last executing test programs: 19.706938831s ago: executing program 1 (id=67): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000001fc0)=""/174, 0x2c, 0xae, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6}, 0x8) 16.276457246s ago: executing program 1 (id=67): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000001fc0)=""/174, 0x2c, 0xae, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6}, 0x8) 14.461594093s ago: executing program 2 (id=487): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r3], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x9, &(0x7f0000000580)=[0x0], 0x11b, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000)=r5) close(0x3) 14.271298089s ago: executing program 2 (id=494): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0xa}, 0x862c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020000}, 0x50) 14.205506169s ago: executing program 2 (id=501): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 12.184684506s ago: executing program 1 (id=67): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000001fc0)=""/174, 0x2c, 0xae, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6}, 0x8) 11.701706859s ago: executing program 2 (id=501): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 10.267058443s ago: executing program 4 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000d2ebb5fe4bfcaaa37fe30000000013108ad645294784c12654000000000000f409533398c77e2076dd561ad83f3098f2cae91f8111"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x10000, 0x6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001810000058379fe7e184d61fd667867298d208db20b6e7aee9bdf1617ab1cbcd3a9f003f6e039042c8cc362d6d3247718f324043c75423a06da758a52c80fd65210f24778ad892fe0d323f9c056f07b8645966cc60cceb3023f923af383efec909518b528de6938f5e42c7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000d2ebb5fe4bfcaaa37fe30000000013108ad645294784c12654000000000000f409533398c77e2076dd561ad83f3098f2cae91f8111"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x10000, 0x6}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001810000058379fe7e184d61fd667867298d208db20b6e7aee9bdf1617ab1cbcd3a9f003f6e039042c8cc362d6d3247718f324043c75423a06da758a52c80fd65210f24778ad892fe0d323f9c056f07b8645966cc60cceb3023f923af383efec909518b528de6938f5e42c7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) 8.389358319s ago: executing program 4 (id=544): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) close(r1) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1f}, 0x80da) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf4240, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf4240, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000040)) 8.263758756s ago: executing program 1 (id=67): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000001fc0)=""/174, 0x2c, 0xae, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6}, 0x8) 7.67392911s ago: executing program 2 (id=501): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 7.613453928s ago: executing program 4 (id=548): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000630104000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000250000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f00000003c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="181700000100000000000000040000009500000000000000"], &(0x7f0000001180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000000}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 6.838242408s ago: executing program 4 (id=553): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 6.426845129s ago: executing program 4 (id=554): r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x610000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'dummy0\x00', 0x8000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x9, 0x1, 0xfff9, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x0, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x3d, &(0x7f0000000340)=""/61, 0x41000, 0x7, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0x3, 0x1cd}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r2, r2, r2, r2], &(0x7f0000000540)=[{0x1, 0x4, 0x7, 0xb}, {0x1, 0x4, 0xc, 0x7}, {0x1, 0x4, 0x7, 0xb}, {0x5, 0x4, 0xb, 0xd}, {0x1, 0x3, 0x9, 0x3}, {0x4, 0x1, 0x6, 0xc}, {0x4, 0x3, 0xb}, {0x4, 0x3, 0x9, 0x2}]}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r8, r7, 0x6, 0x1c, 0x0, @void, @value=r1}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000700)='ns/mnt\x00') r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r10 = openat$cgroup_ro(r8, &(0x7f00000008c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, &(0x7f00000007c0), 0x41000, 0x3, '\x00', r5, @fallback=0x18, r9, 0x8, &(0x7f0000000840)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xc, 0xc20, 0x8}, 0x10, 0xffffffffffffffff, r7, 0x3, &(0x7f0000000900)=[r4, r10, r4, r4, r2, r4, r4, r2, r4, r2], &(0x7f0000000940)=[{0x2, 0x3, 0x10, 0x9}, {0x0, 0x3, 0x9, 0xb}, {0x4, 0x5, 0xd, 0x1}], 0x10, 0xb787de81}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ac0)=""/5, 0x5}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/248, 0xf8}, {&(0x7f0000000cc0)=""/246, 0xf6}], 0x5, &(0x7f0000000e40)=""/4096, 0x1000}, 0x40002101) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f00), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003080)={r9, 0x20, &(0x7f0000003040)={&(0x7f0000001fc0)=""/4096, 0x1000, 0x0, &(0x7f0000002fc0)=""/105, 0x69}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0xd, 0x2, &(0x7f0000001e80)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000001ec0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, r12, 0x8, &(0x7f0000001f40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001f80)={0x2, 0x8, 0xb, 0x5}, 0x10, r13, r11, 0x3, &(0x7f00000030c0)=[r4, r2], &(0x7f0000003100)=[{0x4, 0x2, 0xc}, {0x5, 0x2, 0xb}, {0x3, 0x3, 0x8, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={0xffffffffffffffff, 0x20, &(0x7f0000003380)={&(0x7f0000003200)=""/253, 0xfd, 0x0, &(0x7f0000003300)=""/95, 0x5f}}, 0x10) recvmsg$unix(r10, &(0x7f0000003540)={&(0x7f0000003400), 0x6e, &(0x7f0000003480), 0x0, &(0x7f00000034c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003a80)={r10, 0xe0, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000037c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000003800)=[0x0, 0x0, 0x0], &(0x7f0000003840)=[0x0, 0x0], 0x0, 0x42, &(0x7f0000003880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000038c0), &(0x7f0000003900), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000003940)}}, 0x10) r19 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003cc0)={&(0x7f0000003ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x4, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x10, 0x2}, @struct={0xf, 0x8, 0x0, 0x4, 0x0, 0x10001, [{0x5, 0x5, 0x5}, {0xa, 0x5, 0x9}, {0xb, 0x3, 0x3}, {0x2, 0x0, 0x800}, {0x5, 0x3, 0x9}, {0xf, 0x1, 0x12}, {0x4, 0x1, 0xcc0}, {0xb, 0x4, 0xb6}]}, @datasec={0x4, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x200, 0xaeeb}, {0x5, 0x7fff80, 0xd35}, {0x4, 0x10001, 0x10000}], "df7d87"}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x8, 0x5}, {0xc, 0x5}, {0x6, 0x5}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000003c00)=""/187, 0x108, 0xbb, 0x0, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000003d80)={0x3, 0x29, &(0x7f0000003580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x475}}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @ldst={0x2, 0x854c03d4155e5f10, 0x2, 0x7, 0xa, 0x6, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003700)='GPL\x00', 0x8, 0x44, &(0x7f0000003740)=""/68, 0x41000, 0x20, '\x00', r18, @sched_cls=0x36, r19, 0x8, &(0x7f0000003d00)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r14, r7, 0x1, 0x0, &(0x7f0000003d40)=[{0x3, 0x2, 0x0, 0x4}], 0x10, 0x1}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000003e40)=r10, 0x4) gettid() openat$cgroup_procs(r15, &(0x7f0000003e80)='cgroup.procs\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003f00)=@generic={&(0x7f0000003ec0)='./file1\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004240)={r15, 0xe0, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000003f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000004040)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004080), &(0x7f00000040c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000004100)}}, 0x10) 6.146586072s ago: executing program 4 (id=555): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x65, 0x2}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x7}, {0x5, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x5d, 0x0, 0x1e}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/192, 0x73, 0xc0, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000e00), &(0x7f0000000840), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x2, &(0x7f0000000a00)=@raw=[@jmp={0x5, 0x1, 0xd, 0x7, 0xa, 0xfffffffffffffffe, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000a40)='GPL\x00', 0x5, 0xa1, &(0x7f0000000a80)=""/161, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x10, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000c00)=[{0x1, 0x4, 0x0, 0xc}, {0x4, 0x1, 0x1, 0x8}, {0x5, 0x1, 0xf, 0x1}, {0x0, 0x2, 0x10}], 0x10, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff80}, [@alu={0x7, 0x1, 0x0, 0x9, 0x7, 0x2, 0x8}, @ldst={0x1, 0x1, 0x2, 0x2, 0x8, 0xffffffffffffffaa, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x5, 0x6, 0xa, 0x4, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback=0x2, r1, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0x5, 0x9}, 0x10, r2, r3, 0x2, 0x0, &(0x7f0000000d00)=[{0x0, 0x4, 0x10, 0x5}, {0x0, 0x3, 0xb, 0xb}], 0x10, 0x3}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40049409, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x4, 0x8}, 0x2000, 0x3, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xc2a4}, 0x8) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='8\']:#:*+\'-,!^]{*-{#)!&\x00') r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8231, 0x0, 0x0, 0x0, 0x49}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="0137c332ae7c"}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r12) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 5.415039918s ago: executing program 0 (id=561): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0xa}, 0x862c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.402634982s ago: executing program 0 (id=562): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8947, &(0x7f0000000080)={'vlan1\x00', @random="00009e0c1100"}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e3ff00002000"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 4.534430769s ago: executing program 0 (id=565): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x5}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802dfffffffb0c900000010feff000085000400000000000000000500000000"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) close(r4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) 4.160628049s ago: executing program 1 (id=67): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000001fc0)=""/174, 0x2c, 0xae, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6}, 0x8) 3.85428076s ago: executing program 2 (id=501): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3.447579971s ago: executing program 0 (id=566): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x600}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='|\'\'\x00') 3.251118338s ago: executing program 3 (id=572): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0xa}, 0x862c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.196567915s ago: executing program 3 (id=573): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @exit, @alu={0x7, 0x0, 0x7, 0x3, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.785274646s ago: executing program 3 (id=574): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb29e08f088a8", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x2, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7, [{0x0, 0x2, 0x5}]}]}}, 0x0, 0x4a}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) ioctl$TUNSETIFINDEX(r5, 0x5450, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000070060000000000000900000073111b000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.475181574s ago: executing program 0 (id=575): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x4}, 0x101048, 0x0, 0x0, 0x0, 0x9, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x8000000, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x400c000) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$TUNSETIFF(r6, 0xb701, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xef, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x20, &(0x7f0000000cc0)={&(0x7f0000000b00)=""/184, 0xb8, 0x0, &(0x7f0000000bc0)=""/229, 0xe5}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x8, 0x25, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x96}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0xb, 0x1, 0x50, 0x4}, @generic={0x8, 0x2, 0x4, 0x8, 0x23}, @ldst={0x0, 0x0, 0x0, 0x8, 0x2, 0x40, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6ed}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @generic={0x7, 0x5, 0xc, 0x4, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x91, &(0x7f0000000700)=""/145, 0x40f00, 0x23, '\x00', r7, @cgroup_skb=0x1, r3, 0x8, &(0x7f0000000ac0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x1, &(0x7f0000000dc0)=[r9, r2, r2], &(0x7f0000000e00)=[{0x0, 0x2, 0x0, 0xf}], 0x10, 0x3ff}, 0x94) close(r4) 812.58704ms ago: executing program 3 (id=576): syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') 804.024902ms ago: executing program 0 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x0, 0xff, 0x3, 0x0, 0x7, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x102a88, 0x4, 0x0, 0x0, 0x0, 0x40004, 0x8b04}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030f00"], 0xffe7) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r10, 0x20, &(0x7f00000002c0)={&(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000200)=""/139, 0x8b}}, 0x10) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) 744.05805ms ago: executing program 3 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0xa, [@enum={0xd, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x4}, {0x10, 0x8}, {0x7, 0x10}, {0x1, 0x19}, {0xb, 0xfff}, {0xa, 0xfff}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x8}, @var={0xc, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa}, {0xe, 0x2}, {0x0, 0x1}, {0x10, 0x4}, {0x4, 0x4}, {0xe, 0x5}, {0x4, 0x3}]}, @enum64={0x4, 0x4, 0x0, 0x13, 0x1, 0x6, [{0x6, 0x5, 0x6}, {0x7, 0x3, 0x5}, {0xe, 0xff}, {0x10, 0x8, 0x3}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x1}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x2}, {0x7, 0x400}]}, @func={0xa, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x2e, 0x30, 0x61, 0x30, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000400)=""/191, 0x136, 0xbf, 0x0, 0x6, 0x10000}, 0x28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYBLOB='-cpu'], 0x39) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, &(0x7f00000000c0), &(0x7f0000000380)=""/71}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x954, 0x81, 0x7, 0x10000, 0x1, 0xa, '\x00', r1, r2, 0x5, 0x3, 0x3, 0x0, @void, @value, @value=r4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'rose0\x00', 0x400}) r7 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000300)={'syzkaller0\x00', 0x600}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x54, 0x0, 0x0, 0xfffff034}, {0x6}]}) 78.956157ms ago: executing program 3 (id=579): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f00000000c0), &(0x7f0000000380)=""/71}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000100)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r8 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ff2d", 0x2}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee01}}}], 0x20, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) socketpair(0x2, 0xa, 0x0, &(0x7f00000000c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) 0s ago: executing program 1 (id=67): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000001fc0)=""/174, 0x2c, 0xae, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6}, 