x1c0 [ 1152.310677][T27649] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1152.317298][T27649] ? __fget_files+0x2e1/0x340 [ 1152.322007][T27649] ? __fdget_pos+0x2d2/0x380 [ 1152.326616][T27649] ? ksys_read+0x70/0x260 [ 1152.330967][T27649] ksys_read+0x14a/0x260 [ 1152.335237][T27649] ? vfs_write+0xfd0/0xfd0 [ 1152.339714][T27649] ? debug_smp_processor_id+0x17/0x20 [ 1152.345138][T27649] __x64_sys_read+0x7b/0x90 [ 1152.349669][T27649] x64_sys_call+0x96d/0x9a0 [ 1152.354208][T27649] do_syscall_64+0x4c/0xa0 [ 1152.358735][T27649] ? clear_bhb_loop+0x50/0xa0 [ 1152.363439][T27649] ? clear_bhb_loop+0x50/0xa0 [ 1152.368138][T27649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1152.374058][T27649] RIP: 0033:0x7fa9f367134e [ 1152.378523][T27649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1152.398246][T27649] RSP: 002b:00007fa9f2107fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1152.406688][T27649] RAX: ffffffffffffffda RBX: 00007fa9f21086c0 RCX: 00007fa9f367134e [ 1152.414691][T27649] RDX: 000000000000000f RSI: 00007fa9f21080a0 RDI: 0000000000000004 [ 1152.422685][T27649] RBP: 00007fa9f2108090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.430690][T27649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.438692][T27649] R13: 00007fa9f3937038 R14: 00007fa9f3936fa0 R15: 00007fffeeb4a638 [ 1152.446703][T27649] [ 1153.283392][T27694] device syzkaller0 entered promiscuous mode [ 1154.896458][T27734] FAULT_INJECTION: forcing a failure. [ 1154.896458][T27734] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.947628][T27734] CPU: 1 PID: 27734 Comm: syz.4.9498 Tainted: G W syzkaller #0 [ 1154.956538][T27734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1154.966616][T27734] Call Trace: [ 1154.969919][T27734] [ 1154.972871][T27734] __dump_stack+0x21/0x30 [ 1154.977232][T27734] dump_stack_lvl+0x110/0x170 [ 1154.981935][T27734] ? show_regs_print_info+0x20/0x20 [ 1154.987188][T27734] dump_stack+0x15/0x20 [ 1154.991372][T27734] should_fail+0x3ab/0x500 [ 1154.995819][T27734] __should_failslab+0xa4/0xe0 [ 1155.000611][T27734] should_failslab+0x9/0x20 [ 1155.005142][T27734] slab_pre_alloc_hook+0x39/0xd0 [ 1155.010111][T27734] ? prepare_creds+0x2f/0x610 [ 1155.014816][T27734] kmem_cache_alloc+0x44/0x260 [ 1155.019610][T27734] prepare_creds+0x2f/0x610 [ 1155.024135][T27734] ? fpu_clone+0x26d/0x4e0 [ 1155.028581][T27734] copy_creds+0xe4/0x640 [ 1155.032851][T27734] copy_process+0x7d5/0x3230 [ 1155.037472][T27734] ? __kasan_check_write+0x14/0x20 [ 1155.042611][T27734] ? proc_fail_nth_write+0x180/0x200 [ 1155.048035][T27734] ? __pidfd_prepare+0x150/0x150 [ 1155.053060][T27734] kernel_clone+0x233/0x960 [ 1155.057622][T27734] ? create_io_thread+0x170/0x170 [ 1155.062682][T27734] ? __kasan_check_write+0x14/0x20 [ 1155.067827][T27734] ? mutex_unlock+0x8f/0x230 [ 1155.072444][T27734] __x64_sys_clone+0x198/0x210 [ 1155.077239][T27734] ? __kasan_check_write+0x14/0x20 [ 1155.082385][T27734] ? __ia32_sys_vfork+0x130/0x130 [ 1155.087443][T27734] ? debug_smp_processor_id+0x17/0x20 [ 1155.092848][T27734] ? perf_trace_sys_enter+0x30/0x150 [ 1155.098160][T27734] ? trace_sys_enter+0x3d/0x50 [ 1155.102954][T27734] x64_sys_call+0x41f/0x9a0 [ 1155.107486][T27734] do_syscall_64+0x4c/0xa0 [ 1155.111952][T27734] ? clear_bhb_loop+0x50/0xa0 [ 1155.116658][T27734] ? clear_bhb_loop+0x50/0xa0 [ 1155.121368][T27734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1155.127286][T27734] RIP: 0033:0x7f6c93acdb19 [ 1155.131717][T27734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.151509][T27734] RSP: 002b:00007f6c92524fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1155.159941][T27734] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1155.167926][T27734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 1155.175908][T27734] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.183889][T27734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1155.191875][T27734] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1155.199878][T27734] [ 1155.516920][T27750] device syzkaller0 entered promiscuous mode [ 1155.701524][T27773] FAULT_INJECTION: forcing a failure. [ 1155.701524][T27773] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.731363][T27773] CPU: 1 PID: 27773 Comm: syz.0.9514 Tainted: G W syzkaller #0 [ 1155.740518][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1155.751051][T27773] Call Trace: [ 1155.754364][T27773] [ 1155.757343][T27773] __dump_stack+0x21/0x30 [ 1155.761707][T27773] dump_stack_lvl+0x110/0x170 [ 1155.766419][T27773] ? show_regs_print_info+0x20/0x20 [ 1155.771674][T27773] dump_stack+0x15/0x20 [ 1155.775856][T27773] should_fail+0x3ab/0x500 [ 1155.780307][T27773] __should_failslab+0xa4/0xe0 [ 1155.785105][T27773] should_failslab+0x9/0x20 [ 1155.789637][T27773] slab_pre_alloc_hook+0x39/0xd0 [ 1155.794601][T27773] __kmalloc+0x6d/0x2c0 [ 1155.798790][T27773] ? kvmalloc_node+0x211/0x320 [ 1155.803680][T27773] kvmalloc_node+0x211/0x320 [ 1155.808308][T27773] ? vm_mmap+0xb0/0xb0 [ 1155.812409][T27773] ? __kasan_check_write+0x14/0x20 [ 1155.817553][T27773] ? _copy_from_user+0x95/0xd0 [ 1155.822353][T27773] map_update_elem+0x53e/0x780 [ 1155.827157][T27773] __sys_bpf+0x456/0x7d0 [ 1155.831429][T27773] ? bpf_link_show_fdinfo+0x330/0x330 [ 1155.836855][T27773] ? debug_smp_processor_id+0x17/0x20 [ 1155.842258][T27773] __x64_sys_bpf+0x7c/0x90 [ 1155.846704][T27773] x64_sys_call+0x4b9/0x9a0 [ 1155.851257][T27773] do_syscall_64+0x4c/0xa0 [ 1155.855704][T27773] ? clear_bhb_loop+0x50/0xa0 [ 1155.860408][T27773] ? clear_bhb_loop+0x50/0xa0 [ 1155.865113][T27773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1155.871038][T27773] RIP: 0033:0x7f8d46772b19 [ 1155.875479][T27773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.895229][T27773] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1155.903675][T27773] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1155.911672][T27773] RDX: 0000000000000020 RSI: 0000200000000940 RDI: 0000000000000002 [ 1155.919763][T27773] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.927754][T27773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.935742][T27773] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1155.943752][T27773] [ 1157.197639][T27849] FAULT_INJECTION: forcing a failure. [ 1157.197639][T27849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.211010][T27849] CPU: 0 PID: 27849 Comm: syz.2.9537 Tainted: G W syzkaller #0 [ 1157.219910][T27849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1157.230011][T27849] Call Trace: [ 1157.233313][T27849] [ 1157.236260][T27849] __dump_stack+0x21/0x30 [ 1157.240624][T27849] dump_stack_lvl+0x110/0x170 [ 1157.245320][T27849] ? show_regs_print_info+0x20/0x20 [ 1157.250546][T27849] dump_stack+0x15/0x20 [ 1157.254730][T27849] should_fail+0x3ab/0x500 [ 1157.259217][T27849] should_fail_usercopy+0x1a/0x20 [ 1157.264274][T27849] _copy_to_user+0x20/0x90 [ 1157.268708][T27849] simple_read_from_buffer+0xe9/0x160 [ 1157.274111][T27849] proc_fail_nth_read+0x1a6/0x220 [ 1157.279182][T27849] ? proc_fault_inject_write+0x310/0x310 [ 1157.284833][T27849] ? security_file_permission+0x83/0xa0 [ 1157.290393][T27849] ? proc_fault_inject_write+0x310/0x310 [ 1157.296077][T27849] vfs_read+0x28c/0xc20 [ 1157.300251][T27849] ? kernel_read+0x1f0/0x1f0 [ 1157.304853][T27849] ? __kasan_check_write+0x14/0x20 [ 1157.309976][T27849] ? mutex_lock+0x9b/0x1c0 [ 1157.314430][T27849] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1157.321033][T27849] ? __fget_files+0x2e1/0x340 [ 1157.325726][T27849] ? __fdget_pos+0x2d2/0x380 [ 1157.330325][T27849] ? ksys_read+0x70/0x260 [ 1157.334673][T27849] ksys_read+0x14a/0x260 [ 1157.339033][T27849] ? vfs_write+0xfd0/0xfd0 [ 1157.343476][T27849] ? debug_smp_processor_id+0x17/0x20 [ 1157.348864][T27849] __x64_sys_read+0x7b/0x90 [ 1157.353378][T27849] x64_sys_call+0x96d/0x9a0 [ 1157.357894][T27849] do_syscall_64+0x4c/0xa0 [ 1157.362327][T27849] ? clear_bhb_loop+0x50/0xa0 [ 1157.367110][T27849] ? clear_bhb_loop+0x50/0xa0 [ 1157.371799][T27849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1157.377702][T27849] RIP: 0033:0x7f3ccc63e34e [ 1157.382127][T27849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1157.401831][T27849] RSP: 002b:00007f3ccb0d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1157.410259][T27849] RAX: ffffffffffffffda RBX: 00007f3ccb0d56c0 RCX: 00007f3ccc63e34e [ 1157.418247][T27849] RDX: 000000000000000f RSI: 00007f3ccb0d50a0 RDI: 0000000000000003 [ 1157.426320][T27849] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.434305][T27849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.442284][T27849] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1157.450275][T27849] [ 1158.072576][T27895] device syzkaller0 entered promiscuous mode [ 1158.579253][T27918] device syzkaller0 entered promiscuous mode [ 1159.884826][T27939] device syzkaller0 entered promiscuous mode [ 1160.153660][T27955] device syzkaller0 entered promiscuous mode [ 1160.225522][T27955] FAULT_INJECTION: forcing a failure. [ 1160.225522][T27955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1160.276262][T27955] CPU: 1 PID: 27955 Comm: syz.2.9577 Tainted: G W syzkaller #0 [ 1160.285197][T27955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1160.295283][T27955] Call Trace: [ 1160.298582][T27955] [ 1160.301539][T27955] __dump_stack+0x21/0x30 [ 1160.305901][T27955] dump_stack_lvl+0x110/0x170 [ 1160.310605][T27955] ? show_regs_print_info+0x20/0x20 [ 1160.315829][T27955] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1160.321403][T27955] ? __alloc_skb+0x210/0x730 [ 1160.326023][T27955] dump_stack+0x15/0x20 [ 1160.330214][T27955] should_fail+0x3ab/0x500 [ 1160.334661][T27955] should_fail_alloc_page+0x55/0x80 [ 1160.339887][T27955] prepare_alloc_pages+0x13f/0x590 [ 1160.345041][T27955] ? __alloc_pages_bulk+0xab0/0xab0 [ 1160.350270][T27955] __alloc_pages+0x11d/0x460 [ 1160.354887][T27955] ? zone_watermark_fast+0x250/0x250 [ 1160.360286][T27955] ? __alloc_skb+0x459/0x730 [ 1160.364903][T27955] alloc_skb_with_frags+0x20c/0x620 [ 1160.370129][T27955] sock_alloc_send_pskb+0x87f/0x9a0 [ 1160.375362][T27955] ? sock_kzfree_s+0x60/0x60 [ 1160.379973][T27955] ? iov_iter_advance+0x1f9/0x360 [ 1160.385047][T27955] tun_get_user+0xaab/0x33e0 [ 1160.389657][T27955] ? do_sys_openat2+0x6df/0x7f0 [ 1160.394534][T27955] ? __x64_sys_openat+0x136/0x160 [ 1160.399578][T27955] ? x64_sys_call+0x219/0x9a0 [ 1160.404275][T27955] ? msr_save_cpuid_features+0xb0/0xd0 [ 1160.409786][T27955] ? tun_do_read+0x1d70/0x1d70 [ 1160.414577][T27955] ? kstrtouint_from_user+0x1c4/0x220 [ 1160.419996][T27955] ? kstrtol_from_user+0x2a0/0x2a0 [ 1160.425138][T27955] ? avc_policy_seqno+0x1b/0x70 [ 1160.430023][T27955] ? selinux_file_permission+0x2aa/0x510 [ 1160.435682][T27955] tun_chr_write_iter+0x1ed/0x2f0 [ 1160.440740][T27955] vfs_write+0x831/0xfd0 [ 1160.445008][T27955] ? file_end_write+0x1b0/0x1b0 [ 1160.449888][T27955] ? __fget_files+0x2e1/0x340 [ 1160.454608][T27955] ? __fdget_pos+0x1f7/0x380 [ 1160.459218][T27955] ? ksys_write+0x70/0x260 [ 1160.463658][T27955] ksys_write+0x14a/0x260 [ 1160.468006][T27955] ? __ia32_sys_read+0x90/0x90 [ 1160.472790][T27955] ? debug_smp_processor_id+0x17/0x20 [ 1160.478196][T27955] __x64_sys_write+0x7b/0x90 [ 1160.482806][T27955] x64_sys_call+0x8ef/0x9a0 [ 1160.487347][T27955] do_syscall_64+0x4c/0xa0 [ 1160.491797][T27955] ? clear_bhb_loop+0x50/0xa0 [ 1160.496501][T27955] ? clear_bhb_loop+0x50/0xa0 [ 1160.501207][T27955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1160.507126][T27955] RIP: 0033:0x7f3ccc67db19 [ 1160.511572][T27955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.531195][T27955] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1160.539636][T27955] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1160.547648][T27955] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000009 [ 1160.555644][T27955] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.563637][T27955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.571627][T27955] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1160.579624][T27955] [ 1161.338080][T27984] device syzkaller0 entered promiscuous mode [ 1161.567787][T27997] FAULT_INJECTION: forcing a failure. [ 1161.567787][T27997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.623191][T27997] CPU: 0 PID: 27997 Comm: syz.4.9590 Tainted: G W syzkaller #0 [ 1161.632109][T27997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1161.642212][T27997] Call Trace: [ 1161.645538][T27997] [ 1161.648523][T27997] __dump_stack+0x21/0x30 [ 1161.652891][T27997] dump_stack_lvl+0x110/0x170 [ 1161.657592][T27997] ? show_regs_print_info+0x20/0x20 [ 1161.662841][T27997] ? vfs_write+0xc72/0xfd0 [ 1161.667291][T27997] dump_stack+0x15/0x20 [ 1161.671468][T27997] should_fail+0x3ab/0x500 [ 1161.675920][T27997] should_fail_usercopy+0x1a/0x20 [ 1161.680973][T27997] _copy_from_user+0x20/0xd0 [ 1161.685589][T27997] __sys_bpf+0x258/0x7d0 [ 1161.689905][T27997] ? bpf_link_show_fdinfo+0x330/0x330 [ 1161.695317][T27997] ? debug_smp_processor_id+0x17/0x20 [ 1161.700718][T27997] __x64_sys_bpf+0x7c/0x90 [ 1161.705165][T27997] x64_sys_call+0x4b9/0x9a0 [ 1161.709724][T27997] do_syscall_64+0x4c/0xa0 [ 1161.714168][T27997] ? clear_bhb_loop+0x50/0xa0 [ 1161.718874][T27997] ? clear_bhb_loop+0x50/0xa0 [ 1161.723586][T27997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1161.729525][T27997] RIP: 0033:0x7f6c93acdb19 [ 