last executing test programs: 9.919008036s ago: executing program 4 (id=8542): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x400}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 8.17589791s ago: executing program 4 (id=8542): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x400}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 6.280370447s ago: executing program 4 (id=8542): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x400}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 4.429254329s ago: executing program 0 (id=8654): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 4.42684104s ago: executing program 2 (id=8656): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) r3 = syz_clone(0x65140000, &(0x7f0000000240)="4e844a41b7fc4cdcb6e6ded7c6ff6528c81efa78af14aa323523a456de8c71583668edb1e47368cb8f111a010442041c8f1d784b5353397daca9c3f62fa461a002edb36d8f6a98cc0953793c6031fbceefc1942ccc08481d78ff43ccc82d177a3c4ae6d12ffe7e4afe55a1f974f54767a7", 0x71, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="b142d5c09507c2c65817f345407c07b6054a752a6e9b393c0aaf8dbd2cc9bd32769930a9489d399c8f08249d169240") perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xb9, 0x0, 0x0, 0xd3, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000005c0), 0x6}, 0x0, 0x2000000, 0x0, 0x6, 0xfffffffffffffffd, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000262eaeea40933d70c6097fd9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r10, 0x0, 0x20000000}, 0x20) ioctl$TUNSETLINK(r8, 0x400454cd, 0x304) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x2c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x1e}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xce7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0xd, 0x2, 0x6, 0xffffffffffffff28}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x34, &(0x7f00000002c0)=""/52, 0x41000, 0x6, '\x00', 0x0, @fallback=0x16562cc183386b9, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x5, 0x485, 0xdf8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0xddd, 0xe, 0x1}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000004c0)=r12, 0x4) 4.392369243s ago: executing program 1 (id=8658): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x13, 0xf217ff6, 0x4, 0x1, 0x10, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x9, &(0x7f00000007c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000940)=""/202, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840)=[{0x1, 0x2, 0x6, 0x4}, {0x4, 0x3, 0x7, 0x9}], 0x10, 0x4824}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x13, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="3b667bd2fff43321e79cbb29e411", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000000000711836000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x3}, {0x4, 0x3}, {0xd, 0x4}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}, @enum={0x8, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x0, 0x7}, {0x10, 0x4}, {0x5, 0x8001}, {0x8, 0xfffffffc}, {0x5, 0x8}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x3}, @union={0x3, 0x8, 0x0, 0x5, 0x1, 0x5, [{0xd, 0x3}, {0xb, 0x1, 0x5}, {0x10, 0x5, 0x3}, {0x2, 0x5, 0x5705}, {0x6, 0x2, 0x7}, {0x1, 0x3, 0x3}, {0x4, 0x5, 0x3}, {0x7, 0x4, 0x2}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000005c0)=""/213, 0x11c, 0xd5, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r5, 0x4, 0x5, 0x4}, 0x50) 4.320961999s ago: executing program 0 (id=8661): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000d40)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 32) r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2200e2eb00009500"/24], &(0x7f0000000480)='GPL\x00'}, 0x80) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES8, @ANYRES16=r7, @ANYRESDEC=r5, @ANYRES64=r1], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r10, r9}, 0xc) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r8, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3bd8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x44}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1000, &(0x7f0000001740)=""/4096, 0x40f00, 0x1f, '\x00', r13, 0x0, r6, 0x8, &(0x7f0000000b80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x4, 0x1, 0x3972}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c00)=[r9], &(0x7f0000000c40)=[{0x5, 0x4, 0x7, 0xa}, {0x5, 0x3, 0x7, 0xb}, {0x4, 0x1, 0x6, 0xc}, {0x3, 0x5, 0xe, 0x3}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r15) (async) recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r16, &(0x7f0000000000), 0xe) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b000000050010000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r17, &(0x7f0000000040), 0x0}, 0x20) 4.320471229s ago: executing program 4 (id=8542): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x400}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.38225143s ago: executing program 0 (id=8662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000fbffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000071104b00000000009500000000000000cb5a43e78393"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x40, 0x71, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 2.380775s ago: executing program 1 (id=8663): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000004c0)="5737b1612f3eef1fb82af7d95687f0fa8de37625f0230ee608fc354943c9d3fa57c532f3172a08372d5c824c1b4df0145b39b98ae009b4b3005f1f38d150c18d032edce8ca0be29d9c90d8da121e0f2367f625c59a842a024b3c5df6e84b47e703225cdad3f2fdc50f0195a7be779698f3e4977cc2d29a553ca974cc467e8c4926090b4174f2329dc8b1e89c38b1f1c52ba020b5f5244d9e220b52c6d15f2d5819d5c9a1bcbd7c4aba16df52cd0ce338d600a98ab7b5421ab858fb49cd55c1d1200c5fd1fc1696da8d331f66cd29bf38bfd31001927b9d8963ad60", &(0x7f0000001dc0)=""/4096, &(0x7f00000002c0)="41d235a026dd163011233dadf66284daba788752d08c220aa8cb13fafbac73e70e6af4fb208785c5948633595e609273c0c59fb2b14b5b453215bbd2f2e94ed42d0e4f58b9676d", &(0x7f00000009c0)="e257084d042653daee02752ceebfe8ba39e1efa0917d1857738f1a8e298aa86a3ac64a84f0f55f18a423163fbeb5d2024c7b2223cd759172ecd46fbf5b0a287134e3f2460eb0b24539486bc2ed1b77b61a088248bd34d59f4edfce37b95a8601d4d79392244bb12b8ffacd5a4f96ad7fd4e3bf2caa0a7816031b4560dadf486717ae6fcb051202081e5e0458f7cf424139dd64ed2a130a65397cb2c9b63c8142ebb3681c59baa7919d0772d712088ef71e276d468b95036a9238bbd320a3f58f14f9e72544027933252833a6f77c8892b2e1366e06db3d8bc816724728fc7ccf25", 0x8, r7}, 0x38) syz_open_procfs$namespace(r3, &(0x7f0000000780)='ns/pid_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) unlink(&(0x7f0000000080)='./file0\x00') sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYBLOB='1-0,'], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) 2.37990216s ago: executing program 2 (id=8664): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000cd0a00000000000063019d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x40000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x411429b6}, 0x400, 0xfffffffffffffffd, 0x0, 0x1, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0xead6, 0x8c}, 0x806, 0xc8, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r11, 0xb4, &(0x7f0000000540)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 2.313567276s ago: executing program 1 (id=8666): r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4f, 0x30, 0x0, 0x6, 0x0, 0x2, 0x40, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x5be, 0x9}, 0x1000, 0xf00, 0x2, 0x3, 0x3ff, 0x4, 0x7f, 0x0, 0x4, 0x0, 0x6f}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x1efa4480bc39bba8, r4}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf479) sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)="6d0bb291a5ee5b8d7fdf970775074c0b", 0x10}], 0x1, 0x0, 0x0, 0x24004800}, 0x90) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000480)=0x40) close(r5) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) close(r0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x323) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', r2}, 0x18) openat$cgroup_devices(r3, &(0x7f0000000580)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x9, 0x0, 0x8, 0x9, 0x0, 0xe, 0x80440, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000005c0), 0x9}, 0x30, 0x3, 0x0, 0x2, 0x2, 0xb, 0x9, 0x0, 0xffff, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000680)={'xfrm0\x00', 0x400}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x640002, 0x0) socketpair(0xf, 0x5, 0xd, &(0x7f0000000700)) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x11, 0x1000, 0x80000001, 0x5, 0x4684, r5, 0x2930, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) write$cgroup_subtree(r3, &(0x7f00000007c0)={[{0x2b, 'devices'}]}, 0x9) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000800)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000840)={'dvmrp1\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000008c0)={0x2, 0x80, 0x4, 0x7, 0x6a, 0x9, 0x0, 0x3, 0x80000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000880), 0xf}, 0x10000, 0x0, 0x29e78, 0x2, 0x9, 0x1, 0x3, 0x0, 0x401, 0x0, 0x5}) 2.312900316s ago: executing program 0 (id=8667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x5b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000380)={0xfffffffffffffffe, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5aa40db80d601c31b90531cbd507b99f5b36ac4ee1de85ab7ac538e7cd3e07d0ca01ce0f5916a7b55c82f091ea0b5407f844a5f5954ad76aaf71b61e0b3961fb74e4939e919f49e8c22e252c47f629164c4ba0d7f6b30a91c68e34f07e4f8cc6b820482e493d50c4bc23ed9874ffc658a4036afa211e1bbdf8813426715f1d6993b530", 0x83}], 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.311842236s ago: executing program 3 (id=8668): r0 = syz_clone(0x100, &(0x7f00000000c0)="213ea2735b76a3e0a3368f3c50b1f2a2aa761fe2bd24b2e30727c5e9eba12ff6efd49d6ee69a6717fc995501e2", 0x2d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ad9751653a2d2926f2d5fa13248c622a63e7e726930a7e20f4") r1 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x7f, 0x0, 0x1, 0x0, 0x4000000000000, 0x18001, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x9, 0x7fffffffffffffff, 0x2, 0x9, 0x3, 0x5, 0x0, 0x0, 0x10, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x1, 0x0, 0x2, 0x8, 0x0, 0xfffffffffffffffe, 0x8a402, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x1000, 0xffffffffffff4a47, 0x583, 0x3, 0x4, 0x6, 0x4, 0x0, 0x0, 0x0, 0x5}, r0, 0x2, r1, 0xa) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x20, &(0x7f00000003c0)={&(0x7f00000002c0)=""/178, 0xb2, 0x0, &(0x7f0000000380)=""/20, 0x14}}, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000480)='cpu.weight\x00', 0x2, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, r6, 0xffffffff, '\x00', 0x0, r3, 0x3, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xf346}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x81f00, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, 0x0, 0x1, &(0x7f0000000a00)=[0xffffffffffffffff, r6, r6, r6], &(0x7f0000000a40)=[{0x5, 0x4, 0xf, 0x1}], 0x10, 0x6}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x20, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x900000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x0, 0x0, 0x1, 0x4, 0x4, 0x100, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0xea0c, 0x9c, &(0x7f00000007c0)=""/156, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xa, 0x5, 0xffff}, 0x10, 0x17245, r9, 0x7, &(0x7f0000000b40)=[r6, r6, r6, r6, r6], &(0x7f0000000b80)=[{0x0, 0x4, 0x7, 0x1}, {0x4, 0x4, 0x5, 0x7}, {0x5, 0x1, 0xe, 0x1b}, {0x5, 0x3, 0xa, 0xb}, {0x2, 0x2, 0x1, 0x2}, {0x5, 0x3, 0xe, 0x5}, {0x5, 0x3, 0x6, 0x5}], 0x10, 0xffffffff}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x80000000) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r11, &(0x7f0000000d40), 0x2, 0x0) openat$cgroup_subtree(r11, &(0x7f0000000d80), 0x2, 0x0) r12 = perf_event_open$cgroup(&(0x7f0000000e00)={0x0, 0x80, 0x6, 0x14, 0x6, 0xc9, 0x0, 0x1e, 0x10800, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000dc0)}, 0x5040, 0x10, 0x7f, 0x6, 0xa, 0x7, 0x3, 0x0, 0x1, 0x0, 0x5}, r11, 0x8, r2, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0xd, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70722602, 0x0, 0x0, 0x0, 0xffffff80}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x73}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000f00)='GPL\x00', 0x1, 0x83, &(0x7f0000000f40)=""/131, 0x40f00, 0x2a1f31fcff2502ac, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0xe, 0x3193, 0x2}, 0x10, r4, r9, 0x2, &(0x7f0000001080)=[r7], &(0x7f00000010c0)=[{0x4, 0x6, 0xc, 0x8}, {0x2, 0x5, 0x9, 0x9}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x1e, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@alu={0x4, 0x0, 0x4, 0x9, 0x4, 0xc, 0xd}, @jmp={0x5, 0x1, 0x3, 0x7, 0x8, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0x7, 0x4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='syzkaller\x00', 0x2, 0xb0, &(0x7f0000001300)=""/176, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x3, 0xd, 0x10001}, 0x10, 0x10db1, r10, 0x0, &(0x7f0000001400)=[r7, r6, r8, r6, r8], &(0x7f0000001440), 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@fallback=r5, 0x14, 0x1, 0x3, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r16 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000016c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@fallback=r12, r10, 0x37, 0x2008, 0x0, @value=r16, @void, @void, @void, r15}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001700)={@cgroup=r11, r14, 0x5, 0x2002, r5, @value=r16}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{r6}, &(0x7f0000001740), &(0x7f0000001780)=r9}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000001800)=r8, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001840)={@ifindex, r14, 0x2f, 0x0, 0x0, @void, @value, @void, @void, r15}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x40400, 0x0) 2.231850973s ago: executing program 1 (id=8669): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x100000001000}, 0x31, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x26, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x804) write$cgroup_int(r4, &(0x7f0000000600)=0xd, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r3, r4, 0x1, 0x3, 0x5}, 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/111, 0x27, 0x6f, 0x1, 0x7, 0x10000, @value=r5}, 0x28) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x40086602, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x8010743f, 0xf0ff1f00000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea010018"], &(0x7f0000000040)=""/247, 0x26, 0xf7}, 0x28) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000280), 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 2.230416933s ago: executing program 3 (id=8670): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b0000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x3, 0x8a, &(0x7f00000000c0)=""/138}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b0000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x3, 0x8a, &(0x7f00000000c0)=""/138}, 0x80) r0 = syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe40, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b08009f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7fffffff, 0x9, 0x0, 0x40005, r1, 0x4, '\x00', 0x0, r1, 0x1, 0x0, 0x2, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7fffffff, 0x9, 0x0, 0x40005, r1, 0x4, '\x00', 0x0, r1, 0x1, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'veth1_to_bond\x00'}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000880)={'bond_slave_0\x00'}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000500)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/90, 0x5a}], 0x2, &(0x7f00000006c0)=""/204, 0xcc}, 0x10001) (async) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000500)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/90, 0x5a}], 0x2, &(0x7f00000006c0)=""/204, 0xcc}, 0x10001) 2.226920833s ago: executing program 4 (id=8542): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x400}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 166.662375ms ago: executing program 0 (id=8671): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x11b, &(0x7f0000000000), &(0x7f0000000540)="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", 0x0, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus/file0\x00', r1, 0x4000, r2}, 0x18) unlink(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus/file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000ffffffff0000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000140)=""/222, 0x0, 0x8}, 0x94) 164.594665ms ago: executing program 1 (id=8672): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000792100000000000062000000030000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x4bed592a35bfe465) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0xfde9}, {&(0x7f0000000440)="dd70df5e9bb931ce0ff9fbff343bee618f1517f82e23ef5333a8d1b20112d8e1e025045a99f60cd4bd26079a555acc7526eabadd42d3c239d9e65cfc6b48f914987bf43bb4fa9fcb494c1a12a1db46b17c00", 0x4e}], 0x2}, 0x20040094) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0x1}, 0x0, 0x4, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 163.858225ms ago: executing program 2 (id=8673): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c30400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) 163.657245ms ago: executing program 3 (id=8674): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @random="010000201000"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000006d0000000000000000000018000000000000000000000000000000cc000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 153.548906ms ago: executing program 3 (id=8675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mkdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) close(r0) 93.090791ms ago: executing program 3 (id=8676): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0f432f2212c90a0000a4714edc328600003100a14baaebb02dff3b0000a1d827628680e9116652806458a242a4d387ce93964f7adf3f8b4dc2580d1d07706484a276cab570", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0xcc040}, 0x64004084) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 92.186771ms ago: executing program 2 (id=8677): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2], 0xa) 91.440311ms ago: executing program 2 (id=8678): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000100)="d58e17519fe0c8bfe676a11c2a46eb4911491163f71c75df6a8d55019983802be639845c0638d8c555cbd37c6bb7d6488b652454cc25eb7f904c6b4e85d6b0396bd1f0faa13f263d1b955aea8ac9175fc57fed35a82a4873fe21f788e80de8a21e5465b71df26aef5709d707a65d6352274eec32c1ce568c6a0193a69fd41ae1", &(0x7f0000000440)=""/212}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 90.651741ms ago: executing program 0 (id=8679): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000b68b16", @ANYRES32, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18f8ffffffffff817b4ca96984f5620c602ade9c0c9018824b17f544e45e767a651a15a6fb38e02f0000001f00b1522e0002000000950000000010000000000000000000"], 0x0, 0xffffd187, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x10001, 0x9, 0x23805, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e3ff20000000000000002008f32f5c5e4bd300"/36], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}}, @fwd={0x10}]}}, &(0x7f0000000180)=""/162, 0x3e, 0xa2, 0x1}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6337ce22060000fe0000000000000000000000a8080000000000000056a13571673fa708"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8100, 0xc8, 0xffffffff, 0x0, 0xfd2b, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa20"], 0xcfa4) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) 89.997202ms ago: executing program 3 (id=8680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000b00)={&(0x7f00000004c0), 0x6e, &(0x7f0000000440)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f00000003c0)}, {&(0x7f0000000900)=""/128, 0x80}], 0x4, &(0x7f0000000d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x2000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5, r4}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000980), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3bd8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x44}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1000, &(0x7f0000001740)=""/4096, 0x40f00, 0x1f, '\x00', r7, 0x0, r1, 0x8, &(0x7f0000000b80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x4, 0x1, 0x3972}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c00), &(0x7f0000000c40)=[{0x5, 0x4, 0x7, 0xa}, {0x5, 0x3, 0x7, 0xb}, {0x4, 0x1, 0x6, 0xc}, {0x3, 0x5, 0xe, 0x3}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0a00ff0000000071100101000000009583a5d69a213ffdfa00000000000000fe2a8e32f423b6b8d1339929bf456b51936a93363da8d6fca62a7cacdcf5574a432b33c78b508e4930bc3bf165b3a15319c998b755c23b2b4071c439095e091f586a53cb1ff8bb"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', r7}, 0x94) 35.910096ms ago: executing program 2 (id=8681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000006008500000018000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0500000005000000ae0c000009"], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300)=r8) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYRES64=r3], &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003900)={0xffffffffffffffff, 0x6, 0x8}, 0xc) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 26.585637ms ago: executing program 1 (id=8682): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x8, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000840e00000000000066000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 4 (id=8542): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x5, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x400}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): de [ 243.914876][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.921955][T10636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.929284][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.936322][T10636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.978845][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.991086][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.013069][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.041506][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.050593][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.057647][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.071325][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.087619][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.094736][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.106106][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.115561][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.208737][T10695] device syzkaller0 entered promiscuous mode [ 244.222798][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.271160][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.284804][T10636] device veth0_vlan entered promiscuous mode [ 244.436288][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.464147][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.512798][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.520301][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.532695][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.542824][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.562065][T10636] device veth1_macvtap entered promiscuous mode [ 244.608193][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.626069][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.643010][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.673692][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.692168][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.094323][T10731] device syzkaller0 entered promiscuous mode [ 245.163062][ T9] device macsec0 left promiscuous mode [ 245.168646][ T9] nr0: port 1(macsec0) entered disabled state [ 245.214182][ T9] device veth1 left promiscuous mode [ 245.219544][ T9] bridge0: port 3(veth1) entered disabled state [ 245.375765][ T9] device bridge_slave_1 left promiscuous mode [ 245.381922][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.399743][ T9] device bridge_slave_0 left promiscuous mode [ 245.406008][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.760383][ T24] audit: type=1400 audit(1771639665.790:166): avc: denied { create } for pid=10757 comm="syz.1.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 247.248444][T10764] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.256324][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.394539][T10761] device syzkaller0 entered promiscuous mode [ 248.790318][T10825] ÿÿÿÿÿÿ: renamed from vlan1 [ 249.327411][T10863] device syzkaller0 entered promiscuous mode [ 249.396618][T10869] 7B’ç÷ï: renamed from syzkaller0 [ 249.518004][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.604082][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.641687][T10866] device bridge_slave_0 entered promiscuous mode [ 249.666512][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.673651][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.680889][T10866] device bridge_slave_1 entered promiscuous mode [ 249.702629][T10886] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 249.836016][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.843098][T10866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.850356][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.857387][T10866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.004277][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.017271][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.025538][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.066583][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.160572][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.167664][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.192628][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.213177][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.220222][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.287172][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.303077][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.465577][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.480350][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.500916][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.613618][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.763201][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.804077][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.846504][T10866] device veth0_vlan entered promiscuous mode [ 250.877646][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.897892][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.929377][T10866] device veth1_macvtap entered promiscuous mode [ 250.949615][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.960225][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.977985][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.040199][T10956] device syzkaller0 entered promiscuous mode [ 251.056788][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.065513][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.117888][T10956] syzkaller0: tun_net_xmit 1280 [ 251.337549][T10971] device syzkaller0 entered promiscuous mode [ 252.326425][T11026] device pim6reg1 entered promiscuous mode [ 252.526144][ T9] device macsec0 left promiscuous mode [ 252.535597][ T9] nr0: port 1(macsec0) entered disabled state [ 252.550310][ T9] device veth1 left promiscuous mode [ 252.556023][ T9] bridge0: port 3(veth1) entered disabled state [ 252.573404][ T9] device bridge_slave_1 left promiscuous mode [ 252.580344][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.591034][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.607787][ T9] device veth0_vlan left promiscuous mode [ 255.364816][T11162] nr0: port 1(macsec0) entered blocking state [ 255.372951][T11162] nr0: port 1(macsec0) entered disabled state [ 255.414475][T11162] device macsec0 entered promiscuous mode [ 255.623488][T11178] pimreg1: tun_chr_ioctl cmd 1074025692 [ 256.663919][T11214] syz.0.3025[11214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.663990][T11214] syz.0.3025[11214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.551925][T11316] device syzkaller0 entered promiscuous mode [ 258.572395][T11332] device syzkaller0 entered promiscuous mode [ 258.681805][T11345] device syzkaller0 entered promiscuous mode [ 258.871460][T11371] device syzkaller0 entered promiscuous mode [ 258.927927][T11380] device syzkaller0 entered promiscuous mode [ 259.003959][T11388] tap0: tun_chr_ioctl cmd 1074025677 [ 259.009371][T11388] tap0: linktype set to 769 [ 259.618527][ T24] audit: type=1400 audit(1771639678.650:167): avc: denied { mounton } for pid=11426 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 259.742126][T11426] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.749522][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.757284][T11426] device bridge_slave_0 entered promiscuous mode [ 259.809151][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.821233][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.829893][T11426] device bridge_slave_1 entered promiscuous mode [ 260.029033][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.036122][T11426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.043398][T11426] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.050503][T11426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.083250][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.095562][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.153623][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.161334][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.184367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.197567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.212102][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.219206][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.235443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.253550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.261899][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.268969][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.304248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.313160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.324686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.334191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.356746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.369806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.388437][T11426] device veth0_vlan entered promiscuous mode [ 260.398137][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.408288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.428753][T11426] device veth1_macvtap entered promiscuous mode [ 260.439784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.448240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.456442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.464748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.473444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.489649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.498158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.506583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.519001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.555632][ T24] audit: type=1400 audit(1771639679.590:168): avc: denied { unmount } for pid=11426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.774684][T11520] syz.1.3103[11520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.774732][T11520] syz.1.3103[11520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.224330][T11603] cgroup: fork rejected by pids controller in /syz3 [ 262.554620][T11606] device wg2 entered promiscuous mode [ 262.582796][ T9] GPL: port 1(erspan0) entered disabled state [ 262.591753][ T9] device erspan0 left promiscuous mode [ 262.598446][ T9] GPL: port 1(erspan0) entered disabled state [ 262.907408][ T9] device gretap0 left promiscuous mode [ 262.923863][ T9] bridge0: port 4(gretap0) entered disabled state [ 263.081490][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.108205][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.116603][T11624] device bridge_slave_0 entered promiscuous mode [ 263.135056][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.143251][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.154816][T11624] device bridge_slave_1 entered promiscuous mode [ 263.232236][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.239315][T11624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.246601][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.253638][T11624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.283624][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.322874][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.504611][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.516477][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.632089][ T9] device veth1 left promiscuous mode [ 263.667740][ T9] bridge0: port 3(veth1) entered disabled state [ 263.708261][ T9] device bridge_slave_1 left promiscuous mode [ 263.761905][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.873712][ T9] device bridge_slave_0 left promiscuous mode [ 263.922686][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.284375][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.302103][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.381160][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.390058][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.398655][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.405715][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.413691][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.422050][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.430449][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.437496][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.472863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.517509][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.550748][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.583120][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.637049][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.683375][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.733445][T11624] device veth0_vlan entered promiscuous mode [ 264.749894][T11674] device syzkaller0 entered promiscuous mode [ 264.794043][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.813879][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.876842][T11624] device veth1_macvtap entered promiscuous mode [ 265.109365][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.117563][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.126056][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.134628][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.143133][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.160194][T11686] device veth0_vlan left promiscuous mode [ 265.196367][T11686] device veth0_vlan entered promiscuous mode [ 265.208809][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.222835][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.233362][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.244193][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.382266][T11701] bridge0: port 3(veth0_to_team) entered blocking state [ 265.417434][T11701] bridge0: port 3(veth0_to_team) entered disabled state [ 265.435619][T11701] device veth0_to_team entered promiscuous mode [ 265.492951][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.500187][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.855440][T11780] 7B’ç÷ï: renamed from syzkaller0 [ 267.156767][T11794] : renamed from bond_slave_0 [ 267.405360][ T9] device bridge_slave_1 left promiscuous mode [ 267.412594][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.451669][ T9] device bridge_slave_0 left promiscuous mode [ 267.468483][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.495254][ T9] device veth1_macvtap left promiscuous mode [ 267.514843][ T9] device veth0_vlan left promiscuous mode [ 272.005039][T11983] device syzkaller0 entered promiscuous mode [ 274.903628][T12113] tap0: tun_chr_ioctl cmd 1074025675 [ 274.992871][T12113] tap0: persist enabled [ 280.143148][T12231] device syzkaller0 entered promiscuous mode [ 280.225499][T12261] device syzkaller0 entered promiscuous mode [ 281.368311][T12293] device pim6reg1 entered promiscuous mode [ 283.234170][T12406] device syzkaller0 entered promiscuous mode [ 287.167258][T12563] bridge0: port 3(veth0_to_team) entered blocking state [ 287.175671][T12563] bridge0: port 3(veth0_to_team) entered disabled state [ 287.199718][T12563] device veth0_to_team entered promiscuous mode [ 287.342333][T12601] device syzkaller0 entered promiscuous mode [ 288.239984][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 290.960415][T12845] tap0: tun_chr_ioctl cmd 1074025677 [ 290.982757][T12845] tap0: linktype set to 778 [ 291.264398][T12868] nr0: port 1(macsec0) entered blocking state [ 291.307887][T12868] nr0: port 1(macsec0) entered disabled state [ 291.418346][T12868] device macsec0 entered promiscuous mode [ 291.560163][T12870] device syzkaller0 entered promiscuous mode [ 292.067545][T12921] ³þ: renamed from bond_slave_0 [ 292.682512][T12964] : renamed from bond_slave_0 [ 295.257657][T13074] pimreg1: tun_chr_ioctl cmd 1074025692 [ 295.355011][ T24] audit: type=1400 audit(1771639714.390:169): avc: denied { create } for pid=13082 comm="syz.0.