0x8) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.453108][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.482434][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.499639][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.518498][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.531580][ T959] device veth0_vlan entered promiscuous mode [ 39.615791][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.636425][ T959] device veth1_macvtap entered promiscuous mode [ 39.687124][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.708155][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.759137][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.778970][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.865724][ T1043] device syzkaller0 entered promiscuous mode [ 39.959194][ T8] device bridge_slave_1 left promiscuous mode [ 39.974637][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.992305][ T8] device bridge_slave_0 left promiscuous mode [ 40.004867][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.025850][ T8] device veth1_macvtap left promiscuous mode [ 40.031918][ T8] device veth0_vlan left promiscuous mode [ 40.920874][ T1077] device syzkaller0 entered promiscuous mode [ 40.952507][ T1076] device syzkaller0 entered promiscuous mode [ 41.035612][ T288] cgroup: fork rejected by pids controller in /syz3 [ 41.056877][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.072983][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.085180][ T1083] device bridge_slave_0 entered promiscuous mode [ 41.092311][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.099411][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.106936][ T1083] device bridge_slave_1 entered promiscuous mode [ 41.260544][ T8] device bridge_slave_1 left promiscuous mode [ 41.274319][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.291012][ T8] device bridge_slave_0 left promiscuous mode [ 41.330559][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.339056][ T8] device veth1_macvtap left promiscuous mode [ 41.345226][ T8] device veth0_vlan left promiscuous mode [ 41.760781][ T1101] device syzkaller0 entered promiscuous mode [ 42.008425][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.016058][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.044699][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.056567][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.066970][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.074043][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.086261][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.096900][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.105417][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.112469][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.163538][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.173835][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.181809][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.191088][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.225664][ T1083] device veth0_vlan entered promiscuous mode [ 42.244238][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.256831][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.264573][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.300780][ T1132] device syzkaller0 entered promiscuous mode [ 42.322197][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.332010][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.348268][ T1113] device bridge_slave_0 entered promiscuous mode [ 42.365473][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.372529][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.385266][ T1113] device bridge_slave_1 entered promiscuous mode [ 42.407108][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.434963][ T1083] device veth1_macvtap entered promiscuous mode [ 42.482371][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.734750][ C0] sched: RT throttling activated [ 43.809021][ T28] audit: type=1400 audit(1790765885.012:128): avc: denied { create } for pid=1150 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 43.829902][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.845595][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.911325][ T1152] device syzkaller0 entered promiscuous mode [ 44.033569][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.075447][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.092038][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.105312][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.124240][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.131346][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.187976][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.196705][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.222891][ T1162] device bridge_slave_1 left promiscuous mode [ 44.240346][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.307880][ T1162] device bridge_slave_0 left promiscuous mode [ 44.322072][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.586295][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.597500][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.605940][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.614167][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.621238][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.635823][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.644193][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.652449][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.669760][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.685101][ T1113] device veth0_vlan entered promiscuous mode [ 44.691514][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.701109][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.708855][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.723497][ T1113] device veth1_macvtap entered promiscuous mode [ 44.732853][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.745305][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.753843][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.771937][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.780433][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.855616][ T8] device bridge_slave_1 left promiscuous mode [ 44.861957][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.869662][ T8] device bridge_slave_0 left promiscuous mode [ 44.876287][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.884617][ T8] device veth1_macvtap left promiscuous mode [ 44.890923][ T8] device veth0_vlan left promiscuous mode [ 45.049427][ T28] audit: type=1400 audit(1790765886.252:129): avc: denied { create } for pid=1174 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.186837][ T28] audit: type=1400 audit(1790765886.392:130): avc: denied { create } for pid=1205 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.262863][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.284402][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.296240][ T1204] device bridge_slave_0 entered promiscuous mode [ 45.315649][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.322874][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.332114][ T1204] device bridge_slave_1 entered promiscuous mode [ 45.415332][ T28] audit: type=1400 audit(1790765886.622:131): avc: denied { write } for pid=1220 comm="syz.4.203" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.457104][ T1221] device lo entered promiscuous mode [ 45.479148][ T1221] bridge0: port 3(team_slave_1) entered blocking state [ 45.486516][ T1221] bridge0: port 3(team_slave_1) entered disabled state [ 45.493523][ T28] audit: type=1400 audit(1790765886.642:132): avc: denied { create } for pid=1222 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.514827][ T1221] device team_slave_1 entered promiscuous mode [ 45.547054][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.554121][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.561426][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.568465][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.598214][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.606747][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.614169][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.761659][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.770547][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.777625][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.786909][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.795223][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.802261][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.850603][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.858803][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.877271][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.899977][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.908174][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.916887][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.950788][ T1204] device veth0_vlan entered promiscuous mode [ 45.964133][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.974298][ T1204] device veth1_macvtap entered promiscuous mode [ 45.988821][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.010277][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.345819][ T8] device bridge_slave_1 left promiscuous mode [ 46.351973][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.359446][ T8] device bridge_slave_0 left promiscuous mode [ 46.365618][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.373415][ T8] device veth1_macvtap left promiscuous mode [ 46.379482][ T8] device veth0_vlan left promiscuous mode [ 47.182092][ T8] device bridge_slave_1 left promiscuous mode [ 47.188331][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.214511][ T8] device bridge_slave_0 left promiscuous mode [ 47.230182][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.244012][ T1273] syz.0.220 (1273) used greatest stack depth: 21600 bytes left [ 47.253966][ T8] device veth1_macvtap left promiscuous mode [ 47.260256][ T8] device veth0_vlan left promiscuous mode [ 47.409461][ T1304] device syzkaller0 entered promiscuous mode [ 47.443195][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 47.458779][ T28] audit: type=1400 audit(1790765888.662:133): avc: denied { write } for pid=1306 comm="syz.3.229" name="cgroup.subtree_control" dev="cgroup2" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.483740][ T28] audit: type=1400 audit(1790765888.662:134): avc: denied { open } for pid=1306 comm="syz.3.229" path="" dev="cgroup2" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.487369][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.518674][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.526079][ T1285] device bridge_slave_0 entered promiscuous mode [ 47.542401][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.549643][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.557053][ T1285] device bridge_slave_1 entered promiscuous mode [ 47.613770][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.620936][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.628197][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.635407][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.662697][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.670704][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.678216][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.693388][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.707554][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.714653][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.723035][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.734841][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.741888][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.757403][ T1320] tap0: tun_chr_ioctl cmd 1074025692 [ 47.768075][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.776040][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.802588][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.813915][ T1285] device veth0_vlan entered promiscuous mode [ 47.822944][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.831283][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.839100][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.853737][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.862778][ T1285] device veth1_macvtap entered promiscuous mode [ 47.874499][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.887561][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.855422][ T8] device bridge_slave_1 left promiscuous mode [ 48.861561][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.869215][ T8] device bridge_slave_0 left promiscuous mode [ 48.875461][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.883081][ T8] device veth1_macvtap left promiscuous mode [ 48.889156][ T8] device veth0_vlan left promiscuous mode [ 49.720060][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.816557][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.877881][ T1346] device bridge_slave_0 entered promiscuous mode [ 49.946309][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.953373][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.062745][ T1346] device bridge_slave_1 entered promiscuous mode [ 50.447908][ T1374] tap1: tun_chr_ioctl cmd 1074025676 [ 50.453447][ T1374] tap1: owner set to 0 [ 50.671437][ T1370] tap0: tun_chr_ioctl cmd 1074025680 [ 50.804660][ T1370] tap0: tun_chr_ioctl cmd 21731 [ 50.863715][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.874571][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.888059][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.992086][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.016275][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.023355][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.061218][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.111800][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.127712][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.150669][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.157780][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.445358][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.454481][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.464695][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.476885][ T1346] device veth0_vlan entered promiscuous mode [ 51.494065][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.513693][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.524037][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.532491][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.552427][ T1346] device veth1_macvtap entered promiscuous mode [ 51.567620][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.578520][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.587222][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.610392][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.619114][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.630806][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.639516][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.070343][ T1429] cgroup: fork rejected by pids controller in /syz4 [ 52.755687][ T8] device bridge_slave_1 left promiscuous mode [ 52.761861][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.769411][ T8] device bridge_slave_0 left promiscuous mode [ 52.775601][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.783331][ T8] device veth1_macvtap left promiscuous mode [ 52.789555][ T8] device veth0_vlan left promiscuous mode [ 53.221407][ T28] audit: type=1400 audit(1790765894.422:135): avc: denied { create } for pid=1495 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 53.452298][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.481552][ T1492] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.524391][ T1492] device bridge_slave_0 entered promiscuous mode [ 53.550219][ T1492] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.577200][ T1492] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.608492][ T1492] device