last executing test programs: 5.103707506s ago: executing program 0 (id=3758): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f9f7ffff0000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1901], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001bc0)={&(0x7f00000009c0)="3b056880083c7d6b9355a5d2c2ae164bea96a519348987bc93b6e2ca9e43b55b0059a9fcfae7969fdee4121c5ec85fb089dcaa32b6d976b757710683669e4bf5525cf0a7b2c131b8832c8dfea801029ef43d300a34e99a164f6af69d100a775299829b", &(0x7f0000000a40)=""/114, &(0x7f0000000ac0)="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", &(0x7f0000001ac0)="abeac08ea143c7d9855c3578039722743ac2d328e6439237cbc8487c80bfe48a8a7b2b8b870bdbb21b6ee653e64c6fdf0db5b71907351d1dd19c6953537ac89137dbe378e4f271a20eab1e135cacaebd1b18d84de2b212d9bc1cdef30673e813119455a2905b9d130122f0f3bb688c8a5fe254192aaf402b5ae841ebb972768d51c317c278dc5ac6264c84d93bf0ada03eb411ad64d9d6f10d66fb2aa9c734d25787b75548f82d4bb70b95fd4dfb81d39ddd233ac2558a4aaa24e682cb5eb77b6e1128c18a0c32781c656789140b5f1212fcc5e570536e7bd0bd5ed99c1f354e3d507f322eb28520d603c029c2769b8b237f8be95e", 0xab, r2}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.786896368s ago: executing program 3 (id=3759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x6, 0x89, &(0x7f0000000580)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x4}, 0x80) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./cgroup/../file0\x00', 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x12, 0x4, &(0x7f00000010c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1e, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x7, 0x5, 0x8, 0x0, 0xffffffffffffffff}], &(0x7f0000000140)='GPL\x00', 0x522, 0xd4, &(0x7f0000000680)=""/212, 0x0, 0x24, '\x00', r3, @fallback=0x1b, r1, 0x8, &(0x7f0000000a80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x8, 0x28a}, 0x10, r4, r0, 0x3, &(0x7f0000000e40)=[r5, r6, r7], &(0x7f0000000e80)=[{0x1, 0x1, 0x1, 0x8}, {0x1, 0x3, 0x6, 0x9}, {0x3, 0x2, 0xa, 0x9}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000001100)=ANY=[@ANYBLOB="2d6370758fd3f4940ddba6be47736574202d00006765746c62202b6e65d463805ef586ce5b18cfa3e6c8b9080dd4b9ad7d8173e80367365e3be03c16ff110b6ce6bef472da8e370da9e415aedd498f062deea97f5c2905a5bc9661d701d0b3b7443f1aa71da4958ef7162ba2302b3d09fa06c3eb8584874a7c7cf6f83f501fc8c62bc4827e53bd00fd84345d7b0a54a3e488e176f5"], 0x1f) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf93, 0x0, @perf_config_ext={0x80000000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) openat$cgroup_devices(r8, &(0x7f0000000500)='devices.allow\x00', 0x2, 0x0) 3.675396072s ago: executing program 4 (id=3775): mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 3.670800553s ago: executing program 2 (id=3776): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a000000004000000040000000100000400000000040000000400000008000000020000000000001202000000060000000000000902000000000000000100000d000000000600000001000000040000000000000b00000000000000000400000d000000000a000000000000000b0000000100000003000000040000000f000000050000000000000000000003000000000400000005000000f81f00000d000000000004100400000000632e00050017f644d1b27b4a74a3f69fcc2f3d27b3dc0338ddd5454f80"], &(0x7f0000000580)=""/54, 0xbc, 0x36, 0x1, 0x401}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b00)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000c00)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', r1, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa735}, 0x94) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x85, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x5, 0xb68, 0x41, &(0x7f0000000480)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13c7c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.615952849s ago: executing program 2 (id=3777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000009ffcc4084056a20f0000000000c534acdc1e65cd8eae0a3074034941e17d3faadd4216a4a07af7c186344864582627a926621f142eaf6ee19a1f1d32baecc65c2f35f989", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000002600000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x4, 0xff7, &(0x7f0000001400)=""/4087, 0x41000, 0xc}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_bp={0x0, 0xc}, 0xcf73db55bc8df296, 0x4, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x41) close(r2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x7, 0x20000000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0], 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="1ffbcdb150", @ANYRESOCT=r7, @ANYBLOB="2733bfcc8bbc2dd7d7f0c1d6fd79dbc13dbbe2bf64fc5d8bf5f6b2fa6b06fa912cb95e88009287b3c9f01dbb9c6a6dbee702c202dcffd5b0c4c4ac3a457f4da69c09eeaaeb669e0cdd17b12fedae49fbc7f3f4052430cda11ca3fe9478837267f251de100e1801a0fba765e2ee3b33119d165927a8c299a9e82354931c22ab7262531b26274ae703bfbd924e56408fd988342057d1d661d14151a23667a97988ac0cd00075a47aa11a07723ab10756626defb07ca776b5dd", @ANYRESHEX=r5, @ANYRES64=r3, @ANYRES16=0x0, @ANYRESDEC=r5, @ANYBLOB="66335fe307f149897835c157f6ae6503c2d3163cc5342701", @ANYRESHEX=r3, @ANYRES16=r6, @ANYBLOB="5e4b7d0cd36704273bf75e793f1f6cc2532613c82f01d1f2b551d928f5108ba514fb58716a3363ed9a159f6768b2a319a3319682bb93b02f7f67e673c2e3026cdcee6d09d26cb73e7af4f9a367b174"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ca2}, 0x94) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x4, @perf_config_ext={0x9, 0xfffffffffffffff7}, 0x2960, 0x0, 0xfffffdfe, 0x0, 0xffffffffffffbbfb, 0x1, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000640)) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x25, &(0x7f0000000740)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/1015], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000780)={'veth0_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) 3.614225179s ago: executing program 4 (id=3778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="850000002e0000005400000000000000950000000000000055e6cfc65e53b1345a9031611b88388d99025d159c72d6dbf148396d95"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r2, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x32, 0xfffffffffffffeb6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0x5, 0x7, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0), &(0x7f0000001d00), 0x1005, r3}, 0x38) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001d40)=ANY=[@ANYBLOB="2d84"], 0xffdd) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001d80)={r3, &(0x7f0000001dc0), &(0x7f0000001e00)=""/31}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_lsm={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000002000000000000000097d880100000000000953fdcd766dbb2afea3ba1ed000f00000000000000"], &(0x7f0000001980)='GPL\x00', 0x4, 0xd2, &(0x7f00000019c0)=""/210}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x80000001}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1000000000001, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x5, 0xc3, &(0x7f0000001540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r7, r4, 0x0, 0x1d, &(0x7f00000016c0)}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0x8, &(0x7f0000001b80)=@framed={{0x18, 0x6, 0x0, 0x0, 0x3}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0xfffffffffffffeec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000300)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) 3.610413229s ago: executing program 4 (id=3779): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0xc, 0x8, 0x40, 0x250d1, 0x1}, 0x50) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap'], 0xa) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.449615586s ago: executing program 2 (id=3783): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x87, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@enum64={0x7, 0x0, 0x0, 0x13, 0x1}, @const={0x7}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000680)=""/166, 0x43, 0xa6, 0x0, 0x82}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x93d, 0x6, 0x401, 0x20ca0, 0xffffffffffffffff, 0x3dc5, '\x00', r3, r4, 0x2, 0x2, 0x5, 0x5}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_ro(r7, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) 2.353217188s ago: executing program 0 (id=3786): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100009a0000000950074000000000031fb0d3a4231020004399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d19e93adb604a7d3deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c4f67581c92ef8a7e8ece17d5f5b169391ef409c39c263895739e3d702c128b35d5fc23469240c61e150e2bae385f9ac9b03c22b0f7050c166b835298c5911f1053a723aee89051c24e1900ab97fa52d2e06dce0248a829ed46a520db4c1432080bbf707ad2f8af8118ee7d434a960ed6be4455ba57cb06459b64689e77ce95823a5533f5b11118906fd2fc29b3697c637d3693d4b4aade6f9202e6cfa6d7507f88af38b6109ad8f82b1d600a5447831df835d7000000218b0222004f98a7a0caddc397d8414be912b4e7536fefd951fe23a56fbf9fc643c6604268b5ccc13b996aaed0a6f6470566c8f534e5d486b2141646b35fd4472be8195fd917446a8abb1c2cd5dc09e2d75ec00ede2841e497d5178cf9445c7bb11f3c5cfdcae8c476d3fb75cac727143f92798a44864b49366b6cf228d9bc1d99ab2104e3c2e17ec46fbce102c158ff3748f1eb90b83d8be0dfcefbeed222009b41ad34d8656daf41e23322e58d91811feffc39ec11b11cc611f6fbfd999c3bef10caa2e8692259d40d69ed3d85ec2813b007b8ce6384a28798f445ad7fc451865fe45a06977f7a785f8e97544aad1f844f2a4799944e0daf6d4c3a7d30b7d89781ca607048c50945c45d5a6f2c5145416176fd64c559e6a272b92c92052a9005aaa25d09613aba2e7d429ae40c249e7996e4bc213c24699889ea320c40f32dcdaa19893e17c57d7e8c51d5f320d99e8c2521c339c33bf6c41fde029061c088"], &(0x7f0000000940)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000980)=""/195}, 0x48) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0xee}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0xb}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.220066522s ago: executing program 1 (id=3788): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x277}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x10, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4003b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.202708504s ago: executing program 2 (id=3789): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0], 0x37) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) gettid() r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x5, 0x252, &(0x7f00000014c0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000015c0)='memory.current\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000002d00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000080)="a15727ed", 0x0}, 0x20) (async) write$cgroup_pid(r3, &(0x7f00000016c0), 0x2a979d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='memory.current\x00', 0x275a, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x741041, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r6, 0x4004743c, 0xf0ff1f00000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001980)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000019c0)={0x5, &(0x7f0000001a00)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x4}, {0x0, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001a80)={'pimreg0\x00', 0x7c2}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000001ac0)='\xa9\x15\x00\xed%\xac\xa8\xf5\xf2rf\x8e\xc1\xc6\xf0\xd8\xe5$\xae\xc92Qf\x99&C\xb3\xad\xba]\xddG\x15\xb8\x8eP\xcb\aH[&\xa3\xe7[\xbe\x968\xc7\x18u\'}\xa6C\xc7\x9f\xa3\x83\xc02\x8drvws\xcb\x9bE\xc2j\xd2\x9d\xbf\xff\xde\x02\x1d\xc1\x1aJ6n2q\xa2\x1c\xd8vn[\x01\xeb\xc3\xc9\xd9\x91\x1c\x8d\xb6\xc1~\xdd\v\xf4!\xd3|\xed^\r\x9a\x18i]\x1e\x12\xd3\xcb\x93\x9c\xa7Ja(\x17\xa4\xde{d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2l\vZY\xca\v\xb8^A\xddb\xb50+.\x9c-\xa2>bO\x03I)\xf6g\xb3\x91\xac\x8f`\x81\x9c\xab7\xd1\xb4-\xd6\xcey\x82D\x15\xa7\xfd\xb2v\x11\x05M\xc9\rW\x13}\x11\x1a!\x87\x80\xa3\xde\xe5\x9a\xef\xdb\x81\xda\x06\x8fd\xbfB&\xb6{\xef\xc7\xf1\xab\x00e\"#A\x94R\xd7\xf1\xa4\a\x8b\xa6&&\xa4\x0eb\xc6\x0f\xfc|B\xe8I+\x10\x81s\x06/BS!\x97\x9ae8\xaco\x1bE\x83\xa3\xac\xcd:\x97}\x00\x00\x00\x00\x00VR\xfd\xeaSv\xc2\xd8\x1e\x18\x9aI\xc7\xa4\x8a\x842@\'\x9f\x14\x0eT4\x19\xf6i5e\xa1T\xc0\xc0]\xa3\x14\x9ba\xc7\x96p\xc9\x92U\xb7\xdeBLb\bJ\xa9\x01\x00'/344) (async) write$cgroup_subtree(r0, &(0x7f0000001c40)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00"], 0xcfa4) (async) perf_event_open(&(0x7f0000001c80)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 2.172635427s ago: executing program 3 (id=3790): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x10}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xd, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20c, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x42, 0x0, 0x2}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r3, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) close(0x3) close(0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 2.067998408s ago: executing program 3 (id=3791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="2484", 0x2}], 0x1}, 0x20004081) socketpair(0x28, 0x4, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/109, 0x6d}], 0x1}, 0x0) 2.067024828s ago: executing program 3 (id=3792): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="4b0e2b2cffb0236cd245de52594137f4f3f714e1c9f3", &(0x7f0000000040)=""/188, &(0x7f0000000100)="c546b67bcdb0e1e9e5c29256818451e8c3a6eb378b56fce3c0e37ac66c0532e53f4105a65352ab4f077ea94a42bf8db7643a942389b3102e67f95a6ec2dcc79ff7184f777bc76b79c9ec4f2627fc5a0f1807a54c218eb05cb92a6771b842a1f90f34aded6cd5c751d1e44f1c0749a04e0b718766536524fa801304b6cce0722ed6dbed25f0e3fd2694e56b27c72745fe2a54ad08f6d23998c6e7f9c85fed10da2ec16fd2f87933f1167c05af46835f85b00a", &(0x7f00000001c0)="afd5963d4fa7101f57ff3174a859fd48fa28a613e49eee60035bb265a8bb85353f2e791a47f0e61eae5322f2169eaf8ba80ecf36e02c90ac8476fb0861f1ca483c0973ef03d7f3eb78a0fa45a3eaf2c35ec63f4257b07545", 0xbcf, 0xffffffffffffffff, 0x4}, 0x38) r0 = gettid() r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, r1, 0x0, 0xb, &(0x7f00000002c0)='$#(][:!{[/\x00'}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=0xffffffffffffffff, 0x6, 0x1, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f0000000480)='$\x00'}, 0x30) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000500)=r2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) r3 = syz_clone(0x40000, &(0x7f0000000580)="e4774dd2b43a49f7ecec305c6fc59e05c3", 0x11, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="efb9461285c64adc739b51fc588b76eeb33b577beb92781b00875ab9d11aa49309650b0121d94cfc32398f8523f5466b8bc8ecd9c0a0c6be75ee0c622f355a37d7daf6895908df3a978d92334db536f266edb3e667dec11ba3a6d7") r4 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0xff, 0x0, 0x0, 0x81, 0x0, 0x2, 0x80c, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000006c0), 0x5}, 0x1008, 0x59b2, 0x2, 0x2, 0x7, 0x1b, 0xb6, 0x0, 0x9, 0x0, 0x80}, r3, 0x1, r2, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0x2, 0x0, 0xf8, 0x43, 0x0, 0x5, 0x104, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000780), 0x8}, 0x8080, 0x9, 0x4, 0x6, 0x6, 0x8a1, 0xd, 0x0, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r4, 0x2) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000840)='ns/net\x00') perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x1, 0x10, 0x4a, 0x4, 0x0, 0x6, 0x14a80, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c4f, 0x1, @perf_config_ext={0x401}, 0x230, 0x8f5, 0x101, 0x8, 0x5, 0x1, 0x6, 0x0, 0x5, 0x0, 0x100000001}, r5, 0x0, r4, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r2, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', r6, r2, 0x5, 0x1, 0x1}, 0x50) gettid() r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x9, '\x00', r6, r2, 0x2, 0x0, 0x1}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='.\x00', 0x0, 0x4000, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x19, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc37}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='GPL\x00', 0xcf6, 0x6a, &(0x7f0000000c00)=""/106, 0x40f00, 0xc, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000c80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x9, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r9, r1, r7, r7], &(0x7f0000000dc0)=[{0x3, 0x2, 0x8, 0x8}, {0x0, 0x3, 0xd, 0xc}, {0x2, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000ec0)={r2}, 0x8) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000f00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001180)={&(0x7f0000000f80)="02045c9fe8360e7bb58bd854f0b1579ac6283c73507c87d52c438fb612dd11a039c402ce597c69f9ac8f21ecfc9eea497707e66a06fa3a3139af8e1682bc2133a499243641f6", &(0x7f0000001000)=""/39, &(0x7f0000001040)="af5f05546ffb6ac71b973748d31abd9fac57d634dcb11575b3afbbeeda07062942680dc1c5e2b21813d5309bb93432f6b947050e756d553176e61271bb38055706858fb61448f79c2402e0d619b862fef1ad1163368a64885dd8569d84977bc97446fa1c902c91fb1c3b99aba1f0fcfc97d5fba76eb2780507f9779ed463dd1429", &(0x7f0000001100)="5b08b6ba84e19ee831fb356fa9fdf3fa529b8c284d6b652b16db4423ec727ae85da9415c2975b319ad2f4527ba2e6b4500c618bf18f66845d844edaf446d3bf07175cf4bc43411812e4b60", 0x3, r7, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x103800, 0x0) gettid() recvmsg(r11, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/247, 0xf7}, {&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/48, 0x30}], 0x3, &(0x7f0000001400)=""/113, 0x71}, 0x40012062) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000014c0)={'nr0\x00', 0x10}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000001500)) 2.063255488s ago: executing program 3 (id=3793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2b}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f00000004c0)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffef6, 0x0, &(0x7f0000000580)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000009186de5000000000120000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair(0x10, 0x2, 0x800, &(0x7f0000000640)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), 0x0}, 0x20) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0x18, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000000000000000000ff", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000a69f1e558dc51aa873afd878000000000000000000000000000053423eb1dde501c4732fe222b87b47323041064139d9dc605a7b22f3953f5db0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES16=r6, @ANYBLOB="0000000000000000150802000000800018112000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000085b1dd23cfef92e95ec971c8ffffff7f2adb1f5f00d85db434666569fd20cfe88a971b6a329be212cd28e533e6ead95432a392c90e43c3300245d7ac257421e8000086ba9143a17f693ae2a5e6bac062d45a377a14a394fd67647a60bb1b1c9550aa81109c3676d50b6401a12d77db5d25bbb83182fb41", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000004601a95d00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001e7d6ee175bce007f297313e8c79d77a82337272d4203a72f25a0cb19664526998693b8615ccf0b3fc8cbd37516db5e021a4c72d9215e3ee29866676a31d8562db8629f1b644e1ce7050023ecb6a49563fb4c17fda5077741a7cd6349eda30835b50919b47db8c44a4377fa3b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x14, &(0x7f0000001180)=ANY=[], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001200)={r8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000ac0), &(0x7f0000000b00)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x5, 0x9, 0xa, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[{0x3, 0x3, 0x0, 0xc}, {0x0, 0x5, 0x7, 0xb}, {0x0, 0x5, 0x3, 0x6}, {0x1, 0x3, 0xb, 0x6}], 0x10, 0xc}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x408) write$cgroup_pid(r9, &(0x7f0000000280), 0x2a979d) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.999408995s ago: executing program 2 (id=3794): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, r1, 0x37, 0x2, 0xffffffffffffffff, @void, @value=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="000000000000200002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x160) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x160) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x40049409, 0x5) 1.983384986s ago: executing program 0 (id=3795): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2d, 0x224e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x23, 0x4, 