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 297.714802][T13175] device wg2 entered promiscuous mode [ 302.184123][T13319] device syzkaller0 left promiscuous mode [ 302.399574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 302.412197][T13318] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 305.382683][T13392] Â: renamed from pim6reg1 [ 305.400575][T13395] device syzkaller0 entered promiscuous mode [ 305.849751][T13415] nr0: port 1(macsec0) entered blocking state [ 305.856816][T13415] nr0: port 1(macsec0) entered disabled state [ 305.980885][T13415] device macsec0 entered promiscuous mode [ 306.792085][ T24] audit: type=1400 audit(1771639725.820:170): avc: denied { create } for pid=13486 comm="syz.4.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 306.862944][T13491] device syzkaller0 left promiscuous mode [ 309.402905][T13613] device syzkaller0 entered promiscuous mode [ 309.868933][T13629] b‹¡Y­4`Ò˜: renamed from lo [ 310.893951][T13664] device syzkaller0 entered promiscuous mode [ 311.312542][T13676] device syzkaller0 entered promiscuous mode [ 312.623568][T13735] device wg2 entered promiscuous mode [ 312.835123][T13761] device syzkaller0 entered promiscuous mode [ 312.925889][T13763] device syzkaller0 entered promiscuous mode [ 315.810980][T13947] device syzkaller0 entered promiscuous mode [ 315.856477][ T1510] syzkaller0: tun_net_xmit 48 [ 316.006179][T13962] device syzkaller0 entered promiscuous mode [ 316.324515][T13995] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 317.421428][T14054] pimreg1: tun_chr_ioctl cmd 1074025692 [ 318.500810][T14098] device veth0_vlan left promiscuous mode [ 318.547295][T14098] device veth0_vlan entered promiscuous mode [ 318.713881][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.723119][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.730666][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.952049][T14136] pimreg1: tun_chr_ioctl cmd 1074025692 [ 318.975669][T14137] pimreg1: tun_chr_ioctl cmd 2147767511 [ 319.970777][T14208] device syzkaller0 entered promiscuous mode [ 321.137217][T14293] IPv6: pim6reg1: Disabled Multicast RS [ 323.259512][T14399] device sit0 entered promiscuous mode [ 323.630639][T14420] device syzkaller0 entered promiscuous mode [ 325.748318][T14517] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 326.232874][T14537] device syzkaller0 left promiscuous mode [ 328.452226][T14626] device syzkaller0 entered promiscuous mode [ 328.459370][T14625] device dummy0 entered promiscuous mode [ 331.201534][T14689] device pim6reg1 entered promiscuous mode [ 331.669632][T14714] device syzkaller0 entered promiscuous mode [ 332.624736][T14756] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 332.703008][T14769] device syzkaller0 entered promiscuous mode [ 334.255417][T14812] device syzkaller0 entered promiscuous mode [ 335.076018][T14880] : port 1(ip6gretap0) entered blocking state [ 335.154394][T14880] : port 1(ip6gretap0) entered disabled state [ 335.222024][T14880] device ip6gretap0 entered promiscuous mode [ 335.319002][T14884] device ip6gretap0 left promiscuous mode [ 335.404237][T14884] : port 1(ip6gretap0) entered disabled state [ 335.624342][T14887] device wg2 left promiscuous mode [ 336.306967][T14926] device syzkaller0 entered promiscuous mode [ 336.366722][T14932] Ÿë: port 1(vlan1) entered blocking state [ 336.385166][T14932] Ÿë: port 1(vlan1) entered disabled state [ 336.391427][T14932] device vlan1 entered promiscuous mode [ 336.797326][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.094475][T15027] 7B’ç÷ï: renamed from syzkaller0 [ 338.108432][T15013] device syzkaller0 entered promiscuous mode [ 338.114884][T15013] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 339.329006][T15071] syz.0.4116[15071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.329055][T15071] syz.0.4116[15071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.890498][T15076] device syzkaller0 entered promiscuous mode [ 340.836473][T15109] pimreg1: tun_chr_ioctl cmd 1074025692 [ 344.105014][T15325] device syzkaller0 entered promiscuous mode [ 344.221726][T15332] device syzkaller0 entered promiscuous mode [ 344.582427][T15342] device syzkaller0 entered promiscuous mode [ 345.195042][T15382] device pim6reg1 entered promiscuous mode [ 346.697995][T15479] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 348.610781][T15565] device syzkaller0 entered promiscuous mode [ 348.844242][T15579] device syzkaller0 entered promiscuous mode [ 349.044998][T15598] ªªªªªª™™: renamed from vlan0 [ 352.177223][T15727] device syzkaller0 entered promiscuous mode [ 354.169404][T15803] device wg2 entered promiscuous mode [ 354.191567][T15806] device veth1_macvtap left promiscuous mode [ 359.316338][T15852] device syzkaller0 entered promiscuous mode [ 359.461934][T15875] tap0: tun_chr_ioctl cmd 1074025677 [ 359.467878][T15875] tap0: linktype set to 780 [ 359.492603][T15869] device  entered promiscuous mode [ 359.825406][T15875] device syzkaller0 entered promiscuous mode [ 360.047656][T15884] device syzkaller0 left promiscuous mode [ 360.668702][T15911] device syzkaller0 entered promiscuous mode [ 362.662834][T15983] device syzkaller0 entered promiscuous mode [ 363.574406][T16032] device syzkaller0 entered promiscuous mode [ 364.995859][T16064] device wg2 left promiscuous mode [ 365.096787][T16077] device wg2 entered promiscuous mode [ 366.328205][T16139] tap1: tun_chr_ioctl cmd 1074025677 [ 366.458383][T16139] tap1: linktype set to 270 [ 366.806757][T16168] device syzkaller0 entered promiscuous mode [ 367.291376][T16203] device syzkaller0 entered promiscuous mode [ 370.116947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 370.291959][T16306] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 374.016988][T16434] device pim6reg1 entered promiscuous mode [ 374.685470][T16496] device lo entered promiscuous mode [ 375.929322][T16564] device syzkaller0 entered promiscuous mode [ 377.442186][T16626] device syzkaller0 entered promiscuous mode [ 379.751653][T16677] device syzkaller0 entered promiscuous mode [ 380.409922][T16698] device pim6reg1 entered promiscuous mode [ 380.442125][ T24] audit: type=1400 audit(1771639799.470:171): avc: denied { create } for pid=16703 comm="syz.4.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.502372][T16700] device syzkaller0 entered promiscuous mode [ 380.869731][T16765] device veth1_macvtap left promiscuous mode [ 381.325465][T16784] device syzkaller0 entered promiscuous mode [ 381.538599][T16806] device veth1_macvtap left promiscuous mode [ 381.554908][T16806] device veth1_macvtap entered promiscuous mode [ 381.599376][T16818] tap0: tun_chr_ioctl cmd 1074025675 [ 381.604828][T16818] tap0: persist enabled [ 381.613979][T16818] tap0: tun_chr_ioctl cmd 1074025675 [ 381.619567][T16818] tap0: persist enabled [ 383.463242][T16921] tap1: tun_chr_ioctl cmd 1074025677 [ 383.492363][T16921] tap1: linktype set to 780 [ 384.963825][T17006] device wg2 left promiscuous mode [ 385.130576][T17001] device wg2 entered promiscuous mode [ 385.153641][T17001] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 385.439504][T17030] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 385.456806][T17030] syzkaller0: linktype set to 773 [ 386.013355][T17075] -1: renamed from syzkaller0 [ 386.544107][T17115] device syzkaller0 entered promiscuous mode [ 386.592887][T17125] GPL: port 1(erspan0) entered blocking state [ 386.599028][T17125] GPL: port 1(erspan0) entered disabled state [ 386.605437][T17125] device erspan0 entered promiscuous mode [ 386.615947][T17111] GPL: port 1(erspan0) entered blocking state [ 386.622743][T17111] GPL: port 1(erspan0) entered forwarding state [ 387.716443][T17170] device veth0_to_team left promiscuous mode [ 387.737368][T17170] bridge0: port 3(veth0_to_team) entered disabled state [ 387.843316][T17170] device bridge_slave_1 left promiscuous mode [ 387.857621][T17170] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.904358][T17170] device bridge_slave_0 left promiscuous mode [ 387.918874][T17170] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.226821][T17190] tap0: tun_chr_ioctl cmd 1074025692 [ 388.472877][T17210] tun0: tun_chr_ioctl cmd 1074025676 [ 388.501233][T17210] tun0: owner set to 0 [ 388.542797][T17203] tun0: tun_chr_ioctl cmd 1074025680 [ 389.480559][T17269] device syzkaller0 entered promiscuous mode [ 389.952979][T17290] syz.1.4739[17290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.953039][T17290] syz.1.4739[17290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.172541][T17424] bridge0: port 3(veth0_to_team) entered blocking state [ 394.356960][T17424] bridge0: port 3(veth0_to_team) entered disabled state [ 394.364789][T17424] device veth0_to_team entered promiscuous mode [ 394.510644][ T24] audit: type=1400 audit(1771639813.540:172): avc: denied { create } for pid=17425 comm="syz.2.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 395.134113][ T24] audit: type=1400 audit(1771639814.170:173): avc: denied { setattr } for pid=17436 comm="syz.0.4781" path="pipe:[51839]" dev="pipefs" ino=51839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 396.698633][T17498] device syzkaller0 entered promiscuous mode [ 397.948500][T17539] syzkaller1: tun_chr_ioctl cmd 21731 [ 397.956133][T17539] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 398.261793][ T24] audit: type=1400 audit(1771639817.280:174): avc: denied { create } for pid=17546 comm="syz.1.4818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 398.368092][T17554] device syzkaller0 entered promiscuous mode [ 398.817941][T17598] device syzkaller0 entered promiscuous mode [ 399.518545][T17634] device syzkaller0 entered promiscuous mode [ 400.644072][T17672] device wg2 left promiscuous mode [ 400.744480][T17673] device wg2 entered promiscuous mode [ 401.787016][T17782] device syzkaller0 entered promiscuous mode [ 401.916111][T17786] device syzkaller0 entered promiscuous mode [ 402.050840][T17799] tun0: tun_chr_ioctl cmd 1074025676 [ 402.058829][T17799] tun0: owner set to 0 [ 402.204952][T17809] device wg2 left promiscuous mode [ 402.278765][T17814] device wg2 entered promiscuous mode [ 403.505460][T17872] device sit0 entered promiscuous mode [ 406.059769][T17961] device syzkaller0 entered promiscuous mode [ 406.228402][T17965] device syzkaller0 entered promiscuous mode [ 407.423093][T18073] device wg2 left promiscuous mode [ 407.445063][T18076] device wg2 entered promiscuous mode [ 407.701279][T18086] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.710615][T18086] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.722395][T18086] device bridge_slave_0 entered promiscuous mode [ 407.766469][T18086] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.780267][T18086] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.814058][T18086] device bridge_slave_1 entered promiscuous mode [ 407.904605][T18086] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.911660][T18086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.918949][T18086] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.925989][T18086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.038018][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.047239][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.056963][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.082742][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.091190][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.111360][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.130475][T18086] device veth0_vlan entered promiscuous mode [ 408.136979][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.145833][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.153651][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.166681][T18086] device veth1_macvtap entered promiscuous mode [ 408.194027][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.222159][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.231038][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.239519][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.248437][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.354421][T18176] ÿ: renamed from team_slave_1 [ 409.651242][T18192] device syzkaller0 entered promiscuous mode [ 409.937491][ T7] device macsec0 left promiscuous mode [ 409.947622][ T7] nr0: port 1(macsec0) entered disabled state [ 409.986493][ T7] device bridge_slave_1 left promiscuous mode [ 409.993308][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.016232][ T7] device bridge_slave_0 left promiscuous mode [ 410.030799][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.063779][ T7] device veth1_macvtap left promiscuous mode [ 410.070999][ T7] device veth0_vlan left promiscuous mode [ 410.509622][ T24] audit: type=1400 audit(1771639829.540:175): avc: denied { create } for pid=18208 comm="syz.2.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 410.715068][T18245] device pim6reg1 entered promiscuous mode [ 413.940398][T18448] »»»»»»: renamed from bond_slave_0 [ 414.263104][T18464] device sit0 entered promiscuous mode [ 414.796492][T18511] device syzkaller0 entered promiscuous mode [ 415.719574][T18559] device syzkaller0 entered promiscuous mode [ 415.838248][T18570] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 415.850156][T18570] syzkaller0: linktype set to 804 [ 415.887172][T18592] tap0: tun_chr_ioctl cmd 1074025692 [ 417.104846][ T24] audit: type=1400 audit(1771639836.140:176): avc: denied { create } for pid=18672 comm="syz.0.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 417.546172][T18699] device sit0 entered promiscuous mode [ 418.286911][T18731] device wg2 left promiscuous mode [ 418.422539][T18730] device wg2 entered promiscuous mode [ 418.600735][T18735] device syzkaller0 entered promiscuous mode [ 420.646325][T18851] device syzkaller0 entered promiscuous mode [ 421.183037][T18889] syz.4.5222 uses obsolete (PF_INET,SOCK_PACKET) [ 421.632327][T18932] device syzkaller0 entered promiscuous mode [ 421.758594][ T24] audit: type=1400 audit(1771639840.790:177): avc: denied { create } for pid=18949 comm="syz.0.