last executing test programs: 3.817997713s ago: executing program 4 (id=19414): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 3.817173933s ago: executing program 4 (id=19415): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.656495096s ago: executing program 3 (id=19432): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60e041, 0x0) 2.523023403s ago: executing program 3 (id=19433): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="056a44200e00", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100072c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe1603fe80000020006558845013", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.459085256s ago: executing program 3 (id=19437): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8d, 0x2a}, 0x5901, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf59}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e9042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000001c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x8, 0x2, 0x1401, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000000000000000000000000000181200004ede4bdfe862a77a693b3b6f9cf66b85c71f55531fb47290de19370d9c8cbfc327fac79f2a32cd3e4947bafb37c6db178f1ef8587fa995c88611b67dddc1247651adffa5cbc2f7b7d50d1ec5f2cf95393175413a799ea728d28c", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', @multicast}) (async, rerun: 64) write$cgroup_devices(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) (rerun: 64) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x1f, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg(r5, &(0x7f0000000e00)={&(0x7f0000000780)=@nl, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/114, 0x72}, {&(0x7f0000000940)=""/100, 0x64}, {&(0x7f0000000a80)=""/182, 0xb6}, {&(0x7f0000000b40)=""/14, 0xe}, {&(0x7f0000000b80)=""/186, 0xba}, {&(0x7f0000000c40)=""/55, 0x37}], 0x6, &(0x7f0000000d00)=""/218, 0xda}, 0x0) 2.262963285s ago: executing program 4 (id=19438): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r13, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], 0x0, 0x26}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2.024443246s ago: executing program 1 (id=19447): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x3, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x500, 0x2}, 0x1265, 0x6, 0x0, 0x8, 0xffffffffffffbbfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c0000000000004}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x3, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x500, 0x2}, 0x1265, 0x6, 0x0, 0x8, 0xffffffffffffbbfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c0000000000004}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0xa}, 0x2288, 0x0, 0xfffffffe, 0xd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0xa}, 0x2288, 0x0, 0xfffffffe, 0xd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xf7ffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0x8}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0x8}, 0x10}, 0x94) 1.992709607s ago: executing program 1 (id=19448): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x10, 0x8001, 0x10, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.93917226s ago: executing program 0 (id=19449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'rose0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'rose0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c4408000bb7f1a00c690feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x85, &(0x7f0000000100)=""/133}, 0x94) 1.92551875s ago: executing program 0 (id=19451): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x10000) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xbdcf) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40003, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x1f) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xae31cbdd19173c73, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.647065714s ago: executing program 0 (id=19455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$cgroup_devices(r4, 0x0, 0xffdd) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f0000007600004a4a03538c62000000000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034"], 0x0, 0x4e}, 0x28) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x20000000000000a1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x3, 0x23, 0x9}]}) 1.527226599s ago: executing program 2 (id=19456): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711823000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1d, '\x00', r3, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r2, 0x6, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x1}, {0x0, 0x2, 0x10, 0x8}, {0x1, 0x2, 0xf, 0xc}, {0x4, 0x2, 0x3, 0xb}, {0x0, 0x1, 0x10, 0x5}, {0x1, 0x9, 0xb, 0x7}], 0x10, 0xfffffff8}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0xc) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(r11) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r12, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r13}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00', 0x2000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r14, 0xa0001f98, 0x15, 0x0, &(0x7f0000000280)="f2640000000000000000000000006fb16b506dd4cf", 0x0, 0x2f09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe43, 0x0, 0x0, 0x0}, 0x94) 1.50475803s ago: executing program 2 (id=19457): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000000c0)}, 0x20) (async) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x7, 0x0, 0x0, 0x4534ef80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x875e7ee22d11c930}, 0x1904, 0x9, 0xa, 0x6, 0xeffffffffdf7bbfe, 0x9, 0x5, 0x0, 0xb, 0x0, 0x3}, 0x0, 0x12, 0xffffffffffffffff, 0xa) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) close(r0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (rerun: 64) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000071194200000000008510000002000000850000000500000095000000000000009500a50500000000", @ANYRESHEX=r1, @ANYRES8=r3, @ANYRES16=r2, @ANYRES64=r4, @ANYRES64=r0, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 1.437279633s ago: executing program 3 (id=19458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r0, 0x0, &(0x7f0000000380)=""/243}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r2, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRES32=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r8, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="1efbf458d41fcd1d56ee9110c997797f268e5a787086ce0b090064b96051caa217649849d234c649886d", &(0x7f0000000b00)=""/129}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000040)}, 0x20) recvmsg$unix(r1, &(0x7f0000000ac0)={&(0x7f00000000c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000940)=""/93, 0x5d}], 0x7, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x10002) 1.436191293s ago: executing program 0 (id=19459): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800df00b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x97, 0x97, 0x5, [@const={0xa, 0x0, 0x0, 0xa, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x40, 0x7e}, {0x5, 0x7, 0x6}, {0x3, 0x2, 0x1}], "3f0fd0"}, @enum64={0x9, 0x4, 0x0, 0x13, 0x0, 0x8, [{0xf, 0x4, 0x5}, {0xa, 0x6a10, 0x2}, {0x7, 0x2, 0x80000000}, {0x10, 0x6, 0x6}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0]}}, &(0x7f0000001100)=""/79, 0xb5, 0x4f, 0x0, 0x1c00}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0xd5ee, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000140)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1c, 0x24, 0x8, 0xc}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x36044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x6, 0x3}, 0x19718, 0xc8, 0x0, 0x0, 0x9, 0x0, 0xbb, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) 1.433346443s ago: executing program 2 (id=19460): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) socketpair(0x21, 0x1, 0xfffffffe, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, r0, 0x2c, 0x2000, 0x0, @value=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000100)="7444cfcc1c87c9fea08ae1ec0aa09d86785ec90042a4e1f9c500a3e2d5d387d83da3f2c584e31a471447b627acb9772aa2432e5b", &(0x7f0000000140)=""/11, &(0x7f0000000180)="9f2f3dade5c46f3f9446b99494b4453114f341cf4e738011e445f81b44161807b5cbeaa89e70c2b6a31c7ea6aa653a9025e757e62400a0da91743c37331ecd0caad35d5b0ecefbf8fbe48f315c48f7c529942cc2b6327b0362981c03addaefc2c579979e6434f1abae3962c3365ead3b986fecc0df6894213065c662c69bc3046812bea8c41b35efd831c766221c0e69e03d3a95", &(0x7f0000000240)="19d3ba7ee4dea6dd5c35e3a7ae5005eb58ca8f555a5314330258c314ce6dad176d2854715656b24904dc5816d297eada1121b4e61535f6a32f05f19c3b04ca89f30fb9625308f631049db38cf9025d18b9bd62251a79ee6713c7a7f16fe33753b42f978c2f1514cd9ba9bd9f6e65807e3b3105093d86dab0bd6638ad983a1a0eca9bfd369d856af9fc2191feadab85b087a28d1cdba688d1ec2595a64fddfaf9a65fd24e294f70127b211cc7592590d29186a6deec9c811acf7d15c1bb64", 0x0, r0, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x3, [{0x1, 0x1, 0x3}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61, 0x462f4e88a55e70ca, 0x5f, 0x62, 0x30]}}, &(0x7f0000000980)=""/255, 0x53, 0xff, 0x1, 0x6}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x23, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x14cf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x684, 0x77, &(0x7f0000000580)=""/119, 0x0, 0xc, '\x00', r3, @sched_cls=0x36, r4, 0x8, &(0x7f0000000ac0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0xc, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r0, r0, r0]}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c80)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000cc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0xceca, '\x00', r3, r4, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x14, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x0, 0x1, 0x7, 0x50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x3, 0x25, &(0x7f0000000e40)=""/37, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000e80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x5, 0x1, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[r0, r2, r8, r2, r2], &(0x7f0000000fc0)=[{0x0, 0x4, 0x3, 0x6}], 0x10, 0x8}, 0x94) socketpair(0x1f, 0x4, 0x10000, &(0x7f00000010c0)) perf_event_open(&(0x7f0000001140)={0x0, 0x80, 0x7, 0x1, 0x71, 0x54, 0x0, 0xd, 0xd45, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000001100), 0x4}, 0x34c1, 0x2, 0x3, 0x6, 0xa7d, 0x0, 0x8cdf, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x7, r0, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000011c0)={'vlan1\x00', @multicast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r6, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)=r5}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x10, r7}, 0x18) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@struct={0x8, 0x5, 0x0, 0x4, 0x1, 0x9, [{0x7, 0x5, 0xd43}, {0x7, 0x5, 0xc}, {0x3, 0x4}, {0xa, 0x0, 0x1}, {0xd, 0x5, 0x2}]}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f]}}, &(0x7f0000001500)=""/4096, 0x7e, 0x1000, 0x1, 0x2, 0x10000, @value=r0}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=@base={0x11, 0x0, 0x1, 0x80, 0x1001, r2, 0xa, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0x18, 0x1d, &(0x7f0000001340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd62}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000001440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r3, 0x0, r11, 0x8, &(0x7f0000002540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002580)={0x2, 0xf, 0x4, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002640)=[r8, r12, r2, r2, r8], 0x0, 0x10, 0x1a2}, 0x94) r13 = openat$cgroup_ro(r0, &(0x7f0000002740)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r13, 0x800454dd, &(0x7f0000002780)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002900)={r12, &(0x7f00000027c0)="15295845778e7060ba8db36a7ed5b81e5f40fe6ad1a9545dd5f0", &(0x7f0000002800)=""/253}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002940)=r9, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000002980)='GPL\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000029c0)='%\x00') write$cgroup_subtree(r0, &(0x7f0000002a00)={[{0x2d, 'cpuset'}, {0x6, 'net'}, {0x2d, 'devices'}, {0x2b, 'net'}, {0x2d, 'net_prio'}]}, 0x25) 1.430727543s ago: executing program 0 (id=19461): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001000), 0x8) recvmsg$unix(r2, 0x0, 0x14100) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) openat$cgroup_ro(r3, &(0x7f0000001600)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="e917b5688896bc5419b7db4e47c3e990ded986241879ea1ba856f8438b7b3da1e985b97bc7487454b7d4d406f66c45ae6a8f137e2d02127cc434ffad4d20f44bc1eb5b8b02c631deda3a47dd9741"], 0x50) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000003000), 0x201, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff26, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0}, 0x94) 1.376150526s ago: executing program 2 (id=19462): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000400)=0x20000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500)=0x2000000, &(0x7f0000000440)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe4f) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 1.251583542s ago: executing program 4 (id=19463): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000006a7f00"/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000006a7f00"/28], 0x50) close(r0) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x3b, 0x6, 0x4, 0x4, 0x0, 0xb5, 0x62844, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x7f, 0xff}, 0x114000, 0xfffffffffffffffc, 0x40, 0x0, 0x4, 0x8, 0x7fff, 0x0, 0x6, 0x0, 0xafab}, 0xffffffffffffffff, 0xe, r0, 0x1) (async) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x3b, 0x6, 0x4, 0x4, 0x0, 0xb5, 0x62844, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x7f, 0xff}, 0x114000, 0xfffffffffffffffc, 0x40, 0x0, 0x4, 0x8, 0x7fff, 0x0, 0x6, 0x0, 0xafab}, 0xffffffffffffffff, 0xe, r0, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000280)={0x1, 0x0, [0x0]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f00000002c0)="c4b594f9347e78a809a80ca8e064bfbcd0b39948dbebf9418a91bf09b20d0589f376e2c096e9eadfb467f21434f815d656b3fc47f1aaf22bd510f41066e8a78b75ab8000ba55dd95", &(0x7f0000002880)=""/4111}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.006719903s ago: executing program 1 (id=19464): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000040)=""/17, 0x2}, 0x20) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, r4, 0x4, r0}, 0x10) 866.31804ms ago: executing program 4 (id=19465): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000900000000000000000073010700000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000000000711832000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="a3694d5d110c9c926fa8def8ad3ca21be874a3584bab604c0bde1ced419fac32f65b16d1f18518d072ac1adcf4c3a2fa4e94e5e8ecf283a4046b98f02f82529ecfe48bf77419c0dccfb8904200f5c8bd49748d4ec03dfb0124012f9765e1cb7e03c1caf4ccea5be35f9d089fa12c2da74af3e12e07fdd7993a0be276618b704ad554b8fb7a01c2f28abecee1e06f721ca3e7765a01ee038b715f04bc9a61891ba1048f724674f511bfe3544f75f549045b417136cbd02996e03ebd980b3691a71c9618243708d69712ab0ade603b0f1e8604387217539ab6ac3b70524085dd6ef40944a8fde17da4675a15475a2c4214f2590785dcb68262", 0xf8}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r2]}}], 0x20, 0x20000000}, 0x4000800) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0)=0x1) 754.860184ms ago: executing program 1 (id=19466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) write$cgroup_devices(r0, 0x0, 0xfffffeff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1841034df53d6f0d37000000000000007110c100000000009500000000000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) close(r0) (async) write$cgroup_devices(r0, 0x0, 0xfffffeff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1841034df53d6f0d37000000000000007110c100000000009500000000000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) (async) 692.204558ms ago: executing program 4 (id=19467): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x47}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[], 0xa) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000300), 0xdb) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000024c0)={0xffffffffffffffff, 0x20, &(0x7f0000002480)={&(0x7f00000013c0)=""/4096, 0x1000, 0x0, &(0x7f00000023c0)=""/145, 0x91}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xdb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x1, 0x4d, 0x3, 0x0, 0x2, 0x80021, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xff, 0x6}, 0x2, 0x4, 0x9, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="0003ac000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r6, 0x400454cc, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 590.212113ms ago: executing program 1 (id=19468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1f8adaacd318660e, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r2}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x52, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000d1a50000000000007b8af8ff00000000bfa200000000000007020200f8ffffffb70300000800e36030a6ef00b704000000000000850000001f00000095000000291a4065991f3badd2657e95fc625317dc58d632776eed0e4b59adcd8767845052af15fb7887198f521bfa85ce08b6f50ec9f6b3ffddb1b2db6cf3daecb54079"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000040), &(0x7f0000000180)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x162b6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r11) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r10, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r11, 0x58, &(0x7f0000000840)}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r12, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="8c2e076879", 0x5}], 0x1}, 0x20004011) close(r13) recvmsg(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/193, 0xc1}], 0x1, 0x0, 0xffffffffffffff03}, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 589.229673ms ago: executing program 3 (id=19469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x7}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xf, 0xe22f, 0x400101, 0x21280, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000018000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000076000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x7b) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x1e, &(0x7f0000000340)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x1, 0x2, 0x18, 0x4}], &(0x7f00000006c0)='syzkaller\x00', 0x10, 0xfd, &(0x7f0000000700)=""/253, 0x41000, 0x18, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x8, 0x12}, 0x10, 0x0, r3, 0x7, &(0x7f0000000980)=[0x1, r6, r4, r1, 0x1, r7, r4, r1, r8], &(0x7f00000009c0)=[{0x2, 0x3, 0x0, 0x8}, {0x4, 0x3, 0xd}, {0x3, 0x4, 0x6, 0x1}, {0x0, 0x1, 0xf, 0x6}, {0x4, 0x1, 0x10, 0x5}, {0x0, 0x4, 0xc, 0x8}, {0x0, 0x2, 0x1, 0x8}], 0x10, 