0x9, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000c80)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x37, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xfffffffd}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee"], &(0x7f00000009c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000a00)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x19, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000040000000000000063310600000000009500000000000000"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42080080, &(0x7f00000004c0)="c1f9182d9e3d8588ff9e99d34b85433f339f90c43ebd150be1d10641d2d28fd5d4705a7d5d1cec4a", 0x28, &(0x7f0000000580), 0x0, &(0x7f0000000600)) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 1.906593204s ago: executing program 1 (id=3796): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000300), 0xa}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x440, 0x0, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x33, &(0x7f0000000700)=""/51, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xa, 0x4, 0x7977}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r0, r0], &(0x7f0000000880)=[{0x4, 0x5, 0x2, 0x903d6a9ef819538d}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x5, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query], &(0x7f0000000380)='syzkaller\x00', 0xffff, 0x28, &(0x7f00000003c0)=""/40, 0x40f00, 0x29, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000640)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1dfc0, r4, 0x0, &(0x7f0000000980)=[r0], &(0x7f00000009c0), 0x10, 0x80000000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x4}, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x27}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r7, 0x40047440, 0x110c230000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r6], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619}, 0x38) 1.906234064s ago: executing program 2 (id=3797): syz_clone(0x80000800, &(0x7f00000001c0)="4dd35a69a44d02f61220c5", 0xb, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="65ae9f270dc095754a32322c5a8f8e8e72169dcdfa15f81878f8854282d08898f779331483ec5d30c9cbfa41f6abc318f2265757dbeead6e8810b17eb09c77dc2084277cdc5b5e38d2696ec5cdd4eefd36350446872cf3e63135245df772ec3d35cc7293146ee7dee0fd5dd6c4cbcc14fc766178f52669446a762320109d43fa375f8e1ebfa5c0fc200b1ecaaf0abc7066a314315cd95560ec693d90f3711d9fe9e323bc23f729596386ceae1aa03ca1063e206141ab81410cd8e7ca9b642212f28ddefeec3f05af8720bdf3d13de30f3f12a93824f729ee774cfda9a6b5efd5cb") (async) r0 = syz_clone(0x80000800, &(0x7f00000001c0)="4dd35a69a44d02f61220c5", 0xb, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="65ae9f270dc095754a32322c5a8f8e8e72169dcdfa15f81878f8854282d08898f779331483ec5d30c9cbfa41f6abc318f2265757dbeead6e8810b17eb09c77dc2084277cdc5b5e38d2696ec5cdd4eefd36350446872cf3e63135245df772ec3d35cc7293146ee7dee0fd5dd6c4cbcc14fc766178f52669446a762320109d43fa375f8e1ebfa5c0fc200b1ecaaf0abc7066a314315cd95560ec693d90f3711d9fe9e323bc23f729596386ceae1aa03ca1063e206141ab81410cd8e7ca9b642212f28ddefeec3f05af8720bdf3d13de30f3f12a93824f729ee774cfda9a6b5efd5cb") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000017c0)={r3, 0x0, &(0x7f0000001800)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000017c0)={r3, 0x0, &(0x7f0000001800)=""/53}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x3, 0xc, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x6, 0xc, &(0x7f0000001a40)=ANY=[], &(0x7f0000001a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r4, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000001b40)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1, 0x10, 0x0, &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1, 0x10, 0x0, &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x4, 0x0, 0xfd, 0x0, 0x400, 0xf7163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, @perf_config_ext={0x0, 0x37074c20}, 0x842, 0x3a1b, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x5}, r0, 0xfff0000000000001, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x4, 0x0, 0xfd, 0x0, 0x400, 0xf7163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, @perf_config_ext={0x0, 0x37074c20}, 0x842, 0x3a1b, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x5}, r0, 0xfff0000000000001, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f0000000780)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x10000) 1.580326778s ago: executing program 0 (id=3798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5c9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@arena={0x21, 0x0, 0x0, 0x3f, 0x20000, r2, 0x8, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666703a", @ANYRESDEC], 0xffdd) 1.434129113s ago: executing program 1 (id=3799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000000, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f00000006c0)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.26799783s ago: executing program 1 (id=3800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000035c0)=@bloom_filter={0x1e, 0xe, 0x9, 0x80f, 0x2028, r1, 0xb, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x1}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="3b000000319b0000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3e133, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0x60) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.216023785s ago: executing program 3 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0xcd2e33a676089c01}}}, 0x10, 0x0}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) (async, rerun: 64) r8 = perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x7, 0xc, &(0x7f0000000d40)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) (rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r11, r10}, 0xc) (async, rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r12) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) 1.150137382s ago: executing program 0 (id=3802): r0 = syz_clone(0x1280900, &(0x7f0000000600)="b98f20551de7e5c89d5fcd6a6f4c6169296625e9d75a8d91a52f9bbfecf388a39584602543a3f07be302a8b92e57be149f0dca31eb5f1189dff8fe833a78d7a4dd48444b822f46101e680bf19a77ed6df0cd3d74a25be8bd6a38c471311893cef352c1", 0x63, &(0x7f0000000680), &(0x7f0000000940), &(0x7f0000001d40)="bd07e5fa37467e8c5bb1ccd6ce5289e3c962e978136d9d0090949c32e6ea2ae3199bcc0074c06df75ff29aad36fc36f50e5d75c3a55d5e5f2ba437ef8657535e239949f3513d2cd08e156fcca9240a2d67f73301a9896afb2f92f78a6f7cb09eafdda0b578f13d01b12138d22735c634384bc02245497499d3417a7fc937db008368597df0227e57d31613e69b94d84aeff5765311c9127a3d008a76b8bc748c527d2475c875f3cfeec033e815d12d719b6b6126dc0b680cc2122a834b6cd745af41cec33c540072e239cc47d74a16acf5782ca8684942751e1124ef90853aeb68c3e0ff390ea557197608275826f902b7ce6263709a60954b646d3e090c9061971b9eff6d56a66b0dbd8ec0a29ae898879df6bd72690b203ddbda788056a1f43494af33401f719555e19c3d4757d1ab9050b04855d2716ad069b21086f1932e2f9c58ec6aed2748c37f0ad35659fc8f0a31ee63fbada6337a0ca3cff832fa4f0e53c86b6d3307e257d7f796333fd02a3a61c7308b15653df776e47401f7afd4db5a6a120d901e134d3b62851d9b121fee9d0e798c057926d5e21de17d9d68392e7e6faa4354cf122e6a8ecb4e06d89bf3cee05d77af890d4bbabe66725c83419a3bdcf6c7e0e24f39a746ed4c7e63c8270384e92d442029ae06ffb70582b29e4b762806fd16af8c9dfa2ed74dd9c2db0fc92f2a71991b647b7d2f9847ae44e0e7806cc131db09acf6b58ed464f2e4eaef28c0ce9a2d429af3b0531220c8dd8c880281f9652b9762de517be843b2410005be73a831c359e96cfabfe48293d900f2a06e1854466ce8573e5a7f4dfb94ee16ed0690b1dc1e40dc92735d9483e4ba96f02c25aa7a3a01e446e372218115c3b1f8cbdbd90b349777f30ade805d22eac506613bf0f80dc53091241b7137edbd31511e0f706bf049b8842be8dc71fa35b9379160b6b9d6083c45aec60588cbd031627f1833ae4fffa525f4fd47fea487799384594fb4b03a2f838de69c3891bb8c5b5d21403b79b591b4261024287ee6318080740bac9cf33fc2ec9b4bddcca294c1c939cf1090ed8c2771e693c2651459333ef7a064690a24af654469741fdf4c49a648cd99e7ccbf2038d9413b38932bbeecfc229b9f25d4c0f82a5d3774d305b5abe943a8a1b57403410b6d7d9daac4e5beadb6d61b735f7421170b7b9590cf5404dfb3b5dbb84cc57c638cdd5c2b0ab5ed74e657472cfd6a5216f77d1c6b588dad9e8eb59a77ddbebf63c8c2754a57612b0cfb4aa08a79133152355109b23a764fb70e6262de2ee2a2aa0c04661d5a893d88fd97b4b4c8c3578142d9010466a89b8d0e5cec5115e014a6f900d7da23f9cded4c3b91a6d69cbb273d1828dfe940c30f6eb4f2a8b014f88ede4b0c6d16f76e6ab25e4fc6f1f33943ac36486c8340f90c7a85d272d65da46a39b417fb20036c0d8d9f22bf571bf3bfec6c5d59e33991b6a62972b5c5e316d7a1edb6ba1a29406d28afe92173050d8557a4045f96afa71a4143c54e2bd477fdad10d6c04a2dbba9fff3353eb0a3da8ee43059ac73f3102f47d23b97f08f0d69c64f5c7d103c1636babd61d16edb99e15670c84b54cb8488a229f23bdc507d72ded50aa46ed98713c9261879c958a602160ac37b09cb095cd054330d8439f8b4e50e52fb53a98fa4fd7b4ab91c8862f0a5a1f37c0a611aee641cd890463c20ec05279497f592cd4607485ed098f85235280fc489d2efd4a6f880d3089ae17a3c845f03eee54b7cb4077c7a223ad42f69c6cb093ebe3407ded5a3a8084a1cdc16b5a66c01a415a0b0c6518e0eb78423aaf30584485da01b9fbcdd9ec7e44b193abd91f3d6ec6792e06b5763a23852cab21033a94315774b80a9a2657ad5991632add68a36df1724b3c6dd370411186fc3db7ab26a8113678ab990e0c16622896e504a44b2e0b2eab094b1dc604655d477dde62ea9c6b785e3d0a28920f2a6b4da1c8e03f40a41c8a624424ec6fbd47bdbaa53a80f5919c3cbbb6adc8d7c0a631480b3b48761c779c033ebc79382a65103307b9f215058884259d834977f99eceece01ccfd31f7d60146ac48d5fb985218692192ec25a3315cfba2bf3b8f575c1bf89e591ceafefbcff0990a4d1ccc33b08e8e123d6435028b176a5aa905dc7e3c6d2ce864c8fcbd04768a5771cba19e1ff0b6aad3aa40a2ae0db2a2a3efcb2b1caacbdfa8412a8d68db4d847564a0735653e570dd17b07601955dff14b731e0a8fe1da0bf3b84e2fedff968566d0fddc269f5430e76d9249f39984f0d61b682a877f275d36eed21f52adb4f38dd59e176daaea328ec726891d90766a1435d2d766494a049d30624ad93b9c3fc26002c0c7f21ee9aa4b15b09eae9917a9a72d229eb8113f23d15c2c3bef1a98d3057984844d960287a71f7c1926e82b7238f0f17528df9b05e668e4300baaaa273187a425f974d20c8b57f782a38e72526790b30ed74c601c6adb6fa83141b8894355a7225bb1962e8f35bcb2424a68f86148119bfe08965e7f3d9ff066223773268cd23dd60a8f3c5e3eb22214e1a9dadec8da446844ea0667786a9f66b833a9c4101542b6e54b29816d085e9ae561f56dfdcf8b656d4562893657e7e0f803ae8e69aa673085c5ff44262b8a18701b2734a259268d5f7e823178aeaf0c7a70792856076adfc3ad2748a8dddd2c8a23383f7949f07ce84908f7f52d3e93daa9ff40d103eaa0ed7b6c11e87ce50f83399963c33d9e30957ceb1c96422e721eda3920a36ada39eec9406a4a07b549fb210afbac5e892898c41da65218b726fcec90df706ecfd8136bf67e34a5ee689db9d4927f397d0638b5761905ca3bb79fee2faa154b5839683201a8978726560a19892f84ada26da437b2961b48fb7ecb82835d717b1955e02d9bd6f3632d83afaa2101e569b25aa5edaea9be431ce69241635ff04f7c6d870744397d4824bb5a71392f95df9f2858a3eb193e6c11ef3fb72eb898f6a86c894388b2a1e7ce8d8b98617672308d35c6c245cb247d842f9f8cc541169164913a9a128c5c6979d926b96d2bda20b418da57cfc01f2682b563d07d4f74ee78578ab9c410681e831e95161d0d4b60f5b4ace133aa31d66c7b84fa1a874ff9ccf2618cea7d5689dbb372f4f5915b2aea018725a822899ca57a3d7906991309f9736b178b343f7fb93d81112273b6e6b819dcb09c68c91dd18a986029d753472b8befd3009bd9a478d4cf39955ccca40379689c035dc4d36630fedd2f02a408eb48702beec212247fd3aa4dbb844ee6a3e8e0f60404cb336ed83dc6dbb8b60b53273cb27906a140f69b68f4a90412ff26b8cd93721fa925896673e3c48ec6b82b50ce872320c5f0be6c58381866da34e4b102d7b2b652925de0c50ebeee48b01697b4f310747d468275d96a6b8e2b6af9a97b30f19af6fbc0320cd08d8d411ce7a95403d92cd87db16817693e6b0ef043d59ced330a685fff8b12339476b7b2917b7aac2559d5cbeeec86bc2ebce076772c60f3be531c05965623ec1d5b98b60aadbebe6e40f066c92f9d75b87fd30386d1bc641f80617e0383d7705203779187a59548c284d5be1d64b421d3fd14f177c108daffa6ddf82697bef85a38b7a6ede232b9064d558a1d6161f9d8cb513d31840c8dd240eac95b6cc03b2d3be31ebeb754d76438aab9ac0c9202695ae223118becb2db8ed0ecf88689989ece4f7b388efadf4c1996cf7b83800d03493c7925df88712d4e69b17f79eedb8599e1e38ac4deaebeb6297015fd8af61094480b0abc8563acdec79a3d24b74cca5bdda7c880b0bf7a6ee31ba72ab335f0135cd045404d4f1d1788fa6cf12f4621d751b75ccd1915afd4f236dd8b1373aa16b734e8684dc06759d769eb7e795bfd454e4507b1b683701abc95decd0f9117f77c4ccee4f57e8e8d67831c3d000ab52d5e5b5b119b8084879ee49c9899e48dad646d463486c8f3045b4229925eceb913e6d1e3e94de3485620a9ab998ca499b56391a87517dadb8fe9faf45ada7882ebd55aa09cab87c211b09406ec8df2bed412ab289b67f1403d468c34346cbbe9bc921dbf016efd4ea52349b1c7c01ee55b7252e4a11afe2d10ed0d006a60af0fb75227b1a5fb77433f72d99519b7aa5fd47085dc6bbad2a389e9885843c466aec6afab22376efe6a5e1fbe3596296040ed5af450961422df13846c822b0e77c4c6db883103c7707fe3083766b52937acfc0c36686fa4cbdbf2674017a289c251f2c6cddcad6b5e44e49059efb4e8d4ea28a047ee82e2a82e77068cd7db9d9d2e591463e622f8de9b66fb28eb33963e65c41da220e7fece8aecd78e6faedc3e6b356005e8c0d0bc12d8c04a2eb04e8d8b998a6dfe54dcfc46645bc70fdf75aa00226b6e4f6723762bdbe6a32a91c082f865ef6c3c6d00cb08239fc417de5cdff62665aa40cde43a7615eb53e0e86640a8feae19deb7dc6e941cad49d160c02a57ad025035275a114b829b0a6e7254497a50f483abce23ddb82e08ce466554d4d642f33f3d21432f1b5e339584fa562db190f9b1371efa3a7d3b3b0834bf2eb82e905893735b65603c65e30ff0023811c0f14ff157c984e4cee9a477b15590bed18edf970b470e6371f5728d4da298aa66a9fdc17a5211083d0c7ecd8ea701b330b7c078c8af425d170182bdb78b119da08b3959a4336215e62461682a0a79b815c78b7a7f49fdae937d13b51983227645127a586e26914805fa32bbc8a80c4bd2d9de921fa4d85d07030a2a840f709da18c7f3a5344d5b1f3935f02e02aac85b056b13a7dc7fd8542a7082c6cb1c2ea7d5a93bbded786e74ed16814e64fb71f549fd082031c9b24b4c4c648e36e1559dfbb4eaac55cf235a1358d9f5538eae7254fbba5105755f5ef68b20faac45803b8f8fe2bdaa512836c51da67c9f1a63fda53beb8c2960c38efa074fcc004de1413a0e33d349e4992712962e36a60a137d91328f1975330c82431c3499178fff0935204abf2c619a1fd6b7ddad10209476106552008e9507b664ccaa463a80742909bac210eecc21160ab7e14d8c602e6647c036a6d7bb3d1f8ee6bc82d434226a421fde3da2415d9910abd3b67a34584790be046f5d984e63ca6541270a17ce6648311cd15025cf6c41d8fd20611ac9ee6b5e0655d4c137118febc4a4676691259ddf8e2227c8678722a3577db38e03e1fed507c8cbf83a9b00f2b96c534cd42b8eefdcee6e018e199008bc6186908258c4b298e11f8c32e1197e8a82125cbd34d14abe81211125e197f3cd9ee07a44e3a1e934ee9beef98a947b5cb5030325f2e886d8d609ef4a0458cfa566d802f25c115f128549ebf95150c23d155ceaa2b98cd96c4bfcb30e8e62d0009aee64dd643869141dd35f534f020f102c5273fbae86ac78c3ef313ddb69144ff63926035d2e92f1f7c644d0e7743bb6e1710d7c3e7a47d6b23f25082cbad661d1dbe0213a573b9093ae88797cf1387faee004dbc3e66dd5aa916d1b1e2ab63d2b97264ad9e24fbea6c575f740856cb476d27bf4d1a101f94a8bf51f9a57a56d644b02e8ed9d558682c101b29e585ef4efafdbf35508a35cea31e079993f2bae43ed180901c87711d73cf3d2fe4933b0fd598f6a9a20b757cd2e7aac6b170aac8d2ddab8c29fe5f29a00fa6650521ab998ba0e221a8cdca721660a62e7a015c9c0b175f96eeff1a70aa0bc3b9651bc5edb472d9fee10fc0c67556d450daa2ab791a40a5cf6b4462a72c15c11051a82caaddf6ea06df41a26bf6efb9518") r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400, 0xfc16b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, r0, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x34, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000280)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)=""/248, 0xf8}], 0x1}, 0x40001f00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xe, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1d, 0x4e30b57e16fcd23e, 0x8, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5b, &(0x7f0000000a80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x801) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9e7c}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000001c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0), 0x200000, 0x10, &(0x7f0000001d00), 0x143}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x200002bc, 0x0, &(0x7f0000000d80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) mkdir(&(0x7f0000000b40)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f00), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000f40)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000f80)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX=r7], 0x27) socketpair(0x1, 0x1, 0x0, &(0x7f0000000dc0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000e00)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000e40)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'veth1_virt_wifi\x00'}) 798.788768ms ago: executing program 4 (id=3803): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001840), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001980)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB='N-N:N/8}9'], 0x6a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0], 0x0, 0x50, &(0x7f0000001400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001a00)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001a40)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000001ac0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b00), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001b40)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x1f, 0x1, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x548, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0xc, &(0x7f0000001e40)=ANY=[], &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000001ec0)=r6) write$cgroup_devices(r5, &(0x7f0000001f00)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x8, 0x10, &(0x7f0000001240), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r7, 0x2f00020b, 0xe, 0x0, &(0x7f0000001300)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001700)=""/246, 0x42, 0xf6, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00d4c66bceab7310000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="030000000200"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="03000000030000000300"/28], 0x50) 752.756353ms ago: executing program 4 (id=3804): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x0, 0x3}, {0xc, 0x3}]}]}}, &(0x7f0000000300)=""/246, 0x3e, 0xf6, 0x1}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd2e, '\x00', 0x0, r3, 0x3, 0x3}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763608646667011", @ANYRESDEC], 0xffdd) 731.252285ms ago: executing program 1 (id=3805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x40000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r2}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000800)={&(0x7f0000000840)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0x0) syz_clone(0x89000000, 0x0, 0x0, 0x0, 0x0, 0x0) 277.983302ms ago: executing program 4 (id=3806): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='cpuset.cpus\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) write$cgroup_subtree(r3, &(0x7f0000000740)=ANY=[@ANYBLOB='N,'], 0x6a) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f00000007c0)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="1807000000004000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000008850000000c000000b700000000000000185700001000000000000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x2, 0x20000, &(0x7f0000002480)=""/131072, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_int(r5, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB='1-2', @ANYRESDEC], 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.3055ms ago: executing program 0 (id=3807): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x49, 0x4, 0x0, 0x0, 0x0, 0x2, 0x80102, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x100335, 0x0, 0x0, 0xe7332469415a9ac0, 0x4, 0x7ffbfffc, 0x400, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000004000003f00000000000000", @ANYRES32, @ANYBLOB="00000000005e040000000000533c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800001800"/18], 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'bond0\x00', 0x3002}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) (async, rerun: 32) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000540)) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 1 (id=3808): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xbd3d1606e608939d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0xc, &(0x7f0000000c80)=ANY=[], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r3}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002200)={r2, &(0x7f0000001140), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x37f, 0xfffffffe}, 0x50) kernel console output (not intermixed with test programs): mp_interrupted+0xd0/0xd0 [ 129.020251][ T5152] ? filp_open+0x195/0x1e0 [ 129.024717][ T5152] ? 