1161.733960][T27997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.753617][T27997] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.762246][T27997] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1161.770252][T27997] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 1800000000000000 [ 1161.778246][T27997] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.786259][T27997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.794269][T27997] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1161.802273][T27997] [ 1163.933516][T28078] FAULT_INJECTION: forcing a failure. [ 1163.933516][T28078] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.970415][T28078] CPU: 1 PID: 28078 Comm: syz.4.9619 Tainted: G W syzkaller #0 [ 1163.979346][T28078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1163.989431][T28078] Call Trace: [ 1163.992736][T28078] [ 1163.995690][T28078] __dump_stack+0x21/0x30 [ 1164.000063][T28078] dump_stack_lvl+0x110/0x170 [ 1164.004798][T28078] ? show_regs_print_info+0x20/0x20 [ 1164.010049][T28078] ? __kasan_slab_free+0x11/0x20 [ 1164.015013][T28078] ? slab_free_freelist_hook+0xc2/0x190 [ 1164.020589][T28078] dump_stack+0x15/0x20 [ 1164.024777][T28078] should_fail+0x3ab/0x500 [ 1164.029224][T28078] ? dev_uevent_filter+0xb0/0xb0 [ 1164.034234][T28078] __should_failslab+0xa4/0xe0 [ 1164.039130][T28078] should_failslab+0x9/0x20 [ 1164.043656][T28078] slab_pre_alloc_hook+0x39/0xd0 [ 1164.048643][T28078] ? dev_uevent_filter+0xb0/0xb0 [ 1164.053609][T28078] kmem_cache_alloc_trace+0x48/0x270 [ 1164.058922][T28078] ? kobject_uevent_env+0x271/0x700 [ 1164.064149][T28078] ? __mutex_lock_slowpath+0x10/0x10 [ 1164.069462][T28078] ? dev_uevent_filter+0xb0/0xb0 [ 1164.074427][T28078] kobject_uevent_env+0x271/0x700 [ 1164.079495][T28078] kobject_uevent+0x1d/0x30 [ 1164.084042][T28078] device_del+0xcb3/0xe20 [ 1164.088405][T28078] ? __kasan_check_write+0x14/0x20 [ 1164.093549][T28078] ? kill_device+0xd0/0xd0 [ 1164.097991][T28078] ? dynamic_kobj_release+0x20/0x20 [ 1164.103218][T28078] ? pm_runtime_set_memalloc_noio+0x20d/0x260 [ 1164.109308][T28078] netdev_unregister_kobject+0x17b/0x260 [ 1164.114980][T28078] unregister_netdevice_many+0x14e4/0x1a00 [ 1164.120812][T28078] ? alloc_netdev_mqs+0xe20/0xe20 [ 1164.125866][T28078] ? x64_sys_call+0x14e/0x9a0 [ 1164.130585][T28078] ? __kasan_check_read+0x11/0x20 [ 1164.135639][T28078] unregister_netdevice_queue+0x2e1/0x320 [ 1164.141392][T28078] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1164.148020][T28078] ? list_netdevice+0x4c0/0x4c0 [ 1164.152904][T28078] ppp_release+0xef/0x1f0 [ 1164.157267][T28078] ? ppp_open+0x70/0x70 [ 1164.161449][T28078] __fput+0x22b/0x900 [ 1164.165463][T28078] ____fput+0x15/0x20 [ 1164.169468][T28078] task_work_run+0x127/0x190 [ 1164.174098][T28078] exit_to_user_mode_loop+0xd0/0xe0 [ 1164.179336][T28078] exit_to_user_mode_prepare+0x87/0xd0 [ 1164.184826][T28078] syscall_exit_to_user_mode+0x1a/0x30 [ 1164.190309][T28078] do_syscall_64+0x58/0xa0 [ 1164.194773][T28078] ? clear_bhb_loop+0x50/0xa0 [ 1164.199476][T28078] ? clear_bhb_loop+0x50/0xa0 [ 1164.204186][T28078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1164.210114][T28078] RIP: 0033:0x7f6c93acdb19 [ 1164.214557][T28078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.234187][T28078] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1164.242662][T28078] RAX: 0000000000000000 RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1164.250663][T28078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1164.258659][T28078] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.266655][T28078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.274670][T28078] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1164.282676][T28078] [ 1164.573595][T28105] device syzkaller0 entered promiscuous mode [ 1165.479461][T28128] device syzkaller0 entered promiscuous mode [ 1167.164352][T28201] FAULT_INJECTION: forcing a failure. [ 1167.164352][T28201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.288033][T28201] CPU: 0 PID: 28201 Comm: syz.4.9658 Tainted: G W syzkaller #0 [ 1167.296958][T28201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1167.307128][T28201] Call Trace: [ 1167.310424][T28201] [ 1167.313377][T28201] __dump_stack+0x21/0x30 [ 1167.317735][T28201] dump_stack_lvl+0x110/0x170 [ 1167.322430][T28201] ? show_regs_print_info+0x20/0x20 [ 1167.327648][T28201] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 1167.333040][T28201] dump_stack+0x15/0x20 [ 1167.337220][T28201] should_fail+0x3ab/0x500 [ 1167.341663][T28201] should_fail_usercopy+0x1a/0x20 [ 1167.346716][T28201] _copy_from_user+0x20/0xd0 [ 1167.351331][T28201] tipc_setsockopt+0x355/0x960 [ 1167.356146][T28201] ? tipc_shutdown+0x3f0/0x3f0 [ 1167.360971][T28201] ? security_socket_setsockopt+0x82/0xa0 [ 1167.366724][T28201] ? tipc_shutdown+0x3f0/0x3f0 [ 1167.371515][T28201] __sys_setsockopt+0x2e9/0x470 [ 1167.376399][T28201] ? __kasan_check_write+0x14/0x20 [ 1167.381561][T28201] ? __ia32_sys_recv+0xb0/0xb0 [ 1167.386371][T28201] ? ksys_write+0x1fa/0x260 [ 1167.390908][T28201] ? __ia32_sys_read+0x90/0x90 [ 1167.395707][T28201] __x64_sys_setsockopt+0xbf/0xd0 [ 1167.400792][T28201] x64_sys_call+0x982/0x9a0 [ 1167.405325][T28201] do_syscall_64+0x4c/0xa0 [ 1167.409800][T28201] ? clear_bhb_loop+0x50/0xa0 [ 1167.414680][T28201] ? clear_bhb_loop+0x50/0xa0 [ 1167.419408][T28201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1167.425328][T28201] RIP: 0033:0x7f6c93acdb19 [ 1167.429772][T28201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.449530][T28201] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1167.458058][T28201] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1167.466053][T28201] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1167.474130][T28201] RBP: 00007f6c92525090 R08: 00000000000004bd R09: 0000000000000000 [ 1167.482124][T28201] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1167.490131][T28201] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1167.498135][T28201] [ 1167.662996][T28213] FAULT_INJECTION: forcing a failure. [ 1167.662996][T28213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.676433][T28213] CPU: 0 PID: 28213 Comm: syz.2.9662 Tainted: G W syzkaller #0 [ 1167.685328][T28213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1167.695417][T28213] Call Trace: [ 1167.698725][T28213] [ 1167.701674][T28213] __dump_stack+0x21/0x30 [ 1167.706032][T28213] dump_stack_lvl+0x110/0x170 [ 1167.710746][T28213] ? show_regs_print_info+0x20/0x20 [ 1167.715971][T28213] ? __kmalloc+0x13d/0x2c0 [ 1167.720430][T28213] ? kvmalloc_node+0x211/0x320 [ 1167.725224][T28213] dump_stack+0x15/0x20 [ 1167.729427][T28213] should_fail+0x3ab/0x500 [ 1167.733868][T28213] should_fail_usercopy+0x1a/0x20 [ 