0xfffffe00}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 511.785796ms ago: executing program 2 (id=19470): syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x1000, &(0x7f0000000100)="85cb787310b210525f339efcdff8bc4444a8d6f1fe26a4052e4a51adf5d8b611ceabe126796b8a8f5b1f2f28bbd325d77cd5a353fb68c71750825a32d02d4a74d76da8721ab83a1d165b396fca8fbb19b26c78f4e7c2c5ea1395f3cfa115bef82581071e1017ff67f26ffefaa9a4aa28ba1feb1792ab05b693281d79334a737e473de007618e1d00bf23fcd5ee7d78c6c0391c274c2b78877933157caf2324c53506d9003e6b2b875240613931b2ff746c938c63de0384ff8f4c9cf4e92c566baf997914f09070bf478e799890", 0xcd, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="3d41e1a0b0c3d32cb92cc04bd223863ab6ee1b39f253f838e0d862a8c978b5fc6753f564204c77e9141e9d025ab26e76d2e5d2682704720a3485715f2d6c99dc15d84216b4b162b176f3e6c7d5848949da4bac5fa1874742acd645be04917bb7734bde2ed4ccb09812575493214cb20afa0beb12a6d168b468a2f0dbc32e597c4f82d357554d045b30230acf297f0659dbcc10da0c4bb599570821918ab220014bb437524372a049131772f68561674f028f319c7be1d1532bed40ba91cb03ad267af15713505e983c9bcd2ee9") perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x46, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x251, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x4}, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x8, 0x1, 0x0, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000180)=r8) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000010000000000000080000000850000000500000018110000a9983c192c4e97be53152e561aec7e4114b1bb9e5066c3bde2356e41f5630050eef46422e87ac270800faabf2f7d35d7ff1728f2c1cae837dd8ba9442a5baabe75a37a2d4a4a98a81318c7d4aabee02267a2ee244df878d00fd22e6f83cd551e78f71410acc19bd618d1f28170e8199ff199e90b168f73d9d0cfd4119eb55a8516b91a27011afb4667075e", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x9, 0x4, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xe}, 0x50) 271.208337ms ago: executing program 1 (id=19471): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000640), &(0x7f0000000800)='%pI4 \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79, 0x0, 0x0, 0x48}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000ffffffff0000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000008000000000000002a000e009500000000400000360a020021000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffbb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x88) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000001100000000000000", @ANYRES32=r2, @ANYBLOB="0700000000000000000000000000000000000000e192d4fd0e31050ae2f203ea63e85b2a1bff11e2447f0d51952c846851618cb2ada6fbb98c98372f774c1cff592b5e24b4c4ce56fc3943f11e5926dfea01a91794ba3a61572e6044615f5ceba4517b5f7cb6b17b360180b7859e7e024c599e5cc021771c1014d80a73b6e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)}, 0x20) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, 0x0, &(0x7f0000000900)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x6, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1d, '\x00', r4, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x6, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x1}, {0x0, 0x2, 0x10, 0x8}, {0x1, 0x2, 0xf, 0xc}, {0x4, 0x2, 0x3, 0xb}, {0x0, 0x1, 0x10, 0x5}, {0x1, 0x9, 0xb, 0x7}], 0x10, 0xfffffff8}, 0x94) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000380)={'veth1_to_team\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x6, 0x856, 0x7f, 0x280, r3, 0x1, '\x00', r8, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) 67.060077ms ago: executing program 2 (id=19472): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xff0e}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xf}, [@jmp={0x5, 0x1, 0xc, 0xb, 0x7, 0xffffffffffffffe0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x28, &(0x7f0000000140)=""/40, 0x41000, 0x20, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x1, 0xfff, 0x7}, 0x10, 0x0, r6, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x5, 0x2, 0x8}, {0x0, 0x2, 0xc, 0x9}], 0x10, 0x80000000}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r7, r8}, 0xc) 66.638137ms ago: executing program 3 (id=19473): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969f"], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000008000000000000", @ANYBLOB="0000fffffffffffffffffffffffd5f"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x26, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r1, r2, 0x0, 0x3, 0x5}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc088, 0x0, 0x0, 0x3, 0x4, 0x0, 0x10}, 0x0, 0x0, r4, 0x0) 0s ago: executing program 0 (id=19474): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000880), 0xd}, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, @perf_bp, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x39}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x9) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) close(0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): 0x18/0x18 [ 1462.420264][T11624] ? ___ratelimit+0x421/0x5a0 [ 1462.424950][T11624] ? _raw_spin_lock+0x94/0xf0 [ 1462.429614][T11624] dump_stack+0x15/0x1c [ 1462.433751][T11624] dump_header+0xd9/0x650 [ 1462.438075][T11624] oom_kill_process+0x1fa/0x2c0 [ 1462.442929][T11624] out_of_memory+0x879/0xce0 [ 1462.447516][T11624] ? unregister_oom_notifier+0x20/0x20 [ 1462.452967][T11624] ? mutex_lock_killable+0x92/0xf0 [ 1462.458071][T11624] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1462.464562][T11624] ? __alloc_pages_nodemask+0x29a/0x640 [ 1462.470103][T11624] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1462.475646][T11624] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1462.481186][T11624] ? _raw_spin_trylock_bh+0x150/0x150 [ 1462.486554][T11624] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1462.492094][T11624] try_charge+0xfa9/0x1580 [ 1462.496510][T11624] ? __memcg_kmem_charge+0x150/0x150 [ 1462.501789][T11624] ? __kasan_check_write+0x14/0x20 [ 1462.506898][T11624] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1462.512701][T11624] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1462.518239][T11624] __mem_cgroup_charge+0x148/0x6d0 [ 1462.523376][T11624] shmem_add_to_page_cache+0x569/0xe10 [ 1462.528832][T11624] ? shmem_alloc_page+0x380/0x380 [ 1462.533847][T11624] ? filemap_map_pages+0x10dc/0x13c0 [ 1462.539125][T11624] ? find_lock_entry+0x4b/0x200 [ 1462.543966][T11624] shmem_getpage_gfp+0x907/0x20f0 [ 1462.548988][T11624] shmem_write_begin+0xce/0x1b0 [ 1462.553833][T11624] generic_perform_write+0x2ce/0x540 [ 1462.559116][T11624] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1462.564918][T11624] ? file_remove_privs+0x590/0x590 [ 1462.570026][T11624] ? __kasan_check_write+0x14/0x20 [ 1462.575138][T11624] ? down_write+0xb2/0x120 [ 1462.579548][T11624] __generic_file_write_iter+0x24b/0x480 [ 1462.585178][T11624] ? generic_write_checks+0x3df/0x480 [ 1462.590542][T11624] generic_file_write_iter+0xa9/0x1d0 [ 1462.595916][T11624] __kernel_write+0x5a5/0x9d0 [ 1462.600585][T11624] ? vfs_read+0xa50/0xa50 [ 1462.604913][T11624] ? populate_vma_page_range+0xf0/0xf0 [ 1462.610365][T11624] ? cgroup_freezing+0x86/0xb0 [ 1462.615123][T11624] ? freezing_slow_path+0x10a/0x150 [ 1462.620310][T11624] dump_emit+0x255/0x380 [ 1462.624546][T11624] ? wait_for_dump_helpers+0x380/0x380 [ 1462.629992][T11624] ? freezing_slow_path+0x10a/0x150 [ 1462.635165][T11624] dump_user_range+0x6a/0x1a0 [ 1462.639819][T11624] elf_core_dump+0x27af/0x2c20 [ 1462.644561][T11624] ? load_elf_binary+0x2910/0x2910 [ 1462.649648][T11624] ? __fsnotify_parent+0x6db/0x7c0 [ 1462.654749][T11624] ? do_truncate+0x1c6/0x240 [ 1462.659315][T11624] ? putname+0xfe/0x150 [ 1462.663449][T11624] ? __kasan_check_read+0x11/0x20 [ 1462.668455][T11624] ? cgroup_freezing+0x86/0xb0 [ 1462.673198][T11624] ? freezing_slow_path+0x10a/0x150 [ 1462.678376][T11624] do_coredump+0x1be6/0x2910 [ 1462.682947][T11624] ? simple_acl_create+0x1c0/0x1c0 [ 1462.688036][T11624] ? debug_smp_processor_id+0x17/0x20 [ 1462.693392][T11624] ? kmem_cache_free+0x100/0x2d0 [ 1462.698301][T11624] ? ____kasan_slab_free+0x130/0x160 [ 1462.703560][T11624] ? get_signal+0xbdb/0x1300 [ 1462.708125][T11624] ? kmem_cache_free+0x100/0x2d0 [ 1462.713037][T11624] get_signal+0xf4c/0x1300 [ 1462.717429][T11624] arch_do_signal_or_restart+0xe7/0x11b0 [ 1462.723036][T11624] ? send_signal+0x3a5/0x580 [ 1462.727600][T11624] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1462.733204][T11624] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1462.738984][T11624] ? force_sig+0xca/0x120 [ 1462.743289][T11624] ? send_sig+0x70/0x70 [ 1462.747425][T11624] exit_to_user_mode_loop+0xa2/0xe0 [ 1462.752596][T11624] exit_to_user_mode_prepare+0x76/0xa0 [ 1462.758029][T11624] irqentry_exit_to_user_mode+0x9/0x10 [ 1462.763463][T11624] irqentry_exit+0x12/0x60 [ 1462.767863][T11624] exc_general_protection+0x1ca/0x250 [ 1462.773208][T11624] ? debug_smp_processor_id+0x17/0x20 [ 1462.778555][T11624] ? asm_exc_general_protection+0x8/0x30 [ 1462.784159][T11624] asm_exc_general_protection+0x1e/0x30 [ 1462.789677][T11624] RIP: 0033:0x7f010e0a2161 [ 1462.794070][T11624] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1462.813646][T11624] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1462.819688][T11624] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1462.827639][T11624] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1462.835587][T11624] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1462.843534][T11624] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1462.851478][T11624] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1463.029483][T12126] geneve0: tun_chr_ioctl cmd 1074025681 [ 1463.248529][T12140] device syzkaller0 entered promiscuous mode [ 1463.859309][T11624] memory: usage 307200kB, limit 307200kB, failcnt 62576 [ 1463.869242][T11624] memory+swap: usage 428400kB, limit 9007199254740988kB, failcnt 0 [ 1463.888480][T11624] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1463.919328][T11624] Memory cgroup stats for /syz0: [ 1463.919440][T11624] anon 270336 [ 1463.919440][T11624] file 310210560 [ 1463.919440][T11624] kernel_stack 0 [ 1463.919440][T11624] percpu 0 [ 1463.919440][T11624] sock 0 [ 1463.919440][T11624] shmem 310210560 [ 1463.919440][T11624] file_mapped 135168 [ 1463.919440][T11624] file_dirty 0 [ 1463.919440][T11624] file_writeback 0 [ 1463.919440][T11624] anon_thp 0 [ 1463.919440][T11624] inactive_anon 299388928 [ 1463.919440][T11624] active_anon 15003648 [ 1463.919440][T11624] inactive_file 0 [ 1463.919440][T11624] active_file 90112 [ 1463.919440][T11624] unevictable 0 [ 1463.919440][T11624] slab_reclaimable 0 [ 1463.919440][T11624] slab_unreclaimable 0 [ 1463.919440][T11624] slab 0 [ 1463.919440][T11624] workingset_refault_anon 132 [ 1463.919440][T11624] workingset_refault_file 23364 [ 1463.919440][T11624] workingset_activate_anon 0 [ 1463.919440][T11624] workingset_activate_file 12309 [ 1463.919440][T11624] workingset_restore_anon 0 [ 1463.919440][T11624] workingset_restore_file 7953 [ 1464.339967][T11624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11629,uid=0 [ 1464.382457][T11624] Memory cgroup out of memory: Killed process 11629 (syz.0.18133) total-vm:90732kB, anon-rss:1252kB, file-rss:53112kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1464.639445][T11589] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1464.800970][T11589] CPU: 1 PID: 11589 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1464.809928][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1464.819969][T11589] Call Trace: [ 1464.823250][T11589] __dump_stack+0x21/0x24 [ 1464.827567][T11589] dump_stack_lvl+0x1a7/0x208 [ 1464.832239][T11589] ? show_regs_print_info+0x18/0x18 [ 1464.837424][T11589] ? ___ratelimit+0x421/0x5a0 [ 1464.842087][T11589] ? _raw_spin_lock+0x94/0xf0 [ 1464.846753][T11589] dump_stack+0x15/0x1c [ 1464.850894][T11589] dump_header+0xd9/0x650 [ 1464.855214][T11589] oom_kill_process+0x1fa/0x2c0 [ 1464.860054][T11589] out_of_memory+0x879/0xce0 [ 1464.864638][T11589] ? unregister_oom_notifier+0x20/0x20 [ 1464.870087][T11589] ? mutex_lock_killable+0xdf/0xf0 [ 1464.875189][T11589] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1464.881677][T11589] ? __alloc_pages_nodemask+0x29a/0x640 [ 1464.887215][T11589] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1464.892749][T11589] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1464.898279][T11589] ? _raw_spin_trylock_bh+0x150/0x150 [ 1464.903640][T11589] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1464.909176][T11589] try_charge+0xfa9/0x1580 [ 1464.913846][T11589] ? __memcg_kmem_charge+0x150/0x150 [ 1464.919122][T11589] ? __kasan_check_write+0x14/0x20 [ 1464.924221][T11589] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1464.930017][T11589] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1464.935549][T11589] __mem_cgroup_charge+0x148/0x6d0 [ 1464.940656][T11589] shmem_add_to_page_cache+0x569/0xe10 [ 1464.946102][T11589] ? shmem_alloc_page+0x380/0x380 [ 1464.951119][T11589] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1464.956691][T11589] ? find_lock_entry+0x4b/0x200 [ 1464.961532][T11589] shmem_getpage_gfp+0x907/0x20f0 [ 1464.966569][T11589] shmem_write_begin+0xce/0x1b0 [ 1464.971413][T11589] generic_perform_write+0x2ce/0x540 [ 1464.976689][T11589] ? atime_needs_update+0x5b0/0x5b0 [ 1464.981878][T11589] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1464.987676][T11589] ? file_remove_privs+0x590/0x590 [ 1464.992776][T11589] ? __kasan_check_write+0x14/0x20 [ 1464.997875][T11589] ? down_write+0xb2/0x120 [ 1465.002290][T11589] __generic_file_write_iter+0x24b/0x480 [ 1465.007911][T11589] ? generic_write_checks+0x3df/0x480 [ 1465.013273][T11589] generic_file_write_iter+0xa9/0x1d0 [ 1465.018636][T11589] __kernel_write+0x5a5/0x9d0 [ 1465.023304][T11589] ? vfs_read+0xa50/0xa50 [ 1465.027626][T11589] ? populate_vma_page_range+0xf0/0xf0 [ 1465.033074][T11589] ? cgroup_freezing+0x86/0xb0 [ 1465.037827][T11589] ? freezing_slow_path+0x10a/0x150 [ 1465.043014][T11589] dump_emit+0x255/0x380 [ 1465.047247][T11589] ? wait_for_dump_helpers+0x380/0x380 [ 1465.052705][T11589] dump_user_range+0x6a/0x1a0 [ 1465.057375][T11589] elf_core_dump+0x27af/0x2c20 [ 1465.062128][T11589] ? load_elf_binary+0x2910/0x2910 [ 1465.067226][T11589] ? __fsnotify_parent+0x6db/0x7c0 [ 1465.072333][T11589] ? do_truncate+0x1c6/0x240 [ 1465.076917][T11589] ? putname+0xfe/0x150 [ 1465.081067][T11589] ? __kasan_check_read+0x11/0x20 [ 1465.086084][T11589] ? cgroup_freezing+0x86/0xb0 [ 1465.090834][T11589] ? freezing_slow_path+0x10a/0x150 [ 1465.096019][T11589] do_coredump+0x1be6/0x2910 [ 1465.100606][T11589] ? simple_acl_create+0x1c0/0x1c0 [ 1465.105706][T11589] ? debug_smp_processor_id+0x17/0x20 [ 1465.111066][T11589] ? kmem_cache_free+0x100/0x2d0 [ 1465.116002][T11589] ? ____kasan_slab_free+0x130/0x160 [ 1465.121287][T11589] ? get_signal+0xbdb/0x1300 [ 1465.125873][T11589] ? kmem_cache_free+0x100/0x2d0 [ 1465.130809][T11589] get_signal+0xf4c/0x1300 [ 1465.135230][T11589] arch_do_signal_or_restart+0xe7/0x11b0 [ 1465.140856][T11589] ? send_signal+0x3a5/0x580 [ 1465.145437][T11589] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1465.151057][T11589] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1465.156864][T11589] ? force_sig+0xca/0x120 [ 1465.161187][T11589] ? send_sig+0x70/0x70 [ 1465.165338][T11589] exit_to_user_mode_loop+0xa2/0xe0 [ 1465.170521][T11589] exit_to_user_mode_prepare+0x76/0xa0 [ 1465.175968][T11589] irqentry_exit_to_user_mode+0x9/0x10 [ 1465.181419][T11589] irqentry_exit+0x12/0x60 [ 1465.185822][T11589] exc_general_protection+0x1ca/0x250 [ 1465.191186][T11589] ? debug_smp_processor_id+0x17/0x20 [ 1465.196551][T11589] ? asm_exc_general_protection+0x8/0x30 [ 1465.202177][T11589] asm_exc_general_protection+0x1e/0x30 [ 1465.207710][T11589] RIP: 0033:0x7f010e0a2161 [ 1465.212113][T11589] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1465.231710][T11589] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1465.237766][T11589] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1465.245733][T11589] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1465.253702][T11589] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1465.261659][T11589] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1465.269620][T11589] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1466.347369][T11589] memory: usage 307200kB, limit 307200kB, failcnt 63452 [ 1466.371855][T11589] memory+swap: usage 424164kB, limit 9007199254740988kB, failcnt 0 [ 1466.395815][T11589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1466.411462][T11589] Memory cgroup stats for /syz0: [ 1466.411574][T11589] anon 270336 [ 1466.411574][T11589] file 310616064 [ 1466.411574][T11589] kernel_stack 0 [ 1466.411574][T11589] percpu 0 [ 1466.411574][T11589] sock 0 [ 1466.411574][T11589] shmem 310616064 [ 1466.411574][T11589] file_mapped 135168 [ 1466.411574][T11589] file_dirty 0 [ 1466.411574][T11589] file_writeback 0 [ 1466.411574][T11589] anon_thp 0 [ 1466.411574][T11589] inactive_anon 301223936 [ 1466.411574][T11589] active_anon 13381632 [ 1466.411574][T11589] inactive_file 69632 [ 1466.411574][T11589] active_file 0 [ 1466.411574][T11589] unevictable 0 [ 1466.411574][T11589] slab_reclaimable 0 [ 1466.411574][T11589] slab_unreclaimable 0 [ 1466.411574][T11589] slab 0 [ 1466.411574][T11589] workingset_refault_anon 198 [ 1466.411574][T11589] workingset_refault_file 24519 [ 1466.411574][T11589] workingset_activate_anon 0 [ 1466.411574][T11589] workingset_activate_file 12969 [ 1466.411574][T11589] workingset_restore_anon 0 [ 1466.411574][T11589] workingset_restore_file 8349 [ 1466.529248][T11589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11601,uid=0 [ 1466.581340][T11589] Memory cgroup out of memory: Killed process 11601 (syz.0.18133) total-vm:90600kB, anon-rss:1276kB, file-rss:49860kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1466.629859][T11627] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1466.669597][T11627] CPU: 0 PID: 11627 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1466.678548][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1466.688594][T11627] Call Trace: [ 1466.691873][T11627] __dump_stack+0x21/0x24 [ 1466.696194][T11627] dump_stack_lvl+0x1a7/0x208 [ 1466.700867][T11627] ? show_regs_print_info+0x18/0x18 [ 1466.706057][T11627] ? ___ratelimit+0x421/0x5a0 [ 1466.710728][T11627] ? _raw_spin_lock+0x94/0xf0 [ 1466.715391][T11627] dump_stack+0x15/0x1c [ 1466.719539][T11627] dump_header+0xd9/0x650 [ 1466.723859][T11627] oom_kill_process+0x1fa/0x2c0 [ 1466.728696][T11627] out_of_memory+0x879/0xce0 [ 1466.733279][T11627] ? unregister_oom_notifier+0x20/0x20 [ 1466.738725][T11627] ? mutex_lock_killable+0xdf/0xf0 [ 1466.743830][T11627] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1466.750323][T11627] ? __alloc_pages_nodemask+0x29a/0x640 [ 1466.755864][T11627] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1466.761394][T11627] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1466.766922][T11627] ? _raw_spin_trylock_bh+0x150/0x150 [ 1466.772285][T11627] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1466.777824][T11627] try_charge+0xfa9/0x1580 [ 1466.782233][T11627] ? __memcg_kmem_charge+0x150/0x150 [ 1466.787509][T11627] ? __kasan_check_write+0x14/0x20 [ 1466.792611][T11627] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1466.798403][T11627] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1466.803936][T11627] __mem_cgroup_charge+0x148/0x6d0 [ 1466.809036][T11627] shmem_add_to_page_cache+0x569/0xe10 [ 1466.814493][T11627] ? shmem_alloc_page+0x380/0x380 [ 1466.819503][T11627] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1466.825025][T11627] ? find_lock_entry+0x4b/0x200 [ 1466.829850][T11627] shmem_getpage_gfp+0x907/0x20f0 [ 1466.834851][T11627] shmem_write_begin+0xce/0x1b0 [ 1466.839678][T11627] generic_perform_write+0x2ce/0x540 [ 1466.844937][T11627] ? atime_needs_update+0x5b0/0x5b0 [ 1466.850112][T11627] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1466.855889][T11627] ? file_remove_privs+0x590/0x590 [ 1466.860977][T11627] ? __kasan_check_write+0x14/0x20 [ 1466.866061][T11627] ? down_write+0xb2/0x120 [ 1466.870454][T11627] __generic_file_write_iter+0x24b/0x480 [ 1466.876061][T11627] ? generic_write_checks+0x3df/0x480 [ 1466.881413][T11627] generic_file_write_iter+0xa9/0x1d0 [ 1466.886763][T11627] __kernel_write+0x5a5/0x9d0 [ 1466.891414][T11627] ? vfs_read+0xa50/0xa50 [ 1466.895721][T11627] ? populate_vma_page_range+0xf0/0xf0 [ 1466.901156][T11627] ? cgroup_freezing+0x86/0xb0 [ 1466.905896][T11627] ? freezing_slow_path+0x10a/0x150 [ 1466.911076][T11627] dump_emit+0x255/0x380 [ 1466.915295][T11627] ? wait_for_dump_helpers+0x380/0x380 [ 1466.920724][T11627] ? dump_user_range+0x13b/0x1a0 [ 1466.925635][T11627] dump_user_range+0x6a/0x1a0 [ 1466.930288][T11627] elf_core_dump+0x27af/0x2c20 [ 1466.935029][T11627] ? load_elf_binary+0x2910/0x2910 [ 1466.940114][T11627] ? __fsnotify_parent+0x6db/0x7c0 [ 1466.945207][T11627] ? do_truncate+0x1c6/0x240 [ 1466.949770][T11627] ? putname+0xfe/0x150 [ 1466.953903][T11627] ? __kasan_check_read+0x11/0x20 [ 1466.958903][T11627] ? cgroup_freezing+0x86/0xb0 [ 1466.963640][T11627] ? freezing_slow_path+0x10a/0x150 [ 1466.968813][T11627] do_coredump+0x1be6/0x2910 [ 1466.973385][T11627] ? simple_acl_create+0x1c0/0x1c0 [ 1466.978475][T11627] ? debug_smp_processor_id+0x17/0x20 [ 1466.983822][T11627] ? kmem_cache_free+0x100/0x2d0 [ 1466.988733][T11627] ? ____kasan_slab_free+0x130/0x160 [ 1466.993992][T11627] ? get_signal+0xbdb/0x1300 [ 1466.998561][T11627] ? kmem_cache_free+0x100/0x2d0 [ 1467.003476][T11627] get_signal+0xf4c/0x1300 [ 1467.007869][T11627] arch_do_signal_or_restart+0xe7/0x11b0 [ 1467.013476][T11627] ? send_signal+0x3a5/0x580 [ 1467.018039][T11627] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1467.023650][T11627] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1467.029430][T11627] ? force_sig+0xca/0x120 [ 1467.033731][T11627] ? send_sig+0x70/0x70 [ 1467.037863][T11627] exit_to_user_mode_loop+0xa2/0xe0 [ 1467.043036][T11627] exit_to_user_mode_prepare+0x76/0xa0 [ 1467.048474][T11627] irqentry_exit_to_user_mode+0x9/0x10 [ 1467.053903][T11627] irqentry_exit+0x12/0x60 [ 1467.058292][T11627] exc_general_protection+0x1ca/0x250 [ 1467.063635][T11627] ? debug_smp_processor_id+0x17/0x20 [ 1467.068982][T11627] ? asm_exc_general_protection+0x8/0x30 [ 1467.074588][T11627] asm_exc_general_protection+0x1e/0x30 [ 1467.080106][T11627] RIP: 0033:0x7f010e0a2161 [ 1467.084496][T11627] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1467.104076][T11627] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1467.110121][T11627] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1467.118068][T11627] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1467.126015][T11627] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1467.133959][T11627] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1467.141903][T11627] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1467.970107][T11627] memory: usage 307160kB, limit 307200kB, failcnt 64134 [ 1467.986606][T11627] memory+swap: usage 413536kB, limit 9007199254740988kB, failcnt 0 [ 1468.000684][T11627] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1468.014927][T11627] Memory cgroup stats for /syz0: [ 1468.015046][T11627] anon 270336 [ 1468.015046][T11627] file 312102912 [ 1468.015046][T11627] kernel_stack 0 [ 1468.015046][T11627] percpu 0 [ 1468.015046][T11627] sock 0 [ 1468.015046][T11627] shmem 310210560 [ 1468.015046][T11627] file_mapped 1757184 [ 1468.015046][T11627] file_dirty 0 [ 1468.015046][T11627] file_writeback 0 [ 1468.015046][T11627] anon_thp 0 [ 1468.015046][T11627] inactive_anon 300756992 [ 1468.015046][T11627] active_anon 12029952 [ 1468.015046][T11627] inactive_file 339968 [ 1468.015046][T11627] active_file 1552384 [ 1468.015046][T11627] unevictable 0 [ 1468.015046][T11627] slab_reclaimable 0 [ 1468.015046][T11627] slab_unreclaimable 0 [ 1468.015046][T11627] slab 0 [ 1468.015046][T11627] workingset_refault_anon 198 [ 1468.015046][T11627] workingset_refault_file 25080 [ 1468.015046][T11627] workingset_activate_anon 0 [ 1468.015046][T11627] workingset_activate_file 13398 [ 1468.015046][T11627] workingset_restore_anon 0 [ 1468.015046][T11627] workingset_restore_file 8745 [ 1468.205467][T11627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11610,uid=0 [ 1468.410308][T11627] Memory cgroup out of memory: Killed process 11610 (syz.0.18133) total-vm:90732kB, anon-rss:1248kB, file-rss:45236kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1468.839256][T11608] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1469.034287][T11608] CPU: 0 PID: 11608 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1469.043243][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1469.053282][T11608] Call Trace: [ 1469.056560][T11608] __dump_stack+0x21/0x24 [ 1469.060878][T11608] dump_stack_lvl+0x1a7/0x208 [ 1469.065541][T11608] ? show_regs_print_info+0x18/0x18 [ 1469.070735][T11608] ? ___ratelimit+0x421/0x5a0 [ 1469.075400][T11608] ? _raw_spin_lock+0x94/0xf0 [ 1469.080065][T11608] dump_stack+0x15/0x1c [ 1469.084210][T11608] dump_header+0xd9/0x650 [ 1469.088531][T11608] oom_kill_process+0x1fa/0x2c0 [ 1469.093375][T11608] out_of_memory+0x879/0xce0 [ 1469.097957][T11608] ? unregister_oom_notifier+0x20/0x20 [ 1469.103405][T11608] ? mutex_lock_killable+0xdf/0xf0 [ 1469.108509][T11608] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1469.114995][T11608] ? __alloc_pages_nodemask+0x29a/0x640 [ 1469.120536][T11608] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1469.126070][T11608] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1469.131606][T11608] ? _raw_spin_trylock_bh+0x150/0x150 [ 1469.136965][T11608] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1469.142534][T11608] try_charge+0xfa9/0x1580 [ 1469.146944][T11608] ? __memcg_kmem_charge+0x150/0x150 [ 1469.152206][T11608] ? __kasan_check_write+0x14/0x20 [ 1469.157316][T11608] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1469.163099][T11608] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1469.168615][T11608] __mem_cgroup_charge+0x148/0x6d0 [ 1469.173703][T11608] shmem_add_to_page_cache+0x569/0xe10 [ 1469.179138][T11608] ? shmem_alloc_page+0x380/0x380 [ 1469.184140][T11608] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1469.189668][T11608] ? find_lock_entry+0x4b/0x200 [ 1469.194494][T11608] shmem_getpage_gfp+0x907/0x20f0 [ 1469.199510][T11608] shmem_write_begin+0xce/0x1b0 [ 1469.204341][T11608] generic_perform_write+0x2ce/0x540 [ 1469.209607][T11608] ? atime_needs_update+0x5b0/0x5b0 [ 1469.214789][T11608] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1469.220576][T11608] ? file_remove_privs+0x590/0x590 [ 1469.225665][T11608] ? __kasan_check_write+0x14/0x20 [ 1469.230895][T11608] ? down_write+0xb2/0x120 [ 1469.235307][T11608] __generic_file_write_iter+0x24b/0x480 [ 1469.240920][T11608] ? generic_write_checks+0x3df/0x480 [ 1469.246279][T11608] generic_file_write_iter+0xa9/0x1d0 [ 1469.251629][T11608] __kernel_write+0x5a5/0x9d0 [ 1469.256286][T11608] ? vfs_read+0xa50/0xa50 [ 1469.260599][T11608] ? populate_vma_page_range+0xf0/0xf0 [ 1469.266034][T11608] ? cgroup_freezing+0x86/0xb0 [ 1469.270773][T11608] ? freezing_slow_path+0x10a/0x150 [ 1469.275944][T11608] dump_emit+0x255/0x380 [ 1469.280163][T11608] ? wait_for_dump_helpers+0x380/0x380 [ 1469.285596][T11608] ? freezing_slow_path+0x10a/0x150 [ 1469.290767][T11608] dump_user_range+0x6a/0x1a0 [ 1469.295417][T11608] elf_core_dump+0x27af/0x2c20 [ 1469.300163][T11608] ? load_elf_binary+0x2910/0x2910 [ 1469.305250][T11608] ? __fsnotify_parent+0x6db/0x7c0 [ 1469.310347][T11608] ? do_truncate+0x1c6/0x240 [ 1469.314911][T11608] ? putname+0xfe/0x150 [ 1469.319046][T11608] ? __kasan_check_read+0x11/0x20 [ 1469.324045][T11608] ? cgroup_freezing+0x86/0xb0 [ 1469.328781][T11608] ? freezing_slow_path+0x10a/0x150 [ 1469.333954][T11608] do_coredump+0x1be6/0x2910 [ 1469.338552][T11608] ? simple_acl_create+0x1c0/0x1c0 [ 1469.343638][T11608] ? debug_smp_processor_id+0x17/0x20 [ 1469.348984][T11608] ? kmem_cache_free+0x100/0x2d0 [ 1469.353894][T11608] ? ____kasan_slab_free+0x130/0x160 [ 1469.359182][T11608] ? get_signal+0xbdb/0x1300 [ 1469.363750][T11608] ? kmem_cache_free+0x100/0x2d0 [ 1469.368662][T11608] get_signal+0xf4c/0x1300 [ 1469.373059][T11608] arch_do_signal_or_restart+0xe7/0x11b0 [ 1469.378669][T11608] ? send_signal+0x3a5/0x580 [ 1469.383236][T11608] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1469.388840][T11608] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1469.394623][T11608] ? force_sig+0xca/0x120 [ 1469.398928][T11608] ? send_sig+0x70/0x70 [ 1469.403063][T11608] exit_to_user_mode_loop+0xa2/0xe0 [ 1469.408235][T11608] exit_to_user_mode_prepare+0x76/0xa0 [ 1469.413670][T11608] irqentry_exit_to_user_mode+0x9/0x10 [ 1469.419111][T11608] irqentry_exit+0x12/0x60 [ 1469.423500][T11608] exc_general_protection+0x1ca/0x250 [ 1469.428846][T11608] ? debug_smp_processor_id+0x17/0x20 [ 1469.434191][T11608] ? asm_exc_general_protection+0x8/0x30 [ 1469.439800][T11608] asm_exc_general_protection+0x1e/0x30 [ 1469.445318][T11608] RIP: 0033:0x7f010e0a2161 [ 1469.449711][T11608] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1469.469299][T11608] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1469.475344][T11608] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1469.483290][T11608] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1469.491262][T11608] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1469.499210][T11608] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1469.507157][T11608] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1469.649233][T11608] memory: usage 307044kB, limit 307200kB, failcnt 64708 [ 1469.719266][T12257] device veth0_vlan left promiscuous mode [ 1469.729248][T11608] memory+swap: usage 412660kB, limit 9007199254740988kB, failcnt 0 [ 1469.737157][T11608] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1469.754236][T12257] device veth0_vlan entered promiscuous mode [ 1469.831450][T11608] Memory cgroup stats for /syz0: [ 1469.831575][T11608] anon 270336 [ 1469.831575][T11608] file 307507200 [ 1469.831575][T11608] kernel_stack 0 [ 1469.831575][T11608] percpu 0 [ 1469.831575][T11608] sock 0 [ 1469.831575][T11608] shmem 302641152 [ 1469.831575][T11608] file_mapped 4730880 [ 1469.831575][T11608] file_dirty 0 [ 1469.831575][T11608] file_writeback 540672 [ 1469.831575][T11608] anon_thp 0 [ 1469.831575][T11608] inactive_anon 294801408 [ 1469.831575][T11608] active_anon 10407936 [ 1469.831575][T11608] inactive_file 1462272 [ 1469.831575][T11608] active_file 3567616 [ 1469.831575][T11608] unevictable 0 [ 1469.831575][T11608] slab_reclaimable 0 [ 1469.831575][T11608] slab_unreclaimable 0 [ 1469.831575][T11608] slab 0 [ 1469.831575][T11608] workingset_refault_anon 198 [ 1469.831575][T11608] workingset_refault_file 26136 [ 1469.831575][T11608] workingset_activate_anon 0 [ 1469.831575][T11608] workingset_activate_file 14487 [ 1469.831575][T11608] workingset_restore_anon 0 [ 1469.831575][T11608] workingset_restore_file 9471 [ 1470.057518][T11608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11587,uid=0 [ 1470.159346][T12267] device wg2 entered promiscuous mode [ 1470.215355][T11608] Memory cgroup out of memory: Killed process 11587 (syz.0.18133) total-vm:90600kB, anon-rss:1264kB, file-rss:36056kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1470.471782][T12210] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1470.620736][T12291] device wg2 left promiscuous mode [ 1470.889105][T12210] CPU: 0 PID: 12210 Comm: syz-executor Tainted: G W syzkaller #0 [ 1470.898582][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1470.908633][T12210] Call Trace: [ 1470.911920][T12210] __dump_stack+0x21/0x24 [ 1470.916245][T12210] dump_stack_lvl+0x1a7/0x208 [ 1470.920911][T12210] ? show_regs_print_info+0x18/0x18 [ 1470.926097][T12210] ? ___ratelimit+0x421/0x5a0 [ 1470.930769][T12210] ? _raw_spin_lock+0x94/0xf0 [ 1470.935439][T12210] dump_stack+0x15/0x1c [ 1470.939590][T12210] dump_header+0xd9/0x650 [ 1470.943915][T12210] oom_kill_process+0x1fa/0x2c0 [ 1470.948758][T12210] out_of_memory+0x879/0xce0 [ 1470.953342][T12210] ? unregister_oom_notifier+0x20/0x20 [ 1470.958791][T12210] ? mutex_lock_killable+0xdf/0xf0 [ 1470.963898][T12210] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1470.970394][T12210] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1470.975939][T12210] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1470.981493][T12210] ? _raw_spin_trylock_bh+0x150/0x150 [ 1470.986865][T12210] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1470.992665][T12210] try_charge+0xfa9/0x1580 [ 1470.997081][T12210] ? __memcg_kmem_charge+0x150/0x150 [ 1471.002359][T12210] ? __alloc_pages_nodemask+0x29a/0x640 [ 1471.007910][T12210] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1471.013449][T12210] __mem_cgroup_charge+0x148/0x6d0 [ 1471.018555][T12210] wp_page_copy+0x273/0x15a0 [ 1471.023148][T12210] ? trace_spf_pte_lock+0x110/0x110 [ 1471.028346][T12210] do_wp_page+0x772/0xd00 [ 1471.032670][T12210] handle_pte_fault+0xbc3/0x3910 [ 1471.037606][T12210] handle_mm_fault+0xf86/0x1720 [ 1471.042454][T12210] ? can_reuse_spf_vma+0xe0/0xe0 [ 1471.047387][T12210] ? memset+0x35/0x40 [ 1471.051358][T12210] ? vmacache_update+0xb7/0x120 [ 1471.056190][T12210] ? find_vma+0x13b/0x150 [ 1471.060502][T12210] do_user_addr_fault+0x576/0xe20 [ 1471.065508][T12210] ? do_kern_addr_fault+0x80/0x80 [ 1471.070516][T12210] exc_page_fault+0x5a/0xc0 [ 1471.074993][T12210] asm_exc_page_fault+0x1e/0x30 [ 1471.079826][T12210] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1471.085518][T12210] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 1471.105115][T12210] RSP: 0018:ffffc90000b47f28 EFLAGS: 00050293 [ 1471.111159][T12210] RAX: 0000000000000349 RBX: 00007fffffffeffd RCX: 00005555813067d0 [ 1471.119108][T12210] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888138fdd000 [ 1471.127054][T12210] RBP: ffffc90000b47f48 R08: ffffffff86c37e53 R09: 1ffffffff0d86fca [ 1471.135003][T12210] R10: dffffc0000000000 R11: fffffbfff0d86fcb R12: 0000000000000000 [ 1471.142955][T12210] R13: 0000000000000000 R14: 00005555813067d0 R15: dffffc0000000000 [ 1471.150924][T12210] ? schedule_tail+0x94/0xc0 [ 1471.155489][T12210] ret_from_fork+0x8/0x30 [ 1471.159793][T12210] RIP: 0033:0x7f010e0cabd2 [ 1471.164188][T12210] Code: Unable to access opcode bytes at RIP 0x7f010e0caba8. [ 1471.171528][T12210] RSP: 002b:00007fff290e3560 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1471.179916][T12210] RAX: 0000000000000000 RBX: 00007fff290e3560 RCX: 00007f010e0cabd2 [ 1471.187864][T12210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1471.195809][T12210] RBP: 00007fff290e36ec R08: 0000000000000000 R09: 0000000000000001 [ 1471.203774][T12210] R10: 00005555813067d0 R11: 0000000000000246 R12: 0000000000000000 [ 1471.211719][T12210] R13: 0000000000000047 R14: 0000000000165bca R15: 00007fff290e3740 [ 1471.353686][T12210] memory: usage 307108kB, limit 307200kB, failcnt 64941 [ 1471.479304][T12305] device wg2 left promiscuous mode [ 1471.742700][T12210] memory+swap: usage 400316kB, limit 9007199254740988kB, failcnt 0 [ 1471.780088][T12210] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1471.795226][T12210] Memory cgroup stats for /syz0: [ 1471.795342][T12210] anon 270336 [ 1471.795342][T12210] file 312508416 [ 1471.795342][T12210] kernel_stack 0 [ 1471.795342][T12210] percpu 0 [ 1471.795342][T12210] sock 0 [ 1471.795342][T12210] shmem 312508416 [ 1471.795342][T12210] file_mapped 135168 [ 1471.795342][T12210] file_dirty 0 [ 1471.795342][T12210] file_writeback 0 [ 1471.795342][T12210] anon_thp 0 [ 1471.795342][T12210] inactive_anon 304345088 [ 1471.795342][T12210] active_anon 10002432 [ 1471.795342][T12210] inactive_file 229376 [ 1471.795342][T12210] active_file 86016 [ 1471.795342][T12210] unevictable 0 [ 1471.795342][T12210] slab_reclaimable 0 [ 1471.795342][T12210] slab_unreclaimable 0 [ 1471.795342][T12210] slab 0 [ 1471.795342][T12210] workingset_refault_anon 231 [ 1471.795342][T12210] workingset_refault_file 26664 [ 1471.795342][T12210] workingset_activate_anon 0 [ 1471.795342][T12210] workingset_activate_file 14982 [ 1471.795342][T12210] workingset_restore_anon 0 [ 1471.795342][T12210] workingset_restore_file 9999 [ 1471.959227][T12210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11617,uid=0 [ 1472.025363][T12210] Memory cgroup out of memory: Killed process 11617 (syz.0.18133) total-vm:90732kB, anon-rss:1248kB, file-rss:20504kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1472.551083][T11589] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1472.653351][T11589] CPU: 0 PID: 11589 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1472.662311][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1472.672353][T11589] Call Trace: [ 1472.675632][T11589] __dump_stack+0x21/0x24 [ 1472.679948][T11589] dump_stack_lvl+0x1a7/0x208 [ 1472.684609][T11589] ? show_regs_print_info+0x18/0x18 [ 1472.689794][T11589] ? ___ratelimit+0x421/0x5a0 [ 1472.694464][T11589] ? _raw_spin_lock+0x94/0xf0 [ 1472.699126][T11589] dump_stack+0x15/0x1c [ 1472.703268][T11589] dump_header+0xd9/0x650 [ 1472.707589][T11589] oom_kill_process+0x1fa/0x2c0 [ 1472.712436][T11589] out_of_memory+0x879/0xce0 [ 1472.717017][T11589] ? unregister_oom_notifier+0x20/0x20 [ 1472.722548][T11589] ? mutex_lock_killable+0x92/0xf0 [ 1472.727645][T11589] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1472.734130][T11589] ? __alloc_pages_nodemask+0x29a/0x640 [ 1472.739668][T11589] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1472.745210][T11589] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1472.750740][T11589] ? _raw_spin_trylock_bh+0x150/0x150 [ 1472.756097][T11589] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1472.761633][T11589] try_charge+0xfa9/0x1580 [ 1472.766050][T11589] ? __memcg_kmem_charge+0x150/0x150 [ 1472.771326][T11589] ? __kasan_check_write+0x14/0x20 [ 1472.776425][T11589] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1472.782216][T11589] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1472.787747][T11589] __mem_cgroup_charge+0x148/0x6d0 [ 1472.792844][T11589] shmem_add_to_page_cache+0x569/0xe10 [ 1472.798290][T11589] ? shmem_alloc_page+0x380/0x380 [ 1472.803302][T11589] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1472.808836][T11589] ? find_lock_entry+0x4b/0x200 [ 1472.813667][T11589] shmem_getpage_gfp+0x907/0x20f0 [ 1472.818662][T11589] shmem_write_begin+0xce/0x1b0 [ 1472.823488][T11589] generic_perform_write+0x2ce/0x540 [ 1472.828763][T11589] ? atime_needs_update+0x5b0/0x5b0 [ 1472.833950][T11589] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1472.839744][T11589] ? file_remove_privs+0x590/0x590 [ 1472.844862][T11589] ? __kasan_check_write+0x14/0x20 [ 1472.849961][T11589] ? down_write+0xb2/0x120 [ 1472.854367][T11589] __generic_file_write_iter+0x24b/0x480 [ 1472.859993][T11589] ? generic_write_checks+0x3df/0x480 [ 1472.865351][T11589] generic_file_write_iter+0xa9/0x1d0 [ 1472.870716][T11589] __kernel_write+0x5a5/0x9d0 [ 1472.875385][T11589] ? vfs_read+0xa50/0xa50 [ 1472.879701][T11589] ? irq_exit_rcu+0x9/0x10 [ 1472.884111][T11589] ? populate_vma_page_range+0xf0/0xf0 [ 1472.889564][T11589] ? cgroup_freezing+0x86/0xb0 [ 1472.894318][T11589] ? freezing_slow_path+0x10a/0x150 [ 1472.899506][T11589] dump_emit+0x255/0x380 [ 1472.903742][T11589] ? wait_for_dump_helpers+0x380/0x380 [ 1472.909196][T11589] dump_user_range+0x6a/0x1a0 [ 1472.913863][T11589] elf_core_dump+0x27af/0x2c20 [ 1472.918623][T11589] ? load_elf_binary+0x2910/0x2910 [ 1472.923725][T11589] ? __fsnotify_parent+0x6db/0x7c0 [ 1472.928837][T11589] ? do_truncate+0x1c6/0x240 [ 1472.933417][T11589] ? putname+0xfe/0x150 [ 1472.937565][T11589] ? __kasan_check_read+0x11/0x20 [ 1472.942584][T11589] ? cgroup_freezing+0x86/0xb0 [ 1472.947333][T11589] ? freezing_slow_path+0x10a/0x150 [ 1472.952521][T11589] do_coredump+0x1be6/0x2910 [ 1472.957104][T11589] ? simple_acl_create+0x1c0/0x1c0 [ 1472.962204][T11589] ? debug_smp_processor_id+0x17/0x20 [ 1472.967561][T11589] ? kmem_cache_free+0x100/0x2d0 [ 1472.972490][T11589] ? ____kasan_slab_free+0x130/0x160 [ 1472.977766][T11589] ? get_signal+0xbdb/0x1300 [ 1472.982342][T11589] ? kmem_cache_free+0x100/0x2d0 [ 1472.987273][T11589] get_signal+0xf4c/0x1300 [ 1472.991685][T11589] arch_do_signal_or_restart+0xe7/0x11b0 [ 1472.997304][T11589] ? send_signal+0x3a5/0x580 [ 1473.001875][T11589] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1473.007487][T11589] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1473.013287][T11589] ? force_sig+0xca/0x120 [ 1473.017605][T11589] ? send_sig+0x70/0x70 [ 1473.021755][T11589] exit_to_user_mode_loop+0xa2/0xe0 [ 1473.026945][T11589] exit_to_user_mode_prepare+0x76/0xa0 [ 1473.032393][T11589] irqentry_exit_to_user_mode+0x9/0x10 [ 1473.037837][T11589] irqentry_exit+0x12/0x60 [ 1473.042243][T11589] exc_general_protection+0x1ca/0x250 [ 1473.047606][T11589] ? debug_smp_processor_id+0x17/0x20 [ 1473.052969][T11589] ? asm_exc_general_protection+0x8/0x30 [ 1473.058590][T11589] asm_exc_general_protection+0x1e/0x30 [ 1473.064120][T11589] RIP: 0033:0x7f010e0a2161 [ 1473.068516][T11589] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1473.088098][T11589] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1473.094142][T11589] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1473.102120][T11589] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1473.110070][T11589] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1473.118018][T11589] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1473.125964][T11589] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1473.178734][T11589] memory: usage 307200kB, limit 307200kB, failcnt 66049 [ 1473.185747][T11589] memory+swap: usage 390228kB, limit 9007199254740988kB, failcnt 0 [ 1473.203829][T11589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1473.221608][T11589] Memory cgroup stats for /syz0: [ 1473.221724][T11589] anon 270336 [ 1473.221724][T11589] file 307912704 [ 1473.221724][T11589] kernel_stack 0 [ 1473.221724][T11589] percpu 0 [ 1473.221724][T11589] sock 0 [ 1473.221724][T11589] shmem 307912704 [ 1473.221724][T11589] file_mapped 135168 [ 1473.221724][T11589] file_dirty 0 [ 1473.221724][T11589] file_writeback 0 [ 1473.221724][T11589] anon_thp 0 [ 1473.221724][T11589] inactive_anon 300560384 [ 1473.221724][T11589] active_anon 9191424 [ 1473.221724][T11589] inactive_file 229376 [ 1473.221724][T11589] active_file 86016 [ 1473.221724][T11589] unevictable 0 [ 1473.221724][T11589] slab_reclaimable 0 [ 1473.221724][T11589] slab_unreclaimable 0 [ 1473.221724][T11589] slab 0 [ 1473.221724][T11589] workingset_refault_anon 231 [ 1473.221724][T11589] workingset_refault_file 26664 [ 1473.221724][T11589] workingset_activate_anon 0 [ 1473.221724][T11589] workingset_activate_file 14982 [ 1473.221724][T11589] workingset_restore_anon 0 [ 1473.221724][T11589] workingset_restore_file 9999 [ 1473.470257][T11589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18275,pid=12210,uid=0 [ 1473.495166][T11589] Memory cgroup out of memory: OOM victim 12210 (syz.0.18275) is already exiting. Skip killing the task [ 1473.789936][T11626] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1474.039500][T11626] CPU: 0 PID: 11626 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1474.048464][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1474.058499][T11626] Call Trace: [ 1474.061774][T11626] __dump_stack+0x21/0x24 [ 1474.066092][T11626] dump_stack_lvl+0x1a7/0x208 [ 1474.070757][T11626] ? show_regs_print_info+0x18/0x18 [ 1474.075953][T11626] ? ___ratelimit+0x421/0x5a0 [ 1474.080618][T11626] ? _raw_spin_lock+0x94/0xf0 [ 1474.085280][T11626] dump_stack+0x15/0x1c [ 1474.089425][T11626] dump_header+0xd9/0x650 [ 1474.093742][T11626] oom_kill_process+0x1fa/0x2c0 [ 1474.098585][T11626] out_of_memory+0x879/0xce0 [ 1474.103177][T11626] ? unregister_oom_notifier+0x20/0x20 [ 1474.108629][T11626] ? mutex_lock_killable+0x92/0xf0 [ 1474.113739][T11626] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1474.120235][T11626] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1474.125770][T11626] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1474.131309][T11626] ? _raw_spin_trylock_bh+0x150/0x150 [ 1474.136679][T11626] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1474.142216][T11626] try_charge+0xfa9/0x1580 [ 1474.146639][T11626] ? __memcg_kmem_charge+0x150/0x150 [ 1474.151922][T11626] ? __kasan_check_write+0x14/0x20 [ 1474.157026][T11626] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1474.162827][T11626] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1474.168363][T11626] __mem_cgroup_charge+0x148/0x6d0 [ 1474.173475][T11626] shmem_add_to_page_cache+0x569/0xe10 [ 1474.178929][T11626] ? shmem_alloc_page+0x380/0x380 [ 1474.183977][T11626] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1474.189521][T11626] ? find_lock_entry+0x4b/0x200 [ 1474.194370][T11626] shmem_getpage_gfp+0x907/0x20f0 [ 1474.199390][T11626] shmem_write_begin+0xce/0x1b0 [ 1474.204218][T11626] generic_perform_write+0x2ce/0x540 [ 1474.209481][T11626] ? atime_needs_update+0x5b0/0x5b0 [ 1474.214655][T11626] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1474.220437][T11626] ? file_remove_privs+0x590/0x590 [ 1474.225526][T11626] ? __kasan_check_write+0x14/0x20 [ 1474.230612][T11626] ? down_write+0xb2/0x120 [ 1474.235007][T11626] __generic_file_write_iter+0x24b/0x480 [ 1474.240617][T11626] ? generic_write_checks+0x3df/0x480 [ 1474.245966][T11626] generic_file_write_iter+0xa9/0x1d0 [ 1474.251331][T11626] __kernel_write+0x5a5/0x9d0 [ 1474.255997][T11626] ? vfs_read+0xa50/0xa50 [ 1474.260310][T11626] ? populate_vma_page_range+0xf0/0xf0 [ 1474.265747][T11626] ? cgroup_freezing+0x86/0xb0 [ 1474.270488][T11626] ? freezing_slow_path+0x10a/0x150 [ 1474.275662][T11626] dump_emit+0x255/0x380 [ 1474.279879][T11626] ? wait_for_dump_helpers+0x380/0x380 [ 1474.285312][T11626] dump_user_range+0x6a/0x1a0 [ 1474.289962][T11626] elf_core_dump+0x27af/0x2c20 [ 1474.294700][T11626] ? load_elf_binary+0x2910/0x2910 [ 1474.299806][T11626] ? __fsnotify_parent+0x6db/0x7c0 [ 1474.304912][T11626] ? do_truncate+0x1c6/0x240 [ 1474.309485][T11626] ? putname+0xfe/0x150 [ 1474.313623][T11626] ? __kasan_check_read+0x11/0x20 [ 1474.318632][T11626] ? cgroup_freezing+0x86/0xb0 [ 1474.323376][T11626] ? freezing_slow_path+0x10a/0x150 [ 1474.328580][T11626] do_coredump+0x1be6/0x2910 [ 1474.333154][T11626] ? simple_acl_create+0x1c0/0x1c0 [ 1474.338244][T11626] ? debug_smp_processor_id+0x17/0x20 [ 1474.343715][T11626] ? kmem_cache_free+0x100/0x2d0 [ 1474.348633][T11626] ? ____kasan_slab_free+0x130/0x160 [ 1474.353900][T11626] ? get_signal+0xbdb/0x1300 [ 1474.358474][T11626] ? kmem_cache_free+0x100/0x2d0 [ 1474.363393][T11626] get_signal+0xf4c/0x1300 [ 1474.367802][T11626] arch_do_signal_or_restart+0xe7/0x11b0 [ 1474.373414][T11626] ? send_signal+0x3a5/0x580 [ 1474.377982][T11626] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1474.383590][T11626] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1474.389372][T11626] ? force_sig+0xca/0x120 [ 1474.393675][T11626] ? send_sig+0x70/0x70 [ 1474.397897][T11626] exit_to_user_mode_loop+0xa2/0xe0 [ 1474.403069][T11626] exit_to_user_mode_prepare+0x76/0xa0 [ 1474.408506][T11626] irqentry_exit_to_user_mode+0x9/0x10 [ 1474.413938][T11626] irqentry_exit+0x12/0x60 [ 1474.418357][T11626] exc_general_protection+0x1ca/0x250 [ 1474.423701][T11626] ? debug_smp_processor_id+0x17/0x20 [ 1474.429056][T11626] ? asm_exc_general_protection+0x8/0x30 [ 1474.434666][T11626] asm_exc_general_protection+0x1e/0x30 [ 1474.440188][T11626] RIP: 0033:0x7f010e0a2161 [ 1474.444726][T11626] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1474.464327][T11626] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1474.470398][T11626] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1474.478447][T11626] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1474.486417][T11626] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1474.494377][T11626] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1474.502349][T11626] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1474.611054][T11626] memory: usage 302748kB, limit 307200kB, failcnt 66530 [ 1474.739232][T11626] memory+swap: usage 384936kB, limit 9007199254740988kB, failcnt 0 [ 1474.756690][T11626] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1474.775368][T11626] Memory cgroup stats for /syz0: [ 1474.775697][T11626] anon 405504 [ 1474.775697][T11626] file 306831360 [ 1474.775697][T11626] kernel_stack 0 [ 1474.775697][T11626] percpu 0 [ 1474.775697][T11626] sock 0 [ 1474.775697][T11626] shmem 306831360 [ 1474.775697][T11626] file_mapped 135168 [ 1474.775697][T11626] file_dirty 0 [ 1474.775697][T11626] file_writeback 0 [ 1474.775697][T11626] anon_thp 0 [ 1474.775697][T11626] inactive_anon 300486656 [ 1474.775697][T11626] active_anon 8515584 [ 1474.775697][T11626] inactive_file 229376 [ 1474.775697][T11626] active_file 86016 [ 1474.775697][T11626] unevictable 0 [ 1474.775697][T11626] slab_reclaimable 0 [ 1474.775697][T11626] slab_unreclaimable 0 [ 1474.775697][T11626] slab 0 [ 1474.775697][T11626] workingset_refault_anon 231 [ 1474.775697][T11626] workingset_refault_file 26664 [ 1474.775697][T11626] workingset_activate_anon 0 [ 1474.775697][T11626] workingset_activate_file 14982 [ 1474.775697][T11626] workingset_restore_anon 0 [ 1474.775697][T11626] workingset_restore_file 9999 [ 1474.890228][T11626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18303,pid=12335,uid=0 [ 1474.905909][T12373] device syzkaller0 entered promiscuous mode [ 1475.070853][T11626] Memory cgroup out of memory: OOM victim 12335 (syz.0.18303) is already exiting. Skip killing the task [ 1475.465066][T12359] syz.3.18304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1475.509249][T12359] CPU: 1 PID: 12359 Comm: syz.3.18304 Tainted: G W syzkaller #0 [ 1475.518217][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.529042][T12359] Call Trace: [ 1475.532322][T12359] __dump_stack+0x21/0x24 [ 1475.536632][T12359] dump_stack_lvl+0x1a7/0x208 [ 1475.541283][T12359] ? show_regs_print_info+0x18/0x18 [ 1475.546463][T12359] ? ___ratelimit+0x421/0x5a0 [ 1475.551117][T12359] ? _raw_spin_lock+0x94/0xf0 [ 1475.555795][T12359] dump_stack+0x15/0x1c [ 1475.559937][T12359] dump_header+0xd9/0x650 [ 1475.564240][T12359] oom_kill_process+0x1fa/0x2c0 [ 1475.569074][T12359] out_of_memory+0x879/0xce0 [ 1475.573644][T12359] ? unregister_oom_notifier+0x20/0x20 [ 1475.579083][T12359] ? mutex_lock_killable+0xdf/0xf0 [ 1475.584170][T12359] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1475.590645][T12359] ? __alloc_pages_nodemask+0x29a/0x640 [ 1475.596171][T12359] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1475.601693][T12359] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1475.607214][T12359] ? _raw_spin_trylock_bh+0x150/0x150 [ 1475.612560][T12359] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1475.618081][T12359] try_charge+0xfa9/0x1580 [ 1475.622479][T12359] ? __memcg_kmem_charge+0x150/0x150 [ 1475.627743][T12359] ? __kasan_check_write+0x14/0x20 [ 1475.632830][T12359] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1475.638611][T12359] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1475.644132][T12359] __mem_cgroup_charge+0x148/0x6d0 [ 1475.649220][T12359] shmem_add_to_page_cache+0x569/0xe10 [ 1475.654658][T12359] ? shmem_alloc_page+0x380/0x380 [ 1475.659657][T12359] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1475.665187][T12359] ? find_lock_entry+0x4b/0x200 [ 1475.670019][T12359] shmem_getpage_gfp+0x907/0x20f0 [ 1475.675024][T12359] shmem_write_begin+0xce/0x1b0 [ 1475.679853][T12359] generic_perform_write+0x2ce/0x540 [ 1475.685116][T12359] ? atime_needs_update+0x5b0/0x5b0 [ 1475.690297][T12359] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1475.696080][T12359] ? file_remove_privs+0x590/0x590 [ 1475.701170][T12359] ? __kasan_check_write+0x14/0x20 [ 1475.706260][T12359] ? down_write+0xb2/0x120 [ 1475.710658][T12359] __generic_file_write_iter+0x24b/0x480 [ 1475.716268][T12359] ? generic_write_checks+0x3df/0x480 [ 1475.721616][T12359] generic_file_write_iter+0xa9/0x1d0 [ 1475.726978][T12359] __kernel_write+0x5a5/0x9d0 [ 1475.731639][T12359] ? vfs_read+0xa50/0xa50 [ 1475.736013][T12359] ? populate_vma_page_range+0xf0/0xf0 [ 1475.741453][T12359] ? cgroup_freezing+0x86/0xb0 [ 1475.746206][T12359] ? freezing_slow_path+0x10a/0x150 [ 1475.751387][T12359] dump_emit+0x255/0x380 [ 1475.755618][T12359] ? wait_for_dump_helpers+0x380/0x380 [ 1475.761054][T12359] ? freezing_slow_path+0x10a/0x150 [ 1475.766228][T12359] dump_user_range+0x6a/0x1a0 [ 1475.770887][T12359] elf_core_dump+0x27af/0x2c20 [ 1475.775642][T12359] ? load_elf_binary+0x2910/0x2910 [ 1475.780732][T12359] ? __fsnotify_parent+0x6db/0x7c0 [ 1475.785825][T12359] ? do_truncate+0x1c6/0x240 [ 1475.790390][T12359] ? putname+0xfe/0x150 [ 1475.794636][T12359] ? __kasan_check_read+0x11/0x20 [ 1475.799647][T12359] ? cgroup_freezing+0x86/0xb0 [ 1475.804390][T12359] ? freezing_slow_path+0x10a/0x150 [ 1475.809564][T12359] do_coredump+0x1be6/0x2910 [ 1475.814142][T12359] ? simple_acl_create+0x1c0/0x1c0 [ 1475.819229][T12359] ? debug_smp_processor_id+0x17/0x20 [ 1475.824594][T12359] ? kmem_cache_free+0x100/0x2d0 [ 1475.829522][T12359] ? ____kasan_slab_free+0x130/0x160 [ 1475.834788][T12359] ? get_signal+0xbdb/0x1300 [ 1475.839356][T12359] ? kmem_cache_free+0x100/0x2d0 [ 1475.844270][T12359] get_signal+0xf4c/0x1300 [ 1475.848668][T12359] arch_do_signal_or_restart+0xe7/0x11b0 [ 1475.854277][T12359] ? __bad_area_nosemaphore+0x2ca/0x410 [ 1475.859798][T12359] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1475.865404][T12359] ? bad_area+0x6a/0x80 [ 1475.869538][T12359] exit_to_user_mode_loop+0xa2/0xe0 [ 1475.874727][T12359] exit_to_user_mode_prepare+0x76/0xa0 [ 1475.880254][T12359] irqentry_exit_to_user_mode+0x9/0x10 [ 1475.885697][T12359] irqentry_exit+0x12/0x60 [ 1475.890090][T12359] exc_page_fault+0x67/0xc0 [ 1475.894575][T12359] ? asm_exc_page_fault+0x8/0x30 [ 1475.899505][T12359] asm_exc_page_fault+0x1e/0x30 [ 1475.904336][T12359] RIP: 0033:0xc98039e1 [ 1475.908386][T12359] Code: Unable to access opcode bytes at RIP 0xc98039b7. [ 1475.915382][T12359] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 1475.921424][T12359] RAX: 0000000000000000 RBX: 00007f16d92b4180 RCX: 00007f16d902c159 [ 1475.929374][T12359] RDX: 0000200000000300 RSI: 00002000000000c0 RDI: 0000000001104200 [ 1475.937329][T12359] RBP: 00007f16d90c306b R08: 0000200000000500 R09: 0000200000000500 [ 1475.945303][T12359] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 1475.953255][T12359] R13: 00007f16d92b4218 R14: 00007f16d92b4180 R15: 00007ffce002b068 [ 1475.978202][T12359] memory: usage 307200kB, limit 307200kB, failcnt 25435 [ 1475.989212][T12359] memory+swap: usage 350852kB, limit 9007199254740988kB, failcnt 0 [ 1475.997130][T12359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1476.010970][T12359] Memory cgroup stats for /syz3: [ 1476.011079][T12359] anon 270336 [ 1476.011079][T12359] file 312508416 [ 1476.011079][T12359] kernel_stack 0 [ 1476.011079][T12359] percpu 0 [ 1476.011079][T12359] sock 0 [ 1476.011079][T12359] shmem 312508416 [ 1476.011079][T12359] file_mapped 0 [ 1476.011079][T12359] file_dirty 135168 [ 1476.011079][T12359] file_writeback 0 [ 1476.011079][T12359] anon_thp 0 [ 1476.011079][T12359] inactive_anon 308322304 [ 1476.011079][T12359] active_anon 6078464 [ 1476.011079][T12359] inactive_file 126976 [ 1476.011079][T12359] active_file 0 [ 1476.011079][T12359] unevictable 0 [ 1476.011079][T12359] slab_reclaimable 0 [ 1476.011079][T12359] slab_unreclaimable 0 [ 1476.011079][T12359] slab 0 [ 1476.011079][T12359] workingset_refault_anon 33 [ 1476.011079][T12359] workingset_refault_file 19932 [ 1476.011079][T12359] workingset_activate_anon 0 [ 1476.011079][T12359] workingset_activate_file 8316 [ 1476.011079][T12359] workingset_restore_anon 0 [ 1476.011079][T12359] workingset_restore_file 6732 [ 1476.119226][T12359] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18239,pid=12085,uid=0 [ 1476.134351][T12359] Memory cgroup out of memory: Killed process 12085 (syz.3.18239) total-vm:90528kB, anon-rss:1264kB, file-rss:21372kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 1476.152326][ T27] oom_reaper: reaped process 12085 (syz.3.18239), now anon-rss:0kB, file-rss:21308kB, shmem-rss:0kB [ 1476.198828][T12073] syz.3.18239 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1476.218891][T12073] CPU: 0 PID: 12073 Comm: syz.3.18239 Tainted: G W syzkaller #0 [ 1476.227839][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1476.237887][T12073] Call Trace: [ 