0xffffffffff600000 [ 129.028888][ T5152] do_coredump+0x160e/0x23a0 [ 129.033507][ T5152] ? __cfi_do_coredump+0x10/0x10 [ 129.038470][ T5152] ? kmem_cache_free+0x12d/0x300 [ 129.043426][ T5152] ? ____kasan_slab_free+0x13d/0x180 [ 129.048737][ T5152] ? get_signal+0xac2/0x1700 [ 129.053346][ T5152] ? kmem_cache_free+0x12d/0x300 [ 129.058310][ T5152] get_signal+0x157d/0x1700 [ 129.062839][ T5152] ? __cfi_get_signal+0x10/0x10 [ 129.067759][ T5152] arch_do_signal_or_restart+0xd1/0x11c0 [ 129.073435][ T5152] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 129.079282][ T5152] ? force_sig_fault+0xd9/0x130 [ 129.084154][ T5152] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 129.090328][ T5152] ? page_fault_oops+0x8b0/0x8b0 [ 129.095308][ T5152] ? __bad_area_nosemaphore+0x303/0x630 [ 129.100878][ T5152] exit_to_user_mode_loop+0x7a/0xb0 [ 129.106106][ T5152] exit_to_user_mode_prepare+0x87/0xd0 [ 129.111593][ T5152] irqentry_exit_to_user_mode+0x9/0x10 [ 129.117084][ T5152] irqentry_exit+0x12/0x40 [ 129.121524][ T5152] exc_page_fault+0x5e/0xb0 [ 129.126061][ T5152] asm_exc_page_fault+0x27/0x30 [ 129.130931][ T5152] RIP: 0033:0x7f9bd5054cb7 [ 129.135358][ T5152] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 129.154991][ T5152] RSP: 002b:00007f9bd5fb2120 EFLAGS: 00010202 [ 129.161067][ T5152] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9bd519f559 [ 129.169048][ T5152] RDX: 00007f9bd5fb2140 RSI: 00007f9bd5fb2270 RDI: 000000000000000b [ 129.177031][ T5152] RBP: 00007f9bd5236b50 R08: 0000000000000000 R09: 0000000000000000 [ 129.185054][ T5152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 129.193034][ T5152] R13: 00007f9bd5426308 R14: 00007f9bd5426270 R15: 00007fff95c83228 [ 129.201036][ T5152] [ 131.419101][ T5152] memory: usage 303108kB, limit 307200kB, failcnt 19832 [ 131.426546][ T5152] memory+swap: usage 422888kB, limit 9007199254740988kB, failcnt 0 [ 131.434845][ T5152] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 131.441704][ T5152] Memory cgroup stats for /syz2: [ 131.441842][ T5152] anon 1474560 [ 131.441842][ T5152] file 307200000 [ 131.441842][ T5152] kernel 0 [ 131.441842][ T5152] kernel_stack 0 [ 131.441842][ T5152] pagetables 0 [ 131.441842][ T5152] sec_pagetables 0 [ 131.441842][ T5152] percpu 0 [ 131.441842][ T5152] sock 0 [ 131.441842][ T5152] vmalloc 0 [ 131.441842][ T5152] shmem 302612480 [ 131.441842][ T5152] file_mapped 4329472 [ 131.441842][ T5152] file_dirty 12288 [ 131.441842][ T5152] file_writeback 49152 [ 131.441842][ T5152] swapcached 1708032 [ 131.441842][ T5152] anon_thp 0 [ 131.441842][ T5152] file_thp 0 [ 131.441842][ T5152] shmem_thp 0 [ 131.441842][ T5152] inactive_anon 121851904 [ 131.441842][ T5152] active_anon 183681024 [ 131.441842][ T5152] inactive_file 20480 [ 131.441842][ T5152] active_file 4567040 [ 131.441842][ T5152] unevictable 0 [ 131.441842][ T5152] slab_reclaimable 0 [ 131.441842][ T5152] slab_unreclaimable 0 [ 131.441842][ T5152] slab 0 [ 131.441842][ T5152] workingset_refault_anon 12 [ 131.774035][ T5621] device lo entered promiscuous mode [ 131.804145][ T5109] syz.2.1243 (5109) used greatest stack depth: 15464 bytes left [ 131.836084][ T5620] device syzkaller0 entered promiscuous mode [ 131.962129][ T5152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1243,pid=5144,uid=0 [ 131.977580][ T5152] Memory cgroup out of memory: Killed process 5144 (syz.2.1243) total-vm:90820kB, anon-rss:1420kB, file-rss:53564kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 132.151231][ T5646] device syzkaller0 entered promiscuous mode [ 133.027182][ T5120] syz.2.1243 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 133.172115][ T5120] CPU: 1 PID: 5120 Comm: syz.2.1243 Not tainted syzkaller #0 [ 133.179539][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.189620][ T5120] Call Trace: [ 133.192914][ T5120] [ 133.195903][ T5120] __dump_stack+0x21/0x24 [ 133.200272][ T5120] dump_stack_lvl+0x110/0x170 [ 133.205001][ T5120] ? __cfi_dump_stack_lvl+0x8/0x8 [ 133.210037][ T5120] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 133.215858][ T5120] ? ___ratelimit+0x40a/0x590 [ 133.220550][ T5120] dump_stack+0x15/0x24 [ 133.224735][ T5120] dump_header+0xdb/0x660 [ 133.229101][ T5120] ? __cfi_gfp_zone+0x10/0x10 [ 133.233813][ T5120] oom_kill_process+0x32a/0x410 [ 133.238705][ T5120] ? kvm_sched_clock_read+0x18/0x40 [ 133.243921][ T5120] out_of_memory+0x630/0x930 [ 133.248552][ T5120] ? __cfi_out_of_memory+0x10/0x10 [ 133.253677][ T5120] mem_cgroup_out_of_memory+0x2be/0x390 [ 133.259230][ T5120] ? __kasan_check_write+0x14/0x20 [ 133.264355][ T5120] ? mem_cgroup_oom_trylock+0x360/0x360 [ 133.269907][ T5120] try_charge_memcg+0xb8a/0x1650 [ 133.274852][ T5120] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 133.280229][ T5120] ? __asan_set_shadow_00+0xe/0x10 [ 133.285355][ T5120] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 133.291276][ T5120] charge_memcg+0x81/0x1f0 [ 133.295696][ T5120] __mem_cgroup_charge+0x93/0x290 [ 133.300724][ T5120] ? xas_start+0x31d/0x3e0 [ 133.305145][ T5120] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 133.310781][ T5120] ? xas_load+0x3a2/0x3c0 [ 133.315113][ T5120] shmem_add_to_page_cache+0x5b1/0xae0 [ 133.320582][ T5120] ? put_page+0xb0/0xb0 [ 133.324756][ T5120] ? __cfi___switch_to+0x10/0x10 [ 133.329697][ T5120] shmem_get_folio_gfp+0xef9/0x20f0 [ 133.334906][ T5120] shmem_write_begin+0xea/0x2c0 [ 133.339764][ T5120] generic_perform_write+0x32d/0x740 [ 133.345059][ T5120] ? __cfi_generic_perform_write+0x10/0x10 [ 133.350985][ T5120] ? __cfi_file_update_time+0x10/0x10 [ 133.356358][ T5120] ? __get_user_pages+0xb5d/0xdb0 [ 133.361380][ T5120] ? generic_write_checks_count+0x369/0x450 [ 133.367288][ T5120] __generic_file_write_iter+0x17a/0x230 [ 133.372943][ T5120] generic_file_write_iter+0xae/0x310 [ 133.378341][ T5120] __kernel_write_iter+0x2a9/0x6a0 [ 133.383456][ T5120] ? __cfi___kernel_write_iter+0x10/0x10 [ 133.389087][ T5120] ? vfs_llseek+0xbb/0xf0 [ 133.393420][ T5120] ? iov_iter_bvec+0x53/0x1f0 [ 133.398095][ T5120] dump_user_range+0x3e6/0x630 [ 133.402860][ T5120] ? __cfi_dump_user_range+0x10/0x10 [ 133.408139][ T5120] ? dump_align+0xfe/0x120 [ 133.412560][ T5120] ? dump_emit+0xa8/0xc0 [ 133.416807][ T5120] elf_core_dump+0x2b60/0x30b0 [ 133.421578][ T5120] ? __cfi_elf_core_dump+0x10/0x10 [ 133.426698][ T5120] ? dump_interrupted+0xd0/0xd0 [ 133.431557][ T5120] ? filp_open+0x195/0x1e0 [ 133.435980][ T5120] ? 0xffffffffff600000 [ 133.440159][ T5120] do_coredump+0x160e/0x23a0 [ 133.444767][ T5120] ? __cfi_do_coredump+0x10/0x10 [ 133.449720][ T5120] ? kmem_cache_free+0x12d/0x300 [ 133.454681][ T5120] ? ____kasan_slab_free+0x13d/0x180 [ 133.460024][ T5120] ? get_signal+0xac2/0x1700 [ 133.464663][ T5120] ? kmem_cache_free+0x12d/0x300 [ 133.469620][ T5120] get_signal+0x157d/0x1700 [ 133.474140][ T5120] ? __cfi_get_signal+0x10/0x10 [ 133.479010][ T5120] arch_do_signal_or_restart+0xd1/0x11c0 [ 133.484657][ T5120] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 133.490465][ T5120] ? force_sig_fault+0xd9/0x130 [ 133.495345][ T5120] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 133.501505][ T5120] ? page_fault_oops+0x8b0/0x8b0 [ 133.506472][ T5120] ? __bad_area_nosemaphore+0x303/0x630 [ 133.512026][ T5120] exit_to_user_mode_loop+0x7a/0xb0 [ 133.517226][ T5120] exit_to_user_mode_prepare+0x87/0xd0 [ 133.522687][ T5120] irqentry_exit_to_user_mode+0x9/0x10 [ 133.528158][ T5120] irqentry_exit+0x12/0x40 [ 133.532575][ T5120] exc_page_fault+0x5e/0xb0 [ 133.537081][ T5120] asm_exc_page_fault+0x27/0x30 [ 133.541934][ T5120] RIP: 0033:0x7f9bd5054cb7 [ 133.546349][ T5120] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 133.565954][ T5120] RSP: 002b:00007f9bd5fb2120 EFLAGS: 00010202 [ 133.572038][ T5120] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9bd519f559 [ 133.580028][ T5120] RDX: 00007f9bd5fb2140 RSI: 00007f9bd5fb2270 RDI: 000000000000000b [ 133.587997][ T5120] RBP: 00007f9bd5236b50 R08: 0000000000000000 R09: 0000000000000000 [ 133.595967][ T5120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.603938][ T5120] R13: 00007f9bd5426308 R14: 00007f9bd5426270 R15: 00007fff95c83228 [ 133.611928][ T5120] [ 133.715354][ T5120] memory: usage 306036kB, limit 307200kB, failcnt 22451 [ 133.854522][ T28] audit: type=1400 audit(1793527314.914:159): avc: denied { create } for pid=5707 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.006073][ T5120] memory+swap: usage 421944kB, limit 9007199254740988kB, failcnt 0 [ 134.070165][ T5714] device syzkaller0 entered promiscuous mode [ 134.080333][ T5120] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 134.146085][ T5120] Memory cgroup stats for /syz2: [ 134.146242][ T5120] anon 1277952 [ 134.146242][ T5120] file 303489024 [ 134.146242][ T5120] kernel 0 [ 134.146242][ T5120] kernel_stack 0 [ 134.146242][ T5120] pagetables 0 [ 134.146242][ T5120] sec_pagetables 0 [ 134.146242][ T5120] percpu 0 [ 134.146242][ T5120] sock 0 [ 134.146242][ T5120] vmalloc 0 [ 134.146242][ T5120] shmem 302694400 [ 134.146242][ T5120] file_mapped 544768 [ 134.146242][ T5120] file_dirty 12288 [ 134.146242][ T5120] file_writeback 1060864 [ 134.146242][ T5120] swapcached 1228800 [ 134.146242][ T5120] anon_thp 0 [ 134.146242][ T5120] file_thp 0 [ 134.146242][ T5120] shmem_thp 0 [ 134.146242][ T5120] inactive_anon 104341504 [ 134.146242][ T5120] active_anon 198496256 [ 134.146242][ T5120] inactive_file 0 [ 134.146242][ T5120] active_file 794624 [ 134.146242][ T5120] unevictable 0 [ 134.146242][ T5120] slab_reclaimable 0 [ 134.146242][ T5120] slab_unreclaimable 0 [ 134.146242][ T5120] slab 0 [ 134.146242][ T5120] workingset_refault_anon 12 [ 134.249271][ T5120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1243,pid=5143,uid=0 [ 134.304366][ T28] audit: type=1400 audit(1793527315.354:160): avc: denied { attach_queue } for pid=5736 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.472094][ T5120] Memory cgroup out of memory: Killed process 5143 (syz.2.1243) total-vm:90820kB, anon-rss:1468kB, file-rss:52232kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 136.815451][ T30] oom_reaper: reaped process 5143 (syz.2.1243), now anon-rss:0kB, file-rss:52040kB, shmem-rss:0kB [ 136.939131][ T5104] syz.2.1243 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 136.949104][ T5104] CPU: 0 PID: 5104 Comm: syz.2.1243 Not tainted syzkaller #0 [ 136.956495][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.966558][ T5104] Call Trace: [ 136.969848][ T5104] [ 136.972786][ T5104] __dump_stack+0x21/0x24 [ 136.977130][ T5104] dump_stack_lvl+0x110/0x170 [ 136.981867][ T5104] ? __cfi_dump_stack_lvl+0x8/0x8 [ 136.986916][ T5104] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 136.992749][ T5104] ? ___ratelimit+0x40a/0x590 [ 136.997454][ T5104] dump_stack+0x15/0x24 [ 137.001621][ T5104] dump_header+0xdb/0x660 [ 137.005969][ T5104] ? __cfi_gfp_zone+0x10/0x10 [ 137.010670][ T5104] oom_kill_process+0x32a/0x410 [ 137.015555][ T5104] ? kvm_sched_clock_read+0x18/0x40 [ 137.020810][ T5104] out_of_memory+0x630/0x930 [ 137.025425][ T5104] ? __cfi_out_of_memory+0x10/0x10 [ 137.030564][ T5104] mem_cgroup_out_of_memory+0x2be/0x390 [ 137.036127][ T5104] ? __kasan_check_write+0x14/0x20 [ 137.041255][ T5104] ? mem_cgroup_oom_trylock+0x360/0x360 [ 137.046825][ T5104] try_charge_memcg+0xb8a/0x1650 [ 137.051783][ T5104] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 137.057163][ T5104] ? __asan_set_shadow_00+0xe/0x10 [ 137.062287][ T5104] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 137.068201][ T5104] charge_memcg+0x81/0x1f0 [ 137.072635][ T5104] __mem_cgroup_charge+0x93/0x290 [ 137.077713][ T5104] ? xas_start+0x31d/0x3e0 [ 137.082150][ T5104] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 137.087787][ T5104] ? xas_load+0x3a2/0x3c0 [ 137.092139][ T5104] shmem_add_to_page_cache+0x5b1/0xae0 [ 137.097608][ T5104] ? put_page+0xb0/0xb0 [ 137.101770][ T5104] ? preempt_schedule+0xbc/0xd0 [ 137.106631][ T5104] ? __cfi_preempt_schedule+0x10/0x10 [ 137.112016][ T5104] shmem_get_folio_gfp+0xef9/0x20f0 [ 137.117225][ T5104] shmem_write_begin+0xea/0x2c0 [ 137.122099][ T5104] generic_perform_write+0x32d/0x740 [ 137.127395][ T5104] ? __mark_inode_dirty+0x264/0x9c0 [ 137.132597][ T5104] ? __cfi_generic_perform_write+0x10/0x10 [ 137.138403][ T5104] ? __cfi_file_update_time+0x10/0x10 [ 137.143779][ T5104] ? __get_user_pages+0xb5d/0xdb0 [ 137.148811][ T5104] ? generic_write_checks_count+0x369/0x450 [ 137.154709][ T5104] __generic_file_write_iter+0x17a/0x230 [ 137.160346][ T5104] generic_file_write_iter+0xae/0x310 [ 137.165721][ T5104] __kernel_write_iter+0x2a9/0x6a0 [ 137.170832][ T5104] ? __cfi___kernel_write_iter+0x10/0x10 [ 137.176476][ T5104] ? vfs_llseek+0xbb/0xf0 [ 137.180802][ T5104] ? iov_iter_bvec+0x53/0x1f0 [ 137.185494][ T5104] dump_user_range+0x3e6/0x630 [ 137.190262][ T5104] ? __cfi_dump_user_range+0x10/0x10 [ 137.195544][ T5104] ? dump_align+0xfe/0x120 [ 137.199962][ T5104] ? dump_emit+0xa8/0xc0 [ 137.204208][ T5104] elf_core_dump+0x2b60/0x30b0 [ 137.208982][ T5104] ? __cfi_elf_core_dump+0x10/0x10 [ 137.214106][ T5104] ? dump_interrupted+0xd0/0xd0 [ 137.218972][ T5104] ? filp_open+0x195/0x1e0 [ 137.223396][ T5104] ? 0xffffffffff600000 [ 137.227551][ T5104] do_coredump+0x160e/0x23a0 [ 137.232155][ T5104] ? __cfi_do_coredump+0x10/0x10 [ 137.237109][ T5104] ? kmem_cache_free+0x12d/0x300 [ 137.242057][ T5104] ? ____kasan_slab_free+0x13d/0x180 [ 137.247353][ T5104] ? get_signal+0xac2/0x1700 [ 137.251953][ T5104] ? kmem_cache_free+0x12d/0x300 [ 137.256900][ T5104] get_signal+0x157d/0x1700 [ 137.261412][ T5104] ? __cfi_get_signal+0x10/0x10 [ 137.266270][ T5104] arch_do_signal_or_restart+0xd1/0x11c0 [ 137.271905][ T5104] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 137.277719][ T5104] ? force_sig_fault+0xd9/0x130 [ 137.282584][ T5104] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 137.288741][ T5104] ? page_fault_oops+0x8b0/0x8b0 [ 137.293686][ T5104] ? __bad_area_nosemaphore+0x303/0x630 [ 137.299236][ T5104] exit_to_user_mode_loop+0x7a/0xb0 [ 137.304438][ T5104] exit_to_user_mode_prepare+0x87/0xd0 [ 137.309899][ T5104] irqentry_exit_to_user_mode+0x9/0x10 [ 137.315377][ T5104] irqentry_exit+0x12/0x40 [ 137.319796][ T5104] exc_page_fault+0x5e/0xb0 [ 137.324304][ T5104] asm_exc_page_fault+0x27/0x30 [ 137.329169][ T5104] RIP: 0033:0x7f9bd5054cb7 [ 137.333587][ T5104] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 137.353192][ T5104] RSP: 002b:00007f9bd5fb2120 EFLAGS: 00010202 [ 137.359259][ T5104] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9bd519f559 [ 137.367227][ T5104] RDX: 00007f9bd5fb2140 RSI: 00007f9bd5fb2270 RDI: 000000000000000b [ 137.375216][ T5104] RBP: 00007f9bd5236b50 R08: 0000000000000000 R09: 0000000000000000 [ 137.383203][ T5104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.391171][ T5104] R13: 00007f9bd5426308 R14: 00007f9bd5426270 R15: 00007fff95c83228 [ 137.399164][ T5104] [ 137.474374][ T5862] device syzkaller0 entered promiscuous mode [ 137.599616][ T5867] device wg2 left promiscuous mode [ 137.608646][ T5104] memory: usage 307200kB, limit 307200kB, failcnt 25902 [ 137.707058][ T5104] memory+swap: usage 428720kB, limit 9007199254740988kB, failcnt 0 [ 137.724309][ T5104] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 137.738532][ T5104] Memory cgroup stats for /syz2: [ 137.738676][ T5104] anon 1171456 [ 137.738676][ T5104] file 312967168 [ 137.738676][ T5104] kernel 0 [ 137.738676][ T5104] kernel_stack 0 [ 137.738676][ T5104] pagetables 0 [ 137.738676][ T5104] sec_pagetables 0 [ 137.738676][ T5104] percpu 0 [ 137.738676][ T5104] sock 0 [ 137.738676][ T5104] vmalloc 0 [ 137.738676][ T5104] shmem 312954880 [ 137.738676][ T5104] file_mapped 12288 [ 137.738676][ T5104] file_dirty 12288 [ 137.738676][ T5104] file_writeback 405504 [ 137.738676][ T5104] swapcached 430080 [ 137.738676][ T5104] anon_thp 0 [ 137.738676][ T5104] file_thp 0 [ 137.738676][ T5104] shmem_thp 0 [ 137.738676][ T5104] inactive_anon 207867904 [ 137.738676][ T5104] active_anon 106430464 [ 137.738676][ T5104] inactive_file 12288 [ 137.738676][ T5104] active_file 0 [ 137.738676][ T5104] unevictable 0 [ 137.738676][ T5104] slab_reclaimable 0 [ 137.738676][ T5104] slab_unreclaimable 0 [ 137.738676][ T5104] slab 0 [ 137.738676][ T5104] workingset_refault_anon 19 [ 137.869357][ T5104] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1243,pid=5104,uid=0 [ 137.944684][ T5104] Memory cgroup out of memory: Killed process 5104 (syz.2.1243) total-vm:90688kB, anon-rss:1376kB, file-rss:53256kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 139.552660][ T5925] FAULT_INJECTION: forcing a failure. [ 139.552660][ T5925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.599559][ T5925] CPU: 1 PID: 5925 Comm: syz.3.1448 Not tainted syzkaller #0 [ 139.606966][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.617041][ T5925] Call Trace: [ 139.620345][ T5925] [ 139.623283][ T5925] __dump_stack+0x21/0x24 [ 139.627635][ T5925] dump_stack_lvl+0x110/0x170 [ 139.632324][ T5925] ? __cfi_dump_stack_lvl+0x8/0x8 [ 139.637361][ T5925] dump_stack+0x15/0x24 [ 139.641542][ T5925] should_fail_ex+0x3bf/0x510 [ 139.646251][ T5925] should_fail+0xb/0x10 [ 139.650466][ T5925] should_fail_usercopy+0x1a/0x20 [ 139.655503][ T5925] _copy_from_user+0x1e/0xc0 [ 139.660106][ T5925] __sys_bpf+0x2a0/0x850 [ 139.664362][ T5925] ? bpf_link_show_fdinfo+0x330/0x330 [ 139.669762][ T5925] ? __cfi_ksys_write+0x10/0x10 [ 139.674636][ T5925] ? debug_smp_processor_id+0x17/0x20 [ 139.680036][ T5925] __x64_sys_bpf+0x7c/0x90 [ 139.684553][ T5925] x64_sys_call+0x488/0x9a0 [ 139.689068][ T5925] do_syscall_64+0x4c/0xa0 [ 139.693501][ T5925] ? clear_bhb_loop+0x30/0x80 [ 139.698196][ T5925] ? clear_bhb_loop+0x30/0x80 [ 139.702889][ T5925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.708793][ T5925] RIP: 0033:0x7fcd8639f559 [ 139.713256][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.732873][ T5925] RSP: 002b:00007fcd872cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.741298][ T5925] RAX: ffffffffffffffda RBX: 00007fcd86625fa0 RCX: 00007fcd8639f559 [ 139.749280][ T5925] RDX: 000000000000000f RSI: 0000200000001800 RDI: 000000000000000a [ 139.757259][ T5925] RBP: 00007fcd872cf090 R08: 0000000000000000 R09: 0000000000000000 [ 139.765251][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.773230][ T5925] R13: 00007fcd86626038 R14: 00007fcd86625fa0 R15: 00007ffc82393058 [ 139.781214][ T5925] [ 139.924224][ T5916] syz.2.1446 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 140.149776][ T5916] CPU: 1 PID: 5916 Comm: syz.2.1446 Not tainted syzkaller #0 [ 140.157195][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.167256][ T5916] Call Trace: [ 140.170551][ T5916] [ 140.173486][ T5916] __dump_stack+0x21/0x24 [ 140.177824][ T5916] dump_stack_lvl+0x110/0x170 [ 140.182510][ T5916] ? __cfi_dump_stack_lvl+0x8/0x8 [ 140.187565][ T5916] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 140.193382][ T5916] ? ___ratelimit+0x40a/0x590 [ 140.198096][ T5916] dump_stack+0x15/0x24 [ 140.202264][ T5916] dump_header+0xdb/0x660 [ 140.206612][ T5916] ? __cfi_gfp_zone+0x10/0x10 [ 140.211308][ T5916] oom_kill_process+0x32a/0x410 [ 140.216191][ T5916] ? kvm_sched_clock_read+0x18/0x40 [ 140.221409][ T5916] out_of_memory+0x630/0x930 [ 140.226024][ T5916] ? __cfi_out_of_memory+0x10/0x10 [ 140.231152][ T5916] mem_cgroup_out_of_memory+0x2be/0x390 [ 140.236706][ T5916] ? __kasan_check_write+0x14/0x20 [ 140.241867][ T5916] ? mem_cgroup_oom_trylock+0x360/0x360 [ 140.247423][ T5916] try_charge_memcg+0xb8a/0x1650 [ 140.252389][ T5916] ? __cfi_release_pages+0x10/0x10 [ 140.257503][ T5916] ? lru_add_fn+0x708/0x840 [ 140.262030][ T5916] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 140.267412][ T5916] ? __alloc_pages+0x610/0x610 [ 140.272190][ T5916] ? __cfi_gfp_zone+0x10/0x10 [ 140.276882][ T5916] ? folio_batch_move_lru+0x37a/0x470 [ 140.282269][ T5916] ? cgroup_rstat_updated+0xf0/0x360 [ 140.287563][ T5916] ? __alloc_pages+0x1fa/0x610 [ 140.292341][ T5916] charge_memcg+0x81/0x1f0 [ 140.296769][ T5916] __mem_cgroup_charge+0x93/0x290 [ 140.301805][ T5916] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 140.307450][ T5916] wp_page_copy+0x488/0x1490 [ 140.312054][ T5916] ? fault_dirty_shared_page+0x310/0x310 [ 140.317706][ T5916] ? vma_data_pages+0xfc/0x130 [ 140.322474][ T5916] ? do_fault+0x1b23/0x1e30 [ 140.326982][ T5916] ? vm_normal_page+0x1eb/0x200 [ 140.331864][ T5916] do_wp_page+0x9b5/0xf70 [ 140.336203][ T5916] handle_mm_fault+0x114f/0x26b0 [ 140.341149][ T5916] ? __cfi_handle_mm_fault+0x10/0x10 [ 140.346442][ T5916] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 140.351665][ T5916] do_user_addr_fault+0x900/0x1030 [ 140.356794][ T5916] ? debug_smp_processor_id+0x17/0x20 [ 140.362222][ T5916] exc_page_fault+0x51/0xb0 [ 140.366744][ T5916] asm_exc_page_fault+0x27/0x30 [ 140.371626][ T5916] RIP: 0033:0x7f9bd50527fc [ 140.376058][ T5916] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 140.395669][ T5916] RSP: 002b:00007fff95c83268 EFLAGS: 00010246 [ 140.401742][ T5916] RAX: 0000000000000000 RBX: ffffffff818b1cb1 RCX: 0000000000000000 [ 140.409721][ T5916] RDX: 0000000000001cb1 RSI: ffffffff818b1cb1 RDI: 0000000000000001 [ 140.417700][ T5916] RBP: 0000000000000000 R08: 00007f9bd5410000 R09: 00007f9bd5412000 [ 140.425675][ T5916] R10: 00000000818b1cb5 R11: 0000000000000001 R12: 00007f9bd5426128 [ 140.433651][ T5916] R13: 0000000000000032 R14: ffffffff818b174d R15: 00007f9bd5f55720 [ 140.441626][ T5916] ? htab_map_alloc_check+0x9d/0x4c0 [ 140.446926][ T5916] ? htab_map_alloc+0x131/0xfb0 [ 140.451784][ T5916] ? htab_map_alloc+0x131/0xfb0 [ 140.456642][ T5916] [ 140.668087][ T5916] memory: usage 290688kB, limit 307200kB, failcnt 28043 [ 140.675204][ T5916] memory+swap: usage 404288kB, limit 9007199254740988kB, failcnt 0 [ 140.683105][ T5916] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 140.688147][ T5104] syz.2.1243 (5104) used greatest stack depth: 14408 bytes left [ 140.929465][ T5916] Memory cgroup stats for /syz2: [ 140.929607][ T5916] anon 1187840 [ 140.929607][ T5916] file 281161728 [ 140.929607][ T5916] kernel 0 [ 140.929607][ T5916] kernel_stack 0 [ 140.929607][ T5916] pagetables 0 [ 140.929607][ T5916] sec_pagetables 0 [ 140.929607][ T5916] percpu 0 [ 140.929607][ T5916] sock 0 [ 140.929607][ T5916] vmalloc 0 [ 140.929607][ T5916] shmem 281112576 [ 140.929607][ T5916] file_mapped 12288 [ 140.929607][ T5916] file_dirty 12288 [ 140.929607][ T5916] file_writeback 868352 [ 140.929607][ T5916] swapcached 1556480 [ 140.929607][ T5916] anon_thp 0 [ 140.929607][ T5916] file_thp 0 [ 140.929607][ T5916] shmem_thp 0 [ 140.929607][ T5916] inactive_anon 136310784 [ 140.929607][ T5916] active_anon 145690624 [ 140.929607][ T5916] inactive_file 0 [ 140.929607][ T5916] active_file 49152 [ 140.929607][ T5916] unevictable 0 [ 140.929607][ T5916] slab_reclaimable 0 [ 140.929607][ T5916] slab_unreclaimable 0 [ 140.929607][ T5916] slab 0 [ 140.929607][ T5916] workingset_refault_anon 20 [ 141.341780][ T5916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1243,pid=5111,uid=0 [ 141.362158][ T5916] Memory cgroup out of memory: Killed process 5111 (syz.2.1243) total-vm:90688kB, anon-rss:1412kB, file-rss:53124kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 143.561124][ T6002] FAULT_INJECTION: forcing a failure. [ 143.561124][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.588373][ T6002] CPU: 0 PID: 6002 Comm: syz.3.1463 Not tainted syzkaller #0 [ 143.595777][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.605846][ T6002] Call Trace: [ 143.609138][ T6002] [ 143.612080][ T6002] __dump_stack+0x21/0x24 [ 143.616426][ T6002] dump_stack_lvl+0x110/0x170 [ 143.621116][ T6002] ? __cfi_dump_stack_lvl+0x8/0x8 [ 143.626165][ T6002] ? bpf_prog_f758d824c926cfb6+0x53/0x57 [ 143.631871][ T6002] dump_stack+0x15/0x24 [ 143.636062][ T6002] should_fail_ex+0x3bf/0x510 [ 143.640789][ T6002] should_fail+0xb/0x10 [ 143.644965][ T6002] should_fail_usercopy+0x1a/0x20 [ 143.650015][ T6002] _copy_to_user+0x1e/0x90 [ 143.654457][ T6002] bpf_prog_test_run_raw_tp+0x513/0x6b0 [ 143.660023][ T6002] ? __cfi_bpf_prog_test_run_raw_tp+0x10/0x10 [ 143.666132][ T6002] ? __kasan_check_write+0x14/0x20 [ 143.671261][ T6002] ? __cfi_bpf_prog_test_run_raw_tp+0x10/0x10 [ 143.677371][ T6002] bpf_prog_test_run+0x3b4/0x5c0 [ 143.682338][ T6002] ? bpf_prog_query+0x270/0x270 [ 143.687208][ T6002] ? selinux_bpf+0xce/0xf0 [ 143.691647][ T6002] ? security_bpf+0x93/0xb0 [ 143.696179][ T6002] __sys_bpf+0x5ee/0x850 [ 143.700444][ T6002] ? bpf_link_show_fdinfo+0x330/0x330 [ 143.705872][ T6002] ? __cfi_ksys_write+0x10/0x10 [ 143.710746][ T6002] ? debug_smp_processor_id+0x17/0x20 [ 143.716150][ T6002] __x64_sys_bpf+0x7c/0x90 [ 143.720595][ T6002] x64_sys_call+0x488/0x9a0 [ 143.725170][ T6002] do_syscall_64+0x4c/0xa0 [ 143.729625][ T6002] ? clear_bhb_loop+0x30/0x80 [ 143.734329][ T6002] ? clear_bhb_loop+0x30/0x80 [ 143.739070][ T6002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.745019][ T6002] RIP: 0033:0x7fcd8639f559 [ 143.749479][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.769149][ T6002] RSP: 002b:00007fcd872cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.777622][ T6002] RAX: ffffffffffffffda RBX: 00007fcd86625fa0 RCX: 00007fcd8639f559 [ 143.785605][ T6002] RDX: 000000000000000f RSI: 0000200000001800 RDI: 000000000000000a [ 143.793587][ T6002] RBP: 00007fcd872cf090 R08: 0000000000000000 R09: 0000000000000000 [ 143.801586][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.809584][ T6002] R13: 00007fcd86626038 R14: 00007fcd86625fa0 R15: 00007ffc82393058 [ 143.817591][ T6002] [ 143.822339][ T30] oom_reaper: reaped process 5111 (syz.2.1243), now anon-rss:0kB, file-rss:52932kB, shmem-rss:0kB [ 144.713996][ T6039] device syzkaller0 entered promiscuous mode [ 144.802591][ T6048] FAULT_INJECTION: forcing a failure. [ 144.802591][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.829987][ T6048] CPU: 0 PID: 6048 Comm: syz.1.1477 Not tainted syzkaller #0 [ 144.837394][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.847462][ T6048] Call Trace: [ 144.850772][ T6048] [ 144.853726][ T6048] __dump_stack+0x21/0x24 [ 144.858081][ T6048] dump_stack_lvl+0x110/0x170 [ 144.862772][ T6048] ? __cfi_dump_stack_lvl+0x8/0x8 [ 144.867816][ T6048] dump_stack+0x15/0x24 [ 144.871983][ T6048] should_fail_ex+0x3bf/0x510 [ 144.876694][ T6048] should_fail+0xb/0x10 [ 144.880895][ T6048] should_fail_usercopy+0x1a/0x20 [ 144.885976][ T6048] _copy_to_user+0x1e/0x90 [ 144.890409][ T6048] simple_read_from_buffer+0xe9/0x160 [ 144.895799][ T6048] proc_fail_nth_read+0x1a6/0x220 [ 144.900859][ T6048] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 144.906422][ T6048] ? security_file_permission+0x94/0xb0 [ 144.912009][ T6048] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 144.917576][ T6048] vfs_read+0x286/0x930 [ 144.921760][ T6048] ? __cfi_vfs_read+0x10/0x10 [ 144.926452][ T6048] ? __kasan_check_write+0x14/0x20 [ 144.931596][ T6048] ? mutex_lock+0x93/0x1b0 [ 144.936030][ T6048] ? __cfi_mutex_lock+0x10/0x10 [ 144.940913][ T6048] ? __fdget_pos+0x2cd/0x380 [ 144.945524][ T6048] ? ksys_read+0x70/0x260 [ 144.949882][ T6048] ksys_read+0x14a/0x260 [ 144.954138][ T6048] ? __cfi_ksys_read+0x10/0x10 [ 144.959055][ T6048] ? debug_smp_processor_id+0x17/0x20 [ 144.964460][ T6048] __x64_sys_read+0x7b/0x90 [ 144.968994][ T6048] x64_sys_call+0x2f/0x9a0 [ 144.973436][ T6048] do_syscall_64+0x4c/0xa0 [ 144.977871][ T6048] ? clear_bhb_loop+0x30/0x80 [ 144.982572][ T6048] ? clear_bhb_loop+0x30/0x80 [ 144.987283][ T6048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.993193][ T6048] RIP: 0033:0x7fd47a35fd8e [ 144.997619][ T6048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.017238][ T6048] RSP: 002b:00007fd47b1dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.025670][ T6048] RAX: ffffffffffffffda RBX: 00007fd47b1dd6c0 RCX: 00007fd47a35fd8e [ 145.033686][ T6048] RDX: 000000000000000f RSI: 00007fd47b1dd0a0 RDI: 0000000000000005 [ 145.041690][ T6048] RBP: 00007fd47b1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 145.049674][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.057658][ T6048] R13: 00007fd47a626038 R14: 00007fd47a625fa0 R15: 00007fffb2bc2068 [ 145.065648][ T6048] [ 145.543676][ T6089] ªªªªª6: renamed from veth0_vlan [ 145.593956][ T6086] tap0: tun_chr_ioctl cmd 1074025675 [ 145.754224][ T6086] tap0: persist enabled [ 145.760137][ T6087] tap0: tun_chr_ioctl cmd 1074025675 [ 145.842486][ T6087] tap0: persist disabled [ 146.780352][ T6111] device sit0 entered promiscuous mode [ 147.188654][ T6127] device syzkaller0 entered promiscuous mode [ 147.871490][ T28] audit: type=1400 audit(1793527328.924:161): avc: denied { setattr } for pid=6148 comm="syz.4.1503" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 147.982837][ T6159] tap1: tun_chr_ioctl cmd 1074025673 [ 148.691169][ T28] audit: type=1400 audit(1793527329.744:162): avc: denied { create } for pid=6221 comm="syz.3.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.868107][ T5120] syz.2.1243 (5120) used greatest stack depth: 14048 bytes left [ 148.998249][ T6235] device ip6gretap0 left promiscuous mode [ 149.019462][ T6235] : port 1(ip6gretap0) entered disabled state [ 150.143303][ T6260] device syzkaller0 entered promiscuous mode [ 150.567853][ T288] cgroup: fork rejected by pids controller in /syz0 [ 150.863827][ T6298] device syzkaller0 entered promiscuous mode [ 151.680202][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.724920][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.756564][ T6308] device bridge_slave_0 entered promiscuous mode [ 151.858628][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.869826][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.884862][ T6308] device bridge_slave_1 entered promiscuous mode [ 152.058580][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.065767][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.073046][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.080116][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.169017][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.179066][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.193689][ T4141] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.228484][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.244520][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.251580][ T4141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.274775][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.291582][ T4141] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.298677][ T4141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.348603][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.375670][ T1374] device vlan0 left promiscuous mode [ 152.381075][ T1374] @: port 1(vlan0) entered disabled state [ 152.407138][ T6330] cgroup: fork rejected by pids controller in /syz3 [ 152.589201][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.602307][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.623396][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.638801][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.658591][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.677110][ T6308] device veth0_vlan entered promiscuous mode [ 152.720951][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.731435][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.743496][ T6308] device veth1_macvtap entered promiscuous mode [ 152.759370][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.767166][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.775963][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.784948][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.793450][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.972969][ T6394] device syzkaller0 entered promiscuous mode [ 152.980383][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.989551][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.996700][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.212163][ T6562] device wg2 entered promiscuous mode [ 156.553266][ T6579] device syzkaller0 entered promiscuous mode [ 156.686869][ T6584] device sit0 entered promiscuous mode [ 159.891444][ T6714] : port 1(ip6gretap0) entered blocking state [ 159.898154][ T6714] : port 1(ip6gretap0) entered disabled state [ 159.904990][ T6714] device ip6gretap0 entered promiscuous mode [ 161.067617][ T6771] device syzkaller0 entered promiscuous mode [ 162.986404][ T6792] device syzkaller0 entered promiscuous mode [ 163.163318][ T6806] device syzkaller0 entered promiscuous mode [ 169.448637][ T6972] device syzkaller0 entered promiscuous mode [ 169.550808][ T6999] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 169.581877][ T6999] syzkaller0: linktype set to 0 [ 169.947342][ T7052] device wg2 entered promiscuous mode [ 170.044440][ T7061] device wg2 left promiscuous mode [ 170.799531][ T7097] device syzkaller0 entered promiscuous mode [ 171.425789][ T7127] device veth1_macvtap entered promiscuous mode [ 171.445830][ T7127] device macsec0 entered promiscuous mode [ 171.452099][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.499015][ T7134] caif0: tun_chr_ioctl cmd 2147767520 [ 171.540307][ T7140] žÿ: renamed from team_slave_1 [ 171.638487][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.689675][ T7149] tap0: tun_chr_ioctl cmd 1074025675 [ 171.700616][ T7149] tap0: persist disabled [ 171.711523][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.716990][ T7151] tap0: persist enabled [ 171.721221][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.746909][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.752396][ T7151] tap0: persist enabled [ 171.756707][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.768861][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.774323][ T7151] tap0: persist enabled [ 171.778565][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.783868][ T7151] tap0: persist enabled [ 171.788322][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.804403][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.809857][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.815617][ T7151] tap0: persist enabled [ 171.819886][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.825317][ T7151] tap0: persist enabled [ 171.833743][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.839316][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.844779][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.850082][ T7151] tap0: persist enabled [ 171.866634][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.872001][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.877566][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.882880][ T7151] tap0: persist enabled [ 171.887144][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.892599][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.902614][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.911015][ T7151] tap0: persist enabled [ 171.924438][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.929915][ T7151] tap0: persist enabled [ 171.936006][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.941376][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.949901][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.955788][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.961102][ T7151] tap0: persist enabled [ 171.967704][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 171.983093][ T7171] device syzkaller0 entered promiscuous mode [ 171.989779][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 171.998322][ T7151] tap0: persist enabled [ 172.002554][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.008037][ T7151] tap0: persist enabled [ 172.012599][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.018593][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.026012][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.031448][ T7151] tap0: persist enabled [ 172.048319][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.055311][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.060663][ T7151] tap0: persist enabled [ 172.065234][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.070654][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.077895][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.083230][ T7151] tap0: persist enabled [ 172.100783][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.124361][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.129802][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.194394][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.199828][ T7151] tap0: persist enabled [ 172.204010][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.220842][ T7151] tap0: persist enabled [ 172.233049][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.240000][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.263311][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.268900][ T7151] tap0: persist enabled [ 172.275300][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.281588][ T7187] device sit0 left promiscuous mode [ 172.340869][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.347785][ T7151] tap0: persist enabled [ 172.351981][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.357543][ T7151] tap0: persist enabled [ 172.361761][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 172.442813][ T7187] device sit0 entered promiscuous mode [ 172.666787][ T7151] tap0: tun_chr_ioctl cmd 1074025675 [ 172.706781][ T7151] tap0: persist enabled [ 172.734703][ T7150] tap0: tun_chr_ioctl cmd 1074025673 [ 174.237768][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.253028][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.552766][ T7368] -1: renamed from syzkaller0 [ 179.187662][ T7391] device sit0 left promiscuous mode [ 179.391952][ T7397] device sit0 entered promiscuous mode [ 179.968825][ T7456] device sit0 left promiscuous mode [ 181.860498][ T7544] device veth1_macvtap left promiscuous mode [ 182.024054][ T7553] veth1_to_team: mtu less than device minimum [ 183.229349][ T7603] device veth0_vlan left promiscuous mode [ 183.244254][ T7603] device veth0_vlan entered promiscuous mode [ 183.285968][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.304748][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.312688][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.320455][ T1367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.979890][ T7678] device syzkaller0 entered promiscuous mode [ 185.634941][ T7682] device sit0 entered promiscuous mode [ 186.877370][ T7721] device syzkaller0 entered promiscuous mode [ 188.111989][ T7777] device veth0_vlan left promiscuous mode [ 188.118051][ T7777] device veth0_vlan entered promiscuous mode [ 188.125474][ T7777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.150733][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.158837][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.166261][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.476533][ T28] audit: type=1400 audit(1793527371.534:163): avc: denied { create } for pid=7917 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.570351][ T8079] nr0: port 1(veth0_macvtap) entered blocking state [ 193.578617][ T8079] nr0: port 1(veth0_macvtap) entered disabled state [ 193.647492][ T8079] device veth0_macvtap entered promiscuous mode [ 193.890490][ T8110] device syzkaller0 entered promiscuous mode [ 194.150798][ T8124] device wg2 left promiscuous mode [ 194.262066][ T8124] device wg2 entered promiscuous mode [ 194.853394][ T8154] veth1_to_team: mtu less than device minimum [ 194.895643][ T8154] veth1_to_team: mtu less than device minimum [ 195.018506][ T8154] veth1_to_team: mtu less than device minimum [ 195.061645][ T8154] veth1_to_team: mtu less than device minimum [ 195.220242][ T8154] veth1_to_team: mtu less than device minimum [ 195.297167][ T8154] veth1_to_team: mtu less than device minimum [ 195.303333][ T8154] veth1_to_team: mtu less than device minimum [ 195.338396][ T8154] veth1_to_team: mtu less than device minimum [ 195.408836][ T8154] veth1_to_team: mtu less than device minimum [ 195.498732][ T8154] veth1_to_team: mtu less than device minimum [ 196.544729][ T8229] device syzkaller0 entered promiscuous mode [ 196.673525][ T8237] device wg2 entered promiscuous mode [ 196.972391][ T8260] device sit0 left promiscuous mode [ 197.051257][ T8266] device sit0 entered promiscuous mode [ 198.108349][ T8323] device syzkaller0 entered promiscuous mode [ 198.581714][ T8349] device wg2 left promiscuous mode [ 198.893466][ T8376] device sit0 left promiscuous mode [ 198.948058][ T8378] device sit0 entered promiscuous mode [ 200.831400][ T8473] device wg2 left promiscuous mode [ 200.895879][ T8476] device wg2 entered promiscuous mode [ 201.473309][ T8512] device syzkaller0 entered promiscuous mode [ 203.596284][ T8590] device syzkaller0 entered promiscuous mode [ 204.059860][ T8638] device macsec0 entered promiscuous mode [ 204.910821][ T28] audit: type=1400 audit(1793527385.964:164): avc: denied { create } for pid=8661 comm="syz.4.