last executing test programs: 48.413932206s ago: executing program 1 (id=2934): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x4, @perf_config_ext={0x10000, 0x8001}, 0x111a08, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 48.356795758s ago: executing program 1 (id=2936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), 0x86, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, 0x0, &(0x7f0000000540)=""/96}, 0x20) 48.356454268s ago: executing program 1 (id=2937): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 48.331423019s ago: executing program 1 (id=2939): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2dc, 0x40602, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x20, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x845, 0x0, 0x0, 0x0, 0x62ce, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x12, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10004000, &(0x7f0000001100), 0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x31, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1c0000000000}, 0x110010, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000700600000000000009000000731111000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.25165012s ago: executing program 1 (id=2944): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 48.25144716s ago: executing program 1 (id=2945): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 32.650269648s ago: executing program 32 (id=2945): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 423.465453ms ago: executing program 5 (id=4434): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1c, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 352.896263ms ago: executing program 5 (id=4437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 352.484883ms ago: executing program 5 (id=4439): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x218, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) 315.713524ms ago: executing program 3 (id=4441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff02001815", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001020000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 315.360034ms ago: executing program 3 (id=4443): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 247.833356ms ago: executing program 4 (id=4444): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x100, 0x80}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc) 247.587526ms ago: executing program 2 (id=4446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 247.500386ms ago: executing program 5 (id=4447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x6d2b) 230.868506ms ago: executing program 2 (id=4448): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x13, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 228.079176ms ago: executing program 4 (id=4449): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r5}, 0x8) close(r6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 203.209356ms ago: executing program 3 (id=4450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 202.742937ms ago: executing program 0 (id=4451): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff0000, 0x8009, 0x0, 0xfffffffe, 0x0, 0x9ba5}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 166.462607ms ago: executing program 3 (id=4452): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 166.275017ms ago: executing program 2 (id=4453): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x2) 166.147927ms ago: executing program 4 (id=4454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x18, 0x2, 0x3, 0x0, 0x0, 0x80048, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x4, @perf_bp={0x0, 0x3}, 0x100001, 0xca, 0x4, 0x4, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x20000007fffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x2) 166.082907ms ago: executing program 0 (id=4455): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 117.838198ms ago: executing program 2 (id=4456): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x800, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(r3) 117.655918ms ago: executing program 4 (id=4457): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0f64f5c8000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 117.447938ms ago: executing program 3 (id=4458): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x0, 0x9922, 0x2, 0x0, 0x0, 0x11, 0x0, 0x6}, 0xffffffffffffffff, 0x100000000000, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x9a) 117.364418ms ago: executing program 3 (id=4459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 117.286938ms ago: executing program 2 (id=4460): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, 0x80048, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x4, @perf_bp={0x0, 0x8}, 0x100001, 0xca, 0x4, 0x4, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x20000007fffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x2) 63.809489ms ago: executing program 0 (id=4461): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 63.681009ms ago: executing program 5 (id=4462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 63.587729ms ago: executing program 4 (id=4463): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/27], 0x50) 63.500219ms ago: executing program 5 (id=4464): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x32, 0x20}, 0x20) 63.349579ms ago: executing program 4 (id=4465): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 57.208519ms ago: executing program 0 (id=4466): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x83) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r5}, 0x8) close(r6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 53.891279ms ago: executing program 2 (id=4467): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x7ffbd, 0x8}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 86.64µs ago: executing program 0 (id=4468): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='<\x00'], 0x20) 0s ago: executing program 0 (id=4469): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000006000000080000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00@'], 0x50) 0s ago: executing program 3 (id=4470): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfcdfc612c00000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x2000, 0x9, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): DEV_CHANGE): veth0_macvtap: link becomes ready [ 24.157516][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.168874][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.177082][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.193009][ T290] device veth0_vlan entered promiscuous mode [ 24.203672][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.212364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.220701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.228584][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.235992][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.244414][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.252713][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.260932][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.269354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.277472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.291642][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.306547][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.314910][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.330445][ T293] request_module fs-gadgetfs succeeded, but still no fs? [ 24.331658][ T287] device veth0_vlan entered promiscuous mode [ 24.347626][ T290] device veth1_macvtap entered promiscuous mode [ 24.355329][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.363434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.370922][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.378531][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.386753][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.402468][ T289] device veth0_vlan entered promiscuous mode [ 24.419531][ T287] device veth1_macvtap entered promiscuous mode [ 24.437011][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.449109][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.456975][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.465195][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.476547][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.485185][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.493827][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.502339][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.511179][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.519696][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.527853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.564712][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.572346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.584340][ T289] device veth1_macvtap entered promiscuous mode [ 24.596122][ T320] device sit0 entered promiscuous mode [ 24.616950][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.654321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.664242][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.672828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.681189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.908375][ C0] hrtimer: interrupt took 29629 ns [ 25.191001][ T345] device syzkaller0 entered promiscuous mode [ 25.520519][ T353] device wg2 entered promiscuous mode [ 25.910029][ T366] device wg2 entered promiscuous mode [ 26.406811][ T372] : renamed from vlan0 [ 26.525607][ T389] device syzkaller0 entered promiscuous mode [ 27.148331][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 27.148345][ T28] audit: type=1400 audit(1785923181.969:116): avc: denied { setopt } for pid=409 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.218283][ T28] audit: type=1400 audit(1785923182.039:117): avc: denied { tracepoint } for pid=411 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.398026][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.405245][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.571204][ T419] device bridge_slave_1 left promiscuous mode [ 27.615126][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.649174][ T446] syz.2.41[446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.649253][ T446] syz.2.41[446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.750607][ T419] device bridge_slave_0 left promiscuous mode [ 27.768755][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.901107][ T455] syz.1.43 (455) used obsolete PPPIOCDETACH ioctl [ 28.037235][ T28] audit: type=1400 audit(1785923182.859:118): avc: denied { append } for pid=459 comm="syz.3.45" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.148107][ T28] audit: type=1400 audit(1785923182.909:119): avc: denied { create } for pid=470 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 28.212201][ T28] audit: type=1400 audit(1785923183.039:120): avc: denied { create } for pid=477 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 28.402106][ T499] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 28.403026][ T499] device lo entered promiscuous mode [ 28.407956][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 28.783937][ T517] FAULT_INJECTION: forcing a failure. [ 28.783937][ T517] name failslab, interval 1, probability 0, space 0, times 1 [ 28.804709][ T517] CPU: 1 PID: 517 Comm: syz.4.63 Not tainted syzkaller #0 [ 28.811838][ T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.821896][ T517] Call Trace: [ 28.825167][ T517] [ 28.828090][ T517] __dump_stack+0x21/0x24 [ 28.832429][ T517] dump_stack_lvl+0x110/0x170 [ 28.837100][ T517] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.842120][ T517] dump_stack+0x15/0x24 [ 28.846268][ T517] should_fail_ex+0x3bf/0x510 [ 28.850936][ T517] ? build_skb+0x2a/0x220 [ 28.855249][ T517] __should_failslab+0xac/0xf0 [ 28.859996][ T517] should_failslab+0x9/0x20 [ 28.864480][ T517] kmem_cache_alloc+0x3b/0x320 [ 28.869225][ T517] ? __kasan_check_write+0x14/0x20 [ 28.874315][ T517] build_skb+0x2a/0x220 [ 28.878452][ T517] bpf_prog_test_run_skb+0x38f/0x12f0 [ 28.883809][ T517] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 28.889597][ T517] bpf_prog_test_run+0x3b4/0x5c0 [ 28.894512][ T517] ? bpf_prog_query+0x270/0x270 [ 28.899340][ T517] ? selinux_bpf+0xce/0xf0 [ 28.903737][ T517] ? security_bpf+0x93/0xb0 [ 28.908224][ T517] __sys_bpf+0x5ee/0x850 [ 28.912444][ T517] ? bpf_link_show_fdinfo+0x330/0x330 [ 28.917795][ T517] ? __cfi_ksys_write+0x10/0x10 [ 28.922630][ T517] ? debug_smp_processor_id+0x17/0x20 [ 28.927983][ T517] __x64_sys_bpf+0x7c/0x90 [ 28.932375][ T517] x64_sys_call+0x488/0x9a0 [ 28.936858][ T517] do_syscall_64+0x4c/0xa0 [ 28.941253][ T517] ? clear_bhb_loop+0x30/0x80 [ 28.945908][ T517] ? clear_bhb_loop+0x30/0x80 [ 28.950563][ T517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.956441][ T517] RIP: 0033:0x7f2fe939e019 [ 28.960843][ T517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.980428][ T517] RSP: 002b:00007f2fea280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 28.988823][ T517] RAX: ffffffffffffffda RBX: 00007f2fe9625fa0 RCX: 00007f2fe939e019 [ 28.996774][ T517] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 29.004725][ T517] RBP: 00007f2fea280090 R08: 0000000000000000 R09: 0000000000000000 [ 29.012674][ T517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.020624][ T517] R13: 00007f2fe9626038 R14: 00007f2fe9625fa0 R15: 00007ffda63ac828 [ 29.028578][ T517] [ 29.859990][ T28] audit: type=1400 audit(1785923184.689:121): avc: denied { create } for pid=530 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.642455][ T549] FAULT_INJECTION: forcing a failure. [ 30.642455][ T549] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.708038][ T549] CPU: 0 PID: 549 Comm: syz.3.74 Not tainted syzkaller #0 [ 30.715182][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.725226][ T549] Call Trace: [ 30.728495][ T549] [ 30.731418][ T549] __dump_stack+0x21/0x24 [ 30.735749][ T549] dump_stack_lvl+0x110/0x170 [ 30.740417][ T549] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.745432][ T549] ? migrate_enable+0x1a5/0x2a0 [ 30.750276][ T549] ? migrate_enable+0x1af/0x2a0 [ 30.755118][ T549] ? __cfi_migrate_enable+0x10/0x10 [ 30.760309][ T549] dump_stack+0x15/0x24 [ 30.764715][ T549] should_fail_ex+0x3bf/0x510 [ 30.769384][ T549] should_fail+0xb/0x10 [ 30.773537][ T549] should_fail_usercopy+0x1a/0x20 [ 30.778549][ T549] _copy_to_user+0x1e/0x90 [ 30.782963][ T549] bpf_test_finish+0x20a/0x6c0 [ 30.787722][ T549] ? convert_skb_to___skb+0x430/0x430 [ 30.793089][ T549] ? bpf_prog_test_run_skb+0x597/0x12f0 [ 30.798634][ T549] bpf_prog_test_run_skb+0xcef/0x12f0 [ 30.804002][ T549] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 30.809802][ T549] bpf_prog_test_run+0x3b4/0x5c0 [ 30.814732][ T549] ? bpf_prog_query+0x270/0x270 [ 30.819572][ T549] ? selinux_bpf+0xce/0xf0 [ 30.823981][ T549] ? security_bpf+0x93/0xb0 [ 30.828483][ T549] __sys_bpf+0x5ee/0x850 [ 30.832718][ T549] ? bpf_link_show_fdinfo+0x330/0x330 [ 30.838085][ T549] ? __cfi_ksys_write+0x10/0x10 [ 30.842930][ T549] ? debug_smp_processor_id+0x17/0x20 [ 30.848293][ T549] __x64_sys_bpf+0x7c/0x90 [ 30.852701][ T549] x64_sys_call+0x488/0x9a0 [ 30.857196][ T549] do_syscall_64+0x4c/0xa0 [ 30.861604][ T549] ? clear_bhb_loop+0x30/0x80 [ 30.866268][ T549] ? clear_bhb_loop+0x30/0x80 [ 30.870933][ T549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.876820][ T549] RIP: 0033:0x7f3af219e019 [ 30.881225][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.900820][ T549] RSP: 002b:00007f3af2fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.909230][ T549] RAX: ffffffffffffffda RBX: 00007f3af2425fa0 RCX: 00007f3af219e019 [ 30.917191][ T549] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 30.925154][ T549] RBP: 00007f3af2fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 30.933113][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.941072][ T549] R13: 00007f3af2426038 R14: 