1476.241170][T12073] __dump_stack+0x21/0x24 [ 1476.245491][T12073] dump_stack_lvl+0x1a7/0x208 [ 1476.250157][T12073] ? show_regs_print_info+0x18/0x18 [ 1476.255379][T12073] ? ___ratelimit+0x421/0x5a0 [ 1476.260045][T12073] ? _raw_spin_lock+0x94/0xf0 [ 1476.264709][T12073] dump_stack+0x15/0x1c [ 1476.268854][T12073] dump_header+0xd9/0x650 [ 1476.273176][T12073] oom_kill_process+0x1fa/0x2c0 [ 1476.278017][T12073] out_of_memory+0x879/0xce0 [ 1476.282608][T12073] ? unregister_oom_notifier+0x20/0x20 [ 1476.288054][T12073] ? mutex_lock_killable+0xdf/0xf0 [ 1476.293156][T12073] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1476.299650][T12073] ? __alloc_pages_nodemask+0x29a/0x640 [ 1476.305196][T12073] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1476.310739][T12073] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1476.316280][T12073] ? _raw_spin_trylock_bh+0x150/0x150 [ 1476.321641][T12073] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1476.327176][T12073] try_charge+0xfa9/0x1580 [ 1476.331582][T12073] ? __memcg_kmem_charge+0x150/0x150 [ 1476.336850][T12073] ? __kasan_check_write+0x14/0x20 [ 1476.341938][T12073] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1476.347720][T12073] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1476.353241][T12073] __mem_cgroup_charge+0x148/0x6d0 [ 1476.358327][T12073] shmem_add_to_page_cache+0x569/0xe10 [ 1476.363766][T12073] ? shmem_alloc_page+0x380/0x380 [ 1476.368768][T12073] ? filemap_map_pages+0x10dc/0x13c0 [ 1476.374028][T12073] ? find_lock_entry+0x4b/0x200 [ 1476.378854][T12073] shmem_getpage_gfp+0x907/0x20f0 [ 1476.383861][T12073] shmem_write_begin+0xce/0x1b0 [ 1476.388710][T12073] generic_perform_write+0x2ce/0x540 [ 1476.394067][T12073] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1476.399851][T12073] ? file_remove_privs+0x590/0x590 [ 1476.404948][T12073] ? __kasan_check_write+0x14/0x20 [ 1476.410034][T12073] ? down_write+0xb2/0x120 [ 1476.414428][T12073] __generic_file_write_iter+0x24b/0x480 [ 1476.420040][T12073] ? generic_write_checks+0x3df/0x480 [ 1476.425408][T12073] generic_file_write_iter+0xa9/0x1d0 [ 1476.430771][T12073] __kernel_write+0x5a5/0x9d0 [ 1476.435431][T12073] ? vfs_read+0xa50/0xa50 [ 1476.439768][T12073] ? populate_vma_page_range+0xf0/0xf0 [ 1476.445215][T12073] ? cgroup_freezing+0x86/0xb0 [ 1476.449957][T12073] ? freezing_slow_path+0x10a/0x150 [ 1476.455136][T12073] dump_emit+0x255/0x380 [ 1476.459363][T12073] ? wait_for_dump_helpers+0x380/0x380 [ 1476.464802][T12073] ? dump_user_range+0xaf/0x1a0 [ 1476.469630][T12073] dump_user_range+0x6a/0x1a0 [ 1476.474283][T12073] elf_core_dump+0x27af/0x2c20 [ 1476.479028][T12073] ? load_elf_binary+0x2910/0x2910 [ 1476.484128][T12073] ? __fsnotify_parent+0x6db/0x7c0 [ 1476.489223][T12073] ? do_truncate+0x1c6/0x240 [ 1476.493792][T12073] ? putname+0xfe/0x150 [ 1476.497924][T12073] ? __kasan_check_read+0x11/0x20 [ 1476.502927][T12073] ? cgroup_freezing+0x86/0xb0 [ 1476.507667][T12073] ? freezing_slow_path+0x10a/0x150 [ 1476.512839][T12073] do_coredump+0x1be6/0x2910 [ 1476.517405][T12073] ? simple_acl_create+0x1c0/0x1c0 [ 1476.522495][T12073] ? debug_smp_processor_id+0x17/0x20 [ 1476.527845][T12073] ? kmem_cache_free+0x100/0x2d0 [ 1476.532760][T12073] ? ____kasan_slab_free+0x130/0x160 [ 1476.538026][T12073] ? get_signal+0xbdb/0x1300 [ 1476.542599][T12073] ? kmem_cache_free+0x100/0x2d0 [ 1476.547514][T12073] get_signal+0xf4c/0x1300 [ 1476.551911][T12073] arch_do_signal_or_restart+0xe7/0x11b0 [ 1476.557520][T12073] ? __send_signal+0x929/0xc10 [ 1476.562257][T12073] ? send_signal+0x3a5/0x580 [ 1476.566819][T12073] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1476.572424][T12073] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1476.578205][T12073] ? force_sig+0xca/0x120 [ 1476.582511][T12073] ? send_sig+0x70/0x70 [ 1476.586646][T12073] exit_to_user_mode_loop+0xa2/0xe0 [ 1476.591817][T12073] exit_to_user_mode_prepare+0x76/0xa0 [ 1476.597252][T12073] irqentry_exit_to_user_mode+0x9/0x10 [ 1476.602685][T12073] irqentry_exit+0x12/0x60 [ 1476.607076][T12073] exc_general_protection+0x1ca/0x250 [ 1476.612425][T12073] ? __kasan_check_read+0x11/0x20 [ 1476.617426][T12073] ? asm_exc_general_protection+0x8/0x30 [ 1476.623035][T12073] asm_exc_general_protection+0x1e/0x30 [ 1476.628554][T12073] RIP: 0033:0x7f16d902c161 [ 1476.632946][T12073] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1476.652526][T12073] RSP: 002b:00002000000001d0 EFLAGS: 00010217 [ 1476.658567][T12073] RAX: 0000000000000000 RBX: 00007f16d92b4270 RCX: 00007f16d902c159 [ 1476.666517][T12073] RDX: 0000200000000200 RSI: 00002000000001d0 RDI: 0000000020000000 [ 1476.674466][T12073] RBP: 00007f16d90c306b R08: 0000200000000280 R09: 0000200000000280 [ 1476.682414][T12073] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 1476.690363][T12073] R13: 00007f16d92b4308 R14: 00007f16d92b4270 R15: 00007ffce002b068 [ 1476.799234][T12073] memory: usage 293660kB, limit 307200kB, failcnt 26183 [ 1476.813802][T12073] memory+swap: usage 331864kB, limit 9007199254740988kB, failcnt 0 [ 1476.849524][T12073] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1476.864301][T12073] Memory cgroup stats for /syz3: [ 1476.864414][T12073] anon 135168 [ 1476.864414][T12073] file 289529856 [ 1476.864414][T12073] kernel_stack 0 [ 1476.864414][T12073] percpu 0 [ 1476.864414][T12073] sock 0 [ 1476.864414][T12073] shmem 289529856 [ 1476.864414][T12073] file_mapped 135168 [ 1476.864414][T12073] file_dirty 135168 [ 1476.864414][T12073] file_writeback 0 [ 1476.864414][T12073] anon_thp 0 [ 1476.864414][T12073] inactive_anon 290328576 [ 1476.864414][T12073] active_anon 0 [ 1476.864414][T12073] inactive_file 188416 [ 1476.864414][T12073] active_file 102400 [ 1476.864414][T12073] unevictable 0 [ 1476.864414][T12073] slab_reclaimable 0 [ 1476.864414][T12073] slab_unreclaimable 0 [ 1476.864414][T12073] slab 0 [ 1476.864414][T12073] workingset_refault_anon 33 [ 1476.864414][T12073] workingset_refault_file 20625 [ 1476.864414][T12073] workingset_activate_anon 0 [ 1476.864414][T12073] workingset_activate_file 8514 [ 1476.864414][T12073] workingset_restore_anon 0 [ 1476.864414][T12073] workingset_restore_file 6798 [ 1476.967499][T12073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18239,pid=12071,uid=0 [ 1477.002647][T12073] Memory cgroup out of memory: Killed process 12071 (syz.3.18239) total-vm:90528kB, anon-rss:1244kB, file-rss:21364kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 1477.200025][T12078] syz.3.18239 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1477.291193][T12078] CPU: 0 PID: 12078 Comm: syz.3.18239 Tainted: G W syzkaller #0 [ 1477.300152][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1477.310201][T12078] Call Trace: [ 1477.313491][T12078] __dump_stack+0x21/0x24 [ 1477.317812][T12078] dump_stack_lvl+0x1a7/0x208 [ 1477.322482][T12078] ? show_regs_print_info+0x18/0x18 [ 1477.327664][T12078] ? ___ratelimit+0x421/0x5a0 [ 1477.332325][T12078] ? _raw_spin_lock+0x94/0xf0 [ 1477.336983][T12078] dump_stack+0x15/0x1c [ 1477.341118][T12078] dump_header+0xd9/0x650 [ 1477.345428][T12078] oom_kill_process+0x1fa/0x2c0 [ 1477.350256][T12078] out_of_memory+0x879/0xce0 [ 1477.354824][T12078] ? unregister_oom_notifier+0x20/0x20 [ 1477.360258][T12078] ? mutex_lock_killable+0xdf/0xf0 [ 1477.365345][T12078] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1477.371826][T12078] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1477.377350][T12078] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1477.382875][T12078] ? _raw_spin_trylock_bh+0x150/0x150 [ 1477.388222][T12078] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1477.393742][T12078] try_charge+0xfa9/0x1580 [ 1477.398140][T12078] ? __set_page_owner+0x289/0x2a0 [ 1477.403143][T12078] ? __memcg_kmem_charge+0x150/0x150 [ 1477.408433][T12078] ? get_page_from_freelist+0x225f/0x23f0 [ 1477.414137][T12078] ? __add_to_page_cache_locked+0x81d/0x9b0 [ 1477.420007][T12078] ? read_pages+0x9b0/0xb50 [ 1477.424488][T12078] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1477.430009][T12078] __mem_cgroup_charge+0x148/0x6d0 [ 1477.435097][T12078] __add_to_page_cache_locked+0x208/0x9b0 [ 1477.440790][T12078] ? __alloc_pages_nodemask+0x29a/0x640 [ 1477.446408][T12078] ? put_page+0xd0/0xd0 [ 1477.450552][T12078] ? workingset_activation+0x250/0x250 [ 1477.455987][T12078] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1477.461508][T12078] ? page_cache_prev_miss+0x250/0x290 [ 1477.466887][T12078] add_to_page_cache_lru+0xa7/0x210 [ 1477.472069][T12078] pagecache_get_page+0x700/0x930 [ 1477.477080][T12078] filemap_fault+0x1a89/0x2020 [ 1477.481823][T12078] ? next_uptodate_page+0xa42/0xa60 [ 1477.487004][T12078] ? generic_file_read_iter+0x580/0x580 [ 1477.492527][T12078] ? _raw_spin_lock_irq+0x95/0xf0 [ 1477.497534][T12078] ? filemap_allow_speculation+0x10/0x10 [ 1477.503146][T12078] ? shmem_getpage_gfp+0x1ecd/0x20f0 [ 1477.508409][T12078] ? __kasan_check_write+0x14/0x20 [ 1477.513498][T12078] ext4_filemap_fault+0x8a/0xa0 [ 1477.518328][T12078] handle_pte_fault+0x2466/0x3910 [ 1477.523331][T12078] handle_mm_fault+0xf86/0x1720 [ 1477.528159][T12078] ? can_reuse_spf_vma+0xe0/0xe0 [ 1477.533077][T12078] ? follow_page_mask+0x7ac/0x1150 [ 1477.538177][T12078] __get_user_pages+0xbf8/0x1400 [ 1477.543114][T12078] ? populate_vma_page_range+0xf0/0xf0 [ 1477.548718][T12078] ? __kasan_check_write+0x14/0x20 [ 1477.553816][T12078] get_dump_page+0x153/0x5c0 [ 1477.558385][T12078] ? freezing_slow_path+0x10a/0x150 [ 1477.563583][T12078] ? __mm_populate+0x420/0x420 [ 1477.568332][T12078] ? wait_for_dump_helpers+0x380/0x380 [ 1477.573774][T12078] ? dump_user_range+0x125/0x1a0 [ 1477.578694][T12078] dump_user_range+0x3c/0x1a0 [ 1477.583364][T12078] elf_core_dump+0x27af/0x2c20 [ 1477.588110][T12078] ? load_elf_binary+0x2910/0x2910 [ 1477.593197][T12078] ? __fsnotify_parent+0x6db/0x7c0 [ 1477.598293][T12078] ? do_truncate+0x1c6/0x240 [ 1477.602862][T12078] ? putname+0xfe/0x150 [ 1477.607003][T12078] ? __kasan_check_read+0x11/0x20 [ 1477.612011][T12078] ? cgroup_freezing+0x86/0xb0 [ 1477.616755][T12078] ? freezing_slow_path+0x10a/0x150 [ 1477.621937][T12078] do_coredump+0x1be6/0x2910 [ 1477.626512][T12078] ? simple_acl_create+0x1c0/0x1c0 [ 1477.631617][T12078] ? debug_smp_processor_id+0x17/0x20 [ 1477.636970][T12078] ? kmem_cache_free+0x100/0x2d0 [ 1477.641889][T12078] ? ____kasan_slab_free+0x130/0x160 [ 1477.647157][T12078] ? get_signal+0xbdb/0x1300 [ 1477.651835][T12078] ? kmem_cache_free+0x100/0x2d0 [ 1477.656754][T12078] get_signal+0xf4c/0x1300 [ 1477.661153][T12078] arch_do_signal_or_restart+0xe7/0x11b0 [ 1477.666766][T12078] ? __send_signal+0x929/0xc10 [ 1477.671509][T12078] ? send_signal+0x3a5/0x580 [ 1477.676079][T12078] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1477.681701][T12078] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1477.687489][T12078] ? force_sig+0xca/0x120 [ 1477.691796][T12078] ? send_sig+0x70/0x70 [ 1477.695951][T12078] exit_to_user_mode_loop+0xa2/0xe0 [ 1477.701126][T12078] exit_to_user_mode_prepare+0x76/0xa0 [ 1477.706566][T12078] irqentry_exit_to_user_mode+0x9/0x10 [ 1477.712006][T12078] irqentry_exit+0x12/0x60 [ 1477.716397][T12078] exc_general_protection+0x1ca/0x250 [ 1477.721747][T12078] ? debug_smp_processor_id+0x17/0x20 [ 1477.727096][T12078] ? asm_exc_general_protection+0x8/0x30 [ 1477.732703][T12078] asm_exc_general_protection+0x1e/0x30 [ 1477.738222][T12078] RIP: 0033:0x7f16d902c161 [ 1477.742618][T12078] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1477.762202][T12078] RSP: 002b:00002000000001d0 EFLAGS: 00010217 [ 1477.768248][T12078] RAX: 0000000000000000 RBX: 00007f16d92b4270 RCX: 00007f16d902c159 [ 1477.776198][T12078] RDX: 0000200000000200 RSI: 00002000000001d0 RDI: 0000000020000000 [ 1477.784163][T12078] RBP: 00007f16d90c306b R08: 0000200000000280 R09: 0000200000000280 [ 1477.792111][T12078] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 1477.800060][T12078] R13: 00007f16d92b4308 R14: 00007f16d92b4270 R15: 00007ffce002b068 [ 1477.841038][T12078] memory: usage 307172kB, limit 307200kB, failcnt 27645 [ 1477.848046][T12078] memory+swap: usage 350332kB, limit 9007199254740988kB, failcnt 0 [ 1477.856266][T12078] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1477.884528][T12078] Memory cgroup stats for /syz3: [ 1477.884639][T12078] anon 135168 [ 1477.884639][T12078] file 312373248 [ 1477.884639][T12078] kernel_stack 0 [ 1477.884639][T12078] percpu 0 [ 1477.884639][T12078] sock 0 [ 1477.884639][T12078] shmem 291692544 [ 1477.884639][T12078] file_mapped 10137600 [ 1477.884639][T12078] file_dirty 135168 [ 1477.884639][T12078] file_writeback 0 [ 1477.884639][T12078] anon_thp 0 [ 1477.884639][T12078] inactive_anon 292368384 [ 1477.884639][T12078] active_anon 0 [ 1477.884639][T12078] inactive_file 7352320 [ 1477.884639][T12078] active_file 13045760 [ 1477.884639][T12078] unevictable 0 [ 1477.884639][T12078] slab_reclaimable 0 [ 1477.884639][T12078] slab_unreclaimable 0 [ 1477.884639][T12078] slab 0 [ 1477.884639][T12078] workingset_refault_anon 33 [ 1477.884639][T12078] workingset_refault_file 25971 [ 1477.884639][T12078] workingset_activate_anon 0 [ 1477.884639][T12078] workingset_activate_file 13332 [ 1477.884639][T12078] workingset_restore_anon 0 [ 1477.884639][T12078] workingset_restore_file 10725 [ 1478.399250][T12078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18304,pid=12359,uid=0 [ 1478.415019][T12078] Memory cgroup out of memory: OOM victim 12359 (syz.3.18304) is already exiting. Skip killing the task [ 1478.433266][T11608] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1478.451997][T11608] CPU: 1 PID: 11608 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1478.460936][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1478.470980][T11608] Call Trace: [ 1478.474264][T11608] __dump_stack+0x21/0x24 [ 1478.478584][T11608] dump_stack_lvl+0x1a7/0x208 [ 1478.483247][T11608] ? show_regs_print_info+0x18/0x18 [ 1478.488434][T11608] ? ___ratelimit+0x421/0x5a0 [ 1478.493099][T11608] ? _raw_spin_lock+0x94/0xf0 [ 1478.497770][T11608] dump_stack+0x15/0x1c [ 1478.501915][T11608] dump_header+0xd9/0x650 [ 1478.506235][T11608] oom_kill_process+0x1fa/0x2c0 [ 1478.511081][T11608] out_of_memory+0x879/0xce0 [ 1478.515655][T11608] ? unregister_oom_notifier+0x20/0x20 [ 1478.521098][T11608] ? mutex_lock_killable+0xdf/0xf0 [ 1478.526194][T11608] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1478.532681][T11608] ? __alloc_pages_nodemask+0x29a/0x640 [ 1478.538215][T11608] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1478.543747][T11608] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1478.549275][T11608] ? _raw_spin_trylock_bh+0x150/0x150 [ 1478.554637][T11608] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1478.560168][T11608] try_charge+0xfa9/0x1580 [ 1478.564575][T11608] ? __memcg_kmem_charge+0x150/0x150 [ 1478.569854][T11608] ? __kasan_check_write+0x14/0x20 [ 1478.574947][T11608] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1478.580739][T11608] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1478.586270][T11608] __mem_cgroup_charge+0x148/0x6d0 [ 1478.591364][T11608] shmem_add_to_page_cache+0x569/0xe10 [ 1478.596807][T11608] ? shmem_alloc_page+0x380/0x380 [ 1478.601812][T11608] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1478.607351][T11608] ? find_lock_entry+0x4b/0x200 [ 1478.612187][T11608] shmem_getpage_gfp+0x907/0x20f0 [ 1478.617197][T11608] ? finish_task_switch+0x12e/0x5a0 [ 1478.622385][T11608] shmem_write_begin+0xce/0x1b0 [ 1478.627221][T11608] generic_perform_write+0x2ce/0x540 [ 1478.632488][T11608] ? atime_needs_update+0x5b0/0x5b0 [ 1478.637683][T11608] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1478.643489][T11608] ? file_remove_privs+0x590/0x590 [ 1478.648588][T11608] ? __kasan_check_write+0x14/0x20 [ 1478.653684][T11608] ? down_write+0xb2/0x120 [ 1478.658089][T11608] __generic_file_write_iter+0x24b/0x480 [ 1478.663713][T11608] ? generic_write_checks+0x3df/0x480 [ 1478.669085][T11608] generic_file_write_iter+0xa9/0x1d0 [ 1478.674444][T11608] __kernel_write+0x5a5/0x9d0 [ 1478.679108][T11608] ? vfs_read+0xa50/0xa50 [ 1478.683430][T11608] ? populate_vma_page_range+0xf0/0xf0 [ 1478.688868][T11608] ? sched_clock_cpu+0x1b/0x3d0 [ 1478.693703][T11608] ? cgroup_freezing+0x86/0xb0 [ 1478.698452][T11608] ? freezing_slow_path+0x10a/0x150 [ 1478.703639][T11608] dump_emit+0x255/0x380 [ 1478.707872][T11608] ? wait_for_dump_helpers+0x380/0x380 [ 1478.713322][T11608] ? dump_user_range+0x11b/0x1a0 [ 1478.718252][T11608] dump_user_range+0x6a/0x1a0 [ 1478.722910][T11608] elf_core_dump+0x27af/0x2c20 [ 1478.727662][T11608] ? load_elf_binary+0x2910/0x2910 [ 1478.732764][T11608] ? __fsnotify_parent+0x6db/0x7c0 [ 1478.737871][T11608] ? do_truncate+0x1c6/0x240 [ 1478.742445][T11608] ? putname+0xfe/0x150 [ 1478.746591][T11608] ? __kasan_check_read+0x11/0x20 [ 1478.751606][T11608] ? cgroup_freezing+0x86/0xb0 [ 1478.756355][T11608] ? freezing_slow_path+0x10a/0x150 [ 1478.761544][T11608] do_coredump+0x1be6/0x2910 [ 1478.766125][T11608] ? simple_acl_create+0x1c0/0x1c0 [ 1478.771221][T11608] ? debug_smp_processor_id+0x17/0x20 [ 1478.776578][T11608] ? kmem_cache_free+0x100/0x2d0 [ 1478.781582][T11608] ? ____kasan_slab_free+0x130/0x160 [ 1478.786852][T11608] ? get_signal+0xbdb/0x1300 [ 1478.791430][T11608] ? kmem_cache_free+0x100/0x2d0 [ 1478.796353][T11608] get_signal+0xf4c/0x1300 [ 1478.800758][T11608] arch_do_signal_or_restart+0xe7/0x11b0 [ 1478.806376][T11608] ? send_signal+0x3a5/0x580 [ 1478.810956][T11608] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1478.816569][T11608] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1478.822364][T11608] ? force_sig+0xca/0x120 [ 1478.826675][T11608] ? send_sig+0x70/0x70 [ 1478.830818][T11608] exit_to_user_mode_loop+0xa2/0xe0 [ 1478.835999][T11608] exit_to_user_mode_prepare+0x76/0xa0 [ 1478.841442][T11608] irqentry_exit_to_user_mode+0x9/0x10 [ 1478.846889][T11608] irqentry_exit+0x12/0x60 [ 1478.851288][T11608] exc_general_protection+0x1ca/0x250 [ 1478.856649][T11608] ? debug_smp_processor_id+0x17/0x20 [ 1478.862006][T11608] ? asm_exc_general_protection+0x8/0x30 [ 1478.867627][T11608] asm_exc_general_protection+0x1e/0x30 [ 1478.873155][T11608] RIP: 0033:0x7f010e0a2161 [ 1478.877559][T11608] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1478.897150][T11608] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1478.903213][T11608] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1478.911172][T11608] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1478.919131][T11608] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1478.927085][T11608] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1478.935042][T11608] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1479.296844][T11608] memory: usage 307200kB, limit 307200kB, failcnt 66781 [ 1479.306934][T11608] memory+swap: usage 385160kB, limit 9007199254740988kB, failcnt 0 [ 