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.070611][ T8692] device veth1_macvtap left promiscuous mode [ 205.077372][ T8692] device macsec0 left promiscuous mode [ 205.568634][ T8710] bridge0: port 3(team_slave_1) entered blocking state [ 205.591840][ T8710] bridge0: port 3(team_slave_1) entered disabled state [ 205.626590][ T8710] device team_slave_1 entered promiscuous mode [ 207.214116][ T8762] tap1: tun_chr_ioctl cmd 1074812118 [ 207.253498][ T8762] tap1: tun_chr_ioctl cmd 1074025681 [ 207.279850][ T8766] -: renamed from syzkaller0 [ 211.181628][ T8880] device syzkaller0 entered promiscuous mode [ 211.516903][ T8923] tap0: tun_chr_ioctl cmd 1074025677 [ 211.564281][ T8923] tap0: linktype set to 6 [ 214.908109][ T8970] device syzkaller0 entered promiscuous mode [ 214.945337][ T8977] device syzkaller0 entered promiscuous mode [ 215.027361][ T8985] device syzkaller0 entered promiscuous mode [ 215.033585][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 216.080974][ T9026] device GPL entered promiscuous mode [ 216.309431][ T9046] device syzkaller0 entered promiscuous mode [ 218.952413][ T9087] device syzkaller0 entered promiscuous mode [ 219.172256][ T9100] device sit0 left promiscuous mode [ 219.185513][ T9103] device sit0 entered promiscuous mode [ 222.395636][ T9319] device lo left promiscuous mode [ 225.511876][ T9339] ªªªªª6: renamed from veth0_vlan [ 226.321214][ T9367] device bridge0 entered promiscuous mode [ 228.511905][ T9386] device syzkaller0 entered promiscuous mode [ 228.891276][ T9424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.953561][ T9429] device veth0_vlan left promiscuous mode [ 228.969461][ T9429] device veth0_vlan entered promiscuous mode [ 229.038450][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.046929][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.060042][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.231775][ T9456] device wg2 left promiscuous mode [ 229.264320][ T9456] device wg2 entered promiscuous mode [ 229.490759][ T9474] device veth1_macvtap left promiscuous mode [ 229.578161][ T9473] device syzkaller0 entered promiscuous mode [ 230.277031][ T9519] tap0: tun_chr_ioctl cmd 1074025673 [ 231.301931][ T28] audit: type=1400 audit(1793527412.354:165): avc: denied { create } for pid=9570 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.387999][ T9773] device sit0 left promiscuous mode [ 237.423889][ T9777] device syzkaller0 entered promiscuous mode [ 237.711131][ T9804] device syzkaller0 entered promiscuous mode [ 237.923812][ T9838] device syzkaller0 entered promiscuous mode [ 238.329286][ T9873] pimreg: tun_chr_ioctl cmd 1074025675 [ 238.367219][ T9873] pimreg: persist disabled [ 240.192749][ T9916] device syzkaller0 entered promiscuous mode [ 241.584190][T10004] device syzkaller0 entered promiscuous mode [ 245.198565][T10122] device syzkaller0 entered promiscuous mode [ 250.766908][T10257] GPL: port 1(erspan0) entered blocking state [ 250.774562][T10257] GPL: port 1(erspan0) entered disabled state [ 250.781193][T10257] device erspan0 entered promiscuous mode [ 251.161566][T10308] device wg2 entered promiscuous mode [ 255.286417][T10589] device syzkaller0 entered promiscuous mode [ 255.382190][ T5735] syzkaller0: tun_net_xmit 76 [ 255.387023][ T5735] syzkaller0: tun_net_xmit 48 [ 255.405176][ T310] syzkaller0: tun_net_xmit 76 [ 257.975137][ T28] audit: type=1400 audit(1793527439.034:166): avc: denied { create } for pid=10708 comm="syz.3.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.523985][T10739] device syzkaller0 entered promiscuous mode [ 258.965459][T10754] tap0: tun_chr_ioctl cmd 1074025677 [ 258.970853][T10754] tap0: linktype set to 6 [ 259.276200][T10758] tap0: tun_chr_ioctl cmd 1074025673 [ 259.281788][T10757] tap0: tun_chr_ioctl cmd 1074025677 [ 259.293300][T10757] tap0: linktype set to 6 [ 259.523962][T10774] device veth0_to_team left promiscuous mode [ 259.537954][T10774] bridge0: port 3(veth0_to_team) entered disabled state [ 259.587006][T10774] device bridge_slave_1 left promiscuous mode [ 259.600951][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.640390][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.907958][T10777] device wg2 left promiscuous mode [ 260.102366][T10777] device wg2 entered promiscuous mode [ 260.445180][ T28] audit: type=1400 audit(1793527441.504:167): avc: denied { create } for pid=10785 comm="syz.3.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.977936][T10816] device syzkaller0 entered promiscuous mode [ 262.312014][T10831] device syzkaller0 entered promiscuous mode [ 262.894330][T10884] device veth1_macvtap entered promiscuous mode [ 262.959313][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.652804][T10928] device wg2 left promiscuous mode [ 266.728635][T10934] device wg2 entered promiscuous mode [ 268.134087][T10965] device syzkaller0 entered promiscuous mode [ 271.506356][ T290] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 272.303391][ T290] CPU: 1 PID: 290 Comm: syz-executor Not tainted syzkaller #0 [ 272.310900][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 272.320963][ T290] Call Trace: [ 272.324254][ T290] [ 272.327193][ T290] __dump_stack+0x21/0x24 [ 272.331535][ T290] dump_stack_lvl+0x110/0x170 [ 272.336245][ T290] ? __cfi_dump_stack_lvl+0x8/0x8 [ 272.341281][ T290] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 272.347128][ T290] ? ___ratelimit+0x40a/0x590 [ 272.351838][ T290] dump_stack+0x15/0x24 [ 272.356002][ T290] dump_header+0xdb/0x660 [ 272.360348][ T290] ? __cfi_gfp_zone+0x10/0x10 [ 272.365052][ T290] oom_kill_process+0x32a/0x410 [ 272.369917][ T290] ? kvm_sched_clock_read+0x18/0x40 [ 272.375139][ T290] out_of_memory+0x630/0x930 [ 272.379744][ T290] ? __cfi_out_of_memory+0x10/0x10 [ 272.384869][ T290] mem_cgroup_out_of_memory+0x2be/0x390 [ 272.390426][ T290] ? __kasan_check_write+0x14/0x20 [ 272.395566][ T290] ? mem_cgroup_oom_trylock+0x360/0x360 [ 272.401127][ T290] try_charge_memcg+0xb8a/0x1650 [ 272.406083][ T290] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 272.411468][ T290] ? __alloc_pages+0x610/0x610 [ 272.416264][ T290] ? __cfi_gfp_zone+0x10/0x10 [ 272.421047][ T290] ? unwind_get_return_address+0x4d/0x90 [ 272.426696][ T290] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 272.432869][ T290] ? __alloc_pages+0x1fa/0x610 [ 272.437660][ T290] charge_memcg+0x81/0x1f0 [ 272.442123][ T290] __mem_cgroup_charge+0x93/0x290 [ 272.447158][ T290] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 272.452807][ T290] wp_page_copy+0x488/0x1490 [ 272.457407][ T290] ? __cfi_avc_has_perm+0x10/0x10 [ 272.462447][ T290] ? memcpy+0x56/0x70 [ 272.466442][ T290] ? selinux_inode_getattr+0x2c3/0x3d0 [ 272.471916][ T290] ? fault_dirty_shared_page+0x310/0x310 [ 272.477571][ T290] do_wp_page+0x9b5/0xf70 [ 272.481910][ T290] handle_mm_fault+0x114f/0x26b0 [ 272.486869][ T290] ? __cfi_handle_mm_fault+0x10/0x10 [ 272.492172][ T290] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 272.497383][ T290] ? debug_smp_processor_id+0x17/0x20 [ 272.502776][ T290] do_user_addr_fault+0x900/0x1030 [ 272.507910][ T290] ? debug_smp_processor_id+0x17/0x20 [ 272.513298][ T290] exc_page_fault+0x51/0xb0 [ 272.517811][ T290] asm_exc_page_fault+0x27/0x30 [ 272.522760][ T290] RIP: 0033:0x7f3c077640e0 [ 272.527181][ T290] Code: 5d 29 00 48 8d 0c 1e 49 39 d0 49 89 48 60 0f 95 c2 48 29 d8 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 56 08 <48> 89 41 08 48 8d 4e 10 eb b0 48 8d 0d 7f f0 0c 00 ba 9e 10 00 00 [ 272.546794][ T290] RSP: 002b:00007ffe19037b60 EFLAGS: 00010206 [ 272.552868][ T290] RAX: 00000000000186f1 RBX: 0000000000008040 RCX: 000055557cec2910 [ 272.560858][ T290] RDX: 0000000000008041 RSI: 000055557ceba8d0 RDI: 0000000000000004 [ 272.568848][ T290] RBP: 0000000000000802 R08: 00007f3c079f9e20 R09: 0000000000000001 [ 272.576830][ T290] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008030 [ 272.584823][ T290] R13: 0000000000000000 R14: 00007f3c079f9e80 R15: 0000000000000000 [ 272.592806][ T290] [ 272.636254][ T290] memory: usage 307200kB, limit 307200kB, failcnt 26537 [ 272.643422][ T290] memory+swap: usage 431352kB, limit 9007199254740988kB, failcnt 0 [ 272.651404][ T290] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 272.658302][ T290] Memory cgroup stats for /syz4: [ 272.658442][ T290] anon 2453504 [ 272.658442][ T290] file 311255040 [ 272.658442][ T290] kernel 0 [ 272.658442][ T290] kernel_stack 0 [ 272.658442][ T290] pagetables 0 [ 272.658442][ T290] sec_pagetables 0 [ 272.658442][ T290] percpu 0 [ 272.658442][ T290] sock 0 [ 272.658442][ T290] vmalloc 0 [ 272.658442][ T290] shmem 311250944 [ 272.658442][ T290] file_mapped 4096 [ 272.658442][ T290] file_dirty 4096 [ 272.658442][ T290] file_writeback 0 [ 272.658442][ T290] swapcached 864256 [ 272.658442][ T290] anon_thp 0 [ 272.658442][ T290] file_thp 0 [ 272.658442][ T290] shmem_thp 0 [ 272.658442][ T290] inactive_anon 295464960 [ 272.658442][ T290] active_anon 19103744 [ 272.658442][ T290] inactive_file 4096 [ 272.658442][ T290] active_file 0 [ 272.658442][ T290] unevictable 0 [ 272.658442][ T290] slab_reclaimable 0 [ 272.658442][ T290] slab_unreclaimable 0 [ 272.658442][ T290] slab 0 [ 272.658442][ T290] workingset_refault_anon 0 [ 272.801252][ T290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10598,uid=0 [ 272.865199][ T290] Memory cgroup out of memory: Killed process 10598 (syz.4.2624) total-vm:90364kB, anon-rss:1492kB, file-rss:21632kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 273.280488][T10595] syz.4.2624 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 273.355375][T10595] CPU: 1 PID: 10595 Comm: syz.4.2624 Not tainted syzkaller #0 [ 273.362972][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 273.373040][T10595] Call Trace: [ 273.376325][T10595] [ 273.379263][T10595] __dump_stack+0x21/0x24 [ 273.383612][T10595] dump_stack_lvl+0x110/0x170 [ 273.388302][T10595] ? __cfi_dump_stack_lvl+0x8/0x8 [ 273.393340][T10595] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 273.399196][T10595] ? ___ratelimit+0x40a/0x590 [ 273.403899][T10595] dump_stack+0x15/0x24 [ 273.408091][T10595] dump_header+0xdb/0x660 [ 273.412471][T10595] ? __cfi_gfp_zone+0x10/0x10 [ 273.417175][T10595] oom_kill_process+0x32a/0x410 [ 273.422058][T10595] out_of_memory+0x630/0x930 [ 273.426687][T10595] ? __cfi_out_of_memory+0x10/0x10 [ 273.431829][T10595] mem_cgroup_out_of_memory+0x2be/0x390 [ 273.437387][T10595] ? __kasan_check_write+0x14/0x20 [ 273.442518][T10595] ? mem_cgroup_oom_trylock+0x360/0x360 [ 273.448081][T10595] try_charge_memcg+0xb8a/0x1650 [ 273.453055][T10595] ? __kasan_check_write+0x14/0x20 [ 273.458190][T10595] ? __set_page_owner+0x50/0x60 [ 273.463061][T10595] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 273.468453][T10595] ? prep_new_page+0x1c/0x110 [ 273.473146][T10595] ? get_page_from_freelist+0x2ca9/0x2d20 [ 273.478885][T10595] ? up_read+0x56/0x1d0 [ 273.483066][T10595] charge_memcg+0x81/0x1f0 [ 273.487502][T10595] __mem_cgroup_charge+0x93/0x290 [ 273.492540][T10595] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 273.498205][T10595] __filemap_add_folio+0x169/0xc20 [ 273.503337][T10595] ? __cfi___filemap_add_folio+0x10/0x10 [ 273.508986][T10595] ? __cfi_workingset_update_node+0x10/0x10 [ 273.514901][T10595] ? xas_start+0x31d/0x3e0 [ 273.519479][T10595] filemap_add_folio+0x5e/0x260 [ 273.524342][T10595] __filemap_get_folio+0x77f/0xa70 [ 273.529468][T10595] ? __cfi___filemap_get_folio+0x10/0x10 [ 273.535123][T10595] filemap_fault+0x9c3/0x1370 [ 273.539818][T10595] ? __cfi_filemap_fault+0x10/0x10 [ 273.544942][T10595] ? __cfi_filemap_map_pages+0x10/0x10 [ 273.550411][T10595] ? _raw_spin_lock_irq+0x95/0xf0 [ 273.555491][T10595] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 273.561047][T10595] ? __kasan_check_write+0x14/0x20 [ 273.566198][T10595] ? vma_data_pages+0xfc/0x130 [ 273.570980][T10595] do_fault+0x19de/0x1e30 [ 273.575331][T10595] ? pte_marker_clear+0x220/0x220 [ 273.580368][T10595] ? copy_page_from_iter_atomic+0x45c/0x1240 [ 273.586360][T10595] handle_mm_fault+0x1363/0x26b0 [ 273.591317][T10595] ? __cfi_handle_mm_fault+0x10/0x10 [ 273.596621][T10595] __get_user_pages+0x34b/0xdb0 [ 273.601510][T10595] ? populate_vma_page_range+0x120/0x120 [ 273.607165][T10595] get_dump_page+0x169/0x640 [ 273.611768][T10595] ? __cfi_get_dump_page+0x10/0x10 [ 273.616893][T10595] ? cgroup_freezing+0x86/0xb0 [ 273.621676][T10595] dump_user_range+0x123/0x630 [ 273.626479][T10595] ? __cfi_dump_user_range+0x10/0x10 [ 273.631773][T10595] ? dump_align+0xfe/0x120 [ 273.636214][T10595] ? dump_emit+0xa8/0xc0 [ 273.640468][T10595] elf_core_dump+0x2b60/0x30b0 [ 273.645284][T10595] ? __cfi_elf_core_dump+0x10/0x10 [ 273.650420][T10595] ? dump_interrupted+0xd0/0xd0 [ 273.655284][T10595] ? 0xffffffffff600000 [ 273.659452][T10595] ? freezing_slow_path+0x10a/0x150 [ 273.664677][T10595] do_coredump+0x160e/0x23a0 [ 273.669308][T10595] ? __cfi_do_coredump+0x10/0x10 [ 273.674280][T10595] ? kmem_cache_free+0x12d/0x300 [ 273.679240][T10595] ? ____kasan_slab_free+0x13d/0x180 [ 273.684546][T10595] ? get_signal+0xac2/0x1700 [ 273.689156][T10595] ? kmem_cache_free+0x12d/0x300 [ 273.694114][T10595] get_signal+0x157d/0x1700 [ 273.698642][T10595] ? __cfi_get_signal+0x10/0x10 [ 273.703540][T10595] arch_do_signal_or_restart+0xd1/0x11c0 [ 273.709200][T10595] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 273.715039][T10595] ? force_sig_fault+0xd9/0x130 [ 273.719921][T10595] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 273.726089][T10595] ? page_fault_oops+0x8b0/0x8b0 [ 273.731078][T10595] ? __bad_area_nosemaphore+0x303/0x630 [ 273.736641][T10595] exit_to_user_mode_loop+0x7a/0xb0 [ 273.741861][T10595] exit_to_user_mode_prepare+0x87/0xd0 [ 273.747377][T10595] irqentry_exit_to_user_mode+0x9/0x10 [ 273.752859][T10595] irqentry_exit+0x12/0x40 [ 273.757300][T10595] exc_page_fault+0x5e/0xb0 [ 273.761825][T10595] asm_exc_page_fault+0x27/0x30 [ 273.766688][T10595] RIP: 0033:0x7f3c07654cb7 [ 273.771116][T10595] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 273.790731][T10595] RSP: 002b:00007f3c086f5120 EFLAGS: 00010202 [ 273.796814][T10595] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c0779f559 [ 273.804793][T10595] RDX: 00007f3c086f5140 RSI: 00007f3c086f5270 RDI: 000000000000000b [ 273.812773][T10595] RBP: 00007f3c07836b50 R08: 0000000000000000 R09: 0000000000000000 [ 273.820757][T10595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.828737][T10595] R13: 00007f3c07a26128 R14: 00007f3c07a26090 R15: 00007ffe19037958 [ 273.836724][T10595] [ 273.851728][T10595] memory: usage 304080kB, limit 307200kB, failcnt 26883 [ 273.878722][T10595] memory+swap: usage 419480kB, limit 9007199254740988kB, failcnt 0 [ 273.914066][T10595] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 273.918595][T11045] device macsec0 entered promiscuous mode [ 273.961411][T10595] Memory cgroup stats for /syz4: [ 273.981714][T10595] anon 2338816 [ 273.981714][T10595] file 311095296 [ 273.981714][T10595] kernel 0 [ 273.981714][T10595] kernel_stack 0 [ 273.981714][T10595] pagetables 0 [ 273.981714][T10595] sec_pagetables 0 [ 273.981714][T10595] percpu 0 [ 273.981714][T10595] sock 0 [ 273.981714][T10595] vmalloc 0 [ 273.981714][T10595] shmem 307331072 [ 273.981714][T10595] file_mapped 3076096 [ 273.981714][T10595] file_dirty 8192 [ 273.981714][T10595] file_writeback 0 [ 273.981714][T10595] swapcached 110592 [ 273.981714][T10595] anon_thp 0 [ 273.981714][T10595] file_thp 0 [ 273.981714][T10595] shmem_thp 0 [ 273.981714][T10595] inactive_anon 95109120 [ 273.981714][T10595] active_anon 214667264 [ 273.981714][T10595] inactive_file 0 [ 273.981714][T10595] active_file 3764224 [ 273.981714][T10595] unevictable 0 [ 273.981714][T10595] slab_reclaimable 0 [ 273.981714][T10595] slab_unreclaimable 0 [ 273.981714][T10595] slab 0 [ 273.981714][T10595] workingset_refault_anon 0 [ 274.397828][T10595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10641,uid=0 [ 274.449297][T10595] Memory cgroup out of memory: Killed process 10641 (syz.4.2624) total-vm:90760kB, anon-rss:1516kB, file-rss:21592kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 274.665578][T11071] device veth0_vlan left promiscuous mode [ 274.714151][T11071] device veth0_vlan entered promiscuous mode [ 274.959095][ T8051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.974853][ T8051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.095251][ T8051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.640260][T11098] device sit0 entered promiscuous mode [ 276.945566][T11169] device macsec0 left promiscuous mode [ 277.348422][T10599] syz.4.2624 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 277.577435][T10599] CPU: 1 PID: 10599 Comm: syz.4.2624 Not tainted syzkaller #0 [ 277.585036][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.595097][T10599] Call Trace: [ 277.598389][T10599] [ 277.601332][T10599] __dump_stack+0x21/0x24 [ 277.605681][T10599] dump_stack_lvl+0x110/0x170 [ 277.610371][T10599] ? __cfi_dump_stack_lvl+0x8/0x8 [ 277.615416][T10599] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 277.621269][T10599] ? ___ratelimit+0x40a/0x590 [ 277.625967][T10599] dump_stack+0x15/0x24 [ 277.630148][T10599] dump_header+0xdb/0x660 [ 277.634501][T10599] ? __cfi_gfp_zone+0x10/0x10 [ 277.639235][T10599] oom_kill_process+0x32a/0x410 [ 277.644106][T10599] ? kvm_sched_clock_read+0x18/0x40 [ 277.649340][T10599] out_of_memory+0x630/0x930 [ 277.653960][T10599] ? __cfi_out_of_memory+0x10/0x10 [ 277.659095][T10599] mem_cgroup_out_of_memory+0x2be/0x390 [ 277.664659][T10599] ? __kasan_check_write+0x14/0x20 [ 277.669787][T10599] ? mem_cgroup_oom_trylock+0x360/0x360 [ 277.675357][T10599] try_charge_memcg+0xb8a/0x1650 [ 277.680326][T10599] ? __kasan_check_write+0x14/0x20 [ 277.685461][T10599] ? __set_page_owner+0x50/0x60 [ 277.690330][T10599] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 277.695744][T10599] ? prep_new_page+0x1c/0x110 [ 277.700475][T10599] ? get_page_from_freelist+0x2ca9/0x2d20 [ 277.706225][T10599] ? up_read+0x56/0x1d0 [ 277.710408][T10599] charge_memcg+0x81/0x1f0 [ 277.714859][T10599] __mem_cgroup_charge+0x93/0x290 [ 277.719897][T10599] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 277.725554][T10599] __filemap_add_folio+0x169/0xc20 [ 277.730684][T10599] ? __cfi___filemap_add_folio+0x10/0x10 [ 277.736333][T10599] ? __cfi_workingset_update_node+0x10/0x10 [ 277.742268][T10599] ? xas_start+0x31d/0x3e0 [ 277.746727][T10599] filemap_add_folio+0x5e/0x260 [ 277.751592][T10599] __filemap_get_folio+0x77f/0xa70 [ 277.756724][T10599] ? __cfi___filemap_get_folio+0x10/0x10 [ 277.762426][T10599] filemap_fault+0x9c3/0x1370 [ 277.767127][T10599] ? __cfi_filemap_fault+0x10/0x10 [ 277.772260][T10599] ? __cfi_filemap_map_pages+0x10/0x10 [ 277.777745][T10599] ? _raw_spin_lock_irq+0x95/0xf0 [ 277.782785][T10599] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 277.788345][T10599] ? __kasan_check_write+0x14/0x20 [ 277.793473][T10599] ? vma_data_pages+0xfc/0x130 [ 277.798275][T10599] do_fault+0x19de/0x1e30 [ 277.802623][T10599] ? pte_marker_clear+0x220/0x220 [ 277.807673][T10599] ? copy_page_from_iter_atomic+0x45c/0x1240 [ 277.813683][T10599] handle_mm_fault+0x1363/0x26b0 [ 277.818658][T10599] ? __cfi_handle_mm_fault+0x10/0x10 [ 277.823964][T10599] __get_user_pages+0x34b/0xdb0 [ 277.828832][T10599] ? populate_vma_page_range+0x120/0x120 [ 277.834485][T10599] get_dump_page+0x169/0x640 [ 277.839100][T10599] ? __cfi_get_dump_page+0x10/0x10 [ 277.844231][T10599] ? cgroup_freezing+0x86/0xb0 [ 277.849067][T10599] dump_user_range+0x123/0x630 [ 277.853895][T10599] ? __cfi_dump_user_range+0x10/0x10 [ 277.859218][T10599] ? dump_align+0xfe/0x120 [ 277.863661][T10599] ? dump_emit+0xa8/0xc0 [ 277.867944][T10599] elf_core_dump+0x2b60/0x30b0 [ 277.872730][T10599] ? __cfi_elf_core_dump+0x10/0x10 [ 277.877882][T10599] ? dump_interrupted+0xd0/0xd0 [ 277.882742][T10599] ? 