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 422.094356][T18986] device syzkaller0 left promiscuous mode [ 422.878855][T19015] device veth0_vlan left promiscuous mode [ 422.947915][T19015] device veth0_vlan entered promiscuous mode [ 423.016232][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.024556][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª™™: link becomes ready [ 423.032561][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.050023][T19016] device syzkaller0 entered promiscuous mode [ 423.490135][T19086] device syzkaller0 entered promiscuous mode [ 424.960119][T19144] device syzkaller0 left promiscuous mode [ 425.151367][T19147] b‹¡Y­4`Ò˜: renamed from lo [ 425.295833][T19163] device syzkaller0 entered promiscuous mode [ 426.567936][T19286] tap0: tun_chr_ioctl cmd 1074025677 [ 426.584149][T19286] tap0: linktype set to 519 [ 427.485919][T19297] device syzkaller0 entered promiscuous mode [ 427.512959][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 429.322206][T19342] device syzkaller0 entered promiscuous mode [ 429.603255][T19346] syz.1.5356[19346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.603349][T19346] syz.1.5356[19346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.513290][T19370] syz.1.5365[19370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.553059][T19370] syz.1.5365[19370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.868579][T19412] device lo left promiscuous mode [ 432.114196][T19428] device sit0 left promiscuous mode [ 432.336557][T19432] device veth1_macvtap entered promiscuous mode [ 432.357743][T19432] device macsec0 entered promiscuous mode [ 432.369128][T19429] device sit0 entered promiscuous mode [ 432.842593][T19431] device veth1_macvtap left promiscuous mode [ 432.854168][T19431] device macsec0 left promiscuous mode [ 434.747767][T19516] device dummy0 entered promiscuous mode [ 434.793763][T19504] device syzkaller0 left promiscuous mode [ 435.721615][T19555] bridge0: port 3(veth1) entered blocking state [ 435.772231][T19555] bridge0: port 3(veth1) entered disabled state [ 435.881615][T19555] device veth1 entered promiscuous mode [ 437.228095][T19602] device sit0 left promiscuous mode [ 437.608123][T19616] device wg2 left promiscuous mode [ 437.789206][T19617] device wg2 entered promiscuous mode [ 440.004105][ T24] audit: type=1400 audit(1771639859.040:178): avc: denied { create } for pid=19702 comm="syz.4.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.312266][T19753] device veth0_vlan left promiscuous mode [ 441.327348][T19753] device veth0_vlan entered promiscuous mode [ 441.475610][T19760] IPv6: pim6reg1: Disabled Multicast RS [ 443.466734][T19816] device wg2 entered promiscuous mode [ 445.086442][T19862] device syzkaller0 entered promiscuous mode [ 446.555403][T19894] device syzkaller0 entered promiscuous mode [ 447.385546][T19926] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 448.117241][T19944] device syzkaller0 entered promiscuous mode [ 448.202152][T19944] device syzkaller0 left promiscuous mode [ 449.070832][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 449.122498][T19969] device syzkaller0 entered promiscuous mode [ 449.273397][T19969] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 451.700649][T20035] device syzkaller0 entered promiscuous mode [ 452.105534][T20052] device syzkaller0 entered promiscuous mode [ 452.355730][T19976] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 453.408687][T20101] syz.3.5568[20101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.408745][T20101] syz.3.5568[20101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.915984][T20118] device syzkaller0 entered promiscuous mode [ 455.644809][T20183] device syzkaller0 entered promiscuous mode [ 456.322972][T20211] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.331033][T20211] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.338721][T20211] device bridge_slave_0 entered promiscuous mode [ 456.353288][T20211] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.360368][T20211] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.373060][T20211] device bridge_slave_1 entered promiscuous mode [ 456.509437][T20243] -: renamed from syzkaller0 [ 456.592917][T20211] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.599990][T20211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.607293][T20211] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.614326][T20211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.652977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.661632][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.670244][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.682644][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.701459][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.708531][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.763642][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.771907][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.778961][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.793441][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.801744][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.819570][T20211] device veth0_vlan entered promiscuous mode [ 456.850413][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.881789][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.912857][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.952619][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.985916][T20211] device veth1_macvtap entered promiscuous mode [ 457.075393][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.096569][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.127909][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.156045][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 457.170831][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.204916][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.218150][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.412771][ C1] Illegal XDP return value 16128, expect packet loss! [ 457.844039][ T1826] GPL: port 1(erspan0) entered disabled state [ 457.853525][ T1826] device erspan0 left promiscuous mode [ 457.859074][ T1826] GPL: port 1(erspan0) entered disabled state [ 458.143884][ T1826] nr0: port 1(macsec0) entered disabled state [ 458.153516][ T1826] device veth0_vlan left promiscuous mode [ 458.586211][T20367] bridge0: port 3(gretap0) entered blocking state [ 458.592765][T20367] bridge0: port 3(gretap0) entered disabled state [ 458.599439][T20367] device gretap0 entered promiscuous mode [ 458.605406][T20367] bridge0: port 3(gretap0) entered blocking state [ 458.611805][T20367] bridge0: port 3(gretap0) entered forwarding state [ 458.732003][T20372] @ÿ: renamed from bond_slave_0 [ 459.679205][T20431] device syzkaller0 entered promiscuous mode [ 460.097471][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.107338][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.116961][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.115832][T20487] device wg2 entered promiscuous mode [ 461.229816][T20506] tap1: tun_chr_ioctl cmd 1074025673 [ 461.248515][T20505] tap1: tun_chr_ioctl cmd 1074025677 [ 461.260605][T20505] tap1: linktype set to 778 [ 461.343964][T20506] tap1: tun_chr_ioctl cmd 1074025677 [ 461.355870][T20506] tap1: linktype set to 778 [ 461.587988][T20569] device syzkaller0 left promiscuous mode [ 461.959161][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 461.982747][T20587] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 463.576278][T20703] tap0: tun_chr_ioctl cmd 1074025677 [ 463.592889][T20703] tap0: linktype set to 519 [ 463.623715][T20704] tap0: tun_chr_ioctl cmd 1074025677 [ 463.670431][T20704] tap0: linktype set to 820 [ 464.312221][T20742] device syzkaller0 entered promiscuous mode [ 464.661204][T20756] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.688544][T20756] device veth0_to_team left promiscuous mode [ 464.694772][T20756] bridge0: port 3(veth0_to_team) entered disabled state [ 464.702880][T20756] device bridge_slave_1 left promiscuous mode [ 464.709111][T20756] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.717530][T20756] device bridge_slave_0 left promiscuous mode [ 464.724061][T20756] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.430609][T20841] tap1: tun_chr_ioctl cmd 1074025675 [ 468.513995][T20841] tap1: persist enabled [ 468.521841][T20841] tap1: tun_chr_ioctl cmd 1074025675 [ 468.528843][T20841] tap1: persist disabled [ 468.595435][T20849] device syzkaller0 entered promiscuous mode [ 469.635360][T20922] device syzkaller0 entered promiscuous mode [ 470.296027][T20952] device syzkaller0 entered promiscuous mode [ 471.222985][T21003] device macsec0 entered promiscuous mode [ 471.543178][T21029] device syzkaller0 entered promiscuous mode [ 471.698700][T21034] device veth1_macvtap left promiscuous mode [ 471.802063][T21034] device veth1_macvtap entered promiscuous mode [ 471.812867][T21034] device macsec0 entered promiscuous mode [ 471.859081][T21041] device syzkaller0 entered promiscuous mode [ 472.367024][T21062] device syzkaller0 entered promiscuous mode [ 473.041199][T21101] device macsec0 entered promiscuous mode [ 474.398315][T21192] Â: renamed from pim6reg1 [ 474.733397][T21222] device syzkaller0 entered promiscuous mode [ 474.920107][T21243] device syzkaller0 entered promiscuous mode [ 474.976546][T21268] device syzkaller0 entered promiscuous mode [ 475.061856][T21262] device pim6reg1 entered promiscuous mode [ 475.186137][T21295] device veth0_vlan left promiscuous mode [ 475.193892][T21295] device veth0_vlan entered promiscuous mode [ 475.240768][T21302] bridge0: port 4(veth1) entered blocking state [ 475.247145][T21302] bridge0: port 4(veth1) entered disabled state [ 475.254258][T21302] device veth1 entered promiscuous mode [ 477.179957][T21449] device syzkaller0 entered promiscuous mode [ 477.754629][T21498] device syzkaller0 entered promiscuous mode [ 478.388509][T21520] device syzkaller0 entered promiscuous mode [ 478.734155][T21534] : port 1(ip6gretap0) entered blocking state [ 478.744884][T21534] : port 1(ip6gretap0) entered disabled state [ 478.751473][T21534] device ip6gretap0 entered promiscuous mode [ 478.760692][T21535] device ip6gretap0 left promiscuous mode [ 478.787598][T21535] : port 1(ip6gretap0) entered disabled state [ 480.039220][T21596] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.092172][T21596] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.152252][T21596] device bridge_slave_0 entered promiscuous mode [ 480.169106][T21596] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.186050][T21596] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.193611][T21596] device bridge_slave_1 entered promiscuous mode [ 480.402724][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.425460][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.690086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.757116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.766020][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.773085][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.810975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.852796][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.880046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.899545][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.906619][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.934303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.946022][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.976284][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.004407][T21596] device veth0_vlan entered promiscuous mode [ 481.018358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.029700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.047811][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.282982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.312747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.322996][T21596] device veth1_macvtap entered promiscuous mode [ 481.335088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.358853][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.377493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.413892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.466586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.795861][T21658] device syzkaller0 entered promiscuous mode [ 482.310770][T21688] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.326977][T21688] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.341130][T21688] device bridge_slave_0 entered promiscuous mode [ 482.349326][T21688] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.357008][T21688] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.364647][T21688] device bridge_slave_1 entered promiscuous mode [ 482.408193][ T1826] device vlan1 left promiscuous mode [ 482.424807][ T1826] Ÿë: port 1(vlan1) entered disabled state [ 482.443010][ T1826] device veth0_vlan left promiscuous mode [ 482.704659][T21688] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.711728][T21688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.718990][T21688] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.726008][T21688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.743815][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.751333][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.758893][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.782171][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.792836][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.799848][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.807905][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.816385][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.823431][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.831987][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.844281][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.857564][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.869370][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.878485][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.886518][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.903340][T21688] device veth0_vlan entered promiscuous mode [ 482.925233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.936208][T21688] device veth1_macvtap entered promiscuous mode [ 482.947615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.965773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.141582][T21756] pimreg1: tun_chr_ioctl cmd 1074025692 [ 485.139007][ T7] nr0: port 1(macsec0) entered disabled state [ 485.163307][ T7] device ÿÿÿÿÿÿ left promiscuous mode [ 485.223490][ T7] Ÿë: port 1(ÿÿÿÿÿÿ) entered disabled state [ 485.253397][ T7] device veth1 left promiscuous mode [ 485.258796][ T7] bridge0: port 3(veth1) entered disabled state [ 485.269199][ T7] device bridge_slave_1 left promiscuous mode [ 485.278980][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.286904][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.953233][T21835] bridge0: port 3(gretap0) entered blocking state [ 485.959778][T21835] bridge0: port 3(gretap0) entered disabled state [ 486.189780][T21835] device gretap0 entered promiscuous mode [ 486.239733][T21835] bridge0: port 3(gretap0) entered blocking state [ 486.247729][T21835] bridge0: port 3(gretap0) entered forwarding state [ 488.919047][T21998] device sit0 left promiscuous mode [ 489.649807][T22012] tap0: tun_chr_ioctl cmd 1074025677 [ 489.676333][T22012] tap0: linktype set to 780 [ 489.757065][T22012] tap0: tun_chr_ioctl cmd 2147767507 [ 489.833020][T22012] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.840213][T22012] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.042459][T22033] device bridge_slave_1 left promiscuous mode [ 490.225653][T22033] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.342809][T22033] device bridge_slave_0 left promiscuous mode [ 490.390577][T22033] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.551450][T22041] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.559033][T22041] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.566909][T22041] device bridge_slave_0 entered promiscuous mode [ 490.574370][T22041] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.581397][T22041] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.589075][T22041] device bridge_slave_1 entered promiscuous mode [ 490.725488][T22041] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.732565][T22041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.739825][T22041] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.746863][T22041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.021918][T22078] device syzkaller0 entered promiscuous mode [ 491.040770][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.049440][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.058135][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.088501][T22089] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 491.142662][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.150569][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.181407][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.190276][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.198598][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.206542][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.214468][T22041] device veth0_vlan entered promiscuous mode [ 491.242808][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.257220][T22041] device veth1_macvtap entered promiscuous mode [ 491.306097][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.341270][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.987278][ T24] audit: type=1400 audit(1771639911.020:179): avc: denied { create } for pid=22162 comm="syz.1.6172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 492.254565][T22181] device syzkaller0 entered promiscuous mode [ 496.832459][T22406] device syzkaller0 entered promiscuous mode [ 497.641417][T22427] device syzkaller0 entered promiscuous mode [ 500.234123][T22507] device wg2 left promiscuous mode [ 500.512435][T22526] tap0: tun_chr_ioctl cmd 1074025675 [ 500.517747][T22526] tap0: persist enabled [ 500.658834][T22524] tap0: tun_chr_ioctl cmd 1074025675 [ 500.664197][T22524] tap0: persist enabled [ 500.674742][T22525] tap0: tun_chr_ioctl cmd 2148553947 [ 500.680098][T22528] syzkaller0: mtu greater than device maximum [ 500.821752][T22525] batadv0: tun_chr_ioctl cmd 1074025684 [ 500.835350][T22524] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 503.580289][T22663] device syzkaller0 entered promiscuous mode [ 505.298978][T22827] ÿÿÿÿÿÿÿÿ: port 1(erspan0) entered blocking state [ 505.314882][T22827] ÿÿÿÿÿÿÿÿ: port 1(erspan0) entered disabled state [ 505.323833][T22827] device erspan0 entered promiscuous mode [ 505.353489][T22827] device erspan0 left promiscuous mode [ 505.359053][T22827] ÿÿÿÿÿÿÿÿ: port 1(erspan0) entered disabled state [ 506.795685][T22900] device syzkaller0 entered promiscuous mode [ 506.882302][T22901] syzkaller0: tun_net_xmit 1280 [ 506.894682][T22900] syzkaller0: tun_net_xmit 1280 [ 507.009602][T22929] device syzkaller0 entered promiscuous mode [ 507.237899][T22952] device syzkaller0 entered promiscuous mode [ 507.395747][T22968] device vlan0 entered promiscuous mode [ 507.404104][T22112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.583105][T22994] device pim6reg1 entered promiscuous mode [ 516.627675][T23407] device macsec0 entered promiscuous mode [ 517.928404][T23471] device syzkaller0 entered promiscuous mode [ 517.959390][T23472] GPL: port 1(erspan0) entered blocking state [ 518.081728][T23472] GPL: port 1(erspan0) entered disabled state [ 518.147157][T23472] device erspan0 entered promiscuous mode [ 518.157971][T23475] GPL: port 1(erspan0) entered blocking state [ 518.164197][T23475] GPL: port 1(erspan0) entered forwarding state [ 518.600969][T23498] device syzkaller0 entered promiscuous mode [ 519.457501][T23515] device syzkaller0 entered promiscuous mode [ 519.511384][T23551] tap1: tun_chr_ioctl cmd 1074025692 [ 520.060172][T23589] pimreg1: tun_chr_ioctl cmd 1074025692 [ 520.631437][T23612] device bond_slave_1 entered promiscuous mode [ 520.719256][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 520.730254][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.731069][T23619] syz.3.6598[23619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.738727][T23619] syz.3.6598[23619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.069276][T23630] device GPL entered promiscuous mode [ 522.530763][T23704] device syzkaller0 entered promiscuous mode [ 523.145222][T23730] device syzkaller0 entered promiscuous mode [ 523.328322][T23752] syz.3.6636[23752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.328573][T23752] syz.3.6636[23752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.138774][T23918] device syzkaller0 entered promiscuous mode [ 525.546210][T23936] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 525.554270][T23936] device syzkaller0 entered promiscuous mode [ 526.406427][T23989] device syzkaller0 entered promiscuous mode [ 526.553206][T24004] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 526.596253][T24004] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 527.995401][T24069] ±ÿ: renamed from team_slave_1 [ 528.536959][T24103] device syzkaller0 entered promiscuous mode [ 528.759116][T24116] +: renamed from team_slave_1 [ 531.132470][T24185] device sit0 entered promiscuous mode [ 531.692930][T24216] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 531.698762][T24216] syzkaller0: linktype set to 804 [ 532.194813][T24230] device veth1_macvtap left promiscuous mode [ 532.294106][T24230] device macsec0 left promiscuous mode [ 533.162955][T24293] device syzkaller0 entered promiscuous mode [ 533.585995][T24297] device aaaaaaaaaaaaaaa entered promiscuous mode [ 533.906460][T24314] device syzkaller0 entered promiscuous mode [ 536.217635][T24398] device syzkaller0 entered promiscuous mode [ 537.607231][T24428] IPv6: …: Disabled Multicast RS [ 537.869433][T24457] device syzkaller0 entered promiscuous mode [ 538.313014][T24486] device pim6reg1 entered promiscuous mode [ 539.506261][T24568] device syzkaller0 entered promiscuous mode [ 540.474421][T24623] ÿÿÿÿÿÿ: renamed from vlan1 [ 540.597088][T24644] device wg2 entered promiscuous mode [ 541.257516][T24707] device syzkaller0 entered promiscuous mode [ 541.546800][ T24] audit: type=1400 audit(1771639960.580:180): avc: denied { create } for pid=24724 comm="syz.2.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 542.436616][T24757] ip6tnl0: mtu less than device minimum [ 543.614569][T24815] syz.0.6941[24815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.614630][T24815] syz.0.6941[24815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.956435][T24820] device syzkaller0 entered promiscuous mode [ 544.014932][T24823] syz.0.6943[24823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.015016][T24823] syz.0.6943[24823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.349035][T24826] device syzkaller0 entered promiscuous mode [ 544.950688][T24847] IPv6: pim6reg1: Disabled Multicast RS [ 545.822615][T24872] device syzkaller0 entered promiscuous mode [ 549.205625][T24991] device syzkaller0 entered promiscuous mode [ 549.341827][T25008] device syzkaller0 entered promiscuous mode [ 553.454833][T25217] device wg2 entered promiscuous mode [ 554.894775][T25252] device syzkaller0 entered promiscuous mode [ 555.529995][T25270] device syzkaller0 entered promiscuous mode [ 555.536426][T25270] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 555.640256][T25284] device veth1_macvtap left promiscuous mode [ 555.647640][T25284] device veth1_macvtap entered promiscuous mode [ 555.661099][T25284] device macsec0 entered promiscuous mode [ 555.667334][T25284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.679682][T17007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.705398][T25288] device syzkaller0 entered promiscuous mode [ 556.001970][T25295] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 556.012582][T25295] syzkaller0: persist disabled [ 556.851045][T25331] device syzkaller0 entered promiscuous mode [ 557.782470][T25439] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 560.741703][T25590] device syzkaller0 entered promiscuous mode [ 563.247525][T25672] device syzkaller0 entered promiscuous mode [ 563.327629][T25680] device syzkaller0 entered promiscuous mode [ 564.462459][T25732] device vlan0 left promiscuous mode [ 565.753612][T25817] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.791209][T25817] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.798325][T25817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.919134][T25826] erspan0: refused to change device tx_queue_len [ 566.814282][T25895] device syzkaller0 entered promiscuous mode [ 567.091850][T25906] device syzkaller0 entered promiscuous mode [ 567.195241][T25909] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.207560][T25909] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.389523][T25921] device bridge_slave_1 left promiscuous mode [ 567.407925][T25921] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.421275][T25921] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.068817][T26018] device syzkaller0 entered promiscuous mode [ 568.748220][T26033] bridge0: port 4(veth1) entered blocking state [ 568.772422][T26033] bridge0: port 4(veth1) entered disabled state [ 568.843213][T26033] device veth1 entered promiscuous mode [ 568.867270][T26033] bridge0: port 4(veth1) entered blocking state [ 568.874207][T26033] bridge0: port 4(veth1) entered forwarding state [ 569.815192][T26098] : port 1(macsec0) entered blocking state [ 569.851475][T26098] : port 1(macsec0) entered disabled state [ 569.862840][T26098] device macsec0 entered promiscuous mode [ 570.617865][T26133] device veth0_vlan left promiscuous mode [ 570.711110][T26133] device veth0_vlan entered promiscuous mode [ 570.836853][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.002660][T26145] device syzkaller0 entered promiscuous mode [ 571.107396][T26161] device syzkaller0 entered promiscuous mode [ 571.642100][T26188] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 574.528136][T26328] device syzkaller0 entered promiscuous mode [ 576.618651][T26432] bridge0: port 3(gretap0) entered disabled state [ 576.625921][T26432] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.633599][T26432] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.863627][T26527] pimreg0: tun_chr_ioctl cmd 35111 [ 579.366719][T26550] device dummy0 entered promiscuous mode [ 579.464138][T22112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.283817][T26673] device syzkaller0 entered promiscuous mode [ 580.545042][T26707] device syzkaller0 entered promiscuous mode [ 581.849635][T26768] device wg2 entered promiscuous mode [ 582.075535][T26781] syz.3.7508[26781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.077656][T26781] syz.3.7508[26781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.321317][T26802] device syzkaller0 entered promiscuous mode [ 584.033574][T26880] device syzkaller0 entered promiscuous mode [ 584.634244][T26894] device syzkaller0 entered promiscuous mode [ 587.752697][T26969] device syzkaller0 entered promiscuous mode [ 587.856713][T26986] device syzkaller0 entered promiscuous mode [ 593.812103][T27294] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 593.903517][T27294] device syzkaller0 entered promiscuous mode [ 596.449734][T27353] device veth0_vlan left promiscuous mode [ 596.582555][T27353] device veth0_vlan entered promiscuous mode [ 597.666817][T27255] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 597.748451][T27255] CPU: 1 PID: 27255 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 597.757331][T27255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.767395][T27255] Call Trace: [ 597.770680][T27255] __dump_stack+0x21/0x24 [ 597.774996][T27255] dump_stack_lvl+0x1a7/0x208 [ 597.779670][T27255] ? show_regs_print_info+0x18/0x18 [ 597.784967][T27255] ? ___ratelimit+0x3de/0x560 [ 597.789642][T27255] ? _raw_spin_lock+0x94/0xf0 [ 597.794319][T27255] dump_stack+0x15/0x1c [ 597.798463][T27255] dump_header+0xdd/0x650 [ 597.802810][T27255] oom_kill_process+0x1fa/0x2c0 [ 597.807668][T27255] out_of_memory+0x93f/0xd20 [ 597.812251][T27255] ? unregister_oom_notifier+0x20/0x20 [ 597.817706][T27255] ? mutex_lock_killable+0x92/0xf0 [ 597.822807][T27255] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 597.829307][T27255] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 597.829922][T27364] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.834844][T27255] ? mem_cgroup_oom_trylock+0x350/0x350 [ 597.834856][T27255] ? _raw_spin_trylock_bh+0x150/0x150 [ 597.834864][T27255] ? _raw_spin_unlock+0x4d/0x70 [ 597.834872][T27255] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 597.834892][T27255] try_charge+0xf69/0x1500 [ 597.867860][T27255] ? __memcg_kmem_charge+0x150/0x150 [ 597.872363][T27364] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.873132][T27255] ? percpu_counter_add_batch+0x13c/0x160 [ 597.880552][T27364] device bridge_slave_0 entered promiscuous mode [ 597.885827][T27255] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 597.885837][T27255] __mem_cgroup_charge+0x14c/0x6d0 [ 597.885848][T27255] shmem_add_to_page_cache+0x574/0xe30 [ 597.885863][T27255] ? shmem_alloc_page+0x380/0x380 [ 597.913465][T27255] ? _raw_spin_lock_irqsave+0x130/0x130 [ 597.919000][T27255] ? find_lock_entry+0x4b/0x200 [ 597.923839][T27255] shmem_getpage_gfp+0x8eb/0x2120 [ 597.928854][T27255] shmem_write_begin+0xce/0x1b0 [ 597.933681][T27255] generic_perform_write+0x2ce/0x540 [ 597.938944][T27255] ? atime_needs_update+0x5b0/0x5b0 [ 597.944119][T27255] ? grab_cache_page_write_begin+0xb0/0xb0 [ 597.950166][T27255] ? file_remove_privs+0x5b0/0x5b0 [ 597.955257][T27255] ? __kasan_check_write+0x14/0x20 [ 597.960345][T27255] ? down_write+0xb2/0x120 [ 597.964741][T27255] __generic_file_write_iter+0x24b/0x480 [ 597.970354][T27255] ? generic_write_checks+0x3d4/0x480 [ 597.975705][T27255] generic_file_write_iter+0xa9/0x1d0 [ 597.981050][T27255] __kernel_write+0x535/0x910 [ 597.985706][T27255] ? vfs_read+0xa60/0xa60 [ 597.990013][T27255] ? populate_vma_page_range+0xf0/0xf0 [ 597.995445][T27255] ? cgroup_freezing+0x86/0xb0 [ 598.000184][T27255] ? freezing_slow_path+0x10a/0x150 [ 598.005359][T27255] dump_emit+0x246/0x370 [ 598.009577][T27255] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 598.015015][T27255] ? freezing_slow_path+0x10a/0x150 [ 598.020186][T27255] dump_user_range+0x6a/0x1a0 [ 598.024842][T27255] elf_core_dump+0x2866/0x2cc0 [ 598.029679][T27255] ? load_elf_binary+0x28e0/0x28e0 [ 598.034768][T27255] ? __fsnotify_parent+0x6db/0x7c0 [ 598.039865][T27255] ? do_truncate+0x1c6/0x240 [ 598.044430][T27255] ? putname+0xfe/0x150 [ 598.048560][T27255] ? __kasan_check_read+0x11/0x20 [ 598.053563][T27255] ? cgroup_freezing+0x86/0xb0 [ 598.058301][T27255] ? freezing_slow_path+0x10a/0x150 [ 598.063474][T27255] do_coredump+0x1ba3/0x28e0 [ 598.068043][T27255] ? simple_acl_create+0x1c0/0x1c0 [ 598.073134][T27255] ? debug_smp_processor_id+0x17/0x20 [ 598.078482][T27255] ? kmem_cache_free+0x100/0x2d0 [ 598.083391][T27255] ? ____kasan_slab_free+0x130/0x160 [ 598.088655][T27255] ? get_signal+0xb98/0x12e0 [ 598.093217][T27255] ? kmem_cache_free+0x100/0x2d0 [ 598.098135][T27255] get_signal+0xf23/0x12e0 [ 598.102530][T27255] arch_do_signal_or_restart+0xe2/0x11d0 [ 598.108143][T27255] ? __bad_area_nosemaphore+0x2b0/0x420 [ 598.113661][T27255] ? down_read_trylock+0x106/0x160 [ 598.118749][T27255] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 598.124356][T27255] ? bad_area+0x6a/0x80 [ 598.128493][T27255] exit_to_user_mode_loop+0xa2/0xe0 [ 598.133673][T27255] exit_to_user_mode_prepare+0x76/0xa0 [ 598.139108][T27255] irqentry_exit_to_user_mode+0x9/0x10 [ 598.144540][T27255] irqentry_exit+0x12/0x60 [ 598.149019][T27255] exc_page_fault+0x67/0xc0 [ 598.153497][T27255] ? asm_exc_page_fault+0x8/0x30 [ 598.158409][T27255] asm_exc_page_fault+0x1e/0x30 [ 598.163234][T27255] RIP: 0033:0x9cb5535d7b [ 598.167457][T27255] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 598.174625][T27255] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 598.180667][T27255] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 598.188613][T27255] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 598.196558][T27255] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 598.204528][T27255] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 598.212489][T27255] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 598.222782][T27255] memory: usage 307200kB, limit 307200kB, failcnt 12951 [ 598.229856][T27255] memory+swap: usage 430900kB, limit 9007199254740988kB, failcnt 0 [ 598.237887][T27255] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 598.244790][T27255] Memory cgroup stats for /syz4: [ 598.244894][T27255] anon 270336 [ 598.244894][T27255] file 313049088 [ 598.244894][T27255] kernel_stack 0 [ 598.244894][T27255] percpu 0 [ 598.244894][T27255] sock 0 [ 598.244894][T27255] shmem 312913920 [ 598.244894][T27255] file_mapped 135168 [ 598.244894][T27255] file_dirty 0 [ 598.244894][T27255] file_writeback 0 [ 598.244894][T27255] anon_thp 0 [ 598.244894][T27255] inactive_anon 313823232 [ 598.244894][T27255] active_anon 405504 [ 598.244894][T27255] inactive_file 0 [ 598.244894][T27255] active_file 49152 [ 598.244894][T27255] unevictable 0 [ 598.244894][T27255] slab_reclaimable 0 [ 598.244894][T27255] slab_unreclaimable 0 [ 598.244894][T27255] slab 0 [ 598.244894][T27255] workingset_refault_anon 0 [ 598.244894][T27255] workingset_refault_file 396 [ 598.244894][T27255] workingset_activate_anon 0 [ 598.244894][T27255] workingset_activate_file 297 [ 598.244894][T27255] workingset_restore_anon 0 [ 598.244894][T27255] workingset_restore_file 297 [ 598.251305][T27364] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.346603][T27364] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.365818][T27364] device bridge_slave_1 entered promiscuous mode [ 598.380050][T27255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27260,uid=0 [ 598.385607][T27378] device syzkaller0 entered promiscuous mode [ 598.398415][T27255] Memory cgroup out of memory: Killed process 27260 (syz.4.7639) total-vm:90440kB, anon-rss:1244kB, file-rss:52476kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 598.422658][ T27] oom_reaper: reaped process 27260 (syz.4.7639), now anon-rss:0kB, file-rss:52412kB, shmem-rss:0kB [ 598.458719][T27255] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 598.515906][T27255] CPU: 1 PID: 27255 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 598.524783][T27255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.534840][T27255] Call Trace: [ 598.538137][T27255] __dump_stack+0x21/0x24 [ 598.542467][T27255] dump_stack_lvl+0x1a7/0x208 [ 598.547137][T27255] ? show_regs_print_info+0x18/0x18 [ 598.552319][T27255] ? ___ratelimit+0x3de/0x560 [ 598.556980][T27255] ? __kasan_check_write+0x14/0x20 [ 598.562077][T27255] ? _raw_spin_lock+0x94/0xf0 [ 598.566747][T27255] dump_stack+0x15/0x1c [ 598.570894][T27255] dump_header+0xdd/0x650 [ 598.575218][T27255] oom_kill_process+0x1fa/0x2c0 [ 598.580061][T27255] out_of_memory+0x93f/0xd20 [ 598.584655][T27255] ? unregister_oom_notifier+0x20/0x20 [ 598.590110][T27255] ? mutex_lock_killable+0x92/0xf0 [ 598.595210][T27255] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 598.601705][T27255] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 598.607257][T27255] ? mem_cgroup_oom_trylock+0x350/0x350 [ 598.612783][T27255] ? _raw_spin_trylock_bh+0x150/0x150 [ 598.618405][T27255] ? _raw_spin_unlock+0x4d/0x70 [ 598.623232][T27255] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 598.628754][T27255] try_charge+0xf69/0x1500 [ 598.633150][T27255] ? __memcg_kmem_charge+0x150/0x150 [ 598.638498][T27255] ? percpu_counter_add_batch+0x13c/0x160 [ 598.644211][T27255] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 598.649746][T27255] __mem_cgroup_charge+0x14c/0x6d0 [ 598.654849][T27255] shmem_add_to_page_cache+0x574/0xe30 [ 598.660291][T27255] ? shmem_alloc_page+0x380/0x380 [ 598.665295][T27255] ? _raw_spin_lock_irqsave+0x130/0x130 [ 598.670817][T27255] ? find_lock_entry+0x4b/0x200 [ 598.675644][T27255] shmem_getpage_gfp+0x8eb/0x2120 [ 598.680690][T27255] shmem_write_begin+0xce/0x1b0 [ 598.685516][T27255] generic_perform_write+0x2ce/0x540 [ 598.690776][T27255] ? atime_needs_update+0x5b0/0x5b0 [ 598.695953][T27255] ? grab_cache_page_write_begin+0xb0/0xb0 [ 598.701737][T27255] ? file_remove_privs+0x5b0/0x5b0 [ 598.706822][T27255] ? __kasan_check_write+0x14/0x20 [ 598.711908][T27255] ? down_write+0xb2/0x120 [ 598.716301][T27255] __generic_file_write_iter+0x24b/0x480 [ 598.722002][T27255] ? generic_write_checks+0x3d4/0x480 [ 598.727362][T27255] generic_file_write_iter+0xa9/0x1d0 [ 598.732710][T27255] __kernel_write+0x535/0x910 [ 598.737365][T27255] ? vfs_read+0xa60/0xa60 [ 598.741673][T27255] ? populate_vma_page_range+0xf0/0xf0 [ 598.747127][T27255] ? cgroup_freezing+0x86/0xb0 [ 598.751876][T27255] ? freezing_slow_path+0x10a/0x150 [ 598.757059][T27255] dump_emit+0x246/0x370 [ 598.761282][T27255] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 598.766715][T27255] ? freezing_slow_path+0x10a/0x150 [ 598.771886][T27255] dump_user_range+0x6a/0x1a0 [ 598.776538][T27255] elf_core_dump+0x2866/0x2cc0 [ 598.781278][T27255] ? load_elf_binary+0x28e0/0x28e0 [ 598.786364][T27255] ? __fsnotify_parent+0x6db/0x7c0 [ 598.791457][T27255] ? do_truncate+0x1c6/0x240 [ 598.796023][T27255] ? putname+0xfe/0x150 [ 598.800154][T27255] ? __kasan_check_read+0x11/0x20 [ 598.805176][T27255] ? cgroup_freezing+0x86/0xb0 [ 598.809933][T27255] ? freezing_slow_path+0x10a/0x150 [ 598.815117][T27255] do_coredump+0x1ba3/0x28e0 [ 598.819692][T27255] ? simple_acl_create+0x1c0/0x1c0 [ 598.824782][T27255] ? debug_smp_processor_id+0x17/0x20 [ 598.830134][T27255] ? kmem_cache_free+0x100/0x2d0 [ 598.835055][T27255] ? ____kasan_slab_free+0x130/0x160 [ 598.840316][T27255] ? get_signal+0xb98/0x12e0 [ 598.844879][T27255] ? kmem_cache_free+0x100/0x2d0 [ 598.849791][T27255] get_signal+0xf23/0x12e0 [ 598.854184][T27255] arch_do_signal_or_restart+0xe2/0x11d0 [ 598.859796][T27255] ? __bad_area_nosemaphore+0x2b0/0x420 [ 598.865321][T27255] ? down_read_trylock+0x106/0x160 [ 598.870500][T27255] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 598.876108][T27255] ? bad_area+0x6a/0x80 [ 598.880244][T27255] exit_to_user_mode_loop+0xa2/0xe0 [ 598.885417][T27255] exit_to_user_mode_prepare+0x76/0xa0 [ 598.890865][T27255] irqentry_exit_to_user_mode+0x9/0x10 [ 598.896311][T27255] irqentry_exit+0x12/0x60 [ 598.900703][T27255] exc_page_fault+0x67/0xc0 [ 598.905183][T27255] ? asm_exc_page_fault+0x8/0x30 [ 598.910100][T27255] asm_exc_page_fault+0x1e/0x30 [ 598.914925][T27255] RIP: 0033:0x9cb5535d7b [ 598.919146][T27255] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 598.926312][T27255] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 598.932354][T27255] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 598.940319][T27255] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 598.948277][T27255] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 598.956247][T27255] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 598.964196][T27255] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 598.976804][T27255] memory: usage 278168kB, limit 307200kB, failcnt 13458 [ 598.983797][T27255] memory+swap: usage 397060kB, limit 9007199254740988kB, failcnt 0 [ 598.991736][T27255] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 598.998883][T27255] Memory cgroup stats for /syz4: [ 598.998988][T27255] anon 270336 [ 598.998988][T27255] file 283852800 [ 598.998988][T27255] kernel_stack 0 [ 598.998988][T27255] percpu 0 [ 598.998988][T27255] sock 0 [ 598.998988][T27255] shmem 283852800 [ 598.998988][T27255] file_mapped 135168 [ 598.998988][T27255] file_dirty 0 [ 598.998988][T27255] file_writeback 0 [ 598.998988][T27255] anon_thp 0 [ 598.998988][T27255] inactive_anon 284491776 [ 598.998988][T27255] active_anon 405504 [ 598.998988][T27255] inactive_file 0 [ 598.998988][T27255] active_file 49152 [ 598.998988][T27255] unevictable 0 [ 598.998988][T27255] slab_reclaimable 0 [ 598.998988][T27255] slab_unreclaimable 0 [ 598.998988][T27255] slab 0 [ 598.998988][T27255] workingset_refault_anon 0 [ 598.998988][T27255] workingset_refault_file 396 [ 598.998988][T27255] workingset_activate_anon 0 [ 598.998988][T27255] workingset_activate_file 297 [ 598.998988][T27255] workingset_restore_anon 0 [ 598.998988][T27255] workingset_restore_file 297 [ 599.092891][T27255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27253,uid=0 [ 599.108229][T27255] Memory cgroup out of memory: Killed process 27253 (syz.4.7639) total-vm:90440kB, anon-rss:1244kB, file-rss:49984kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 599.239990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.258672][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.277045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.300198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.318282][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.325425][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.486766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.536984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.568384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.576860][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.583922][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.618217][T27420] device syzkaller0 entered promiscuous mode [ 599.646785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.660340][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.751806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 599.763729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 599.788206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 599.810825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 599.824361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 599.842066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.854343][T27364] device veth0_vlan entered promiscuous mode [ 599.878723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.906474][T27364] device veth1_macvtap entered promiscuous mode [ 599.955637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.006275][T27264] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 600.013747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.044079][T27264] CPU: 0 PID: 27264 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 600.053117][T27264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.063168][T27264] Call Trace: [ 600.066473][T27264] __dump_stack+0x21/0x24 [ 600.070877][T27264] dump_stack_lvl+0x1a7/0x208 [ 600.075551][T27264] ? show_regs_print_info+0x18/0x18 [ 600.080734][T27264] ? ___ratelimit+0x3de/0x560 [ 600.085402][T27264] ? __kasan_check_write+0x14/0x20 [ 600.090497][T27264] ? _raw_spin_lock+0x94/0xf0 [ 600.095166][T27264] dump_stack+0x15/0x1c [ 600.099309][T27264] dump_header+0xdd/0x650 [ 600.103623][T27264] oom_kill_process+0x1fa/0x2c0 [ 600.108459][T27264] out_of_memory+0x93f/0xd20 [ 600.113036][T27264] ? unregister_oom_notifier+0x20/0x20 [ 600.118482][T27264] ? mutex_lock_killable+0x92/0xf0 [ 600.123585][T27264] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 600.130078][T27264] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 600.135624][T27264] ? mem_cgroup_oom_trylock+0x350/0x350 [ 600.141166][T27264] ? _raw_spin_trylock_bh+0x150/0x150 [ 600.146527][T27264] ? _raw_spin_unlock+0x4d/0x70 [ 600.151370][T27264] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 600.156909][T27264] try_charge+0xf69/0x1500 [ 600.161319][T27264] ? __memcg_kmem_charge+0x150/0x150 [ 600.166588][T27264] ? percpu_counter_add_batch+0x13c/0x160 [ 600.172333][T27264] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 600.177870][T27264] __mem_cgroup_charge+0x14c/0x6d0 [ 600.182975][T27264] shmem_add_to_page_cache+0x574/0xe30 [ 600.188426][T27264] ? shmem_alloc_page+0x380/0x380 [ 600.193448][T27264] ? _raw_spin_lock_irqsave+0x130/0x130 [ 600.198989][T27264] ? find_lock_entry+0x4b/0x200 [ 600.203833][T27264] shmem_getpage_gfp+0x8eb/0x2120 [ 600.208864][T27264] shmem_write_begin+0xce/0x1b0 [ 600.213708][T27264] generic_perform_write+0x2ce/0x540 [ 600.218983][T27264] ? grab_cache_page_write_begin+0xb0/0xb0 [ 600.224780][T27264] ? file_remove_privs+0x5b0/0x5b0 [ 600.229878][T27264] ? __kasan_check_write+0x14/0x20 [ 600.234978][T27264] ? down_write+0xb2/0x120 [ 600.239384][T27264] __generic_file_write_iter+0x24b/0x480 [ 600.245008][T27264] ? generic_write_checks+0x3d4/0x480 [ 600.250375][T27264] generic_file_write_iter+0xa9/0x1d0 [ 600.255732][T27264] __kernel_write+0x535/0x910 [ 600.260400][T27264] ? vfs_read+0xa60/0xa60 [ 600.264718][T27264] ? populate_vma_page_range+0xf0/0xf0 [ 600.270167][T27264] ? cgroup_freezing+0x86/0xb0 [ 600.274917][T27264] ? freezing_slow_path+0x10a/0x150 [ 600.280212][T27264] dump_emit+0x246/0x370 [ 600.284447][T27264] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 600.289889][T27264] ? freezing_slow_path+0x10a/0x150 [ 600.295080][T27264] dump_user_range+0x6a/0x1a0 [ 600.299749][T27264] elf_core_dump+0x2866/0x2cc0 [ 600.304502][T27264] ? load_elf_binary+0x28e0/0x28e0 [ 600.309597][T27264] ? __fsnotify_parent+0x6db/0x7c0 [ 600.314705][T27264] ? do_truncate+0x1c6/0x240 [ 600.319280][T27264] ? putname+0xfe/0x150 [ 600.323420][T27264] ? __kasan_check_read+0x11/0x20 [ 600.328485][T27264] ? cgroup_freezing+0x86/0xb0 [ 600.333244][T27264] ? freezing_slow_path+0x10a/0x150 [ 600.338431][T27264] do_coredump+0x1ba3/0x28e0 [ 600.343010][T27264] ? simple_acl_create+0x1c0/0x1c0 [ 600.348110][T27264] ? debug_smp_processor_id+0x17/0x20 [ 600.353468][T27264] ? kmem_cache_free+0x100/0x2d0 [ 600.358394][T27264] ? ____kasan_slab_free+0x130/0x160 [ 600.363666][T27264] ? get_signal+0xb98/0x12e0 [ 600.368240][T27264] ? kmem_cache_free+0x100/0x2d0 [ 600.373162][T27264] get_signal+0xf23/0x12e0 [ 600.377591][T27264] arch_do_signal_or_restart+0xe2/0x11d0 [ 600.383210][T27264] ? __bad_area_nosemaphore+0x2b0/0x420 [ 600.388745][T27264] ? down_read_trylock+0x106/0x160 [ 600.393845][T27264] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 600.399462][T27264] ? bad_area+0x6a/0x80 [ 600.403613][T27264] exit_to_user_mode_loop+0xa2/0xe0 [ 600.408797][T27264] exit_to_user_mode_prepare+0x76/0xa0 [ 600.414246][T27264] irqentry_exit_to_user_mode+0x9/0x10 [ 600.419689][T27264] irqentry_exit+0x12/0x60 [ 600.424088][T27264] exc_page_fault+0x67/0xc0 [ 600.428595][T27264] ? asm_exc_page_fault+0x8/0x30 [ 600.433513][T27264] asm_exc_page_fault+0x1e/0x30 [ 600.438348][T27264] RIP: 0033:0x9cb5535d7b [ 600.442576][T27264] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 600.449759][T27264] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 600.455817][T27264] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 600.463774][T27264] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 600.471738][T27264] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 600.479696][T27264] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 600.487660][T27264] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 600.513649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.538240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.799261][T27264] memory: usage 307200kB, limit 307200kB, failcnt 15853 [ 600.806341][T27264] memory+swap: usage 431060kB, limit 9007199254740988kB, failcnt 0 [ 600.814551][T27264] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 600.827259][T27264] Memory cgroup stats for /syz4: [ 600.827363][T27264] anon 270336 [ 600.827363][T27264] file 313184256 [ 600.827363][T27264] kernel_stack 0 [ 600.827363][T27264] percpu 0 [ 600.827363][T27264] sock 0 [ 600.827363][T27264] shmem 313184256 [ 600.827363][T27264] file_mapped 135168 [ 600.827363][T27264] file_dirty 0 [ 600.827363][T27264] file_writeback 0 [ 600.827363][T27264] anon_thp 0 [ 600.827363][T27264] inactive_anon 306180096 [ 600.827363][T27264] active_anon 8245248 [ 600.827363][T27264] inactive_file 86016 [ 600.827363][T27264] active_file 45056 [ 600.827363][T27264] unevictable 0 [ 600.827363][T27264] slab_reclaimable 0 [ 600.827363][T27264] slab_unreclaimable 0 [ 600.827363][T27264] slab 0 [ 600.827363][T27264] workingset_refault_anon 0 [ 600.827363][T27264] workingset_refault_file 1518 [ 600.827363][T27264] workingset_activate_anon 0 [ 600.827363][T27264] workingset_activate_file 1089 [ 600.827363][T27264] workingset_restore_anon 0 [ 600.827363][T27264] workingset_restore_file 957 [ 601.144821][T27264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27255,uid=0 [ 601.171390][T27264] Memory cgroup out of memory: Killed process 27255 (syz.4.7639) total-vm:90440kB, anon-rss:1244kB, file-rss:51604kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 601.189766][ T1826] bridge0: port 3(gretap0) entered disabled state [ 601.201955][ T1826] device gretap0 left promiscuous mode [ 601.226393][ T27] oom_reaper: reaped process 27255 (syz.4.7639), now anon-rss:0kB, file-rss:51540kB, shmem-rss:0kB [ 601.242614][ T1826] bridge0: port 3(gretap0) entered disabled state [ 601.287718][T27458] device veth1_macvtap left promiscuous mode [ 601.293860][T27287] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 601.387536][T27287] CPU: 1 PID: 27287 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 601.396409][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.406454][T27287] Call Trace: [ 601.409739][T27287] __dump_stack+0x21/0x24 [ 601.414061][T27287] dump_stack_lvl+0x1a7/0x208 [ 601.418732][T27287] ? show_regs_print_info+0x18/0x18 [ 601.423917][T27287] ? ___ratelimit+0x3de/0x560 [ 601.428583][T27287] ? __kasan_check_write+0x14/0x20 [ 601.433682][T27287] ? _raw_spin_lock+0x94/0xf0 [ 601.438342][T27287] dump_stack+0x15/0x1c [ 601.442493][T27287] dump_header+0xdd/0x650 [ 601.446947][T27287] oom_kill_process+0x1fa/0x2c0 [ 601.451793][T27287] out_of_memory+0x93f/0xd20 [ 601.456375][T27287] ? unregister_oom_notifier+0x20/0x20 [ 601.461825][T27287] ? mutex_lock_killable+0xdf/0xf0 [ 601.466929][T27287] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 601.473452][T27287] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 601.478985][T27287] ? mem_cgroup_oom_trylock+0x350/0x350 [ 601.484526][T27287] ? _raw_spin_trylock_bh+0x150/0x150 [ 601.489882][T27287] ? _raw_spin_unlock+0x4d/0x70 [ 601.494722][T27287] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 601.500348][T27287] try_charge+0xf69/0x1500 [ 601.504757][T27287] ? __memcg_kmem_charge+0x150/0x150 [ 601.510029][T27287] ? percpu_counter_add_batch+0x13c/0x160 [ 601.515743][T27287] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 601.521275][T27287] __mem_cgroup_charge+0x14c/0x6d0 [ 601.526376][T27287] shmem_add_to_page_cache+0x574/0xe30 [ 601.531826][T27287] ? shmem_alloc_page+0x380/0x380 [ 601.536838][T27287] ? perf_sched_cb_inc+0x240/0x240 [ 601.541935][T27287] ? find_lock_entry+0x4b/0x200 [ 601.546772][T27287] shmem_getpage_gfp+0x8eb/0x2120 [ 601.551795][T27287] ? __kasan_check_read+0x11/0x20 [ 601.557161][T27287] shmem_write_begin+0xce/0x1b0 [ 601.562007][T27287] generic_perform_write+0x2ce/0x540 [ 601.567289][T27287] ? grab_cache_page_write_begin+0xb0/0xb0 [ 601.573090][T27287] ? file_remove_privs+0x5b0/0x5b0 [ 601.578197][T27287] ? __kasan_check_write+0x14/0x20 [ 601.583295][T27287] ? down_write+0xb2/0x120 [ 601.587693][T27287] __generic_file_write_iter+0x24b/0x480 [ 601.593405][T27287] ? generic_write_checks+0x3d4/0x480 [ 601.598779][T27287] generic_file_write_iter+0xa9/0x1d0 [ 601.604241][T27287] __kernel_write+0x535/0x910 [ 601.608920][T27287] ? vfs_read+0xa60/0xa60 [ 601.613254][T27287] ? populate_vma_page_range+0xf0/0xf0 [ 601.618726][T27287] ? cgroup_freezing+0x86/0xb0 [ 601.623476][T27287] ? freezing_slow_path+0x10a/0x150 [ 601.628650][T27287] dump_emit+0x246/0x370 [ 601.632869][T27287] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 601.638303][T27287] ? freezing_slow_path+0x10a/0x150 [ 601.643490][T27287] dump_user_range+0x6a/0x1a0 [ 601.648144][T27287] elf_core_dump+0x2866/0x2cc0 [ 601.652886][T27287] ? load_elf_binary+0x28e0/0x28e0 [ 601.657973][T27287] ? __fsnotify_parent+0x6db/0x7c0 [ 601.663067][T27287] ? do_truncate+0x1c6/0x240 [ 601.667655][T27287] ? putname+0xfe/0x150 [ 601.671789][T27287] ? __kasan_check_read+0x11/0x20 [ 601.676792][T27287] ? cgroup_freezing+0x86/0xb0 [ 601.681531][T27287] ? freezing_slow_path+0x10a/0x150 [ 601.686712][T27287] do_coredump+0x1ba3/0x28e0 [ 601.691280][T27287] ? simple_acl_create+0x1c0/0x1c0 [ 601.696400][T27287] ? debug_smp_processor_id+0x17/0x20 [ 601.701751][T27287] ? kmem_cache_free+0x100/0x2d0 [ 601.706661][T27287] ? ____kasan_slab_free+0x130/0x160 [ 601.711924][T27287] ? get_signal+0xb98/0x12e0 [ 601.716496][T27287] ? kmem_cache_free+0x100/0x2d0 [ 601.721411][T27287] get_signal+0xf23/0x12e0 [ 601.725892][T27287] arch_do_signal_or_restart+0xe2/0x11d0 [ 601.731514][T27287] ? __bad_area_nosemaphore+0x2b0/0x420 [ 601.737034][T27287] ? down_read_trylock+0x106/0x160 [ 601.742121][T27287] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 601.747727][T27287] ? bad_area+0x6a/0x80 [ 601.751983][T27287] exit_to_user_mode_loop+0xa2/0xe0 [ 601.757178][T27287] exit_to_user_mode_prepare+0x76/0xa0 [ 601.762620][T27287] irqentry_exit_to_user_mode+0x9/0x10 [ 601.768054][T27287] irqentry_exit+0x12/0x60 [ 601.772451][T27287] exc_page_fault+0x67/0xc0 [ 601.776929][T27287] ? asm_exc_page_fault+0x8/0x30 [ 601.782012][T27287] asm_exc_page_fault+0x1e/0x30 [ 601.786837][T27287] RIP: 0033:0x9cb5535d7b [ 601.791057][T27287] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 601.798223][T27287] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 601.804262][T27287] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 601.812210][T27287] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 