1479.316894][T11608] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1479.324522][T11608] Memory cgroup stats for /syz0: [ 1479.324632][T11608] anon 405504 [ 1479.324632][T11608] file 312238080 [ 1479.324632][T11608] kernel_stack 0 [ 1479.324632][T11608] percpu 0 [ 1479.324632][T11608] sock 0 [ 1479.324632][T11608] shmem 312238080 [ 1479.324632][T11608] file_mapped 135168 [ 1479.324632][T11608] file_dirty 0 [ 1479.324632][T11608] file_writeback 0 [ 1479.324632][T11608] anon_thp 0 [ 1479.324632][T11608] inactive_anon 305725440 [ 1479.324632][T11608] active_anon 8515584 [ 1479.324632][T11608] inactive_file 229376 [ 1479.324632][T11608] active_file 86016 [ 1479.324632][T11608] unevictable 0 [ 1479.324632][T11608] slab_reclaimable 0 [ 1479.324632][T11608] slab_unreclaimable 0 [ 1479.324632][T11608] slab 0 [ 1479.324632][T11608] workingset_refault_anon 231 [ 1479.324632][T11608] workingset_refault_file 26664 [ 1479.324632][T11608] workingset_activate_anon 0 [ 1479.324632][T11608] workingset_activate_file 14982 [ 1479.324632][T11608] workingset_restore_anon 0 [ 1479.324632][T11608] workingset_restore_file 9999 [ 1479.489636][T11608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11615,uid=0 [ 1479.517380][T11608] Memory cgroup out of memory: Killed process 11615 (syz.0.18133) total-vm:90732kB, anon-rss:1316kB, file-rss:24248kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1479.581210][T11589] syz.0.18133 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1479.596890][T11589] CPU: 1 PID: 11589 Comm: syz.0.18133 Tainted: G W syzkaller #0 [ 1479.605832][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1479.615884][T11589] Call Trace: [ 1479.619166][T11589] __dump_stack+0x21/0x24 [ 1479.623484][T11589] dump_stack_lvl+0x1a7/0x208 [ 1479.628153][T11589] ? show_regs_print_info+0x18/0x18 [ 1479.633337][T11589] ? ___ratelimit+0x421/0x5a0 [ 1479.638002][T11589] ? _raw_spin_lock+0x94/0xf0 [ 1479.642665][T11589] dump_stack+0x15/0x1c [ 1479.646814][T11589] dump_header+0xd9/0x650 [ 1479.651140][T11589] oom_kill_process+0x1fa/0x2c0 [ 1479.655989][T11589] out_of_memory+0x879/0xce0 [ 1479.660583][T11589] ? unregister_oom_notifier+0x20/0x20 [ 1479.666034][T11589] ? mutex_lock_killable+0xdf/0xf0 [ 1479.671136][T11589] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1479.677625][T11589] ? __alloc_pages_nodemask+0x29a/0x640 [ 1479.683171][T11589] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1479.688708][T11589] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1479.694246][T11589] ? _raw_spin_trylock_bh+0x150/0x150 [ 1479.699623][T11589] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1479.705156][T11589] try_charge+0xfa9/0x1580 [ 1479.709569][T11589] ? __memcg_kmem_charge+0x150/0x150 [ 1479.714864][T11589] ? __kasan_check_write+0x14/0x20 [ 1479.719976][T11589] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1479.725773][T11589] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1479.731310][T11589] __mem_cgroup_charge+0x148/0x6d0 [ 1479.736414][T11589] shmem_add_to_page_cache+0x569/0xe10 [ 1479.741878][T11589] ? shmem_alloc_page+0x380/0x380 [ 1479.746898][T11589] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1479.752437][T11589] ? find_lock_entry+0x4b/0x200 [ 1479.757289][T11589] shmem_getpage_gfp+0x907/0x20f0 [ 1479.762321][T11589] shmem_write_begin+0xce/0x1b0 [ 1479.767167][T11589] generic_perform_write+0x2ce/0x540 [ 1479.772451][T11589] ? atime_needs_update+0x5b0/0x5b0 [ 1479.777644][T11589] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1479.783446][T11589] ? file_remove_privs+0x590/0x590 [ 1479.788554][T11589] ? __kasan_check_write+0x14/0x20 [ 1479.793657][T11589] ? down_write+0xb2/0x120 [ 1479.798065][T11589] __generic_file_write_iter+0x24b/0x480 [ 1479.803693][T11589] ? generic_write_checks+0x3df/0x480 [ 1479.809063][T11589] generic_file_write_iter+0xa9/0x1d0 [ 1479.814432][T11589] __kernel_write+0x5a5/0x9d0 [ 1479.819105][T11589] ? vfs_read+0xa50/0xa50 [ 1479.823430][T11589] ? irq_exit_rcu+0x9/0x10 [ 1479.827849][T11589] ? populate_vma_page_range+0xf0/0xf0 [ 1479.833301][T11589] ? cgroup_freezing+0x86/0xb0 [ 1479.838058][T11589] ? freezing_slow_path+0x10a/0x150 [ 1479.843253][T11589] dump_emit+0x255/0x380 [ 1479.847493][T11589] ? wait_for_dump_helpers+0x380/0x380 [ 1479.852951][T11589] dump_user_range+0x6a/0x1a0 [ 1479.857623][T11589] elf_core_dump+0x27af/0x2c20 [ 1479.862384][T11589] ? load_elf_binary+0x2910/0x2910 [ 1479.867488][T11589] ? __fsnotify_parent+0x6db/0x7c0 [ 1479.872600][T11589] ? do_truncate+0x1c6/0x240 [ 1479.877188][T11589] ? putname+0xfe/0x150 [ 1479.881336][T11589] ? __kasan_check_read+0x11/0x20 [ 1479.886358][T11589] ? cgroup_freezing+0x86/0xb0 [ 1479.891117][T11589] ? freezing_slow_path+0x10a/0x150 [ 1479.896309][T11589] do_coredump+0x1be6/0x2910 [ 1479.900897][T11589] ? simple_acl_create+0x1c0/0x1c0 [ 1479.906004][T11589] ? debug_smp_processor_id+0x17/0x20 [ 1479.911372][T11589] ? kmem_cache_free+0x100/0x2d0 [ 1479.916309][T11589] ? ____kasan_slab_free+0x130/0x160 [ 1479.921589][T11589] ? get_signal+0xbdb/0x1300 [ 1479.926165][T11589] ? kmem_cache_free+0x100/0x2d0 [ 1479.931088][T11589] get_signal+0xf4c/0x1300 [ 1479.935495][T11589] arch_do_signal_or_restart+0xe7/0x11b0 [ 1479.941110][T11589] ? send_signal+0x3a5/0x580 [ 1479.945676][T11589] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1479.951283][T11589] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1479.957062][T11589] ? force_sig+0xca/0x120 [ 1479.961364][T11589] ? send_sig+0x70/0x70 [ 1479.965499][T11589] exit_to_user_mode_loop+0xa2/0xe0 [ 1479.970676][T11589] exit_to_user_mode_prepare+0x76/0xa0 [ 1479.976114][T11589] irqentry_exit_to_user_mode+0x9/0x10 [ 1479.981547][T11589] irqentry_exit+0x12/0x60 [ 1479.985940][T11589] exc_general_protection+0x1ca/0x250 [ 1479.991287][T11589] ? debug_smp_processor_id+0x17/0x20 [ 1479.996637][T11589] ? asm_exc_general_protection+0x8/0x30 [ 1480.002245][T11589] asm_exc_general_protection+0x1e/0x30 [ 1480.007763][T11589] RIP: 0033:0x7f010e0a2161 [ 1480.012159][T11589] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1480.031757][T11589] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 1480.037799][T11589] RAX: 0000000000000000 RBX: 00007f010e32a270 RCX: 00007f010e0a2159 [ 1480.045750][T11589] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000800000 [ 1480.053699][T11589] RBP: 00007f010e13906b R08: 0000200000000500 R09: 0000200000000500 [ 1480.061651][T11589] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 1480.069598][T11589] R13: 00007f010e32a308 R14: 00007f010e32a270 R15: 00007fff290e3348 [ 1480.083563][T11589] memory: usage 259908kB, limit 307200kB, failcnt 66849 [ 1480.091504][T11589] memory+swap: usage 323772kB, limit 9007199254740988kB, failcnt 0 [ 1480.099638][T11589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1480.106502][T11589] Memory cgroup stats for /syz0: [ 1480.106617][T11589] anon 405504 [ 1480.106617][T11589] file 264118272 [ 1480.106617][T11589] kernel_stack 0 [ 1480.106617][T11589] percpu 0 [ 1480.106617][T11589] sock 0 [ 1480.106617][T11589] shmem 264118272 [ 1480.106617][T11589] file_mapped 135168 [ 1480.106617][T11589] file_dirty 0 [ 1480.106617][T11589] file_writeback 0 [ 1480.106617][T11589] anon_thp 0 [ 1480.106617][T11589] inactive_anon 259633152 [ 1480.106617][T11589] active_anon 6488064 [ 1480.106617][T11589] inactive_file 229376 [ 1480.106617][T11589] active_file 86016 [ 1480.106617][T11589] unevictable 0 [ 1480.106617][T11589] slab_reclaimable 0 [ 1480.106617][T11589] slab_unreclaimable 0 [ 1480.106617][T11589] slab 0 [ 1480.106617][T11589] workingset_refault_anon 231 [ 1480.106617][T11589] workingset_refault_file 26664 [ 1480.106617][T11589] workingset_activate_anon 0 [ 1480.106617][T11589] workingset_activate_file 14982 [ 1480.106617][T11589] workingset_restore_anon 0 [ 1480.106617][T11589] workingset_restore_file 9999 [ 1480.211758][T11589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.18133,pid=11608,uid=0 [ 1480.229327][T11589] Memory cgroup out of memory: Killed process 11608 (syz.0.18133) total-vm:90732kB, anon-rss:1280kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1480.490133][T12584] tun0: tun_chr_ioctl cmd 1074025677 [ 1480.505649][T12584] tun0: linktype set to 0 [ 1481.456335][T12609] device syzkaller0 entered promiscuous mode [ 1483.706396][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1483.738749][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1483.769782][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1483.801506][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1483.829373][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1483.884601][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1483.980107][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.030793][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.081747][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.181048][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.197473][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.226044][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.269357][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.339633][T12762] geneve1: tun_chr_ioctl cmd 1074025672 [ 1484.358854][T12762] geneve1: ignored: set checksum enabled [ 1484.365554][T12731] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1484.703844][T12083] syz.3.18239 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1484.871203][T12083] CPU: 1 PID: 12083 Comm: syz.3.18239 Tainted: G W syzkaller #0 [ 1484.880160][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1484.890197][T12083] Call Trace: [ 1484.893466][T12083] __dump_stack+0x21/0x24 [ 1484.897771][T12083] dump_stack_lvl+0x1a7/0x208 [ 1484.902431][T12083] ? show_regs_print_info+0x18/0x18 [ 1484.907603][T12083] ? ___ratelimit+0x421/0x5a0 [ 1484.912258][T12083] ? _raw_spin_lock+0x94/0xf0 [ 1484.916906][T12083] dump_stack+0x15/0x1c [ 1484.921036][T12083] dump_header+0xd9/0x650 [ 1484.925355][T12083] oom_kill_process+0x1fa/0x2c0 [ 1484.930180][T12083] out_of_memory+0x879/0xce0 [ 1484.934751][T12083] ? unregister_oom_notifier+0x20/0x20 [ 1484.940192][T12083] ? mutex_lock_killable+0x92/0xf0 [ 1484.945278][T12083] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1484.951758][T12083] ? __alloc_pages_nodemask+0x29a/0x640 [ 1484.957279][T12083] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1484.962805][T12083] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1484.968325][T12083] ? _raw_spin_trylock_bh+0x150/0x150 [ 1484.973671][T12083] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1484.979190][T12083] try_charge+0xfa9/0x1580 [ 1484.983602][T12083] ? __memcg_kmem_charge+0x150/0x150 [ 1484.988865][T12083] ? __kasan_check_write+0x14/0x20 [ 1484.993957][T12083] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1484.999744][T12083] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1485.005265][T12083] __mem_cgroup_charge+0x148/0x6d0 [ 1485.010350][T12083] shmem_add_to_page_cache+0x569/0xe10 [ 1485.015788][T12083] ? shmem_alloc_page+0x380/0x380 [ 1485.020789][T12083] ? filemap_map_pages+0x10dc/0x13c0 [ 1485.026062][T12083] ? find_lock_entry+0x4b/0x200 [ 1485.030888][T12083] shmem_getpage_gfp+0x907/0x20f0 [ 1485.035914][T12083] shmem_write_begin+0xce/0x1b0 [ 1485.040746][T12083] generic_perform_write+0x2ce/0x540 [ 1485.046012][T12083] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1485.051796][T12083] ? file_remove_privs+0x590/0x590 [ 1485.056883][T12083] ? __kasan_check_write+0x14/0x20 [ 1485.061970][T12083] ? down_write+0xb2/0x120 [ 1485.066362][T12083] __generic_file_write_iter+0x24b/0x480 [ 1485.071967][T12083] ? generic_write_checks+0x3df/0x480 [ 1485.077315][T12083] generic_file_write_iter+0xa9/0x1d0 [ 1485.082662][T12083] __kernel_write+0x5a5/0x9d0 [ 1485.087314][T12083] ? vfs_read+0xa50/0xa50 [ 1485.091618][T12083] ? populate_vma_page_range+0xf0/0xf0 [ 1485.097052][T12083] ? cgroup_freezing+0x86/0xb0 [ 1485.101790][T12083] ? freezing_slow_path+0x10a/0x150 [ 1485.106963][T12083] dump_emit+0x255/0x380 [ 1485.111181][T12083] ? wait_for_dump_helpers+0x380/0x380 [ 1485.116616][T12083] ? dump_user_range+0xea/0x1a0 [ 1485.121462][T12083] dump_user_range+0x6a/0x1a0 [ 1485.126114][T12083] elf_core_dump+0x27af/0x2c20 [ 1485.130856][T12083] ? load_elf_binary+0x2910/0x2910 [ 1485.135942][T12083] ? __fsnotify_parent+0x6db/0x7c0 [ 1485.141038][T12083] ? do_truncate+0x1c6/0x240 [ 1485.145605][T12083] ? putname+0xfe/0x150 [ 1485.149743][T12083] ? __kasan_check_read+0x11/0x20 [ 1485.154749][T12083] ? cgroup_freezing+0x86/0xb0 [ 1485.159486][T12083] ? freezing_slow_path+0x10a/0x150 [ 1485.164659][T12083] do_coredump+0x1be6/0x2910 [ 1485.169229][T12083] ? simple_acl_create+0x1c0/0x1c0 [ 1485.174316][T12083] ? debug_smp_processor_id+0x17/0x20 [ 1485.179666][T12083] ? kmem_cache_free+0x100/0x2d0 [ 1485.184838][T12083] ? ____kasan_slab_free+0x130/0x160 [ 1485.190100][T12083] ? get_signal+0xbdb/0x1300 [ 1485.194666][T12083] ? kmem_cache_free+0x100/0x2d0 [ 1485.199579][T12083] get_signal+0xf4c/0x1300 [ 1485.203973][T12083] arch_do_signal_or_restart+0xe7/0x11b0 [ 1485.209580][T12083] ? __send_signal+0x929/0xc10 [ 1485.214322][T12083] ? send_signal+0x3a5/0x580 [ 1485.218886][T12083] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1485.224492][T12083] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1485.230298][T12083] ? force_sig+0xca/0x120 [ 1485.234603][T12083] ? send_sig+0x70/0x70 [ 1485.238756][T12083] exit_to_user_mode_loop+0xa2/0xe0 [ 1485.243926][T12083] exit_to_user_mode_prepare+0x76/0xa0 [ 1485.249363][T12083] irqentry_exit_to_user_mode+0x9/0x10 [ 1485.254795][T12083] irqentry_exit+0x12/0x60 [ 1485.259206][T12083] exc_general_protection+0x1ca/0x250 [ 1485.264559][T12083] ? debug_smp_processor_id+0x17/0x20 [ 1485.269921][T12083] ? asm_exc_general_protection+0x8/0x30 [ 1485.275539][T12083] asm_exc_general_protection+0x1e/0x30 [ 1485.281067][T12083] RIP: 0033:0x7f16d902c161 [ 1485.285462][T12083] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1485.305046][T12083] RSP: 002b:00002000000001d0 EFLAGS: 00010217 [ 1485.311098][T12083] RAX: 0000000000000000 RBX: 00007f16d92b4270 RCX: 00007f16d902c159 [ 1485.319046][T12083] RDX: 0000200000000200 RSI: 00002000000001d0 RDI: 0000000020000000 [ 1485.326997][T12083] RBP: 00007f16d90c306b R08: 0000200000000280 R09: 0000200000000280 [ 1485.334947][T12083] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 1485.342898][T12083] R13: 00007f16d92b4308 R14: 00007f16d92b4270 R15: 00007ffce002b068 [ 1485.536494][T12083] memory: usage 307200kB, limit 307200kB, failcnt 40668 [ 1485.554087][T12083] memory+swap: usage 429204kB, limit 9007199254740988kB, failcnt 0 [ 1485.577906][T12083] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1485.605600][T12083] Memory cgroup stats for /syz3: [ 1485.605717][T12083] anon 405504 [ 1485.605717][T12083] file 311021568 [ 1485.605717][T12083] kernel_stack 0 [ 1485.605717][T12083] percpu 0 [ 1485.605717][T12083] sock 0 [ 1485.605717][T12083] shmem 310886400 [ 1485.605717][T12083] file_mapped 135168 [ 1485.605717][T12083] file_dirty 135168 [ 1485.605717][T12083] file_writeback 0 [ 1485.605717][T12083] anon_thp 0 [ 1485.605717][T12083] inactive_anon 313610240 [ 1485.605717][T12083] active_anon 643072 [ 1485.605717][T12083] inactive_file 0 [ 1485.605717][T12083] active_file 86016 [ 1485.605717][T12083] unevictable 0 [ 1485.605717][T12083] slab_reclaimable 0 [ 1485.605717][T12083] slab_unreclaimable 0 [ 1485.605717][T12083] slab 0 [ 1485.605717][T12083] workingset_refault_anon 33 [ 1485.605717][T12083] workingset_refault_file 33033 [ 1485.605717][T12083] workingset_activate_anon 0 [ 1485.605717][T12083] workingset_activate_file 17424 [ 1485.605717][T12083] workingset_restore_anon 0 [ 1485.605717][T12083] workingset_restore_file 13893 [ 1485.707396][T12860] device syzkaller0 entered promiscuous mode [ 1486.066374][T12894] device syzkaller0 entered promiscuous mode [ 1486.076250][T12083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18349,pid=12554,uid=0 [ 1486.107329][T12083] Memory cgroup out of memory: OOM victim 12554 (syz.3.18349) is already exiting. Skip killing the task [ 1486.163971][T12072] syz.3.18239 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1486.193544][T12072] CPU: 0 PID: 12072 Comm: syz.3.18239 Tainted: G W syzkaller #0 [ 1486.202498][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1486.212548][T12072] Call Trace: [ 1486.215835][T12072] __dump_stack+0x21/0x24 [ 1486.220155][T12072] dump_stack_lvl+0x1a7/0x208 [ 1486.224829][T12072] ? show_regs_print_info+0x18/0x18 [ 1486.230019][T12072] ? ___ratelimit+0x421/0x5a0 [ 1486.234692][T12072] ? _raw_spin_lock+0x94/0xf0 [ 1486.239371][T12072] dump_stack+0x15/0x1c [ 1486.243519][T12072] dump_header+0xd9/0x650 [ 1486.247841][T12072] oom_kill_process+0x1fa/0x2c0 [ 1486.252685][T12072] out_of_memory+0x879/0xce0 [ 1486.257272][T12072] ? unregister_oom_notifier+0x20/0x20 [ 1486.262722][T12072] ? mutex_lock_killable+0xdf/0xf0 [ 1486.267825][T12072] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1486.274317][T12072] ? __alloc_pages_nodemask+0x29a/0x640 [ 1486.279854][T12072] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1486.285401][T12072] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1486.290945][T12072] ? _raw_spin_trylock_bh+0x150/0x150 [ 1486.296310][T12072] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1486.301860][T12072] try_charge+0xfa9/0x1580 [ 1486.306275][T12072] ? __memcg_kmem_charge+0x150/0x150 [ 1486.311553][T12072] ? __kasan_check_write+0x14/0x20 [ 1486.316653][T12072] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1486.322450][T12072] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1486.327985][T12072] __mem_cgroup_charge+0x148/0x6d0 [ 1486.333087][T12072] shmem_add_to_page_cache+0x569/0xe10 [ 1486.338537][T12072] ? shmem_alloc_page+0x380/0x380 [ 1486.343551][T12072] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1486.349097][T12072] ? find_lock_entry+0x4b/0x200 [ 1486.353935][T12072] shmem_getpage_gfp+0x907/0x20f0 [ 1486.358952][T12072] shmem_write_begin+0xce/0x1b0 [ 1486.363791][T12072] generic_perform_write+0x2ce/0x540 [ 1486.369067][T12072] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1486.374862][T12072] ? file_remove_privs+0x590/0x590 [ 1486.379964][T12072] ? __kasan_check_write+0x14/0x20 [ 1486.385066][T12072] ? down_write+0xb2/0x120 [ 1486.389474][T12072] __generic_file_write_iter+0x24b/0x480 [ 1486.395096][T12072] ? generic_write_checks+0x3df/0x480 [ 1486.400457][T12072] generic_file_write_iter+0xa9/0x1d0 [ 1486.405824][T12072] __kernel_write+0x5a5/0x9d0 [ 1486.410502][T12072] ? vfs_read+0xa50/0xa50 [ 1486.414846][T12072] ? populate_vma_page_range+0xf0/0xf0 [ 1486.420302][T12072] ? sched_clock+0x3a/0x40 [ 1486.424712][T12072] ? cgroup_freezing+0x86/0xb0 [ 1486.429469][T12072] ? freezing_slow_path+0x10a/0x150 [ 1486.434655][T12072] dump_emit+0x255/0x380 [ 1486.438891][T12072] ? wait_for_dump_helpers+0x380/0x380 [ 1486.444343][T12072] dump_user_range+0x6a/0x1a0 [ 1486.449013][T12072] elf_core_dump+0x27af/0x2c20 [ 1486.453771][T12072] ? load_elf_binary+0x2910/0x2910 [ 1486.458869][T12072] ? __fsnotify_parent+0x6db/0x7c0 [ 1486.463979][T12072] ? do_truncate+0x1c6/0x240 [ 1486.468556][T12072] ? putname+0xfe/0x150 [ 1486.472700][T12072] ? __kasan_check_read+0x11/0x20 [ 1486.477717][T12072] ? cgroup_freezing+0x86/0xb0 [ 1486.482476][T12072] ? freezing_slow_path+0x10a/0x150 [ 1486.487669][T12072] do_coredump+0x1be6/0x2910 [ 1486.492264][T12072] ? simple_acl_create+0x1c0/0x1c0 [ 1486.497379][T12072] ? debug_smp_processor_id+0x17/0x20 [ 1486.502746][T12072] ? kmem_cache_free+0x100/0x2d0 [ 1486.507687][T12072] ? ____kasan_slab_free+0x130/0x160 [ 1486.512965][T12072] ? get_signal+0xbdb/0x1300 [ 1486.517559][T12072] ? kmem_cache_free+0x100/0x2d0 [ 1486.522491][T12072] get_signal+0xf4c/0x1300 [ 1486.526903][T12072] arch_do_signal_or_restart+0xe7/0x11b0 [ 1486.532527][T12072] ? __send_signal+0x929/0xc10 [ 1486.537283][T12072] ? send_signal+0x3a5/0x580 [ 1486.541870][T12072] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1486.547499][T12072] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1486.553300][T12072] ? force_sig+0xca/0x120 [ 1486.557617][T12072] ? send_sig+0x70/0x70 [ 1486.561767][T12072] exit_to_user_mode_loop+0xa2/0xe0 [ 1486.566951][T12072] exit_to_user_mode_prepare+0x76/0xa0 [ 1486.572402][T12072] irqentry_exit_to_user_mode+0x9/0x10 [ 1486.577847][T12072] irqentry_exit+0x12/0x60 [ 1486.582251][T12072] exc_general_protection+0x1ca/0x250 [ 1486.587608][T12072] ? debug_smp_processor_id+0x17/0x20 [ 1486.592970][T12072] ? asm_exc_general_protection+0x8/0x30 [ 1486.598586][T12072] asm_exc_general_protection+0x1e/0x30 [ 1486.604127][T12072] RIP: 0033:0x7f16d902c161 [ 1486.608536][T12072] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1486.628129][T12072] RSP: 002b:00002000000001d0 EFLAGS: 00010217 [ 1486.634196][T12072] RAX: 0000000000000000 RBX: 00007f16d92b4270 RCX: 00007f16d902c159 [ 1486.642154][T12072] RDX: 0000200000000200 RSI: 00002000000001d0 RDI: 0000000020000000 [ 1486.650112][T12072] RBP: 00007f16d90c306b R08: 0000200000000280 R09: 0000200000000280 [ 1486.658072][T12072] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 1486.666031][T12072] R13: 00007f16d92b4308 R14: 00007f16d92b4270 R15: 00007ffce002b068 [ 1486.684027][T12926] device veth1_to_bond entered promiscuous mode [ 1486.879281][T12944] device sit0 entered promiscuous mode [ 1486.880390][T12072] memory: usage 307116kB, limit 307200kB, failcnt 40707 [ 1486.891848][T12072] memory+swap: usage 429120kB, limit 9007199254740988kB, failcnt 0 [ 1486.904787][T12072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1486.911665][T12072] Memory cgroup stats for /syz3: [ 1486.911775][T12072] anon 135168 [ 1486.911775][T12072] file 311156736 [ 1486.911775][T12072] kernel_stack 0 [ 1486.911775][T12072] percpu 0 [ 1486.911775][T12072] sock 0 [ 1486.911775][T12072] shmem 311156736 [ 1486.911775][T12072] file_mapped 135168 [ 1486.911775][T12072] file_dirty 135168 [ 1486.911775][T12072] file_writeback 0 [ 1486.911775][T12072] anon_thp 0 [ 1486.911775][T12072] inactive_anon 313610240 [ 1486.911775][T12072] active_anon 643072 [ 1486.911775][T12072] inactive_file 0 [ 1486.911775][T12072] active_file 86016 [ 1486.911775][T12072] unevictable 0 [ 1486.911775][T12072] slab_reclaimable 0 [ 1486.911775][T12072] slab_unreclaimable 0 [ 1486.911775][T12072] slab 0 [ 1486.911775][T12072] workingset_refault_anon 33 [ 1486.911775][T12072] workingset_refault_file 33066 [ 1486.911775][T12072] workingset_activate_anon 0 [ 1486.911775][T12072] workingset_activate_file 17424 [ 1486.911775][T12072] workingset_restore_anon 0 [ 1486.911775][T12072] workingset_restore_file 13893 [ 1487.046969][T12955] device syzkaller0 entered promiscuous mode [ 1487.051002][T12072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18239,pid=12115,uid=0 [ 1487.076285][T12072] Memory cgroup out of memory: Killed process 12115 (syz.3.18239) total-vm:90660kB, anon-rss:1288kB, file-rss:21572kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1487.097427][ T27] oom_reaper: reaped process 12115 (syz.3.18239), now anon-rss:0kB, file-rss:21508kB, shmem-rss:0kB [ 1487.152680][T12073] syz.3.18239 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1487.213787][T12073] CPU: 1 PID: 12073 Comm: syz.3.18239 Tainted: G W syzkaller #0 [ 1487.222744][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1487.232791][T12073] Call Trace: [ 1487.236077][T12073] __dump_stack+0x21/0x24 [ 1487.240410][T12073] dump_stack_lvl+0x1a7/0x208 [ 1487.245089][T12073] ? show_regs_print_info+0x18/0x18 [ 1487.250285][T12073] ? ___ratelimit+0x421/0x5a0 [ 1487.254957][T12073] ? _raw_spin_lock+0x94/0xf0 [ 1487.259627][T12073] dump_stack+0x15/0x1c [ 1487.263776][T12073] dump_header+0xd9/0x650 [ 1487.268104][T12073] oom_kill_process+0x1fa/0x2c0 [ 1487.272949][T12073] out_of_memory+0x879/0xce0 [ 1487.277575][T12073] ? unregister_oom_notifier+0x20/0x20 [ 1487.283031][T12073] ? mutex_lock_killable+0xdf/0xf0 [ 1487.288141][T12073] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1487.294637][T12073] ? __alloc_pages_nodemask+0x29a/0x640 [ 1487.300191][T12073] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1487.305732][T12073] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1487.311279][T12073] ? _raw_spin_trylock_bh+0x150/0x150 [ 1487.316652][T12073] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1487.322194][T12073] try_charge+0xfa9/0x1580 [ 1487.326606][T12073] ? __memcg_kmem_charge+0x150/0x150 [ 1487.331884][T12073] ? __kasan_check_write+0x14/0x20 [ 1487.336987][T12073] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1487.342786][T12073] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1487.348333][T12073] __mem_cgroup_charge+0x148/0x6d0 [ 1487.353438][T12073] shmem_add_to_page_cache+0x569/0xe10 [ 1487.358889][T12073] ? shmem_alloc_page+0x380/0x380 [ 1487.363902][T12073] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1487.369447][T12073] ? find_lock_entry+0x4b/0x200 [ 1487.374289][T12073] shmem_getpage_gfp+0x907/0x20f0 [ 1487.379313][T12073] shmem_write_begin+0xce/0x1b0 [ 1487.384166][T12073] generic_perform_write+0x2ce/0x540 [ 1487.389449][T12073] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1487.395252][T12073] ? file_remove_privs+0x590/0x590 [ 1487.400360][T12073] ? __kasan_check_write+0x14/0x20 [ 1487.405463][T12073] ? down_write+0xb2/0x120 [ 1487.409874][T12073] __generic_file_write_iter+0x24b/0x480 [ 1487.415497][T12073] ? generic_write_checks+0x3df/0x480 [ 1487.420868][T12073] generic_file_write_iter+0xa9/0x1d0 [ 1487.426232][T12073] __kernel_write+0x5a5/0x9d0 [ 1487.430914][T12073] ? vfs_read+0xa50/0xa50 [ 1487.435244][T12073] ? populate_vma_page_range+0xf0/0xf0 [ 1487.440701][T12073] ? cgroup_freezing+0x86/0xb0 [ 1487.445456][T12073] ? freezing_slow_path+0x10a/0x150 [ 1487.450656][T12073] dump_emit+0x255/0x380 [ 1487.454905][T12073] ? wait_for_dump_helpers+0x380/0x380 [ 1487.460357][T12073] ? dump_user_range+0xaf/0x1a0 [ 1487.465205][T12073] dump_user_range+0x6a/0x1a0 [ 1487.469877][T12073] elf_core_dump+0x27af/0x2c20 [ 1487.474637][T12073] ? load_elf_binary+0x2910/0x2910 [ 1487.479755][T12073] ? __fsnotify_parent+0x6db/0x7c0 [ 1487.484869][T12073] ? do_truncate+0x1c6/0x240 [ 1487.489449][T12073] ? putname+0xfe/0x150 [ 1487.493604][T12073] ? __kasan_check_read+0x11/0x20 [ 1487.498620][T12073] ? cgroup_freezing+0x86/0xb0 [ 1487.503379][T12073] ? freezing_slow_path+0x10a/0x150 [ 1487.508568][T12073] do_coredump+0x1be6/0x2910 [ 1487.513157][T12073] ? simple_acl_create+0x1c0/0x1c0 [ 1487.518258][T12073] ? debug_smp_processor_id+0x17/0x20 [ 1487.523618][T12073] ? kmem_cache_free+0x100/0x2d0 [ 1487.528544][T12073] ? ____kasan_slab_free+0x130/0x160 [ 1487.533823][T12073] ? get_signal+0xbdb/0x1300 [ 1487.538407][T12073] ? kmem_cache_free+0x100/0x2d0 [ 1487.543337][T12073] get_signal+0xf4c/0x1300 [ 1487.547752][T12073] arch_do_signal_or_restart+0xe7/0x11b0 [ 1487.553380][T12073] ? __send_signal+0x929/0xc10 [ 1487.558138][T12073] ? send_signal+0x3a5/0x580 [ 1487.562717][T12073] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1487.568346][T12073] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1487.574145][T12073] ? force_sig+0xca/0x120 [ 1487.578464][T12073] ? send_sig+0x70/0x70 [ 1487.582620][T12073] exit_to_user_mode_loop+0xa2/0xe0 [ 1487.587806][T12073] exit_to_user_mode_prepare+0x76/0xa0 [ 1487.593252][T12073] irqentry_exit_to_user_mode+0x9/0x10 [ 1487.598681][T12073] irqentry_exit+0x12/0x60 [ 1487.603083][T12073] exc_general_protection+0x1ca/0x250 [ 1487.608445][T12073] ? __kasan_check_read+0x11/0x20 [ 1487.613484][T12073] ? asm_exc_general_protection+0x8/0x30 [ 1487.619110][T12073] asm_exc_general_protection+0x1e/0x30 [ 1487.624653][T12073] RIP: 0033:0x7f16d902c161 [ 1487.629062][T12073] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1487.648747][T12073] RSP: 002b:00002000000001d0 EFLAGS: 00010217 [ 1487.654816][T12073] RAX: 0000000000000000 RBX: 00007f16d92b4270 RCX: 00007f16d902c159 [ 1487.662783][T12073] RDX: 0000200000000200 RSI: 00002000000001d0 RDI: 0000000020000000 [ 1487.670750][T12073] RBP: 00007f16d90c306b R08: 0000200000000280 R09: 0000200000000280 [ 1487.678712][T12073] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 1487.686704][T12073] R13: 00007f16d92b4308 R14: 00007f16d92b4270 R15: 00007ffce002b068 [ 1487.703183][T12073] memory: usage 292376kB, limit 307200kB, failcnt 41174 [ 1487.714617][T12073] memory+swap: usage 412492kB, limit 9007199254740988kB, failcnt 0 [ 1487.738890][T12073] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1487.776277][T12073] Memory cgroup stats for /syz3: [ 1487.776391][T12073] anon 270336 [ 1487.776391][T12073] file 292503552 [ 1487.776391][T12073] kernel_stack 0 [ 1487.776391][T12073] percpu 0 [ 1487.776391][T12073] sock 0 [ 1487.776391][T12073] shmem 292503552 [ 1487.776391][T12073] file_mapped 135168 [ 1487.776391][T12073] file_dirty 135168 [ 1487.776391][T12073] file_writeback 0 [ 1487.776391][T12073] anon_thp 0 [ 1487.776391][T12073] inactive_anon 294547456 [ 1487.776391][T12073] active_anon 643072 [ 1487.776391][T12073] inactive_file 0 [ 1487.776391][T12073] active_file 86016 [ 1487.776391][T12073] unevictable 0 [ 1487.776391][T12073] slab_reclaimable 0 [ 1487.776391][T12073] slab_unreclaimable 0 [ 1487.776391][T12073] slab 0 [ 1487.776391][T12073] workingset_refault_anon 33 [ 1487.776391][T12073] workingset_refault_file 33066 [ 1487.776391][T12073] workingset_activate_anon 0 [ 1487.776391][T12073] workingset_activate_file 17424 [ 1487.776391][T12073] workingset_restore_anon 0 [ 1487.776391][T12073] workingset_restore_file 13893 [ 1488.159226][T12073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18239,pid=12072,uid=0 [ 1488.292259][T12073] Memory cgroup out of memory: OOM victim 12072 (syz.3.18239) is already exiting. Skip killing the task [ 1488.553012][T13009] device syzkaller0 entered promiscuous mode [ 1490.099747][T13061] : port 1(ip6gretap0) entered blocking state [ 1490.199318][T13061] : port 1(ip6gretap0) entered disabled state [ 1490.296207][T13061] device ip6gretap0 entered promiscuous mode [ 1490.360105][T13081] device syzkaller0 left promiscuous mode [ 1490.642632][T12109] syz.3.18239 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1490.731558][T12109] CPU: 0 PID: 12109 Comm: syz.3.18239 Tainted: G W syzkaller #0 [ 1490.740519][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1490.750565][T12109] Call Trace: [ 1490.753853][T12109] __dump_stack+0x21/0x24 [ 1490.758174][T12109] dump_stack_lvl+0x1a7/0x208 [ 1490.762843][T12109] ? show_regs_print_info+0x18/0x18 [ 1490.768039][T12109] ? ___ratelimit+0x421/0x5a0 [ 1490.772709][T12109] ? _raw_spin_lock+0x94/0xf0 [ 1490.777376][T12109] dump_stack+0x15/0x1c [ 1490.781520][T12109] dump_header+0xd9/0x650 [ 1490.785831][T12109] oom_kill_process+0x1fa/0x2c0 [ 1490.790660][T12109] out_of_memory+0x879/0xce0 [ 1490.795227][T12109] ? unregister_oom_notifier+0x20/0x20 [ 1490.800690][T12109] ? mutex_lock_killable+0x92/0xf0 [ 1490.805777][T12109] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1490.812260][T12109] ? __alloc_pages_nodemask+0x29a/0x640 [ 1490.817782][T12109] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1490.823303][T12109] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1490.828826][T12109] ? _raw_spin_trylock_bh+0x150/0x150 [ 1490.834174][T12109] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1490.839695][T12109] try_charge+0xfa9/0x1580 [ 1490.844091][T12109] ? __memcg_kmem_charge+0x150/0x150 [ 1490.849382][T12109] ? __kasan_check_write+0x14/0x20 [ 1490.854468][T12109] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 1490.860256][T12109] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1490.865776][T12109] __mem_cgroup_charge+0x148/0x6d0 [ 1490.870861][T12109] shmem_add_to_page_cache+0x569/0xe10 [ 1490.876314][T12109] ? shmem_alloc_page+0x380/0x380 [ 1490.881313][T12109] ? _raw_spin_lock_irqsave+0x130/0x130 [ 1490.886833][T12109] ? find_lock_entry+0x4b/0x200 [ 1490.891662][T12109] shmem_getpage_gfp+0x907/0x20f0 [ 1490.896684][T12109] shmem_write_begin+0xce/0x1b0 [ 1490.901515][T12109] generic_perform_write+0x2ce/0x540 [ 1490.906775][T12109] ? atime_needs_update+0x5b0/0x5b0 [ 1490.911949][T12109] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1490.917830][T12109] ? file_remove_privs+0x590/0x590 [ 1490.922918][T12109] ? __kasan_check_write+0x14/0x20 [ 1490.928003][T12109] ? down_write+0xb2/0x120 [ 1490.932396][T12109] __generic_file_write_iter+0x24b/0x480 [ 1490.938005][T12109] ? generic_write_checks+0x3df/0x480 [ 1490.943351][T12109] generic_file_write_iter+0xa9/0x1d0 [ 1490.948695][T12109] __kernel_write+0x5a5/0x9d0 [ 1490.953348][T12109] ? vfs_read+0xa50/0xa50 [ 1490.957654][T12109] ? populate_vma_page_range+0xf0/0xf0 [ 1490.963090][T12109] ? cgroup_freezing+0x86/0xb0 [ 1490.967855][T12109] ? freezing_slow_path+0x10a/0x150 [ 1490.973028][T12109] dump_emit+0x255/0x380 [ 1490.977251][T12109] ? wait_for_dump_helpers+0x380/0x380 [ 1490.982778][T12109] dump_user_range+0x6a/0x1a0 [ 1490.987428][T12109] elf_core_dump+0x27af/0x2c20 [ 1490.992169][T12109] ? load_elf_binary+0x2910/0x2910 [ 1490.997255][T12109] ? __fsnotify_parent+0x6db/0x7c0 [ 1491.002356][T12109] ? do_truncate+0x1c6/0x240 [ 1491.006920][T12109] ? putname+0xfe/0x150 [ 1491.011052][T12109] ? __kasan_check_read+0x11/0x20 [ 1491.016052][T12109] ? cgroup_freezing+0x86/0xb0 [ 1491.020790][T12109] ? freezing_slow_path+0x10a/0x150 [ 1491.025961][T12109] do_coredump+0x1be6/0x2910 [ 1491.030532][T12109] ? simple_acl_create+0x1c0/0x1c0 [ 1491.035619][T12109] ? debug_smp_processor_id+0x17/0x20 [ 1491.040964][T12109] ? kmem_cache_free+0x100/0x2d0 [ 1491.045875][T12109] ? ____kasan_slab_free+0x130/0x160 [ 1491.051136][T12109] ? get_signal+0xbdb/0x1300 [ 1491.055701][T12109] ? kmem_cache_free+0x2a9/0x2d0 [ 1491.060615][T12109] get_signal+0xf4c/0x1300 [ 1491.065008][T12109] arch_do_signal_or_restart+0xe7/0x11b0 [ 1491.070615][T12109] ? __send_signal+0x929/0xc10 [ 1491.075354][T12109] ? send_signal+0x3a5/0x580 [ 1491.079919][T12109] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 1491.085522][T12109] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1491.091304][T12109] ? force_sig+0xca/0x120 [ 1491.095609][T12109] ? send_sig+0x70/0x70 [ 1491.099740][T12109] exit_to_user_mode_loop+0xa2/0xe0 [ 1491.104911][T12109] exit_to_user_mode_prepare+0x76/0xa0 [ 1491.110345][T12109] irqentry_exit_to_user_mode+0x9/0x10 [ 1491.115781][T12109] irqentry_exit+0x12/0x60 [ 1491.120172][T12109] exc_general_protection+0x1ca/0x250 [ 1491.125519][T12109] ? debug_smp_processor_id+0x17/0x20 [ 1491.130869][T12109] ? asm_exc_general_protection+0x8/0x30 [ 1491.136907][T12109] asm_exc_general_protection+0x1e/0x30 [ 1491.142425][T12109] RIP: 0033:0x7f16d902c161 [ 1491.146819][T12109] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1491.166398][T12109] RSP: 002b:00002000000001d0 EFLAGS: 00010217 [ 1491.172439][T12109] RAX: 0000000000000000 RBX: 00007f16d92b4270 RCX: 00007f16d902c159 [ 1491.180385][T12109] RDX: 0000200000000200 RSI: 00002000000001d0 RDI: 0000000020000000 [ 1491.188332][T12109] RBP: 00007f16d90c306b R08: 0000200000000280 R09: 0000200000000280 [ 1491.196280][T12109] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 1491.204231][T12109] R13: 00007f16d92b4308 R14: 00007f16d92b4270 R15: 00007ffce002b068 [ 1491.237804][T12109] memory: usage 307200kB, limit 307200kB, failcnt 43626 [ 1491.247192][T12109] memory+swap: usage 429292kB, limit 9007199254740988kB, failcnt 0 [ 1491.260542][T12109] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1491.267452][T12109] Memory cgroup stats for /syz3: [ 1491.267571][T12109] anon 405504 [ 1491.267571][T12109] file 311156736 [ 1491.267571][T12109] kernel_stack 0 [ 1491.267571][T12109] percpu 0 [ 1491.267571][T12109] sock 0 [ 1491.267571][T12109] shmem 311156736 [ 1491.267571][T12109] file_mapped 135168 [ 1491.267571][T12109] file_dirty 135168 [ 1491.267571][T12109] file_writeback 0 [ 1491.267571][T12109] anon_thp 0 [ 1491.267571][T12109] inactive_anon 313442304 [ 1491.267571][T12109] active_anon 913408 [ 1491.267571][T12109] inactive_file 65536 [ 1491.267571][T12109] active_file 73728 [ 1491.267571][T12109] unevictable 0 [ 1491.267571][T12109] slab_reclaimable 0 [ 1491.267571][T12109] slab_unreclaimable 0 [ 1491.267571][T12109] slab 0 [ 1491.267571][T12109] workingset_refault_anon 132 [ 1491.267571][T12109] workingset_refault_file 34122 [ 1491.267571][T12109] workingset_activate_anon 0 [ 1491.267571][T12109] workingset_activate_file 18447 [ 1491.267571][T12109] workingset_restore_anon 0 [ 1491.267571][T12109] workingset_restore_file 14850 [ 1491.365309][T12109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18239,pid=12077,uid=0 [ 1491.391559][T12109] Memory cgroup out of memory: Killed process 12077 (syz.3.18239) total-vm:90528kB, anon-rss:1244kB, file-rss:25468kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1491.526790][T13083] syz.3.18461 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1491.639855][T13083] CPU: 0 PID: 13083 Comm: syz.3.18461 Tainted: G W syzkaller #0 [ 1491.648811][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.658851][T13083] Call Trace: [ 1491.662120][T13083] __dump_stack+0x21/0x24 [ 1491.666424][T13083] dump_stack_lvl+0x1a7/0x208 [ 1491.671074][T13083] ? show_regs_print_info+0x18/0x18 [ 1491.676245][T13083] ? ___ratelimit+0x421/0x5a0 [ 1491.680898][T13083] ? _raw_spin_lock+0x94/0xf0 [ 1491.685549][T13083] dump_stack+0x15/0x1c [ 1491.689682][T13083] dump_header+0xd9/0x650 [ 1491.693987][T13083] oom_kill_process+0x1fa/0x2c0 [ 1491.698810][T13083] out_of_memory+0x879/0xce0 [ 1491.703376][T13083] ? unregister_oom_notifier+0x20/0x20 [ 1491.708807][T13083] ? mutex_lock_killable+0xdf/0xf0 [ 1491.713892][T13083] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 1491.720367][T13083] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 