0xffffffffff600000 [ 277.886919][T10599] ? freezing_slow_path+0x10a/0x150 [ 277.892137][T10599] do_coredump+0x160e/0x23a0 [ 277.896764][T10599] ? __cfi_do_coredump+0x10/0x10 [ 277.901728][T10599] ? kmem_cache_free+0x12d/0x300 [ 277.906682][T10599] ? ____kasan_slab_free+0x13d/0x180 [ 277.911991][T10599] ? get_signal+0xac2/0x1700 [ 277.916605][T10599] ? kmem_cache_free+0x12d/0x300 [ 277.921564][T10599] get_signal+0x157d/0x1700 [ 277.926100][T10599] ? __cfi_get_signal+0x10/0x10 [ 277.930978][T10599] arch_do_signal_or_restart+0xd1/0x11c0 [ 277.936626][T10599] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 277.942453][T10599] ? force_sig_fault+0xd9/0x130 [ 277.947323][T10599] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 277.953501][T10599] ? page_fault_oops+0x8b0/0x8b0 [ 277.958467][T10599] ? __bad_area_nosemaphore+0x303/0x630 [ 277.964034][T10599] exit_to_user_mode_loop+0x7a/0xb0 [ 277.969272][T10599] exit_to_user_mode_prepare+0x87/0xd0 [ 277.974792][T10599] irqentry_exit_to_user_mode+0x9/0x10 [ 277.980269][T10599] irqentry_exit+0x12/0x40 [ 277.984704][T10599] exc_page_fault+0x5e/0xb0 [ 277.989228][T10599] asm_exc_page_fault+0x27/0x30 [ 277.994111][T10599] RIP: 0033:0x7f3c07654cb7 [ 277.998534][T10599] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 278.018208][T10599] RSP: 002b:00007f3c086f5120 EFLAGS: 00010202 [ 278.024289][T10599] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c0779f559 [ 278.032274][T10599] RDX: 00007f3c086f5140 RSI: 00007f3c086f5270 RDI: 000000000000000b [ 278.040259][T10599] RBP: 00007f3c07836b50 R08: 0000000000000000 R09: 0000000000000000 [ 278.048241][T10599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.056248][T10599] R13: 00007f3c07a26128 R14: 00007f3c07a26090 R15: 00007ffe19037958 [ 278.064238][T10599] [ 278.444240][T10599] memory: usage 307200kB, limit 307200kB, failcnt 32019 [ 278.484332][T10599] memory+swap: usage 431520kB, limit 9007199254740988kB, failcnt 0 [ 278.518753][T10599] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 278.555518][T10599] Memory cgroup stats for /syz4: [ 278.555698][T10599] anon 2072576 [ 278.555698][T10599] file 311820288 [ 278.555698][T10599] kernel 0 [ 278.555698][T10599] kernel_stack 0 [ 278.555698][T10599] pagetables 0 [ 278.555698][T10599] sec_pagetables 0 [ 278.555698][T10599] percpu 0 [ 278.555698][T10599] sock 0 [ 278.555698][T10599] vmalloc 0 [ 278.555698][T10599] shmem 311746560 [ 278.555698][T10599] file_mapped 8192 [ 278.555698][T10599] file_dirty 8192 [ 278.555698][T10599] file_writeback 0 [ 278.555698][T10599] swapcached 679936 [ 278.555698][T10599] anon_thp 0 [ 278.555698][T10599] file_thp 0 [ 278.555698][T10599] shmem_thp 0 [ 278.555698][T10599] inactive_anon 115494912 [ 278.555698][T10599] active_anon 199004160 [ 278.555698][T10599] inactive_file 65536 [ 278.555698][T10599] active_file 8192 [ 278.555698][T10599] unevictable 0 [ 278.555698][T10599] slab_reclaimable 0 [ 278.555698][T10599] slab_unreclaimable 0 [ 278.555698][T10599] slab 0 [ 278.555698][T10599] workingset_refault_anon 0 [ 278.774521][T10599] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10649,uid=0 [ 278.824361][T10599] Memory cgroup out of memory: Killed process 10649 (syz.4.2624) total-vm:90892kB, anon-rss:1524kB, file-rss:25180kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 278.868705][T11239] device syzkaller0 entered promiscuous mode [ 279.468589][T11283] device veth0_vlan left promiscuous mode [ 279.494665][T11283] device veth0_vlan entered promiscuous mode [ 279.892625][T11314] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.899913][T11314] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.980853][T11314] device bridge0 left promiscuous mode [ 280.177092][T10597] syz.4.2624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 280.331924][T10597] CPU: 1 PID: 10597 Comm: syz.4.2624 Not tainted syzkaller #0 [ 280.339442][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 280.349507][T10597] Call Trace: [ 280.352816][T10597] [ 280.355752][T10597] __dump_stack+0x21/0x24 [ 280.360101][T10597] dump_stack_lvl+0x110/0x170 [ 280.364787][T10597] ? __cfi_dump_stack_lvl+0x8/0x8 [ 280.369822][T10597] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 280.375637][T10597] ? ___ratelimit+0x40a/0x590 [ 280.380353][T10597] dump_stack+0x15/0x24 [ 280.384517][T10597] dump_header+0xdb/0x660 [ 280.388883][T10597] ? __cfi_gfp_zone+0x10/0x10 [ 280.393596][T10597] oom_kill_process+0x32a/0x410 [ 280.398465][T10597] ? kvm_sched_clock_read+0x18/0x40 [ 280.403688][T10597] out_of_memory+0x630/0x930 [ 280.408295][T10597] ? __cfi_out_of_memory+0x10/0x10 [ 280.413445][T10597] mem_cgroup_out_of_memory+0x2be/0x390 [ 280.419003][T10597] ? __kasan_check_write+0x14/0x20 [ 280.424138][T10597] ? mem_cgroup_oom_trylock+0x360/0x360 [ 280.429700][T10597] try_charge_memcg+0xb8a/0x1650 [ 280.434718][T10597] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 280.440104][T10597] ? __asan_set_shadow_00+0xe/0x10 [ 280.445233][T10597] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 280.451148][T10597] charge_memcg+0x81/0x1f0 [ 280.455613][T10597] __mem_cgroup_charge+0x93/0x290 [ 280.460655][T10597] ? xas_start+0x31d/0x3e0 [ 280.465082][T10597] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 280.470728][T10597] ? xas_load+0x3a2/0x3c0 [ 280.475073][T10597] shmem_add_to_page_cache+0x5b1/0xae0 [ 280.480586][T10597] ? put_page+0xb0/0xb0 [ 280.484763][T10597] ? call_rcu+0xb84/0xf50 [ 280.489111][T10597] shmem_get_folio_gfp+0xef9/0x20f0 [ 280.494344][T10597] shmem_write_begin+0xea/0x2c0 [ 280.499230][T10597] generic_perform_write+0x32d/0x740 [ 280.504535][T10597] ? __cfi_generic_perform_write+0x10/0x10 [ 280.510357][T10597] ? __cfi_file_update_time+0x10/0x10 [ 280.515750][T10597] ? __get_user_pages+0xb5d/0xdb0 [ 280.520795][T10597] ? generic_write_checks_count+0x369/0x450 [ 280.526754][T10597] __generic_file_write_iter+0x17a/0x230 [ 280.532420][T10597] generic_file_write_iter+0xae/0x310 [ 280.537816][T10597] __kernel_write_iter+0x2a9/0x6a0 [ 280.542943][T10597] ? __cfi___kernel_write_iter+0x10/0x10 [ 280.548631][T10597] ? cgroup_freezing+0x86/0xb0 [ 280.553418][T10597] ? iov_iter_bvec+0x53/0x1f0 [ 280.558133][T10597] dump_user_range+0x3e6/0x630 [ 280.562911][T10597] ? __cfi_dump_user_range+0x10/0x10 [ 280.568204][T10597] ? dump_align+0xfe/0x120 [ 280.572675][T10597] ? dump_emit+0xa8/0xc0 [ 280.576927][T10597] elf_core_dump+0x2b60/0x30b0 [ 280.581751][T10597] ? __cfi_elf_core_dump+0x10/0x10 [ 280.586895][T10597] ? dump_interrupted+0xd0/0xd0 [ 280.591758][T10597] ? 0xffffffffff600000 [ 280.595925][T10597] ? freezing_slow_path+0x10a/0x150 [ 280.601187][T10597] do_coredump+0x160e/0x23a0 [ 280.605794][T10597] ? __cfi_do_coredump+0x10/0x10 [ 280.610758][T10597] ? kmem_cache_free+0x12d/0x300 [ 280.615699][T10597] ? ____kasan_slab_free+0x13d/0x180 [ 280.620993][T10597] ? get_signal+0xac2/0x1700 [ 280.625593][T10597] ? kmem_cache_free+0x12d/0x300 [ 280.630540][T10597] get_signal+0x157d/0x1700 [ 280.635051][T10597] ? __cfi_get_signal+0x10/0x10 [ 280.639927][T10597] arch_do_signal_or_restart+0xd1/0x11c0 [ 280.645576][T10597] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 280.651391][T10597] ? force_sig_fault+0xd9/0x130 [ 280.656247][T10597] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 280.662416][T10597] ? page_fault_oops+0x8b0/0x8b0 [ 280.667384][T10597] ? __bad_area_nosemaphore+0x303/0x630 [ 280.672973][T10597] exit_to_user_mode_loop+0x7a/0xb0 [ 280.678186][T10597] exit_to_user_mode_prepare+0x87/0xd0 [ 280.683645][T10597] irqentry_exit_to_user_mode+0x9/0x10 [ 280.689110][T10597] irqentry_exit+0x12/0x40 [ 280.693532][T10597] exc_page_fault+0x5e/0xb0 [ 280.698060][T10597] asm_exc_page_fault+0x27/0x30 [ 280.702915][T10597] RIP: 0033:0x7f3c07654cb7 [ 280.707335][T10597] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 280.726954][T10597] RSP: 002b:00007f3c086f5120 EFLAGS: 00010202 [ 280.733018][T10597] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c0779f559 [ 280.740999][T10597] RDX: 00007f3c086f5140 RSI: 00007f3c086f5270 RDI: 000000000000000b [ 280.748977][T10597] RBP: 00007f3c07836b50 R08: 0000000000000000 R09: 0000000000000000 [ 280.756982][T10597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.764964][T10597] R13: 00007f3c07a26128 R14: 00007f3c07a26090 R15: 00007ffe19037958 [ 280.772958][T10597] [ 280.815347][T10597] memory: usage 307200kB, limit 307200kB, failcnt 34662 [ 280.823332][T10597] memory+swap: usage 430788kB, limit 9007199254740988kB, failcnt 0 [ 280.832907][T10597] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 280.843267][T10597] Memory cgroup stats for /syz4: [ 280.843414][T10597] anon 1908736 [ 280.843414][T10597] file 311222272 [ 280.843414][T10597] kernel 0 [ 280.843414][T10597] kernel_stack 0 [ 280.843414][T10597] pagetables 0 [ 280.843414][T10597] sec_pagetables 0 [ 280.843414][T10597] percpu 0 [ 280.843414][T10597] sock 0 [ 280.843414][T10597] vmalloc 0 [ 280.843414][T10597] shmem 311205888 [ 280.843414][T10597] file_mapped 8192 [ 280.843414][T10597] file_dirty 8192 [ 280.843414][T10597] file_writeback 1433600 [ 280.843414][T10597] swapcached 1441792 [ 280.843414][T10597] anon_thp 0 [ 280.843414][T10597] file_thp 0 [ 280.843414][T10597] shmem_thp 0 [ 280.843414][T10597] inactive_anon 103616512 [ 280.843414][T10597] active_anon 209629184 [ 280.843414][T10597] inactive_file 0 [ 280.843414][T10597] active_file 16384 [ 280.843414][T10597] unevictable 0 [ 280.843414][T10597] slab_reclaimable 0 [ 280.843414][T10597] slab_unreclaimable 0 [ 280.843414][T10597] slab 0 [ 280.843414][T10597] workingset_refault_anon 0 [ 284.347486][T10597] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10635,uid=0 [ 284.362771][T10597] Memory cgroup out of memory: Killed process 10635 (syz.4.2624) total-vm:90760kB, anon-rss:1516kB, file-rss:24524kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 285.735677][T10603] syz.4.2624 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 285.765034][T10603] CPU: 0 PID: 10603 Comm: syz.4.2624 Not tainted syzkaller #0 [ 285.772525][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 285.782595][T10603] Call Trace: [ 285.785891][T10603] [ 285.788837][T10603] __dump_stack+0x21/0x24 [ 285.793190][T10603] dump_stack_lvl+0x110/0x170 [ 285.797913][T10603] ? __cfi_dump_stack_lvl+0x8/0x8 [ 285.802954][T10603] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 285.808780][T10603] ? ___ratelimit+0x40a/0x590 [ 285.813491][T10603] dump_stack+0x15/0x24 [ 285.817661][T10603] dump_header+0xdb/0x660 [ 285.822017][T10603] ? __cfi_gfp_zone+0x10/0x10 [ 285.826712][T10603] oom_kill_process+0x32a/0x410 [ 285.831605][T10603] out_of_memory+0x630/0x930 [ 285.836244][T10603] ? __cfi_out_of_memory+0x10/0x10 [ 285.841379][T10603] mem_cgroup_out_of_memory+0x2be/0x390 [ 285.846940][T10603] ? __kasan_check_write+0x14/0x20 [ 285.852070][T10603] ? mem_cgroup_oom_trylock+0x360/0x360 [ 285.857632][T10603] try_charge_memcg+0xb8a/0x1650 [ 285.862596][T10603] ? __kasan_check_write+0x14/0x20 [ 285.867738][T10603] ? __set_page_owner+0x50/0x60 [ 285.872610][T10603] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 285.878007][T10603] ? prep_new_page+0x1c/0x110 [ 285.882704][T10603] ? get_page_from_freelist+0x2ca9/0x2d20 [ 285.888449][T10603] ? up_read+0x56/0x1d0 [ 285.892632][T10603] charge_memcg+0x81/0x1f0 [ 285.897095][T10603] __mem_cgroup_charge+0x93/0x290 [ 285.902135][T10603] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 285.907805][T10603] __filemap_add_folio+0x169/0xc20 [ 285.912931][T10603] ? __cfi___filemap_add_folio+0x10/0x10 [ 285.918577][T10603] ? __cfi_workingset_update_node+0x10/0x10 [ 285.924487][T10603] ? xas_start+0x31d/0x3e0 [ 285.928920][T10603] filemap_add_folio+0x5e/0x260 [ 285.933781][T10603] __filemap_get_folio+0x77f/0xa70 [ 285.938909][T10603] ? __cfi___filemap_get_folio+0x10/0x10 [ 285.944551][T10603] ? do_set_pte+0x455/0x560 [ 285.949069][T10603] filemap_fault+0x9c3/0x1370 [ 285.953760][T10603] ? __cfi_filemap_fault+0x10/0x10 [ 285.958883][T10603] ? __cfi_filemap_map_pages+0x10/0x10 [ 285.964353][T10603] ? _raw_spin_lock_irq+0x95/0xf0 [ 285.969389][T10603] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 285.974940][T10603] ? __kasan_check_write+0x14/0x20 [ 285.980076][T10603] ? vma_data_pages+0xfc/0x130 [ 285.984852][T10603] do_fault+0x19de/0x1e30 [ 285.989235][T10603] ? pte_marker_clear+0x220/0x220 [ 285.994289][T10603] ? copy_page_from_iter_atomic+0x45c/0x1240 [ 286.000278][T10603] handle_mm_fault+0x1363/0x26b0 [ 286.005249][T10603] ? __cfi_handle_mm_fault+0x10/0x10 [ 286.010561][T10603] __get_user_pages+0x34b/0xdb0 [ 286.015424][T10603] ? populate_vma_page_range+0x120/0x120 [ 286.021068][T10603] get_dump_page+0x169/0x640 [ 286.025673][T10603] ? __cfi_get_dump_page+0x10/0x10 [ 286.030796][T10603] ? cgroup_freezing+0x86/0xb0 [ 286.035576][T10603] dump_user_range+0x123/0x630 [ 286.040346][T10603] ? __cfi_dump_user_range+0x10/0x10 [ 286.045634][T10603] ? dump_align+0xfe/0x120 [ 286.050063][T10603] ? dump_emit+0xa8/0xc0 [ 286.054324][T10603] elf_core_dump+0x2b60/0x30b0 [ 286.059123][T10603] ? __cfi_elf_core_dump+0x10/0x10 [ 286.064262][T10603] ? dump_interrupted+0xd0/0xd0 [ 286.069129][T10603] ? 0xffffffffff600000 [ 286.073293][T10603] ? freezing_slow_path+0x10a/0x150 [ 286.078506][T10603] do_coredump+0x160e/0x23a0 [ 286.083126][T10603] ? __cfi_do_coredump+0x10/0x10 [ 286.088090][T10603] ? kmem_cache_free+0x12d/0x300 [ 286.093066][T10603] ? ____kasan_slab_free+0x13d/0x180 [ 286.098381][T10603] ? get_signal+0xac2/0x1700 [ 286.102986][T10603] ? kmem_cache_free+0x12d/0x300 [ 286.107947][T10603] get_signal+0x157d/0x1700 [ 286.112469][T10603] ? __cfi_get_signal+0x10/0x10 [ 286.117339][T10603] arch_do_signal_or_restart+0xd1/0x11c0 [ 286.122996][T10603] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 286.128817][T10603] ? force_sig_fault+0xd9/0x130 [ 286.133684][T10603] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 286.139852][T10603] ? page_fault_oops+0x8b0/0x8b0 [ 286.144858][T10603] ? __bad_area_nosemaphore+0x303/0x630 [ 286.150433][T10603] exit_to_user_mode_loop+0x7a/0xb0 [ 286.155655][T10603] exit_to_user_mode_prepare+0x87/0xd0 [ 286.161121][T10603] irqentry_exit_to_user_mode+0x9/0x10 [ 286.166622][T10603] irqentry_exit+0x12/0x40 [ 286.171053][T10603] exc_page_fault+0x5e/0xb0 [ 286.175573][T10603] asm_exc_page_fault+0x27/0x30 [ 286.180441][T10603] RIP: 0033:0x7f3c07654cb7 [ 286.184864][T10603] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 286.204475][T10603] RSP: 002b:00007f3c086f5120 EFLAGS: 00010202 [ 286.210551][T10603] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c0779f559 [ 286.218531][T10603] RDX: 00007f3c086f5140 RSI: 00007f3c086f5270 RDI: 000000000000000b [ 286.226517][T10603] RBP: 00007f3c07836b50 R08: 0000000000000000 R09: 0000000000000000 [ 286.234505][T10603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.242508][T10603] R13: 00007f3c07a26128 R14: 00007f3c07a26090 R15: 00007ffe19037958 [ 286.250512][T10603] [ 286.282783][T10603] memory: usage 304920kB, limit 307200kB, failcnt 37449 [ 286.299816][T10603] memory+swap: usage 426060kB, limit 9007199254740988kB, failcnt 0 [ 286.650330][T10603] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 286.657491][T10603] Memory cgroup stats for /syz4: [ 286.657626][T10603] anon 1835008 [ 286.657626][T10603] file 299356160 [ 286.657626][T10603] kernel 0 [ 286.657626][T10603] kernel_stack 0 [ 286.657626][T10603] pagetables 0 [ 286.657626][T10603] sec_pagetables 0 [ 286.657626][T10603] percpu 0 [ 286.657626][T10603] sock 0 [ 286.657626][T10603] vmalloc 0 [ 286.657626][T10603] shmem 299212800 [ 286.657626][T10603] file_mapped 8192 [ 286.657626][T10603] file_dirty 8192 [ 286.657626][T10603] file_writeback 741376 [ 286.657626][T10603] swapcached 749568 [ 286.657626][T10603] anon_thp 0 [ 286.657626][T10603] file_thp 0 [ 286.657626][T10603] shmem_thp 0 [ 286.657626][T10603] inactive_anon 16044032 [ 286.657626][T10603] active_anon 284442624 [ 286.657626][T10603] inactive_file 12288 [ 286.657626][T10603] active_file 131072 [ 286.657626][T10603] unevictable 0 [ 286.657626][T10603] slab_reclaimable 0 [ 286.657626][T10603] slab_unreclaimable 0 [ 286.657626][T10603] slab 0 [ 286.657626][T10603] workingset_refault_anon 0 [ 286.756045][T10603] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10633,uid=0 [ 286.776032][T10603] Memory cgroup out of memory: Killed process 10633 (syz.4.2624) total-vm:90628kB, anon-rss:1508kB, file-rss:24348kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 288.927961][T11652] device wg2 entered promiscuous mode [ 288.999473][T10599] syz.4.2624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 289.009996][T10599] CPU: 1 PID: 10599 Comm: syz.4.2624 Not tainted syzkaller #0 [ 289.017485][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.027562][T10599] Call Trace: [ 289.030845][T10599] [ 289.033779][T10599] __dump_stack+0x21/0x24 [ 289.038116][T10599] dump_stack_lvl+0x110/0x170 [ 289.042804][T10599] ? __cfi_dump_stack_lvl+0x8/0x8 [ 289.047839][T10599] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 289.053656][T10599] ? ___ratelimit+0x40a/0x590 [ 289.058355][T10599] dump_stack+0x15/0x24 [ 289.062522][T10599] dump_header+0xdb/0x660 [ 289.066881][T10599] ? __cfi_gfp_zone+0x10/0x10 [ 289.071590][T10599] oom_kill_process+0x32a/0x410 [ 289.076477][T10599] ? kvm_sched_clock_read+0x18/0x40 [ 289.081691][T10599] out_of_memory+0x630/0x930 [ 289.086299][T10599] ? __cfi_out_of_memory+0x10/0x10 [ 289.091426][T10599] mem_cgroup_out_of_memory+0x2be/0x390 [ 289.096991][T10599] ? __kasan_check_write+0x14/0x20 [ 289.102113][T10599] ? mem_cgroup_oom_trylock+0x360/0x360 [ 289.107675][T10599] try_charge_memcg+0xb8a/0x1650 [ 289.112634][T10599] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 289.118022][T10599] ? __asan_set_shadow_00+0xe/0x10 [ 289.123157][T10599] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 289.129115][T10599] charge_memcg+0x81/0x1f0 [ 289.133546][T10599] __mem_cgroup_charge+0x93/0x290 [ 289.138628][T10599] ? xas_start+0x31d/0x3e0 [ 289.143063][T10599] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 289.148714][T10599] ? xas_load+0x3a2/0x3c0 [ 289.153071][T10599] shmem_add_to_page_cache+0x5b1/0xae0 [ 289.158557][T10599] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 289.164217][T10599] ? put_page+0xb0/0xb0 [ 289.168393][T10599] ? __this_cpu_preempt_check+0x13/0x20 [ 289.173963][T10599] ? __perf_event_task_sched_in+0x2ab/0x320 [ 289.179876][T10599] shmem_get_folio_gfp+0xef9/0x20f0 [ 289.185107][T10599] ? __cfi___switch_to+0x10/0x10 [ 289.190082][T10599] shmem_write_begin+0xea/0x2c0 [ 289.194949][T10599] generic_perform_write+0x32d/0x740 [ 289.200249][T10599] ? __mark_inode_dirty+0x264/0x9c0 [ 289.205470][T10599] ? __cfi_generic_perform_write+0x10/0x10 [ 289.211296][T10599] ? __cfi_file_update_time+0x10/0x10 [ 289.216696][T10599] ? generic_write_checks_count+0x369/0x450 [ 289.222611][T10599] __generic_file_write_iter+0x17a/0x230 [ 289.228257][T10599] generic_file_write_iter+0xae/0x310 [ 289.233641][T10599] __kernel_write_iter+0x2a9/0x6a0 [ 289.238765][T10599] ? __cfi___kernel_write_iter+0x10/0x10 [ 289.244417][T10599] ? cgroup_freezing+0x86/0xb0 [ 289.249253][T10599] ? iov_iter_bvec+0x53/0x1f0 [ 289.253958][T10599] dump_user_range+0x3e6/0x630 [ 289.258766][T10599] ? __cfi_dump_user_range+0x10/0x10 [ 289.264061][T10599] ? dump_align+0xfe/0x120 [ 289.268496][T10599] ? dump_emit+0xa8/0xc0 [ 289.272762][T10599] elf_core_dump+0x2b60/0x30b0 [ 289.277547][T10599] ? __cfi_elf_core_dump+0x10/0x10 [ 289.282680][T10599] ? dump_interrupted+0xd0/0xd0 [ 289.287535][T10599] ? 