last executing test programs: 1.444068353s ago: executing program 3 (id=2432): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fc", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x802c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x4, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xa, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x21, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x0, 0xd22f7c2db1585cba}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000dc0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000940)='ns/user\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000100)=@raw=[@generic={0x85, 0x0, 0x2, 0x0, 0x19cd2}, @generic={0x95}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(r3, &(0x7f0000000740)='cpuset.memory_migrate\x00', 0x2, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 1.386630199s ago: executing program 1 (id=2436): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x18824, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7b}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 1.385702748s ago: executing program 2 (id=2439): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 1.312565946s ago: executing program 0 (id=2440): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xaf, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002fc0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0x9, 0x0, &(0x7f0000000440), &(0x7f0000000580)='GPL\x00', 0x5, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0xd4c4142572df8cf5, '\x00', 0x0, @cgroup_sock=0xd, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x1, 0x0, &(0x7f0000003040)=[{0x0, 0x1, 0xe, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="fbe2847b0000ffffffffffff8137", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.310780147s ago: executing program 3 (id=2442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x808200, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/175, 0xaf, 0x0, 0x0}}, 0x10) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000000)={'batadv_slave_0\x00', 0x10}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) close(0x4) 219.275257ms ago: executing program 2 (id=2444): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891d, &(0x7f0000000480)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000bc0)={'wg1\x00'}) 175.858032ms ago: executing program 0 (id=2445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fffd) 175.674922ms ago: executing program 4 (id=2446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000dc0)={r0, 0x0, 0x0}, 0x20) 175.396902ms ago: executing program 0 (id=2447): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 175.217862ms ago: executing program 4 (id=2448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 174.950012ms ago: executing program 4 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x1b, 0x0, &(0x7f0000000580)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0xfffffd1a, 0x0, &(0x7f00000005c0)="a037a279090a", 0x0}, 0x50) 174.611292ms ago: executing program 3 (id=2450): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) close(0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) 139.621745ms ago: executing program 1 (id=2451): unlink(&(0x7f0000000080)='./cgroup/file0\x00') 139.274446ms ago: executing program 3 (id=2452): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0e0000000400000004000000020000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001040)={r2, 0x0, &(0x7f00000010c0)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001100)={r2, &(0x7f0000001140)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x3, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x0, 0x0}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r6, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000780)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000080)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x14, &(0x7f0000000e00)=ANY=[@ANYRES32=r7], &(0x7f0000000ec0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r10, 0x0, 0x7, 0x0, &(0x7f0000000f80)="00112233445500", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 139.134295ms ago: executing program 4 (id=2453): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x200, 0x12) mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff) 138.864375ms ago: executing program 0 (id=2454): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1f, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8cff, 0x680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 138.781775ms ago: executing program 1 (id=2455): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 97.4995ms ago: executing program 2 (id=2456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 97.20311ms ago: executing program 3 (id=2457): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 96.97746ms ago: executing program 1 (id=2458): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000b00)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x2800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB='\n'], 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 96.71986ms ago: executing program 4 (id=2459): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8cff, 0x680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 54.932984ms ago: executing program 0 (id=2460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f0000000100), 0x4) 54.713154ms ago: executing program 2 (id=2461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)="a0", 0x0}, 0x31) 54.547824ms ago: executing program 3 (id=2462): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8000) 54.444914ms ago: executing program 2 (id=2463): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000180)='GPL\x00'}, 0x80) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000500000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_int(r2, &(0x7f0000000040)=0x8, 0x12) 54.201934ms ago: executing program 1 (id=2464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 835.589µs ago: executing program 0 (id=2465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 383.909µs ago: executing program 2 (id=2466): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x100, 0xff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 180.26µs ago: executing program 4 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002480)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000002680)={0x1, &(0x7f00000026c0)=[{0x3d}]}) 0s ago: executing program 1 (id=2468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f00000019c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16ac14fe1607080403fe80000020006558845013f2325f1a3901050b038da1880b88481aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001ac0), &(0x7f0000001b00)}, 0x2a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 23.810045][ T28] audit: type=1400 audit(1794302018.902:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.813569][ T279] cgroup: Unknown subsys name 'net' [ 23.832724][ T28] audit: type=1400 audit(1794302018.902:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.860076][ T28] audit: type=1400 audit(1794302018.932:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.861546][ T279] cgroup: Unknown subsys name 'devices' [ 24.008954][ T279] cgroup: Unknown subsys name 'hugetlb' [ 24.014607][ T279] cgroup: Unknown subsys name 'rlimit' [ 24.119815][ T28] audit: type=1400 audit(1794302019.212:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.143059][ T28] audit: type=1400 audit(1794302019.212:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.168061][ T28] audit: type=1400 audit(1794302019.212:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.198565][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.207404][ T28] audit: type=1400 audit(1794302019.302:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.232904][ T28] audit: type=1400 audit(1794302019.302:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.260460][ T28] audit: type=1400 audit(1794302019.352:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.286036][ T28] audit: type=1400 audit(1794302019.352:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.286077][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.429899][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.437092][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.444533][ T288] device bridge_slave_0 entered promiscuous mode [ 25.451897][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.459004][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.466393][ T288] device bridge_slave_1 entered promiscuous mode [ 25.588380][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.595480][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.603100][ T289] device bridge_slave_0 entered promiscuous mode [ 25.610214][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.617636][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.625059][ T289] device bridge_slave_1 entered promiscuous mode [ 25.644866][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.652055][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.659548][ T290] device bridge_slave_0 entered promiscuous mode [ 25.669549][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.676671][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.684174][ T290] device bridge_slave_1 entered promiscuous mode [ 25.736877][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.743978][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.751535][ T292] device bridge_slave_0 entered promiscuous mode [ 25.758777][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.765853][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.773863][ T292] device bridge_slave_1 entered promiscuous mode [ 25.783904][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.791072][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.798635][ T291] device bridge_slave_0 entered promiscuous mode [ 25.811916][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.819092][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.826400][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.833475][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.848815][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.855889][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.863459][ T291] device bridge_slave_1 entered promiscuous mode [ 