601.820155][T27287] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 601.828111][T27287] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 601.836100][T27287] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 601.848205][T27460] device wg2 left promiscuous mode [ 601.855679][T27287] memory: usage 280812kB, limit 307200kB, failcnt 16343 [ 601.870877][T27287] memory+swap: usage 396416kB, limit 9007199254740988kB, failcnt 0 [ 601.881025][T27287] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 601.891599][T27287] Memory cgroup stats for /syz4: [ 601.891692][T27287] anon 270336 [ 601.891692][T27287] file 286556160 [ 601.891692][T27287] kernel_stack 0 [ 601.891692][T27287] percpu 0 [ 601.891692][T27287] sock 0 [ 601.891692][T27287] shmem 286691328 [ 601.891692][T27287] file_mapped 135168 [ 601.891692][T27287] file_dirty 0 [ 601.891692][T27287] file_writeback 0 [ 601.891692][T27287] anon_thp 0 [ 601.891692][T27287] inactive_anon 279228416 [ 601.891692][T27287] active_anon 8245248 [ 601.891692][T27287] inactive_file 86016 [ 601.891692][T27287] active_file 45056 [ 601.891692][T27287] unevictable 0 [ 601.891692][T27287] slab_reclaimable 0 [ 601.891692][T27287] slab_unreclaimable 0 [ 601.891692][T27287] slab 0 [ 601.891692][T27287] workingset_refault_anon 0 [ 601.891692][T27287] workingset_refault_file 1518 [ 601.891692][T27287] workingset_activate_anon 0 [ 601.891692][T27287] workingset_activate_file 1089 [ 601.891692][T27287] workingset_restore_anon 0 [ 601.891692][T27287] workingset_restore_file 957 [ 602.113567][ T1826] device veth1 left promiscuous mode [ 602.119470][ T1826] bridge0: port 4(veth1) entered disabled state [ 602.125965][T27287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27261,uid=0 [ 602.142102][T27287] Memory cgroup out of memory: Killed process 27261 (syz.4.7639) total-vm:90440kB, anon-rss:1244kB, file-rss:51448kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 602.202914][ T1826] device bridge_slave_1 left promiscuous mode [ 602.219218][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.367470][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.577780][T27535] syz.4.7706 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 603.592427][T27535] CPU: 1 PID: 27535 Comm: syz.4.7706 Tainted: G W syzkaller #0 [ 603.601353][T27535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.611470][T27535] Call Trace: [ 603.614747][T27535] __dump_stack+0x21/0x24 [ 603.619049][T27535] dump_stack_lvl+0x1a7/0x208 [ 603.623709][T27535] ? show_regs_print_info+0x18/0x18 [ 603.628883][T27535] ? ___ratelimit+0x3de/0x560 [ 603.633539][T27535] ? _raw_spin_lock+0x94/0xf0 [ 603.638187][T27535] dump_stack+0x15/0x1c [ 603.642315][T27535] dump_header+0xdd/0x650 [ 603.646619][T27535] oom_kill_process+0x1fa/0x2c0 [ 603.651439][T27535] out_of_memory+0x93f/0xd20 [ 603.656006][T27535] ? unregister_oom_notifier+0x20/0x20 [ 603.661434][T27535] ? mutex_lock_killable+0x92/0xf0 [ 603.666519][T27535] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 603.672995][T27535] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 603.678514][T27535] ? mem_cgroup_oom_trylock+0x350/0x350 [ 603.684121][T27535] ? _raw_spin_trylock_bh+0x150/0x150 [ 603.689465][T27535] ? _raw_spin_unlock+0x4d/0x70 [ 603.694286][T27535] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 603.699811][T27535] try_charge+0xf69/0x1500 [ 603.704293][T27535] ? __memcg_kmem_charge+0x150/0x150 [ 603.709552][T27535] ? __alloc_pages_nodemask+0x290/0x620 [ 603.715073][T27535] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 603.720592][T27535] __mem_cgroup_charge+0x14c/0x6d0 [ 603.725678][T27535] handle_pte_fault+0x175c/0x3750 [ 603.730857][T27535] __handle_speculative_fault+0xe77/0x1390 [ 603.736636][T27535] ? finish_fault+0xa70/0xa70 [ 603.741337][T27535] ? __irq_exit_rcu+0x40/0x150 [ 603.746072][T27535] do_user_addr_fault+0x7f3/0xc90 [ 603.751088][T27535] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 603.757561][T27535] ? do_kern_addr_fault+0x80/0x80 [ 603.762564][T27535] ? __kasan_check_read+0x11/0x20 [ 603.767560][T27535] exc_page_fault+0x5a/0xc0 [ 603.772035][T27535] ? asm_exc_page_fault+0x8/0x30 [ 603.776944][T27535] asm_exc_page_fault+0x1e/0x30 [ 603.781767][T27535] RIP: 0033:0x7fe0106a1bdf [ 603.786161][T27535] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 603.805737][T27535] RSP: 002b:00007fe00f12cff0 EFLAGS: 00010246 [ 603.811775][T27535] RAX: 00007fe00f12d0d0 RBX: 0000000000020000 RCX: 00007fe00f12cff0 [ 603.819720][T27535] RDX: 00007fe0107a59d3 RSI: 0000000000000023 RDI: 00007fe00f12d0d0 [ 603.827663][T27535] RBP: 00007fe00f10e000 R08: 0000000000000000 R09: 00007ffe0bc07de7 [ 603.835607][T27535] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fe00f12d0d0 [ 603.843567][T27535] R13: 000000000000006e R14: 00007ffe0bc07d00 R15: 00007ffe0bc07de8 [ 603.852291][T27535] memory: usage 307200kB, limit 307200kB, failcnt 18396 [ 603.859338][T27535] memory+swap: usage 429928kB, limit 9007199254740988kB, failcnt 0 [ 603.867513][T27535] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 603.880217][T27535] Memory cgroup stats for /syz4: [ 603.880328][T27535] anon 270336 [ 603.880328][T27535] file 311967744 [ 603.880328][T27535] kernel_stack 0 [ 603.880328][T27535] percpu 0 [ 603.880328][T27535] sock 0 [ 603.880328][T27535] shmem 311562240 [ 603.880328][T27535] file_mapped 135168 [ 603.880328][T27535] file_dirty 0 [ 603.880328][T27535] file_writeback 0 [ 603.880328][T27535] anon_thp 0 [ 603.880328][T27535] inactive_anon 306036736 [ 603.880328][T27535] active_anon 7974912 [ 603.880328][T27535] inactive_file 163840 [ 603.880328][T27535] active_file 16384 [ 603.880328][T27535] unevictable 0 [ 603.880328][T27535] slab_reclaimable 0 [ 603.880328][T27535] slab_unreclaimable 0 [ 603.880328][T27535] slab 0 [ 603.880328][T27535] workingset_refault_anon 0 [ 603.880328][T27535] workingset_refault_file 3333 [ 603.880328][T27535] workingset_activate_anon 0 [ 603.880328][T27535] workingset_activate_file 2079 [ 603.880328][T27535] workingset_restore_anon 0 [ 603.880328][T27535] workingset_restore_file 1782 [ 603.989609][T27535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27252,uid=0 [ 604.165607][T27535] Memory cgroup out of memory: Killed process 27252 (syz.4.7639) total-vm:90440kB, anon-rss:1244kB, file-rss:52412kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 604.422438][T27264] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 604.496617][T27264] CPU: 0 PID: 27264 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 604.505483][T27264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.515525][T27264] Call Trace: [ 604.518812][T27264] __dump_stack+0x21/0x24 [ 604.523137][T27264] dump_stack_lvl+0x1a7/0x208 [ 604.527817][T27264] ? show_regs_print_info+0x18/0x18 [ 604.533006][T27264] ? ___ratelimit+0x3de/0x560 [ 604.537682][T27264] ? __kasan_check_write+0x14/0x20 [ 604.542783][T27264] ? _raw_spin_lock+0x94/0xf0 [ 604.547448][T27264] dump_stack+0x15/0x1c [ 604.551592][T27264] dump_header+0xdd/0x650 [ 604.556183][T27264] oom_kill_process+0x1fa/0x2c0 [ 604.561016][T27264] out_of_memory+0x93f/0xd20 [ 604.565589][T27264] ? unregister_oom_notifier+0x20/0x20 [ 604.571046][T27264] ? mutex_lock_killable+0xdf/0xf0 [ 604.576143][T27264] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 604.582632][T27264] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 604.588169][T27264] ? mem_cgroup_oom_trylock+0x350/0x350 [ 604.593722][T27264] ? _raw_spin_trylock_bh+0x150/0x150 [ 604.599082][T27264] ? _raw_spin_unlock+0x4d/0x70 [ 604.603925][T27264] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 604.609461][T27264] try_charge+0xf69/0x1500 [ 604.613972][T27264] ? __memcg_kmem_charge+0x150/0x150 [ 604.619249][T27264] ? percpu_counter_add_batch+0x13c/0x160 [ 604.625060][T27264] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 604.630697][T27264] __mem_cgroup_charge+0x14c/0x6d0 [ 604.635906][T27264] shmem_add_to_page_cache+0x574/0xe30 [ 604.641538][T27264] ? shmem_alloc_page+0x380/0x380 [ 604.646562][T27264] ? _raw_spin_lock_irqsave+0x130/0x130 [ 604.652114][T27264] ? find_lock_entry+0x4b/0x200 [ 604.656983][T27264] shmem_getpage_gfp+0x8eb/0x2120 [ 604.662042][T27264] shmem_write_begin+0xce/0x1b0 [ 604.666899][T27264] generic_perform_write+0x2ce/0x540 [ 604.672176][T27264] ? atime_needs_update+0x5b0/0x5b0 [ 604.677376][T27264] ? grab_cache_page_write_begin+0xb0/0xb0 [ 604.683232][T27264] ? file_remove_privs+0x5b0/0x5b0 [ 604.688337][T27264] ? __kasan_check_write+0x14/0x20 [ 604.693436][T27264] ? down_write+0xb2/0x120 [ 604.697845][T27264] __generic_file_write_iter+0x24b/0x480 [ 604.703462][T27264] ? generic_write_checks+0x3d4/0x480 [ 604.708823][T27264] generic_file_write_iter+0xa9/0x1d0 [ 604.714185][T27264] __kernel_write+0x535/0x910 [ 604.718960][T27264] ? vfs_read+0xa60/0xa60 [ 604.723277][T27264] ? populate_vma_page_range+0xf0/0xf0 [ 604.728726][T27264] ? cgroup_freezing+0x86/0xb0 [ 604.733475][T27264] ? freezing_slow_path+0x10a/0x150 [ 604.738662][T27264] dump_emit+0x246/0x370 [ 604.742978][T27264] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 604.748531][T27264] ? freezing_slow_path+0x10a/0x150 [ 604.753801][T27264] dump_user_range+0x6a/0x1a0 [ 604.758460][T27264] elf_core_dump+0x2866/0x2cc0 [ 604.763382][T27264] ? load_elf_binary+0x28e0/0x28e0 [ 604.768498][T27264] ? __fsnotify_parent+0x6db/0x7c0 [ 604.773627][T27264] ? do_truncate+0x1c6/0x240 [ 604.778211][T27264] ? putname+0xfe/0x150 [ 604.782361][T27264] ? __kasan_check_read+0x11/0x20 [ 604.787395][T27264] ? cgroup_freezing+0x86/0xb0 [ 604.792157][T27264] ? freezing_slow_path+0x10a/0x150 [ 604.797366][T27264] do_coredump+0x1ba3/0x28e0 [ 604.801964][T27264] ? simple_acl_create+0x1c0/0x1c0 [ 604.807064][T27264] ? debug_smp_processor_id+0x17/0x20 [ 604.812441][T27264] ? kmem_cache_free+0x100/0x2d0 [ 604.817370][T27264] ? ____kasan_slab_free+0x130/0x160 [ 604.823170][T27264] ? get_signal+0xb98/0x12e0 [ 604.827751][T27264] ? kmem_cache_free+0x100/0x2d0 [ 604.832680][T27264] get_signal+0xf23/0x12e0 [ 604.837094][T27264] arch_do_signal_or_restart+0xe2/0x11d0 [ 604.842717][T27264] ? __bad_area_nosemaphore+0x2b0/0x420 [ 604.848247][T27264] ? down_read_trylock+0x106/0x160 [ 604.853344][T27264] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 604.858972][T27264] ? bad_area+0x6a/0x80 [ 604.863118][T27264] exit_to_user_mode_loop+0xa2/0xe0 [ 604.868310][T27264] exit_to_user_mode_prepare+0x76/0xa0 [ 604.873758][T27264] irqentry_exit_to_user_mode+0x9/0x10 [ 604.879199][T27264] irqentry_exit+0x12/0x60 [ 604.883599][T27264] exc_page_fault+0x67/0xc0 [ 604.888097][T27264] ? asm_exc_page_fault+0x8/0x30 [ 604.893024][T27264] asm_exc_page_fault+0x1e/0x30 [ 604.897858][T27264] RIP: 0033:0x9cb5535d7b [ 604.902089][T27264] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 604.909267][T27264] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 604.915333][T27264] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 604.923308][T27264] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 604.931269][T27264] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 604.939235][T27264] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 604.947201][T27264] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 605.054526][T27597] device syzkaller0 entered promiscuous mode [ 605.160572][T27264] memory: usage 304908kB, limit 307200kB, failcnt 20700 [ 605.167563][T27264] memory+swap: usage 423088kB, limit 9007199254740988kB, failcnt 0 [ 605.175706][T27264] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 605.182586][T27264] Memory cgroup stats for /syz4: [ 605.182681][T27264] anon 405504 [ 605.182681][T27264] file 311427072 [ 605.182681][T27264] kernel_stack 0 [ 605.182681][T27264] percpu 0 [ 605.182681][T27264] sock 0 [ 605.182681][T27264] shmem 306966528 [ 605.182681][T27264] file_mapped 4190208 [ 605.182681][T27264] file_dirty 0 [ 605.182681][T27264] file_writeback 0 [ 605.182681][T27264] anon_thp 0 [ 605.182681][T27264] inactive_anon 301727744 [ 605.182681][T27264] active_anon 7569408 [ 605.182681][T27264] inactive_file 155648 [ 605.182681][T27264] active_file 3989504 [ 605.182681][T27264] unevictable 0 [ 605.182681][T27264] slab_reclaimable 0 [ 605.182681][T27264] slab_unreclaimable 0 [ 605.182681][T27264] slab 0 [ 605.182681][T27264] workingset_refault_anon 0 [ 605.182681][T27264] workingset_refault_file 5874 [ 605.182681][T27264] workingset_activate_anon 0 [ 605.182681][T27264] workingset_activate_file 3531 [ 605.182681][T27264] workingset_restore_anon 0 [ 605.182681][T27264] workingset_restore_file 2310 [ 605.292114][T27264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27249,uid=0 [ 605.657647][T27264] Memory cgroup out of memory: Killed process 27249 (syz.4.7639) total-vm:90440kB, anon-rss:1236kB, file-rss:52772kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 605.737551][T27508] syz.4.7706 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 605.890620][T27508] CPU: 0 PID: 27508 Comm: syz.4.7706 Tainted: G W syzkaller #0 [ 605.899486][T27508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 605.909539][T27508] Call Trace: [ 605.912929][T27508] __dump_stack+0x21/0x24 [ 605.917248][T27508] dump_stack_lvl+0x1a7/0x208 [ 605.921915][T27508] ? show_regs_print_info+0x18/0x18 [ 605.927106][T27508] ? ___ratelimit+0x3de/0x560 [ 605.931770][T27508] ? __kasan_check_write+0x14/0x20 [ 605.936867][T27508] ? _raw_spin_lock+0x94/0xf0 [ 605.941533][T27508] dump_stack+0x15/0x1c [ 605.945677][T27508] dump_header+0xdd/0x650 [ 605.949988][T27508] oom_kill_process+0x1fa/0x2c0 [ 605.954820][T27508] out_of_memory+0x93f/0xd20 [ 605.959397][T27508] ? unregister_oom_notifier+0x20/0x20 [ 605.964839][T27508] ? mutex_lock_killable+0xdf/0xf0 [ 605.969932][T27508] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 605.976440][T27508] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 605.982108][T27508] ? mem_cgroup_oom_trylock+0x350/0x350 [ 605.987654][T27508] ? _raw_spin_trylock_bh+0x150/0x150 [ 605.993021][T27508] ? _raw_spin_unlock+0x4d/0x70 [ 605.997861][T27508] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 606.003396][T27508] try_charge+0xf69/0x1500 [ 606.007804][T27508] ? __memcg_kmem_charge+0x150/0x150 [ 606.013071][T27508] ? __alloc_pages_nodemask+0x290/0x620 [ 606.018605][T27508] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 606.024139][T27508] __mem_cgroup_charge+0x14c/0x6d0 [ 606.029252][T27508] handle_pte_fault+0x175c/0x3750 [ 606.034264][T27508] handle_mm_fault+0xf81/0x1710 [ 606.039111][T27508] ? can_reuse_spf_vma+0xe0/0xe0 [ 606.044026][T27508] ? split_pad_vma+0x69/0x240 [ 606.048693][T27508] ? __kasan_check_write+0x14/0x20 [ 606.053783][T27508] ? down_read_trylock+0x106/0x160 [ 606.058874][T27508] ? __kasan_check_write+0x14/0x20 [ 606.063971][T27508] ? can_reuse_spf_vma+0xc8/0xe0 [ 606.068893][T27508] do_user_addr_fault+0x5a8/0xc90 [ 606.073906][T27508] ? do_kern_addr_fault+0x80/0x80 [ 606.078926][T27508] ? debug_smp_processor_id+0x17/0x20 [ 606.084282][T27508] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 606.090336][T27508] exc_page_fault+0x5a/0xc0 [ 606.094820][T27508] ? asm_exc_page_fault+0x8/0x30 [ 606.099740][T27508] asm_exc_page_fault+0x1e/0x30 [ 606.104571][T27508] RIP: 0033:0x7fe0106b0844 [ 606.108973][T27508] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 f6 2b 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 606.128667][T27508] RSP: 002b:00007ffe0bc07d90 EFLAGS: 00010246 [ 606.134718][T27508] RAX: 00007fe00ecc9000 RBX: 00007fe00ece96c0 RCX: 00007fe0106f3427 [ 606.142678][T27508] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe00ece96c0 [ 606.150633][T27508] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 606.159026][T27508] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe0bc07ee0 [ 606.166985][T27508] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 606.355973][T27508] memory: usage 307164kB, limit 307200kB, failcnt 22825 [ 606.362969][T27508] memory+swap: usage 422208kB, limit 9007199254740988kB, failcnt 0 [ 606.370955][T27508] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 606.378324][T27508] Memory cgroup stats for /syz4: [ 606.378438][T27508] anon 405504 [ 606.378438][T27508] file 311427072 [ 606.378438][T27508] kernel_stack 0 [ 606.378438][T27508] percpu 0 [ 606.378438][T27508] sock 0 [ 606.378438][T27508] shmem 309399552 [ 606.378438][T27508] file_mapped 1757184 [ 606.378438][T27508] file_dirty 0 [ 606.378438][T27508] file_writeback 540672 [ 606.378438][T27508] anon_thp 0 [ 606.378438][T27508] inactive_anon 304115712 [ 606.378438][T27508] active_anon 7704576 [ 606.378438][T27508] inactive_file 618496 [ 606.378438][T27508] active_file 1482752 [ 606.378438][T27508] unevictable 0 [ 606.378438][T27508] slab_reclaimable 0 [ 606.378438][T27508] slab_unreclaimable 0 [ 606.378438][T27508] slab 0 [ 606.378438][T27508] workingset_refault_anon 0 [ 606.378438][T27508] workingset_refault_file 6798 [ 606.378438][T27508] workingset_activate_anon 0 [ 606.378438][T27508] workingset_activate_file 4092 [ 606.378438][T27508] workingset_restore_anon 0 [ 606.378438][T27508] workingset_restore_file 2772 [ 606.815974][T27694] device syzkaller0 entered promiscuous mode [ 607.103215][T27508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27287,uid=0 [ 607.118179][T27508] Memory cgroup out of memory: Killed process 27287 (syz.4.7639) total-vm:90440kB, anon-rss:1236kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 607.135766][ T27] oom_reaper: reaped process 27287 (syz.4.7639), now anon-rss:0kB, file-rss:53184kB, shmem-rss:0kB [ 607.490066][T27258] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 607.500005][T27258] CPU: 0 PID: 27258 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 