0xffffffffff600000 [ 289.291701][T10599] ? freezing_slow_path+0x10a/0x150 [ 289.296914][T10599] do_coredump+0x160e/0x23a0 [ 289.301535][T10599] ? __cfi_do_coredump+0x10/0x10 [ 289.306511][T10599] ? kmem_cache_free+0x12d/0x300 [ 289.311468][T10599] ? ____kasan_slab_free+0x13d/0x180 [ 289.316772][T10599] ? get_signal+0xac2/0x1700 [ 289.321378][T10599] ? kmem_cache_free+0x12d/0x300 [ 289.326343][T10599] get_signal+0x157d/0x1700 [ 289.330874][T10599] ? __cfi_get_signal+0x10/0x10 [ 289.335747][T10599] arch_do_signal_or_restart+0xd1/0x11c0 [ 289.341421][T10599] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 289.347261][T10599] ? force_sig_fault+0xd9/0x130 [ 289.352130][T10599] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 289.358301][T10599] ? page_fault_oops+0x8b0/0x8b0 [ 289.363265][T10599] ? __bad_area_nosemaphore+0x303/0x630 [ 289.368845][T10599] exit_to_user_mode_loop+0x7a/0xb0 [ 289.374063][T10599] exit_to_user_mode_prepare+0x87/0xd0 [ 289.379533][T10599] irqentry_exit_to_user_mode+0x9/0x10 [ 289.385010][T10599] irqentry_exit+0x12/0x40 [ 289.389455][T10599] exc_page_fault+0x5e/0xb0 [ 289.393977][T10599] asm_exc_page_fault+0x27/0x30 [ 289.398850][T10599] RIP: 0033:0x7f3c07654cb7 [ 289.403278][T10599] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 289.422897][T10599] RSP: 002b:00007f3c086f5120 EFLAGS: 00010202 [ 289.428985][T10599] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f3c0779f559 [ 289.436967][T10599] RDX: 00007f3c086f5140 RSI: 00007f3c086f5270 RDI: 000000000000000b [ 289.444952][T10599] RBP: 00007f3c07836b50 R08: 0000000000000000 R09: 0000000000000000 [ 289.452931][T10599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.460912][T10599] R13: 00007f3c07a26128 R14: 00007f3c07a26090 R15: 00007ffe19037958 [ 289.468903][T10599] [ 289.484769][T10599] memory: usage 307136kB, limit 307200kB, failcnt 38114 [ 289.614476][T11689] tap1: tun_chr_ioctl cmd 1074025680 [ 289.659674][T10599] memory+swap: usage 431744kB, limit 9007199254740988kB, failcnt 0 [ 289.767445][T10599] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 289.890303][T11708] device syzkaller0 entered promiscuous mode [ 289.945215][T10599] Memory cgroup stats for /syz4: [ 289.945362][T10599] anon 1662976 [ 289.945362][T10599] file 312610816 [ 289.945362][T10599] kernel 0 [ 289.945362][T10599] kernel_stack 0 [ 289.945362][T10599] pagetables 0 [ 289.945362][T10599] sec_pagetables 0 [ 289.945362][T10599] percpu 0 [ 289.945362][T10599] sock 0 [ 289.945362][T10599] vmalloc 0 [ 289.945362][T10599] shmem 312598528 [ 289.945362][T10599] file_mapped 8192 [ 289.945362][T10599] file_dirty 8192 [ 289.945362][T10599] file_writeback 299008 [ 289.945362][T10599] swapcached 299008 [ 289.945362][T10599] anon_thp 0 [ 289.945362][T10599] file_thp 0 [ 289.945362][T10599] shmem_thp 0 [ 289.945362][T10599] inactive_anon 201744384 [ 289.945362][T10599] active_anon 112553984 [ 289.945362][T10599] inactive_file 8192 [ 289.945362][T10599] active_file 4096 [ 289.945362][T10599] unevictable 0 [ 289.945362][T10599] slab_reclaimable 0 [ 289.945362][T10599] slab_unreclaimable 0 [ 289.945362][T10599] slab 0 [ 289.945362][T10599] workingset_refault_anon 0 [ 290.047697][T10599] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10595,uid=0 [ 290.110058][T10599] Memory cgroup out of memory: Killed process 10595 (syz.4.2624) total-vm:90364kB, anon-rss:1492kB, file-rss:25624kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 290.301419][T11694] syz.4.2869 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 290.466147][T11694] CPU: 0 PID: 11694 Comm: syz.4.2869 Not tainted syzkaller #0 [ 290.473710][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.483775][T11694] Call Trace: [ 290.487067][T11694] [ 290.490040][T11694] __dump_stack+0x21/0x24 [ 290.494387][T11694] dump_stack_lvl+0x110/0x170 [ 290.499074][T11694] ? __cfi_dump_stack_lvl+0x8/0x8 [ 290.504108][T11694] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 290.509957][T11694] ? ___ratelimit+0x40a/0x590 [ 290.514666][T11694] dump_stack+0x15/0x24 [ 290.518844][T11694] dump_header+0xdb/0x660 [ 290.523194][T11694] ? __cfi_gfp_zone+0x10/0x10 [ 290.527925][T11694] oom_kill_process+0x32a/0x410 [ 290.532814][T11694] ? kvm_sched_clock_read+0x18/0x40 [ 290.538035][T11694] out_of_memory+0x630/0x930 [ 290.542652][T11694] ? __cfi_out_of_memory+0x10/0x10 [ 290.547825][T11694] mem_cgroup_out_of_memory+0x2be/0x390 [ 290.553388][T11694] ? __kasan_check_write+0x14/0x20 [ 290.558513][T11694] ? mem_cgroup_oom_trylock+0x360/0x360 [ 290.564075][T11694] try_charge_memcg+0xb8a/0x1650 [ 290.569037][T11694] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 290.574430][T11694] ? __alloc_pages+0x610/0x610 [ 290.579247][T11694] ? __cfi_gfp_zone+0x10/0x10 [ 290.583945][T11694] ? __alloc_pages+0x1fa/0x610 [ 290.588731][T11694] charge_memcg+0x81/0x1f0 [ 290.593162][T11694] __mem_cgroup_charge+0x93/0x290 [ 290.598200][T11694] ? finish_task_switch+0x173/0x7c0 [ 290.603424][T11694] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 290.609084][T11694] ? switch_mm_irqs_off+0x2fb/0x960 [ 290.614322][T11694] wp_page_copy+0x488/0x1490 [ 290.618933][T11694] ? _raw_spin_lock_irq+0x95/0xf0 [ 290.623969][T11694] ? futex_wait+0x5f1/0x900 [ 290.628487][T11694] ? fault_dirty_shared_page+0x310/0x310 [ 290.634141][T11694] ? __kasan_check_write+0x14/0x20 [ 290.639265][T11694] do_wp_page+0x9b5/0xf70 [ 290.643610][T11694] handle_mm_fault+0x114f/0x26b0 [ 290.648572][T11694] ? __cfi_handle_mm_fault+0x10/0x10 [ 290.653886][T11694] ? lock_mm_and_find_vma+0x9e/0x320 [ 290.659178][T11694] ? do_user_addr_fault+0x338/0x1030 [ 290.664481][T11694] do_user_addr_fault+0x61e/0x1030 [ 290.669614][T11694] exc_page_fault+0x51/0xb0 [ 290.674152][T11694] asm_exc_page_fault+0x27/0x30 [ 290.679031][T11694] RIP: 0033:0x7f3c0779f56b [ 290.683458][T11694] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 290.703074][T11694] RSP: 002b:00007ffe19037ab8 EFLAGS: 00010213 [ 290.709150][T11694] RAX: 000000000000006e RBX: 0000000000046bdf RCX: ffffffffffffffe8 [ 290.717137][T11694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c07a25fac [ 290.725121][T11694] RBP: 0000000000000032 R08: 002caba4faa4b788 R09: 0000000000000000 [ 290.733099][T11694] R10: 00007ffe19037bc0 R11: 0000000000000246 R12: 00007ffe19037be0 [ 290.741167][T11694] R13: 00007f3c07a25fac R14: 0000000000046c11 R15: 00007ffe19037bc0 [ 290.749159][T11694] [ 290.865913][T11694] memory: usage 301248kB, limit 307200kB, failcnt 38801 [ 290.872976][T11694] memory+swap: usage 419804kB, limit 9007199254740988kB, failcnt 0 [ 290.881138][T11694] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 290.888193][T11694] Memory cgroup stats for /syz4: [ 290.888338][T11694] anon 1540096 [ 290.888338][T11694] file 305565696 [ 290.888338][T11694] kernel 0 [ 290.888338][T11694] kernel_stack 0 [ 290.888338][T11694] pagetables 0 [ 290.888338][T11694] sec_pagetables 0 [ 290.888338][T11694] percpu 0 [ 290.888338][T11694] sock 0 [ 290.888338][T11694] vmalloc 0 [ 290.888338][T11694] shmem 305553408 [ 290.888338][T11694] file_mapped 8192 [ 290.888338][T11694] file_dirty 8192 [ 290.888338][T11694] file_writeback 1302528 [ 290.888338][T11694] swapcached 1331200 [ 290.888338][T11694] anon_thp 0 [ 290.888338][T11694] file_thp 0 [ 290.888338][T11694] shmem_thp 0 [ 290.888338][T11694] inactive_anon 117178368 [ 290.888338][T11694] active_anon 189927424 [ 290.888338][T11694] inactive_file 12288 [ 290.888338][T11694] active_file 0 [ 290.888338][T11694] unevictable 0 [ 290.888338][T11694] slab_reclaimable 0 [ 290.888338][T11694] slab_unreclaimable 0 [ 290.888338][T11694] slab 0 [ 290.888338][T11694] workingset_refault_anon 0 [ 291.014561][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.021610][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.036929][T11747] device bridge_slave_0 entered promiscuous mode [ 291.068682][T11765] device syzkaller0 entered promiscuous mode [ 291.082799][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.092115][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.107201][T11747] device bridge_slave_1 entered promiscuous mode [ 291.272472][T11694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2624,pid=10608,uid=0 [ 291.287571][T11694] Memory cgroup out of memory: Killed process 10608 (syz.4.2624) total-vm:90628kB, anon-rss:1508kB, file-rss:23712kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 291.375145][T11770] device syzkaller0 entered promiscuous mode [ 291.551266][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.563358][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.571939][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.580374][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.588709][ T4108] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.595770][ T4108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.603456][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.613513][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.624384][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.631432][ T4108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.666525][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.684147][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.693247][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.724532][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.766108][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.807766][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.824465][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.855397][T11747] device veth0_vlan entered promiscuous mode [ 291.925702][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.955784][T11747] device veth1_macvtap entered promiscuous mode [ 291.993837][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.027006][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.069274][ T28] audit: type=1400 audit(1793527473.124:168): avc: denied { unmount } for pid=11747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 292.882042][T11851] €Â0: renamed from pim6reg1 [ 292.994638][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.001934][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.568942][T11968] tap0: tun_chr_ioctl cmd 21731 [ 297.426635][T10596] syz.4.2624 (10596) used greatest stack depth: 13952 bytes left [ 297.808564][T12076] device syzkaller0 entered promiscuous mode [ 299.179798][T12173] device wg2 left promiscuous mode [ 299.199275][T12171] device wg2 entered promiscuous mode [ 299.358215][T12173] device wg2 left promiscuous mode [ 299.699444][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.752917][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.767578][T12183] device bridge_slave_0 entered promiscuous mode [ 299.780968][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.789082][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.796672][T12183] device bridge_slave_1 entered promiscuous mode [ 299.983779][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.991333][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.001004][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.009494][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.017803][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.024862][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.050998][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.060208][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.068559][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.078712][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.085773][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.093511][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.101724][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.120683][T12183] device veth0_vlan entered promiscuous mode [ 300.153560][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.162115][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.170445][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.178074][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.196623][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.206513][T12183] device veth1_macvtap entered promiscuous mode [ 300.217417][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.239372][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.442830][T12225] cgroup: fork rejected by pids controller in /syz1 [ 300.517355][ T6500] device erspan0 left promiscuous mode [ 300.533976][ T6500] GPL: port 1(erspan0) entered disabled state [ 300.546645][T12245] device veth0_to_bridge entered promiscuous mode [ 301.530984][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.538495][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.546281][T12283] device bridge_slave_0 entered promiscuous mode [ 301.554388][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.561458][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.569156][T12283] device bridge_slave_1 entered promiscuous mode [ 301.846459][T12289] device wg2 left promiscuous mode [ 301.901043][T12289] device wg2 entered promiscuous mode [ 301.999283][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.007616][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.014724][ T8040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.181337][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.189046][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.204527][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.214150][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.222501][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.229569][ T8040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.237352][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.248490][T12307] FAULT_INJECTION: forcing a failure. [ 302.248490][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.263382][T12307] CPU: 0 PID: 12307 Comm: syz.2.3035 Not tainted syzkaller #0 [ 302.270866][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.272109][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.280934][T12307] Call Trace: [ 302.280941][T12307] [ 302.280948][T12307] __dump_stack+0x21/0x24 [ 302.299439][T12307] dump_stack_lvl+0x110/0x170 [ 302.304159][T12307] ? __cfi_dump_stack_lvl+0x8/0x8 [ 302.309194][T12307] dump_stack+0x15/0x24 [ 302.313356][T12307] should_fail_ex+0x3bf/0x510 [ 302.318050][T12307] should_fail+0xb/0x10 [ 302.322227][T12307] should_fail_usercopy+0x1a/0x20 [ 302.327263][T12307] _copy_from_user+0x1e/0xc0 [ 302.331867][T12307] __sys_bpf+0x2a0/0x850 [ 302.336128][T12307] ? bpf_link_show_fdinfo+0x330/0x330 [ 302.341532][T12307] ? __cfi_sched_clock_cpu+0x10/0x10 [ 302.346874][T12307] __x64_sys_bpf+0x7c/0x90 [ 302.351304][T12307] x64_sys_call+0x488/0x9a0 [ 302.355819][T12307] do_syscall_64+0x4c/0xa0 [ 302.360246][T12307] ? clear_bhb_loop+0x30/0x80 [ 302.364939][T12307] ? clear_bhb_loop+0x30/0x80 [ 302.369634][T12307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.375553][T12307] RIP: 0033:0x7f9bd519f559 [ 302.379981][T12307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.399593][T12307] RSP: 002b:00007f9bd6034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.400886][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.408024][T12307] RAX: ffffffffffffffda RBX: 00007f9bd5425fa0 RCX: 00007f9bd519f559 [ 302.408040][T12307] RDX: 0000000000000050 RSI: 0000200000001dc0 RDI: 000000000000000a [ 302.415156][ T8040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.423043][T12307] RBP: 00007f9bd6034090 R08: 0000000000000000 R09: 0000000000000000 [ 302.446187][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.454190][T12307] R13: 00007f9bd5426038 R14: 00007f9bd5425fa0 R15: 00007fff95c83228 [ 302.462191][T12307] [ 302.485794][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.493588][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.501625][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.557733][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.572659][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.581345][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.589024][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.597598][T12283] device veth0_vlan entered promiscuous mode [ 302.620294][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.676959][T12283] device veth1_macvtap entered promiscuous mode [ 302.761823][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.817297][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.246194][ T6500] device bridge_slave_1 left promiscuous mode [ 303.255746][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.280773][ T6500] device bridge_slave_0 left promiscuous mode [ 303.293756][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.306512][ T6500] device veth1_macvtap left promiscuous mode [ 303.343117][ T6500] device veth0_vlan left promiscuous mode [ 303.927964][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.938279][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.945937][T12369] device bridge_slave_0 entered promiscuous mode [ 303.953096][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.960368][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.967956][T12369] device bridge_slave_1 entered promiscuous mode [ 304.336706][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.343794][T12369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.351098][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.358135][T12369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.429239][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.444730][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.461458][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.474486][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.065463][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.073889][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.080947][ T4140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.114276][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.160904][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.167982][ T4140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.194274][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.243895][T12399] device wg2 left promiscuous mode [ 305.278999][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.292483][T12369] device veth0_vlan entered promiscuous mode [ 305.300237][T12404] device wg2 entered promiscuous mode [ 305.310115][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.329050][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.338526][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.347141][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.370902][T12369] device veth1_macvtap entered promiscuous mode [ 305.393744][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.404751][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.422361][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.431283][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.444969][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.471797][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.484530][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.510422][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.531180][ T4140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.749873][T12442] device syzkaller0 entered promiscuous mode [ 305.926027][ T6500] device veth0_macvtap left promiscuous mode [ 305.932154][ T6500] nr0: port 1(veth0_macvtap) entered disabled state [ 305.958962][ T6500] device veth0_vlan left promiscuous mode [ 306.841639][T12498] : port 1(ip6gretap0) entered blocking state [ 306.854283][T12498] : port 1(ip6gretap0) entered disabled state [ 306.896193][T12498] device ip6gretap0 entered promiscuous mode [ 307.598413][T12539] device sit0 entered promiscuous mode [ 307.833332][T12541] device syzkaller0 entered promiscuous mode [ 309.391582][T12641] Â: renamed from pim6reg1 [ 309.543759][T12674] FAULT_INJECTION: forcing a failure. [ 309.543759][T12674] name failslab, interval 1, probability 0, space 0, times 1 [ 309.597753][T12674] CPU: 1 PID: 12674 Comm: syz.4.3122 Not tainted syzkaller #0 [ 309.605256][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 309.615344][T12674] Call Trace: [ 309.618648][T12674] [ 309.621843][T12674] __dump_stack+0x21/0x24 [ 309.626193][T12674] dump_stack_lvl+0x110/0x170 [ 309.630882][T12674] ? __cfi_dump_stack_lvl+0x8/0x8 [ 309.635983][T12674] ? kasan_save_alloc_info+0x1f/0x30 [ 309.641282][T12674] ? __kasan_kmalloc+0x95/0xb0 [ 309.646059][T12674] dump_stack+0x15/0x24 [ 309.650223][T12674] should_fail_ex+0x3bf/0x510 [ 309.654909][T12674] ? build_skb+0x2a/0x220 [ 309.659250][T12674] __should_failslab+0xac/0xf0 [ 309.664060][T12674] should_failslab+0x9/0x20 [ 309.668658][T12674] kmem_cache_alloc+0x3b/0x320 [ 309.673436][T12674] ? __kasan_check_write+0x14/0x20 [ 309.678580][T12674] build_skb+0x2a/0x220 [ 309.682750][T12674] bpf_prog_test_run_skb+0x38e/0x18a0 [ 309.688135][T12674] ? __fget_files+0x2d1/0x330 [ 309.692842][T12674] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 309.698673][T12674] bpf_prog_test_run+0x3b4/0x5c0 [ 309.703629][T12674] ? bpf_prog_query+0x270/0x270 [ 309.708489][T12674] ? selinux_bpf+0xce/0xf0 [ 309.712919][T12674] ? security_bpf+0x93/0xb0 [ 309.717440][T12674] __sys_bpf+0x5ee/0x850 [ 309.721694][T12674] ? bpf_link_show_fdinfo+0x330/0x330 [ 309.727075][T12674] ? irqentry_exit+0x37/0x40 [ 309.731702][T12674] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 