26.029254][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.036338][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.043665][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.050741][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.062887][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.069999][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.077320][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.084376][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.095661][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.102750][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.110194][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.117274][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.138322][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.145445][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.152786][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.159876][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.178143][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.185597][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.193166][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.200620][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.208448][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.215678][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.223356][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.230642][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.238053][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.245239][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.253717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.261291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.288668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.297057][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.304092][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.311699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.320193][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.327263][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.337577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.358912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.366871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.382007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.390936][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.398044][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.405871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.414149][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.421318][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.428818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.436923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.445071][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.452148][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.461054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.468726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.498393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.506031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.513577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.522028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.531104][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.538217][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.545824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.554324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.562583][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.569710][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.577573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.586267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.594554][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.601694][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.609412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.617616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.625601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.633946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.641988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.650364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.667574][ T288] device veth0_vlan entered promiscuous mode [ 26.674648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.683062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.691331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.699716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.708164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.716765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.725066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.733133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.741284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.748938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.761635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.770166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.778537][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.785582][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.794529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.802843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.811157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.819666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.828099][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.835142][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.856382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.875811][ T288] device veth1_macvtap entered promiscuous mode [ 26.885495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.894016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.902636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.911052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.919537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.927854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.936004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.943852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.952491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.969621][ T290] device veth0_vlan entered promiscuous mode [ 26.980415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.988801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.996311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.004230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.013038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.031581][ T292] device veth0_vlan entered promiscuous mode [ 27.040610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.049000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.057661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.065570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.074007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.081823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.089532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.097137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.105254][ T291] device veth0_vlan entered promiscuous mode [ 27.119898][ T290] device veth1_macvtap entered promiscuous mode [ 27.130476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.139143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.148162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.156406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.167074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.183176][ T292] device veth1_macvtap entered promiscuous mode [ 27.192449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.201122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.209664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.218306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.226753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.235075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.243533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.253749][ T289] device veth0_vlan entered promiscuous mode [ 27.262132][ T291] device veth1_macvtap entered promiscuous mode [ 27.271353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.279528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.287721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.295217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.311850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.320476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.328980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.337536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.356837][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.365102][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.373541][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.382264][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.390704][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.411124][ T289] device veth1_macvtap entered promiscuous mode [ 27.417889][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 27.446042][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.455380][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.464603][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.473336][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.535755][ C0] hrtimer: interrupt took 26137 ns [ 27.629489][ T319] device wg2 entered promiscuous mode [ 28.983170][ T365] Illegal XDP return value 3186909990 on prog (id 14) dev N/A, expect packet loss! [ 30.211934][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 30.211950][ T28] audit: type=1400 audit(1794302025.302:124): avc: denied { write } for pid=406 comm="syz.0.27" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.388784][ T418] device wg2 left promiscuous mode [ 30.650411][ T28] audit: type=1400 audit(1794302025.742:125): avc: denied { relabelfrom } for pid=430 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 30.696884][ T28] audit: type=1400 audit(1794302025.742:126): avc: denied { relabelto } for pid=430 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 30.942857][ T439] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 30.975656][ T28] audit: type=1400 audit(1794302026.062:127): avc: denied { create } for pid=444 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.121463][ T439] device syzkaller0 entered promiscuous mode [ 31.171944][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.179655][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.486329][ T28] audit: type=1400 audit(1794302026.572:128): avc: denied { create } for pid=476 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.625467][ T28] audit: type=1400 audit(1794302026.642:129): avc: denied { ioctl } for pid=474 comm="syz.0.42" path="socket:[16682]" dev="sockfs" ino=16682 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.653309][ T478] device GPL entered promiscuous mode [ 33.991489][ T28] audit: type=1400 audit(1794302029.082:130): avc: denied { create } for pid=534 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.106829][ T28] audit: type=1400 audit(1794302029.082:131): avc: denied { setopt } for pid=534 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.971758][ T28] audit: type=1400 audit(1794302030.062:132): avc: denied { create } for pid=577 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 35.214912][ T28] audit: type=1400 audit(1794302030.302:133): avc: denied { create } for pid=593 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.020158][ T633] device sit0 entered promiscuous mode [ 36.328950][ T28] audit: type=1400 audit(1794302031.422:134): avc: denied { create } for pid=653 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.523274][ T658] device sit0 entered promiscuous mode [ 37.687170][ T682] device bridge_slave_1 left promiscuous mode [ 37.697759][ T682] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.416461][ C0] sched: RT throttling activated [ 39.416461][ C1] sched: RT throttling activated [ 40.437141][ T28] audit: type=1400 audit(1794302035.532:135): avc: denied { create } for pid=696 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 42.456951][ T682] device bridge_slave_0 left promiscuous mode [ 42.463236][ T682] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.639048][ T703] -1: renamed from syzkaller0 [ 42.789881][ T718] device wg2 entered promiscuous mode [ 49.743236][ T28] audit: type=1400 audit(1794302044.832:136): avc: denied { create } for pid=783 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.971328][ T28] audit: type=1400 audit(1794302045.062:137): avc: denied { create } for pid=800 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.114550][ T803] : renamed from bond_slave_1 [ 53.931567][ T28] audit: type=1400 audit(1794302049.022:138): avc: denied { create } for pid=838 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.202162][ T28] audit: type=1400 audit(1794302049.292:139): avc: denied { create } for pid=845 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.937155][ T889] device vlan1 entered promiscuous mode [ 55.836794][ T925] device vlan1 entered promiscuous mode [ 56.218796][ T28] audit: type=1400 audit(1794302051.312:140): avc: denied { create } for pid=975 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 56.286758][ T981] device syzkaller0 entered promiscuous mode [ 56.713961][ T28] audit: type=1400 audit(1794302051.802:141): avc: denied { create } for pid=993 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.615014][ T1044] erspan0: refused to change device tx_queue_len [ 60.729706][ T28] audit: type=1400 audit(1794302055.822:142): avc: denied { create } for pid=1054 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.925121][ T28] audit: type=1400 audit(1794302057.012:143): avc: denied { append } for pid=1106 comm="syz.4.205" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.088586][ T28] audit: type=1400 audit(1794302057.182:144): avc: denied { create } for pid=1118 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.138892][ T1114] device syzkaller0 entered promiscuous mode [ 62.344880][ T1133] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 62.356794][ T1133] syzkaller0: linktype set to 778 [ 62.377284][ T1149] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 62.383865][ T1150] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 62.426929][ T1150] syzkaller0: linktype set to 778 [ 63.260451][ T1175] syz.4.222 uses obsolete (PF_INET,SOCK_PACKET) [ 63.646394][ T1217] device syzkaller0 entered promiscuous mode [ 64.647543][ T28] audit: type=1400 audit(1794302059.742:145): avc: denied { create } for pid=1242 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.913958][ T1329] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 66.164073][ T1322] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 67.515070][ T1365] device pim6reg1 entered promiscuous mode [ 67.830501][ T1403] device wg2 entered promiscuous mode [ 70.176294][ T1500] device syzkaller0 entered promiscuous mode [ 70.337444][ T28] audit: type=1400 audit(1794302065.432:146): avc: denied { create } for pid=1514 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.146396][ T1648] -: renamed from syzkaller0 [ 74.628902][ T1668] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 74.771082][ T1671] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 75.142085][ T1688] device syzkaller0 entered promiscuous mode [ 75.842959][ T1723] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.850250][ T1723] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.127112][ T1783] device wg2 entered promiscuous mode [ 77.447602][ T1791] -: renamed from syzkaller0 [ 77.819223][ T1817] device syzkaller0 entered promiscuous mode [ 78.372794][ T1847] -: renamed from syzkaller0 [ 78.788010][ T28] audit: type=1400 audit(1794302073.872:147): avc: denied { create } for pid=1856 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 80.212105][ T28] audit: type=1400 audit(1794302075.302:148): avc: denied { create } for pid=1891 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.707801][ T28] audit: type=1400 audit(1794302076.802:149): avc: denied { create } for pid=1954 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.640746][ T2013] syz.0.423[2013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.640826][ T2013] syz.0.423[2013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.598677][ T2078] device team_slave_0 entered promiscuous mode [ 83.643951][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.652379][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.891720][ T2113] device wg2 left promiscuous mode [ 83.960575][ T2117] device wg2 entered promiscuous mode [ 85.686983][ T28] audit: type=1400 audit(1794302080.772:150): avc: denied { create } for pid=2165 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.085149][ T2233] device syzkaller0 entered promiscuous mode [ 87.195159][ T2244] tap0: tun_chr_ioctl cmd 2148553947 [ 87.286976][ T2250] tap0: tun_chr_ioctl cmd 2147767519 [ 88.212642][ T2273] device veth1_macvtap left promiscuous mode [ 89.016831][ T2306] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.024974][ T2306] device syzkaller0 entered promiscuous mode [ 90.423905][ T2353] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 90.502206][ T2351] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 91.594414][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.610633][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.620046][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.646510][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.663346][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.676905][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.709144][ T2451] device syzkaller0 entered promiscuous mode [ 98.686636][ T2510] tap0: tun_chr_ioctl cmd 1074025698 [ 98.929308][ T2532] ªªªªª6: renamed from veth0_vlan [ 99.981519][ T28] audit: type=1400 audit(1794302095.072:151): avc: denied { ioctl } for pid=2565 comm="syz.2.555" path="cgroup:[4026532546]" dev="nsfs" ino=4026532546 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.024365][ T2586] device syzkaller0 entered promiscuous mode [ 100.033504][ T2586] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 100.149963][ T28] audit: type=1400 audit(1794302095.242:152): avc: denied { create } for pid=2594 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.241303][ T2601] device bridge_slave_0 entered promiscuous mode [ 100.258835][ T2599] device bridge_slave_0 left promiscuous mode [ 100.274773][ T2606] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 100.292729][ T2606] device syzkaller0 entered promiscuous mode [ 100.335186][ T28] audit: type=1400 audit(1794302095.422:153): avc: denied { create } for pid=2603 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.744205][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.751512][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.029732][ T2675] device wg2 left promiscuous mode [ 102.062679][ T2671] device wg2 entered promiscuous mode [ 102.340388][ T2696] device wg2 left promiscuous mode [ 103.245583][ T2748] device syzkaller0 entered promiscuous mode [ 103.393855][ T2767] device lo entered promiscuous mode [ 103.662894][ T2735] cgroup: fork rejected by pids controller in /syz2 [ 106.854581][ T2920] device veth1_to_bond entered promiscuous mode [ 106.908673][ T2923] device syz_tun entered promiscuous mode [ 107.590402][ T2966] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 107.618116][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 108.633557][ T3013] tap0: tun_chr_ioctl cmd 1074025677 [ 108.671896][ T3013] tap0: linktype set to 270 [ 109.635606][ T28] audit: type=1400 audit(1794302104.722:154): avc: denied { create } for pid=3043 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 109.693811][ T3034] device syzkaller0 entered promiscuous mode [ 109.915587][ T3057] device sit0 left promiscuous mode [ 110.180089][ T3075] cgroup: fork rejected by pids controller in /syz3 [ 110.393925][ T3185] syz.1.664[3185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.394009][ T3185] syz.1.664[3185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.424020][ T3218] device syzkaller0 entered promiscuous mode [ 114.758253][ T3224] device syzkaller0 entered promiscuous mode [ 115.249786][ T3221] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.295883][ T3221] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.491699][ T3221] device bridge_slave_0 entered promiscuous mode [ 116.529275][ T3221] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.542794][ T3221] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.551018][ T3221] device bridge_slave_1 entered promiscuous mode [ 117.257550][ T28] audit: type=1400 audit(1794302112.352:155): avc: denied { create } for pid=3256 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.464240][ T3255] device sit0 entered promiscuous mode [ 117.653919][ T28] audit: type=1400 audit(1794302112.742:156): avc: denied { create } for pid=3221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.678933][ T28] audit: type=1400 audit(1794302112.772:157): avc: denied { write } for pid=3221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.705836][ T28] audit: type=1400 audit(1794302112.772:158): avc: denied { read } for pid=3221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.737391][ T3269] device syzkaller0 entered promiscuous mode [ 117.898624][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.918056][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.968184][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.986903][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.995516][ T1622] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.002672][ T1622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.030759][ T456] device bridge_slave_1 left promiscuous mode [ 118.064569][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.083908][ T456] device bridge_slave_0 left promiscuous mode [ 118.095562][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.110830][ T456] device veth1_macvtap left promiscuous mode [ 118.376905][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.386885][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.405059][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.422624][ T1622] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.429752][ T1622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.461188][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.470819][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.480053][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.488977][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.507085][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.521412][ T3221] device veth0_vlan entered promiscuous mode [ 118.528490][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.537562][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.545920][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.562292][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.571484][ T3221] device veth1_macvtap entered promiscuous mode [ 118.585728][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.597084][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.621996][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.654394][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.720127][ T3286] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.786612][ T3286] device syzkaller0 entered promiscuous mode [ 118.910399][ T28] audit: type=1400 audit(1794302114.002:159): avc: denied { read } for pid=3295 comm="syz.3.691" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.096764][ T28] audit: type=1400 audit(1794302114.002:160): avc: denied { open } for pid=3295 comm="syz.3.691" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.063386][ T28] audit: type=1400 audit(1794302115.152:161): avc: denied { create } for pid=3355 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 120.091487][ T3359] pimreg: tun_chr_ioctl cmd 2147767506 [ 120.118233][ T3359] pimreg: tun_chr_ioctl cmd 1074025673 [ 120.126036][ T3361] pimreg: tun_chr_ioctl cmd 2147767506 [ 121.665041][ T3425] device veth1_macvtap left promiscuous mode [ 121.737571][ T3425] device veth1_macvtap entered promiscuous mode [ 121.744854][ T3425] device macsec0 entered promiscuous mode [ 121.763901][ T3431] device syzkaller0 entered promiscuous mode [ 121.864154][ T3439] device bridge_slave_1 left promiscuous mode [ 121.870547][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.408255][ T3439] device bridge_slave_0 left promiscuous mode [ 126.415079][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.508044][ T3437] device veth0_vlan left promiscuous mode [ 126.514128][ T3437] device veth0_vlan entered promiscuous mode [ 126.671837][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.681199][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.689129][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.908925][ T3479] pimreg: tun_chr_ioctl cmd 1074812117 [ 126.914588][ T3480] pimreg: tun_chr_ioctl cmd 1074812117 [ 126.920679][ T3479] pimreg: tun_chr_ioctl cmd 2147767517 [ 128.031619][ T3517] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.082064][ T3517] device syzkaller0 entered promiscuous mode [ 128.141345][ T3538] device bridge_slave_0 entered promiscuous mode [ 128.168480][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.191102][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.199081][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.206939][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.412990][ T3578] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.426663][ T3578] device syzkaller0 entered promiscuous mode [ 132.451434][ T28] audit: type=1400 audit(1794302127.542:162): avc: denied { create } for pid=3744 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 132.526754][ T3746] device syzkaller0 entered promiscuous mode [ 