1167.738914][T28213] _copy_from_user+0x20/0xd0 [ 1167.743533][T28213] map_update_elem+0x5bb/0x780 [ 1167.748333][T28213] __sys_bpf+0x456/0x7d0 [ 1167.752596][T28213] ? bpf_link_show_fdinfo+0x330/0x330 [ 1167.757998][T28213] ? debug_smp_processor_id+0x17/0x20 [ 1167.763399][T28213] __x64_sys_bpf+0x7c/0x90 [ 1167.767847][T28213] x64_sys_call+0x4b9/0x9a0 [ 1167.772397][T28213] do_syscall_64+0x4c/0xa0 [ 1167.776848][T28213] ? clear_bhb_loop+0x50/0xa0 [ 1167.781553][T28213] ? clear_bhb_loop+0x50/0xa0 [ 1167.786271][T28213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1167.792193][T28213] RIP: 0033:0x7f3ccc67db19 [ 1167.796641][T28213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.816269][T28213] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1167.824727][T28213] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1167.832720][T28213] RDX: 0000000000000020 RSI: 0000200000000940 RDI: 0000000000000002 [ 1167.840709][T28213] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.848710][T28213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.856702][T28213] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1167.864707][T28213] [ 1168.822703][T28262] device syzkaller0 entered promiscuous mode [ 1170.208036][T28330] tun0: tun_chr_ioctl cmd 1074025675 [ 1170.213406][T28330] tun0: persist enabled [ 1170.227169][T28324] tun0: tun_chr_ioctl cmd 1074025675 [ 1170.233060][T28324] tun0: persist enabled [ 1170.632720][T28349] device syzkaller0 entered promiscuous mode [ 1172.856678][T28392] device syzkaller0 entered promiscuous mode [ 1173.066018][T28397] device syzkaller0 entered promiscuous mode [ 1173.849690][T28419] device bond_slave_1 entered promiscuous mode [ 1173.888456][T22902] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1173.908547][T22902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1176.257162][T28507] device syzkaller0 entered promiscuous mode [ 1177.071849][T28524] device syzkaller0 entered promiscuous mode [ 1177.554840][T28547] device syzkaller0 entered promiscuous mode [ 1177.911015][T28563] FAULT_INJECTION: forcing a failure. [ 1177.911015][T28563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1177.967922][T28563] CPU: 1 PID: 28563 Comm: syz.2.9791 Tainted: G W syzkaller #0 [ 1177.976840][T28563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1177.986922][T28563] Call Trace: [ 1177.990227][T28563] [ 1177.993185][T28563] __dump_stack+0x21/0x30 [ 1177.997553][T28563] dump_stack_lvl+0x110/0x170 [ 1178.002280][T28563] ? show_regs_print_info+0x20/0x20 [ 1178.007512][T28563] ? get_page_from_freelist+0x2d42/0x2dd0 [ 1178.013444][T28563] dump_stack+0x15/0x20 [ 1178.017649][T28563] should_fail+0x3ab/0x500 [ 1178.022108][T28563] should_fail_alloc_page+0x55/0x80 [ 1178.027343][T28563] prepare_alloc_pages+0x13f/0x590 [ 1178.032493][T28563] ? __alloc_pages_bulk+0xab0/0xab0 [ 1178.037805][T28563] ? _find_next_bit+0x1fa/0x200 [ 1178.042689][T28563] __alloc_pages+0x11d/0x460 [ 1178.047317][T28563] ? zone_watermark_fast+0x250/0x250 [ 1178.052630][T28563] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 1178.058818][T28563] pcpu_populate_chunk+0x184/0xcb0 [ 1178.063980][T28563] ? _find_next_bit+0x106/0x200 [ 1178.068867][T28563] pcpu_alloc+0xc8c/0x16f0 [ 1178.073322][T28563] __alloc_percpu_gfp+0x25/0x30 [ 1178.078216][T28563] bpf_map_alloc_percpu+0xc5/0x150 [ 1178.083359][T28563] htab_map_alloc+0xc32/0x15d0 [ 1178.088178][T28563] map_create+0x3f4/0x1fa0 [ 1178.092625][T28563] __sys_bpf+0x2ff/0x7d0 [ 1178.096898][T28563] ? bpf_link_show_fdinfo+0x330/0x330 [ 1178.102301][T28563] ? debug_smp_processor_id+0x17/0x20 [ 1178.107720][T28563] __x64_sys_bpf+0x7c/0x90 [ 1178.112163][T28563] x64_sys_call+0x4b9/0x9a0 [ 1178.116700][T28563] do_syscall_64+0x4c/0xa0 [ 1178.121143][T28563] ? clear_bhb_loop+0x50/0xa0 [ 1178.125851][T28563] ? clear_bhb_loop+0x50/0xa0 [ 1178.130556][T28563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1178.136481][T28563] RIP: 0033:0x7f3ccc67db19 [ 1178.140927][T28563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.160567][T28563] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.169006][T28563] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1178.177006][T28563] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 1800000000000000 [ 1178.185010][T28563] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.193007][T28563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.201002][T28563] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1178.209011][T28563] [ 1179.069244][T28605] device syzkaller0 entered promiscuous mode [ 1179.362417][T28635] device syzkaller0 entered promiscuous mode [ 1179.380532][T28635] FAULT_INJECTION: forcing a failure. [ 1179.380532][T28635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1179.406248][T28635] CPU: 1 PID: 28635 Comm: syz.1.9817 Tainted: G W syzkaller #0 [ 1179.415160][T28635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1179.425249][T28635] Call Trace: [ 1179.428559][T28635] [ 1179.431518][T28635] __dump_stack+0x21/0x30 [ 1179.435883][T28635] dump_stack_lvl+0x110/0x170 [ 1179.440589][T28635] ? show_regs_print_info+0x20/0x20 [ 1179.445804][T28635] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1179.451368][T28635] ? __alloc_skb+0x210/0x730 [ 1179.455994][T28635] dump_stack+0x15/0x20 [ 1179.460168][T28635] should_fail+0x3ab/0x500 [ 1179.464602][T28635] should_fail_alloc_page+0x55/0x80 [ 1179.469820][T28635] prepare_alloc_pages+0x13f/0x590 [ 1179.474953][T28635] ? __alloc_pages_bulk+0xab0/0xab0 [ 1179.480169][T28635] __alloc_pages+0x11d/0x460 [ 1179.484774][T28635] ? zone_watermark_fast+0x250/0x250 [ 1179.490081][T28635] ? __alloc_skb+0x459/0x730 [ 1179.494689][T28635] alloc_skb_with_frags+0x20c/0x620 [ 1179.499908][T28635] sock_alloc_send_pskb+0x87f/0x9a0 [ 1179.505127][T28635] ? sock_kzfree_s+0x60/0x60 [ 1179.509745][T28635] ? iov_iter_advance+0x1f9/0x360 [ 1179.514792][T28635] tun_get_user+0xaab/0x33e0 [ 1179.519398][T28635] ? do_sys_openat2+0x6df/0x7f0 [ 1179.524259][T28635] ? __x64_sys_openat+0x136/0x160 [ 1179.529295][T28635] ? x64_sys_call+0x219/0x9a0 [ 1179.533982][T28635] ? msr_save_cpuid_features+0xb0/0xd0 [ 1179.539462][T28635] ? tun_do_read+0x1d70/0x1d70 [ 1179.544244][T28635] ? kstrtouint_from_user+0x1c4/0x220 [ 1179.549636][T28635] ? kstrtol_from_user+0x2a0/0x2a0 [ 1179.554761][T28635] ? avc_policy_seqno+0x1b/0x70 [ 1179.559626][T28635] ? selinux_file_permission+0x2aa/0x510 [ 1179.565296][T28635] tun_chr_write_iter+0x1ed/0x2f0 [ 1179.570338][T28635] vfs_write+0x831/0xfd0 [ 1179.574596][T28635] ? file_end_write+0x1b0/0x1b0 [ 1179.579468][T28635] ? __fget_files+0x2e1/0x340 [ 1179.584161][T28635] ? __fdget_pos+0x1f7/0x380 [ 1179.588761][T28635] ? ksys_write+0x70/0x260 [ 