00007f3af2425fa0 R15: 00007ffdf4dcc8a8 [ 30.949038][ T549] [ 30.978458][ T559] dvmrp1: tun_chr_ioctl cmd 2147767520 [ 31.045686][ T559] device syzkaller0 entered promiscuous mode [ 31.071378][ T28] audit: type=1400 audit(1785923185.899:122): avc: denied { create } for pid=577 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 31.396778][ T28] audit: type=1400 audit(1785923186.219:123): avc: denied { create } for pid=601 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.572307][ T612] tun0: tun_chr_ioctl cmd 1074025675 [ 31.590005][ T612] tun0: persist enabled [ 31.604988][ T613] tun0: tun_chr_ioctl cmd 1074025675 [ 31.623842][ T613] tun0: persist enabled [ 32.097424][ T635] device veth0_vlan left promiscuous mode [ 32.109271][ T635] device veth0_vlan entered promiscuous mode [ 32.119604][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.129292][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 32.136625][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.178801][ T646] Illegal XDP return value 512615744 on prog (id 158) dev N/A, expect packet loss! [ 32.201157][ T28] audit: type=1400 audit(1785923187.029:124): avc: denied { create } for pid=647 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 32.252010][ T28] audit: type=1400 audit(1785923187.079:125): avc: denied { create } for pid=650 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.309500][ T28] audit: type=1400 audit(1785923187.079:126): avc: denied { create } for pid=650 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.156484][ T712] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 34.173633][ T712] device syzkaller0 entered promiscuous mode [ 35.696150][ T790] syz.4.144[790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.696266][ T790] syz.4.144[790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.308994][ T830] syz.0.152[830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.331361][ T830] syz.0.152[830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.651951][ T28] audit: type=1400 audit(1785923191.479:127): avc: denied { create } for pid=837 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.804717][ T873] device syzkaller0 entered promiscuous mode [ 37.962736][ T28] audit: type=1400 audit(1785923192.789:128): avc: denied { ioctl } for pid=963 comm="syz.2.190" path="net:[4026532379]" dev="nsfs" ino=4026532379 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.132072][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.516267][ T28] audit: type=1400 audit(1785923194.339:129): avc: denied { create } for pid=1063 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.998864][ T1103] device syzkaller0 entered promiscuous mode [ 40.028814][ T1103] tun0: tun_chr_ioctl cmd 2147767506 [ 42.880365][ T1234] device veth1_to_bond entered promiscuous mode [ 43.065275][ T1247] device syzkaller0 entered promiscuous mode [ 43.460843][ T28] audit: type=1400 audit(1785923198.289:130): avc: denied { create } for pid=1263 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 43.651881][ T1284] device syzkaller0 entered promiscuous mode [ 45.488916][ T1240] syz.0.258 (1240) used greatest stack depth: 21792 bytes left [ 45.969865][ T28] audit: type=1400 audit(1785923200.799:131): avc: denied { create } for pid=1409 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.441853][ T1441] device veth1_macvtap left promiscuous mode [ 46.557237][ T1444] device veth1_virt_wifi entered promiscuous mode [ 48.970658][ T1506] tap0: tun_chr_ioctl cmd 1074025681 [ 49.013478][ T1506] tap0: tun_chr_ioctl cmd 2147767517 [ 49.652594][ T1546] device syzkaller0 entered promiscuous mode [ 50.423386][ T28] audit: type=1400 audit(1785923205.249:132): avc: denied { create } for pid=1594 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.497367][ T1603] device syzkaller0 entered promiscuous mode [ 53.859702][ T1672] device syzkaller0 entered promiscuous mode [ 54.619638][ T28] audit: type=1400 audit(1785923209.449:133): avc: denied { create } for pid=1678 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.275038][ T28] audit: type=1400 audit(1785923213.099:134): avc: denied { create } for pid=1745 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 58.339335][ T1746] pimreg0: tun_chr_ioctl cmd 1074025692 [ 59.773300][ T1788] device sit0 entered promiscuous mode [ 60.135839][ T1830] GPL: port 1(erspan0) entered blocking state [ 60.188069][ T1830] GPL: port 1(erspan0) entered disabled state [ 60.195715][ T1830] device erspan0 entered promiscuous mode [ 60.207037][ T1832] bridge0: port 3(team_slave_1) entered blocking state [ 60.214056][ T1832] bridge0: port 3(team_slave_1) entered disabled state [ 60.224599][ T1832] device team_slave_1 entered promiscuous mode [ 60.235280][ T1829] pimreg0: tun_chr_ioctl cmd 1074025677 [ 60.248168][ T1829] pimreg0: linktype set to 774 [ 60.256218][ T1826] GPL: port 1(erspan0) entered blocking state [ 60.262774][ T1826] GPL: port 1(erspan0) entered forwarding state [ 60.499775][ T1846] tap0: tun_chr_ioctl cmd 1074025677 [ 60.505117][ T1846] tap0: linktype set to 780 [ 60.991573][ T1865] device veth1_macvtap left promiscuous mode [ 61.065290][ T1865] device veth1_macvtap entered promiscuous mode [ 61.131222][ T1865] device macsec0 entered promiscuous mode [ 61.275346][ T1871] device syzkaller0 entered promiscuous mode [ 61.434491][ T1889] device syzkaller0 entered promiscuous mode [ 61.477230][ T28] audit: type=1400 audit(1785923216.299:135): avc: denied { create } for pid=1898 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.777926][ C0] sched: RT throttling activated [ 63.777676][ T1942] device syzkaller0 entered promiscuous mode [ 65.949238][ T1961] ref_ctr_offset mismatch. inode: 0x210 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 66.071373][ T1973] device vlan1 entered promiscuous mode [ 66.472939][ T28] audit: type=1400 audit(1785923221.299:136): avc: denied { create } for pid=1984 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.734119][ T28] audit: type=1400 audit(1785923221.559:137): avc: denied { ioctl } for pid=2011 comm="syz.2.492" path="socket:[20416]" dev="sockfs" ino=20416 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.846148][ T2025] device syzkaller0 entered promiscuous mode [ 66.958340][ T28] audit: type=1400 audit(1785923221.779:138): avc: denied { create } for pid=2033 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.960200][ T2114] device syzkaller0 entered promiscuous mode [ 69.163826][ T2261] device wg2 left promiscuous mode [ 70.468363][ T2320] device syzkaller0 entered promiscuous mode [ 73.839524][ T2337] device syzkaller0 entered promiscuous mode [ 75.395078][ T2405] device sit0 entered promiscuous mode [ 76.190280][ T2437] bridge0: port 3(team_slave_1) entered blocking state [ 76.197311][ T2437] bridge0: port 3(team_slave_1) entered disabled state [ 76.226257][ T2437] device team_slave_1 entered promiscuous mode [ 77.116450][ T2472] device syzkaller0 entered promiscuous mode [ 78.037286][ T2512] device bond_slave_1 entered promiscuous mode [ 78.059528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 78.068480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.967763][ T28] audit: type=1400 audit(1785923234.789:139): avc: denied { create } for pid=2545 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.991945][ T2543] device syzkaller0 entered promiscuous mode [ 80.385524][ T2568] device sit0 entered promiscuous mode [ 81.692657][ T2612] device wg2 entered promiscuous mode [ 82.052033][ T2648] device syzkaller0 entered promiscuous mode [ 82.247555][ T2676] device syzkaller0 entered promiscuous mode [ 82.306050][ T2682] device syzkaller0 entered promiscuous mode [ 83.234586][ T2718] device syzkaller0 entered promiscuous mode [ 83.424622][ T2733] : renamed from pim6reg1 [ 83.718742][ T2756] IPv6: pim6reg1: Disabled Multicast RS [ 83.749771][ T2745] pimreg0: tun_chr_ioctl cmd 1074025692 [ 83.900076][ T2768] FAULT_INJECTION: forcing a failure. [ 83.900076][ T2768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.913397][ T2768] CPU: 1 PID: 2768 Comm: syz.0.712 Not tainted syzkaller #0 [ 83.920670][ T2768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.930717][ T2768] Call Trace: [ 83.933989][ T2768] [ 83.936903][ T2768] __dump_stack+0x21/0x24 [ 83.941224][ T2768] dump_stack_lvl+0x110/0x170 [ 83.945881][ T2768] ? __cfi_dump_stack_lvl+0x8/0x8 [ 83.950888][ T2768] dump_stack+0x15/0x24 [ 83.955025][ T2768] should_fail_ex+0x3bf/0x510 [ 83.959680][ T2768] should_fail+0xb/0x10 [ 83.963819][ T2768] should_fail_usercopy+0x1a/0x20 [ 83.968823][ T2768] _copy_from_user+0x1e/0xc0 [ 83.973402][ T2768] __sys_bpf+0x2a0/0x850 [ 83.977635][ T2768] ? bpf_link_show_fdinfo+0x330/0x330 [ 83.982996][ T2768] __x64_sys_bpf+0x7c/0x90 [ 83.987391][ T2768] x64_sys_call+0x488/0x9a0 [ 83.991880][ T2768] do_syscall_64+0x4c/0xa0 [ 83.996295][ T2768] ? clear_bhb_loop+0x30/0x80 [ 84.000951][ T2768] ? clear_bhb_loop+0x30/0x80 [ 84.005617][ T2768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.011503][ T2768] RIP: 0033:0x7f3dd0b9e019 [ 84.015908][ T2768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.035495][ T2768] RSP: 002b:00007f3dd1af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.043886][ T2768] RAX: ffffffffffffffda RBX: 00007f3dd0e25fa0 RCX: 00007f3dd0b9e019 [ 84.051862][ T2768] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 84.059824][ T2768] RBP: 00007f3dd1af7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.067772][ T2768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.075726][ T2768] R13: 00007f3dd0e26038 R14: 00007f3dd0e25fa0 R15: 00007ffe39d3a6a8 [ 84.083677][ T2768] [ 84.230747][ T2779] device team_slave_1 left promiscuous mode [ 84.237237][ T2779] bridge0: port 3(team_slave_1) entered disabled state [ 84.321086][ T2796] pimreg0: tun_chr_ioctl cmd 1074025692 [ 84.397458][ T2798] device syzkaller0 entered promiscuous mode [ 84.436612][ T2800] FAULT_INJECTION: forcing a failure. [ 84.436612][ T2800] name failslab, interval 1, probability 0, space 0, times 0 [ 84.454497][ T2800] CPU: 0 PID: 2800 Comm: syz.2.724 Not tainted syzkaller #0 [ 84.461783][ T2800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.471815][ T2800] Call Trace: [ 84.475095][ T2800] [ 84.478006][ T2800] __dump_stack+0x21/0x24 [ 84.482323][ T2800] dump_stack_lvl+0x110/0x170 [ 84.486984][ T2800] ? __cfi_dump_stack_lvl+0x8/0x8 [ 84.491993][ T2800] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 84.498213][ T2800] ? _parse_integer_limit+0x18e/0x1d0 [ 84.503566][ T2800] dump_stack+0x15/0x24 [ 84.507703][ T2800] should_fail_ex+0x3bf/0x510 [ 84.512370][ T2800] __should_failslab+0xac/0xf0 [ 84.517121][ T2800] should_failslab+0x9/0x20 [ 84.521605][ T2800] __kmem_cache_alloc_node+0x3d/0x2d0 [ 84.526962][ T2800] ? bpf_prog_test_run_skb+0x246/0x12f0 [ 84.532489][ T2800] ? bpf_prog_test_run_skb+0x246/0x12f0 [ 84.538018][ T2800] __kmalloc+0xa4/0x1e0 [ 84.542153][ T2800] bpf_prog_test_run_skb+0x246/0x12f0 [ 84.547511][ T2800] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 84.553655][ T2800] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 84.559448][ T2800] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 84.565246][ T2800] bpf_prog_test_run+0x3b4/0x5c0 [ 84.570160][ T2800] ? bpf_prog_query+0x270/0x270 [ 84.574986][ T2800] ? selinux_bpf+0xce/0xf0 [ 84.579390][ T2800] ? security_bpf+0x93/0xb0 [ 84.583878][ T2800] __sys_bpf+0x5ee/0x850 [ 84.588103][ T2800] ? bpf_link_show_fdinfo+0x330/0x330 [ 84.593457][ T2800] ? __cfi_ksys_write+0x10/0x10 [ 84.598288][ T2800] ? debug_smp_processor_id+0x17/0x20 [ 84.603640][ T2800] __x64_sys_bpf+0x7c/0x90 [ 84.608032][ T2800] x64_sys_call+0x488/0x9a0 [ 84.612515][ T2800] do_syscall_64+0x4c/0xa0 [ 84.616912][ T2800] ? clear_bhb_loop+0x30/0x80 [ 84.621570][ T2800] ? clear_bhb_loop+0x30/0x80 [ 84.626229][ T2800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.632107][ T2800] RIP: 0033:0x7f5f4ab9e019 [ 84.636502][ T2800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.656085][ T2800] RSP: 002b:00007f5f495f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.664481][ T2800] RAX: ffffffffffffffda RBX: 00007f5f4ae25fa0 RCX: 00007f5f4ab9e019 [ 84.672434][ T2800] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 84.680383][ T2800] RBP: 00007f5f495f7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.688334][ T2800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.696283][ T2800] R13: 00007f5f4ae26038 R14: 00007f5f4ae25fa0 R15: 00007ffd53db96b8 [ 84.704236][ T2800] [ 85.012788][ T2833] FAULT_INJECTION: forcing a failure. [ 85.012788][ T2833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.080054][ T2833] CPU: 0 PID: 2833 Comm: syz.2.736 Not tainted syzkaller #0 [ 85.087368][ T2833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.097415][ T2833] Call Trace: [ 85.100694][ T2833] [ 85.103618][ T2833] __dump_stack+0x21/0x24 [ 85.107950][ T2833] dump_stack_lvl+0x110/0x170 [ 85.112624][ T2833] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.117644][ T2833] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 85.123456][ T2833] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 85.129612][ T2833] dump_stack+0x15/0x24 [ 85.133765][ T2833] should_fail_ex+0x3bf/0x510 [ 85.138437][ T2833] should_fail+0xb/0x10 [ 85.142585][ T2833] should_fail_usercopy+0x1a/0x20 [ 85.147607][ T2833] _copy_from_user+0x1e/0xc0 [ 85.152205][ T2833] bpf_prog_test_run_skb+0x279/0x12f0 [ 85.157587][ T2833] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 85.163392][ T2833] bpf_prog_test_run+0x3b4/0x5c0 [ 85.168326][ T2833] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 85.174483][ T2833] ? bpf_prog_query+0x270/0x270 [ 85.179331][ T2833] ? __sys_bpf+0x5df/0x850 [ 85.183742][ T2833] __sys_bpf+0x5ee/0x850 [ 85.187976][ T2833] ? bpf_link_show_fdinfo+0x330/0x330 [ 85.193344][ T2833] ? __cfi_ksys_write+0x10/0x10 [ 85.198193][ T2833] ? debug_smp_processor_id+0x17/0x20 [ 85.203563][ T2833] __x64_sys_bpf+0x7c/0x90 [ 85.207979][ T2833] x64_sys_call+0x488/0x9a0 [ 85.212490][ T2833] do_syscall_64+0x4c/0xa0 [ 85.216910][ T2833] ? clear_bhb_loop+0x30/0x80 [ 85.221582][ T2833] ? clear_bhb_loop+0x30/0x80 [ 85.226261][ T2833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.232162][ T2833] RIP: 0033:0x7f5f4ab9e019 [ 85.236570][ T2833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.256168][ T2833] RSP: 002b:00007f5f495f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.264575][ T2833] RAX: ffffffffffffffda RBX: 00007f5f4ae25fa0 RCX: 00007f5f4ab9e019 [ 85.272542][ T2833] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 85.280507][ T2833] RBP: 00007f5f495f7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.288480][ T2833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.296446][ T2833] R13: 00007f5f4ae26038 R14: 00007f5f4ae25fa0 R15: 00007ffd53db96b8 [ 85.304417][ T2833] [ 85.655176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 85.941718][ T2851] pimreg0: tun_chr_ioctl cmd 1074025692 [ 86.768316][ T2882] FAULT_INJECTION: forcing a failure. [ 86.768316][ T2882] name failslab, interval 1, probability 0, space 0, times 0 [ 86.847995][ T2882] CPU: 0 PID: 2882 Comm: syz.3.750 Not tainted syzkaller #0 [ 86.855324][ T2882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.865379][ T2882] Call Trace: [ 86.868658][ T2882] [ 86.871581][ T2882] __dump_stack+0x21/0x24 [ 86.875910][ T2882] dump_stack_lvl+0x110/0x170 [ 86.880587][ T2882] ? __cfi_dump_stack_lvl+0x8/0x8 [ 86.885610][ T2882] ? do_syscall_64+0x4c/0xa0 [ 86.890200][ T2882] dump_stack+0x15/0x24 [ 86.894356][ T2882] should_fail_ex+0x3bf/0x510 [ 86.899034][ T2882] __should_failslab+0xac/0xf0 [ 86.903797][ T2882] should_failslab+0x9/0x20 [ 86.908292][ T2882] __kmem_cache_alloc_node+0x3d/0x2d0 [ 86.913665][ T2882] ? sk_prot_alloc+0xed/0x320 [ 86.918336][ T2882] ? sk_prot_alloc+0xed/0x320 [ 86.923006][ T2882] __kmalloc+0xa4/0x1e0 [ 86.927166][ T2882] sk_prot_alloc+0xed/0x320 [ 86.931665][ T2882] sk_alloc+0x3b/0x460 [ 86.935729][ T2882] ? bpf_ctx_init+0x15d/0x1a0 [ 86.940407][ T2882] bpf_prog_test_run_skb+0x36c/0x12f0 [ 86.945783][ T2882] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 86.951588][ T2882] bpf_prog_test_run+0x3b4/0x5c0 [ 86.956517][ T2882] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 86.962671][ T2882] ? bpf_prog_query+0x270/0x270 [ 86.967517][ T2882] ? selinux_bpf+0xce/0xf0 [ 86.971930][ T2882] ? security_bpf+0x93/0xb0 [ 86.976433][ T2882] __sys_bpf+0x5ee/0x850 [ 86.980670][ T2882] ? bpf_link_show_fdinfo+0x330/0x330 [ 86.986047][ T2882] ? __cfi_ksys_write+0x10/0x10 [ 86.990897][ T2882] ? debug_smp_processor_id+0x17/0x20 [ 86.996269][ T2882] __x64_sys_bpf+0x7c/0x90 [ 87.000682][ T2882] x64_sys_call+0x488/0x9a0 [ 87.005187][ T2882] do_syscall_64+0x4c/0xa0 [ 87.009602][ T2882] ? clear_bhb_loop+0x30/0x80 [ 87.014274][ T2882] ? clear_bhb_loop+0x30/0x80 [ 87.018950][ T2882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.024848][ T2882] RIP: 0033:0x7f3af219e019 [ 87.029254][ T2882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.048854][ T2882] RSP: 002b:00007f3af2fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.057265][ T2882] RAX: ffffffffffffffda RBX: 00007f3af2425fa0 RCX: 00007f3af219e019 [ 87.065228][ T2882] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 87.073192][ T2882] RBP: 00007f3af2fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 87.081160][ T2882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.089128][ T2882] R13: 00007f3af2426038 R14: 00007f3af2425fa0 R15: 00007ffdf4dcc8a8 [ 87.097100][ T2882] [ 88.100530][ T2905] pimreg0: tun_chr_ioctl cmd 1074025692 [ 89.362711][ T2954] bridge0: port 3(team_slave_1) entered blocking state [ 89.372825][ T2954] bridge0: port 3(team_slave_1) entered disabled state [ 89.382625][ T2954] device team_slave_1 entered promiscuous mode [ 89.518616][ T2963] 0: renamed from bond_slave_0 [ 89.620296][ T2969] device syz_tun entered promiscuous mode [ 90.428128][ T28] audit: type=1400 audit(1785923245.259:140): avc: denied { create } for pid=3012 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.491040][ T3018] device syzkaller0 entered promiscuous mode [ 90.541762][ T3028] syz.3.793[3028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.541843][ T3028] syz.3.793[3028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.630651][ T3041] syz.3.793[3041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.725931][ T3041] syz.3.793[3041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.132418][ T3077] device sit0 left promiscuous mode [ 91.182114][ T3082] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 91.278591][ T3077] device sit0 entered promiscuous mode [ 91.868670][ T3115] device syzkaller0 entered promiscuous mode [ 91.899367][ T3125] device veth0_vlan left promiscuous mode [ 91.905805][ T3125] device veth0_vlan entered promiscuous mode [ 92.193309][ T3131] device syzkaller0 entered promiscuous mode [ 92.632395][ T28] audit: type=1400 audit(1785923247.449:141): avc: denied { create } for pid=3167 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.142643][ T28] audit: type=1400 audit(1785923247.969:142): avc: denied { create } for pid=3201 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 93.213969][ T28] audit: type=1400 audit(1785923247.999:143): avc: denied { read } for pid=3201 comm="syz.3.851" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.282929][ T28] audit: type=1400 audit(1785923247.999:144): avc: denied { open } for pid=3201 comm="syz.3.851" path="net:[4026532642]" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.306066][ T28] audit: type=1400 audit(1785923248.039:145): avc: denied { create } for pid=3203 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.532729][ T3214] tap0: tun_chr_ioctl cmd 35139 [ 96.007243][ T28] audit: type=1400 audit(1785923250.829:146): avc: denied { create } for pid=3313 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 98.559907][ T28] audit: type=1400 audit(1785923253.389:147): avc: denied { read write } for pid=3413 comm="syz.1.945" name="cgroup.max.descendants" dev="cgroup2" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.595295][ T28] audit: type=1400 audit(1785923253.389:148): avc: denied { open } for pid=3413 comm="syz.1.945" path="" dev="cgroup2" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.953679][ T3457] device syzkaller0 entered promiscuous mode [ 103.857206][ T3580] device syzkaller0 entered promiscuous mode [ 103.864247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 106.681793][ T3744] syz.4.1053[3744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.681920][ T3744] syz.4.1053[3744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.888314][ T3885] device syzkaller0 entered promiscuous mode [ 109.021602][ T3899] device syzkaller0 entered promiscuous mode [ 110.175446][ T3965] pimreg: tun_chr_ioctl cmd 2147767519 [ 110.629359][ T4001] device syzkaller0 entered promiscuous mode [ 111.531783][ T4033] device syzkaller0 entered promiscuous mode [ 111.764390][ T4052] device syzkaller0 entered promiscuous mode [ 112.472403][ T4104] device syzkaller0 entered promiscuous mode [ 113.292466][ T4158] device syzkaller0 entered promiscuous mode [ 113.902238][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 115.621096][ T4243] device syzkaller0 entered promiscuous mode [ 115.784695][ T4251] pimreg: tun_chr_ioctl cmd 1074812117 [ 117.591935][ T4329] device syzkaller0 entered promiscuous mode [ 119.356357][ T28] audit: type=1400 audit(1785923274.179:149): avc: denied { create } for pid=4399 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.493596][ T4405] 0: renamed from bond_slave_0 [ 120.088916][ T28] audit: type=1400 audit(1785923274.919:150): avc: denied { create } for pid=4424 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.180230][ T4435] device syzkaller0 entered promiscuous mode [ 120.679393][ T28] audit: type=1400 audit(1785923275.509:151): avc: denied { create } for pid=4487 comm="syz.1.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.552576][ T28] audit: type=1400 audit(1785923276.379:152): avc: denied { create } for pid=4527 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 121.953485][ T4551] device syzkaller0 entered promiscuous mode [ 125.144859][ T4668] device syzkaller0 entered promiscuous mode [ 126.271751][ T4724] device syzkaller0 left promiscuous mode [ 129.403701][ T4771] device syzkaller0 entered promiscuous mode [ 129.953312][ T4790] tap0: tun_chr_ioctl cmd 1074025681 [ 130.054002][ T4793] tap0: tun_chr_ioctl cmd 2147767517 [ 130.734195][ T4813] device syzkaller0 entered promiscuous mode [ 131.053019][ T28] audit: type=1400 audit(1785923285.879:153): avc: denied { create } for pid=4830 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.101418][ T4833] device bridge0 entered promiscuous mode [ 134.063757][ T4962] device syzkaller0 entered promiscuous mode [ 134.689586][ T28] audit: type=1400 audit(1785923289.519:154): avc: denied { create } for pid=4998 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.777167][ T28] audit: type=1400 audit(1785923289.599:155): avc: denied { attach_queue } for pid=5004 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.920291][ T5020] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.970313][ T5020] device syzkaller0 entered promiscuous mode [ 136.436793][ T28] audit: type=1400 audit(1785923291.259:156): avc: denied { create } for pid=5067 comm="syz.0.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.345565][ T5112] device syzkaller0 entered promiscuous mode [ 138.060544][ T5140] : port 1(ip6gretap0) entered blocking state [ 138.068515][ T5140] : port 1(ip6gretap0) entered disabled state [ 138.079293][ T5140] device ip6gretap0 entered promiscuous mode [ 138.120835][ T5137] device ip6gretap0 left promiscuous mode [ 138.129099][ T5137] : port 1(ip6gretap0) entered disabled state [ 138.339054][ T5169] : port 1(ip6gretap0) entered blocking state [ 138.352689][ T5169] : port 1(ip6gretap0) entered disabled state [ 138.380613][ T5169] device ip6gretap0 entered promiscuous mode [ 138.718061][ T5242] sock: sock_set_timeout: `syz.0.1547' (pid 5242) tries to set negative timeout [ 138.817933][ T5249] device dummy0 entered promiscuous mode [ 138.927439][ T28] audit: type=1400 audit(1785923293.749:157): avc: denied { ioctl } for pid=5263 comm="syz.0.1555" path="pid:[4026532289]" dev="nsfs" ino=4026532289 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.086026][ T5288] pimreg: tun_chr_ioctl cmd 35108 [ 139.097615][ T5288] pimreg: tun_chr_ioctl cmd 35108 [ 139.987457][ T5372] pimreg: tun_chr_ioctl cmd 1074025672 [ 139.997424][ T5372] pimreg: ignored: set checksum enabled [ 140.015017][ T5374] device syzkaller0 entered promiscuous mode [ 140.242340][ T5397] device syzkaller0 entered promiscuous mode [ 140.398163][ T5411] : renamed from team_slave_1 [ 140.786775][ T5443] device wg2 entered promiscuous mode [ 141.074038][ T5480] Q6\bY: renamed from lo [ 141.308838][ T5497] veth0_to_bond: mtu less than device minimum [ 141.374537][ T5505] device syzkaller0 left promiscuous mode [ 141.906328][ T5531] device sit0 left promiscuous mode [ 142.006075][ T5531] device sit0 entered promiscuous mode [ 142.159453][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.166614][ T5537] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.421447][ T5544] device syzkaller0 entered promiscuous mode [ 142.517465][ T5559] device syzkaller0 entered promiscuous mode [ 142.539246][ T5551] tap0: tun_chr_ioctl cmd 1074025677 [ 142.544632][ T5551] tap0: linktype set to 768 [ 142.693760][ T5564] device xfrm0 entered promiscuous mode [ 143.520428][ T5619] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 143.531089][ T5619] device syzkaller0 entered promiscuous mode [ 144.079640][ T5648] device syzkaller0 entered promiscuous mode [ 144.384049][ T5667] device syzkaller0 entered promiscuous mode [ 144.418433][ T5667] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 144.540875][ T5671] device veth1_macvtap left promiscuous mode [ 144.597113][ T5671] device veth1_macvtap entered promiscuous mode [ 144.617970][ T5671] device macsec0 entered promiscuous mode [ 145.425837][ T5725] device syzkaller0 entered promiscuous mode [ 146.564489][ T5791] device syzkaller0 entered promiscuous mode [ 146.678535][ T5810] device veth0_vlan left promiscuous mode [ 146.694262][ T5810] device veth0_vlan entered promiscuous mode [ 146.726102][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.125799][ T5835] device syzkaller0 entered promiscuous mode [ 147.361161][ T5872] device syzkaller0 entered promiscuous mode [ 147.381869][ T5876] device syzkaller0 entered promiscuous mode [ 147.526663][ T5894] device syzkaller0 entered promiscuous mode [ 147.668060][ T5906] device veth1_macvtap left promiscuous mode [ 147.700588][ T5906] device veth1_macvtap entered promiscuous mode [ 147.711046][ T5906] device macsec0 entered promiscuous mode [ 148.508378][ T5969] sock: sock_set_timeout: `syz.3.1797' (pid 5969) tries to set negative timeout [ 149.449725][ T6015] device syzkaller0 entered promiscuous mode [ 150.227376][ T6049] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 150.391108][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.399108][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.477516][ T6070] device bridge_slave_1 left promiscuous mode [ 150.485422][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.553941][ T6070] device bridge_slave_0 left promiscuous mode [ 150.572610][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.916391][ T6110] veth0_vlan: mtu less than device minimum [ 151.111492][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.176583][ T6144] device team_slave_1 left promiscuous mode [ 151.192808][ T6144] bridge0: port 3(team_slave_1) entered disabled state [ 151.210010][ T6144] device bridge_slave_1 left promiscuous mode [ 151.225938][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.245474][ T6144] device bridge_slave_0 left promiscuous mode [ 151.260403][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.445962][ T28] audit: type=1400 audit(1785923306.269:158): avc: denied { create } for pid=6150 comm="syz.3.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 154.164736][ T6200] device syzkaller0 entered promiscuous mode [ 154.347680][ T6210] device syzkaller0 entered promiscuous mode [ 154.937747][ T6260] device syzkaller0 entered promiscuous mode [ 155.123930][ T6282] : port 1() entered blocking state [ 155.145149][ T6282] : port 1() entered disabled state [ 155.176472][ T6282] device entered promiscuous mode [ 155.433750][ T6318] device syzkaller0 entered promiscuous mode [ 156.285905][ T6404] device veth1_to_bond entered promiscuous mode [ 157.419552][ T6489] device syzkaller0 entered promiscuous mode [ 157.506640][ T6497] tap0: tun_chr_ioctl cmd 1074025681 [ 157.561387][ T6502] tap0: tun_chr_ioctl cmd 2147767517 [ 158.598461][ T6641] device syzkaller0 entered promiscuous mode [ 160.730530][ T6683] device syzkaller0 entered promiscuous mode [ 161.152850][ T6730] device syzkaller0 entered promiscuous mode [ 161.428330][ T6747] -1O2~: renamed from syzkaller0 [ 161.697479][ T6769] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 161.719908][ T6769] pim6reg0: linktype set to 825 [ 163.068856][ T6819] device sit0 left promiscuous mode [ 163.668613][ T6914] 0: renamed from bond_slave_0 [ 167.744580][ T7054] device syzkaller0 entered promiscuous mode [ 171.946782][ T7102] cgroup: fork rejected by pids controller in /syz1 [ 172.174489][ T7134] tun0: tun_chr_ioctl cmd 1074025675 [ 172.195778][ T7134] tun0: persist disabled [ 172.486355][ T380] device ip6gretap0 left promiscuous mode [ 172.497871][ T380] : port 1(ip6gretap0) entered disabled state [ 172.627664][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.652185][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.667801][ T7158] device bridge_slave_0 entered promiscuous mode [ 172.697820][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.708154][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.723089][ T7158] device bridge_slave_1 entered promiscuous mode [ 172.934144][ T28] audit: type=1400 audit(1785923327.759:159): avc: denied { create } for pid=7158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.974548][ T28] audit: type=1400 audit(1785923327.759:160): avc: denied { write } for pid=7158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.062582][ T28] audit: type=1400 audit(1785923327.759:161): avc: denied { read } for pid=7158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.241766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.251326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.262740][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.281823][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.304699][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.311783][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.321851][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.338794][ T380] device 72 left promiscuous mode [ 173.347780][ T380] bridge0: port 3(72) entered disabled state [ 173.366490][ T380] device bridge_slave_1 left promiscuous mode [ 173.374815][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.382237][ T380] device bridge_slave_0 left promiscuous mode [ 173.427574][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.466908][ T380] device veth1_macvtap left promiscuous mode [ 173.583661][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.592083][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.600463][ T2363] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.607496][ T2363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.628001][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.636153][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.644768][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.653373][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.667651][ T7158] device veth0_vlan entered promiscuous mode [ 