bridge_slave_1 entered promiscuous mode [ 53.899407][ T1565] FAULT_INJECTION: forcing a failure. [ 53.899407][ T1565] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.002721][ T1565] CPU: 0 PID: 1565 Comm: syz.2.286 Not tainted syzkaller #0 [ 54.010153][ T1565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.020441][ T1565] Call Trace: [ 54.023749][ T1565] [ 54.026689][ T1565] __dump_stack+0x21/0x24 [ 54.031049][ T1565] dump_stack_lvl+0x110/0x170 [ 54.035729][ T1565] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.040756][ T1565] dump_stack+0x15/0x24 [ 54.044917][ T1565] should_fail_ex+0x3bf/0x510 [ 54.049595][ T1565] should_fail+0xb/0x10 [ 54.053749][ T1565] should_fail_usercopy+0x1a/0x20 [ 54.058778][ T1565] _copy_from_user+0x1e/0xc0 [ 54.063372][ T1565] __sys_bpf+0x2a0/0x850 [ 54.067617][ T1565] ? bpf_link_show_fdinfo+0x330/0x330 [ 54.072993][ T1565] ? __cfi_ksys_write+0x10/0x10 [ 54.077844][ T1565] ? debug_smp_processor_id+0x17/0x20 [ 54.083241][ T1565] __x64_sys_bpf+0x7c/0x90 [ 54.087657][ T1565] x64_sys_call+0x488/0x9a0 [ 54.092172][ T1565] do_syscall_64+0x4c/0xa0 [ 54.096601][ T1565] ? clear_bhb_loop+0x30/0x80 [ 54.101283][ T1565] ? clear_bhb_loop+0x30/0x80 [ 54.105957][ T1565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.111852][ T1565] RIP: 0033:0x7fce5419e159 [ 54.116278][ T1565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.135884][ T1565] RSP: 002b:00007fce55149028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.144301][ T1565] RAX: ffffffffffffffda RBX: 00007fce54425fa0 RCX: 00007fce5419e159 [ 54.152273][ T1565] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 54.160243][ T1565] RBP: 00007fce55149090 R08: 0000000000000000 R09: 0000000000000000 [ 54.168638][ T1565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.176594][ T1565] R13: 00007fce54426038 R14: 00007fce54425fa0 R15: 00007ffd108a5f78 [ 54.184556][ T1565] [ 54.423702][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.438407][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.484216][ T1574] IPv6: pim6reg1: Disabled Multicast RS [ 54.598258][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.692373][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.745580][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.752685][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.802776][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.827135][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.855365][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.862476][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.898496][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.930190][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.133802][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.145312][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.353182][ T1492] device veth0_vlan entered promiscuous mode [ 55.504335][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.517915][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.546496][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.566684][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.607166][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.657852][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.752624][ T1492] device veth1_macvtap entered promiscuous mode [ 55.931896][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.943699][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.958026][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.111662][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.125135][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.136611][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.148076][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.171474][ T1597] device syzkaller0 entered promiscuous mode [ 56.443693][ T1616] FAULT_INJECTION: forcing a failure. [ 56.443693][ T1616] name failslab, interval 1, probability 0, space 0, times 1 [ 56.462532][ T1616] CPU: 0 PID: 1616 Comm: syz.2.299 Not tainted syzkaller #0 [ 56.469855][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.479918][ T1616] Call Trace: [ 56.483200][ T1616] [ 56.486133][ T1616] __dump_stack+0x21/0x24 [ 56.490472][ T1616] dump_stack_lvl+0x110/0x170 [ 56.495158][ T1616] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.500192][ T1616] ? stack_trace_save+0xa6/0xf0 [ 56.505051][ T1616] dump_stack+0x15/0x24 [ 56.509211][ T1616] should_fail_ex+0x3bf/0x510 [ 56.513891][ T1616] __should_failslab+0xac/0xf0 [ 56.518658][ T1616] should_failslab+0x9/0x20 [ 56.523167][ T1616] __kmem_cache_alloc_node+0x3d/0x2d0 [ 56.528540][ T1616] ? bpf_test_init+0xa7/0x140 [ 56.533220][ T1616] ? avc_has_perm_noaudit+0x390/0x490 [ 56.538593][ T1616] ? bpf_test_init+0xa7/0x140 [ 56.543272][ T1616] __kmalloc+0xa4/0x1e0 [ 56.547426][ T1616] bpf_test_init+0xa7/0x140 [ 56.551929][ T1616] bpf_prog_test_run_xdp+0x488/0xf80 [ 56.557214][ T1616] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 56.563020][ T1616] ? __kasan_check_write+0x14/0x20 [ 56.568137][ T1616] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 56.573971][ T1616] bpf_prog_test_run+0x3b4/0x5c0 [ 56.578911][ T1616] ? bpf_prog_query+0x270/0x270 [ 56.583761][ T1616] ? selinux_bpf+0xce/0xf0 [ 56.588174][ T1616] ? security_bpf+0x93/0xb0 [ 56.592678][ T1616] __sys_bpf+0x5ee/0x850 [ 56.596924][ T1616] ? bpf_link_show_fdinfo+0x330/0x330 [ 56.602297][ T1616] ? __cfi_ksys_write+0x10/0x10 [ 56.607149][ T1616] ? debug_smp_processor_id+0x17/0x20 [ 56.612525][ T1616] __x64_sys_bpf+0x7c/0x90 [ 56.616940][ T1616] x64_sys_call+0x488/0x9a0 [ 56.621451][ T1616] do_syscall_64+0x4c/0xa0 [ 56.625868][ T1616] ? clear_bhb_loop+0x30/0x80 [ 56.630541][ T1616] ? clear_bhb_loop+0x30/0x80 [ 56.635214][ T1616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.641112][ T1616] RIP: 0033:0x7fce5419e159 [ 56.645568][ T1616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.665181][ T1616] RSP: 002b:00007fce55149028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.673600][ T1616] RAX: ffffffffffffffda RBX: 00007fce54425fa0 RCX: 00007fce5419e159 [ 56.681571][ T1616] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 56.689539][ T1616] RBP: 00007fce55149090 R08: 0000000000000000 R09: 0000000000000000 [ 56.697508][ T1616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.705482][ T1616] R13: 00007fce54426038 R14: 00007fce54425fa0 R15: 00007ffd108a5f78 [ 56.713463][ T1616] [ 57.675805][ T8] device bridge_slave_1 left promiscuous mode [ 57.681930][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.689359][ T8] device bridge_slave_0 left promiscuous mode [ 57.695563][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.703196][ T8] device veth1_macvtap left promiscuous mode [ 57.709266][ T8] device veth0_vlan left promiscuous mode [ 58.622523][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.630029][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.637827][ T1639] device bridge_slave_0 entered promiscuous mode [ 58.648212][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.655774][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.663338][ T1639] device bridge_slave_1 entered promiscuous mode [ 58.753027][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.760141][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.767443][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.774483][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.823208][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.831909][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.865132][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.877496][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.889364][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.896479][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.918389][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.926676][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.933705][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.945674][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.960321][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.981526][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.993230][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.001537][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.009329][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.018744][ T1639] device veth0_vlan entered promiscuous mode [ 59.035079][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.044351][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.054250][ T1639] device veth1_macvtap entered promiscuous mode [ 59.074900][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.103484][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.125284][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.171383][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.184084][ T1693] FAULT_INJECTION: forcing a failure. [ 59.184084][ T1693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.184699][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.201717][ T1693] CPU: 0 PID: 1693 Comm: syz.4.319 Not tainted syzkaller #0 [ 59.212562][ T1693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.222620][ T1693] Call Trace: [ 59.225885][ T1693] [ 59.228807][ T1693] __dump_stack+0x21/0x24 [ 59.233146][ T1693] dump_stack_lvl+0x110/0x170 [ 59.237824][ T1693] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.242835][ T1693] dump_stack+0x15/0x24 [ 59.246999][ T1693] should_fail_ex+0x3bf/0x510 [ 59.251659][ T1693] should_fail+0xb/0x10 [ 59.255800][ T1693] should_fail_usercopy+0x1a/0x20 [ 59.260809][ T1693] _copy_from_user+0x1e/0xc0 [ 59.265404][ T1693] bpf_test_init+0xe5/0x140 [ 59.269899][ T1693] bpf_prog_test_run_xdp+0x488/0xf80 [ 59.275169][ T1693] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 59.280958][ T1693] ? __kasan_check_write+0x14/0x20 [ 59.286055][ T1693] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 59.291846][ T1693] bpf_prog_test_run+0x3b4/0x5c0 [ 59.296860][ T1693] ? bpf_prog_query+0x270/0x270 [ 59.301709][ T1693] ? selinux_bpf+0xce/0xf0 [ 59.306113][ T1693] ? security_bpf+0x93/0xb0 [ 59.310618][ T1693] __sys_bpf+0x5ee/0x850 [ 59.314850][ T1693] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.320320][ T1693] ? debug_smp_processor_id+0x17/0x20 [ 59.325693][ T1693] ? perf_trace_sys_enter+0x30/0x150 [ 59.331124][ T1693] __x64_sys_bpf+0x7c/0x90 [ 59.335537][ T1693] x64_sys_call+0x488/0x9a0 [ 59.340058][ T1693] do_syscall_64+0x4c/0xa0 [ 59.344484][ T1693] ? clear_bhb_loop+0x30/0x80 [ 59.349144][ T1693] ? clear_bhb_loop+0x30/0x80 [ 59.353810][ T1693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.359712][ T1693] RIP: 0033:0x7fce47b9e159 [ 59.364119][ T1693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.383808][ T1693] RSP: 002b:00007fce48a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.392211][ T1693] RAX: ffffffffffffffda RBX: 00007fce47e25fa0 RCX: 00007fce47b9e159 [ 59.400172][ T1693] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 59.408133][ T1693] RBP: 00007fce48a42090 R08: 0000000000000000 R09: 0000000000000000 [ 59.416091][ T1693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.424047][ T1693] R13: 00007fce47e26038 R14: 00007fce47e25fa0 R15: 00007ffdd7819418 [ 59.432034][ T1693] [ 60.295456][ T8] device bridge_slave_1 left promiscuous mode [ 60.301609][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.309090][ T8] device bridge_slave_0 left promiscuous mode [ 60.315268][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.323203][ T8] device veth1_macvtap left promiscuous mode [ 60.329286][ T8] device veth0_vlan left promiscuous mode [ 60.929281][ T1726] FAULT_INJECTION: forcing a failure. [ 60.929281][ T1726] name failslab, interval 1, probability 0, space 0, times 0 [ 60.960142][ T1734] pimreg0: tun_chr_ioctl cmd 1074025677 [ 60.967097][ T1734] pimreg0: linktype set to 773 [ 60.994080][ T1726] CPU: 1 PID: 1726 Comm: syz.3.331 Not tainted syzkaller #0 [ 61.001417][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.011569][ T1726] Call Trace: [ 61.014848][ T1726] [ 61.017776][ T1726] __dump_stack+0x21/0x24 [ 61.022149][ T1726] dump_stack_lvl+0x110/0x170 [ 61.026836][ T1726] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.031876][ T1726] dump_stack+0x15/0x24 [ 61.036048][ T1726] should_fail_ex+0x3bf/0x510 [ 61.040738][ T1726] __should_failslab+0xac/0xf0 [ 61.045505][ T1726] should_failslab+0x9/0x20 [ 61.050012][ T1726] __kmem_cache_alloc_node+0x3d/0x2d0 [ 61.055389][ T1726] ? kvmalloc_node+0x28a/0x460 [ 61.060147][ T1726] ? kernel_text_address+0xa0/0xd0 [ 61.065263][ T1726] ? kvmalloc_node+0x28a/0x460 [ 61.070031][ T1726] __kmalloc_node+0xa2/0x1e0 [ 61.074619][ T1726] ? arch_stack_walk+0xfc/0x150 [ 61.079480][ T1726] kvmalloc_node+0x28a/0x460 [ 61.084079][ T1726] ? __cfi_kvmalloc_node+0x10/0x10 [ 61.089208][ T1726] bpf_test_run_xdp_live+0x1da/0x1b00 [ 61.094589][ T1726] ? kasan_set_track+0x60/0x70 [ 61.099357][ T1726] ? kasan_set_track+0x4b/0x70 [ 61.104123][ T1726] ? kasan_save_alloc_info+0x1f/0x30 [ 61.109419][ T1726] ? __kasan_kmalloc+0x95/0xb0 [ 61.114187][ T1726] ? __kmalloc+0xb4/0x1e0 [ 61.118526][ T1726] ? bpf_test_init+0xa7/0x140 [ 61.123214][ T1726] ? bpf_prog_test_run+0x3b4/0x5c0 [ 61.128328][ T1726] ? __sys_bpf+0x5ee/0x850 [ 61.132747][ T1726] ? __x64_sys_bpf+0x7c/0x90 [ 61.137339][ T1726] ? x64_sys_call+0x488/0x9a0 [ 61.142025][ T1726] ? do_syscall_64+0x4c/0xa0 [ 61.146624][ T1726] ? xdp_convert_md_to_buff+0x370/0x370 [ 61.152187][ T1726] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 61.158104][ T1726] ? __kasan_check_write+0x14/0x20 [ 61.163233][ T1726] ? _copy_from_user+0x8f/0xc0 [ 61.168014][ T1726] ? bpf_test_init+0x120/0x140 [ 61.172796][ T1726] ? xdp_convert_md_to_buff+0x60/0x370 [ 61.178260][ T1726] bpf_prog_test_run_xdp+0x757/0xf80 [ 61.183559][ T1726] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 61.189439][ T1726] ? __kasan_check_write+0x14/0x20 [ 61.194567][ T1726] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 61.200386][ T1726] bpf_prog_test_run+0x3b4/0x5c0 [ 61.205334][ T1726] ? bpf_prog_query+0x270/0x270 [ 61.210195][ T1726] ? selinux_bpf+0xce/0xf0 [ 61.214617][ T1726] ? security_bpf+0x93/0xb0 [ 61.219139][ T1726] __sys_bpf+0x5ee/0x850 [ 61.223396][ T1726] ? bpf_link_show_fdinfo+0x330/0x330 [ 61.228779][ T1726] ? __cfi_ksys_write+0x10/0x10 [ 61.233637][ T1726] ? debug_smp_processor_id+0x17/0x20 [ 61.239034][ T1726] __x64_sys_bpf+0x7c/0x90 [ 61.243452][ T1726] x64_sys_call+0x488/0x9a0 [ 61.247972][ T1726] do_syscall_64+0x4c/0xa0 [ 61.252395][ T1726] ? clear_bhb_loop+0x30/0x80 [ 61.257073][ T1726] ? clear_bhb_loop+0x30/0x80 [ 61.261748][ T1726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.267641][ T1726] RIP: 0033:0x7f053799e159 [ 61.272055][ T1726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.291664][ T1726] RSP: 002b:00007f05388d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.300089][ T1726] RAX: ffffffffffffffda RBX: 00007f0537c25fa0 RCX: 00007f053799e159 [ 61.308074][ T1726] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 61.316048][ T1726] RBP: 00007f05388d8090 R08: 0000000000000000 R09: 0000000000000000 [ 61.324023][ T1726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.332002][ T1726] R13: 00007f0537c26038 R14: 00007f0537c25fa0 R15: 00007ffe4a862b88 [ 61.339984][ T1726] [ 61.512148][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.523353][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.542258][ T1737] device bridge_slave_0 entered promiscuous mode [ 61.559099][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.584942][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.596330][ T1737] device bridge_slave_1 entered promiscuous mode [ 63.835657][ T1790] FAULT_INJECTION: forcing a failure. [ 63.835657][ T1790] name failslab, interval 1, probability 0, space 0, times 0 [ 63.849007][ T1790] CPU: 1 PID: 1790 Comm: syz.4.348 Not tainted syzkaller #0 [ 63.856317][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.866375][ T1790] Call Trace: [ 63.869662][ T1790] [ 63.872589][ T1790] __dump_stack+0x21/0x24 [ 63.876922][ T1790] dump_stack_lvl+0x110/0x170 [ 63.881599][ T1790] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.886620][ T1790] dump_stack+0x15/0x24 [ 63.890767][ T1790] should_fail_ex+0x3bf/0x510 [ 63.895436][ T1790] __should_failslab+0xac/0xf0 [ 63.900195][ T1790] should_failslab+0x9/0x20 [ 63.904688][ T1790] __kmem_cache_alloc_node+0x3d/0x2d0 [ 63.910048][ T1790] ? kvmalloc_node+0x28a/0x460 [ 63.914805][ T1790] ? kasan_save_alloc_info+0x1f/0x30 [ 63.920082][ T1790] ? kvmalloc_node+0x28a/0x460 [ 63.924834][ T1790] __kmalloc_node+0xa2/0x1e0 [ 63.929422][ T1790] ? arch_stack_walk+0xfc/0x150 [ 63.934267][ T1790] kvmalloc_node+0x28a/0x460 [ 63.938850][ T1790] ? __cfi_kvmalloc_node+0x10/0x10 [ 63.943950][ T1790] bpf_test_run_xdp_live+0x206/0x1b00 [ 63.949313][ T1790] ? kasan_set_track+0x60/0x70 [ 63.954066][ T1790] ? kasan_save_alloc_info+0x1f/0x30 [ 63.959339][ T1790] ? __kasan_kmalloc+0x95/0xb0 [ 63.964092][ T1790] ? __kmalloc+0xb4/0x1e0 [ 63.968414][ T1790] ? bpf_test_init+0xa7/0x140 [ 63.973081][ T1790] ? bpf_prog_test_run+0x3b4/0x5c0 [ 63.978187][ T1790] ? __sys_bpf+0x5ee/0x850 [ 63.982594][ T1790] ? __x64_sys_bpf+0x7c/0x90 [ 63.987172][ T1790] ? x64_sys_call+0x488/0x9a0 [ 63.991843][ T1790] ? do_syscall_64+0x4c/0xa0 [ 63.996442][ T1790] ? xdp_convert_md_to_buff+0x370/0x370 [ 64.001990][ T1790] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 64.007877][ T1790] ? __kasan_check_write+0x14/0x20 [ 64.012981][ T1790] ? _copy_from_user+0x8f/0xc0 [ 64.017736][ T1790] ? bpf_test_init+0x120/0x140 [ 64.022492][ T1790] ? xdp_convert_md_to_buff+0x60/0x370 [ 64.027940][ T1790] bpf_prog_test_run_xdp+0x757/0xf80 [ 64.033220][ T1790] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 64.039018][ T1790] ? __kasan_check_write+0x14/0x20 [ 64.044128][ T1790] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 64.049927][ T1790] bpf_prog_test_run+0x3b4/0x5c0 [ 64.054855][ T1790] ? bpf_prog_query+0x270/0x270 [ 64.059691][ T1790] ? selinux_bpf+0xce/0xf0 [ 64.064098][ T1790] ? security_bpf+0x93/0xb0 [ 64.069555][ T1790] __sys_bpf+0x5ee/0x850 [ 64.073807][ T1790] ? bpf_link_show_fdinfo+0x330/0x330 [ 64.079178][ T1790] ? __cfi_ksys_write+0x10/0x10 [ 64.084072][ T1790] ? debug_smp_processor_id+0x17/0x20 [ 64.089466][ T1790] __x64_sys_bpf+0x7c/0x90 [ 64.093897][ T1790] x64_sys_call+0x488/0x9a0 [ 64.098404][ T1790] do_syscall_64+0x4c/0xa0 [ 64.102822][ T1790] ? clear_bhb_loop+0x30/0x80 [ 64.107493][ T1790] ? clear_bhb_loop+0x30/0x80 [ 64.112160][ T1790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.118042][ T1790] RIP: 0033:0x7fce47b9e159 [ 64.122446][ T1790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.142039][ T1790] RSP: 002b:00007fce48a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.150447][ T1790] RAX: ffffffffffffffda RBX: 00007fce47e25fa0 RCX: 00007fce47b9e159 [ 64.158409][ T1790] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 64.166374][ T1790] RBP: 00007fce48a42090 R08: 0000000000000000 R09: 0000000000000000 [ 64.174336][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.182303][ T1790] R13: 00007fce47e26038 R14: 00007fce47e25fa0 R15: 00007ffdd7819418 [ 64.190273][ T1790] [ 64.215962][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.221342][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.235585][ T1787] tap0: owner set to 0 [ 64.239754][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.247558][ T1787] tap0: owner set to 0 [ 64.251717][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.257318][ T1787] tap0: owner set to 0 [ 64.269451][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.274829][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.280294][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.285804][ T1787] tap0: owner set to 0 [ 64.296378][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.301814][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.310358][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.315783][ T1787] tap0: owner set to 0 [ 64.334863][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.340313][ T1787] tap0: owner set to 0 [ 64.347780][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.353192][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.368277][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.376212][ T1787] tap0: owner set to 0 [ 64.383699][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.389160][ T1787] tap0: owner set to 0 [ 64.394640][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.400157][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.461405][ T1792] device syzkaller0 entered promiscuous mode [ 64.499596][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.505187][ T1787] tap0: owner set to 0 [ 64.511297][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.516939][ T1787] tap0: owner set to 0 [ 64.528097][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.547426][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.558165][ T1787] tap0: owner set to 0 [ 64.570623][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.576236][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.586824][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.592225][ T1787] tap0: owner set to 0 [ 64.596589][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.603570][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.609294][ T1787] tap0: owner set to 0 [ 64.622008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.629727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.640272][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.646006][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.651621][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.657210][ T1787] tap0: owner set to 0 [ 64.661379][ T1787] tap0: tun_chr_ioctl cmd 1074025676 [ 64.667599][ T1787] tap0: owner set to 0 [ 64.684104][ T1786] tap0: tun_chr_ioctl cmd 1074025673 [ 64.693175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.702066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.710708][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.717789][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.744673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.752592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.761415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.774591][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.781699][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.800344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.819977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.861312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.872903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.887914][ T1737] device veth0_vlan entered promiscuous mode [ 64.895472][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.905709][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.935237][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.955269][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.983211][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.991751][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.001142][ T1737] device veth1_macvtap entered promiscuous mode [ 65.012460][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.020982][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.029427][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.053498][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.073244][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.073330][ T1829] FAULT_INJECTION: forcing a failure. [ 65.073330][ T1829] name failslab, interval 1, probability 0, space 0, times 0 [ 65.096080][ T1829] CPU: 1 PID: 1829 Comm: syz.3.360 Not tainted syzkaller #0 [ 65.103432][ T1829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.113478][ T1829] Call Trace: [ 65.116754][ T1829] [ 65.119671][ T1829] __dump_stack+0x21/0x24 [ 65.123988][ T1829] dump_stack_lvl+0x110/0x170 [ 65.128648][ T1829] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.133662][ T1829] dump_stack+0x15/0x24 [ 65.137803][ T1829] should_fail_ex+0x3bf/0x510 [ 65.142462][ T1829] __should_failslab+0xac/0xf0 [ 65.147212][ T1829] should_failslab+0x9/0x20 [ 65.151715][ T1829] __kmem_cache_alloc_node+0x3d/0x2d0 [ 65.157070][ T1829] ? page_pool_create+0x70/0x610 [ 65.161991][ T1829] ? kvmalloc_node+0x2b3/0x460 [ 65.166732][ T1829] ? page_pool_create+0x70/0x610 [ 65.171656][ T1829] kmalloc_node_trace+0x26/0xb0 [ 65.176521][ T1829] page_pool_create+0x70/0x610 [ 65.181290][ T1829] bpf_test_run_xdp_live+0x220/0x1b00 [ 65.186644][ T1829] ? kasan_set_track+0x60/0x70 [ 65.191498][ T1829] ? kasan_save_alloc_info+0x1f/0x30 [ 65.196765][ T1829] ? __kasan_kmalloc+0x95/0xb0 [ 65.201531][ T1829] ? __kmalloc+0xb4/0x1e0 [ 65.205868][ T1829] ? bpf_test_init+0xa7/0x140 [ 65.210550][ T1829] ? bpf_prog_test_run+0x3b4/0x5c0 [ 65.215660][ T1829] ? __sys_bpf+0x5ee/0x850 [ 65.220055][ T1829] ? __x64_sys_bpf+0x7c/0x90 [ 65.224625][ T1829] ? x64_sys_call+0x488/0x9a0 [ 65.229286][ T1829] ? do_syscall_64+0x4c/0xa0 [ 65.234146][ T1829] ? xdp_convert_md_to_buff+0x370/0x370 [ 65.239693][ T1829] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 65.245574][ T1829] ? __kasan_check_write+0x14/0x20 [ 65.250674][ T1829] ? _copy_from_user+0x8f/0xc0 [ 65.255431][ T1829] ? bpf_test_init+0x120/0x140 [ 65.260188][ T1829] ? xdp_convert_md_to_buff+0x60/0x370 [ 65.265629][ T1829] bpf_prog_test_run_xdp+0x757/0xf80 [ 65.270897][ T1829] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 65.276694][ T1829] ? __kasan_check_write+0x14/0x20 [ 65.281820][ T1829] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 65.287612][ T1829] bpf_prog_test_run+0x3b4/0x5c0 [ 65.292537][ T1829] ? bpf_prog_query+0x270/0x270 [ 65.297393][ T1829] ? selinux_bpf+0xce/0xf0 [ 65.301795][ T1829] ? security_bpf+0x93/0xb0 [ 65.306283][ T1829] __sys_bpf+0x5ee/0x850 [ 65.310712][ T1829] ? bpf_link_show_fdinfo+0x330/0x330 [ 65.316101][ T1829] ? debug_smp_processor_id+0x17/0x20 [ 65.321557][ T1829] ? perf_trace_sys_enter+0x30/0x150 [ 65.326831][ T1829] __x64_sys_bpf+0x7c/0x90 [ 65.331243][ T1829] x64_sys_call+0x488/0x9a0 [ 65.335735][ T1829] do_syscall_64+0x4c/0xa0 [ 65.340141][ T1829] ? clear_bhb_loop+0x30/0x80 [ 65.344809][ T1829] ? clear_bhb_loop+0x30/0x80 [ 65.349474][ T1829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.355376][ T1829] RIP: 0033:0x7f053799e159 [ 65.359797][ T1829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.379401][ T1829] RSP: 002b:00007f05388d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.387805][ T1829] RAX: ffffffffffffffda RBX: 00007f0537c25fa0 RCX: 00007f053799e159 [ 65.395791][ T1829] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 65.403835][ T1829] RBP: 00007f05388d8090 R08: 0000000000000000 R09: 0000000000000000 [ 65.411792][ T1829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.419749][ T1829] R13: 00007f0537c26038 R14: 00007f0537c25fa0 R15: 00007ffe4a862b88 [ 65.427712][ T1829] [ 66.265490][ T723] device bridge_slave_1 left promiscuous mode [ 66.271813][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.279333][ T723] device bridge_slave_0 left promiscuous mode [ 66.285540][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.293443][ T723] device veth1_macvtap left promiscuous mode [ 66.299510][ T723] device veth0_vlan left promiscuous mode [ 67.389485][ T1868] FAULT_INJECTION: forcing a failure. [ 67.389485][ T1868] name failslab, interval 1, probability 0, space 0, times 0 [ 67.431745][ T1868] CPU: 0 PID: 1868 Comm: syz.0.373 Not tainted syzkaller #0 [ 67.439083][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.449143][ T1868] Call Trace: [ 67.452430][ T1868] [ 67.455363][ T1868] __dump_stack+0x21/0x24 [ 67.459708][ T1868] dump_stack_lvl+0x110/0x170 [ 67.464397][ T1868] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.469432][ T1868] ? kmalloc_node_trace+0x3d/0xb0 [ 67.474464][ T1868] ? bpf_prog_test_run+0x3b4/0x5c0 [ 67.479588][ T1868] ? __x64_sys_bpf+0x7c/0x90 [ 67.484181][ T1868] ? x64_sys_call+0x488/0x9a0 [ 67.488866][ T1868] ? do_syscall_64+0x4c/0xa0 [ 67.493472][ T1868] dump_stack+0x15/0x24 [ 67.497637][ T1868] should_fail_ex+0x3bf/0x510 [ 67.502324][ T1868] __should_failslab+0xac/0xf0 [ 67.507106][ T1868] should_failslab+0x9/0x20 [ 67.511617][ T1868] __kmem_cache_alloc_node+0x3d/0x2d0 [ 67.517001][ T1868] ? kvmalloc_node+0x28a/0x460 [ 67.521775][ T1868] ? kvmalloc_node+0x28a/0x460 [ 67.526549][ T1868] __kmalloc_node+0xa2/0x1e0 [ 67.531235][ T1868] kvmalloc_node+0x28a/0x460 [ 67.535825][ T1868] ? perf_trace_kmalloc+0xfd/0x140 [ 67.540945][ T1868] ? __cfi_kvmalloc_node+0x10/0x10 [ 67.546064][ T1868] ? kasan_save_alloc_info+0x1f/0x30 [ 67.551358][ T1868] ? __kasan_kmalloc+0x95/0xb0 [ 67.556137][ T1868] ? memcpy+0x56/0x70 [ 67.560123][ T1868] page_pool_create+0x1f0/0x610 [ 67.564987][ T1868] bpf_test_run_xdp_live+0x220/0x1b00 [ 67.570373][ T1868] ? migrate_enable+0x1af/0x2a0 [ 67.575235][ T1868] ? __cfi_migrate_enable+0x10/0x10 [ 67.580446][ T1868] ? xdp_convert_md_to_buff+0x370/0x370 [ 67.586005][ T1868] ? bpf_test_init+0xa7/0x140 [ 67.590683][ T1868] ? perf_trace_kmalloc+0xfd/0x140 [ 67.595799][ T1868] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 67.601700][ T1868] ? __kasan_check_write+0x14/0x20 [ 67.606813][ T1868] ? _copy_from_user+0x8f/0xc0 [ 67.611573][ T1868] ? bpf_test_init+0x120/0x140 [ 67.616322][ T1868] ? xdp_convert_md_to_buff+0x60/0x370 [ 67.621767][ T1868] bpf_prog_test_run_xdp+0x757/0xf80 [ 67.627052][ T1868] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 67.632848][ T1868] ? __kasan_check_write+0x14/0x20 [ 67.637946][ T1868] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 67.643741][ T1868] bpf_prog_test_run+0x3b4/0x5c0 [ 67.648663][ T1868] ? bpf_prog_query+0x270/0x270 [ 67.653496][ T1868] ? selinux_bpf+0xce/0xf0 [ 67.657901][ T1868] ? security_bpf+0x93/0xb0 [ 67.662388][ T1868] __sys_bpf+0x5ee/0x850 [ 67.666612][ T1868] ? bpf_link_show_fdinfo+0x330/0x330 [ 67.671969][ T1868] ? __cfi_ksys_write+0x10/0x10 [ 67.676802][ T1868] ? debug_smp_processor_id+0x17/0x20 [ 67.682172][ T1868] __x64_sys_bpf+0x7c/0x90 [ 67.686583][ T1868] x64_sys_call+0x488/0x9a0 [ 67.691075][ T1868] do_syscall_64+0x4c/0xa0 [ 67.695490][ T1868] ? clear_bhb_loop+0x30/0x80 [ 67.700164][ T1868] ? clear_bhb_loop+0x30/0x80 [ 67.704829][ T1868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.710705][ T1868] RIP: 0033:0x7f6ca6d9e159 [ 67.715104][ T1868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.734688][ T1868] RSP: 002b:00007f6ca7c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.743087][ T1868] RAX: ffffffffffffffda RBX: 00007f6ca7025fa0 RCX: 00007f6ca6d9e159 [ 67.751047][ T1868] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 67.759027][ T1868] RBP: 00007f6ca7c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 67.766984][ T1868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.774938][ T1868] R13: 00007f6ca7026038 R14: 00007f6ca7025fa0 R15: 00007ffd3cedd018 [ 67.782907][ T1868] [ 67.794028][ T1868] page_pool_create() gave up with errno -12 [ 67.886227][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.893768][ T1870] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.901382][ T1870] device bridge_slave_0 entered promiscuous mode [ 67.908608][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.916025][ T1870] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.923614][ T1870] device bridge_slave_1 entered promiscuous mode [ 68.023112][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.030245][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.037576][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.044618][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.053369][ T1902] FAULT_INJECTION: forcing a failure. [ 68.053369][ T1902] name failslab, interval 1, probability 0, space 0, times 0 [ 68.072693][ T1902] CPU: 1 PID: 1902 Comm: syz.3.386 Not tainted syzkaller #0 [ 68.080023][ T1902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.090081][ T1902] Call Trace: [ 68.093359][ T1902] [ 68.096285][ T1902] __dump_stack+0x21/0x24 [ 68.100615][ T1902] dump_stack_lvl+0x110/0x170 [ 68.105279][ T1902] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.110296][ T1902] dump_stack+0x15/0x24 [ 68.114438][ T1902] should_fail_ex+0x3bf/0x510 [ 68.119108][ T1902] __should_failslab+0xac/0xf0 [ 68.123870][ T1902] should_failslab+0x9/0x20 [ 68.128357][ T1902] __kmem_cache_alloc_node+0x3d/0x2d0 [ 68.133715][ T1902] ? __xdp_reg_mem_model+0x1dd/0x590 [ 68.138986][ T1902] ? __kasan_kmalloc+0x95/0xb0 [ 68.143746][ T1902] ? __xdp_reg_mem_model+0x1dd/0x590 [ 68.149021][ T1902] kmalloc_trace+0x29/0xb0 [ 68.153423][ T1902] __xdp_reg_mem_model+0x1dd/0x590 [ 68.158519][ T1902] ? __cfi_kvmalloc_node+0x10/0x10 [ 68.163615][ T1902] ? kasan_save_alloc_info+0x1f/0x30 [ 68.168884][ T1902] ? xdp_reg_mem_model+0x40/0x40 [ 68.173806][ T1902] xdp_reg_mem_model+0x25/0x40 [ 68.178639][ T1902] bpf_test_run_xdp_live+0x296/0x1b00 [ 68.183998][ T1902] ? kasan_set_track+0x60/0x70 [ 68.188754][ T1902] ? kasan_save_alloc_info+0x1f/0x30 [ 68.194019][ T1902] ? __kasan_kmalloc+0x95/0xb0 [ 68.198768][ T1902] ? __kmalloc+0xb4/0x1e0 [ 68.203083][ T1902] ? bpf_test_init+0xa7/0x140 [ 68.207750][ T1902] ? bpf_prog_test_run+0x3b4/0x5c0 [ 68.212843][ T1902] ? __sys_bpf+0x5ee/0x850 [ 68.217241][ T1902] ? __x64_sys_bpf+0x7c/0x90 [ 68.221814][ T1902] ? x64_sys_call+0x488/0x9a0 [ 68.226476][ T1902] ? do_syscall_64+0x4c/0xa0 [ 68.231069][ T1902] ? xdp_convert_md_to_buff+0x370/0x370 [ 68.236604][ T1902] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 68.242483][ T1902] ? __kasan_check_write+0x14/0x20 [ 68.247581][ T1902] ? _copy_from_user+0x8f/0xc0 [ 68.252333][ T1902] ? bpf_test_init+0x120/0x140 [ 68.257078][ T1902] ? xdp_convert_md_to_buff+0x60/0x370 [ 68.262519][ T1902] bpf_prog_test_run_xdp+0x757/0xf80 [ 68.267791][ T1902] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 68.273581][ T1902] ? __kasan_check_write+0x14/0x20 [ 68.278678][ T1902] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 68.284467][ T1902] bpf_prog_test_run+0x3b4/0x5c0 [ 68.289392][ T1902] ? bpf_prog_query+0x270/0x270 [ 68.294230][ T1902] ? selinux_bpf+0xce/0xf0 [ 68.298631][ T1902] ? security_bpf+0x93/0xb0 [ 68.303209][ T1902] __sys_bpf+0x5ee/0x850 [ 68.307437][ T1902] ? bpf_link_show_fdinfo+0x330/0x330 [ 68.312797][ T1902] ? __cfi_ksys_write+0x10/0x10 [ 68.317634][ T1902] ? debug_smp_processor_id+0x17/0x20 [ 68.322995][ T1902] __x64_sys_bpf+0x7c/0x90 [ 68.327402][ T1902] x64_sys_call+0x488/0x9a0 [ 68.331899][ T1902] do_syscall_64+0x4c/0xa0 [ 68.336302][ T1902] ? clear_bhb_loop+0x30/0x80 [ 68.340962][ T1902] ? clear_bhb_loop+0x30/0x80 [ 68.345628][ T1902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.351504][ T1902] RIP: 0033:0x7f053799e159 [ 68.355904][ T1902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.375494][ T1902] RSP: 002b:00007f05388d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.383988][ T1902] RAX: ffffffffffffffda RBX: 00007f0537c25fa0 RCX: 00007f053799e159 [ 68.391945][ T1902] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 68.399905][ T1902] RBP: 00007f05388d8090 R08: 0000000000000000 R09: 0000000000000000 [ 68.407866][ T1902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.415832][ T1902] R13: 00007f0537c26038 R14: 00007f0537c25fa0 R15: 00007ffe4a862b88 [ 68.423804][ T1902] [ 68.455844][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.464283][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.473992][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.482634][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.514007][ T1913] device syzkaller0 entered promiscuous mode [ 68.535792][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.544258][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.553111][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.579736][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.588086][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.595675][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.627120][ T1870] device veth0_vlan entered promiscuous mode [ 68.642713][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.657566][ T1870] device veth1_macvtap entered promiscuous mode [ 68.670529][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.733296][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.655456][ T721] device bridge_slave_1 left promiscuous mode [ 69.661589][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.669075][ T721] device bridge_slave_0 left promiscuous mode [ 69.675330][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.683061][ T721] device veth1_macvtap left promiscuous mode [ 69.689135][ T721] device veth0_vlan left promiscuous mode [ 70.614697][ T1982] FAULT_INJECTION: forcing a failure. [ 70.614697][ T1982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.628035][ T1982] CPU: 0 PID: 1982 Comm: syz.2.410 Not tainted syzkaller #0 [ 70.635328][ T1982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.645379][ T1982] Call Trace: [ 70.648656][ T1982] [ 70.651582][ T1982] __dump_stack+0x21/0x24 [ 70.655918][ T1982] dump_stack_lvl+0x110/0x170 [ 70.660596][ T1982] ? __cfi_dump_stack_lvl+0x8/0x8 [ 70.665625][ T1982] dump_stack+0x15/0x24 [ 70.669780][ T1982] should_fail_ex+0x3bf/0x510 [ 70.674472][ T1982] should_fail+0xb/0x10 [ 70.678627][ T1982] should_fail_usercopy+0x1a/0x20 [ 70.683648][ T1982] _copy_to_user+0x1e/0x90 [ 70.688074][ T1982] bpf_test_finish+0x1b2/0x6c0 [ 70.692853][ T1982] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 70.698752][ T1982] ? convert_skb_to___skb+0x430/0x430 [ 70.704130][ T1982] ? __kasan_check_write+0x14/0x20 [ 70.709239][ T1982] ? _copy_from_user+0x8f/0xc0 [ 70.714003][ T1982] ? bpf_test_init+0x120/0x140 [ 70.718765][ T1982] bpf_prog_test_run_xdp+0x827/0xf80 [ 70.724056][ T1982] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 70.729864][ T1982] ? __kasan_check_write+0x14/0x20 [ 70.734974][ T1982] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 70.740777][ T1982] bpf_prog_test_run+0x3b4/0x5c0 [ 70.745719][ T1982] ? bpf_prog_query+0x270/0x270 [ 70.750578][ T1982] ? selinux_bpf+0xce/0xf0 [ 70.755005][ T1982] ? security_bpf+0x93/0xb0 [ 70.759514][ T1982] __sys_bpf+0x5ee/0x850 [ 70.763753][ T1982] ? bpf_link_show_fdinfo+0x330/0x330 [ 70.769130][ T1982] ? __cfi_ksys_write+0x10/0x10 [ 70.773980][ T1982] ? debug_smp_processor_id+0x17/0x20 [ 70.779353][ T1982] __x64_sys_bpf+0x7c/0x90 [ 70.783763][ T1982] x64_sys_call+0x488/0x9a0 [ 70.788266][ T1982] do_syscall_64+0x4c/0xa0 [ 70.792682][ T1982] ? clear_bhb_loop+0x30/0x80 [ 70.797357][ T1982] ? clear_bhb_loop+0x30/0x80 [ 70.802047][ T1982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.807939][ T1982] RIP: 0033:0x7fce5419e159 [ 70.812350][ T1982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.831955][ T1982] RSP: 002b:00007fce55149028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.840371][ T1982] RAX: ffffffffffffffda RBX: 00007fce54425fa0 RCX: 00007fce5419e159 [ 70.848342][ T1982] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 70.856310][ T1982] RBP: 00007fce55149090 R08: 0000000000000000 R09: 0000000000000000 [ 70.864276][ T1982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.872244][ T1982] R13: 00007fce54426038 R14: 00007fce54425fa0 R15: 00007ffd108a5f78 [ 70.880222][ T1982] [ 70.922848][ T1972] device veth0_vlan left promiscuous mode [ 70.929024][ T1972] device veth0_vlan entered promiscuous mode [ 70.939558][ T1980] device veth0_vlan left promiscuous mode [ 70.948657][ T1980] device veth0_vlan entered promiscuous mode [ 70.985697][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.004532][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.012683][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.137084][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.144178][ T1979] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.173995][ T1979] device bridge_slave_0 entered promiscuous mode [ 71.194645][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.226092][ T1979] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.238282][ T1979] device bridge_slave_1 entered promiscuous mode [ 71.259863][ T2024] FAULT_INJECTION: forcing a failure. [ 71.259863][ T2024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.319832][ T2029] device syzkaller0 entered promiscuous mode [ 71.320938][ T2024] CPU: 0 PID: 2024 Comm: syz.4.422 Not tainted syzkaller #0 [ 71.333134][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.343198][ T2024] Call Trace: [ 71.346483][ T2024] [ 71.349426][ T2024] __dump_stack+0x21/0x24 [ 71.353775][ T2024] dump_stack_lvl+0x110/0x170 [ 71.358466][ T2024] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.363507][ T2024] dump_stack+0x15/0x24 [ 71.367672][ T2024] should_fail_ex+0x3bf/0x510 [ 71.372366][ T2024] should_fail+0xb/0x10 [ 71.376533][ T2024] should_fail_usercopy+0x1a/0x20 [ 71.381571][ T2024] _copy_to_user+0x1e/0x90 [ 71.386006][ T2024] bpf_test_finish+0x251/0x6c0 [ 71.390782][ T2024] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 71.396694][ T2024] ? convert_skb_to___skb+0x430/0x430 [ 71.402085][ T2024] ? __kasan_check_write+0x14/0x20 [ 71.407212][ T2024] ? _copy_from_user+0x8f/0xc0 [ 71.411993][ T2024] ? bpf_test_init+0x120/0x140 [ 71.416770][ T2024] bpf_prog_test_run_xdp+0x827/0xf80 [ 71.422074][ T2024] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 71.427909][ T2024] ? __kasan_check_write+0x14/0x20 [ 71.433045][ T2024] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 71.438865][ T2024] bpf_prog_test_run+0x3b4/0x5c0 [ 71.443820][ T2024] ? bpf_prog_query+0x270/0x270 [ 71.448685][ T2024] ? selinux_bpf+0xce/0xf0 [ 71.453162][ T2024] ? security_bpf+0x93/0xb0 [ 71.457692][ T2024] __sys_bpf+0x5ee/0x850 [ 71.461950][ T2024] ? bpf_link_show_fdinfo+0x330/0x330 [ 71.467342][ T2024] ? __cfi_ksys_write+0x10/0x10 [ 71.472211][ T2024] ? debug_smp_processor_id+0x17/0x20 [ 71.477601][ T2024] __x64_sys_bpf+0x7c/0x90 [ 71.482030][ T2024] x64_sys_call+0x488/0x9a0 [ 71.486553][ T2024] do_syscall_64+0x4c/0xa0 [ 71.490987][ T2024] ? clear_bhb_loop+0x30/0x80 [ 71.495678][ T2024] ? clear_bhb_loop+0x30/0x80 [ 71.500368][ T2024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.506268][ T2024] RIP: 0033:0x7fce47b9e159 [ 71.510694][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.530315][ T2024] RSP: 002b:00007fce48a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.538748][ T2024] RAX: ffffffffffffffda RBX: 00007fce47e25fa0 RCX: 00007fce47b9e159 [ 71.546740][ T2024] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 71.554721][ T2024] RBP: 00007fce48a42090 R08: 0000000000000000 R09: 0000000000000000 [ 71.562709][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.570694][ T2024] R13: 00007fce47e26038 R14: 00007fce47e25fa0 R15: 00007ffdd7819418 [ 71.578703][ T2024] [ 71.740853][ T28] audit: type=1400 audit(1790765912.942:136): avc: denied { create } for pid=2041 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.771694][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.778800][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.785669][ T2042] cgroup: fork rejected by pids controller in /syz2 [ 71.786082][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.799645][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.869307][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.888466][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.911303][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.947027][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.961791][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.979918][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.987038][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.015663][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.024104][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.032675][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.039746][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.048549][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.056762][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.081184][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.095973][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.117382][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.132278][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.149340][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.181184][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.251163][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.263102][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.277710][ T1979] device veth0_vlan entered promiscuous mode [ 72.321206][ T1979] device veth1_macvtap entered promiscuous mode [ 72.336630][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.353709][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.368995][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.417016][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.433923][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.442624][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.451681][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.531971][ T2079] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.540515][ T2079] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.550844][ T2079] device bridge_slave_0 entered promiscuous mode [ 72.562730][ T2079] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.570885][ T2079] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.578789][ T2079] device bridge_slave_1 entered promiscuous mode [ 72.628673][ T2079] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.635752][ T2079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.642981][ T2079] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.650019][ T2079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.672177][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.680041][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.687628][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.696913][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.708807][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.715855][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.724672][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.733057][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.740113][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.752594][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.761953][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.781759][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.792857][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.801047][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.808936][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.817956][ T2079] device veth0_vlan entered promiscuous mode [ 72.832979][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.842057][ T2079] device veth1_macvtap entered promiscuous mode [ 72.851268][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.861453][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.215618][ T724] device bridge_slave_1 left promiscuous mode [ 73.221751][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.229270][ T724] device bridge_slave_0 left promiscuous mode [ 73.235639][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.243594][ T724] device bridge_slave_1 left promiscuous mode [ 73.249812][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.257209][ T724] device bridge_slave_0 left promiscuous mode [ 73.263301][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.271452][ T724] device veth1_macvtap left promiscuous mode [ 73.277562][ T724] device veth0_vlan left promiscuous mode [ 73.283618][ T724] device veth1_macvtap left promiscuous mode [ 73.289736][ T724] device veth0_vlan left promiscuous mode [ 74.241335][ T2101] FAULT_INJECTION: forcing a failure. [ 74.241335][ T2101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.254580][ T2104] Â: renamed from pim6reg1 [ 74.267050][ T2101] CPU: 1 PID: 2101 Comm: syz.2.436 Not tainted syzkaller #0 [ 74.274378][ T2101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.284443][ T2101] Call Trace: [ 74.287731][ T2101] [ 74.290662][ T2101] __dump_stack+0x21/0x24 [ 74.295002][ T2101] dump_stack_lvl+0x110/0x170 [ 74.299685][ T2101] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.304726][ T2101] dump_stack+0x15/0x24 [ 74.309151][ T2101] should_fail_ex+0x3bf/0x510 [ 74.313848][ T2101] should_fail+0xb/0x10 [ 74.318016][ T2101] should_fail_usercopy+0x1a/0x20 [ 74.323049][ T2101] _copy_to_user+0x1e/0x90 [ 74.327484][ T2101] bpf_test_finish+0x497/0x6c0 [ 74.332256][ T2101] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 74.338155][ T2101] ? convert_skb_to___skb+0x430/0x430 [ 74.343519][ T2101] ? __kasan_check_write+0x14/0x20 [ 74.348644][ T2101] ? _copy_from_user+0x8f/0xc0 [ 74.353409][ T2101] ? bpf_test_init+0x120/0x140 [ 74.358180][ T2101] bpf_prog_test_run_xdp+0x827/0xf80 [ 74.363467][ T2101] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 74.369283][ T2101] ? __kasan_check_write+0x14/0x20 [ 74.374402][ T2101] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 74.380339][ T2101] bpf_prog_test_run+0x3b4/0x5c0 [ 74.385283][ T2101] ? bpf_prog_query+0x270/0x270 [ 74.390134][ T2101] ? selinux_bpf+0xce/0xf0 [ 74.394567][ T2101] ? security_bpf+0x93/0xb0 [ 74.399086][ T2101] __sys_bpf+0x5ee/0x850 [ 74.403334][ T2101] ? bpf_link_show_fdinfo+0x330/0x330 [ 74.408832][ T2101] ? __cfi_ksys_write+0x10/0x10 [ 74.413769][ T2101] ? debug_smp_processor_id+0x17/0x20 [ 74.419141][ T2101] __x64_sys_bpf+0x7c/0x90 [ 74.423547][ T2101] x64_sys_call+0x488/0x9a0 [ 74.428042][ T2101] do_syscall_64+0x4c/0xa0 [ 74.432456][ T2101] ? clear_bhb_loop+0x30/0x80 [ 74.437126][ T2101] ? clear_bhb_loop+0x30/0x80 [ 74.441799][ T2101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.447710][ T2101] RIP: 0033:0x7f8ebb79e159 [ 74.452116][ T2101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.471712][ T2101] RSP: 002b:00007f8ebc648028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.480129][ T2101] RAX: ffffffffffffffda RBX: 00007f8ebba25fa0 RCX: 00007f8ebb79e159 [ 74.488109][ T2101] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 74.496068][ T2101] RBP: 00007f8ebc648090 R08: 0000000000000000 R09: 0000000000000000 [ 74.504060][ T2101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.512032][ T2101] R13: 00007f8ebba26038 R14: 00007f8ebba25fa0 R15: 00007fff9f21b158 [ 74.520031][ T2101] [ 74.813788][ T2141] FAULT_INJECTION: forcing a failure. [ 74.813788][ T2141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.841500][ T2106] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.850970][ T2141] CPU: 1 PID: 2141 Comm: syz.4.457 Not tainted syzkaller #0 [ 74.853248][ T2106] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.858301][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.858313][ T2141] Call Trace: [ 74.858318][ T2141] [ 74.858324][ T2141] __dump_stack+0x21/0x24 [ 74.858350][ T2141] dump_stack_lvl+0x110/0x170 [ 74.858370][ T2141] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.866452][ T2106] device bridge_slave_0 entered promiscuous mode [ 74.875514][ T2141] dump_stack+0x15/0x24 [ 74.875542][ T2141] should_fail_ex+0x3bf/0x510 [ 74.875559][ T2141] should_fail+0xb/0x10 [ 74.875574][ T2141] should_fail_usercopy+0x1a/0x20 [ 74.875588][ T2141] _copy_to_user+0x1e/0x90 [ 74.875609][ T2141] simple_read_from_buffer+0xe9/0x160 [ 74.875628][ T2141] proc_fail_nth_read+0x1a6/0x220 [ 74.875646][ T2141] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 74.875662][ T2141] ? security_file_permission+0x94/0xb0 [ 74.875683][ T2141] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 74.875700][ T2141] vfs_read+0x286/0x930 [ 74.875717][ T2141] ? __cfi_vfs_read+0x10/0x10 [ 74.875732][ T2141] ? __kasan_check_write+0x14/0x20 [ 74.875750][ T2141] ? mutex_lock+0x93/0x1b0 [ 74.875766][ T2141] ? __cfi_mutex_lock+0x10/0x10 [ 74.875784][ T2141] ? __fdget_pos+0x2cd/0x380 [ 74.875802][ T2141] ? ksys_read+0x70/0x260 [ 74.875816][ T2141] ksys_read+0x14a/0x260 [ 74.888251][ T2106] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.890991][ T2141] ? __cfi_ksys_read+0x10/0x10 [ 74.891014][ T2141] ? debug_smp_processor_id+0x17/0x20 [ 74.891032][ T2141] __x64_sys_read+0x7b/0x90 [ 74.891046][ T2141] x64_sys_call+0x2f/0x9a0 [ 74.891063][ T2141] do_syscall_64+0x4c/0xa0 [ 74.891082][ T2141] ? clear_bhb_loop+0x30/0x80 [ 74.891099][ T2141] ? clear_bhb_loop+0x30/0x80 [ 74.891113][ T2141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.891129][ T2141] RIP: 0033:0x7fce47b5e98e [ 74.891144][ T2141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.891162][ T2141] RSP: 002b:00007fce48a41fe8 EFLAGS: 00000246 [ 74.896426][ T2106] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.902480][ T2141] ORIG_RAX: 0000000000000000 [ 74.902489][ T2141] RAX: ffffffffffffffda RBX: 00007fce48a426c0 RCX: 00007fce47b5e98e [ 74.902501][ T2141] RDX: 000000000000000f RSI: 00007fce48a420a0 RDI: 0000000000000004 [ 74.907855][ T2106] device bridge_slave_1 entered promiscuous mode [ 74.911287][ T2141] RBP: 00007fce48a42090 R08: 0000000000000000 R09: 0000000000000000 [ 74.911301][ T2141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.988258][ T2106] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.995058][ T2141] R13: 00007fce47e26038 R14: 00007fce47e25fa0 R15: 00007ffdd7819418 [ 74.995079][ T2141] [ 75.132562][ T2106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.139868][ T2106] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.146917][ T2106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.164206][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.173985][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.235346][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.243298][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.267852][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.284357][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.293142][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.300214][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.308169][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.316707][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.325037][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.332085][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.358093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.370727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.384266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.397620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.443530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.452040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.475725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.483831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.500693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.508447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.545838][ T2106] device veth0_vlan entered promiscuous mode [ 75.622860][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.642064][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.670309][ T2106] device veth1_macvtap entered promiscuous mode [ 75.713251][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.729130][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.743935][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.804237][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.821600][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.755723][ T724] device bridge_slave_1 left promiscuous mode [ 76.761866][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.769556][ T724] device bridge_slave_0 left promiscuous mode [ 76.775778][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.783651][ T724] device veth1_macvtap left promiscuous mode [ 76.789745][ T724] device veth0_vlan left promiscuous mode [ 77.954786][ T2271] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.962009][ T2271] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.975153][ T28] audit: type=1400 audit(1790765919.172:137): avc: denied { create } for pid=2272 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 77.999796][ T2271] device bridge_slave_1 left promiscuous mode [ 78.007324][ T2271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.016116][ T2271] device bridge_slave_0 left promiscuous mode [ 78.022267][ T2271] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.336106][ T2266] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.380154][ T2266] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.421564][ T2266] device bridge_slave_0 entered promiscuous mode [ 78.484134][ T2266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.512193][ T2266] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.558893][ T2266] device bridge_slave_1 entered promiscuous mode [ 79.022398][ T2291] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.029549][ T2291] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.037138][ T2291] device bridge_slave_0 entered promiscuous mode [ 79.052529][ T2291] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.059741][ T2291] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.067334][ T2291] device bridge_slave_1 entered promiscuous mode [ 79.099886][ T2306] device bridge_slave_0 entered promiscuous mode [ 79.136430][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.144343][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.176871][ T2312] û: renamed from bond_slave_0 [ 79.184061][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.192347][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.199420][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.206930][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.215297][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.222342][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.230404][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.245718][ T724] device bridge_slave_1 left promiscuous mode [ 79.251871][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.261929][ T724] device bridge_slave_0 left promiscuous mode [ 79.271035][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.279008][ T724] device veth1_macvtap left promiscuous mode [ 79.285199][ T724] device veth0_vlan left promiscuous mode [ 79.401154][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.409289][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.417396][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.425544][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.450365][ T2320] device syzkaller0 entered promiscuous mode [ 79.476336][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.485009][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.511189][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.519971][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.531548][ T2266] device veth0_vlan entered promiscuous mode [ 79.539131][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.547554][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.556032][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.563052][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.570555][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.578805][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.587517][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.596628][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.605316][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.612355][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.620172][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.628250][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.636242][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.651386][ T2266] device veth1_macvtap entered promiscuous mode [ 79.686474][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.697239][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.710060][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.717788][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.725957][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.734030][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.742181][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.750301][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.758681][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.771024][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.779551][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.790772][ T2291] device veth0_vlan entered promiscuous mode [ 79.814464][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.825386][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.833613][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.843229][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.967856][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.978551][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.995282][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.017007][ T2291] device veth1_macvtap entered promiscuous mode [ 80.149612][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.175238][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.290161][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.301898][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.907681][ T2375] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.948907][ T2375] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.985250][ T2375] device bridge_slave_0 entered promiscuous mode [ 80.996874][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.014085][ T2375] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.031984][ T2375] device bridge_slave_1 entered promiscuous mode [ 81.235117][ T2379] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.242182][ T2379] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.274028][ T2379] device bridge_slave_0 entered promiscuous mode [ 81.310736][ T2379] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.328104][ T2379] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.346119][ T2379] device bridge_slave_1 entered promiscuous mode [ 81.356352][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.363401][ T2375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.370676][ T2375] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.377714][ T2375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.399760][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.582194][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.606807][ T28] audit: type=1400 audit(1790765922.812:138): avc: denied { create } for pid=2396 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.813397][ T2413] device syzkaller0 entered promiscuous mode [ 81.995906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.008553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.045071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.065383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.080648][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.087775][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.105210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.118381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.134296][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.141406][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.153897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.174656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.192842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.207622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.306554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.317272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.356392][ T2375] device veth0_vlan entered promiscuous mode [ 82.367080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.377600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.386869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.394502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.440281][ T2375] device veth1_macvtap entered promiscuous mode [ 82.448561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.463671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.473132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.506822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.524356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.552585][ T2415] syz.4.530 (2415) used greatest stack depth: 19400 bytes left [ 82.563342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.534992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.809349][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.837010][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.851310][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.861589][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.870757][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.877836][ T719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.894906][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.903672][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.912413][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.919610][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.955904][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.976492][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.986849][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.997066][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.015328][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.042753][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.051649][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.070926][ T2379] device veth0_vlan entered promiscuous mode [ 84.085326][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.093662][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.119587][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.128407][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.143654][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.159778][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.177857][ T2379] device veth1_macvtap entered promiscuous mode [ 84.209073][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.225547][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.245828][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.286446][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.305097][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.614918][ T2481] tap0: tun_chr_ioctl cmd 2147767507 [ 84.841751][ T724] device bridge_slave_1 left promiscuous mode [ 84.869714][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.898682][ T724] device bridge_slave_0 left promiscuous mode [ 84.914851][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.927160][ T724] device bridge_slave_1 left promiscuous mode [ 84.943243][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.951234][ T724] device bridge_slave_0 left promiscuous mode [ 84.959072][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.984169][ T724] device veth1_macvtap left promiscuous mode [ 84.995019][ T724] device veth0_vlan left promiscuous mode [ 85.023440][ T724] device veth1_macvtap left promiscuous mode [ 85.031162][ T724] device veth0_vlan left promiscuous mode [ 85.419384][ T2482] syz.4.548 (2482) used greatest stack depth: 18856 bytes left [ 85.568933][ T2492] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.577211][ T2492] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.586713][ T2492] device bridge_slave_0 entered promiscuous mode [ 85.605732][ T2492] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.614908][ T2492] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.630013][ T2492] device bridge_slave_1 entered promiscuous mode [ 85.733418][ T2495] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.751122][ T2495] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.769783][ T2495] device bridge_slave_0 entered promiscuous mode [ 85.806601][ T2495] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.813667][ T2495] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.831801][ T2495] device bridge_slave_1 entered promiscuous mode [ 85.957561][ T2492] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.964673][ T2492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.972000][ T2492] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.979057][ T2492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.000554][ T2495] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.007674][ T2495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.015092][ T2495] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.022125][ T2495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.085991][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.096422][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.110549][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.125046][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.145712][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.155055][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.191749][ T2532] device syzkaller0 entered promiscuous mode [ 86.208988][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.218731][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.245274][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.252445][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.275411][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.290437][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.297641][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.305305][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.313411][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.332645][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.347259][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.355131][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.364869][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.375104][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.382145][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.406436][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.416203][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.424684][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.438393][ T2492] device veth0_vlan entered promiscuous mode [ 86.465434][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.475303][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.484381][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.493303][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.516997][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.526092][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.536781][ T2495] device veth0_vlan entered promiscuous mode [ 86.546406][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.575353][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.588957][ T28] audit: type=1400 audit(1790765927.792:139): avc: denied { create } for pid=2537 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.595199][ T2492] device veth1_macvtap entered promiscuous mode [ 86.622671][ T2495] device veth1_macvtap entered promiscuous mode [ 86.659421][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.675351][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.688731][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.710332][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.723800][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.742374][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.852007][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.866647][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.878740][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.890589][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.902382][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.918418][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.935752][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.955054][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.488064][ T2341] syz.4.515 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.500027][ T2341] CPU: 1 PID: 2341 Comm: syz.4.515 Not tainted syzkaller #0 [ 87.507347][ T2341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.517415][ T2341] Call Trace: [ 87.520735][ T2341] [ 87.523677][ T2341] __dump_stack+0x21/0x24 [ 87.528027][ T2341] dump_stack_lvl+0x110/0x170 [ 87.532726][ T2341] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.537779][ T2341] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 87.543626][ T2341] ? ___ratelimit+0x40a/0x590 [ 87.548323][ T2341] dump_stack+0x15/0x24 [ 87.552514][ T2341] dump_header+0xdb/0x660 [ 87.556870][ T2341] ? __cfi_gfp_zone+0x10/0x10 [ 87.561564][ T2341] oom_kill_process+0x32a/0x410 [ 87.566441][ T2341] ? kvm_sched_clock_read+0x18/0x40 [ 87.571666][ T2341] out_of_memory+0x630/0x930 [ 87.576270][ T2341] ? __cfi_out_of_memory+0x10/0x10 [ 87.581396][ T2341] mem_cgroup_out_of_memory+0x2be/0x390 [ 87.586947][ T2341] ? __kasan_check_write+0x14/0x20 [ 87.592871][ T2341] ? mem_cgroup_oom_trylock+0x360/0x360 [ 87.598484][ T2341] try_charge_memcg+0xb8a/0x1650 [ 87.603440][ T2341] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 87.608831][ T2341] ? __asan_set_shadow_00+0xe/0x10 [ 87.613964][ T2341] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 87.619913][ T2341] charge_memcg+0x81/0x1f0 [ 87.624343][ T2341] __mem_cgroup_charge+0x93/0x290 [ 87.629383][ T2341] ? xas_start+0x31d/0x3e0 [ 87.633808][ T2341] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 87.639452][ T2341] ? xas_load+0x3a2/0x3c0 [ 87.643793][ T2341] shmem_add_to_page_cache+0x5b1/0xae0 [ 87.649269][ T2341] ? put_page+0xb0/0xb0 [ 87.653438][ T2341] ? preempt_schedule_irq+0xca/0x120 [ 87.658914][ T2341] shmem_get_folio_gfp+0xef9/0x20f0 [ 87.664130][ T2341] shmem_write_begin+0xea/0x2c0 [ 87.668991][ T2341] generic_perform_write+0x32d/0x740 [ 87.674311][ T2341] ? __cfi_generic_perform_write+0x10/0x10 [ 87.680242][ T2341] ? __cfi_file_update_time+0x10/0x10 [ 87.685634][ T2341] ? __get_user_pages+0xb5d/0xdb0 [ 87.690672][ T2341] ? generic_write_checks_count+0x369/0x450 [ 87.696578][ T2341] __generic_file_write_iter+0x17a/0x230 [ 87.702224][ T2341] generic_file_write_iter+0xae/0x310 [ 87.707625][ T2341] __kernel_write_iter+0x2a9/0x6a0 [ 87.712755][ T2341] ? __cfi___kernel_write_iter+0x10/0x10 [ 87.718396][ T2341] ? vfs_llseek+0xbb/0xf0 [ 87.722747][ T2341] ? iov_iter_bvec+0x53/0x1f0 [ 87.727537][ T2341] dump_user_range+0x3e6/0x630 [ 87.732315][ T2341] ? __cfi_dump_user_range+0x10/0x10 [ 87.737691][ T2341] ? dump_align+0xfe/0x120 [ 87.742115][ T2341] ? dump_emit+0xa8/0xc0 [ 87.746362][ T2341] elf_core_dump+0x2b60/0x30b0 [ 87.751140][ T2341] ? __cfi_elf_core_dump+0x10/0x10 [ 87.756273][ T2341] ? dump_interrupted+0xd0/0xd0 [ 87.761140][ T2341] ? filp_open+0x195/0x1e0 [ 87.765565][ T2341] ? 0xffffffffff600000 [ 87.769723][ T2341] do_coredump+0x160e/0x23a0 [ 87.774334][ T2341] ? __cfi_do_coredump+0x10/0x10 [ 87.779296][ T2341] ? kmem_cache_free+0x12d/0x300 [ 87.784251][ T2341] ? ____kasan_slab_free+0x13d/0x180 [ 87.789558][ T2341] ? get_signal+0xac2/0x1700 [ 87.794212][ T2341] ? kmem_cache_free+0x12d/0x300 [ 87.799154][ T2341] get_signal+0x157d/0x1700 [ 87.803657][ T2341] ? __cfi_get_signal+0x10/0x10 [ 87.808588][ T2341] ? force_sig_info_to_task+0x306/0x3b0 [ 87.814139][ T2341] arch_do_signal_or_restart+0xd1/0x11c0 [ 87.819820][ T2341] ? page_fault_oops+0x8b0/0x8b0 [ 87.824768][ T2341] ? down_read_trylock+0x27f/0x660 [ 87.829878][ T2341] ? find_vma+0x89/0xd0 [ 87.834024][ T2341] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 87.840169][ T2341] ? do_user_addr_fault+0xd10/0x1030 [ 87.846070][ T2341] exit_to_user_mode_loop+0x7a/0xb0 [ 87.851274][ T2341] exit_to_user_mode_prepare+0x87/0xd0 [ 87.856731][ T2341] irqentry_exit_to_user_mode+0x9/0x10 [ 87.862188][ T2341] irqentry_exit+0x12/0x40 [ 87.866596][ T2341] exc_page_fault+0x5e/0xb0 [ 87.871091][ T2341] asm_exc_page_fault+0x27/0x30 [ 87.875944][ T2341] RIP: 0033:0x9ac89065 [ 87.880015][ T2341] Code: Unable to access opcode bytes at 0x9ac8903b. [ 87.886753][ T2341] RSP: 002b:00002000000000a8 EFLAGS: 00010217 [ 87.892894][ T2341] RAX: 0000000000000000 RBX: 00007fce47e26090 RCX: 00007fce47b9e159 [ 87.900852][ T2341] RDX: 00002000000000c0 RSI: 00002000000000a0 RDI: 0000000000800000 [ 87.908812][ T2341] RBP: 00007fce47c3506b R08: 0000200000000140 R09: 0000200000000140 [ 87.916770][ T2341] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 87.924732][ T2341] R13: 00007fce47e26128 R14: 00007fce47e26090 R15: 00007ffdd7819418 [ 87.932786][ T2341] [ 87.937864][ T2341] memory: usage 301896kB, limit 307200kB, failcnt 22723 [ 88.010636][ T2351] syz.4.515 (2351) used greatest stack depth: 15560 bytes left [ 88.265006][ T2341] memory+swap: usage 429928kB, limit 9007199254740988kB, failcnt 0 [ 88.273785][ T2341] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 88.280914][ T2341] Memory cgroup stats for /syz4: [ 88.281063][ T2341] anon 765952 [ 88.281063][ T2341] file 311312384 [ 88.281063][ T2341] kernel 0 [ 88.281063][ T2341] kernel_stack 0 [ 88.281063][ T2341] pagetables 0 [ 88.281063][ T2341] sec_pagetables 0 [ 88.281063][ T2341] percpu 0 [ 88.281063][ T2341] sock 0 [ 88.281063][ T2341] vmalloc 0 [ 88.281063][ T2341] shmem 310247424 [ 88.281063][ T2341] file_mapped 868352 [ 88.281063][ T2341] file_dirty 16384 [ 88.281063][ T2341] file_writeback 16384 [ 88.281063][ T2341] swapcached 1466368 [ 88.281063][ T2341] anon_thp 0 [ 88.281063][ T2341] file_thp 0 [ 88.281063][ T2341] shmem_thp 0 [ 88.281063][ T2341] inactive_anon 137240576 [ 88.281063][ T2341] active_anon 172851200 [ 88.281063][ T2341] inactive_file 229376 [ 88.281063][ T2341] active_file 835584 [ 88.281063][ T2341] unevictable 0 [ 88.281063][ T2341] slab_reclaimable 0 [ 88.281063][ T2341] slab_unreclaimable 0 [ 88.281063][ T2341] slab 0 [ 88.281063][ T2341] workingset_refault_anon 0 [ 88.591305][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.605427][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.612954][ T2583] device bridge_slave_0 entered promiscuous mode [ 88.645223][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.652303][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.670794][ T2583] device bridge_slave_1 entered promiscuous mode [ 88.707438][ T724] device bridge_slave_1 left promiscuous mode [ 88.713691][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.738549][ T724] device bridge_slave_0 left promiscuous mode [ 88.744706][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.765788][ T724] device bridge_slave_1 left promiscuous mode [ 88.771949][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.789396][ T724] device bridge_slave_0 left promiscuous mode [ 88.807238][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.820502][ T724] device veth1_macvtap left promiscuous mode [ 88.826635][ T724] device veth0_vlan left promiscuous mode [ 88.845114][ T724] device veth1_macvtap left promiscuous mode [ 88.851271][ T724] device veth0_vlan left promiscuous mode [ 88.874918][ T2341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.515,pid=2344,uid=0 [ 88.965057][ T2341] Memory cgroup out of memory: Killed process 2344 (syz.4.515) total-vm:90468kB, anon-rss:1360kB, file-rss:52556kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 89.039665][ T2355] syz.4.515 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.064923][ T2355] CPU: 0 PID: 2355 Comm: syz.4.515 Not tainted syzkaller #0 [ 89.072348][ T2355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.082413][ T2355] Call Trace: [ 89.085701][ T2355] [ 89.088639][ T2355] __dump_stack+0x21/0x24 [ 89.093003][ T2355] dump_stack_lvl+0x110/0x170 [ 89.097789][ T2355] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.102929][ T2355] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 89.108752][ T2355] ? ___ratelimit+0x40a/0x590 [ 89.113452][ T2355] dump_stack+0x15/0x24 [ 89.117694][ T2355] dump_header+0xdb/0x660 [ 89.122041][ T2355] ? __cfi_gfp_zone+0x10/0x10 [ 89.126832][ T2355] oom_kill_process+0x32a/0x410 [ 89.131721][ T2355] ? kvm_sched_clock_read+0x18/0x40 [ 89.136952][ T2355] out_of_memory+0x630/0x930 [ 89.141560][ T2355] ? __cfi_out_of_memory+0x10/0x10 [ 89.146707][ T2355] mem_cgroup_out_of_memory+0x2be/0x390 [ 89.152271][ T2355] ? __kasan_check_write+0x14/0x20 [ 89.157402][ T2355] ? mem_cgroup_oom_trylock+0x360/0x360 [ 89.162975][ T2355] try_charge_memcg+0xb8a/0x1650 [ 89.167952][ T2355] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 89.173347][ T2355] ? __asan_set_shadow_00+0xe/0x10 [ 89.178481][ T2355] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 89.185176][ T2355] charge_memcg+0x81/0x1f0 [ 89.189608][ T2355] __mem_cgroup_charge+0x93/0x290 [ 89.194648][ T2355] ? xas_start+0x31d/0x3e0 [ 89.199118][ T2355] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 89.204768][ T2355] ? xas_load+0x3a2/0x3c0 [ 89.209116][ T2355] shmem_add_to_page_cache+0x5b1/0xae0 [ 89.214600][ T2355] ? put_page+0xb0/0xb0 [ 89.218773][ T2355] ? vma_data_pages+0xfc/0x130 [ 89.223569][ T2355] shmem_get_folio_gfp+0xef9/0x20f0 [ 89.229398][ T2355] shmem_write_begin+0xea/0x2c0 [ 89.234262][ T2355] generic_perform_write+0x32d/0x740 [ 89.239649][ T2355] ? __mark_inode_dirty+0x264/0x9c0 [ 89.244869][ T2355] ? __cfi_generic_perform_write+0x10/0x10 [ 89.250700][ T2355] ? __cfi_file_update_time+0x10/0x10 [ 89.256095][ T2355] ? __get_user_pages+0xb5d/0xdb0 [ 89.261133][ T2355] ? generic_write_checks_count+0x369/0x450 [ 89.267055][ T2355] __generic_file_write_iter+0x17a/0x230 [ 89.272709][ T2355] generic_file_write_iter+0xae/0x310 [ 89.278145][ T2355] __kernel_write_iter+0x2a9/0x6a0 [ 89.283267][ T2355] ? __cfi___kernel_write_iter+0x10/0x10 [ 89.288940][ T2355] ? vfs_llseek+0xbb/0xf0 [ 89.293276][ T2355] ? iov_iter_bvec+0x53/0x1f0 [ 89.297962][ T2355] dump_user_range+0x3e6/0x630 [ 89.302740][ T2355] ? __cfi_dump_user_range+0x10/0x10 [ 89.308034][ T2355] ? dump_align+0xfe/0x120 [ 89.312468][ T2355] ? dump_emit+0xa8/0xc0 [ 89.316916][ T2355] elf_core_dump+0x2b60/0x30b0 [ 89.321930][ T2355] ? __cfi_elf_core_dump+0x10/0x10 [ 89.327068][ T2355] ? dump_interrupted+0xd0/0xd0 [ 89.331933][ T2355] ? filp_open+0x195/0x1e0 [ 89.336370][ T2355] ? 