1179.593208][T28635] ksys_write+0x14a/0x260 [ 1179.597549][T28635] ? __ia32_sys_read+0x90/0x90 [ 1179.602329][T28635] ? debug_smp_processor_id+0x17/0x20 [ 1179.607737][T28635] __x64_sys_write+0x7b/0x90 [ 1179.612340][T28635] x64_sys_call+0x8ef/0x9a0 [ 1179.616859][T28635] do_syscall_64+0x4c/0xa0 [ 1179.621289][T28635] ? clear_bhb_loop+0x50/0xa0 [ 1179.625984][T28635] ? clear_bhb_loop+0x50/0xa0 [ 1179.630684][T28635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1179.636607][T28635] RIP: 0033:0x7fa9f36b0b19 [ 1179.641046][T28635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.660865][T28635] RSP: 002b:00007fa9f2108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1179.669440][T28635] RAX: ffffffffffffffda RBX: 00007fa9f3936fa0 RCX: 00007fa9f36b0b19 [ 1179.677431][T28635] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1179.685434][T28635] RBP: 00007fa9f2108090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.693421][T28635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.701407][T28635] R13: 00007fa9f3937038 R14: 00007fa9f3936fa0 R15: 00007fffeeb4a638 [ 1179.709396][T28635] [ 1183.324830][T28698] device syzkaller0 entered promiscuous mode [ 1183.523338][T28700] device syzkaller0 entered promiscuous mode [ 1185.575810][T28776] FAULT_INJECTION: forcing a failure. [ 1185.575810][T28776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.755565][T28776] CPU: 1 PID: 28776 Comm: syz.1.9861 Tainted: G W syzkaller #0 [ 1185.764513][T28776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1185.774740][T28776] Call Trace: [ 1185.778154][T28776] [ 1185.781107][T28776] __dump_stack+0x21/0x30 [ 1185.785467][T28776] dump_stack_lvl+0x110/0x170 [ 1185.790179][T28776] ? show_regs_print_info+0x20/0x20 [ 1185.795403][T28776] dump_stack+0x15/0x20 [ 1185.799589][T28776] should_fail+0x3ab/0x500 [ 1185.804036][T28776] should_fail_usercopy+0x1a/0x20 [ 1185.809097][T28776] _copy_to_user+0x20/0x90 [ 1185.813549][T28776] simple_read_from_buffer+0xe9/0x160 [ 1185.818951][T28776] proc_fail_nth_read+0x1a6/0x220 [ 1185.824011][T28776] ? proc_fault_inject_write+0x310/0x310 [ 1185.829674][T28776] ? security_file_permission+0x83/0xa0 [ 1185.835245][T28776] ? proc_fault_inject_write+0x310/0x310 [ 1185.840912][T28776] vfs_read+0x28c/0xc20 [ 1185.845100][T28776] ? kernel_read+0x1f0/0x1f0 [ 1185.849798][T28776] ? __kasan_check_write+0x14/0x20 [ 1185.854926][T28776] ? mutex_lock+0x9b/0x1c0 [ 1185.859359][T28776] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1185.865976][T28776] ? __fget_files+0x2e1/0x340 [ 1185.870682][T28776] ? __fdget_pos+0x2d2/0x380 [ 1185.875279][T28776] ? ksys_read+0x70/0x260 [ 1185.879624][T28776] ksys_read+0x14a/0x260 [ 1185.883971][T28776] ? vfs_write+0xfd0/0xfd0 [ 1185.888422][T28776] ? debug_smp_processor_id+0x17/0x20 [ 1185.893811][T28776] ? perf_trace_sys_enter+0x30/0x150 [ 1185.899117][T28776] __x64_sys_read+0x7b/0x90 [ 1185.903653][T28776] x64_sys_call+0x96d/0x9a0 [ 1185.908175][T28776] do_syscall_64+0x4c/0xa0 [ 1185.912628][T28776] ? clear_bhb_loop+0x50/0xa0 [ 1185.917319][T28776] ? clear_bhb_loop+0x50/0xa0 [ 1185.922013][T28776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1185.927939][T28776] RIP: 0033:0x7fa9f367134e [ 1185.932364][T28776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.951985][T28776] RSP: 002b:00007fa9f2107fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1185.960413][T28776] RAX: ffffffffffffffda RBX: 00007fa9f21086c0 RCX: 00007fa9f367134e [ 1185.968407][T28776] RDX: 000000000000000f RSI: 00007fa9f21080a0 RDI: 0000000000000004 [ 1185.976397][T28776] RBP: 00007fa9f2108090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.984388][T28776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.992375][T28776] R13: 00007fa9f3937038 R14: 00007fa9f3936fa0 R15: 00007fffeeb4a638 [ 1186.000371][T28776] [ 1186.744787][T28787] FAULT_INJECTION: forcing a failure. [ 1186.744787][T28787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.801025][T28787] CPU: 1 PID: 28787 Comm: syz.2.9865 Tainted: G W syzkaller #0 [ 1186.809974][T28787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1186.820052][T28787] Call Trace: [ 1186.823626][T28787] [ 1186.826673][T28787] __dump_stack+0x21/0x30 [ 1186.831057][T28787] dump_stack_lvl+0x110/0x170 [ 1186.835759][T28787] ? show_regs_print_info+0x20/0x20 [ 1186.840991][T28787] dump_stack+0x15/0x20 [ 1186.845167][T28787] should_fail+0x3ab/0x500 [ 1186.849613][T28787] should_fail_usercopy+0x1a/0x20 [ 1186.854667][T28787] _copy_from_user+0x20/0xd0 [ 1186.859289][T28787] sock_do_ioctl+0x188/0x310 [ 1186.863920][T28787] ? sock_show_fdinfo+0xa0/0xa0 [ 1186.868801][T28787] ? __hrtimer_run_queues+0x82e/0x890 [ 1186.874215][T28787] ? selinux_file_ioctl+0x3ad/0x4c0 [ 1186.879448][T28787] sock_ioctl+0x459/0x6d0 [ 1186.883805][T28787] ? sock_poll+0x3f0/0x3f0 [ 1186.888240][T28787] ? __fget_files+0x2e1/0x340 [ 1186.890550][T28791] device syzkaller0 entered promiscuous mode [ 1186.892942][T28787] ? security_file_ioctl+0x84/0xa0 [ 1186.904153][T28787] ? sock_poll+0x3f0/0x3f0 [ 1186.908626][T28787] __se_sys_ioctl+0x121/0x1a0 [ 1186.913332][T28787] __x64_sys_ioctl+0x7b/0x90 [ 1186.917971][T28787] x64_sys_call+0x2f/0x9a0 [ 1186.922408][T28787] do_syscall_64+0x4c/0xa0 [ 1186.926840][T28787] ? clear_bhb_loop+0x50/0xa0 [ 1186.931530][T28787] ? clear_bhb_loop+0x50/0xa0 [ 1186.936226][T28787] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1186.942141][T28787] RIP: 0033:0x7f3ccc67db19 [ 1186.946580][T28787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.966293][T28787] RSP: 002b:00007f3ccb0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.974743][T28787] RAX: ffffffffffffffda RBX: 00007f3ccc903fa0 RCX: 00007f3ccc67db19 [ 1186.982768][T28787] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000009 [ 1186.990767][T28787] RBP: 00007f3ccb0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.998776][T28787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.006766][T28787] R13: 00007f3ccc904038 R14: 00007f3ccc903fa0 R15: 00007ffe49fae608 [ 1187.014776][T28787] [ 1187.331050][T28806] device syzkaller0 entered promiscuous mode [ 1189.275393][T28817] device sit0 left promiscuous mode [ 1189.386717][T28814] device sit0 entered promiscuous mode [ 1189.643689][T28832] device syzkaller0 entered promiscuous mode [ 1190.648145][T28846] device syzkaller0 entered promiscuous mode [ 1190.715608][ T30] audit: type=1400 audit(1793808027.390:158): avc: denied { ioctl } for pid=28853 comm="syz.0.9889" path="mnt:[4026532296]" dev="nsfs" ino=4026532296 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1190.840927][T28863] device syzkaller0 entered promiscuous mode [ 1191.050144][T28880] device syzkaller0 entered promiscuous mode [ 1191.478537][T28912] device