173.675154][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.683868][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.696205][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.705071][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.728783][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.736235][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.763007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.775492][ T7158] device veth1_macvtap entered promiscuous mode [ 173.795265][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.814514][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.854412][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.862851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.893004][ T28] audit: type=1400 audit(1785923328.719:162): avc: denied { unmount } for pid=7158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.109555][ T7250] device wg2 left promiscuous mode [ 174.135838][ T7250] device wg2 entered promiscuous mode [ 175.427801][ T7355] device syzkaller0 entered promiscuous mode [ 176.359867][ T7436] device syzkaller0 entered promiscuous mode [ 176.703101][ T7486] device syzkaller0 entered promiscuous mode [ 178.688886][ T28] audit: type=1400 audit(1785923333.519:163): avc: denied { associate } for pid=7561 comm="syz.0.2494" name="cgroup.freeze" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.692899][ T7565] device syzkaller0 entered promiscuous mode [ 183.880734][ T28] audit: type=1400 audit(1785923338.709:164): avc: denied { create } for pid=7623 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.906467][ T7629] device syzkaller0 left promiscuous mode [ 184.037979][ T7648] syz.1.2521 uses obsolete (PF_INET,SOCK_PACKET) [ 184.473488][ T7710] device syzkaller0 entered promiscuous mode [ 184.748708][ T7740] device syzkaller0 entered promiscuous mode [ 185.019757][ T7770] device syzkaller0 entered promiscuous mode [ 185.361224][ T7800] device syzkaller0 entered promiscuous mode [ 185.700111][ T7828] device syzkaller0 entered promiscuous mode [ 185.923442][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.930637][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.955195][ T7862] device bridge_slave_1 left promiscuous mode [ 185.978357][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.992757][ T7862] device bridge_slave_0 left promiscuous mode [ 186.003558][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.065051][ T7871] device syzkaller0 entered promiscuous mode [ 190.813684][ T7957] device syzkaller0 entered promiscuous mode [ 191.784555][ T8009] device syzkaller0 entered promiscuous mode [ 192.753376][ T8077] device syzkaller0 entered promiscuous mode [ 194.487112][ T8203] device syzkaller0 entered promiscuous mode [ 195.163539][ T28] audit: type=1400 audit(1785923349.989:165): avc: denied { mounton } for pid=8304 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 195.296958][ T8315] device syzkaller0 entered promiscuous mode [ 195.331642][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.341709][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.353634][ T8304] device bridge_slave_0 entered promiscuous mode [ 195.402680][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.416971][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.428973][ T8304] device bridge_slave_1 entered promiscuous mode [ 195.450362][ T8335] device syzkaller0 entered promiscuous mode [ 195.477062][ T8341] device syzkaller0 entered promiscuous mode [ 195.627125][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.634187][ T8304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.641458][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.648757][ T8304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.725118][ T8380] device syzkaller0 entered promiscuous mode [ 195.765048][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.777274][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.785943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.795072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.824774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.851475][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.858529][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.890460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.898916][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.905934][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.918996][ T8392] device syzkaller0 entered promiscuous mode [ 195.927356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 195.954153][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.968056][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.000080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.018083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.029163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.037727][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.048502][ T8304] device veth0_vlan entered promiscuous mode [ 196.068638][ T324] device veth1_macvtap left promiscuous mode [ 196.081647][ T324] device veth0_vlan left promiscuous mode [ 196.191668][ T8304] device veth1_macvtap entered promiscuous mode [ 196.213742][ T8428] device syzkaller0 entered promiscuous mode [ 196.222690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.249629][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.258428][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.883291][ T8482] device syzkaller0 entered promiscuous mode [ 199.933026][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.940958][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.956503][ T8468] device bridge_slave_0 entered promiscuous mode [ 199.964625][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.972977][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.981418][ T8468] device bridge_slave_1 entered promiscuous mode [ 201.819388][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.826436][ T8468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.833696][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.840737][ T8468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.864216][ T8512] device syzkaller0 entered promiscuous mode [ 201.871094][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.882156][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.927712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.936012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.961120][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.969837][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.978799][ T2363] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.985844][ T2363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.995519][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.012263][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.025501][ T2363] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.032565][ T2363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.055634][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.071046][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.080048][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.090273][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.814664][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.826281][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.838541][ T8468] device veth0_vlan entered promiscuous mode [ 204.856123][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.863968][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.872094][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.879860][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.891153][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.899430][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.923090][ T8550] device syzkaller0 entered promiscuous mode [ 204.930274][ T8468] device veth1_macvtap entered promiscuous mode [ 204.959527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.969735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.978866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.987624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.997475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.282352][ T8605] device syzkaller0 entered promiscuous mode [ 205.504854][ T324] GPL: port 1(erspan0) entered disabled state [ 205.513819][ T324] device erspan0 left promiscuous mode [ 205.519584][ T324] GPL: port 1(erspan0) entered disabled state [ 205.578252][ T8642] device syzkaller0 entered promiscuous mode [ 205.680093][ T8654] tap0: tun_chr_ioctl cmd 1074025675 [ 205.685443][ T8654] tap0: persist enabled [ 205.718493][ T8654] tap0: tun_chr_ioctl cmd 1074025675 [ 205.723823][ T8654] tap0: persist disabled [ 205.793801][ T8670] device syzkaller0 entered promiscuous mode [ 205.801217][ T324] device left promiscuous mode [ 205.806836][ T324] : port 1() entered disabled state [ 205.815619][ T324] device bridge_slave_1 left promiscuous mode [ 205.821872][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.833687][ T324] device bridge_slave_0 left promiscuous mode [ 205.840055][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.858686][ T324] device veth1_macvtap left promiscuous mode [ 205.869622][ T324] device veth0_vlan left promiscuous mode [ 206.083757][ T8689] device syzkaller0 entered promiscuous mode [ 206.102786][ T8690] device syzkaller0 entered promiscuous mode [ 206.333592][ T8718] device syzkaller0 entered promiscuous mode [ 206.364635][ T8722] device syzkaller0 entered promiscuous mode [ 206.527078][ T8736] device syzkaller0 entered promiscuous mode [ 206.601636][ T8757] device syzkaller0 entered promiscuous mode [ 206.630365][ T8755] device syzkaller0 entered promiscuous mode [ 206.661891][ T8759] device syzkaller0 entered promiscuous mode [ 206.870735][ T8790] device syzkaller0 entered promiscuous mode [ 206.935668][ T8794] device syzkaller0 entered promiscuous mode [ 207.395514][ T8821] device syzkaller0 entered promiscuous mode [ 210.826954][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.842654][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.853133][ T8824] device bridge_slave_0 entered promiscuous mode [ 210.865872][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.872955][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.888310][ T8824] device bridge_slave_1 entered promiscuous mode [ 211.048508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.062622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.096493][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.113036][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.133787][ T2363] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.140840][ T2363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.150011][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.164716][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.173311][ T2363] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.180353][ T2363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.191265][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.212988][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.227327][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.253202][ T8824] device veth0_vlan entered promiscuous mode [ 211.260857][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.271622][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.284015][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.295818][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.317258][ T8824] device veth1_macvtap entered promiscuous mode [ 211.328514][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.347454][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.371024][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.403655][ T8899] device syzkaller0 entered promiscuous mode [ 214.967402][ T8974] device syzkaller0 entered promiscuous mode [ 214.979398][ T8976] IPv6: pim6reg1: Disabled Multicast RS [ 215.118986][ T905] device veth1_macvtap left promiscuous mode [ 215.125050][ T905] device veth0_vlan left promiscuous mode [ 215.184043][ T28] audit: type=1400 audit(1785923370.009:166): avc: denied { create } for pid=9015 comm="syz.4.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.411258][ T9048] device syzkaller0 entered promiscuous mode [ 215.909498][ T9139] device syzkaller0 entered promiscuous mode [ 217.127473][ T9210] device syzkaller0 entered promiscuous mode [ 220.850468][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.857552][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.865114][ T9276] device bridge_slave_0 entered promiscuous mode [ 220.873264][ T9276] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.880333][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.903267][ T9276] device bridge_slave_1 entered promiscuous mode [ 221.043961][ T9276] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.051034][ T9276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.058318][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.065338][ T9276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.092892][ T9340] device veth1_macvtap left promiscuous mode [ 221.109288][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.116335][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.124410][ T9311] device bridge_slave_0 entered promiscuous mode [ 221.131749][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.138902][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.146637][ T9311] device bridge_slave_1 entered promiscuous mode [ 221.217509][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.224636][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.251473][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.268044][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.277540][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.287444][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.299472][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.306534][ T9359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.313864][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.320917][ T9359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.328604][ T9359] device bridge0 entered promiscuous mode [ 221.357156][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.369669][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.376692][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.385931][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.394281][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.401323][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.408916][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.416766][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.441572][ T10] device veth0_vlan left promiscuous mode [ 221.475233][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.490921][ T9382] device wg2 entered promiscuous mode [ 221.515675][ T9276] device veth0_vlan entered promiscuous mode [ 221.536983][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.556264][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.563755][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.593433][ T9276] device veth1_macvtap entered promiscuous mode [ 221.624382][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.678807][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.687709][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.739290][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.818628][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.828931][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.847491][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.854546][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.881046][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.893353][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.900408][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.908752][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.917291][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.925698][ T905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.950586][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.965056][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.979776][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.987415][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.998205][ T9311] device veth0_vlan entered promiscuous mode [ 222.026642][ T9311] device veth1_macvtap entered promiscuous mode [ 222.040004][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.056957][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.067437][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.084809][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.096664][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.107851][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.118021][ T2363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.218568][ T9479] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 222.472992][ T9522] device syzkaller0 entered promiscuous mode [ 223.523641][ T9644] device syzkaller0 entered promiscuous mode [ 223.792264][ T9676] device syzkaller0 entered promiscuous mode [ 224.375746][ T9738] device syzkaller0 entered promiscuous mode [ 224.694440][ T9776] device syzkaller0 entered promiscuous mode [ 224.852805][ T9808] device syzkaller0 entered promiscuous mode [ 224.969638][ T9825] device syzkaller0 entered promiscuous mode [ 225.037324][ T9845] bridge0: port 3(veth0_to_hsr) entered blocking state [ 225.045003][ T9845] bridge0: port 3(veth0_to_hsr) entered disabled state [ 225.053033][ T9845] device veth0_to_hsr entered promiscuous mode [ 225.059434][ T9845] bridge0: port 3(veth0_to_hsr) entered blocking state [ 225.066298][ T9845] bridge0: port 3(veth0_to_hsr) entered forwarding state [ 225.076888][ T9841] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 225.095866][ T9841] syzkaller0: linktype set to 32 [ 225.115533][ T9851] device syzkaller0 entered promiscuous mode [ 225.122495][ T9855] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 225.128617][ T9855] syzkaller0: linktype set to 6 [ 225.252710][ T9873] device syzkaller0 entered promiscuous mode [ 225.271487][ T9877] device syzkaller0 entered promiscuous mode [ 225.397643][ T9895] device syzkaller0 entered promiscuous mode [ 225.534706][ T9920] device syzkaller0 entered promiscuous mode [ 225.605474][ T9928] device syzkaller0 entered promiscuous mode [ 225.832946][ T9965] device syzkaller0 entered promiscuous mode [ 225.911389][ T9980] device syzkaller0 entered promiscuous mode [ 225.925608][ T9979] device syzkaller0 entered promiscuous mode [ 226.122419][T10011] device syzkaller0 entered promiscuous mode [ 226.292624][T10051] caif0: tun_chr_ioctl cmd 2147767506 [ 226.340569][T10054] device syzkaller0 entered promiscuous mode [ 226.493758][T10081] device syzkaller0 entered promiscuous mode [ 226.517472][T10084] device pim6reg1 entered promiscuous mode [ 226.642303][T10113] device syzkaller0 entered promiscuous mode [ 227.018156][T10194] device syzkaller0 entered promiscuous mode [ 227.081458][T10202] device syzkaller0 entered promiscuous mode [ 227.221461][T10227] device syzkaller0 entered promiscuous mode [ 227.353848][T10245] device syzkaller0 entered promiscuous mode [ 227.405118][T10256] device syzkaller0 entered promiscuous mode [ 227.505686][T10269] tun0: tun_chr_ioctl cmd 2148553947 [ 228.030322][T10367] device syzkaller0 entered promiscuous mode [ 228.122111][T10376] syzkaller0: create flow: hash 830073753 index 1 [ 228.149029][T10376] syzkaller0: delete flow: hash 830073753 index 1 [ 228.315770][T10412] device syzkaller0 entered promiscuous mode [ 228.544028][T10459] device syzkaller0 entered promiscuous mode [ 228.600439][T10465] syzkaller0: create flow: hash 830073753 index 1 [ 228.620382][T10464] syzkaller0: delete flow: hash 830073753 index 1 [ 229.811391][T10500] FAULT_INJECTION: forcing a failure. [ 229.811391][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.778464][T10500] CPU: 0 PID: 10500 Comm: syz.2.3832 Not tainted syzkaller #0 [ 230.785954][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.795991][T10500] Call Trace: [ 230.799253][T10500] [ 230.802168][T10500] __dump_stack+0x21/0x24 [ 230.806485][T10500] dump_stack_lvl+0x110/0x170 [ 230.811143][T10500] ? __cfi_dump_stack_lvl+0x8/0x8 [ 230.816151][T10500] dump_stack+0x15/0x24 [ 230.820286][T10500] should_fail_ex+0x3bf/0x510 [ 230.824944][T10500] should_fail+0xb/0x10 [ 230.829076][T10500] should_fail_usercopy+0x1a/0x20 [ 230.834078][T10500] _copy_from_user+0x1e/0xc0 [ 230.838653][T10500] __sys_bpf+0x2a0/0x850 [ 230.842898][T10500] ? bpf_link_show_fdinfo+0x330/0x330 [ 230.848267][T10500] ? __cfi_ksys_write+0x10/0x10 [ 230.853101][T10500] ? debug_smp_processor_id+0x17/0x20 [ 230.858454][T10500] __x64_sys_bpf+0x7c/0x90 [ 230.862850][T10500] x64_sys_call+0x488/0x9a0 [ 230.867336][T10500] do_syscall_64+0x4c/0xa0 [ 230.871738][T10500] ? clear_bhb_loop+0x30/0x80 [ 230.876392][T10500] ? clear_bhb_loop+0x30/0x80 [ 230.881051][T10500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.886928][T10500] RIP: 0033:0x7fa79c59e019 [ 230.891323][T10500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.910907][T10500] RSP: 002b:00007fa79d516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.919301][T10500] RAX: ffffffffffffffda RBX: 00007fa79c825fa0 RCX: 00007fa79c59e019 [ 230.927253][T10500] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 230.935204][T10500] RBP: 00007fa79d516090 R08: 0000000000000000 R09: 0000000000000000 [ 230.943154][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.951102][T10500] R13: 00007fa79c826038 R14: 00007fa79c825fa0 R15: 00007ffebaffb8e8 [ 230.959057][T10500] [ 232.783176][T10497] device syzkaller0 entered promiscuous mode [ 232.967803][T10519] device syzkaller0 entered promiscuous mode [ 232.991641][T10525] FAULT_INJECTION: forcing a failure. [ 232.991641][T10525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.004831][T10525] CPU: 1 PID: 10525 Comm: syz.5.3842 Not tainted syzkaller #0 [ 233.012289][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.022337][T10525] Call Trace: [ 233.025606][T10525] [ 233.028520][T10525] __dump_stack+0x21/0x24 [ 233.032854][T10525] dump_stack_lvl+0x110/0x170 [ 233.037541][T10525] ? __cfi_dump_stack_lvl+0x8/0x8 [ 233.042576][T10525] dump_stack+0x15/0x24 [ 233.046734][T10525] should_fail_ex+0x3bf/0x510 [ 233.051414][T10525] should_fail+0xb/0x10 [ 233.055566][T10525] should_fail_usercopy+0x1a/0x20 [ 233.060588][T10525] _copy_from_user+0x1e/0xc0 [ 233.065164][T10525] __sys_bpf+0x2a0/0x850 [ 233.069397][T10525] ? bpf_link_show_fdinfo+0x330/0x330 [ 233.074748][T10525] ? __cfi_ksys_write+0x10/0x10 [ 233.079576][T10525] ? do_user_addr_fault+0x9a5/0x1030 [ 233.084841][T10525] ? debug_smp_processor_id+0x17/0x20 [ 233.090195][T10525] __x64_sys_bpf+0x7c/0x90 [ 233.094589][T10525] x64_sys_call+0x488/0x9a0 [ 233.099069][T10525] do_syscall_64+0x4c/0xa0 [ 233.103463][T10525] ? clear_bhb_loop+0x30/0x80 [ 233.108125][T10525] ? clear_bhb_loop+0x30/0x80 [ 233.112801][T10525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.118698][T10525] RIP: 0033:0x7fcffa99e019 [ 233.123108][T10525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.142700][T10525] RSP: 002b:00007fcffb786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.151088][T10525] RAX: ffffffffffffffda RBX: 00007fcffac25fa0 RCX: 00007fcffa99e019 [ 233.159035][T10525] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 233.166984][T10525] RBP: 00007fcffb786090 R08: 0000000000000000 R09: 0000000000000000 [ 233.174945][T10525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.182889][T10525] R13: 00007fcffac26038 R14: 00007fcffac25fa0 R15: 00007ffdadf78388 [ 233.190841][T10525] [ 233.278083][T10540] device syzkaller0 entered promiscuous mode [ 233.417814][T10573] device syzkaller0 entered promiscuous mode [ 233.547234][T10601] device syzkaller0 entered promiscuous mode [ 233.643868][T10629] tap0: tun_chr_ioctl cmd 1074025677 [ 233.657935][T10629] tap0: linktype set to 823 [ 233.687520][T10629] tap0: tun_chr_ioctl cmd 1074025673 [ 233.774571][T10654] device syzkaller0 entered promiscuous mode [ 234.310672][T10779] device syzkaller0 entered promiscuous mode [ 234.323201][T10785] pimreg: tun_chr_ioctl cmd 2148553947 [ 234.500346][ T28] audit: type=1400 audit(1785923389.329:167): avc: denied { create } for pid=10805 comm="syz.2.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 234.556771][T10814] FAULT_INJECTION: forcing a failure. [ 234.556771][T10814] name failslab, interval 1, probability 0, space 0, times 0 [ 234.569615][T10814] CPU: 0 PID: 10814 Comm: syz.0.3982 Not tainted syzkaller #0 [ 234.577080][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.587126][T10814] Call Trace: [ 234.590400][T10814] [ 234.593321][T10814] __dump_stack+0x21/0x24 [ 234.597640][T10814] dump_stack_lvl+0x110/0x170 [ 234.602296][T10814] ? __cfi_dump_stack_lvl+0x8/0x8 [ 234.607303][T10814] ? kstrtouint+0x74/0xe0 [ 234.611611][T10814] dump_stack+0x15/0x24 [ 234.615745][T10814] should_fail_ex+0x3bf/0x510 [ 234.620405][T10814] __should_failslab+0xac/0xf0 [ 234.625170][T10814] should_failslab+0x9/0x20 [ 234.629653][T10814] __kmem_cache_alloc_node+0x3d/0x2d0 [ 234.635007][T10814] ? kernfs_fop_write_iter+0x152/0x470 [ 234.640449][T10814] ? kernfs_fop_write_iter+0x152/0x470 [ 234.645901][T10814] __kmalloc+0xa4/0x1e0 [ 234.650057][T10814] kernfs_fop_write_iter+0x152/0x470 [ 234.655321][T10814] vfs_write+0x5ef/0xd00 [ 234.659548][T10814] ? __cfi_vfs_write+0x10/0x10 [ 234.664288][T10814] ? __cfi_mutex_lock+0x10/0x10 [ 234.669124][T10814] ? __fdget_pos+0x2cd/0x380 [ 234.673692][T10814] ? ksys_write+0x70/0x260 [ 234.678085][T10814] ksys_write+0x14a/0x260 [ 234.682392][T10814] ? __cfi_ksys_write+0x10/0x10 [ 234.687223][T10814] ? debug_smp_processor_id+0x17/0x20 [ 234.692575][T10814] __x64_sys_write+0x7b/0x90 [ 234.697145][T10814] x64_sys_call+0x27b/0x9a0 [ 234.701637][T10814] do_syscall_64+0x4c/0xa0 [ 234.706036][T10814] ? clear_bhb_loop+0x30/0x80 [ 234.710693][T10814] ? clear_bhb_loop+0x30/0x80 [ 234.715351][T10814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.721228][T10814] RIP: 0033:0x7f81b0d9e019 [ 234.725623][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.745207][T10814] RSP: 002b:00007f81b1c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.753600][T10814] RAX: ffffffffffffffda RBX: 00007f81b1025fa0 RCX: 00007f81b0d9e019 [ 234.761551][T10814] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 234.769498][T10814] RBP: 00007f81b1c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 234.777445][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.785394][T10814] R13: 00007f81b1026038 R14: 00007f81b1025fa0 R15: 00007ffe36cb2318 [ 234.793351][T10814] [ 234.853021][T10820] device syzkaller0 entered promiscuous mode [ 234.943475][T10831] FAULT_INJECTION: forcing a failure. [ 234.943475][T10831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.005580][T10831] CPU: 0 PID: 10831 Comm: syz.3.3990 Not tainted syzkaller #0 [ 235.013074][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.023121][T10831] Call Trace: [ 235.026393][T10831] [ 235.029323][T10831] __dump_stack+0x21/0x24 [ 235.033653][T10831] dump_stack_lvl+0x110/0x170 [ 235.038326][T10831] ? __cfi_dump_stack_lvl+0x8/0x8 [ 235.043347][T10831] dump_stack+0x15/0x24 [ 235.047499][T10831] should_fail_ex+0x3bf/0x510 [ 235.052168][T10831] should_fail+0xb/0x10 [ 235.056307][T10831] should_fail_usercopy+0x1a/0x20 [ 235.061319][T10831] _copy_from_user+0x1e/0xc0 [ 235.065894][T10831] __sys_bpf+0x2a0/0x850 [ 235.070116][T10831] ? bpf_link_show_fdinfo+0x330/0x330 [ 235.075472][T10831] ? __cfi_ksys_write+0x10/0x10 [ 235.080305][T10831] ? debug_smp_processor_id+0x17/0x20 [ 235.085659][T10831] __x64_sys_bpf+0x7c/0x90 [ 235.090051][T10831] x64_sys_call+0x488/0x9a0 [ 235.094533][T10831] do_syscall_64+0x4c/0xa0 [ 235.098929][T10831] ? clear_bhb_loop+0x30/0x80 [ 235.103585][T10831] ? clear_bhb_loop+0x30/0x80 [ 235.108239][T10831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.114115][T10831] RIP: 0033:0x7ff119d9e019 [ 235.118506][T10831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.138092][T10831] RSP: 002b:00007ff11ad4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.146489][T10831] RAX: ffffffffffffffda RBX: 00007ff11a025fa0 RCX: 00007ff119d9e019 [ 235.154455][T10831] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 235.162410][T10831] RBP: 00007ff11ad4a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.170364][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.178316][T10831] R13: 00007ff11a026038 R14: 00007ff11a025fa0 R15: 00007ffd48f43718 [ 235.186271][T10831] [ 235.194642][T10845] FAULT_INJECTION: forcing a failure. [ 235.194642][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 235.215439][T10845] CPU: 0 PID: 10845 Comm: syz.2.3994 Not tainted syzkaller #0 [ 235.222911][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.232960][T10845] Call Trace: [ 235.236229][T10845] [ 235.239152][T10845] __dump_stack+0x21/0x24 [ 235.243483][T10845] dump_stack_lvl+0x110/0x170 [ 235.248254][T10845] ? __cfi_dump_stack_lvl+0x8/0x8 [ 235.253274][T10845] ? _parse_integer_limit+0x18e/0x1d0 [ 235.258643][T10845] dump_stack+0x15/0x24 [ 235.262800][T10845] should_fail_ex+0x3bf/0x510 [ 235.267470][T10845] __should_failslab+0xac/0xf0 [ 235.272234][T10845] should_failslab+0x9/0x20 [ 235.276732][T10845] __kmem_cache_alloc_node+0x3d/0x2d0 [ 235.282085][T10845] ? bpf_prog_test_run_skb+0x246/0x12f0 [ 235.287613][T10845] ? bpf_prog_test_run_skb+0x246/0x12f0 [ 235.293135][T10845] __kmalloc+0xa4/0x1e0 [ 235.297267][T10845] bpf_prog_test_run_skb+0x246/0x12f0 [ 235.302625][T10845] ? __kasan_check_write+0x14/0x20 [ 235.307737][T10845] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 235.313548][T10845] bpf_prog_test_run+0x3b4/0x5c0 [ 235.318469][T10845] ? bpf_prog_query+0x270/0x270 [ 235.323321][T10845] ? selinux_bpf+0xce/0xf0 [ 235.327736][T10845] ? security_bpf+0x93/0xb0 [ 235.332246][T10845] __sys_bpf+0x5ee/0x850 [ 235.336480][T10845] ? bpf_link_show_fdinfo+0x330/0x330 [ 235.341847][T10845] ? __cfi_ksys_write+0x10/0x10 [ 235.346690][T10845] ? debug_smp_processor_id+0x17/0x20 [ 235.352060][T10845] __x64_sys_bpf+0x7c/0x90 [ 235.356467][T10845] x64_sys_call+0x488/0x9a0 [ 235.360962][T10845] do_syscall_64+0x4c/0xa0 [ 235.365374][T10845] ? clear_bhb_loop+0x30/0x80 [ 235.370042][T10845] ? clear_bhb_loop+0x30/0x80 [ 235.374715][T10845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.380610][T10845] RIP: 0033:0x7fa79c59e019 [ 235.385021][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.404616][T10845] RSP: 002b:00007fa79d516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.413024][T10845] RAX: ffffffffffffffda RBX: 00007fa79c825fa0 RCX: 00007fa79c59e019 [ 235.420981][T10845] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 235.428951][T10845] RBP: 00007fa79d516090 R08: 0000000000000000 R09: 0000000000000000 [ 235.436915][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.444875][T10845] R13: 00007fa79c826038 R14: 00007fa79c825fa0 R15: 00007ffebaffb8e8 [ 235.452853][T10845] [ 235.793229][T10868] device syzkaller0 entered promiscuous mode [ 235.825456][T10855] device sit0 entered promiscuous mode [ 236.178995][T10920] FAULT_INJECTION: forcing a failure. [ 236.178995][T10920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.204461][T10920] CPU: 1 PID: 10920 Comm: syz.0.4026 Not tainted syzkaller #0 [ 236.211938][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.221987][T10920] Call Trace: [ 236.225264][T10920] [ 236.228185][T10920] __dump_stack+0x21/0x24 [ 236.232516][T10920] dump_stack_lvl+0x110/0x170 [ 236.237192][T10920] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.242219][T10920] dump_stack+0x15/0x24 [ 236.246367][T10920] should_fail_ex+0x3bf/0x510 [ 236.251019][T10920] should_fail+0xb/0x10 [ 236.255154][T10920] should_fail_usercopy+0x1a/0x20 [ 236.260160][T10920] _copy_from_user+0x1e/0xc0 [ 236.264752][T10920] bpf_prog_test_run_skb+0x279/0x12f0 [ 236.270116][T10920] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 236.275913][T10920] bpf_prog_test_run+0x3b4/0x5c0 [ 236.280826][T10920] ? bpf_prog_query+0x270/0x270 [ 236.285655][T10920] ? selinux_bpf+0xce/0xf0 [ 236.290048][T10920] ? security_bpf+0x93/0xb0 [ 