132.865133][ T3758] device syzkaller0 entered promiscuous mode [ 134.166578][ T3838] device syzkaller0 entered promiscuous mode [ 139.312844][ T4024] device xfrm0 entered promiscuous mode [ 143.159060][ T28] audit: type=1400 audit(1794302138.242:163): avc: denied { create } for pid=4131 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.183173][ T4135] û: renamed from bond_slave_0 [ 143.523417][ T4100] syz.2.871 (4100) used greatest stack depth: 21248 bytes left [ 144.313351][ T4154] syz.2.881 (4154) used greatest stack depth: 16736 bytes left [ 146.079441][ T4182] device wg2 entered promiscuous mode [ 146.351708][ T4189] device sit0 left promiscuous mode [ 148.556398][ T3950] syz.2.831 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 148.572870][ T3950] CPU: 1 PID: 3950 Comm: syz.2.831 Not tainted syzkaller #0 [ 148.580209][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 148.590299][ T3950] Call Trace: [ 148.593608][ T3950] [ 148.596560][ T3950] __dump_stack+0x21/0x24 [ 148.600920][ T3950] dump_stack_lvl+0x110/0x170 [ 148.605609][ T3950] ? __cfi_dump_stack_lvl+0x8/0x8 [ 148.610645][ T3950] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 148.616468][ T3950] ? ___ratelimit+0x40a/0x590 [ 148.621170][ T3950] dump_stack+0x15/0x24 [ 148.625337][ T3950] dump_header+0xdb/0x660 [ 148.629711][ T3950] ? __cfi_gfp_zone+0x10/0x10 [ 148.634410][ T3950] oom_kill_process+0x32a/0x410 [ 148.639288][ T3950] ? kvm_sched_clock_read+0x18/0x40 [ 148.644528][ T3950] out_of_memory+0x630/0x930 [ 148.649150][ T3950] ? __cfi_out_of_memory+0x10/0x10 [ 148.654291][ T3950] mem_cgroup_out_of_memory+0x2be/0x390 [ 148.659871][ T3950] ? __kasan_check_write+0x14/0x20 [ 148.665026][ T3950] ? mem_cgroup_oom_trylock+0x360/0x360 [ 148.670632][ T3950] try_charge_memcg+0xb8a/0x1650 [ 148.675607][ T3950] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 148.681024][ T3950] ? __asan_set_shadow_00+0xe/0x10 [ 148.686170][ T3950] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 148.692102][ T3950] charge_memcg+0x81/0x1f0 [ 148.696542][ T3950] __mem_cgroup_charge+0x93/0x290 [ 148.701610][ T3950] ? xas_start+0x31d/0x3e0 [ 148.706051][ T3950] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 148.711697][ T3950] ? xas_load+0x3a2/0x3c0 [ 148.716053][ T3950] shmem_add_to_page_cache+0x5b1/0xae0 [ 148.721546][ T3950] ? put_page+0xb0/0xb0 [ 148.725731][ T3950] ? do_fault+0x1b23/0x1e30 [ 148.730262][ T3950] shmem_get_folio_gfp+0xef9/0x20f0 [ 148.735484][ T3950] shmem_write_begin+0xea/0x2c0 [ 148.740354][ T3950] generic_perform_write+0x32d/0x740 [ 148.745660][ T3950] ? __cfi_generic_perform_write+0x10/0x10 [ 148.751496][ T3950] ? __cfi_file_update_time+0x10/0x10 [ 148.756899][ T3950] shmem_file_write_iter+0x104/0x130 [ 148.762217][ T3950] __kernel_write_iter+0x2a9/0x6a0 [ 148.767342][ T3950] ? __cfi___kernel_write_iter+0x10/0x10 [ 148.772995][ T3950] ? iov_iter_bvec+0x53/0x1f0 [ 148.777685][ T3950] dump_user_range+0x3e6/0x630 [ 148.782473][ T3950] ? __cfi_dump_user_range+0x10/0x10 [ 148.787804][ T3950] ? dump_align+0xfe/0x120 [ 148.792246][ T3950] ? dump_emit+0xa8/0xc0 [ 148.796504][ T3950] elf_core_dump+0x2b60/0x30b0 [ 148.801300][ T3950] ? __cfi_elf_core_dump+0x10/0x10 [ 148.806448][ T3950] ? dump_interrupted+0xd0/0xd0 [ 148.811340][ T3950] ? filp_open+0x195/0x1e0 [ 148.815806][ T3950] ? 0xffffffffff600000 [ 148.819987][ T3950] do_coredump+0x160e/0x23a0 [ 148.824596][ T3950] ? __cfi_do_coredump+0x10/0x10 [ 148.829548][ T3950] ? kmem_cache_free+0x12d/0x300 [ 148.834505][ T3950] ? ____kasan_slab_free+0x13d/0x180 [ 148.839816][ T3950] ? get_signal+0xac2/0x1700 [ 148.844434][ T3950] ? kmem_cache_free+0x12d/0x300 [ 148.849423][ T3950] get_signal+0x157d/0x1700 [ 148.853974][ T3950] ? __cfi_get_signal+0x10/0x10 [ 148.858855][ T3950] ? __send_signal_locked+0x5df/0xb70 [ 148.864257][ T3950] arch_do_signal_or_restart+0xd1/0x11c0 [ 148.869918][ T3950] ? force_sig_info_to_task+0x306/0x3b0 [ 148.875485][ T3950] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 148.881665][ T3950] ? force_sig+0xcc/0x120 [ 148.886040][ T3950] exit_to_user_mode_loop+0x7a/0xb0 [ 148.891343][ T3950] exit_to_user_mode_prepare+0x87/0xd0 [ 148.896834][ T3950] irqentry_exit_to_user_mode+0x9/0x10 [ 148.902315][ T3950] irqentry_exit+0x12/0x40 [ 148.906755][ T3950] exc_general_protection+0x14e/0x1e0 [ 148.912145][ T3950] ? debug_smp_processor_id+0x17/0x20 [ 148.917544][ T3950] asm_exc_general_protection+0x27/0x30 [ 148.923129][ T3950] RIP: 0033:0x7fd8c79a8f21 [ 148.927565][ T3950] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 148.947195][ T3950] RSP: 002b:00002000000000c0 EFLAGS: 00010217 [ 148.953311][ T3950] RAX: 0000000000000000 RBX: 00007fd8c7c26180 RCX: 00007fd8c79a8f19 [ 148.961303][ T3950] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000002000000 [ 148.969297][ T3950] RBP: 00007fd8c7a37f6d R08: 0000200000000180 R09: 0000200000000180 [ 148.977324][ T3950] R10: 0000200000000140 R11: 0000000000000206 R12: 0000000000000000 [ 148.985307][ T3950] R13: 00007fd8c7c26218 R14: 00007fd8c7c26180 R15: 00007ffeb5fb7b18 [ 148.993299][ T3950] [ 149.003748][ T3950] memory: usage 307200kB, limit 307200kB, failcnt 19780 [ 149.056273][ T3950] memory+swap: usage 431192kB, limit 9007199254740988kB, failcnt 0 [ 149.064760][ T3950] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 149.071850][ T3950] Memory cgroup stats for /syz2: [ 149.072013][ T3950] anon 380928 [ 149.072013][ T3950] file 313163776 [ 149.072013][ T3950] kernel 0 [ 149.072013][ T3950] kernel_stack 0 [ 149.072013][ T3950] pagetables 0 [ 149.072013][ T3950] sec_pagetables 0 [ 149.072013][ T3950] percpu 0 [ 149.072013][ T3950] sock 0 [ 149.072013][ T3950] vmalloc 0 [ 149.072013][ T3950] shmem 313147392 [ 149.072013][ T3950] file_mapped 12288 [ 149.072013][ T3950] file_dirty 12288 [ 149.072013][ T3950] file_writeback 0 [ 149.072013][ T3950] swapcached 1028096 [ 149.072013][ T3950] anon_thp 0 [ 149.072013][ T3950] file_thp 0 [ 149.072013][ T3950] shmem_thp 0 [ 149.072013][ T3950] inactive_anon 6701056 [ 149.072013][ T3950] active_anon 307855360 [ 149.072013][ T3950] inactive_file 0 [ 149.072013][ T3950] active_file 16384 [ 149.072013][ T3950] unevictable 0 [ 149.072013][ T3950] slab_reclaimable 0 [ 149.072013][ T3950] slab_unreclaimable 0 [ 149.072013][ T3950] slab 0 [ 149.072013][ T3950] workingset_refault_anon 0 [ 149.170138][ T3950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.831,pid=3930,uid=0 [ 149.186325][ T3950] Memory cgroup out of memory: Killed process 3930 (syz.2.831) total-vm:90960kB, anon-rss:1412kB, file-rss:52352kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 149.250521][ T3928] syz.2.831 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 149.276515][ T3928] CPU: 0 PID: 3928 Comm: syz.2.831 Not tainted syzkaller #0 [ 149.283858][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 149.294004][ T3928] Call Trace: [ 149.297333][ T3928] [ 149.300301][ T3928] __dump_stack+0x21/0x24 [ 149.304756][ T3928] dump_stack_lvl+0x110/0x170 [ 149.309475][ T3928] ? __cfi_dump_stack_lvl+0x8/0x8 [ 149.314553][ T3928] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 149.320408][ T3928] ? ___ratelimit+0x40a/0x590 [ 149.325146][ T3928] dump_stack+0x15/0x24 [ 149.329344][ T3928] dump_header+0xdb/0x660 [ 149.333716][ T3928] ? __cfi_gfp_zone+0x10/0x10 [ 149.338436][ T3928] oom_kill_process+0x32a/0x410 [ 149.343333][ T3928] ? kvm_sched_clock_read+0x18/0x40 [ 149.348577][ T3928] out_of_memory+0x630/0x930 [ 149.353215][ T3928] ? __cfi_out_of_memory+0x10/0x10 [ 149.358389][ T3928] mem_cgroup_out_of_memory+0x2be/0x390 [ 149.363981][ T3928] ? __kasan_check_write+0x14/0x20 [ 149.369141][ T3928] ? mem_cgroup_oom_trylock+0x360/0x360 [ 149.374732][ T3928] try_charge_memcg+0xb8a/0x1650 [ 149.379725][ T3928] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 149.385149][ T3928] ? __asan_set_shadow_00+0xe/0x10 [ 149.390371][ T3928] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 149.396322][ T3928] charge_memcg+0x81/0x1f0 [ 149.400782][ T3928] __mem_cgroup_charge+0x93/0x290 [ 149.405873][ T3928] ? xas_start+0x31d/0x3e0 [ 149.410328][ T3928] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 149.416001][ T3928] ? xas_load+0x3a2/0x3c0 [ 149.420364][ T3928] shmem_add_to_page_cache+0x5b1/0xae0 [ 149.425864][ T3928] ? put_page+0xb0/0xb0 [ 149.430073][ T3928] shmem_get_folio_gfp+0xef9/0x20f0 [ 149.435349][ T3928] shmem_write_begin+0xea/0x2c0 [ 149.440244][ T3928] generic_perform_write+0x32d/0x740 [ 149.445583][ T3928] ? __cfi_generic_perform_write+0x10/0x10 [ 149.451430][ T3928] ? __cfi_file_update_time+0x10/0x10 [ 149.456858][ T3928] shmem_file_write_iter+0x104/0x130 [ 149.462195][ T3928] __kernel_write_iter+0x2a9/0x6a0 [ 149.467349][ T3928] ? __cfi___kernel_write_iter+0x10/0x10 [ 149.473025][ T3928] ? vfs_llseek+0xbb/0xf0 [ 149.477392][ T3928] ? iov_iter_bvec+0x53/0x1f0 [ 149.482113][ T3928] dump_user_range+0x3e6/0x630 [ 149.486922][ T3928] ? __cfi_dump_user_range+0x10/0x10 [ 149.492247][ T3928] ? dump_align+0xfe/0x120 [ 149.496726][ T3928] ? dump_emit+0xa8/0xc0 [ 149.501129][ T3928] elf_core_dump+0x2b60/0x30b0 [ 149.505985][ T3928] ? __cfi_elf_core_dump+0x10/0x10 [ 149.511159][ T3928] ? dump_interrupted+0xd0/0xd0 [ 149.516057][ T3928] ? filp_open+0x195/0x1e0 [ 149.520517][ T3928] ? 0xffffffffff600000 [ 149.525135][ T3928] do_coredump+0x160e/0x23a0 [ 149.529764][ T3928] ? __cfi_do_coredump+0x10/0x10 [ 149.534829][ T3928] ? kmem_cache_free+0x12d/0x300 [ 149.539816][ T3928] ? ____kasan_slab_free+0x13d/0x180 [ 149.545184][ T3928] ? get_signal+0xac2/0x1700 [ 149.549808][ T3928] ? kmem_cache_free+0x12d/0x300 [ 149.554806][ T3928] get_signal+0x157d/0x1700 [ 149.559359][ T3928] ? __cfi_get_signal+0x10/0x10 [ 149.564275][ T3928] ? __send_signal_locked+0x5df/0xb70 [ 149.569680][ T3928] arch_do_signal_or_restart+0xd1/0x11c0 [ 149.575364][ T3928] ? force_sig_info_to_task+0x306/0x3b0 [ 149.580948][ T3928] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 149.587124][ T3928] ? force_sig+0xcc/0x120 [ 149.591483][ T3928] exit_to_user_mode_loop+0x7a/0xb0 [ 149.596702][ T3928] exit_to_user_mode_prepare+0x87/0xd0 [ 149.602177][ T3928] irqentry_exit_to_user_mode+0x9/0x10 [ 149.607659][ T3928] irqentry_exit+0x12/0x40 [ 149.612099][ T3928] exc_general_protection+0x14e/0x1e0 [ 149.617489][ T3928] ? debug_smp_processor_id+0x17/0x20 [ 149.622892][ T3928] asm_exc_general_protection+0x27/0x30 [ 149.628458][ T3928] RIP: 0033:0x7fd8c79a8f21 [ 149.632893][ T3928] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 149.652517][ T3928] RSP: 002b:00002000000000c0 EFLAGS: 00010217 [ 149.658609][ T3928] RAX: 0000000000000000 RBX: 00007fd8c7c26180 RCX: 00007fd8c79a8f19 [ 149.666592][ T3928] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000002000000 [ 149.674595][ T3928] RBP: 00007fd8c7a37f6d R08: 0000200000000180 R09: 0000200000000180 [ 149.682580][ T3928] R10: 0000200000000140 R11: 0000000000000206 R12: 0000000000000000 [ 149.690564][ T3928] R13: 00007fd8c7c26218 R14: 00007fd8c7c26180 R15: 00007ffeb5fb7b18 [ 149.698559][ T3928] [ 149.748115][ T3928] memory: usage 304156kB, limit 307200kB, failcnt 21050 [ 149.762743][ T3928] memory+swap: usage 419116kB, limit 9007199254740988kB, failcnt 0 [ 149.779419][ T3928] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 149.796458][ T3928] Memory cgroup stats for /syz2: [ 149.796742][ T3928] anon 372736 [ 149.796742][ T3928] file 311095296 [ 149.796742][ T3928] kernel 0 [ 149.796742][ T3928] kernel_stack 0 [ 149.796742][ T3928] pagetables 0 [ 149.796742][ T3928] sec_pagetables 0 [ 149.796742][ T3928] percpu 0 [ 149.796742][ T3928] sock 0 [ 149.796742][ T3928] vmalloc 0 [ 149.796742][ T3928] shmem 306507776 [ 149.796742][ T3928] file_mapped 4329472 [ 149.796742][ T3928] file_dirty 12288 [ 149.796742][ T3928] file_writeback 0 [ 149.796742][ T3928] swapcached 589824 [ 149.796742][ T3928] anon_thp 0 [ 149.796742][ T3928] file_thp 0 [ 149.796742][ T3928] shmem_thp 0 [ 149.796742][ T3928] inactive_anon 155492352 [ 149.796742][ T3928] active_anon 151937024 [ 149.796742][ T3928] inactive_file 0 [ 149.796742][ T3928] active_file 4587520 [ 149.796742][ T3928] unevictable 0 [ 149.796742][ T3928] slab_reclaimable 0 [ 149.796742][ T3928] slab_unreclaimable 0 [ 149.796742][ T3928] slab 0 [ 149.796742][ T3928] workingset_refault_anon 0 [ 149.984967][ T3930] syz.2.831 (3930) used greatest stack depth: 14344 bytes left [ 150.065854][ T3928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.831,pid=3935,uid=0 [ 150.090978][ T3928] Memory cgroup out of memory: Killed process 3935 (syz.2.831) total-vm:90960kB, anon-rss:1412kB, file-rss:50188kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 150.318220][ T28] audit: type=1400 audit(1794302145.412:164): avc: denied { create } for pid=4334 comm="syz.4.