syzkaller0 entered promiscuous mode [ 1192.832628][T28945] device syzkaller0 entered promiscuous mode [ 1196.428864][T29002] device syzkaller0 entered promiscuous mode [ 1196.628203][T29015] device bond_slave_1 entered promiscuous mode [ 1196.666861][T22902] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1196.692926][T22902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1197.283935][T29037] device syzkaller0 entered promiscuous mode [ 1197.632010][T29050] device syzkaller0 entered promiscuous mode [ 1197.763352][T29052] device syzkaller0 entered promiscuous mode [ 1197.937917][T29066] device syzkaller0 entered promiscuous mode [ 1197.976797][T29052] device syzkaller0 entered promiscuous mode [ 1198.010641][T29072] FAULT_INJECTION: forcing a failure. [ 1198.010641][T29072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1198.056863][T29072] CPU: 1 PID: 29072 Comm: syz.2.9965 Tainted: G W syzkaller #0 [ 1198.065788][T29072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1198.075963][T29072] Call Trace: [ 1198.079266][T29072] [ 1198.082230][T29072] __dump_stack+0x21/0x30 [ 1198.086609][T29072] dump_stack_lvl+0x110/0x170 [ 1198.091324][T29072] ? show_regs_print_info+0x20/0x20 [ 1198.096550][T29072] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1198.102154][T29072] ? __alloc_skb+0x210/0x730 [ 1198.106770][T29072] dump_stack+0x15/0x20 [ 1198.110955][T29072] should_fail+0x3ab/0x500 [ 1198.115424][T29072] should_fail_alloc_page+0x55/0x80 [ 1198.120654][T29072] prepare_alloc_pages+0x13f/0x590 [ 1198.125802][T29072] ? __alloc_pages_bulk+0xab0/0xab0 [ 1198.131035][T29072] __alloc_pages+0x11d/0x460 [ 1198.135652][T29072] ? zone_watermark_fast+0x250/0x250 [ 1198.140971][T29072] ? __alloc_skb+0x459/0x730 [ 1198.145621][T29072] alloc_skb_with_frags+0x20c/0x620 [ 1198.150866][T29072] sock_alloc_send_pskb+0x87f/0x9a0 [ 1198.156119][T29072] ? sock_kzfree_s+0x60/0x60 [ 1198.160740][T29072] ? iov_iter_advance+0x1f9/0x360 [ 1198.165805][T29072] tun_get_user+0xaab/0x33e0 [ 1198.170432][T29072] ? do_sys_openat2+0x6df/0x7f0 [ 1198.175312][T29072] ? __x64_sys_openat+0x136/0x160 [ 1198.180367][T29072] ? x64_sys_call+0x219/0x9a0 [ 1198.185075][T29072] ? msr_save_cpuid_features+0xb0/0xd0 [ 1198.190573][T29072] ? tun_do_read+0x1d70/0x1d70 [ 1198.195375][T29072] ? kstrtouint_from_user+0x1c4/0x220 [ 1198.200801][T29072] ? kstrtol_from_user+0x2a0/0x2a0 [ 1198.205948][T29072] ? avc_policy_seqno+0x1b/0x70 [ 1198.210920][T29072] ? selinux_file_permission+0x2aa/0x510 [ 1198.216686][T29072] tun_chr_write_iter+0x1ed/0x2f0 [ 1198.221770][T29072] vfs_write+0x831/0xfd0 [ 1198.226047][T29072] ? file_end_write+0x1b0/0x1b0 [ 1198.230930][T29072] ? __fget_files+0x2e1/0x340 [ 1198.235635][T29072] ? __fdget_pos+0x1f7/0x380 [ 1198.240252][T29072] ? ksys_write+0x70/0x260 [ 1198.244695][T29072] ksys_write+0x14a/0x260 [ 1198.249052][T29072] ? __ia32_sys_read+0x90/0x90 [ 1198.253863][T29072] ? debug_smp_processor_id+0x17/0x20 [ 1198.259294][T29072] __x64_sys_write+0x7b/0x90 [ 1198.263938][T29072] x64_sys_call+0x8ef/0x9a0 [ 1198.268478][T29072] do_syscall_64+0x4c/0xa0 [ 1198.272932][T29072] ? clear_bhb_loop+0x50/0xa0 [ 1198.277664][T29072] ? clear_bhb_loop+0x50/0xa0 [ 1198.282368][T29072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1198.288292][T29072] RIP: 0033:0x7f3ccc67db19 [ 1198.292751][T29072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.312381][T29072] RSP: 002b:00007f3ccb0b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1198.320825][T29072] RAX: ffffffffffffffda RBX: 00007f3ccc904090 RCX: 00007f3ccc67db19 [ 1198.328831][T29072] RDX: 000000000000ffdd RSI: 0000200000000500 RDI: 0000000000000005 [ 1198.336834][T29072] RBP: 00007f3ccb0b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.344839][T29072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.352832][T29072] R13: 00007f3ccc904128 R14: 00007f3ccc904090 R15: 00007ffe49fae608 [ 1198.360839][T29072] [ 1198.462811][T29082] device syzkaller0 entered promiscuous mode [ 1198.484538][T29084] device syzkaller0 entered promiscuous mode [ 1198.931056][T29112] device syzkaller0 entered promiscuous mode [ 1200.676093][T29147] device syzkaller0 entered promiscuous mode [ 1201.447789][T29169] bridge0: port 4(ip6gretap0) entered disabled state [ 1201.455101][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.463313][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.607251][T29172] device syzkaller0 entered promiscuous mode [ 1201.629841][T29169] device ip6gretap0 left promiscuous mode [ 1201.636753][T29169] bridge0: port 4(ip6gretap0) entered disabled state [ 1201.650627][T29169] device vlan1 left promiscuous mode [ 1201.664173][T29169] bridge0: port 3(vlan1) entered disabled state [ 1201.687634][T29169] device bridge_slave_1 left promiscuous mode [ 1201.712317][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.738904][T29169] device bridge_slave_0 left promiscuous mode [ 1201.747166][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.036745][T29239] FAULT_INJECTION: forcing a failure. [ 1203.036745][T29239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.126702][T29239] CPU: 0 PID: 29239 Comm: syz.0.10025 Tainted: G W syzkaller #0 [ 1203.135795][T29239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1203.145985][T29239] Call Trace: [ 1203.149304][T29239] [ 1203.152282][T29239] __dump_stack+0x21/0x30 [ 1203.156654][T29239] dump_stack_lvl+0x110/0x170 [ 1203.161375][T29239] ? show_regs_print_info+0x20/0x20 [ 1203.166608][T29239] ? stack_trace_save+0xa6/0xf0 [ 1203.171499][T29239] ? __stack_depot_save+0x34/0x480 [ 1203.176636][T29239] ? path_openat+0x284f/0x2f80 [ 1203.181437][T29239] dump_stack+0x15/0x20 [ 1203.185622][T29239] should_fail+0x3ab/0x500 [ 1203.190071][T29239] should_fail_usercopy+0x1a/0x20 [ 1203.195131][T29239] _copy_from_user+0x20/0xd0 [ 1203.199747][T29239] __copy_msghdr_from_user+0xc9/0x630 [ 1203.205150][T29239] ? _kstrtoull+0x3bb/0x4c0 [ 1203.209687][T29239] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 1203.214998][T29239] ? kstrtouint_from_user+0x1c4/0x220 [ 1203.220406][T29239] ___sys_sendmsg+0x19a/0x2e0 [ 1203.225241][T29239] ? __sys_sendmsg+0x280/0x280 [ 1203.230043][T29239] ? __fdget+0x1a1/0x230 [ 1203.234308][T29239] __x64_sys_sendmsg+0x201/0x2d0 [ 1203.239446][T29239] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1203.244376][T29239] ? ksys_write+0x1fa/0x260 [ 1203.248946][T29239] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1203.255049][T29239] x64_sys_call+0x4b/0x9a0 [ 1203.259500][T29239] do_syscall_64+0x4c/0xa0 [ 1203.263954][T29239] ? clear_bhb_loop+0x50/0xa0 [ 1203.268664][T29239] ? clear_bhb_loop+0x50/0xa0 [ 1203.273401][T29239] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1203.279333][T29239] RIP: 