236.294532][T10920] __sys_bpf+0x5ee/0x850 [ 236.298760][T10920] ? bpf_link_show_fdinfo+0x330/0x330 [ 236.304116][T10920] ? __cfi_ksys_write+0x10/0x10 [ 236.308944][T10920] ? debug_smp_processor_id+0x17/0x20 [ 236.314293][T10920] __x64_sys_bpf+0x7c/0x90 [ 236.318686][T10920] x64_sys_call+0x488/0x9a0 [ 236.323175][T10920] do_syscall_64+0x4c/0xa0 [ 236.327575][T10920] ? clear_bhb_loop+0x30/0x80 [ 236.332227][T10920] ? clear_bhb_loop+0x30/0x80 [ 236.336898][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.342773][T10920] RIP: 0033:0x7f81b0d9e019 [ 236.347179][T10920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.366782][T10920] RSP: 002b:00007f81b1c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.370836][T10926] device syzkaller0 entered promiscuous mode [ 236.375189][T10920] RAX: ffffffffffffffda RBX: 00007f81b1025fa0 RCX: 00007f81b0d9e019 [ 236.375204][T10920] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 236.375216][T10920] RBP: 00007f81b1c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 236.375227][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.412963][T10920] R13: 00007f81b1026038 R14: 00007f81b1025fa0 R15: 00007ffe36cb2318 [ 236.420933][T10920] [ 236.563982][T10938] device syzkaller0 entered promiscuous mode [ 236.665246][T10964] FAULT_INJECTION: forcing a failure. [ 236.665246][T10964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.678430][T10964] CPU: 1 PID: 10964 Comm: syz.0.4045 Not tainted syzkaller #0 [ 236.685896][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.695948][T10964] Call Trace: [ 236.699222][T10964] [ 236.702152][T10964] __dump_stack+0x21/0x24 [ 236.706486][T10964] dump_stack_lvl+0x110/0x170 [ 236.711165][T10964] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.716192][T10964] ? kvmalloc_node+0x28a/0x460 [ 236.720956][T10964] ? __kmalloc_node+0xb2/0x1e0 [ 236.725718][T10964] dump_stack+0x15/0x24 [ 236.729876][T10964] should_fail_ex+0x3bf/0x510 [ 236.734547][T10964] should_fail+0xb/0x10 [ 236.738695][T10964] should_fail_usercopy+0x1a/0x20 [ 236.743720][T10964] _copy_from_user+0x1e/0xc0 [ 236.748307][T10964] ___bpf_copy_key+0xb6/0x110 [ 236.752983][T10964] map_update_elem+0x2b6/0x6a0 [ 236.757745][T10964] ? selinux_bpf+0xce/0xf0 [ 236.762156][T10964] __sys_bpf+0x4af/0x850 [ 236.766390][T10964] ? bpf_link_show_fdinfo+0x330/0x330 [ 236.771750][T10964] ? __cfi_ksys_write+0x10/0x10 [ 236.776602][T10964] ? debug_smp_processor_id+0x17/0x20 [ 236.781975][T10964] __x64_sys_bpf+0x7c/0x90 [ 236.786382][T10964] x64_sys_call+0x488/0x9a0 [ 236.790865][T10964] do_syscall_64+0x4c/0xa0 [ 236.795262][T10964] ? clear_bhb_loop+0x30/0x80 [ 236.799913][T10964] ? clear_bhb_loop+0x30/0x80 [ 236.804567][T10964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.810439][T10964] RIP: 0033:0x7f81b0d9e019 [ 236.814829][T10964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.834409][T10964] RSP: 002b:00007f81b1c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.842799][T10964] RAX: ffffffffffffffda RBX: 00007f81b1025fa0 RCX: 00007f81b0d9e019 [ 236.850751][T10964] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 236.858699][T10964] RBP: 00007f81b1c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 236.866655][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.874601][T10964] R13: 00007f81b1026038 R14: 00007f81b1025fa0 R15: 00007ffe36cb2318 [ 236.882551][T10964] [ 236.990061][T10984] FAULT_INJECTION: forcing a failure. [ 236.990061][T10984] name failslab, interval 1, probability 0, space 0, times 0 [ 237.002736][T10986] FAULT_INJECTION: forcing a failure. [ 237.002736][T10986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.064306][T10986] CPU: 0 PID: 10986 Comm: syz.4.4054 Not tainted syzkaller #0 [ 237.071783][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.081825][T10986] Call Trace: [ 237.085090][T10986] [ 237.088013][T10986] __dump_stack+0x21/0x24 [ 237.092333][T10986] dump_stack_lvl+0x110/0x170 [ 237.096995][T10986] ? __cfi_dump_stack_lvl+0x8/0x8 [ 237.102005][T10986] ? kvmalloc_node+0x28a/0x460 [ 237.106754][T10986] ? __kmalloc_node+0xb2/0x1e0 [ 237.111511][T10986] dump_stack+0x15/0x24 [ 237.115664][T10986] should_fail_ex+0x3bf/0x510 [ 237.120324][T10986] should_fail+0xb/0x10 [ 237.124457][T10986] should_fail_usercopy+0x1a/0x20 [ 237.129460][T10986] _copy_from_user+0x1e/0xc0 [ 237.134034][T10986] ___bpf_copy_key+0xb6/0x110 [ 237.138693][T10986] map_update_elem+0x2b6/0x6a0 [ 237.143434][T10986] ? selinux_bpf+0xce/0xf0 [ 237.147833][T10986] __sys_bpf+0x4af/0x850 [ 237.152055][T10986] ? bpf_link_show_fdinfo+0x330/0x330 [ 237.157406][T10986] ? __schedule+0xbea/0x14b0 [ 237.161981][T10986] ? debug_smp_processor_id+0x17/0x20 [ 237.167333][T10986] ? perf_trace_sys_enter+0x30/0x150 [ 237.172597][T10986] __x64_sys_bpf+0x7c/0x90 [ 237.176992][T10986] x64_sys_call+0x488/0x9a0 [ 237.181478][T10986] do_syscall_64+0x4c/0xa0 [ 237.185874][T10986] ? clear_bhb_loop+0x30/0x80 [ 237.190532][T10986] ? clear_bhb_loop+0x30/0x80 [ 237.195197][T10986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.201089][T10986] RIP: 0033:0x7fb032b9e019 [ 237.205487][T10986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.225081][T10986] RSP: 002b:00007fb033aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.233482][T10986] RAX: ffffffffffffffda RBX: 00007fb032e25fa0 RCX: 00007fb032b9e019 [ 237.241438][T10986] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 237.249388][T10986] RBP: 00007fb033aef090 R08: 0000000000000000 R09: 0000000000000000 [ 237.257345][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.265304][T10986] R13: 00007fb032e26038 R14: 00007fb032e25fa0 R15: 00007ffdb9640768 [ 237.273267][T10986] [ 237.276941][T10984] CPU: 0 PID: 10984 Comm: syz.5.4052 Not tainted syzkaller #0 [ 237.284405][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.294452][T10984] Call Trace: [ 237.297727][T10984] [ 237.300660][T10984] __dump_stack+0x21/0x24 [ 237.304996][T10984] dump_stack_lvl+0x110/0x170 [ 237.309680][T10984] ? __cfi_dump_stack_lvl+0x8/0x8 [ 237.314706][T10984] ? do_syscall_64+0x4c/0xa0 [ 237.319301][T10984] dump_stack+0x15/0x24 [ 237.323455][T10984] should_fail_ex+0x3bf/0x510 [ 237.328114][T10984] __should_failslab+0xac/0xf0 [ 237.332879][T10984] should_failslab+0x9/0x20 [ 237.337380][T10984] __kmem_cache_alloc_node+0x3d/0x2d0 [ 237.342748][T10984] ? sk_prot_alloc+0xed/0x320 [ 237.347427][T10984] ? sk_prot_alloc+0xed/0x320 [ 237.352106][T10984] __kmalloc+0xa4/0x1e0 [ 237.356260][T10984] sk_prot_alloc+0xed/0x320 [ 237.360764][T10984] sk_alloc+0x3b/0x460 [ 237.364828][T10984] ? bpf_ctx_init+0x15d/0x1a0 [ 237.369508][T10984] bpf_prog_test_run_skb+0x36c/0x12f0 [ 237.374887][T10984] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 237.380696][T10984] bpf_prog_test_run+0x3b4/0x5c0 [ 237.385636][T10984] ? bpf_prog_query+0x270/0x270 [ 237.390486][T10984] ? selinux_bpf+0xce/0xf0 [ 237.394902][T10984] ? security_bpf+0x93/0xb0 [ 237.399407][T10984] __sys_bpf+0x5ee/0x850 [ 237.403646][T10984] ? bpf_link_show_fdinfo+0x330/0x330 [ 237.409016][T10984] ? debug_smp_processor_id+0x17/0x20 [ 237.414387][T10984] ? perf_trace_sys_enter+0x30/0x150 [ 237.419668][T10984] __x64_sys_bpf+0x7c/0x90 [ 237.424079][T10984] x64_sys_call+0x488/0x9a0 [ 237.428575][T10984] do_syscall_64+0x4c/0xa0 [ 237.432974][T10984] ? clear_bhb_loop+0x30/0x80 [ 237.437627][T10984] ? clear_bhb_loop+0x30/0x80 [ 237.442289][T10984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.448167][T10984] RIP: 0033:0x7fcffa99e019 [ 237.452561][T10984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.472147][T10984] RSP: 002b:00007fcffb786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.480549][T10984] RAX: ffffffffffffffda RBX: 00007fcffac25fa0 RCX: 00007fcffa99e019 [ 237.488503][T10984] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 237.496455][T10984] RBP: 00007fcffb786090 R08: 0000000000000000 R09: 0000000000000000 [ 237.504408][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.512360][T10984] R13: 00007fcffac26038 R14: 00007fcffac25fa0 R15: 00007ffdadf78388 [ 237.520316][T10984] [ 237.930905][T11031] device syzkaller0 entered promiscuous mode [ 237.951778][T11047] FAULT_INJECTION: forcing a failure. [ 237.951778][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 237.987892][T11047] CPU: 1 PID: 11047 Comm: syz.2.4075 Not tainted syzkaller #0 [ 237.995386][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.005439][T11047] Call Trace: [ 238.008713][T11047] [ 238.011640][T11047] __dump_stack+0x21/0x24 [ 238.015971][T11047] dump_stack_lvl+0x110/0x170 [ 238.020649][T11047] ? __cfi_dump_stack_lvl+0x8/0x8 [ 238.025675][T11047] ? avc_has_perm+0x163/0x250 [ 238.030351][T11047] dump_stack+0x15/0x24 [ 238.034503][T11047] should_fail_ex+0x3bf/0x510 [ 238.039180][T11047] __should_failslab+0xac/0xf0 [ 238.043948][T11047] should_failslab+0x9/0x20 [ 238.048444][T11047] __kmem_cache_alloc_node+0x3d/0x2d0 [ 238.053814][T11047] ? __get_vm_area_node+0x12c/0x360 [ 238.059008][T11047] ? __get_vm_area_node+0x12c/0x360 [ 238.064201][T11047] kmalloc_node_trace+0x26/0xb0 [ 238.069054][T11047] __get_vm_area_node+0x12c/0x360 [ 238.074078][T11047] __vmalloc_node_range+0x326/0x1440 [ 238.079358][T11047] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.084904][T11047] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 238.090618][T11047] ? __stack_depot_save+0x36/0x490 [ 238.095723][T11047] ? selinux_capable+0x2b6/0x3b0 [ 238.100650][T11047] ? _parse_integer_limit+0x18e/0x1d0 [ 238.106011][T11047] ? __cfi___vmalloc_node_range+0x10/0x10 [ 238.111719][T11047] ? avc_has_perm_noaudit+0x390/0x490 [ 238.117086][T11047] ? avc_has_perm_noaudit+0x390/0x490 [ 238.122452][T11047] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.127994][T11047] __vmalloc+0x79/0x90 [ 238.132065][T11047] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.137614][T11047] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.142982][T11047] bpf_prog_alloc+0x21/0x1c0 [ 238.147564][T11047] bpf_prog_load+0x811/0x1670 [ 238.152240][T11047] ? map_freeze+0x3a0/0x3a0 [ 238.156749][T11047] ? selinux_bpf+0xc7/0xf0 [ 238.161168][T11047] ? security_bpf+0x93/0xb0 [ 238.165672][T11047] __sys_bpf+0x57b/0x850 [ 238.169910][T11047] ? bpf_link_show_fdinfo+0x330/0x330 [ 238.175284][T11047] ? __cfi_ksys_write+0x10/0x10 [ 238.180129][T11047] ? do_user_addr_fault+0x9a5/0x1030 [ 238.185414][T11047] ? debug_smp_processor_id+0x17/0x20 [ 238.190784][T11047] __x64_sys_bpf+0x7c/0x90 [ 238.195198][T11047] x64_sys_call+0x488/0x9a0 [ 238.199697][T11047] do_syscall_64+0x4c/0xa0 [ 238.204111][T11047] ? clear_bhb_loop+0x30/0x80 [ 238.208782][T11047] ? clear_bhb_loop+0x30/0x80 [ 238.213453][T11047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.219353][T11047] RIP: 0033:0x7fa79c59e019 [ 238.223767][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.243367][T11047] RSP: 002b:00007fa79d516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.251778][T11047] RAX: ffffffffffffffda RBX: 00007fa79c825fa0 RCX: 00007fa79c59e019 [ 238.259746][T11047] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 238.267719][T11047] RBP: 00007fa79d516090 R08: 0000000000000000 R09: 0000000000000000 [ 238.275682][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.283647][T11047] R13: 00007fa79c826038 R14: 00007fa79c825fa0 R15: 00007ffebaffb8e8 [ 238.291622][T11047] [ 238.318468][T11047] syz.2.4075: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 238.347478][ T28] audit: type=1400 audit(1785923393.169:168): avc: denied { create } for pid=11064 comm="syz.3.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 238.414367][T11074] FAULT_INJECTION: forcing a failure. [ 238.414367][T11074] name failslab, interval 1, probability 0, space 0, times 0 [ 238.427906][T11074] CPU: 1 PID: 11074 Comm: syz.5.4087 Not tainted syzkaller #0 [ 238.435373][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.445423][T11074] Call Trace: [ 238.448696][T11074] [ 238.451623][T11074] __dump_stack+0x21/0x24 [ 238.455956][T11074] dump_stack_lvl+0x110/0x170 [ 238.460627][T11074] ? __cfi_dump_stack_lvl+0x8/0x8 [ 238.465657][T11074] dump_stack+0x15/0x24 [ 238.469808][T11074] should_fail_ex+0x3bf/0x510 [ 238.474480][T11074] __should_failslab+0xac/0xf0 [ 238.479253][T11074] should_failslab+0x9/0x20 [ 238.483752][T11074] __kmem_cache_alloc_node+0x3d/0x2d0 [ 238.489124][T11074] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 238.494846][T11074] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 238.500564][T11074] kmalloc_trace+0x29/0xb0 [ 238.504975][T11074] selinux_sk_alloc_security+0x7e/0x1a0 [ 238.510519][T11074] security_sk_alloc+0x83/0xb0 [ 238.515284][T11074] sk_prot_alloc+0x108/0x320 [ 238.519873][T11074] sk_alloc+0x3b/0x460 [ 238.523937][T11074] ? bpf_ctx_init+0x15d/0x1a0 [ 238.528610][T11074] bpf_prog_test_run_skb+0x36c/0x12f0 [ 238.533978][T11074] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 238.539774][T11074] bpf_prog_test_run+0x3b4/0x5c0 [ 238.544703][T11074] ? bpf_prog_query+0x270/0x270 [ 238.549547][T11074] ? selinux_bpf+0xce/0xf0 [ 238.553962][T11074] ? security_bpf+0x93/0xb0 [ 238.558466][T11074] __sys_bpf+0x5ee/0x850 [ 238.562708][T11074] ? bpf_link_show_fdinfo+0x330/0x330 [ 238.568076][T11074] ? __cfi_ksys_write+0x10/0x10 [ 238.572921][T11074] ? debug_smp_processor_id+0x17/0x20 [ 238.578289][T11074] __x64_sys_bpf+0x7c/0x90 [ 238.582698][T11074] x64_sys_call+0x488/0x9a0 [ 238.587195][T11074] do_syscall_64+0x4c/0xa0 [ 238.591604][T11074] ? clear_bhb_loop+0x30/0x80 [ 238.596268][T11074] ? clear_bhb_loop+0x30/0x80 [ 238.600931][T11074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.606820][T11074] RIP: 0033:0x7fcffa99e019 [ 238.611228][T11074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.630826][T11074] RSP: 002b:00007fcffb786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.639225][T11074] RAX: ffffffffffffffda RBX: 00007fcffac25fa0 RCX: 00007fcffa99e019 [ 238.647187][T11074] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 238.655146][T11074] RBP: 00007fcffb786090 R08: 0000000000000000 R09: 0000000000000000 [ 238.663106][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.671068][T11074] R13: 00007fcffac26038 R14: 00007fcffac25fa0 R15: 00007ffdadf78388 [ 238.679033][T11074] [ 238.705912][T11047] CPU: 0 PID: 11047 Comm: syz.2.4075 Not tainted syzkaller #0 [ 238.713388][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.723440][T11047] Call Trace: [ 238.726712][T11047] [ 238.729633][T11047] __dump_stack+0x21/0x24 [ 238.733963][T11047] dump_stack_lvl+0x110/0x170 [ 238.738630][T11047] ? __cfi_dump_stack_lvl+0x8/0x8 [ 238.743650][T11047] ? pr_cont_kernfs_name+0x133/0x160 [ 238.748933][T11047] dump_stack+0x15/0x24 [ 238.753099][T11047] warn_alloc+0x1dc/0x200 [ 238.757428][T11047] ? should_failslab+0x9/0x20 [ 238.762096][T11047] ? __cfi_warn_alloc+0x10/0x10 [ 238.766940][T11047] ? kmalloc_node_trace+0x3d/0xb0 [ 238.771964][T11047] ? __get_vm_area_node+0x353/0x360 [ 238.777156][T11047] __vmalloc_node_range+0x34b/0x1440 [ 238.782436][T11047] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 238.788156][T11047] ? __stack_depot_save+0x36/0x490 [ 238.793265][T11047] ? selinux_capable+0x2b6/0x3b0 [ 238.798217][T11047] ? _parse_integer_limit+0x18e/0x1d0 [ 238.803583][T11047] ? __cfi___vmalloc_node_range+0x10/0x10 [ 238.809300][T11047] ? avc_has_perm_noaudit+0x390/0x490 [ 238.814668][T11047] ? avc_has_perm_noaudit+0x390/0x490 [ 238.820030][T11047] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.825572][T11047] __vmalloc+0x79/0x90 [ 238.829633][T11047] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.835179][T11047] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 238.840549][T11047] bpf_prog_alloc+0x21/0x1c0 [ 238.845138][T11047] bpf_prog_load+0x811/0x1670 [ 238.849816][T11047] ? map_freeze+0x3a0/0x3a0 [ 238.854320][T11047] ? selinux_bpf+0xc7/0xf0 [ 238.858737][T11047] ? security_bpf+0x93/0xb0 [ 238.863255][T11047] __sys_bpf+0x57b/0x850 [ 238.867510][T11047] ? bpf_link_show_fdinfo+0x330/0x330 [ 238.872901][T11047] ? __cfi_ksys_write+0x10/0x10 [ 238.877754][T11047] ? do_user_addr_fault+0x9a5/0x1030 [ 