1491.725887][T13083] ? mem_cgroup_oom_trylock+0x340/0x340 [ 1491.731408][T13083] ? _raw_spin_trylock_bh+0x150/0x150 [ 1491.736752][T13083] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 1491.742271][T13083] try_charge+0xfa9/0x1580 [ 1491.746664][T13083] ? __set_page_owner+0x289/0x2a0 [ 1491.751663][T13083] ? __memcg_kmem_charge+0x150/0x150 [ 1491.756918][T13083] ? get_page_from_freelist+0x225f/0x23f0 [ 1491.762610][T13083] ? __add_to_page_cache_locked+0x81d/0x9b0 [ 1491.768478][T13083] ? read_pages+0x9b0/0xb50 [ 1491.772954][T13083] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 1491.778471][T13083] __mem_cgroup_charge+0x148/0x6d0 [ 1491.783559][T13083] __add_to_page_cache_locked+0x208/0x9b0 [ 1491.789252][T13083] ? __alloc_pages_nodemask+0x29a/0x640 [ 1491.794770][T13083] ? put_page+0xd0/0xd0 [ 1491.798900][T13083] ? workingset_activation+0x250/0x250 [ 1491.804334][T13083] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1491.809856][T13083] ? page_cache_prev_miss+0x250/0x290 [ 1491.815205][T13083] add_to_page_cache_lru+0xa7/0x210 [ 1491.820380][T13083] pagecache_get_page+0x700/0x930 [ 1491.825377][T13083] filemap_fault+0x1a89/0x2020 [ 1491.830121][T13083] ? generic_file_read_iter+0x580/0x580 [ 1491.835640][T13083] ? hrtimer_cancel+0x2d/0x60 [ 1491.840290][T13083] ? futex_wait+0x5b5/0x6f0 [ 1491.844770][T13083] ? __kasan_check_write+0x14/0x20 [ 1491.849856][T13083] ext4_filemap_fault+0x8a/0xa0 [ 1491.854679][T13083] handle_pte_fault+0x1683/0x3910 [ 1491.859682][T13083] handle_mm_fault+0xf86/0x1720 [ 1491.864513][T13083] ? can_reuse_spf_vma+0xe0/0xe0 [ 1491.869427][T13083] ? __kasan_check_write+0x14/0x20 [ 1491.874510][T13083] ? down_read_trylock+0x106/0x160 [ 1491.879595][T13083] ? __kasan_check_write+0x14/0x20 [ 1491.884679][T13083] ? can_reuse_spf_vma+0xc8/0xe0 [ 1491.889594][T13083] do_user_addr_fault+0x576/0xe20 [ 1491.894591][T13083] ? do_kern_addr_fault+0x80/0x80 [ 1491.899590][T13083] ? __kasan_check_read+0x11/0x20 [ 1491.904603][T13083] exc_page_fault+0x5a/0xc0 [ 1491.909079][T13083] ? asm_exc_page_fault+0x8/0x30 [ 1491.913990][T13083] asm_exc_page_fault+0x1e/0x30 [ 1491.918813][T13083] RIP: 0033:0x7f16d8ef4871 [ 1491.923207][T13083] Code: 00 48 89 ef e8 c0 51 ff ff 48 8b 05 09 ef ee 00 83 05 f2 ee ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 ef ee ee 00 <44> 88 78 ff 44 8b 3d d4 ee ee 00 e8 8f 51 ff ff 48 8b 05 e0 ee ee [ 1491.942783][T13083] RSP: 002b:00007ffce002b110 EFLAGS: 00010206 [ 1491.948826][T13083] RAX: 0000001b34b63fe0 RBX: 0000000000000002 RCX: 0000000000000002 [ 1491.956771][T13083] RDX: 0000001b34b63fdf RSI: 0000000000000008 RDI: 00007f16d9de3720 [ 1491.964718][T13083] RBP: 00007f16d9de3720 R08: 0000000000000000 R09: 00007f16d92b4128 [ 1491.972662][T13083] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1491.980613][T13083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1492.140985][T13083] memory: usage 295520kB, limit 307200kB, failcnt 43873 [ 1492.147947][T13083] memory+swap: usage 410408kB, limit 9007199254740988kB, failcnt 0 [ 1492.229215][T13083] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1492.237252][T13083] Memory cgroup stats for /syz3: [ 1492.237636][T13083] anon 405504 [ 1492.237636][T13083] file 304533504 [ 1492.237636][T13083] kernel_stack 0 [ 1492.237636][T13083] percpu 0 [ 1492.237636][T13083] sock 0 [ 1492.237636][T13083] shmem 304398336 [ 1492.237636][T13083] file_mapped 135168 [ 1492.237636][T13083] file_dirty 135168 [ 1492.237636][T13083] file_writeback 0 [ 1492.237636][T13083] anon_thp 0 [ 1492.237636][T13083] inactive_anon 306790400 [ 1492.237636][T13083] active_anon 913408 [ 1492.237636][T13083] inactive_file 65536 [ 1492.237636][T13083] active_file 73728 [ 1492.237636][T13083] unevictable 0 [ 1492.237636][T13083] slab_reclaimable 0 [ 1492.237636][T13083] slab_unreclaimable 0 [ 1492.237636][T13083] slab 0 [ 1492.237636][T13083] workingset_refault_anon 132 [ 1492.237636][T13083] workingset_refault_file 34122 [ 1492.237636][T13083] workingset_activate_anon 0 [ 1492.237636][T13083] workingset_activate_file 18447 [ 1492.237636][T13083] workingset_restore_anon 0 [ 1492.237636][T13083] workingset_restore_file 14850 [ 1492.341718][T13083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.18239,pid=12102,uid=0 [ 1492.509306][T13083] Memory cgroup out of memory: Killed process 12102 (syz.3.18239) total-vm:90528kB, anon-rss:1244kB, file-rss:24952kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1493.321097][T13167] device syzkaller0 entered promiscuous mode [ 1494.615264][T13201] device syzkaller0 entered promiscuous mode [ 1495.816810][T13250] tap0: tun_chr_ioctl cmd 1074025684 [ 1496.826450][T13297] device ip6gretap0 left promiscuous mode [ 1496.855911][T13297] : port 1(ip6gretap0) entered disabled state [ 1497.181358][T13336] device syzkaller0 entered promiscuous mode [ 1497.640589][T13369] tun0: tun_chr_ioctl cmd 2147767520 [ 1497.646032][T13369] tun0: tun_chr_ioctl cmd 2147767507 [ 1497.656989][T13376] tun0: tun_chr_ioctl cmd 2147767507 [ 1497.662520][T13379] tun0: tun_chr_ioctl cmd 2147767520 [ 1497.669454][T13377] tun0: tun_chr_ioctl cmd 1074025673 [ 1498.597747][T13438] device sit0 left promiscuous mode [ 1499.053681][T13484] tun0: tun_chr_ioctl cmd 1074025675 [ 1499.059016][T13484] tun0: persist enabled [ 1499.063854][T13484] tun0: tun_chr_ioctl cmd 1074025675 [ 1499.069139][T13484] tun0: persist disabled [ 1499.074965][T13485] tun0: tun_chr_ioctl cmd 1074025675 [ 1499.088548][T13485] tun0: persist disabled [ 1499.123507][T13492] ªªªªª6: renamed from veth0_vlan [ 1500.026115][T13620] device syzkaller0 entered promiscuous mode [ 1500.446813][T13650] device syzkaller0 entered promiscuous mode [ 1500.795788][T13669] ±ÿÿÿ: renamed from team_slave_1 [ 1502.572877][T13755] device syzkaller0 entered promiscuous mode [ 1503.078451][T13782] device syzkaller0 entered promiscuous mode [ 1504.072128][T13815] device syzkaller0 entered promiscuous mode [ 1504.873118][T13848] device syzkaller0 left promiscuous mode [ 1505.367610][T13862] device syzkaller0 entered promiscuous mode [ 1505.535693][T13888] device syzkaller0 entered promiscuous mode [ 1506.967865][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.978209][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.093497][T13967] device bridge_slave_1 left promiscuous mode [ 1507.115388][T13967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.134201][T13967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.143879][T14009] device sit0 entered promiscuous mode [ 1509.072020][T14024] device syzkaller0 entered promiscuous mode [ 1509.181608][T14041] device sit0 left promiscuous mode [ 1509.311580][T14042] device sit0 entered promiscuous mode [ 1510.454871][T14115] device syzkaller0 entered promiscuous mode [ 1510.481803][T14115] device vlan1 entered promiscuous mode [ 1510.545990][T14127] sock: sock_set_timeout: `syz.0.18711' (pid 14127) tries to set negative timeout [ 1510.893851][T14164] syzkaller0: refused to change device tx_queue_len [ 1511.792911][T14200] ÿÿÿÿÿÿ: renamed from vlan1 [ 1511.817788][T14205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.824985][T14205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.832575][T14205] device bridge0 entered promiscuous mode [ 1512.104263][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1513.998170][T14299] device veth1_macvtap left promiscuous mode [ 1514.019250][T14299] device macsec0 entered promiscuous mode [ 1515.614939][T14350] device syzkaller0 entered promiscuous mode [ 1517.178789][T14474] device syzkaller0 entered promiscuous mode [ 1517.195650][T14476] device syzkaller0 entered promiscuous mode [ 1517.233145][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1517.277187][T14496] device sit0 left promiscuous mode [ 1517.286234][T14497] device sit0 entered promiscuous mode [ 1517.538589][T14520] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1517.545624][T14520] pim6reg0: linktype set to 776 [ 1517.700027][T14532] device syzkaller0 left promiscuous mode [ 1518.862037][T14666] : port 1(ip6gretap0) entered blocking state [ 1518.869083][T14666] : port 1(ip6gretap0) entered disabled state [ 1518.881077][T14666] device ip6gretap0 entered promiscuous mode [ 1518.909383][T14669] device ip6gretap0 left promiscuous mode [ 1518.915166][T14669] : port 1(ip6gretap0) entered disabled state [ 1519.278780][T14732] device syzkaller0 entered promiscuous mode [ 1519.480186][T14745] device syzkaller0 entered promiscuous mode [ 1520.296764][T14818] device macsec0 left promiscuous mode [ 1523.036109][T14938] device syzkaller0 entered promiscuous mode [ 1524.334782][T15031] device syzkaller0 entered promiscuous mode [ 1525.355704][T15051] device syzkaller0 entered promiscuous mode [ 1525.419128][T15056] device sit0 left promiscuous mode [ 1525.633061][T15065] device sit0 entered promiscuous mode [ 1525.659676][T15074] : port 1(dummy0) entered blocking state [ 1525.684528][T15074] : port 1(dummy0) entered disabled state [ 1525.701961][T15074] device dummy0 entered promiscuous mode [ 1525.719623][T15074] : port 1(dummy0) entered blocking state [ 1525.725452][T15074] : port 1(dummy0) entered forwarding state [ 1525.766050][T15076] device dummy0 left promiscuous mode [ 1525.779347][T15076] : port 1(dummy0) entered disabled state [ 1525.794845][T15084] device sit0 left promiscuous mode [ 1525.901114][T15088] device sit0 entered promiscuous mode [ 1527.733188][T15121] device sit0 left promiscuous mode [ 1528.070596][T15120] device sit0 entered promiscuous mode [ 1529.149063][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.156272][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.392256][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.399356][T15184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.406633][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.413705][T15184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.469211][T15184] device bridge0 entered promiscuous mode [ 1529.922347][T15207] device sit0 left promiscuous mode [ 1532.005998][T15302] device bridge0 left promiscuous mode [ 1532.012491][T15302] device bridge_slave_1 left promiscuous mode [ 1532.018792][T15302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.026330][T15302] device bridge_slave_0 left promiscuous mode [ 1532.057360][T15302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.121474][T19543] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1532.257927][T15311] device syzkaller0 entered promiscuous mode [ 1532.323164][T15318] device dummy0 entered promiscuous mode [ 1532.328891][T15318] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1534.254911][T15454] device veth1_vlan entered promiscuous mode [ 1534.397727][T15469] : port 1(ip6gretap0) entered blocking state [ 1534.409303][T15469] : port 1(ip6gretap0) entered disabled state [ 1534.429885][T15469] device ip6gretap0 entered promiscuous mode [ 1534.445093][T15469] device ip6gretap0 left promiscuous mode [ 1534.451486][T15469] : port 1(ip6gretap0) entered disabled state [ 1534.689263][T15506] device wg2 left promiscuous mode [ 1534.804105][T15521] device veth0_vlan left promiscuous mode [ 1534.814475][T15521] device veth0_vlan entered promiscuous mode [ 1534.826949][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1534.843742][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1534.860826][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1535.204729][T15543] syz.0.19038[15543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1535.204775][T15543] syz.0.19038[15543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1535.355992][T15560] ref_ctr_offset mismatch. inode: 0x6da offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1536.468148][T15605] device syzkaller0 entered promiscuous mode [ 1538.821821][T15681] -: renamed from syzkaller0 [ 1538.985767][T15688] syzkaller0: mtu less than device minimum [ 1539.242436][T15698] device syzkaller0 left promiscuous mode [ 1540.065363][T15730] device syzkaller0 entered promiscuous mode [ 1541.014908][T15776] device dummy0 entered promiscuous mode [ 1541.021096][T15776] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1543.982330][T15909] tap0: tun_chr_ioctl cmd 1074025680 [ 1547.245479][T16048] device macsec0 entered promiscuous mode [ 1547.495312][T16067] device lo entered promiscuous mode [ 1547.562077][T16066] device lo left promiscuous mode [ 1548.461223][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1548.481518][T16099] device syzkaller0 entered promiscuous mode [ 1548.507284][ T1326] syzkaller0: tun_net_xmit 48 [ 1550.313603][T16170] syzkaller0: tun_net_xmit 1280 [ 1550.407795][T16170] syzkaller0: create flow: hash 2543052095 index 2 [ 1551.019504][T16165] syzkaller0: delete flow: hash 2543052095 index 2 [ 1551.949731][T16226] device sit0 left promiscuous mode [ 1551.979259][T16227] device sit0 entered promiscuous mode [ 1553.762163][T16276] device syzkaller0 entered promiscuous mode [ 1554.532854][T16318] device syzkaller0 entered promiscuous mode [ 1555.508487][T16411] ªªªªª6: renamed from veth0_vlan [ 1555.920087][T16434] ref_ctr_offset mismatch. inode: 0x82c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1557.444349][T16536] device syzkaller0 entered promiscuous mode [ 1557.466495][T16539] ref_ctr_offset mismatch. inode: 0x568 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1558.485873][T16563] device lo entered promiscuous mode [ 1558.501664][T16563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1558.536746][T16565] device pimreg0 entered promiscuous mode [ 1560.527497][T16664] device syzkaller0 entered promiscuous mode [ 1561.289108][T16705] syzkaller0: tun_net_xmit 1280 [ 1561.352411][T16705] syzkaller0: create flow: hash 2543052095 index 1 [ 1561.470683][T16711] device syzkaller0 left promiscuous mode [ 1561.512290][T16682] syzkaller0: delete flow: hash 2543052095 index 1 [ 1561.564371][T16711] device sit0 left promiscuous mode [ 1562.203906][T16740] device syzkaller0 entered promiscuous mode [ 1563.038195][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.045332][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.057560][T16781] device bridge0 left promiscuous mode [ 1563.070948][T16790] geneve0: tun_chr_ioctl cmd 1074812118 [ 1563.497979][T16841] device syzkaller0 left promiscuous mode [ 1564.775540][T16898] device veth1_macvtap entered promiscuous mode [ 1564.782844][T16897] device veth1_macvtap left promiscuous mode [ 1565.291297][T16947] device syzkaller0 entered promiscuous mode [ 1566.338306][T17015] device syzkaller0 entered promiscuous mode [ 1566.695613][T17037] device syzkaller0 entered promiscuous mode [ 1566.884084][T17052] device veth0_vlan left promiscuous mode [ 1566.957049][T17052] device veth0_vlan entered promiscuous mode [ 1566.964237][T19543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1567.001120][T19543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1567.022677][T19543] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 1568.237968][T17132] device syzkaller0 entered promiscuous mode [ 1568.632123][T17152] device veth0_virt_wifi entered promiscuous mode [ 1568.934156][T17200] rose0: tun_chr_ioctl cmd 1074812118 [ 1568.992516][T17205] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1568.998359][T17205] syzkaller0: linktype set to 780 [ 1569.106708][T17213] tap0: tun_chr_ioctl cmd 1074025680 [ 1570.917529][T23758] ------------[ cut here ]------------ [ 1570.923084][T23758] kernel BUG at kernel/bpf/arraymap.c:993! [ 1570.928969][T23758] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1570.935034][T23758] CPU: 1 PID: 23758 Comm: kworker/1:25 Tainted: G W syzkaller #0 [ 1570.944041][T23758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1570.954094][T23758] Workqueue: events prog_array_map_clear_deferred [ 1570.960498][T23758] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 1570.966723][T23758] Code: 59 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 48 59 e9 ff 0f 0b e9 78 f9 ff ff e8 3c 59 e9 ff 0f 0b e8 35 59 e9 ff <0f> 0b e8 2e 59 e9 ff 0f 0b e8 27 59 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 1570.986313][T23758] RSP: 0018:ffffc900012f7c20 EFLAGS: 00010293 [ 1570.992361][T23758] RAX: ffffffff817b5b7b RBX: ffff888118b17090 RCX: ffff88811f725000 [ 1571.000309][T23758] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 1571.008260][T23758] RBP: ffffc900012f7c98 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 1571.016213][T23758] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 1571.024168][T23758] R13: ffff8881143f5600 R14: 0000000000000001 R15: ffffffffa004cb00 [ 1571.032118][T23758] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1571.041457][T23758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1571.048017][T23758] CR2: 00007f010ee5c060 CR3: 0000000118685000 CR4: 00000000003506a0 [ 1571.055965][T23758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1571.063917][T23758] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1571.071864][T23758] Call Trace: [ 1571.075148][T23758] ? bpf_prog_b32a4f735fa8f099+0xb/0x500 [ 1571.080766][T23758] fd_array_map_delete_elem+0x142/0x240 [ 1571.086291][T23758] prog_array_map_clear_deferred+0x9e/0x140 [ 1571.092165][T23758] process_one_work+0x6fd/0xbc0 [ 1571.096993][T23758] worker_thread+0xa8e/0x13c0 [ 1571.101652][T23758] kthread+0x324/0x3b0 [ 1571.105701][T23758] ? worker_clr_flags+0x190/0x190 [ 1571.110704][T23758] ? kthread_blkcg+0xd0/0xd0 [ 1571.115269][T23758] ret_from_fork+0x1f/0x30 [ 1571.119659][T23758] Modules linked in: [ 1571.369223][T23758] ---[ end trace 815012e05dd511bc ]--- [ 1571.374745][T23758] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 1571.381064][T23758] Code: 59 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 48 59 e9 ff 0f 0b e9 78 f9 ff ff e8 3c 59 e9 ff 0f 0b e8 35 59 e9 ff <0f> 0b e8 2e 59 e9 ff 0f 0b e8 27 59 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 1571.400733][T23758] RSP: 0018:ffffc900012f7c20 EFLAGS: 00010293 [ 1571.406800][T23758] RAX: ffffffff817b5b7b RBX: ffff888118b17090 RCX: ffff88811f725000 [ 1571.414841][T23758] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 1571.422816][T23758] RBP: ffffc900012f7c98 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 1571.430967][T23758] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 1571.438934][T23758] R13: ffff8881143f5600 R14: 0000000000000001 R15: ffffffffa004cb00 [ 1571.447126][T23758] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1571.456175][T23758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1571.462938][T23758] CR2: 0000000100000000 CR3: 000000010d465000 CR4: 00000000003506a0 [ 1571.479221][T23758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1571.487203][T23758] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1571.495423][T23758] Kernel panic - not syncing: Fatal exception [ 1571.501730][T23758] Kernel Offset: disabled [ 1571.506094][T23758] Rebooting in 86400 seconds..