0xffffffffff600000 [ 89.340528][ T2355] do_coredump+0x160e/0x23a0 [ 89.345133][ T2355] ? __cfi_do_coredump+0x10/0x10 [ 89.347787][ T2344] syz.4.515 (2344) used greatest stack depth: 14504 bytes left [ 89.350082][ T2355] ? kmem_cache_free+0x12d/0x300 [ 89.362629][ T2355] ? ____kasan_slab_free+0x13d/0x180 [ 89.367915][ T2355] ? get_signal+0xac2/0x1700 [ 89.372848][ T2355] ? kmem_cache_free+0x12d/0x300 [ 89.377773][ T2355] get_signal+0x157d/0x1700 [ 89.382386][ T2355] ? __cfi_get_signal+0x10/0x10 [ 89.387229][ T2355] ? force_sig_info_to_task+0x306/0x3b0 [ 89.392882][ T2355] arch_do_signal_or_restart+0xd1/0x11c0 [ 89.398603][ T2355] ? page_fault_oops+0x8b0/0x8b0 [ 89.403528][ T2355] ? down_read_trylock+0x27f/0x660 [ 89.408638][ T2355] ? find_vma+0x89/0xd0 [ 89.412780][ T2355] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 89.418928][ T2355] ? do_user_addr_fault+0xd10/0x1030 [ 89.424206][ T2355] exit_to_user_mode_loop+0x7a/0xb0 [ 89.429408][ T2355] exit_to_user_mode_prepare+0x87/0xd0 [ 89.434887][ T2355] irqentry_exit_to_user_mode+0x9/0x10 [ 89.440352][ T2355] irqentry_exit+0x12/0x40 [ 89.444761][ T2355] exc_page_fault+0x5e/0xb0 [ 89.449250][ T2355] asm_exc_page_fault+0x27/0x30 [ 89.454092][ T2355] RIP: 0033:0x9ac89065 [ 89.458150][ T2355] Code: Unable to access opcode bytes at 0x9ac8903b. [ 89.464805][ T2355] RSP: 002b:00002000000000a8 EFLAGS: 00010217 [ 89.470865][ T2355] RAX: 0000000000000000 RBX: 00007fce47e26090 RCX: 00007fce47b9e159 [ 89.478829][ T2355] RDX: 00002000000000c0 RSI: 00002000000000a0 RDI: 0000000000800000 [ 89.486792][ T2355] RBP: 00007fce47c3506b R08: 0000200000000140 R09: 0000200000000140 [ 89.494759][ T2355] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 89.502715][ T2355] R13: 00007fce47e26128 R14: 00007fce47e26090 R15: 00007ffdd7819418 [ 89.510676][ T2355] [ 89.517007][ T2355] memory: usage 307200kB, limit 307200kB, failcnt 25306 [ 89.523976][ T2355] memory+swap: usage 429680kB, limit 9007199254740988kB, failcnt 0 [ 89.532140][ T2355] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 89.539238][ T2355] Memory cgroup stats for /syz4: [ 89.539393][ T2355] anon 827392 [ 89.539393][ T2355] file 313384960 [ 89.539393][ T2355] kernel 0 [ 89.539393][ T2355] kernel_stack 0 [ 89.539393][ T2355] pagetables 0 [ 89.539393][ T2355] sec_pagetables 0 [ 89.539393][ T2355] percpu 0 [ 89.539393][ T2355] sock 0 [ 89.539393][ T2355] vmalloc 0 [ 89.539393][ T2355] shmem 313364480 [ 89.539393][ T2355] file_mapped 16384 [ 89.539393][ T2355] file_dirty 16384 [ 89.539393][ T2355] file_writeback 77824 [ 89.539393][ T2355] swapcached 360448 [ 89.539393][ T2355] anon_thp 0 [ 89.539393][ T2355] file_thp 0 [ 89.539393][ T2355] shmem_thp 0 [ 89.539393][ T2355] inactive_anon 215474176 [ 89.539393][ T2355] active_anon 98349056 [ 89.539393][ T2355] inactive_file 20480 [ 89.539393][ T2355] active_file 0 [ 89.539393][ T2355] unevictable 0 [ 89.539393][ T2355] slab_reclaimable 0 [ 89.539393][ T2355] slab_unreclaimable 0 [ 89.539393][ T2355] slab 0 [ 89.539393][ T2355] workingset_refault_anon 0 [ 89.635721][ T2355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.515,pid=2352,uid=0 [ 89.650655][ T2355] Memory cgroup out of memory: Killed process 2352 (syz.4.515) total-vm:90864kB, anon-rss:1376kB, file-rss:49924kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 89.947911][ T2362] syz.4.515 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.995182][ T2362] CPU: 1 PID: 2362 Comm: syz.4.515 Not tainted syzkaller #0 [ 90.002509][ T2362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.012652][ T2362] Call Trace: [ 90.015933][ T2362] [ 90.018861][ T2362] __dump_stack+0x21/0x24 [ 90.023200][ T2362] dump_stack_lvl+0x110/0x170 [ 90.027876][ T2362] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.032899][ T2362] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 90.038708][ T2362] ? ___ratelimit+0x40a/0x590 [ 90.043387][ T2362] dump_stack+0x15/0x24 [ 90.047546][ T2362] dump_header+0xdb/0x660 [ 90.051868][ T2362] ? __cfi_gfp_zone+0x10/0x10 [ 90.056531][ T2362] oom_kill_process+0x32a/0x410 [ 90.061372][ T2362] ? kvm_sched_clock_read+0x18/0x40 [ 90.066575][ T2362] out_of_memory+0x630/0x930 [ 90.071155][ T2362] ? __cfi_out_of_memory+0x10/0x10 [ 90.076873][ T2362] mem_cgroup_out_of_memory+0x2be/0x390 [ 90.082407][ T2362] ? __kasan_check_write+0x14/0x20 [ 90.087678][ T2362] ? mem_cgroup_oom_trylock+0x360/0x360 [ 90.093257][ T2362] try_charge_memcg+0xb8a/0x1650 [ 90.098187][ T2362] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 90.103547][ T2362] ? __asan_set_shadow_00+0xe/0x10 [ 90.108652][ T2362] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 90.114540][ T2362] charge_memcg+0x81/0x1f0 [ 90.118949][ T2362] __mem_cgroup_charge+0x93/0x290 [ 90.123957][ T2362] ? xas_start+0x31d/0x3e0 [ 90.128362][ T2362] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 90.133999][ T2362] ? xas_load+0x3a2/0x3c0 [ 90.138317][ T2362] shmem_add_to_page_cache+0x5b1/0xae0 [ 90.143766][ T2362] ? put_page+0xb0/0xb0 [ 90.147907][ T2362] ? __this_cpu_preempt_check+0x13/0x20 [ 90.153438][ T2362] ? vma_data_pages+0xfc/0x130 [ 90.158195][ T2362] shmem_get_folio_gfp+0xef9/0x20f0 [ 90.163387][ T2362] shmem_write_begin+0xea/0x2c0 [ 90.168227][ T2362] generic_perform_write+0x32d/0x740 [ 90.173503][ T2362] ? __mark_inode_dirty+0x264/0x9c0 [ 90.178708][ T2362] ? __cfi_generic_perform_write+0x10/0x10 [ 90.184503][ T2362] ? __cfi_file_update_time+0x10/0x10 [ 90.189861][ T2362] ? __get_user_pages+0xb5d/0xdb0 [ 90.194907][ T2362] ? generic_write_checks_count+0x369/0x450 [ 90.201169][ T2362] __generic_file_write_iter+0x17a/0x230 [ 90.206789][ T2362] generic_file_write_iter+0xae/0x310 [ 90.212241][ T2362] __kernel_write_iter+0x2a9/0x6a0 [ 90.217667][ T2362] ? __cfi___kernel_write_iter+0x10/0x10 [ 90.223282][ T2362] ? iov_iter_bvec+0x11b/0x1f0 [ 90.228028][ T2362] ? iov_iter_bvec+0x53/0x1f0 [ 90.232685][ T2362] dump_user_range+0x3e6/0x630 [ 90.237435][ T2362] ? __cfi_dump_user_range+0x10/0x10 [ 90.242707][ T2362] ? dump_align+0xfe/0x120 [ 90.247110][ T2362] ? dump_emit+0xa8/0xc0 [ 90.251341][ T2362] elf_core_dump+0x2b60/0x30b0 [ 90.256096][ T2362] ? __cfi_elf_core_dump+0x10/0x10 [ 90.261203][ T2362] ? dump_interrupted+0xd0/0xd0 [ 90.266041][ T2362] ? filp_open+0x195/0x1e0 [ 90.270452][ T2362] ? 0xffffffffff600000 [ 90.274589][ T2362] do_coredump+0x160e/0x23a0 [ 90.279174][ T2362] ? __cfi_do_coredump+0x10/0x10 [ 90.284100][ T2362] ? kmem_cache_free+0x12d/0x300 [ 90.289024][ T2362] ? ____kasan_slab_free+0x13d/0x180 [ 90.294297][ T2362] ? get_signal+0xac2/0x1700 [ 90.298879][ T2362] ? kmem_cache_free+0x12d/0x300 [ 90.303814][ T2362] get_signal+0x157d/0x1700 [ 90.308313][ T2362] ? __cfi_get_signal+0x10/0x10 [ 90.313150][ T2362] ? force_sig_info_to_task+0x306/0x3b0 [ 90.318707][ T2362] arch_do_signal_or_restart+0xd1/0x11c0 [ 90.324593][ T2362] ? page_fault_oops+0x8b0/0x8b0 [ 90.329696][ T2362] ? down_read_trylock+0x27f/0x660 [ 90.334803][ T2362] ? find_vma+0x89/0xd0 [ 90.338952][ T2362] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 90.345117][ T2362] ? do_user_addr_fault+0xd10/0x1030 [ 90.350423][ T2362] exit_to_user_mode_loop+0x7a/0xb0 [ 90.355699][ T2362] exit_to_user_mode_prepare+0x87/0xd0 [ 90.361318][ T2362] irqentry_exit_to_user_mode+0x9/0x10 [ 90.366851][ T2362] irqentry_exit+0x12/0x40 [ 90.371256][ T2362] exc_page_fault+0x5e/0xb0 [ 90.375744][ T2362] asm_exc_page_fault+0x27/0x30 [ 90.380584][ T2362] RIP: 0033:0x9ac89065 [ 90.384645][ T2362] Code: Unable to access opcode bytes at 0x9ac8903b. [ 90.391313][ T2362] RSP: 002b:00002000000000a8 EFLAGS: 00010217 [ 90.397371][ T2362] RAX: 0000000000000000 RBX: 00007fce47e26090 RCX: 00007fce47b9e159 [ 90.405331][ T2362] RDX: 00002000000000c0 RSI: 00002000000000a0 RDI: 0000000000800000 [ 90.413318][ T2362] RBP: 00007fce47c3506b R08: 0000200000000140 R09: 0000200000000140 [ 90.421294][ T2362] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 90.429260][ T2362] R13: 00007fce47e26128 R14: 00007fce47e26090 R15: 00007ffdd7819418 [ 90.437231][ T2362] [ 91.108037][ T2609] device veth0_vlan left promiscuous mode [ 91.115746][ T28] audit: type=1400 audit(1790765932.322:140): avc: denied { ioctl } for pid=2612 comm="syz.0.575" path="net:[4026532579]" dev="nsfs" ino=4026532579 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.206961][ T2609] device veth0_vlan entered promiscuous mode [ 91.386574][ T2362] memory: usage 295776kB, limit 307200kB, failcnt 27733 [ 91.409715][ T2362] memory+swap: usage 420608kB, limit 9007199254740988kB, failcnt 0 [ 91.418510][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.449536][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.457777][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.458631][ T2362] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 91.468837][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.485130][ T718] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.492235][ T718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.509887][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.517850][ T2362] Memory cgroup stats for /syz4: [ 91.518112][ T2362] anon 819200 [ 91.518112][ T2362] file 313352192 [ 91.518112][ T2362] kernel 0 [ 91.518112][ T2362] kernel_stack 0 [ 91.518112][ T2362] pagetables 0 [ 91.518112][ T2362] sec_pagetables 0 [ 91.518112][ T2362] percpu 0 [ 91.518112][ T2362] sock 0 [ 91.518112][ T2362] vmalloc 0 [ 91.518112][ T2362] shmem 309481472 [ 91.518112][ T2362] file_mapped 3858432 [ 91.518112][ T2362] file_dirty 0 [ 91.518112][ T2362] file_writeback 135168 [ 91.518112][ T2362] swapcached 143360 [ 91.518112][ T2362] anon_thp 0 [ 91.518112][ T2362] file_thp 0 [ 91.518112][ T2362] shmem_thp 0 [ 91.518112][ T2362] inactive_anon 16093184 [ 91.518112][ T2362] active_anon 294084608 [ 91.518112][ T2362] inactive_file 1904640 [ 91.518112][ T2362] active_file 1966080 [ 91.518112][ T2362] unevictable 0 [ 91.518112][ T2362] slab_reclaimable 0 [ 91.518112][ T2362] slab_unreclaimable 0 [ 91.518112][ T2362] slab 0 [ 91.518112][ T2362] workingset_refault_anon 0 [ 91.519382][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.534800][ T2362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 91.613444][ T718] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.634932][ T718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.686271][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.694034][ T2362] ,cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.515,pid=2378,uid=0 [ 91.706173][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.714378][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.714367][ T2362] Memory cgroup out of memory: Killed process 2378 (syz.4.515) total-vm:90864kB, anon-rss:1384kB, file-rss:53252kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 91.740335][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.748778][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.794218][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.806691][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.843056][ T2603] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.859912][ T2603] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.874068][ T2603] device bridge_slave_0 entered promiscuous mode [ 91.890420][ T2583] device veth0_vlan entered promiscuous mode [ 91.907023][ T2583] device veth1_macvtap entered promiscuous mode [ 91.920132][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.944383][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.962936][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.993083][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.023542][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.044035][ T2603] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.051291][ T2603] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.059065][ T2603] device bridge_slave_1 entered promiscuous mode [ 92.078092][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.086168][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.093711][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.105165][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.113614][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.134928][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.186936][ T2630] device syzkaller0 entered promiscuous mode [ 92.242453][ T2630] syz.3.579 uses obsolete (PF_INET,SOCK_PACKET) [ 92.335629][ T2603] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.342697][ T2603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.350006][ T2603] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.357155][ T2603] bridge0: port 1(bridge_slave_0) entered forwarding state SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=67 state=3 status=67 (errno 9: Bad file descriptor) [ 92.394803][ T28] audit: type=1400 audit(1790765933.582:141): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[15131]" dev="pipefs" ino=15131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 92.419877][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.428011][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.448119][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.489116][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.456496][ T724] device bridge_slave_1 left promiscuous mode [ 93.463582][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.480598][ T724] device bridge_slave_0 left promiscuous mode [ 93.494868][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.507569][ T724] device bridge_slave_1 left promiscuous mode [ 93.513722][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.535325][ T724] device bridge_slave_0 left promiscuous mode [ 93.542036][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.565801][ T724] device bridge_slave_1 left promiscuous mode [ 93.572054][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.595847][ T724] device bridge_slave_0 left promiscuous mode [ 93.602801][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.617745][ T724] device veth1_macvtap left promiscuous mode [ 93.623810][ T724] device veth0_vlan left promiscuous mode [ 93.635288][ T724] device veth1_macvtap left promiscuous mode [ 93.641590][ T724] device veth0_vlan left promiscuous mode [ 93.655018][ T724] device veth1_macvtap left promiscuous mode [ 93.663353][ T724] device veth0_vlan left promiscuous mode [ 93.953310][ T2341] syz.4.515 (2341) used greatest stack depth: 14080 bytes left [ 95.117093][ T724] device team_slave_1 left promiscuous mode [ 95.123042][ T724] bridge0: port 3(team_slave_1) entered disabled state [ 95.130361][ T724] device bridge_slave_1 left promiscuous mode [ 95.136516][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.143936][ T724] device bridge_slave_0 left promiscuous mode [ 95.150170][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.157862][ T724] device bridge_slave_1 left promiscuous mode [ 95.163960][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.171479][ T724] device bridge_slave_0 left promiscuous mode [ 95.177623][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.186753][ T724] device veth1_macvtap left promiscuous mode [ 95.192782][ T724] device veth0_vlan left promiscuous mode [ 95.198931][ T724] device veth0_vlan left promiscuous mode [ 95.204985][ T724] device veth0_vlan left promiscuous mode