238.883041][T11047] ? debug_smp_processor_id+0x17/0x20 [ 238.888411][T11047] __x64_sys_bpf+0x7c/0x90 [ 238.892828][T11047] x64_sys_call+0x488/0x9a0 [ 238.897331][T11047] do_syscall_64+0x4c/0xa0 [ 238.901747][T11047] ? clear_bhb_loop+0x30/0x80 [ 238.906425][T11047] ? clear_bhb_loop+0x30/0x80 [ 238.911095][T11047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.916991][T11047] RIP: 0033:0x7fa79c59e019 [ 238.921401][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.941000][T11047] RSP: 002b:00007fa79d516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.949411][T11047] RAX: ffffffffffffffda RBX: 00007fa79c825fa0 RCX: 00007fa79c59e019 [ 238.957380][T11047] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 238.965379][T11047] RBP: 00007fa79d516090 R08: 0000000000000000 R09: 0000000000000000 [ 238.973352][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.981319][T11047] R13: 00007fa79c826038 R14: 00007fa79c825fa0 R15: 00007ffebaffb8e8 [ 238.989289][T11047] [ 239.178027][T11047] Mem-Info: [ 239.199785][T11047] active_anon:25604 inactive_anon:0 isolated_anon:0 [ 239.199785][T11047] active_file:24713 inactive_file:2390 isolated_file:0 [ 239.199785][T11047] unevictable:0 dirty:876 writeback:0 [ 239.199785][T11047] slab_reclaimable:7617 slab_unreclaimable:77843 [ 239.199785][T11047] mapped:35107 shmem:10896 pagetables:818 [ 239.199785][T11047] sec_pagetables:0 bounce:0 [ 239.199785][T11047] kernel_misc_reclaimable:0 [ 239.199785][T11047] free:1479677 free_pcp:12293 free_cma:0 [ 239.256813][T11047] Node 0 active_anon:97516kB inactive_anon:0kB active_file:98852kB inactive_file:9560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140428kB dirty:3504kB writeback:0kB shmem:38784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4752kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no [ 239.301740][T11105] FAULT_INJECTION: forcing a failure. [ 239.301740][T11105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.333832][T11103] device syzkaller0 entered promiscuous mode [ 239.342590][T11105] CPU: 1 PID: 11105 Comm: syz.5.4100 Not tainted syzkaller #0 [ 239.350059][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.359099][T11047] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971888kB mlocked:0kB bounce:0kB free_pcp:5404kB local_pcp:56kB free_cma:0kB [ 239.360114][T11105] Call Trace: [ 239.360121][T11105] [ 239.388538][T11047] lowmem_reserve[]: [ 239.391288][T11105] __dump_stack+0x21/0x24 [ 239.391314][T11105] dump_stack_lvl+0x110/0x170 [ 239.391331][T11105] ? __cfi_dump_stack_lvl+0x8/0x8 [ 239.394379][T11047] 0 [ 239.398033][T11105] ? __kasan_kmalloc+0x95/0xb0 [ 239.398056][T11105] ? kvmalloc_node+0x28a/0x460 [ 239.403033][T11047] 3932 [ 239.407003][T11105] ? __kmalloc_node+0xb2/0x1e0 [ 239.420885][T11047] 3932 [ 239.423961][T11105] ? kvmalloc_node+0x2b3/0x460 [ 239.426700][T11047] 3932 [ 239.431429][T11105] dump_stack+0x15/0x24 [ 239.431448][T11105] should_fail_ex+0x3bf/0x510 [ 239.431465][T11105] should_fail+0xb/0x10 [ 239.434510][T11047] Normal free:2969996kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:85616kB inactive_anon:0kB active_file:98852kB inactive_file:9560kB unevictable:0kB writepending:3504kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:36956kB local_pcp:12744kB free_cma:0kB [ 239.439022][T11105] should_fail_usercopy+0x1a/0x20 [ 239.439041][T11105] _copy_from_user+0x1e/0xc0 [ 239.441942][T11047] lowmem_reserve[]: [ 239.445906][T11105] map_update_elem+0x467/0x6a0 [ 239.445928][T11105] __sys_bpf+0x4af/0x850 [ 239.450762][T11047] 0 [ 239.454696][T11105] ? bpf_link_show_fdinfo+0x330/0x330 [ 239.494766][T11047] 0 [ 239.497643][T11105] ? __cfi_ksys_write+0x10/0x10 [ 239.497664][T11105] ? debug_smp_processor_id+0x17/0x20 [ 239.513968][T11047] 0 [ 239.514427][T11105] __x64_sys_bpf+0x7c/0x90 [ 239.516902][T11047] 0 [ 239.521719][T11105] x64_sys_call+0x488/0x9a0 [ 239.521739][T11105] do_syscall_64+0x4c/0xa0 [ 239.545265][T11105] ? clear_bhb_loop+0x30/0x80 [ 239.549920][T11105] ? clear_bhb_loop+0x30/0x80 [ 239.554574][T11105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.560451][T11105] RIP: 0033:0x7fcffa99e019 [ 239.564845][T11105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.584435][T11105] RSP: 002b:00007fcffb786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.592828][T11105] RAX: ffffffffffffffda RBX: 00007fcffac25fa0 RCX: 00007fcffa99e019 [ 239.600779][T11105] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 239.608729][T11105] RBP: 00007fcffb786090 R08: 0000000000000000 R09: 0000000000000000 [ 239.616677][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.624625][T11105] R13: 00007fcffac26038 R14: 00007fcffac25fa0 R15: 00007ffdadf78388 [ 239.632581][T11105] [ 239.655958][T11047] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 239.677883][T11047] Normal: 170*4kB (ME) 80*8kB (UM) 88*16kB (ME) 293*32kB (UME) 353*64kB (UME) 1284*128kB (UME) 333*256kB (UM) 102*512kB (UME) 53*1024kB (UM) 35*2048kB (UM) 614*4096kB (UM) = 2977416kB [ 239.714101][T11115] device syzkaller0 entered promiscuous mode [ 239.735364][T11047] 27974 total pagecache pages [ 239.754610][T11047] 0 pages in swap cache [ 239.759021][T11047] Free swap = 124996kB [ 239.763209][T11047] Total swap = 124996kB [ 239.769259][T11047] 2097051 pages RAM [ 239.779345][T11047] 0 pages HighMem/MovableOnly [ 239.784018][T11047] 347479 pages reserved [ 239.788685][T11047] 0 pages cma reserved [ 240.146941][T11151] device syzkaller0 entered promiscuous mode [ 240.235746][T11163] FAULT_INJECTION: forcing a failure. [ 240.235746][T11163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.242298][T11160] device syzkaller0 entered promiscuous mode [ 240.249916][T11163] CPU: 1 PID: 11163 Comm: syz.0.4122 Not tainted syzkaller #0 [ 240.262297][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.272356][T11163] Call Trace: [ 240.275629][T11163] [ 240.278554][T11163] __dump_stack+0x21/0x24 [ 240.282886][T11163] dump_stack_lvl+0x110/0x170 [ 240.287570][T11163] ? __cfi_dump_stack_lvl+0x8/0x8 [ 240.292598][T11163] dump_stack+0x15/0x24 [ 240.296753][T11163] should_fail_ex+0x3bf/0x510 [ 240.301429][T11163] should_fail+0xb/0x10 [ 240.305579][T11163] should_fail_usercopy+0x1a/0x20 [ 240.310603][T11163] _copy_to_user+0x1e/0x90 [ 240.315027][T11163] simple_read_from_buffer+0xe9/0x160 [ 240.320415][T11163] proc_fail_nth_read+0x1a6/0x220 [ 240.325466][T11163] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 240.331118][T11163] ? security_file_permission+0x94/0xb0 [ 240.336671][T11163] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 240.342217][T11163] vfs_read+0x286/0x930 [ 240.346371][T11163] ? __cfi_vfs_read+0x10/0x10 [ 240.351045][T11163] ? __kasan_check_write+0x14/0x20 [ 240.356152][T11163] ? mutex_lock+0x93/0x1b0 [ 240.360568][T11163] ? __cfi_mutex_lock+0x10/0x10 [ 240.365430][T11163] ? __fdget_pos+0x2cd/0x380 [ 240.370018][T11163] ? ksys_read+0x70/0x260 [ 240.374343][T11163] ksys_read+0x14a/0x260 [ 240.378581][T11163] ? __cfi_ksys_read+0x10/0x10 [ 240.383342][T11163] ? debug_smp_processor_id+0x17/0x20 [ 240.388713][T11163] __x64_sys_read+0x7b/0x90 [ 240.393216][T11163] x64_sys_call+0x2f/0x9a0 [ 240.397636][T11163] do_syscall_64+0x4c/0xa0 [ 240.402051][T11163] ? clear_bhb_loop+0x30/0x80 [ 240.406721][T11163] ? clear_bhb_loop+0x30/0x80 [ 240.411400][T11163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.417294][T11163] RIP: 0033:0x7f81b0d5e84e [ 240.421694][T11163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.441284][T11163] RSP: 002b:00007f81b1c3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.449679][T11163] RAX: ffffffffffffffda RBX: 00007f81b1c3b6c0 RCX: 00007f81b0d5e84e [ 240.457631][T11163] RDX: 000000000000000f RSI: 00007f81b1c3b0a0 RDI: 0000000000000005 [ 240.465583][T11163] RBP: 00007f81b1c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 240.473533][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.481482][T11163] R13: 00007f81b1026038 R14: 00007f81b1025fa0 R15: 00007ffe36cb2318 [ 240.489439][T11163] [ 240.735853][T11191] device syzkaller0 entered promiscuous mode [ 242.252035][T11261] device syzkaller0 entered promiscuous mode [ 243.270370][T11312] device syzkaller0 entered promiscuous mode [ 243.541438][T11338] tap0: tun_chr_ioctl cmd 1074025677 [ 243.548281][T11338] tap0: linktype set to 787 [ 243.641578][T11356] device syzkaller0 entered promiscuous mode [ 244.125111][T11397] device syzkaller0 entered promiscuous mode [ 246.500284][T11491] device syzkaller0 entered promiscuous mode [ 246.511855][T11494] FAULT_INJECTION: forcing a failure. [ 246.511855][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.690370][T11494] CPU: 1 PID: 11494 Comm: syz.0.4266 Not tainted syzkaller #0 [ 246.697854][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.707904][T11494] Call Trace: [ 246.711177][T11494] [ 246.714109][T11494] __dump_stack+0x21/0x24 [ 246.718444][T11494] dump_stack_lvl+0x110/0x170 [ 246.723127][T11494] ? __cfi_dump_stack_lvl+0x8/0x8 [ 246.728151][T11494] ? migrate_enable+0x1af/0x2a0 [ 246.733005][T11494] ? __cfi_migrate_enable+0x10/0x10 [ 246.738208][T11494] dump_stack+0x15/0x24 [ 246.742364][T11494] should_fail_ex+0x3bf/0x510 [ 246.747048][T11494] should_fail+0xb/0x10 [ 246.751205][T11494] should_fail_usercopy+0x1a/0x20 [ 246.756314][T11494] _copy_to_user+0x1e/0x90 [ 246.760734][T11494] bpf_test_finish+0x251/0x6c0 [ 246.765502][T11494] ? convert_skb_to___skb+0x430/0x430 [ 246.770878][T11494] ? __kasan_check_write+0x14/0x20 [ 246.775992][T11494] bpf_prog_test_run_skb+0xcef/0x12f0 [ 246.781376][T11494] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 246.787188][T11494] bpf_prog_test_run+0x3b4/0x5c0 [ 246.792131][T11494] ? bpf_prog_query+0x270/0x270 [ 246.796984][T11494] ? selinux_bpf+0xce/0xf0 [ 246.801403][T11494] ? security_bpf+0x93/0xb0 [ 246.805911][T11494] __sys_bpf+0x5ee/0x850 [ 246.810148][T11494] ? bpf_link_show_fdinfo+0x330/0x330 [ 246.815529][T11494] ? __cfi_ksys_write+0x10/0x10 [ 246.820380][T11494] ? debug_smp_processor_id+0x17/0x20 [ 246.825750][T11494] __x64_sys_bpf+0x7c/0x90 [ 246.830163][T11494] x64_sys_call+0x488/0x9a0 [ 246.834672][T11494] do_syscall_64+0x4c/0xa0 [ 246.839083][T11494] ? clear_bhb_loop+0x30/0x80 [ 246.843753][T11494] ? clear_bhb_loop+0x30/0x80 [ 246.848425][T11494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.854319][T11494] RIP: 0033:0x7f81b0d9e019 [ 246.858715][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.878303][T11494] RSP: 002b:00007f81b1c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.886693][T11494] RAX: ffffffffffffffda RBX: 00007f81b1025fa0 RCX: 00007f81b0d9e019 [ 246.894643][T11494] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 246.902591][T11494] RBP: 00007f81b1c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 246.910543][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.918490][T11494] R13: 00007f81b1026038 R14: 00007f81b1025fa0 R15: 00007ffe36cb2318 [ 246.926447][T11494] [ 247.525854][T11542] FAULT_INJECTION: forcing a failure. [ 247.525854][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.703097][T11542] CPU: 1 PID: 11542 Comm: syz.2.4282 Not tainted syzkaller #0 [ 247.710585][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.720641][T11542] Call Trace: [ 247.723915][T11542] [ 247.726842][T11542] __dump_stack+0x21/0x24 [ 247.731177][T11542] dump_stack_lvl+0x110/0x170 [ 247.735852][T11542] ? __cfi_dump_stack_lvl+0x8/0x8 [ 247.740872][T11542] ? format_decode+0x1bb/0x1520 [ 247.745721][T11542] dump_stack+0x15/0x24 [ 247.749872][T11542] should_fail_ex+0x3bf/0x510 [ 247.751915][T11533] device syzkaller0 entered promiscuous mode [ 247.754546][T11542] should_fail+0xb/0x10 [ 247.754565][T11542] should_fail_usercopy+0x1a/0x20 [ 247.769648][T11542] _copy_from_user+0x1e/0xc0 [ 247.774240][T11542] kstrtouint_from_user+0xda/0x170 [ 247.779350][T11542] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 247.785065][T11542] ? __kasan_check_read+0x11/0x20 [ 247.790081][T11542] ? _copy_to_user+0x72/0x90 [ 247.794673][T11542] ? simple_read_from_buffer+0x10f/0x160 [ 247.800301][T11542] proc_fail_nth_write+0x8b/0x200 [ 247.805329][T11542] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 247.810958][T11542] ? security_file_permission+0x8a/0xb0 [ 247.816505][T11542] ? security_file_permission+0x94/0xb0 [ 247.822047][T11542] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 247.827679][T11542] vfs_write+0x3fb/0xd00 [ 247.831916][T11542] ? __kasan_check_read+0x11/0x20 [ 247.836937][T11542] ? __cfi_vfs_write+0x10/0x10 [ 247.841690][T11542] ? __kasan_check_write+0x14/0x20 [ 247.846792][T11542] ? mutex_lock+0x93/0x1b0 [ 247.851211][T11542] ? __cfi_mutex_lock+0x10/0x10 [ 247.856068][T11542] ? __fdget_pos+0x2cd/0x380 [ 247.860659][T11542] ? ksys_write+0x70/0x260 [ 247.865070][T11542] ksys_write+0x14a/0x260 [ 247.869396][T11542] ? __cfi_ksys_write+0x10/0x10 [ 247.874241][T11542] ? do_user_addr_fault+0x9a5/0x1030 [ 247.879524][T11542] ? debug_smp_processor_id+0x17/0x20 [ 247.884896][T11542] __x64_sys_write+0x7b/0x90 [ 247.889486][T11542] x64_sys_call+0x27b/0x9a0 [ 247.893992][T11542] do_syscall_64+0x4c/0xa0 [ 247.898409][T11542] ? clear_bhb_loop+0x30/0x80 [ 247.903081][T11542] ? clear_bhb_loop+0x30/0x80 [ 247.907753][T11542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.913648][T11542] RIP: 0033:0x7fa79c55e84e [ 247.918058][T11542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.937658][T11542] RSP: 002b:00007fa79d4f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.946068][T11542] RAX: ffffffffffffffda RBX: 00007fa79d4f56c0 RCX: 00007fa79c55e84e [ 247.954037][T11542] RDX: 0000000000000001 RSI: 00007fa79d4f50a0 RDI: 0000000000000004 [ 247.962003][T11542] RBP: 00007fa79d4f5090 R08: 0000000000000000 R09: 0000000000000000 [ 247.969962][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.977919][T11542] R13: 00007fa79c826128 R14: 00007fa79c826090 R15: 00007ffebaffb8e8 [ 247.985875][T11542] [ 248.153835][T11547] device syzkaller0 entered promiscuous mode [ 248.408349][T11563] FAULT_INJECTION: forcing a failure. [ 248.408349][T11563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.461846][T11563] CPU: 1 PID: 11563 Comm: syz.2.4288 Not tainted syzkaller #0 [ 248.469330][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.479378][T11563] Call Trace: [ 248.482654][T11563] [ 248.485583][T11563] __dump_stack+0x21/0x24 [ 248.489916][T11563] dump_stack_lvl+0x110/0x170 [ 248.494594][T11563] ? __cfi_dump_stack_lvl+0x8/0x8 [ 248.499615][T11563] ? migrate_enable+0x1af/0x2a0 [ 248.504464][T11563] ? __cfi_migrate_enable+0x10/0x10 [ 248.509664][T11563] dump_stack+0x15/0x24 [ 248.513818][T11563] should_fail_ex+0x3bf/0x510 [ 248.518496][T11563] should_fail+0xb/0x10 [ 248.522654][T11563] should_fail_usercopy+0x1a/0x20 [ 248.527673][T11563] _copy_to_user+0x1e/0x90 [ 248.532088][T11563] bpf_test_finish+0x497/0x6c0 [ 248.536852][T11563] ? convert_skb_to___skb+0x430/0x430 [ 248.542225][T11563] ? __kasan_check_write+0x14/0x20 [ 248.547347][T11563] bpf_prog_test_run_skb+0xcef/0x12f0 [ 248.552724][T11563] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 248.558533][T11563] bpf_prog_test_run+0x3b4/0x5c0 [ 248.563471][T11563] ? bpf_prog_query+0x270/0x270 [ 248.568330][T11563] ? selinux_bpf+0xce/0xf0 [ 248.572742][T11563] ? security_bpf+0x93/0xb0 [ 248.577246][T11563] __sys_bpf+0x5ee/0x850 [ 248.581484][T11563] ? bpf_link_show_fdinfo+0x330/0x330 [ 248.586860][T11563] ? __cfi_ksys_write+0x10/0x10 [ 248.591708][T11563] ? debug_smp_processor_id+0x17/0x20 [ 248.597077][T11563] __x64_sys_bpf+0x7c/0x90 [ 248.601490][T11563] x64_sys_call+0x488/0x9a0 [ 248.605998][T11563] do_syscall_64+0x4c/0xa0 [ 248.610409][T11563] ? clear_bhb_loop+0x30/0x80 [ 248.615079][T11563] ? clear_bhb_loop+0x30/0x80 [ 248.619752][T11563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.625648][T11563] RIP: 0033:0x7fa79c59e019 [ 248.630058][T11563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.649657][T11563] RSP: 002b:00007fa79d516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.658065][T11563] RAX: ffffffffffffffda RBX: 00007fa79c825fa0 RCX: 00007fa79c59e019 [ 