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.081971][ T4347] tap0: tun_chr_ioctl cmd 1074025676 [ 151.098238][ T4347] tap0: owner set to 0 [ 151.301925][ T4359] cgroup: fork rejected by pids controller in /syz0 [ 151.518576][ T3950] syz.2.831 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 151.879064][ T3950] CPU: 0 PID: 3950 Comm: syz.2.831 Not tainted syzkaller #0 [ 151.886419][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 151.896513][ T3950] Call Trace: [ 151.899823][ T3950] [ 151.902780][ T3950] __dump_stack+0x21/0x24 [ 151.907148][ T3950] dump_stack_lvl+0x110/0x170 [ 151.911852][ T3950] ? __cfi_dump_stack_lvl+0x8/0x8 [ 151.916912][ T3950] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 151.922749][ T3950] ? ___ratelimit+0x40a/0x590 [ 151.927469][ T3950] dump_stack+0x15/0x24 [ 151.931650][ T3950] dump_header+0xdb/0x660 [ 151.936016][ T3950] ? __cfi_gfp_zone+0x10/0x10 [ 151.940819][ T3950] oom_kill_process+0x32a/0x410 [ 151.945712][ T3950] ? kvm_sched_clock_read+0x18/0x40 [ 151.950949][ T3950] out_of_memory+0x630/0x930 [ 151.955608][ T3950] ? __cfi_out_of_memory+0x10/0x10 [ 151.960767][ T3950] mem_cgroup_out_of_memory+0x2be/0x390 [ 151.966355][ T3950] ? __kasan_check_write+0x14/0x20 [ 151.971517][ T3950] ? mem_cgroup_oom_trylock+0x360/0x360 [ 151.977096][ T3950] try_charge_memcg+0xb8a/0x1650 [ 151.982074][ T3950] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 151.987478][ T3950] ? __asan_set_shadow_00+0xe/0x10 [ 151.992627][ T3950] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 151.998557][ T3950] ? finish_task_switch+0x209/0x7c0 [ 152.003791][ T3950] ? switch_mm_irqs_off+0x724/0x960 [ 152.009066][ T3950] charge_memcg+0x81/0x1f0 [ 152.013514][ T3950] __mem_cgroup_charge+0x93/0x290 [ 152.018578][ T3950] ? xas_start+0x31d/0x3e0 [ 152.023027][ T3950] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 152.028691][ T3950] ? xas_load+0x394/0x3c0 [ 152.033054][ T3950] shmem_add_to_page_cache+0x5b1/0xae0 [ 152.038555][ T3950] ? put_page+0xb0/0xb0 [ 152.042769][ T3950] ? release_firmware_map_entry+0x190/0x190 [ 152.048694][ T3950] shmem_get_folio_gfp+0xef9/0x20f0 [ 152.053942][ T3950] shmem_write_begin+0xea/0x2c0 [ 152.058826][ T3950] generic_perform_write+0x32d/0x740 [ 152.064152][ T3950] ? __mark_inode_dirty+0x264/0x9c0 [ 152.069392][ T3950] ? __cfi_generic_perform_write+0x10/0x10 [ 152.075230][ T3950] ? __cfi_file_update_time+0x10/0x10 [ 152.080644][ T3950] shmem_file_write_iter+0x104/0x130 [ 152.085974][ T3950] __kernel_write_iter+0x2a9/0x6a0 [ 152.091116][ T3950] ? __cfi___kernel_write_iter+0x10/0x10 [ 152.096782][ T3950] ? vfs_llseek+0xbb/0xf0 [ 152.101166][ T3950] ? iov_iter_bvec+0x53/0x1f0 [ 152.105877][ T3950] dump_user_range+0x3e6/0x630 [ 152.110670][ T3950] ? __cfi_dump_user_range+0x10/0x10 [ 152.115985][ T3950] ? dump_align+0xfe/0x120 [ 152.120440][ T3950] ? dump_emit+0xa8/0xc0 [ 152.124717][ T3950] elf_core_dump+0x2b60/0x30b0 [ 152.129534][ T3950] ? __cfi_elf_core_dump+0x10/0x10 [ 152.134720][ T3950] ? dump_interrupted+0xd0/0xd0 [ 152.139639][ T3950] ? filp_open+0x195/0x1e0 [ 152.144159][ T3950] ? 0xffffffffff600000 [ 152.148341][ T3950] do_coredump+0x160e/0x23a0 [ 152.152967][ T3950] ? __cfi_do_coredump+0x10/0x10 [ 152.157935][ T3950] ? kmem_cache_free+0x12d/0x300 [ 152.162909][ T3950] ? ____kasan_slab_free+0x13d/0x180 [ 152.168235][ T3950] ? get_signal+0xac2/0x1700 [ 152.172857][ T3950] ? kmem_cache_free+0x12d/0x300 [ 152.177855][ T3950] get_signal+0x157d/0x1700 [ 152.182427][ T3950] ? __cfi_get_signal+0x10/0x10 [ 152.187315][ T3950] ? __send_signal_locked+0x5df/0xb70 [ 152.192724][ T3950] arch_do_signal_or_restart+0xd1/0x11c0 [ 152.198396][ T3950] ? force_sig_info_to_task+0x306/0x3b0 [ 152.203979][ T3950] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 152.210207][ T3950] ? force_sig+0xcc/0x120 [ 152.214624][ T3950] exit_to_user_mode_loop+0x7a/0xb0 [ 152.219856][ T3950] exit_to_user_mode_prepare+0x87/0xd0 [ 152.225459][ T3950] irqentry_exit_to_user_mode+0x9/0x10 [ 152.230952][ T3950] irqentry_exit+0x12/0x40 [ 152.235406][ T3950] exc_general_protection+0x14e/0x1e0 [ 152.240806][ T3950] ? debug_smp_processor_id+0x17/0x20 [ 152.246251][ T3950] asm_exc_general_protection+0x27/0x30 [ 152.251843][ T3950] RIP: 0033:0x7fd8c79a8f21 [ 152.256291][ T3950] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 152.276007][ T3950] RSP: 002b:00002000000000c0 EFLAGS: 00010217 [ 152.282108][ T3950] RAX: 0000000000000000 RBX: 00007fd8c7c26180 RCX: 00007fd8c79a8f19 [ 152.290122][ T3950] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000002000000 [ 152.298126][ T3950] RBP: 00007fd8c7a37f6d R08: 0000200000000180 R09: 0000200000000180 [ 152.306124][ T3950] R10: 0000200000000140 R11: 0000000000000206 R12: 0000000000000000 [ 152.314120][ T3950] R13: 00007fd8c7c26218 R14: 00007fd8c7c26180 R15: 00007ffeb5fb7b18 [ 152.322127][ T3950] [ 152.393957][ T3950] memory: usage 297396kB, limit 307200kB, failcnt 23563 [ 152.594344][ T3950] memory+swap: usage 407908kB, limit 9007199254740988kB, failcnt 0 [ 152.602576][ T3950] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 152.611095][ T3950] Memory cgroup stats for /syz2: [ 152.611274][ T3950] anon 421888 [ 152.611274][ T3950] file 289218560 [ 152.611274][ T3950] kernel 0 [ 152.611274][ T3950] kernel_stack 0 [ 152.611274][ T3950] pagetables 0 [ 152.611274][ T3950] sec_pagetables 0 [ 152.611274][ T3950] percpu 0 [ 152.611274][ T3950] sock 0 [ 152.611274][ T3950] vmalloc 0 [ 152.611274][ T3950] shmem 289202176 [ 152.611274][ T3950] file_mapped 8192 [ 152.611274][ T3950] file_dirty 8192 [ 152.611274][ T3950] file_writeback 2396160 [ 152.611274][ T3950] swapcached 2674688 [ 152.611274][ T3950] anon_thp 0 [ 152.611274][ T3950] file_thp 0 [ 152.611274][ T3950] shmem_thp 0 [ 152.611274][ T3950] inactive_anon 235077632 [ 152.611274][ T3950] active_anon 55209984 [ 152.611274][ T3950] inactive_file 0 [ 152.611274][ T3950] active_file 16384 [ 152.611274][ T3950] unevictable 0 [ 152.611274][ T3950] slab_reclaimable 0 [ 152.611274][ T3950] slab_unreclaimable 0 [ 152.611274][ T3950] slab 0 [ 152.611274][ T3950] workingset_refault_anon 0 [ 153.009100][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.016199][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.023798][ T4501] device bridge_slave_0 entered promiscuous mode [ 153.031284][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.046535][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.072606][ T4501] device bridge_slave_1 entered promiscuous mode [ 153.216504][ T3950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.831,pid=3947,uid=0 [ 153.231857][ T3950] Memory cgroup out of memory: Killed process 3947 (syz.2.831) total-vm:90960kB, anon-rss:1412kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 153.386448][ T3935] syz.2.831 (3935) used greatest stack depth: 14208 bytes left [ 153.514295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.547633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.567059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.581965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.641026][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.648153][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.707189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.436964][ T30] oom_reaper: reaped process 3947 (syz.2.831), now anon-rss:0kB, file-rss:53312kB, shmem-rss:0kB [ 157.486495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.494959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.520125][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.527249][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.545059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.557559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.573335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.594115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.610313][ T1619] device bridge_slave_1 left promiscuous mode [ 157.627185][ T1619] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.634860][ T1619] device bridge_slave_0 left promiscuous mode [ 157.647809][ T1619] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.924591][ T4501] device veth0_vlan entered promiscuous mode [ 157.954863][ T4501] device veth1_macvtap entered promiscuous mode [ 158.029222][ T4533] device syzkaller0 entered promiscuous mode [ 158.058295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.076936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.087654][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.104468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.121550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.138661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.155806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.276926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.295849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.332047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.361923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.374760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.387703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.640891][ T4579] device syzkaller0 entered promiscuous mode [ 158.760375][ T4581] device syzkaller0 entered promiscuous mode [ 160.458830][ T4639] device syzkaller0 entered promiscuous mode [ 161.360492][ T4687] ªªªªª6: renamed from veth0_vlan [ 161.565803][ T3947] syz.2.831 (3947) used greatest stack depth: 13984 bytes left [ 161.847553][ T4706] device syzkaller0 entered promiscuous mode [ 161.874695][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.881991][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.327228][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.334347][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.341732][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.348841][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.456556][ T4708] device bridge0 entered promiscuous mode [ 164.472302][ T4778] û: renamed from bond_slave_0 [ 164.594778][ T4779] -: renamed from syzkaller0 [ 165.519257][ T4820] device syzkaller0 entered promiscuous mode [ 167.210390][ T4854] device wg2 entered promiscuous mode [ 167.234874][ T4855] device wg2 left promiscuous mode [ 167.334761][ T4865] device wg2 left promiscuous mode [ 167.361599][ T4864] device wg2 entered promiscuous mode [ 167.574395][ T4876] device wg2 entered promiscuous mode [ 168.338615][ T4949] device sit0 entered promiscuous mode [ 168.589473][ T4971] device syzkaller0 entered promiscuous mode [ 169.070530][ T5023] -: renamed from syzkaller0 [ 169.874873][ T28] audit: type=1400 audit(1794302164.962:165): avc: denied { attach_queue } for pid=5056 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 171.935838][ T5129] device syzkaller0 entered promiscuous mode [ 175.977728][ T5211] device syzkaller0 entered promiscuous mode [ 176.043581][ T39] syzkaller0: tun_net_xmit 48 [ 176.146318][ T5224] device syzkaller0 entered promiscuous mode [ 179.382316][ T5293] device syzkaller0 entered promiscuous mode [ 182.479849][ T5345] device wg2 left promiscuous mode [ 182.731953][ T5329] syz.4.1125 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 182.946186][ T5329] CPU: 0 PID: 5329 Comm: syz.4.1125 Not tainted syzkaller #0 [ 182.953712][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 182.963815][ T5329] Call Trace: [ 182.967119][ T5329] [ 182.970080][ T5329] __dump_stack+0x21/0x24 [ 182.974479][ T5329] dump_stack_lvl+0x110/0x170 [ 