0033:0x7f8d46772b19 [ 1203.283792][T29239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.303424][T29239] RSP: 002b:00007f8d451a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.311899][T29239] RAX: ffffffffffffffda RBX: 00007f8d469f9090 RCX: 00007f8d46772b19 [ 1203.320077][T29239] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000004 [ 1203.328084][T29239] RBP: 00007f8d451a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.336084][T29239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.344092][T29239] R13: 00007f8d469f9128 R14: 00007f8d469f9090 R15: 00007fffeaaf68e8 [ 1203.352098][T29239] [ 1204.184220][T29287] device sit0 left promiscuous mode [ 1204.756411][T29304] device sit0 entered promiscuous mode [ 1205.112280][ T30] audit: type=1400 audit(1793808041.790:159): avc: denied { create } for pid=29323 comm="syz.0.10050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1205.788449][T29356] device syzkaller0 entered promiscuous mode [ 1209.403101][T29368] device syzkaller0 entered promiscuous mode [ 1211.653465][T29421] device sit0 entered promiscuous mode [ 1212.242438][T29437] device sit0 left promiscuous mode [ 1212.714076][T29445] device sit0 entered promiscuous mode [ 1212.865692][T29459] device syzkaller0 entered promiscuous mode [ 1213.077178][T29472] device sit0 entered promiscuous mode [ 1213.365024][T29496] FAULT_INJECTION: forcing a failure. [ 1213.365024][T29496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1213.400536][T29496] CPU: 1 PID: 29496 Comm: syz.0.10105 Tainted: G W syzkaller #0 [ 1213.409535][T29496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1213.419618][T29496] Call Trace: [ 1213.422919][T29496] [ 1213.425867][T29496] __dump_stack+0x21/0x30 [ 1213.430232][T29496] dump_stack_lvl+0x110/0x170 [ 1213.434941][T29496] ? show_regs_print_info+0x20/0x20 [ 1213.440167][T29496] dump_stack+0x15/0x20 [ 1213.444348][T29496] should_fail+0x3ab/0x500 [ 1213.448798][T29496] should_fail_alloc_page+0x55/0x80 [ 1213.454022][T29496] prepare_alloc_pages+0x13f/0x590 [ 1213.459161][T29496] ? __alloc_pages_bulk+0xab0/0xab0 [ 1213.464399][T29496] ? _find_next_bit+0x1fa/0x200 [ 1213.469280][T29496] __alloc_pages+0x11d/0x460 [ 1213.473900][T29496] ? pcpu_block_refresh_hint+0x21d/0x320 [ 1213.479580][T29496] ? zone_watermark_fast+0x250/0x250 [ 1213.484888][T29496] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 1213.491001][T29496] pcpu_populate_chunk+0x184/0xcb0 [ 1213.496135][T29496] ? _find_next_bit+0x106/0x200 [ 1213.501012][T29496] pcpu_alloc+0xc8c/0x16f0 [ 1213.505465][T29496] __alloc_percpu_gfp+0x25/0x30 [ 1213.510344][T29496] bpf_map_alloc_percpu+0xc5/0x150 [ 1213.515485][T29496] htab_map_alloc+0xc32/0x15d0 [ 1213.520418][T29496] map_create+0x3f4/0x1fa0 [ 1213.524870][T29496] __sys_bpf+0x2ff/0x7d0 [ 1213.529133][T29496] ? bpf_link_show_fdinfo+0x330/0x330 [ 1213.534534][T29496] ? debug_smp_processor_id+0x17/0x20 [ 1213.539935][T29496] __x64_sys_bpf+0x7c/0x90 [ 1213.544376][T29496] x64_sys_call+0x4b9/0x9a0 [ 1213.548907][T29496] do_syscall_64+0x4c/0xa0 [ 1213.553365][T29496] ? clear_bhb_loop+0x50/0xa0 [ 1213.558068][T29496] ? clear_bhb_loop+0x50/0xa0 [ 1213.562776][T29496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1213.568691][T29496] RIP: 0033:0x7f8d46772b19 [ 1213.573137][T29496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.592773][T29496] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1213.601226][T29496] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1213.609227][T29496] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 1800000000000000 [ 1213.617227][T29496] RBP: 00007f8d451ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.625256][T29496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.633257][T29496] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1213.641265][T29496] [ 1214.041641][T29504] device macsec0 entered promiscuous mode [ 1214.256985][T29521] tap0: tun_chr_ioctl cmd 1074025677 [ 1214.286275][T29521] tap0: linktype set to 768 [ 1214.324698][T29519] device syzkaller0 entered promiscuous mode [ 1214.363926][T29519] FAULT_INJECTION: forcing a failure. [ 1214.363926][T29519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1214.419771][T29519] CPU: 1 PID: 29519 Comm: syz.4.10112 Tainted: G W syzkaller #0 [ 1214.428773][T29519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1214.438862][T29519] Call Trace: [ 1214.442177][T29519] [ 1214.445134][T29519] __dump_stack+0x21/0x30 [ 1214.449500][T29519] dump_stack_lvl+0x110/0x170 [ 1214.454205][T29519] ? show_regs_print_info+0x20/0x20 [ 1214.459432][T29519] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1214.465007][T29519] ? __alloc_skb+0x210/0x730 [ 1214.469621][T29519] dump_stack+0x15/0x20 [ 1214.473808][T29519] should_fail+0x3ab/0x500 [ 1214.478248][T29519] should_fail_alloc_page+0x55/0x80 [ 1214.483473][T29519] prepare_alloc_pages+0x13f/0x590 [ 1214.488615][T29519] ? __alloc_pages_bulk+0xab0/0xab0 [ 1214.493845][T29519] __alloc_pages+0x11d/0x460 [ 1214.498457][T29519] ? zone_watermark_fast+0x250/0x250 [ 1214.503772][T29519] ? __alloc_skb+0x459/0x730 [ 1214.508426][T29519] alloc_skb_with_frags+0x20c/0x620 [ 1214.513660][T29519] sock_alloc_send_pskb+0x87f/0x9a0 [ 1214.518898][T29519] ? sock_kzfree_s+0x60/0x60 [ 1214.523514][T29519] ? iov_iter_advance+0x1f9/0x360 [ 1214.528565][T29519] tun_get_user+0xaab/0x33e0 [ 1214.533200][T29519] ? do_sys_openat2+0x6df/0x7f0 [ 1214.538120][T29519] ? __x64_sys_openat+0x136/0x160 [ 1214.543170][T29519] ? x64_sys_call+0x219/0x9a0 [ 1214.547874][T29519] ? msr_save_cpuid_features+0xb0/0xd0 [ 1214.553366][T29519] ? tun_do_read+0x1d70/0x1d70 [ 1214.558159][T29519] ? kstrtouint_from_user+0x1c4/0x220 [ 1214.563562][T29519] ? kstrtol_from_user+0x2a0/0x2a0 [ 1214.568702][T29519] ? avc_policy_seqno+0x1b/0x70 [ 1214.573578][T29519] ? selinux_file_permission+0x2aa/0x510 [ 1214.579241][T29519] tun_chr_write_iter+0x1ed/0x2f0 [ 1214.584321][T29519] vfs_write+0x831/0xfd0 [ 1214.588591][T29519] ? file_end_write+0x1b0/0x1b0 [ 1214.593474][T29519] ? __fget_files+0x2e1/0x340 [ 1214.598275][T29519] ? __fdget_pos+0x1f7/0x380 [ 1214.602893][T29519] ? ksys_write+0x70/0x260 [ 1214.607340][T29519] ksys_write+0x14a/0x260 [ 1214.611698][T29519] ? __ia32_sys_read+0x90/0x90 [ 1214.616487][T29519] ? debug_smp_processor_id+0x17/0x20 [ 1214.621890][T29519] __x64_sys_write+0x7b/0x90 [ 1214.626517][T29519] x64_sys_call+0x8ef/0x9a0 [ 1214.631045][T29519] do_syscall_64+0x4c/0xa0 [ 1214.635492][T29519] ? clear_bhb_loop+0x50/0xa0 [ 1214.640205][T29519] ? clear_bhb_loop+0x50/0xa0 [ 1214.644917][T29519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1214.650841][T29519] RIP: 0033:0x7f6c93acdb19 [ 1214.655282][T29519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.674934][T29519] RSP: 