248.666035][T11563] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 248.674007][T11563] RBP: 00007fa79d516090 R08: 0000000000000000 R09: 0000000000000000 [ 248.681971][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.689934][T11563] R13: 00007fa79c826038 R14: 00007fa79c825fa0 R15: 00007ffebaffb8e8 [ 248.697907][T11563] [ 248.944524][T11589] pimreg0: tun_chr_ioctl cmd 1074025692 [ 248.959464][T11589] pimreg0: tun_chr_ioctl cmd 1074812117 [ 248.975168][T11589] pimreg0: tun_chr_ioctl cmd 2147767506 [ 249.013181][T11592] device syzkaller0 entered promiscuous mode [ 249.103731][T11594] device syzkaller0 entered promiscuous mode [ 249.462041][T11624] device syzkaller0 entered promiscuous mode [ 249.649562][T11635] device syzkaller0 entered promiscuous mode [ 249.912557][T11659] device syzkaller0 entered promiscuous mode [ 250.013549][T11673] device syzkaller0 entered promiscuous mode [ 250.089722][T11689] device syzkaller0 entered promiscuous mode [ 250.323122][T11720] FAULT_INJECTION: forcing a failure. [ 250.323122][T11720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.341702][T11715] device syzkaller0 entered promiscuous mode [ 250.389097][T11720] CPU: 1 PID: 11720 Comm: syz.5.4350 Not tainted syzkaller #0 [ 250.396574][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.406622][T11720] Call Trace: [ 250.409895][T11720] [ 250.412818][T11720] __dump_stack+0x21/0x24 [ 250.417144][T11720] dump_stack_lvl+0x110/0x170 [ 250.421817][T11720] ? __cfi_dump_stack_lvl+0x8/0x8 [ 250.426849][T11720] dump_stack+0x15/0x24 [ 250.430998][T11720] should_fail_ex+0x3bf/0x510 [ 250.435671][T11720] should_fail+0xb/0x10 [ 250.439817][T11720] should_fail_usercopy+0x1a/0x20 [ 250.444835][T11720] _copy_from_user+0x1e/0xc0 [ 250.449422][T11720] __sys_bpf+0x2a0/0x850 [ 250.453657][T11720] ? bpf_link_show_fdinfo+0x330/0x330 [ 250.459025][T11720] ? __cfi_ksys_write+0x10/0x10 [ 250.463867][T11720] ? debug_smp_processor_id+0x17/0x20 [ 250.469234][T11720] __x64_sys_bpf+0x7c/0x90 [ 250.473640][T11720] x64_sys_call+0x488/0x9a0 [ 250.478137][T11720] do_syscall_64+0x4c/0xa0 [ 250.482548][T11720] ? clear_bhb_loop+0x30/0x80 [ 250.487220][T11720] ? clear_bhb_loop+0x30/0x80 [ 250.491889][T11720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.497778][T11720] RIP: 0033:0x7fcffa99e019 [ 250.502185][T11720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.521782][T11720] RSP: 002b:00007fcffb786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.530191][T11720] RAX: ffffffffffffffda RBX: 00007fcffac25fa0 RCX: 00007fcffa99e019 [ 250.538156][T11720] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 250.546120][T11720] RBP: 00007fcffb786090 R08: 0000000000000000 R09: 0000000000000000 [ 250.554083][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.562057][T11720] R13: 00007fcffac26038 R14: 00007fcffac25fa0 R15: 00007ffdadf78388 [ 250.570025][T11720] [ 250.891516][T11730] FAULT_INJECTION: forcing a failure. [ 250.891516][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.998451][T11730] CPU: 0 PID: 11730 Comm: syz.5.4353 Not tainted syzkaller #0 [ 251.005936][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.015987][T11730] Call Trace: [ 251.019254][T11730] [ 251.022178][T11730] __dump_stack+0x21/0x24 [ 251.026509][T11730] dump_stack_lvl+0x110/0x170 [ 251.031180][T11730] ? __cfi_dump_stack_lvl+0x8/0x8 [ 251.036204][T11730] dump_stack+0x15/0x24 [ 251.040357][T11730] should_fail_ex+0x3bf/0x510 [ 251.045027][T11730] should_fail+0xb/0x10 [ 251.049173][T11730] should_fail_usercopy+0x1a/0x20 [ 251.054190][T11730] _copy_from_user+0x1e/0xc0 [ 251.058786][T11730] __sys_bpf+0x2a0/0x850 [ 251.063029][T11730] ? bpf_link_show_fdinfo+0x330/0x330 [ 251.068401][T11730] ? __cfi_ksys_write+0x10/0x10 [ 251.073255][T11730] ? debug_smp_processor_id+0x17/0x20 [ 251.078622][T11730] __x64_sys_bpf+0x7c/0x90 [ 251.083034][T11730] x64_sys_call+0x488/0x9a0 [ 251.087531][T11730] do_syscall_64+0x4c/0xa0 [ 251.091943][T11730] ? clear_bhb_loop+0x30/0x80 [ 251.096612][T11730] ? clear_bhb_loop+0x30/0x80 [ 251.101281][T11730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.107172][T11730] RIP: 0033:0x7fcffa99e019 [ 251.111579][T11730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.131176][T11730] RSP: 002b:00007fcff93f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.139584][T11730] RAX: ffffffffffffffda RBX: 00007fcffac26090 RCX: 00007fcffa99e019 [ 251.147546][T11730] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 251.155507][T11730] RBP: 00007fcff93f7090 R08: 0000000000000000 R09: 0000000000000000 [ 251.163473][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.171440][T11730] R13: 00007fcffac26128 R14: 00007fcffac26090 R15: 00007ffdadf78388 [ 251.179413][T11730] [ 251.253047][T11744] device syzkaller0 entered promiscuous mode [ 251.323895][T11746] device syzkaller0 entered promiscuous mode [ 251.551650][T11760] device veth0_vlan left promiscuous mode [ 251.569866][T11760] device veth0_vlan entered promiscuous mode [ 251.916930][T11790] device syzkaller0 entered promiscuous mode [ 251.999860][T11794] device syzkaller0 entered promiscuous mode [ 252.501230][T11842] device syzkaller0 entered promiscuous mode [ 252.813171][T11898] device syzkaller0 entered promiscuous mode [ 253.122314][T11944] device syzkaller0 entered promiscuous mode [ 253.411194][T11990] bridge0: port 3(veth0_to_hsr) entered disabled state [ 253.425499][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.439009][T12002] ================================================================== [ 253.447051][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.454073][T12002] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6fa/0x960 [ 253.454104][T12002] Write of size 64 at addr ffff888149572090 by task syz.3.4470/12002 [ 253.454122][T12002] [ 253.454126][T12002] CPU: 1 PID: 12002 Comm: syz.3.4470 Not tainted syzkaller #0 [ 253.454145][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.454156][T12002] Call Trace: [ 253.454162][T12002] [ 253.454169][T12002] __dump_stack+0x21/0x24 [ 253.454193][T12002] dump_stack_lvl+0x110/0x170 [ 253.454215][T12002] ? __cfi_dump_stack_lvl+0x8/0x8 [ 253.454238][T12002] ? __bpf_get_stackid+0x6fa/0x960 [ 253.454257][T12002] print_address_description+0x71/0x200 [ 253.454278][T12002] print_report+0x4a/0x60 [ 253.454296][T12002] kasan_report+0x122/0x150 [ 253.454318][T12002] ? __bpf_get_stackid+0x6fa/0x960 [ 253.454339][T12002] kasan_check_range+0x249/0x2a0 [ 253.454361][T12002] ? __bpf_get_stackid+0x6fa/0x960 [ 253.454380][T12002] memcpy+0x44/0x70 [ 253.454397][T12002] __bpf_get_stackid+0x6fa/0x960 [ 253.454418][T12002] bpf_get_stackid_pe+0x2ee/0x400 [ 253.454438][T12002] bpf_prog_282a5593b1ef8d13+0x21/0x36 [ 253.454457][T12002] bpf_overflow_handler+0x3c7/0x5e0 [ 253.454477][T12002] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 253.454497][T12002] ? __this_cpu_preempt_check+0x13/0x20 [ 253.454516][T12002] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 253.454547][T12002] __perf_event_overflow+0x458/0x640 [ 253.454572][T12002] perf_swevent_event+0x243/0x440 [ 253.454596][T12002] ? perf_tp_event+0xa20/0xa20 [ 253.454622][T12002] ___perf_sw_event+0x3bf/0x500 [ 253.454645][T12002] ? ctx_sched_in+0x259/0x300 [ 253.454663][T12002] ? __cfi____perf_sw_event+0x10/0x10 [ 253.454685][T12002] ? perf_event_context_sched_in+0x502/0x600 [ 253.454712][T12002] ? _raw_spin_unlock+0x4c/0x70 [ 253.454733][T12002] ? finish_task_switch+0x16b/0x7c0 [ 253.454756][T12002] ? switch_mm_irqs_off+0x2f0/0x960 [ 253.454775][T12002] ? __schedule+0xbea/0x14b0 [ 253.454798][T12002] __perf_sw_event+0x134/0x270 [ 253.454822][T12002] do_user_addr_fault+0xfe9/0x1030 [ 253.454844][T12002] ? __kasan_check_read+0x11/0x20 [ 253.454865][T12002] exc_page_fault+0x51/0xb0 [ 253.454882][T12002] asm_exc_page_fault+0x27/0x30 [ 253.454906][T12002] RIP: 0010:strncpy_from_user+0xd7/0x2c0 [ 253.454928][T12002] Code: 89 f6 e8 fc d3 e1 fe 49 83 fe 07 0f 86 a5 00 00 00 4c 89 75 c8 49 c7 c6 f8 ff ff ff 45 31 ff 4c 89 65 c0 4c 89 6d d0 4d 89 fd <4b> 8b 1c 3c 48 b8 ff fe fe fe fe fe fe fe 4c 8d 3c 03 49 89 dc 49 [ 253.454943][T12002] RSP: 0018:ffffc9000584fb28 EFLAGS: 00050246 [ 253.454959][T12002] RAX: ffffffff828f9704 RBX: 000000000000007f RCX: ffff88811e3dd100 [ 253.454972][T12002] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 253.454984][T12002] RBP: ffffc9000584fb70 R08: ffff88811e3dd100 R09: 0000000000000002 [ 253.454997][T12002] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 253.455007][T12002] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 253.455021][T12002] ? strncpy_from_user+0xb4/0x2c0 [ 253.455041][T12002] ? strncpy_from_user+0xb4/0x2c0 [ 253.708277][ T28] audit: type=1400 audit(1785923408.529:169): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14638]" dev="pipefs" ino=14638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 253.713721][T12002] bpf_prog_load+0x1f1/0x1670 [ 253.775256][T12002] ? map_freeze+0x3a0/0x3a0 [ 253.779752][T12002] ? selinux_bpf+0xc7/0xf0 [ 253.784151][T12002] ? security_bpf+0x93/0xb0 [ 253.788640][T12002] __sys_bpf+0x57b/0x850 [ 253.792865][T12002] ? bpf_link_show_fdinfo+0x330/0x330 [ 253.798221][T12002] ? fpregs_restore_userregs+0x128/0x260 [ 253.803836][T12002] __x64_sys_bpf+0x7c/0x90 [ 253.808232][T12002] x64_sys_call+0x488/0x9a0 [ 253.812720][T12002] do_syscall_64+0x4c/0xa0 [ 253.817122][T12002] ? clear_bhb_loop+0x30/0x80 [ 253.821778][T12002] ? clear_bhb_loop+0x30/0x80 [ 253.826431][T12002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.832308][T12002] RIP: 0033:0x7ff119d9e019 [ 253.836702][T12002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.856287][T12002] RSP: 002b:00007ff11ad4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.864680][T12002] RAX: ffffffffffffffda RBX: 00007ff11a025fa0 RCX: 00007ff119d9e019 [ 253.872631][T12002] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 253.880581][T12002] RBP: 00007ff119e3500c R08: 0000000000000000 R09: 0000000000000000 [ 253.888532][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.896482][T12002] R13: 00007ff11a026038 R14: 00007ff11a025fa0 R15: 00007ffd48f43718 [ 253.904440][T12002] [ 253.907439][T12002] [ 253.909741][T12002] Allocated by task 12002: [ 253.914129][T12002] kasan_set_track+0x4b/0x70 [ 253.918703][T12002] kasan_save_alloc_info+0x1f/0x30 [ 253.923797][T12002] __kasan_kmalloc+0x95/0xb0 [ 253.928368][T12002] __kmalloc_node+0xb2/0x1e0 [ 253.932935][T12002] bpf_map_area_alloc+0x4b/0xe0 [ 253.937767][T12002] prealloc_elems_and_freelist+0x8a/0x1e0 [ 253.943464][T12002] stack_map_alloc+0x398/0x520 [ 253.948319][T12002] map_create+0x467/0xcf0 [ 253.952626][T12002] __sys_bpf+0x34e/0x850 [ 253.956845][T12002] __x64_sys_bpf+0x7c/0x90 [ 253.961324][T12002] x64_sys_call+0x488/0x9a0 [ 253.965809][T12002] do_syscall_64+0x4c/0xa0 [ 253.970207][T12002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.976087][T12002] [ 253.978386][T12002] The buggy address belongs to the object at ffff888149572080 [ 253.978386][T12002] which belongs to the cache kmalloc-64 of size 64 [ 253.992253][T12002] The buggy address is located 16 bytes inside of [ 253.992253][T12002] 64-byte region [ffff888149572080, ffff8881495720c0) [ 254.005330][T12002] [ 254.007634][T12002] The buggy address belongs to the physical page: [ 254.014033][T12002] page:ffffea0005255c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x149572 [ 254.024246][T12002] flags: 0x4000000000000200(slab|zone=1) [ 254.029861][T12002] raw: 4000000000000200 0000000000000000 dead000000000001 ffff888100042780 [ 254.038419][T12002] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 254.046974][T12002] page dumped because: kasan: bad access detected [ 254.053366][T12002] page_owner tracks the page as allocated [ 254.059062][T12002] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 289, tgid 289 (syz-executor), ts 109630747340, free_ts 109630725405 [ 254.077272][T12002] post_alloc_hook+0x1f5/0x210 [ 254.082024][T12002] prep_new_page+0x1c/0x110 [ 254.086509][T12002] get_page_from_freelist+0x2ca9/0x2d20 [ 254.092042][T12002] __alloc_pages+0x1fa/0x610 [ 254.096616][T12002] alloc_slab_page+0x6e/0xf0 [ 254.101185][T12002] new_slab+0x98/0x3e0 [ 254.105231][T12002] ___slab_alloc+0x70f/0xb70 [ 254.109801][T12002] __slab_alloc+0x5e/0xa0 [ 254.114115][T12002] __kmem_cache_alloc_node+0x204/0x2d0 [ 254.119552][T12002] kmalloc_node_trace+0x26/0xb0 [ 254.124380][T12002] __get_vm_area_node+0x12c/0x360 [ 254.129382][T12002] __vmalloc_node_range+0x326/0x1440 [ 254.134644][T12002] vzalloc+0x78/0x90 [ 254.138518][T12002] alloc_counters+0x66/0x530 [ 254.143089][T12002] do_ip6t_get_ctl+0xa84/0x11b0 [ 254.147924][T12002] nf_getsockopt+0x27f/0x2a0 [ 254.152497][T12002] page last free stack trace: [ 254.157145][T12002] free_unref_page_prepare+0x80c/0x820 [ 254.162588][T12002] free_unref_page+0x93/0x530 [ 254.167245][T12002] __free_pages+0x67/0x100 [ 254.171645][T12002] __vunmap+0xa3c/0xc00 [ 254.175777][T12002] vfree+0x61/0x90 [ 254.179481][T12002] do_ip6t_get_ctl+0xe91/0x11b0 [ 254.184316][T12002] nf_getsockopt+0x27f/0x2a0 [ 254.188893][T12002] ipv6_getsockopt+0x230/0x2d0 [ 254.193640][T12002] tcp_getsockopt+0xff/0x130 [ 254.198210][T12002] sock_common_getsockopt+0xaa/0xc0 [ 254.203392][T12002] __sys_getsockopt+0x215/0x490 [ 254.208223][T12002] __x64_sys_getsockopt+0xbf/0xd0 [ 254.213226][T12002] x64_sys_call+0x3d/0x9a0 [ 254.217632][T12002] do_syscall_64+0x4c/0xa0 [ 254.222052][T12002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.227936][T12002] [ 254.230241][T12002] Memory state around the buggy address: [ 254.235849][T12002] ffff888149571f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.243897][T12002] ffff888149572000: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 254.251939][T12002] >ffff888149572080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 254.259976][T12002] ^ SYZFAIL: failed to send rpc fd=3 want=176 sent=0 n=-1 (errno 32: Broken pipe) [ 254.265320][T12002] ffff888149572100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 254.273358][T12002] ffff888149572180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 254.281391][T12002] ================================================================== [ 254.289428][T12002] Disabling lock debugging due to kernel taint [ 254.310882][ T28] audit: type=1400 audit(1785923409.139:170): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 254.361702][T11990] device veth0_to_hsr left promiscuous mode [ 254.368231][ T28] audit: type=1400 audit(1785923409.139:171): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.368257][ T28] audit: type=1400 audit(1785923409.139:172): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.368276][ T28] audit: type=1400 audit(1785923409.139:173): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.368295][ T28] audit: type=1400 audit(1785923409.139:174): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.368315][ T28] audit: type=1400 audit(1785923409.139:175): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.368334][ T28] audit: type=1400 audit(1785923409.139:176): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.547218][T11990] bridge0: port 3(veth0_to_hsr) entered disabled state [ 254.570481][T11990] device bridge_slave_1 left promiscuous mode [ 254.576700][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.584860][T11990] device bridge_slave_0 left promiscuous mode [ 254.591210][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.298529][ T10] device bridge_slave_1 left promiscuous mode [ 255.304633][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.312527][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.320336][ T10] device bridge_slave_1 left promiscuous mode [ 255.326443][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.333915][ T10] device bridge_slave_0 left promiscuous mode [ 255.340140][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.347819][ T10] device veth1_macvtap left promiscuous mode [ 255.353899][ T10] device veth0_vlan left promiscuous mode [ 255.359769][ T10] device veth0_vlan left promiscuous mode [ 256.328521][ T10] device veth0_vlan left promiscuous mode