182.979233][ T5329] ? __cfi_dump_stack_lvl+0x8/0x8 [ 182.984301][ T5329] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 182.990154][ T5329] ? ___ratelimit+0x40a/0x590 [ 182.994881][ T5329] dump_stack+0x15/0x24 [ 182.999087][ T5329] dump_header+0xdb/0x660 [ 183.003458][ T5329] ? __cfi_gfp_zone+0x10/0x10 [ 183.008172][ T5329] oom_kill_process+0x32a/0x410 [ 183.013070][ T5329] ? kvm_sched_clock_read+0x18/0x40 [ 183.018321][ T5329] out_of_memory+0x630/0x930 [ 183.022960][ T5329] ? __cfi_out_of_memory+0x10/0x10 [ 183.028117][ T5329] mem_cgroup_out_of_memory+0x2be/0x390 [ 183.033701][ T5329] ? __kasan_check_write+0x14/0x20 [ 183.038858][ T5329] ? mem_cgroup_oom_trylock+0x360/0x360 [ 183.044453][ T5329] try_charge_memcg+0xb8a/0x1650 [ 183.049448][ T5329] ? kvm_sched_clock_read+0x18/0x40 [ 183.054714][ T5329] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 183.060139][ T5329] ? __alloc_pages+0x610/0x610 [ 183.064950][ T5329] ? __cfi_gfp_zone+0x10/0x10 [ 183.069663][ T5329] ? sched_clock_cpu+0x6e/0x260 [ 183.074562][ T5329] ? __alloc_pages+0x1fa/0x610 [ 183.079463][ T5329] charge_memcg+0x81/0x1f0 [ 183.083924][ T5329] __mem_cgroup_charge+0x93/0x290 [ 183.089006][ T5329] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 183.094710][ T5329] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 183.101099][ T5329] wp_page_copy+0x488/0x1490 [ 183.105775][ T5329] ? fault_dirty_shared_page+0x310/0x310 [ 183.111463][ T5329] do_wp_page+0x9b5/0xf70 [ 183.116036][ T5329] handle_mm_fault+0x114f/0x26b0 [ 183.121034][ T5329] ? __cfi_handle_mm_fault+0x10/0x10 [ 183.126371][ T5329] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 183.131618][ T5329] ? debug_smp_processor_id+0x17/0x20 [ 183.137046][ T5329] do_user_addr_fault+0x900/0x1030 [ 183.142207][ T5329] ? __kasan_check_write+0x14/0x20 [ 183.147385][ T5329] exc_page_fault+0x51/0xb0 [ 183.151944][ T5329] asm_exc_page_fault+0x27/0x30 [ 183.156843][ T5329] RIP: 0033:0x7f5a10a6c99e [ 183.161317][ T5329] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 68 c0 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 16 b4 3b 00 85 c0 0f 8e 63 fd ff ff cd 80 fe ff 49 39 c4 73 98 48 8d 1d f1 95 3b 00 83 3d f6 b3 3b [ 183.180983][ T5329] RSP: 002b:00007ffec0456ea0 EFLAGS: 00010202 [ 183.187119][ T5329] RAX: 0000000000000001 RBX: 00007f5a10e27da0 RCX: 000055556b407808 [ 183.195146][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.203172][ T5329] RBP: 00007f5a10e27da0 R08: 0000000000000000 R09: 0000000000000000 [ 183.211194][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002ca24 [ 183.219238][ T5329] R13: 00007f5a10e2627c R14: 000000000002c9b9 R15: 00007f5a10e26270 [ 183.227272][ T5329] [ 183.534377][ T5385] bridge0: port 3(team_slave_1) entered blocking state [ 183.543266][ T5329] memory: usage 307200kB, limit 307200kB, failcnt 21722 [ 183.550409][ T5385] bridge0: port 3(team_slave_1) entered disabled state [ 183.557887][ T5329] memory+swap: usage 418552kB, limit 9007199254740988kB, failcnt 0 [ 183.566730][ T5385] device team_slave_1 entered promiscuous mode [ 183.573394][ T5329] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 183.601836][ T5329] Memory cgroup stats for /syz4: [ 183.602034][ T5329] anon 557056 [ 183.602034][ T5329] file 300044288 [ 183.602034][ T5329] kernel 0 [ 183.602034][ T5329] kernel_stack 0 [ 183.602034][ T5329] pagetables 0 [ 183.602034][ T5329] sec_pagetables 0 [ 183.602034][ T5329] percpu 0 [ 183.602034][ T5329] sock 0 [ 183.602034][ T5329] vmalloc 0 [ 183.602034][ T5329] shmem 300032000 [ 183.602034][ T5329] file_mapped 12288 [ 183.602034][ T5329] file_dirty 12288 [ 183.602034][ T5329] file_writeback 0 [ 183.602034][ T5329] swapcached 13971456 [ 183.602034][ T5329] anon_thp 0 [ 183.602034][ T5329] file_thp 0 [ 183.602034][ T5329] shmem_thp 0 [ 183.602034][ T5329] inactive_anon 144584704 [ 183.602034][ T5329] active_anon 169975808 [ 183.602034][ T5329] inactive_file 12288 [ 183.602034][ T5329] active_file 0 [ 183.602034][ T5329] unevictable 0 [ 183.602034][ T5329] slab_reclaimable 0 [ 183.602034][ T5329] slab_unreclaimable 0 [ 183.602034][ T5329] slab 0 [ 183.602034][ T5329] workingset_refault_anon 0 [ 183.696088][ T5329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1125,pid=5329,uid=0 [ 183.711280][ T5329] Memory cgroup out of memory: Killed process 5329 (syz.4.1125) total-vm:90564kB, anon-rss:1348kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 183.757478][ T5029] syz.4.1053 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 183.767982][ T5029] CPU: 0 PID: 5029 Comm: syz.4.1053 Not tainted syzkaller #0 [ 183.775408][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.785500][ T5029] Call Trace: [ 183.788816][ T5029] [ 183.791773][ T5029] __dump_stack+0x21/0x24 [ 183.796153][ T5029] dump_stack_lvl+0x110/0x170 [ 183.800860][ T5029] ? __cfi_dump_stack_lvl+0x8/0x8 [ 183.805923][ T5029] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 183.811758][ T5029] ? ___ratelimit+0x40a/0x590 [ 183.816474][ T5029] dump_stack+0x15/0x24 [ 183.820665][ T5029] dump_header+0xdb/0x660 [ 183.825038][ T5029] ? __cfi_gfp_zone+0x10/0x10 [ 183.829745][ T5029] oom_kill_process+0x32a/0x410 [ 183.834679][ T5029] ? kvm_sched_clock_read+0x18/0x40 [ 183.839928][ T5029] out_of_memory+0x630/0x930 [ 183.844568][ T5029] ? __cfi_out_of_memory+0x10/0x10 [ 183.849763][ T5029] mem_cgroup_out_of_memory+0x2be/0x390 [ 183.855362][ T5029] ? __kasan_check_write+0x14/0x20 [ 183.860511][ T5029] ? mem_cgroup_oom_trylock+0x360/0x360 [ 183.866099][ T5029] try_charge_memcg+0xb8a/0x1650 [ 183.871086][ T5029] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 183.876495][ T5029] ? __asan_set_shadow_00+0xe/0x10 [ 183.881646][ T5029] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 183.887595][ T5029] charge_memcg+0x81/0x1f0 [ 183.892049][ T5029] __mem_cgroup_charge+0x93/0x290 [ 183.897102][ T5029] ? xas_start+0x31d/0x3e0 [ 183.901545][ T5029] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 183.907209][ T5029] ? xas_load+0x3a2/0x3c0 [ 183.911571][ T5029] shmem_add_to_page_cache+0x5b1/0xae0 [ 183.917070][ T5029] ? put_page+0xb0/0xb0 [ 183.921283][ T5029] ? copy_page_from_iter_atomic+0xa1a/0x1240 [ 183.927288][ T5029] shmem_get_folio_gfp+0xef9/0x20f0 [ 183.932532][ T5029] shmem_write_begin+0xea/0x2c0 [ 183.937465][ T5029] generic_perform_write+0x32d/0x740 [ 183.942810][ T5029] ? __cfi_generic_perform_write+0x10/0x10 [ 183.948665][ T5029] ? __cfi_file_update_time+0x10/0x10 [ 183.954082][ T5029] shmem_file_write_iter+0x104/0x130 [ 183.959414][ T5029] __kernel_write_iter+0x2a9/0x6a0 [ 183.964572][ T5029] ? __cfi___kernel_write_iter+0x10/0x10 [ 183.970252][ T5029] ? vfs_llseek+0xbb/0xf0 [ 183.974619][ T5029] ? iov_iter_bvec+0x53/0x1f0 [ 183.979373][ T5029] dump_user_range+0x3e6/0x630 [ 183.984182][ T5029] ? __cfi_dump_user_range+0x10/0x10 [ 183.989505][ T5029] ? dump_align+0xfe/0x120 [ 183.993967][ T5029] ? dump_emit+0xa8/0xc0 [ 183.998273][ T5029] elf_core_dump+0x2b60/0x30b0 [ 184.003085][ T5029] ? __cfi_elf_core_dump+0x10/0x10 [ 184.008260][ T5029] ? dump_interrupted+0xd0/0xd0 [ 184.013146][ T5029] ? filp_open+0x195/0x1e0 [ 184.017622][ T5029] ? 0xffffffffff600000 [ 184.021829][ T5029] do_coredump+0x160e/0x23a0 [ 184.026552][ T5029] ? __cfi_do_coredump+0x10/0x10 [ 184.031527][ T5029] ? kmem_cache_free+0x12d/0x300 [ 184.036505][ T5029] ? ____kasan_slab_free+0x13d/0x180 [ 184.041836][ T5029] ? get_signal+0xac2/0x1700 [ 184.046506][ T5029] ? kmem_cache_free+0x12d/0x300 [ 184.051518][ T5029] get_signal+0x157d/0x1700 [ 184.056063][ T5029] ? __cfi_get_signal+0x10/0x10 [ 184.060947][ T5029] arch_do_signal_or_restart+0xd1/0x11c0 [ 184.066627][ T5029] ? force_sig_info_to_task+0x306/0x3b0 [ 184.072203][ T5029] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 184.078386][ T5029] ? force_sig+0xcc/0x120 [ 184.082780][ T5029] exit_to_user_mode_loop+0x7a/0xb0 [ 184.088016][ T5029] exit_to_user_mode_prepare+0x87/0xd0 [ 184.093515][ T5029] irqentry_exit_to_user_mode+0x9/0x10 [ 184.099108][ T5029] irqentry_exit+0x12/0x40 [ 184.103623][ T5029] exc_general_protection+0x14e/0x1e0 [ 184.109041][ T5029] asm_exc_general_protection+0x27/0x30 [ 184.114631][ T5029] RIP: 0033:0x7f5a10ba8f21 [ 184.119090][ T5029] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 184.138737][ T5029] RSP: 002b:00002000000004b0 EFLAGS: 00010217 [ 184.144843][ T5029] RAX: 0000000000000000 RBX: 00007f5a10e26360 RCX: 00007f5a10ba8f19 [ 184.152854][ T5029] RDX: 00002000000004c0 RSI: 00002000000004b0 RDI: 0000000000100000 [ 184.160865][ T5029] RBP: 00007f5a10c37f6d R08: 0000200000001180 R09: 0000200000001180 [ 184.168892][ T5029] R10: 0000200000000640 R11: 0000000000000206 R12: 0000000000000000 [ 184.176990][ T5029] R13: 00007f5a10e263f8 R14: 00007f5a10e26360 R15: 00007ffec0456d38 [ 184.185006][ T5029] [ 184.201195][ T5029] memory: usage 307200kB, limit 307200kB, failcnt 21942 [ 184.208297][ T5029] memory+swap: usage 418552kB, limit 9007199254740988kB, failcnt 0 [ 184.216227][ T5029] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 184.233639][ T5029] Memory cgroup stats for /syz4: [ 184.233821][ T5029] anon 458752 [ 184.233821][ T5029] file 300142592 [ 184.233821][ T5029] kernel 0 [ 184.233821][ T5029] kernel_stack 0 [ 184.233821][ T5029] pagetables 0 [ 184.233821][ T5029] sec_pagetables 0 [ 184.233821][ T5029] percpu 0 [ 184.233821][ T5029] sock 0 [ 184.233821][ T5029] vmalloc 0 [ 184.233821][ T5029] shmem 300130304 [ 184.233821][ T5029] file_mapped 12288 [ 184.233821][ T5029] file_dirty 12288 [ 184.233821][ T5029] file_writeback 0 [ 184.233821][ T5029] swapcached 13971456 [ 184.233821][ T5029] anon_thp 0 [ 184.233821][ T5029] file_thp 0 [ 184.233821][ T5029] shmem_thp 0 [ 184.233821][ T5029] inactive_anon 144547840 [ 184.233821][ T5029] active_anon 170012672 [ 184.233821][ T5029] inactive_file 12288 [ 184.233821][ T5029] active_file 0 [ 184.233821][ T5029] unevictable 0 [ 184.233821][ T5029] slab_reclaimable 0 [ 184.233821][ T5029] slab_unreclaimable 0 [ 184.233821][ T5029] slab 0 [ 184.233821][ T5029] workingset_refault_anon 0 [ 184.337646][ T5029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1053,pid=5055,uid=0 [ 184.364504][ T5029] Memory cgroup out of memory: Killed process 5055 (syz.4.1053) total-vm:91356kB, anon-rss:1456kB, file-rss:18220kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 185.025539][ T5030] syz.4.1053 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 185.035526][ T5030] CPU: 1 PID: 5030 Comm: syz.4.1053 Not tainted syzkaller #0 [ 185.042938][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 185.053038][ T5030] Call Trace: [ 185.056350][ T5030] [ 185.059315][ T5030] __dump_stack+0x21/0x24 [ 185.063690][ T5030] dump_stack_lvl+0x110/0x170 [ 185.068406][ T5030] ? __cfi_dump_stack_lvl+0x8/0x8 [ 185.073466][ T5030] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 185.079318][ T5030] ? ___ratelimit+0x40a/0x590 [ 185.084047][ T5030] dump_stack+0x15/0x24 [ 185.088248][ T5030] dump_header+0xdb/0x660 [ 185.092633][ T5030] ? __cfi_gfp_zone+0x10/0x10 [ 185.097407][ T5030] oom_kill_process+0x32a/0x410 [ 185.102343][ T5030] ? kvm_sched_clock_read+0x18/0x40 [ 185.107597][ T5030] out_of_memory+0x630/0x930 [ 185.112254][ T5030] ? __cfi_out_of_memory+0x10/0x10 [ 185.117418][ T5030] mem_cgroup_out_of_memory+0x2be/0x390 [ 185.123006][ T5030] ? __kasan_check_write+0x14/0x20 [ 185.128165][ T5030] ? mem_cgroup_oom_trylock+0x360/0x360 [ 185.133787][ T5030] try_charge_memcg+0xb8a/0x1650 [ 185.138781][ T5030] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 185.144289][ T5030] ? __asan_set_shadow_00+0xe/0x10 [ 185.149452][ T5030] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 185.155412][ T5030] charge_memcg+0x81/0x1f0 [ 185.159878][ T5030] __mem_cgroup_charge+0x93/0x290 [ 185.164960][ T5030] ? xas_start+0x31d/0x3e0 [ 185.169421][ T5030] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 185.175107][ T5030] ? xas_load+0x3a2/0x3c0 [ 185.179483][ T5030] shmem_add_to_page_cache+0x5b1/0xae0 [ 185.185007][ T5030] ? put_page+0xb0/0xb0 [ 185.189219][ T5030] ? swake_up_one+0x12d/0x140 [ 185.193992][ T5030] shmem_get_folio_gfp+0xef9/0x20f0 [ 185.199253][ T5030] shmem_write_begin+0xea/0x2c0 [ 185.204165][ T5030] generic_perform_write+0x32d/0x740 [ 185.209501][ T5030] ? __cfi_generic_perform_write+0x10/0x10 [ 185.215355][ T5030] ? __cfi_file_update_time+0x10/0x10 [ 185.220782][ T5030] shmem_file_write_iter+0x104/0x130 [ 185.226233][ T5030] __kernel_write_iter+0x2a9/0x6a0 [ 185.231391][ T5030] ? __cfi___kernel_write_iter+0x10/0x10 [ 185.237070][ T5030] ? iov_iter_bvec+0x53/0x1f0 [ 185.241789][ T5030] dump_user_range+0x3e6/0x630 [ 185.246594][ T5030] ? __cfi_dump_user_range+0x10/0x10 [ 185.251946][ T5030] ? dump_align+0xfe/0x120 [ 185.256415][ T5030] ? dump_emit+0xa8/0xc0 [ 185.260697][ T5030] elf_core_dump+0x2b60/0x30b0 [ 185.265540][ T5030] ? __cfi_elf_core_dump+0x10/0x10 [ 185.270712][ T5030] ? dump_interrupted+0xd0/0xd0 [ 185.275639][ T5030] ? filp_open+0x195/0x1e0 [ 185.280114][ T5030] ? 