002b:00007f6c92525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1214.683406][T29519] RAX: ffffffffffffffda RBX: 00007f6c93d53fa0 RCX: 00007f6c93acdb19 [ 1214.691428][T29519] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000009 [ 1214.699459][T29519] RBP: 00007f6c92525090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.707464][T29519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.715481][T29519] R13: 00007f6c93d54038 R14: 00007f6c93d53fa0 R15: 00007ffe018a4968 [ 1214.723488][T29519] [ 1216.557353][T29570] device sit0 left promiscuous mode [ 1216.741531][T29572] device sit0 entered promiscuous mode [ 1217.109055][ T30] audit: type=1400 audit(1793808053.790:160): avc: denied { create } for pid=29595 comm="syz.1.10141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1217.863608][T29591] general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] PREEMPT SMP KASAN [ 1217.875382][T29591] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 1217.883999][T29591] CPU: 0 PID: 29591 Comm: syz.0.10139 Tainted: G W syzkaller #0 [ 1217.893062][T29591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1217.903152][T29591] RIP: 0010:sk_psock_verdict_data_ready+0x143/0x1d0 [ 1217.909808][T29591] Code: 24 50 48 c7 44 24 48 01 00 00 00 43 80 3c 2e 00 74 08 4c 89 ff e8 dd 5e d0 fd 41 bc c0 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 be 5e d0 fd 48 8b 7c 24 18 48 8d [ 1217.929465][T29591] RSP: 0018:ffffc90001a8f7e0 EFLAGS: 00010206 [ 1217.935581][T29591] RAX: 0000000000000018 RBX: 1ffff92000351f00 RCX: 0000000000080000 [ 1217.943769][T29591] RDX: ffffc9000a011000 RSI: 000000000002b2cd RDI: 000000000002b2ce [ 1217.951776][T29591] RBP: ffffc90001a8f8b0 R08: ffffc90001a8f83f R09: ffffc90001a8f820 [ 1217.959785][T29591] R10: dffffc0000000000 R11: fffff52000351f08 R12: 00000000000000c0 [ 1217.967801][T29591] R13: dffffc0000000000 R14: 1ffff11022464804 R15: ffff888112324020 [ 1217.975818][T29591] FS: 00007f8d451ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1217.984789][T29591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.991409][T29591] CR2: 0000200000667000 CR3: 0000000149fcf000 CR4: 00000000003506b0 [ 1217.999426][T29591] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 1218.007471][T29591] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1218.015496][T29591] Call Trace: [ 1218.018805][T29591] [ 1218.021771][T29591] ? sk_psock_start_verdict+0xc0/0xc0 [ 1218.027228][T29591] ? _raw_spin_lock+0x94/0xf0 [ 1218.031980][T29591] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1218.037824][T29591] ? skb_queue_tail+0xcb/0xf0 [ 1218.042541][T29591] unix_stream_sendmsg+0x7d1/0xc90 [ 1218.047694][T29591] ? unix_stream_sendmsg+0x6f1/0xc90 [ 1218.053019][T29591] ? unix_show_fdinfo+0xa0/0xa0 [ 1218.057923][T29591] ? unix_show_fdinfo+0xa0/0xa0 [ 1218.062820][T29591] ? unix_show_fdinfo+0xa0/0xa0 [ 1218.067733][T29591] ____sys_sendmsg+0x5be/0x8f0 [ 1218.072539][T29591] ? __sys_sendmsg_sock+0x40/0x40 [ 1218.077596][T29591] ? import_iovec+0x7c/0xb0 [ 1218.082149][T29591] ___sys_sendmsg+0x236/0x2e0 [ 1218.086874][T29591] ? __sys_sendmsg+0x280/0x280 [ 1218.091686][T29591] ? __hrtimer_run_queues+0x82e/0x890 [ 1218.097108][T29591] ? __fdget+0x1a1/0x230 [ 1218.101392][T29591] __x64_sys_sendmsg+0x201/0x2d0 [ 1218.104982][T29614] device sit0 entered promiscuous mode [ 1218.106385][T29591] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1218.106415][T29591] ? __kasan_check_write+0x14/0x20 [ 1218.106442][T29591] ? switch_fpu_return+0x15d/0x2c0 [ 1218.106472][T29591] x64_sys_call+0x4b/0x9a0 [ 1218.106496][T29591] do_syscall_64+0x4c/0xa0 [ 1218.106520][T29591] ? clear_bhb_loop+0x50/0xa0 [ 1218.106544][T29591] ? clear_bhb_loop+0x50/0xa0 [ 1218.106569][T29591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1218.106596][T29591] RIP: 0033:0x7f8d46772b19 [ 1218.106617][T29591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.175329][T29591] RSP: 002b:00007f8d451ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.183763][T29591] RAX: ffffffffffffffda RBX: 00007f8d469f8fa0 RCX: 00007f8d46772b19 [ 1218.191750][T29591] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000004 [ 1218.199734][T29591] RBP: 00007f8d4680ab70 R08: 0000000000000000 R09: 0000000000000000 [ 1218.207720][T29591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.215703][T29591] R13: 00007f8d469f9038 R14: 00007f8d469f8fa0 R15: 00007fffeaaf68e8 [ 1218.223711][T29591] [ 1218.226773][T29591] Modules linked in: [ 1218.233033][ T30] audit: type=1400 audit(1793808054.910:161): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1218.255090][T29591] ---[ end trace d6a85919cf50b762 ]--- [ 1218.255110][T29591] RIP: 0010:sk_psock_verdict_data_ready+0x143/0x1d0 [ 1218.296215][ T30] audit: type=1400 audit(1793808054.910:162): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1218.346211][ T30] audit: type=1400 audit(1793808054.910:163): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1218.367708][T29591] Code: 24 50 48 c7 44 24 48 01 00 00 00 43 80 3c 2e 00 74 08 4c 89 ff e8 dd 5e d0 fd 41 bc c0 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 be 5e d0 fd 48 8b 7c 24 18 48 8d [ 1218.387675][T29591] RSP: 0018:ffffc90001a8f7e0 EFLAGS: 00010206 [ 1218.393828][T29591] RAX: 0000000000000018 RBX: 1ffff92000351f00 RCX: 0000000000080000 [ 1218.402093][T29591] RDX: ffffc9000a011000 RSI: 000000000002b2cd RDI: 000000000002b2ce [ 1218.410422][T29591] RBP: ffffc90001a8f8b0 R08: ffffc90001a8f83f R09: ffffc90001a8f820 [ 1218.418629][ T30] audit: type=1400 audit(1793808054.910:164): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1218.439385][T29591] R10: dffffc0000000000 R11: fffff52000351f08 R12: 00000000000000c0 [ 1218.447566][T29591] R13: dffffc0000000000 R14: 1ffff11022464804 R15: ffff888112324020 [ 1218.455652][ T30] audit: type=1400 audit(1793808054.910:165): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1218.517215][T29591] FS: 00007f8d451ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1218.544348][ T30] audit: type=1400 audit(1793808054.910:166): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1218.561221][T29591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1218.576449][T29591] CR2: 00007f6c920c2000 CR3: 0000000149fcf000 CR4: 00000000003506b0 [ 1218.584471][T29591] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 1218.592677][T29591] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1218.600869][T29591] Kernel panic - not syncing: Fatal exception [ 1218.602052][ T30] audit: type=1400 audit(1793808054.910:167): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1218.607306][T29591] Kernel Offset: disabled [ 1218.634114][T29591] Rebooting in 86400 seconds..