607.508845][T27258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.518893][T27258] Call Trace: [ 607.522184][T27258] __dump_stack+0x21/0x24 [ 607.526505][T27258] dump_stack_lvl+0x1a7/0x208 [ 607.531449][T27258] ? show_regs_print_info+0x18/0x18 [ 607.536637][T27258] ? ___ratelimit+0x3de/0x560 [ 607.541301][T27258] ? __kasan_check_write+0x14/0x20 [ 607.546402][T27258] ? _raw_spin_lock+0x94/0xf0 [ 607.551066][T27258] dump_stack+0x15/0x1c [ 607.555213][T27258] dump_header+0xdd/0x650 [ 607.559531][T27258] oom_kill_process+0x1fa/0x2c0 [ 607.564367][T27258] out_of_memory+0x93f/0xd20 [ 607.568940][T27258] ? unregister_oom_notifier+0x20/0x20 [ 607.574504][T27258] ? mutex_lock_killable+0x92/0xf0 [ 607.579604][T27258] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 607.586099][T27258] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 607.591636][T27258] ? mem_cgroup_oom_trylock+0x350/0x350 [ 607.597173][T27258] ? _raw_spin_trylock_bh+0x150/0x150 [ 607.602537][T27258] ? _raw_spin_unlock+0x4d/0x70 [ 607.607379][T27258] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 607.612916][T27258] try_charge+0xf69/0x1500 [ 607.617331][T27258] ? __memcg_kmem_charge+0x150/0x150 [ 607.622599][T27258] ? percpu_counter_add_batch+0x13c/0x160 [ 607.628316][T27258] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 607.633855][T27258] __mem_cgroup_charge+0x14c/0x6d0 [ 607.638955][T27258] shmem_add_to_page_cache+0x574/0xe30 [ 607.644402][T27258] ? shmem_alloc_page+0x380/0x380 [ 607.649412][T27258] ? _raw_spin_lock_irqsave+0x130/0x130 [ 607.655470][T27258] ? find_lock_entry+0x4b/0x200 [ 607.660318][T27258] shmem_getpage_gfp+0x8eb/0x2120 [ 607.665340][T27258] shmem_write_begin+0xce/0x1b0 [ 607.670183][T27258] generic_perform_write+0x2ce/0x540 [ 607.675457][T27258] ? atime_needs_update+0x5b0/0x5b0 [ 607.680645][T27258] ? grab_cache_page_write_begin+0xb0/0xb0 [ 607.686443][T27258] ? file_remove_privs+0x5b0/0x5b0 [ 607.691553][T27258] ? __kasan_check_write+0x14/0x20 [ 607.696656][T27258] ? down_write+0xb2/0x120 [ 607.701056][T27258] __generic_file_write_iter+0x24b/0x480 [ 607.706677][T27258] ? generic_write_checks+0x3d4/0x480 [ 607.712034][T27258] generic_file_write_iter+0xa9/0x1d0 [ 607.717391][T27258] __kernel_write+0x535/0x910 [ 607.722055][T27258] ? vfs_read+0xa60/0xa60 [ 607.726378][T27258] ? populate_vma_page_range+0xf0/0xf0 [ 607.731836][T27258] ? cgroup_freezing+0x86/0xb0 [ 607.736593][T27258] ? freezing_slow_path+0x10a/0x150 [ 607.741951][T27258] dump_emit+0x246/0x370 [ 607.746179][T27258] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 607.751621][T27258] dump_user_range+0x6a/0x1a0 [ 607.756287][T27258] elf_core_dump+0x2866/0x2cc0 [ 607.761040][T27258] ? load_elf_binary+0x28e0/0x28e0 [ 607.766139][T27258] ? __fsnotify_parent+0x6db/0x7c0 [ 607.771252][T27258] ? do_truncate+0x1c6/0x240 [ 607.775830][T27258] ? putname+0xfe/0x150 [ 607.779980][T27258] ? __kasan_check_read+0x11/0x20 [ 607.784995][T27258] ? cgroup_freezing+0x86/0xb0 [ 607.789746][T27258] ? freezing_slow_path+0x10a/0x150 [ 607.794931][T27258] do_coredump+0x1ba3/0x28e0 [ 607.799509][T27258] ? simple_acl_create+0x1c0/0x1c0 [ 607.804610][T27258] ? debug_smp_processor_id+0x17/0x20 [ 607.809968][T27258] ? kmem_cache_free+0x100/0x2d0 [ 607.814896][T27258] ? ____kasan_slab_free+0x130/0x160 [ 607.820171][T27258] ? get_signal+0xb98/0x12e0 [ 607.824747][T27258] ? kmem_cache_free+0x100/0x2d0 [ 607.829670][T27258] get_signal+0xf23/0x12e0 [ 607.834077][T27258] arch_do_signal_or_restart+0xe2/0x11d0 [ 607.839787][T27258] ? __bad_area_nosemaphore+0x2b0/0x420 [ 607.845318][T27258] ? down_read_trylock+0x106/0x160 [ 607.850423][T27258] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 607.856048][T27258] ? bad_area+0x6a/0x80 [ 607.860209][T27258] exit_to_user_mode_loop+0xa2/0xe0 [ 607.865397][T27258] exit_to_user_mode_prepare+0x76/0xa0 [ 607.870843][T27258] irqentry_exit_to_user_mode+0x9/0x10 [ 607.876290][T27258] irqentry_exit+0x12/0x60 [ 607.880692][T27258] exc_page_fault+0x67/0xc0 [ 607.885182][T27258] ? asm_exc_page_fault+0x8/0x30 [ 607.890100][T27258] asm_exc_page_fault+0x1e/0x30 [ 607.894941][T27258] RIP: 0033:0x9cb5535d7b [ 607.899188][T27258] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 607.906374][T27258] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 607.912438][T27258] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 607.920401][T27258] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 607.928365][T27258] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 607.936323][T27258] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 607.944289][T27258] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 608.186810][T27258] memory: usage 304632kB, limit 307200kB, failcnt 24837 [ 608.217433][T27258] memory+swap: usage 428248kB, limit 9007199254740988kB, failcnt 0 [ 608.352271][T27258] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 608.444893][T27258] Memory cgroup stats for /syz4: [ 608.445008][T27258] anon 405504 [ 608.445008][T27258] file 310886400 [ 608.445008][T27258] kernel_stack 0 [ 608.445008][T27258] percpu 0 [ 608.445008][T27258] sock 0 [ 608.445008][T27258] shmem 308994048 [ 608.445008][T27258] file_mapped 1757184 [ 608.445008][T27258] file_dirty 0 [ 608.445008][T27258] file_writeback 0 [ 608.445008][T27258] anon_thp 0 [ 608.445008][T27258] inactive_anon 306196480 [ 608.445008][T27258] active_anon 5677056 [ 608.445008][T27258] inactive_file 774144 [ 608.445008][T27258] active_file 897024 [ 608.445008][T27258] unevictable 0 [ 608.445008][T27258] slab_reclaimable 0 [ 608.445008][T27258] slab_unreclaimable 0 [ 608.445008][T27258] slab 0 [ 608.445008][T27258] workingset_refault_anon 33 [ 608.445008][T27258] workingset_refault_file 8844 [ 608.445008][T27258] workingset_activate_anon 0 [ 608.445008][T27258] workingset_activate_file 5841 [ 608.445008][T27258] workingset_restore_anon 0 [ 608.445008][T27258] workingset_restore_file 4257 [ 608.682760][T27258] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27248,uid=0 [ 608.698215][T27258] Memory cgroup out of memory: Killed process 27248 (syz.4.7639) total-vm:90440kB, anon-rss:1236kB, file-rss:52724kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 608.742720][ T27] oom_reaper: reaped process 27248 (syz.4.7639), now anon-rss:0kB, file-rss:52660kB, shmem-rss:0kB [ 608.774206][T27262] syz.4.7639 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 608.834048][T27262] CPU: 1 PID: 27262 Comm: syz.4.7639 Tainted: G W syzkaller #0 [ 608.842916][T27262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.852963][T27262] Call Trace: [ 608.856353][T27262] __dump_stack+0x21/0x24 [ 608.860711][T27262] dump_stack_lvl+0x1a7/0x208 [ 608.865379][T27262] ? show_regs_print_info+0x18/0x18 [ 608.870571][T27262] ? ___ratelimit+0x3de/0x560 [ 608.875248][T27262] ? _raw_spin_lock+0x94/0xf0 [ 608.879936][T27262] dump_stack+0x15/0x1c [ 608.884083][T27262] dump_header+0xdd/0x650 [ 608.888406][T27262] oom_kill_process+0x1fa/0x2c0 [ 608.893256][T27262] out_of_memory+0x93f/0xd20 [ 608.897838][T27262] ? unregister_oom_notifier+0x20/0x20 [ 608.903303][T27262] ? mutex_lock_killable+0x92/0xf0 [ 608.908405][T27262] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 608.914911][T27262] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 608.920459][T27262] ? mem_cgroup_oom_trylock+0x350/0x350 [ 608.926008][T27262] ? _raw_spin_trylock_bh+0x150/0x150 [ 608.931379][T27262] ? _raw_spin_unlock+0x4d/0x70 [ 608.936230][T27262] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 608.941775][T27262] try_charge+0xf69/0x1500 [ 608.946199][T27262] ? __memcg_kmem_charge+0x150/0x150 [ 608.951480][T27262] ? percpu_counter_add_batch+0x13c/0x160 [ 608.957195][T27262] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 608.962732][T27262] __mem_cgroup_charge+0x14c/0x6d0 [ 608.967842][T27262] shmem_add_to_page_cache+0x574/0xe30 [ 608.973298][T27262] ? shmem_alloc_page+0x380/0x380 [ 608.978313][T27262] ? _raw_spin_lock_irqsave+0x130/0x130 [ 608.983850][T27262] ? find_lock_entry+0x4b/0x200 [ 608.988688][T27262] shmem_getpage_gfp+0x8eb/0x2120 [ 608.993721][T27262] shmem_write_begin+0xce/0x1b0 [ 608.998562][T27262] generic_perform_write+0x2ce/0x540 [ 609.003838][T27262] ? atime_needs_update+0x5b0/0x5b0 [ 609.009031][T27262] ? grab_cache_page_write_begin+0xb0/0xb0 [ 609.014913][T27262] ? file_remove_privs+0x5b0/0x5b0 [ 609.020018][T27262] ? __kasan_check_write+0x14/0x20 [ 609.025115][T27262] ? down_write+0xb2/0x120 [ 609.029515][T27262] __generic_file_write_iter+0x24b/0x480 [ 609.035129][T27262] ? generic_write_checks+0x3d4/0x480 [ 609.040542][T27262] generic_file_write_iter+0xa9/0x1d0 [ 609.045897][T27262] __kernel_write+0x535/0x910 [ 609.050647][T27262] ? vfs_read+0xa60/0xa60 [ 609.054962][T27262] ? populate_vma_page_range+0xf0/0xf0 [ 609.060405][T27262] ? cgroup_freezing+0x86/0xb0 [ 609.065154][T27262] ? freezing_slow_path+0x10a/0x150 [ 609.070337][T27262] dump_emit+0x246/0x370 [ 609.074574][T27262] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 609.080060][T27262] dump_user_range+0x6a/0x1a0 [ 609.084722][T27262] elf_core_dump+0x2866/0x2cc0 [ 609.089473][T27262] ? load_elf_binary+0x28e0/0x28e0 [ 609.094569][T27262] ? __fsnotify_parent+0x6db/0x7c0 [ 609.099675][T27262] ? do_truncate+0x1c6/0x240 [ 609.104246][T27262] ? putname+0xfe/0x150 [ 609.108385][T27262] ? __kasan_check_read+0x11/0x20 [ 609.113399][T27262] ? cgroup_freezing+0x86/0xb0 [ 609.118146][T27262] ? freezing_slow_path+0x10a/0x150 [ 609.123479][T27262] do_coredump+0x1ba3/0x28e0 [ 609.128069][T27262] ? simple_acl_create+0x1c0/0x1c0 [ 609.133172][T27262] ? debug_smp_processor_id+0x17/0x20 [ 609.138532][T27262] ? kmem_cache_free+0x100/0x2d0 [ 609.143455][T27262] ? ____kasan_slab_free+0x130/0x160 [ 609.148729][T27262] ? get_signal+0xb98/0x12e0 [ 609.153315][T27262] ? kmem_cache_free+0x100/0x2d0 [ 609.158244][T27262] get_signal+0xf23/0x12e0 [ 609.162651][T27262] arch_do_signal_or_restart+0xe2/0x11d0 [ 609.168269][T27262] ? __bad_area_nosemaphore+0x2b0/0x420 [ 609.173809][T27262] ? down_read_trylock+0x106/0x160 [ 609.178913][T27262] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 609.184542][T27262] ? bad_area+0x6a/0x80 [ 609.188695][T27262] exit_to_user_mode_loop+0xa2/0xe0 [ 609.193879][T27262] exit_to_user_mode_prepare+0x76/0xa0 [ 609.199329][T27262] irqentry_exit_to_user_mode+0x9/0x10 [ 609.204771][T27262] irqentry_exit+0x12/0x60 [ 609.209169][T27262] exc_page_fault+0x67/0xc0 [ 609.213661][T27262] ? asm_exc_page_fault+0x8/0x30 [ 609.218577][T27262] asm_exc_page_fault+0x1e/0x30 [ 609.223405][T27262] RIP: 0033:0x9cb5535d7b [ 609.227637][T27262] Code: Unable to access opcode bytes at RIP 0x9cb5535d51. [ 609.234823][T27262] RSP: 002b:0000200000000148 EFLAGS: 00010217 [ 609.240881][T27262] RAX: 0000000000000000 RBX: 00007fe01096d180 RCX: 00007fe0106f3629 [ 609.248841][T27262] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000002000000 [ 609.257203][T27262] RBP: 00007fe010789b39 R08: 0000200000001180 R09: 0000200000001180 [ 609.265168][T27262] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 609.273125][T27262] R13: 00007fe01096d218 R14: 00007fe01096d180 R15: 00007ffe0bc07de8 [ 609.294195][T27262] memory: usage 304104kB, limit 307200kB, failcnt 26546 [ 609.301156][T27262] memory+swap: usage 412048kB, limit 9007199254740988kB, failcnt 0 [ 609.322747][T27262] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 609.467631][T27812] tap1: tun_chr_ioctl cmd 1074025677 [ 609.484225][T27812] tap1: linktype set to 769 [ 609.522380][T27262] Memory cgroup stats for /syz4: [ 609.522695][T27262] anon 405504 [ 609.522695][T27262] file 297910272 [ 609.522695][T27262] kernel_stack 0 [ 609.522695][T27262] percpu 0 [ 609.522695][T27262] sock 0 [ 609.522695][T27262] shmem 297639936 [ 609.522695][T27262] file_mapped 135168 [ 609.522695][T27262] file_dirty 0 [ 609.522695][T27262] file_writeback 0 [ 609.522695][T27262] anon_thp 0 [ 609.522695][T27262] inactive_anon 301584384 [ 609.522695][T27262] active_anon 8785920 [ 609.522695][T27262] inactive_file 28672 [ 609.522695][T27262] active_file 163840 [ 609.522695][T27262] unevictable 0 [ 609.522695][T27262] slab_reclaimable 0 [ 609.522695][T27262] slab_unreclaimable 0 [ 609.522695][T27262] slab 0 [ 609.522695][T27262] workingset_refault_anon 33 [ 609.522695][T27262] workingset_refault_file 9438 [ 609.522695][T27262] workingset_activate_anon 0 [ 609.522695][T27262] workingset_activate_file 5973 [ 609.522695][T27262] workingset_restore_anon 0 [ 609.522695][T27262] workingset_restore_file 4356 [ 610.283905][T27262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7639,pid=27263,uid=0 [ 610.299202][T27262] Memory cgroup out of memory: Killed process 27263 (syz.4.7639) total-vm:90440kB, anon-rss:1252kB, file-rss:53440kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 611.038843][T27854] : renamed from bond_slave_0 [ 611.655161][T27924] bridge0: port 3(gretap0) entered blocking state [ 611.728873][T27924] bridge0: port 3(gretap0) entered disabled state [ 611.961643][T27924] device gretap0 entered promiscuous mode [ 612.074422][T27924] bridge0: port 3(gretap0) entered blocking state [ 612.080890][T27924] bridge0: port 3(gretap0) entered forwarding state [ 615.532409][T28089] device wg2 left promiscuous mode [ 615.583583][T28096] device wg2 entered promiscuous mode [ 615.857775][T28112] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.865121][T28112] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.303448][T28134] syz.0.7871[28134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.303555][T28134] syz.0.7871[28134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.910218][T28172] device dummy0 entered promiscuous mode [ 623.800247][T28674] device gretap0 left promiscuous mode [ 623.811872][T28674] bridge0: port 3(gretap0) entered disabled state [ 623.869859][T28674] device bridge_slave_1 left promiscuous mode [ 623.881442][T28674] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.935833][T28674] device bridge_slave_0 left promiscuous mode [ 623.946411][T28674] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.661017][T28763] device lo entered promiscuous mode [ 628.294201][T29002] device wg2 entered promiscuous mode [ 634.545846][T29294] device veth1_macvtap left promiscuous mode [ 634.844023][T29295] device veth1_macvtap entered promiscuous mode [ 634.853097][ T1826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 642.764400][T29664] device bond_slave_1 entered promiscuous mode [ 642.780564][T22112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 642.797968][T22112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 650.091178][T30018] device pim6reg1 entered promiscuous mode [ 650.565139][T30037] sock: sock_set_timeout: `syz.0.8424' (pid 30037) tries to set negative timeout [ 652.736862][T30109] device sit0 entered promiscuous mode [ 657.235604][T30335] Ÿë: port 1(vlan1) entered blocking state [ 657.241529][T30335] Ÿë: port 1(vlan1) entered disabled state [ 657.248499][T30335] device vlan1 entered promiscuous mode [ 658.561041][T30384] syz.3.8528[30384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 658.561124][T30384] syz.3.8528[30384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.762833][T30428] device veth1 entered promiscuous mode [ 659.785205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 660.391088][T30445] device dummy0 entered promiscuous mode [ 662.456245][ T1826] device veth1_macvtap left promiscuous mode [ 662.473227][ T1826] device veth0_vlan left promiscuous mode [ 663.261788][T30525] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.268877][T30525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.276179][T30525] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.283226][T30525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.295092][T30525] device bridge0 entered promiscuous mode [ 663.712427][T22112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 664.872649][T30550] gretap0: refused to change device tx_queue_len SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=8542 state=3 status=67 (errno 9: Bad file descriptor) [ 686.811446][ T24] audit: type=1400 audit(1771640105.840:181): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[1374]" dev="pipefs" ino=1374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 688.493553][ T1826] GPL: port 1(erspan0) entered disabled state [ 688.501433][ T1826] device erspan0 left promiscuous mode [ 688.506959][ T1826] GPL: port 1(erspan0) entered disabled state [ 688.613810][ T1826] bridge0: port 3(gretap0) entered disabled state [ 688.621746][ T1826] device gretap0 left promiscuous mode [ 688.627261][ T1826] bridge0: port 3(gretap0) entered disabled state [ 688.933130][ T1826] device bridge_slave_1 left promiscuous mode [ 688.939229][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.946640][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.954059][ T1826] device vlan1 left promiscuous mode [ 688.959369][ T1826] Ÿë: port 1(vlan1) entered disabled state [ 688.965737][ T1826] : port 1(macsec0) entered disabled state [ 688.972877][ T1826] device bridge_slave_1 left promiscuous mode [ 688.978951][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.986261][ T1826] device bridge_slave_0 left promiscuous mode [ 688.992400][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.000398][ T1826] device veth1_macvtap left promiscuous mode [ 689.006410][ T1826] device veth0_vlan left promiscuous mode [ 689.012257][ T1826] device veth1_macvtap left promiscuous mode [ 689.018412][ T1826] device veth0_vlan left promiscuous mode [ 689.024303][ T1826] device veth1_macvtap left promiscuous mode [ 689.030345][ T1826] device veth0_vlan left promiscuous mode