0xffffffffff600000 [ 185.284314][ T5030] do_coredump+0x160e/0x23a0 [ 185.288963][ T5030] ? __cfi_do_coredump+0x10/0x10 [ 185.293952][ T5030] ? kmem_cache_free+0x12d/0x300 [ 185.298939][ T5030] ? ____kasan_slab_free+0x13d/0x180 [ 185.304275][ T5030] ? get_signal+0xac2/0x1700 [ 185.308923][ T5030] ? kmem_cache_free+0x12d/0x300 [ 185.313947][ T5030] get_signal+0x157d/0x1700 [ 185.318509][ T5030] ? __cfi_get_signal+0x10/0x10 [ 185.323418][ T5030] arch_do_signal_or_restart+0xd1/0x11c0 [ 185.329105][ T5030] ? force_sig_info_to_task+0x306/0x3b0 [ 185.334705][ T5030] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 185.340904][ T5030] ? force_sig+0xcc/0x120 [ 185.345291][ T5030] exit_to_user_mode_loop+0x7a/0xb0 [ 185.350533][ T5030] exit_to_user_mode_prepare+0x87/0xd0 [ 185.356213][ T5030] irqentry_exit_to_user_mode+0x9/0x10 [ 185.361719][ T5030] irqentry_exit+0x12/0x40 [ 185.366207][ T5030] exc_general_protection+0x14e/0x1e0 [ 185.371618][ T5030] ? debug_smp_processor_id+0x17/0x20 [ 185.377054][ T5030] asm_exc_general_protection+0x27/0x30 [ 185.382629][ T5030] RIP: 0033:0x7f5a10ba8f21 [ 185.387069][ T5030] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 185.406693][ T5030] RSP: 002b:00002000000004b0 EFLAGS: 00010217 [ 185.412779][ T5030] RAX: 0000000000000000 RBX: 00007f5a10e26360 RCX: 00007f5a10ba8f19 [ 185.420764][ T5030] RDX: 00002000000004c0 RSI: 00002000000004b0 RDI: 0000000000100000 [ 185.428766][ T5030] RBP: 00007f5a10c37f6d R08: 0000200000001180 R09: 0000200000001180 [ 185.436760][ T5030] R10: 0000200000000640 R11: 0000000000000206 R12: 0000000000000000 [ 185.444747][ T5030] R13: 00007f5a10e263f8 R14: 00007f5a10e26360 R15: 00007ffec0456d38 [ 185.452764][ T5030] [ 185.461224][ T5030] memory: usage 307200kB, limit 307200kB, failcnt 24786 [ 185.532890][ T5030] memory+swap: usage 419164kB, limit 9007199254740988kB, failcnt 0 [ 185.541304][ T5030] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 185.560007][ T5030] Memory cgroup stats for /syz4: [ 185.560204][ T5030] anon 598016 [ 185.560204][ T5030] file 298422272 [ 185.560204][ T5030] kernel 0 [ 185.560204][ T5030] kernel_stack 0 [ 185.560204][ T5030] pagetables 0 [ 185.560204][ T5030] sec_pagetables 0 [ 185.560204][ T5030] percpu 0 [ 185.560204][ T5030] sock 0 [ 185.560204][ T5030] vmalloc 0 [ 185.560204][ T5030] shmem 298409984 [ 185.560204][ T5030] file_mapped 12288 [ 185.560204][ T5030] file_dirty 12288 [ 185.560204][ T5030] file_writeback 0 [ 185.560204][ T5030] swapcached 13344768 [ 185.560204][ T5030] anon_thp 0 [ 185.560204][ T5030] file_thp 0 [ 185.560204][ T5030] shmem_thp 0 [ 185.560204][ T5030] inactive_anon 24752128 [ 185.560204][ T5030] active_anon 287657984 [ 185.560204][ T5030] inactive_file 12288 [ 185.560204][ T5030] active_file 0 [ 185.560204][ T5030] unevictable 0 [ 185.560204][ T5030] slab_reclaimable 0 [ 185.560204][ T5030] slab_unreclaimable 0 [ 185.560204][ T5030] slab 0 [ 185.560204][ T5030] workingset_refault_anon 4 [ 185.673503][ T5030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1053,pid=5028,uid=0 [ 185.689073][ T5030] Memory cgroup out of memory: Killed process 5028 (syz.4.1053) total-vm:91356kB, anon-rss:1456kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 191.174118][ T5606] device syzkaller0 entered promiscuous mode [ 192.178330][ T5632] device syzkaller0 entered promiscuous mode [ 193.009893][ T5645] device syzkaller0 entered promiscuous mode [ 193.381101][ T5660] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 193.387146][ T5660] syzkaller0: linktype set to 776 [ 195.636536][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.380890][ T5737] tap0: tun_chr_ioctl cmd 1074025677 [ 197.386378][ T5737] tap0: linktype set to 769 [ 197.423175][ T5750] device wg2 left promiscuous mode [ 197.502996][ T5751] device wg2 entered promiscuous mode [ 203.531824][ T5935] device wg2 entered promiscuous mode [ 205.062156][ T28] audit: type=1400 audit(1794302200.152:166): avc: denied { create } for pid=5981 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 208.075863][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.083063][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.126877][ T6036] device bridge0 left promiscuous mode [ 208.179929][ T6037] device bridge_slave_1 left promiscuous mode [ 208.186188][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.217036][ T6037] device bridge_slave_0 left promiscuous mode [ 208.223235][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.088359][ T6107] device wg2 left promiscuous mode [ 210.116035][ T6107] device wg2 entered promiscuous mode [ 210.217546][ T6113] ±ÿ: renamed from team_slave_1 [ 210.584011][ T6146] device syzkaller0 entered promiscuous mode [ 215.458661][ T6185] device dummy0 entered promiscuous mode [ 215.768196][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.776130][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.784116][ T6216] device bridge_slave_0 entered promiscuous mode [ 215.802835][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.810050][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.817777][ T6216] device bridge_slave_1 entered promiscuous mode [ 215.905661][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.912884][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.920209][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.927278][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.966872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.974936][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.982629][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.022511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.030813][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.037917][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.045529][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.053933][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.061073][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.068586][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.077026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.090475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.129064][ T6229] €Â0: renamed from pim6reg1 [ 216.145243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.153698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.162008][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.174612][ T6216] device veth0_vlan entered promiscuous mode [ 216.186540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.195996][ T6216] device veth1_macvtap entered promiscuous mode [ 216.206986][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.219403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.247899][ T6238] tap0: tun_chr_ioctl cmd 1074025677 [ 216.253264][ T6238] tap0: linktype set to 1 [ 221.813799][ T6324] ±ÿ: renamed from team_slave_1 [ 221.982919][ T6321] device syzkaller0 entered promiscuous mode [ 222.007930][ T6319] syzkaller0: mtu less than device minimum [ 222.810599][ T6374] IPv6: pim6reg1: Disabled Multicast RS [ 222.817718][ T6382] @0Ù: renamed from bond_slave_1 [ 223.270205][ T6407] device wg2 left promiscuous mode [ 223.350605][ T6407] device dummy0 left promiscuous mode [ 226.163098][ T6519] device veth0_vlan left promiscuous mode [ 226.273319][ T6519] device veth0_vlan entered promiscuous mode [ 226.500771][ T6537] device wg2 left promiscuous mode [ 227.645783][ T6572] device syzkaller0 entered promiscuous mode [ 228.885276][ T6636] device syzkaller0 entered promiscuous mode [ 229.084747][ T28] audit: type=1400 audit(1794302224.172:167): avc: denied { create } for pid=6635 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 229.114660][ T6636] device ip6gre0 entered promiscuous mode [ 233.566897][ T6674] device syzkaller0 entered promiscuous mode [ 233.594092][ T6678] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 235.305724][ T6765] pimreg: tun_chr_ioctl cmd 35108 [ 235.827802][ T6806] device wg2 entered promiscuous mode [ 236.435293][ T6839] device syzkaller0 entered promiscuous mode [ 236.604037][ T6872] device syzkaller0 entered promiscuous mode [ 236.727756][ T6881] device syzkaller0 entered promiscuous mode [ 237.355140][ T6954] device syzkaller0 entered promiscuous mode [ 237.942157][ T28] audit: type=1400 audit(1794302233.032:168): avc: denied { create } for pid=6995 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 244.776115][ T7132] device pim6reg1 entered promiscuous mode [ 250.984010][ T7386] cgroup: fork rejected by pids controller in /syz1 [ 251.004638][ T7451] device veth0_vlan left promiscuous mode [ 251.036794][ T7451] device veth0_vlan entered promiscuous mode [ 251.812024][ T7521] device syzkaller0 entered promiscuous mode [ 252.023181][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 252.036582][ T7547] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 252.155706][ T7546] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 252.707638][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.691566][ T7642] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.083626][ T7642] device syzkaller0 entered promiscuous mode [ 255.275593][ T7649] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.286976][ T7649] device syzkaller0 entered promiscuous mode [ 256.682327][ T28] audit: type=1400 audit(1794302251.772:169): avc: denied { create } for pid=7741 comm="syz.4.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.012321][ T7831] device sit0 left promiscuous mode [ 260.473259][ T7853] device veth0_vlan left promiscuous mode [ 260.490512][ T7853] device veth0_vlan entered promiscuous mode [ 260.520609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.532525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.557215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.309993][ T7887] device syzkaller0 entered promiscuous mode [ 264.618944][ T28] audit: type=1400 audit(1794302259.702:170): avc: denied { ioctl } for pid=7942 comm="syz.4.1776" path="pid:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 264.946284][ T7980] device syzkaller0 entered promiscuous mode [ 266.084859][ T8039] device veth0_vlan left promiscuous mode [ 266.094406][ T8039] device veth0_vlan entered promiscuous mode [ 266.124963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.145815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.189756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.409939][ T8093] device syzkaller0 entered promiscuous mode [ 266.586046][ T8097] device wg2 left promiscuous mode [ 271.461437][ T8097] device wg2 entered promiscuous mode [ 272.937681][ T8256] device syzkaller0 entered promiscuous mode [ 273.140299][ T8260] device wg2 left promiscuous mode [ 273.174684][ T8260] device wg2 entered promiscuous mode [ 273.191400][ T8262] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 273.197552][ T8262] syzkaller0: linktype set to 778 [ 273.278640][ T8262] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 275.289067][ T8337] device syzkaller0 entered promiscuous mode [ 276.839865][ T8365] device syzkaller0 entered promiscuous mode [ 278.091335][ T8387] device team_slave_0 entered promiscuous mode [ 278.117650][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.170510][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.371240][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.428094][ T8479] device team_slave_1 left promiscuous mode [ 280.434234][ T8479] bridge0: port 3(team_slave_1) entered disabled state [ 280.445881][ T8479] device bridge_slave_1 left promiscuous mode [ 280.462313][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.492862][ T8479] device bridge_slave_0 left promiscuous mode [ 280.502569][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.871363][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 280.889701][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 280.900997][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 281.173234][ T8536] device dummy0 entered promiscuous mode [ 281.354035][ T8558] device syzkaller0 entered promiscuous mode [ 281.876881][ T8605] device veth1_macvtap left promiscuous mode [ 281.906445][ T8605] device macsec0 entered promiscuous mode [ 282.067302][ T8613] device veth1_macvtap left promiscuous mode [ 282.096843][ T8613] device veth1_macvtap entered promiscuous mode [ 282.114253][ T8613] device macsec0 entered promiscuous mode [ 282.129280][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.291219][ T8627] -: renamed from syzkaller0 [ 282.356295][ T8636] device macsec0 left promiscuous mode [ 282.382994][ T8636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.625164][ T8714] device veth1_macvtap left promiscuous mode [ 286.654890][ T8714] device macsec0 entered promiscuous mode [ 290.180511][ T28] audit: type=1400 audit(1794302285.272:171): avc: denied { create } for pid=8940 comm="syz.1.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.337195][ T9211] device syzkaller0 entered promiscuous mode [ 299.642813][ T9283] device syzkaller0 entered promiscuous mode [ 299.886636][ T9286] device syzkaller0 entered promiscuous mode [ 301.698606][ T9342] device syzkaller0 left promiscuous mode [ 304.492165][ T28] audit: type=1400 audit(1794302299.582:172): avc: denied { create } for pid=9439 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.378158][ T9488] device syzkaller0 entered promiscuous mode [ 310.153641][ T9683] device wg2 left promiscuous mode [ 310.408839][ T9712] tap0: tun_chr_ioctl cmd 1074025673 [ 310.474218][ T28] audit: type=1400 audit(1794302305.562:173): avc: denied { setattr } for pid=9707 comm="syz.1.2230" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.599005][ T9833] device syzkaller0 entered promiscuous mode [ 318.916194][ T9902] cgroup: fork rejected by pids controller in /syz4 [ 319.992296][ T28] audit: type=1400 audit(1794302315.082:174): avc: denied { create } for pid=10044 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 321.398296][T10126] device vlan1 entered promiscuous mode [ 321.545179][T10141] device syzkaller0 entered promiscuous mode [ 321.623502][T10144] device syzkaller0 entered promiscuous mode [ 322.188842][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.202755][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.209925][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.862629][T10241] device syzkaller0 entered promiscuous mode [ 326.482058][T10250] tap0: tun_chr_ioctl cmd 1074812118 [ 327.114351][T10367] tap0: tun_chr_ioctl cmd 1074025675 [ 327.122639][T10367] tap0: persist enabled [ 328.423609][T10420] ================================================================== [ 328.431735][T10420] BUG: KASAN: vmalloc-out-of-bounds in stack_map_get_build_id_offset+0x988/0x9b0 [ 328.440894][T10420] Write of size 4 at addr ffffc9000c5b1ef0 by task syz.2.2466/10420 [ 328.448902][T10420] [ 328.451278][T10420] CPU: 1 PID: 10420 Comm: syz.2.2466 Not tainted syzkaller #0 [ 328.458777][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 328.468863][T10420] Call Trace: [ 328.472173][T10420] [ 328.475134][T10420] __dump_stack+0x21/0x24 [ 328.479488][T10420] dump_stack_lvl+0x110/0x170 [ 328.484226][T10420] ? __cfi_dump_stack_lvl+0x8/0x8 [ 328.489273][T10420] ? stack_map_get_build_id_offset+0x988/0x9b0 [ 328.495484][T10420] print_address_description+0x71/0x200 [ 328.501073][T10420] print_report+0x4a/0x60 [ 328.505440][T10420] kasan_report+0x122/0x150 [ 328.509978][T10420] ? stack_map_get_build_id_offset+0x988/0x9b0 [ 328.516161][T10420] __asan_report_store4_noabort+0x17/0x20 [ 328.521903][T10420] stack_map_get_build_id_offset+0x988/0x9b0 [ 328.527913][T10420] ? _raw_spin_unlock+0x4c/0x70 [ 328.532788][T10420] ? __bpf_get_stackid+0x960/0x960 [ 328.537920][T10420] ? pcpu_freelist_pop+0xac/0xf0 [ 328.542917][T10420] ? __cfi_pcpu_freelist_pop+0x10/0x10 [ 328.548396][T10420] __bpf_get_stackid+0x5ac/0x960 [ 328.553455][T10420] bpf_get_stackid_pe+0x2ee/0x400 [ 328.558502][T10420] bpf_prog_43b50326510579ba+0x21/0x36 [ 328.564003][T10420] bpf_overflow_handler+0x3c7/0x5e0 [ 328.569227][T10420] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 328.574968][T10420] ? __this_cpu_preempt_check+0x13/0x20 [ 328.580566][T10420] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 328.586834][T10420] __perf_event_overflow+0x458/0x640 [ 328.592142][T10420] perf_swevent_event+0x243/0x440 [ 328.597204][T10420] ? perf_tp_event+0xa20/0xa20 [ 328.602011][T10420] ? is_bpf_text_address+0x177/0x190 [ 328.607322][T10420] ___perf_sw_event+0x3bf/0x500 [ 328.612197][T10420] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 328.618377][T10420] ? __cfi____perf_sw_event+0x10/0x10 [ 328.623795][T10420] ? kmem_cache_alloc+0x166/0x320 [ 328.628845][T10420] ? getname_flags+0xba/0x510 [ 328.633538][T10420] ? getname+0x19/0x20 [ 328.637624][T10420] ? do_sys_openat2+0xeb/0x820 [ 328.642412][T10420] ? __x64_sys_openat+0x136/0x160 [ 328.647468][T10420] ? x64_sys_call+0x783/0x9a0 [ 328.652180][T10420] ? do_syscall_64+0x4c/0xa0 [ 328.656789][T10420] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.662879][T10420] __perf_sw_event+0x134/0x270 [ 328.667667][T10420] do_user_addr_fault+0xfe9/0x1030 [ 328.672815][T10420] exc_page_fault+0x51/0xb0 [ 328.677342][T10420] asm_exc_page_fault+0x27/0x30 [ 328.682215][T10420] RIP: 0010:strncpy_from_user+0xd7/0x2c0 [ 328.687875][T10420] Code: 89 f6 e8 cc 28 e1 fe 49 83 fe 07 0f 86 a5 00 00 00 4c 89 75 c8 49 c7 c6 f8 ff ff ff 45 31 ff 4c 89 65 c0 4c 89 6d d0 4d 89 fd <4b> 8b 1c 3c 48 b8 ff fe fe fe fe fe fe fe 4c 8d 3c 03 49 89 dc 49 [ 328.707500][T10420] RSP: 0018:ffffc9000c42fcb8 EFLAGS: 00050246 [ 328.713582][T10420] RAX: ffffffff82904e14 RBX: 0000000000000fe0 RCX: ffff88812afb5100 [ 328.721571][T10420] RDX: 0000000000000002 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 328.729572][T10420] RBP: ffffc9000c42fd00 R08: ffffea0004717207 R09: 1ffffd40008e2e40 [ 328.737563][T10420] R10: dffffc0000000000 R11: fffff940008e2e41 R12: 0000000000000000 [ 328.745553][T10420] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 328.753570][T10420] ? strncpy_from_user+0xb4/0x2c0 [ 328.758625][T10420] ? strncpy_from_user+0xb4/0x2c0 [ 328.763674][T10420] getname_flags+0xf5/0x510 [ 328.768199][T10420] getname+0x19/0x20 [ 328.772109][T10420] do_sys_openat2+0xeb/0x820 [ 328.776726][T10420] ? __se_sys_futex+0x136/0x310 [ 328.781593][T10420] ? do_sys_open+0xe0/0xe0 [ 328.786029][T10420] ? __this_cpu_preempt_check+0x13/0x20 [ 328.791629][T10420] ? xfd_validate_state+0x70/0x150 [ 328.796771][T10420] __x64_sys_openat+0x136/0x160 [ 328.801792][T10420] x64_sys_call+0x783/0x9a0 [ 328.806346][T10420] do_syscall_64+0x4c/0xa0 [ 328.810784][T10420] ? clear_bhb_loop+0x30/0x80 [ 328.815487][T10420] ? clear_bhb_loop+0x30/0x80 [ 328.820189][T10420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.826107][T10420] RIP: 0033:0x7f9b41ba8f19 [ 328.830568][T10420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.850189][T10420] RSP: 002b:00007f9b42b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 328.858616][T10420] RAX: ffffffffffffffda RBX: 00007f9b41e25fa0 RCX: 00007f9b41ba8f19 [ 328.866609][T10420] RDX: 00000000000026e1 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 328.874600][T10420] RBP: 00007f9b41c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 328.882590][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.890575][T10420] R13: 00007f9b41e26038 R14: 00007f9b41e25fa0 R15: 00007ffeee554558 [ 328.898572][T10420] [ 328.901627][T10420] [ 328.903963][T10420] The buggy address belongs to a 17-page vmalloc region starting at 0xffffc9000c5a1000 allocated at prealloc_elems_and_freelist+0x8a/0x1e0 [ 328.918149][T10420] The buggy address belongs to the physical page: [ 328.924573][T10420] page:ffffea0004e312c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x138c4b [ 328.934835][T10420] flags: 0x4000000000000000(zone=1) [ 328.940061][T10420] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 328.948658][T10420] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 328.957256][T10420] page dumped because: kasan: bad access detected [ 328.963705][T10420] page_owner tracks the page as allocated [ 328.969436][T10420] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x506dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_ZERO|__GFP_ACCOUNT), pid 10420, tgid 10419 (syz.2.2466), ts 328412198921, free_ts 328350585250 [ 328.990934][T10420] post_alloc_hook+0x1f5/0x210 [ 328.995755][T10420] prep_new_page+0x1c/0x110 [ 329.000280][T10420] get_page_from_freelist+0x2ca9/0x2d20 [ 329.005850][T10420] __alloc_pages+0x1fa/0x610 [ 329.010472][T10420] __vmalloc_node_range+0x8ca/0x1440 [ 329.015791][T10420] bpf_map_area_alloc+0xd7/0xe0 [ 329.020664][T10420] prealloc_elems_and_freelist+0x8a/0x1e0 [ 329.026431][T10420] stack_map_alloc+0x398/0x520 [ 329.031235][T10420] map_create+0x467/0xcf0 [ 329.035585][T10420] __sys_bpf+0x34e/0x850 [ 329.039853][T10420] __x64_sys_bpf+0x7c/0x90 [ 329.044288][T10420] x64_sys_call+0x488/0x9a0 [ 329.048813][T10420] do_syscall_64+0x4c/0xa0 [ 329.053250][T10420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.059159][T10420] page last free stack trace: [ 329.063868][T10420] free_unref_page_prepare+0x81b/0x820 [ 329.069545][T10420] free_unref_page+0x93/0x530 [ 329.074437][T10420] __free_pages+0x67/0x100 [ 329.078878][T10420] free_pages+0x82/0x90 [ 329.083053][T10420] tlb_finish_mmu+0x2d1/0x380 [ 329.087743][T10420] exit_mmap+0x41d/0xc10 [ 329.092021][T10420] __mmput+0x92/0x340 [ 329.096022][T10420] mmput+0x4b/0x150 [ 329.099854][T10420] do_exit+0xa62/0x29f0 [ 329.104053][T10420] do_group_exit+0x21b/0x2e0 [ 329.108661][T10420] get_signal+0x167c/0x1700 [ 329.113184][T10420] arch_do_signal_or_restart+0xd1/0x11c0 [ 329.118833][T10420] exit_to_user_mode_loop+0x7a/0xb0 [ 329.124060][T10420] exit_to_user_mode_prepare+0x87/0xd0 [ 329.129547][T10420] syscall_exit_to_user_mode+0x1a/0x30 [ 329.135023][T10420] do_syscall_64+0x58/0xa0 [ 329.139454][T10420] [ 329.141794][T10420] Memory state around the buggy address: [ 329.147432][T10420] ffffc9000c5b1d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.155583][T10420] ffffc9000c5b1e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.163661][T10420] >ffffc9000c5b1e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f8 [ 329.171743][T10420] ^ [ 329.179481][T10420] ffffc9000c5b1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.187555][T10420] ffffc9000c5b1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 329.195622][T10420] ================================================================== [ 329.203685][T10420] Disabling lock debugging due to kernel taint [ 329.219223][ T28] audit: type=1400 audit(1794302324.312:175): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 329.261294][ T28] audit: type=1400 audit(1794302324.312:176): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.283000][ T28] audit: type=1400 audit(1794302324.312:177): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.300421][ T28] audit: type=1400 audit(1794302324.312:178): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.351868][ T28] audit: type=1400 audit(1794302324.312:179): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 330.372782][ T28] audit: type=1400 audit(1794302324.312:180): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 330.395751][ T28] audit: type=1400 audit(1794302324.312:181): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1