309.737522][T12674] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 309.743691][T12674] __x64_sys_bpf+0x7c/0x90 [ 309.748112][T12674] x64_sys_call+0x488/0x9a0 [ 309.752633][T12674] do_syscall_64+0x4c/0xa0 [ 309.757060][T12674] ? clear_bhb_loop+0x30/0x80 [ 309.761773][T12674] ? clear_bhb_loop+0x30/0x80 [ 309.766502][T12674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.772418][T12674] RIP: 0033:0x7fba3259f559 [ 309.776838][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.796453][T12674] RSP: 002b:00007fba33426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.804881][T12674] RAX: ffffffffffffffda RBX: 00007fba32825fa0 RCX: 00007fba3259f559 [ 309.812858][T12674] RDX: 0000000000000050 RSI: 0000200000001dc0 RDI: 000000000000000a [ 309.820878][T12674] RBP: 00007fba33426090 R08: 0000000000000000 R09: 0000000000000000 [ 309.828856][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.836878][T12674] R13: 00007fba32826038 R14: 00007fba32825fa0 R15: 00007ffe52ba4ca8 [ 309.844908][T12674] [ 310.218044][T12693] device syzkaller0 entered promiscuous mode [ 310.457127][T12711] device veth0_vlan left promiscuous mode [ 310.463205][T12711] device veth0_vlan entered promiscuous mode [ 310.499783][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.545646][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.576910][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.642736][T12698] device sit0 left promiscuous mode [ 310.695864][T12720] device sit0 entered promiscuous mode [ 318.044512][T12901] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 318.074124][T12901] syzkaller0: linktype set to 270 [ 318.553144][T12977] -1: renamed from syzkaller0 [ 318.788527][T12990] device syzkaller0 entered promiscuous mode [ 319.199673][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.207405][T13037] syzkaller1: linktype set to 259 [ 319.212542][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.248868][T13037] syzkaller1: linktype set to 259 [ 319.270289][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.338475][T13037] syzkaller1: linktype set to 259 [ 319.380070][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.434468][T13037] syzkaller1: linktype set to 259 [ 319.494393][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.500241][T13037] syzkaller1: linktype set to 259 [ 319.624360][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.630218][T13037] syzkaller1: linktype set to 259 [ 319.700203][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.706236][T13037] syzkaller1: linktype set to 259 [ 319.721620][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.773388][T13037] syzkaller1: linktype set to 259 [ 319.816906][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.830656][T13037] syzkaller1: linktype set to 259 [ 319.841292][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.853715][T13037] syzkaller1: linktype set to 259 [ 319.875847][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.887694][T13037] syzkaller1: linktype set to 259 [ 319.900065][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.919613][T13037] syzkaller1: linktype set to 259 [ 319.942406][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.957070][T13037] syzkaller1: linktype set to 259 [ 319.964324][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.970195][T13037] syzkaller1: linktype set to 259 [ 319.976227][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.982102][T13037] syzkaller1: linktype set to 259 [ 319.987481][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.993314][T13037] syzkaller1: linktype set to 259 [ 319.998575][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 320.008610][T13037] syzkaller1: linktype set to 259 [ 320.022973][T13037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 320.040806][T13037] syzkaller1: linktype set to 259 [ 321.373206][T13078] device syzkaller0 entered promiscuous mode [ 326.529006][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.950915][T13138] tap0: tun_chr_ioctl cmd 1074025673 [ 327.608808][T13156] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.627614][T13156] device syzkaller0 entered promiscuous mode [ 327.859961][T13175] device syzkaller0 entered promiscuous mode [ 328.693528][ T28] audit: type=1400 audit(1793527509.744:169): avc: denied { create } for pid=13210 comm="syz.4.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 331.560484][T13257] : renamed from bond_slave_0 [ 331.599570][T13255] device wg2 entered promiscuous mode [ 331.732017][T13271] device syzkaller0 entered promiscuous mode [ 332.147851][T13278] caif0: tun_chr_ioctl cmd 2147767520 [ 332.154283][T13279] caif0: tun_chr_ioctl cmd 2147767520 [ 333.465331][T13341] device veth1_macvtap left promiscuous mode [ 334.024289][T13373] tap0: tun_chr_ioctl cmd 1074025675 [ 334.044560][T13373] tap0: persist enabled [ 334.075303][T13374] tap0: tun_chr_ioctl cmd 1074025675 [ 334.110875][T13374] tap0: persist enabled [ 334.502934][T13379] device syzkaller0 entered promiscuous mode [ 337.845707][T13518] device wg2 entered promiscuous mode [ 338.910760][T13532] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 340.667358][T13582] pimreg: tun_chr_ioctl cmd 1074025675 [ 340.672920][T13582] pimreg: persist disabled [ 342.155142][T13669] : renamed from bond_slave_0 [ 343.040257][T13712] tun0: tun_chr_ioctl cmd 1074812118 [ 343.056210][T13712] tun0: tun_chr_ioctl cmd 35139 [ 347.981487][T13754] device syzkaller0 entered promiscuous mode [ 348.075999][T13770] device sit0 entered promiscuous mode [ 349.352670][T13899] device syzkaller0 entered promiscuous mode [ 350.402737][T13958] device syzkaller0 entered promiscuous mode [ 350.937195][T13998] net_ratelimit: 1 callbacks suppressed [ 350.937211][T13998] macsec0: mtu less than device minimum [ 351.188824][T14011] device syzkaller0 entered promiscuous mode [ 351.293478][T14028] syz.0.3458[14028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.293520][T14028] syz.0.3458[14028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.320623][T14029] veth1_to_team: mtu less than device minimum [ 351.767972][T14055] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 354.631294][T14112] device sit0 left promiscuous mode [ 354.652594][T14112] bridge0: port 3(team_slave_1) entered blocking state [ 354.667943][T14112] bridge0: port 3(team_slave_1) entered disabled state [ 354.679993][T14112] device team_slave_1 entered promiscuous mode [ 354.694033][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 354.825946][T14126] device syzkaller0 entered promiscuous mode [ 355.617132][T14169] device sit0 entered promiscuous mode [ 356.464896][T14194] syzkaller0: refused to change device tx_queue_len [ 356.982149][T14229] device syzkaller0 entered promiscuous mode [ 357.354668][T14263] device syzkaller0 entered promiscuous mode [ 358.653351][T14358] device syzkaller0 entered promiscuous mode [ 359.719116][T14422] device bridge_slave_1 left promiscuous mode [ 359.732608][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.826748][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.922239][T14501] device veth1_macvtap left promiscuous mode [ 360.941083][T14501] device macsec0 entered promiscuous mode [ 361.014488][T14511] device wg2 entered promiscuous mode [ 362.104488][T14579] caif0: tun_chr_ioctl cmd 2147767520 [ 362.330856][T14582] device veth0_vlan left promiscuous mode [ 362.352665][T14582] device veth0_vlan entered promiscuous mode [ 362.442789][T14582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.514986][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.537545][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.560161][ T6495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.579343][T14594] device wg2 left promiscuous mode [ 363.049655][T14626] : renamed from bond_slave_1 [ 363.549262][T14648] €Â0: renamed from pim6reg1 [ 363.604595][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.611793][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.166621][T14689] device sit0 left promiscuous mode [ 364.213523][T14687] device sit0 entered promiscuous mode [ 365.097663][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.105334][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.592920][T14795] device sit0 entered promiscuous mode [ 366.772497][T14856] device syzkaller0 entered promiscuous mode [ 366.887546][T14876] syz.4.3673[14876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.887606][T14876] syz.4.3673[14876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.984114][T14888] device sit0 left promiscuous mode [ 367.046911][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.053623][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.067431][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.073309][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.080283][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.087098][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.092962][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.137538][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.146338][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.157498][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.190169][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.196350][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.202496][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.217079][T14895] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 367.222968][T14895] syzkaller0: linktype set to 0 [ 367.236525][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.355601][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.385355][T14895] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 367.542390][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.572675][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.626053][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.771597][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.802804][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 367.934739][T14911] ------------[ cut here ]------------ [ 367.940255][T14911] WARNING: CPU: 0 PID: 14911 at kernel/events/core.c:6564 perf_pending_task+0x3ba/0x4e0 [ 367.950097][T14911] Modules linked in: [ 367.954002][T14911] CPU: 0 PID: 14911 Comm: syz.3.3685 Not tainted syzkaller #0 [ 367.961620][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 367.971713][T14911] RIP: 0010:perf_pending_task+0x3ba/0x4e0 [ 367.977472][T14911] Code: 48 ff ff eb 05 e8 f6 a5 d7 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e2 a5 d7 ff e8 79 b0 66 ff eb 98 e8 d6 a5 d7 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2e 00 0f 85 bf fe ff [ 367.997128][T14911] RSP: 0018:ffffc900026ff880 EFLAGS: 00010293 [ 368.003247][T14911] RAX: ffffffff8199cc4a RBX: ffff88813a605620 RCX: ffff8881408ebcc0 [ 368.011255][T14911] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 368.019384][T14911] RBP: ffffc900026ff8b0 R08: 0000000000000003 R09: 0000000000000004 [ 368.027488][T14911] R10: 0000000000000000 R11: ffffffff8199c890 R12: ffff8881408ebcc0 [ 368.035512][T14911] R13: ffff888130f3a0c8 R14: 1ffff110274c0a9c R15: ffff88813a6054e0 [ 368.043519][T14911] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 368.052491][T14911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.059159][T14911] CR2: 00007f4cadfb5990 CR3: 00000001299e3000 CR4: 00000000003506b0 [ 368.067171][T14911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000440 [ 368.075174][T14911] DR3: 0000200000000440 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 368.083160][T14911] Call Trace: [ 368.086471][T14911] [ 368.089418][T14911] task_work_run+0x1e1/0x250 [ 368.094036][T14911] ? __cfi_task_work_run+0x10/0x10 [ 368.099217][T14911] ? mm_update_next_owner+0x56/0x650 [ 368.104562][T14911] ? __kasan_check_write+0x14/0x20 [ 368.109740][T14911] do_exit+0xb0d/0x29f0 [ 368.113917][T14911] ? _raw_spin_lock_irq+0x95/0xf0 [ 368.119031][T14911] ? __cfi_do_exit+0x10/0x10 [ 368.123644][T14911] ? __kasan_check_write+0x14/0x20 [ 368.128802][T14911] ? perf_pending_task+0x39a/0x4e0 [ 368.133933][T14911] ? cgroup_freezing+0x86/0xb0 [ 368.138780][T14911] do_group_exit+0x21b/0x2e0 [ 368.139096][T14898] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 368.143389][T14911] ? __kasan_check_write+0x14/0x20 [ 368.154325][T14911] ? recalc_sigpending+0x168/0x1c0 [ 368.159461][T14911] get_signal+0x167c/0x1700 [ 368.164008][T14911] ? __cfi_get_signal+0x10/0x10 [ 368.168906][T14911] arch_do_signal_or_restart+0xd1/0x11c0 [ 368.174581][T14911] ? do_futex+0x2e2/0x430 [ 368.178959][T14911] ? selinux_bpf+0xc7/0xf0 [ 368.183483][T14911] ? __cfi_do_futex+0x10/0x10 [ 368.188202][T14911] ? __sys_bpf+0x57b/0x850 [ 368.192673][T14911] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 368.198868][T14911] ? __se_sys_futex+0x136/0x310 [ 368.203734][T14911] exit_to_user_mode_loop+0x7a/0xb0 [ 368.209007][T14911] exit_to_user_mode_prepare+0x87/0xd0 [ 368.214496][T14911] syscall_exit_to_user_mode+0x1a/0x30 [ 368.220016][T14911] do_syscall_64+0x58/0xa0 [ 368.224469][T14911] ? clear_bhb_loop+0x30/0x80 [ 368.229166][T14911] ? clear_bhb_loop+0x30/0x80 [ 368.233866][T14911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.239830][T14911] RIP: 0033:0x7f4caf59f559 [ 368.244267][T14911] Code: Unable to access opcode bytes at 0x7f4caf59f52f. [ 368.251303][T14911] RSP: 002b:00007f4cb04430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 368.259740][T14911] RAX: fffffffffffffe00 RBX: 00007f4caf826098 RCX: 00007f4caf59f559 [ 368.267745][T14911] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4caf826098 [ 368.275894][T14911] RBP: 00007f4caf826090 R08: 0000000000000000 R09: 0000000000000000 [ 368.283942][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.291969][T14911] R13: 00007f4caf826128 R14: 00007fff61cad850 R15: 00007fff61cad938 [ 368.299973][T14911] [ 368.303011][T14911] ---[ end trace 0000000000000000 ]--- [ 368.574797][T14963] device bridge_slave_0 left promiscuous mode [ 368.615127][T14966] IPv6: …: Disabled Multicast RS [ 371.741862][T15176] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.797804][T15176] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.834779][T15176] device bridge_slave_0 entered promiscuous mode [ 371.862790][T15176] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.885593][T15176] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.915511][T15176] device bridge_slave_1 entered promiscuous mode [ 372.204763][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.215596][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.348913][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.359832][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.381291][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.388381][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.415505][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.431549][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.440260][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.447332][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.465458][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.473554][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.482171][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.560044][T15225] device syzkaller0 entered promiscuous mode [ 372.597086][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.618190][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.634561][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.647577][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.707872][T15176] device veth0_vlan entered promiscuous mode [ 372.736388][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.746676][T15176] device veth1_macvtap entered promiscuous mode [ 372.774780][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.783363][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.816876][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.835057][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.940875][ T6500] device team_slave_1 left promiscuous mode [ 372.959232][ T6500] bridge0: port 3(team_slave_1) entered disabled state [ 372.972898][ T6500] device bridge_slave_1 left promiscuous mode [ 372.998405][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.046568][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.105197][ T6500] device veth0_vlan left promiscuous mode [ 374.592046][T15316] device wg2 left promiscuous mode [ 374.682603][T15325] device macsec0 left promiscuous mode [ 374.851400][T15337] Ã2®|: renamed from team_slave_1 [ 374.925649][T15338] device syzkaller0 entered promiscuous mode [ 377.429955][T15442] device syzkaller0 entered promiscuous mode [ 378.212602][T15471] device syzkaller0 entered promiscuous mode [ 378.862674][T15481] ================================================================== [ 378.870830][T15481] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6fa/0x960 [ 378.878691][T15481] Write of size 56 at addr ffff88811a896590 by task syz.4.3806/15481 [ 378.886792][T15481] [ 378.889116][T15481] CPU: 0 PID: 15481 Comm: syz.4.3806 Tainted: G W syzkaller #0 [ 378.898049][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 378.908108][T15481] Call Trace: [ 378.911393][T15481] [ 378.914328][T15481] __dump_stack+0x21/0x24 [ 378.918706][T15481] dump_stack_lvl+0x110/0x170 [ 378.923403][T15481] ? __cfi_dump_stack_lvl+0x8/0x8 [ 378.928427][T15481] ? __bpf_get_stackid+0x6fa/0x960 [ 378.933546][T15481] print_address_description+0x71/0x200 [ 378.939208][T15481] print_report+0x4a/0x60 [ 378.943562][T15481] kasan_report+0x122/0x150 [ 378.948119][T15481] ? __bpf_get_stackid+0x6fa/0x960 [ 378.953234][T15481] kasan_check_range+0x249/0x2a0 [ 378.958179][T15481] ? __bpf_get_stackid+0x6fa/0x960 [ 378.963310][T15481] memcpy+0x44/0x70 [ 378.967125][T15481] __bpf_get_stackid+0x6fa/0x960 [ 378.972081][T15481] bpf_get_stackid_pe+0x2ee/0x400 [ 378.977111][T15481] bpf_prog_ebdd8313a69a195f+0x28/0x3d [ 378.982591][T15481] bpf_overflow_handler+0x3c7/0x5e0 [ 378.987823][T15481] ? arch_stack_walk+0xfc/0x150 [ 378.992730][T15481] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 378.998475][T15481] ? __this_cpu_preempt_check+0x13/0x20 [ 379.004025][T15481] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 379.010310][T15481] __perf_event_overflow+0x458/0x640 [ 379.015606][T15481] perf_swevent_overflow+0x1ae/0x240 [ 379.020901][T15481] ? security_file_alloc+0x33/0x130 [ 379.026161][T15481] ? __alloc_file+0xb5/0x2a0 [ 379.030818][T15481] perf_swevent_event+0x3a9/0x440 [ 379.035856][T15481] ? do_syscall_64+0x4c/0xa0 [ 379.040451][T15481] ? perf_tp_event+0xa20/0xa20 [ 379.045223][T15481] ___perf_sw_event+0x3bf/0x500 [ 379.050082][T15481] ? __cfi____perf_sw_event+0x10/0x10 [ 379.055468][T15481] __perf_sw_event+0x134/0x270 [ 379.060243][T15481] do_user_addr_fault+0xfe9/0x1030 [ 379.065377][T15481] ? alloc_file_pseudo+0x1aa/0x200 [ 379.070507][T15481] exc_page_fault+0x51/0xb0 [ 379.075030][T15481] asm_exc_page_fault+0x27/0x30 [ 379.079886][T15481] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 379.085619][T15481] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 379.105226][T15481] RSP: 0018:ffffc90003587af8 EFLAGS: 00050297 [ 379.111314][T15481] RAX: 000000000000000a RBX: 00007fffffffeffd RCX: 0000000000000000 [ 379.119310][T15481] RDX: ffff88810f639440 RSI: 000000000000000a RDI: 0000000000000000 [ 379.127299][T15481] RBP: ffffc90003587cb0 R08: ffff888132cf2003 R09: 1ffff1102659e400 [ 379.135275][T15481] R10: dffffc0000000000 R11: ffffed102659e401 R12: 1ffff920006b0f80 [ 379.143249][T15481] R13: ffff888132cf2000 R14: 0000000000000000 R15: ffff888144661cf0 [ 379.151243][T15481] ? copy_process+0x1754/0x3500 [ 379.156114][T15481] ? __cfi_futex_wake+0x10/0x10 [ 379.160969][T15481] ? idle_dummy+0x10/0x10 [ 379.165312][T15481] kernel_clone+0x22f/0x7f0 [ 379.169838][T15481] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 379.175651][T15481] ? __cfi_kernel_clone+0x10/0x10 [ 379.180704][T15481] __x64_sys_clone+0x193/0x200 [ 379.185477][T15481] ? __cfi___x64_sys_clone+0x10/0x10 [ 379.190771][T15481] ? __kasan_check_write+0x14/0x20 [ 379.195892][T15481] ? fpregs_restore_userregs+0x128/0x260 [ 379.201532][T15481] ? switch_fpu_return+0xe/0x10 [ 379.206384][T15481] x64_sys_call+0x990/0x9a0 [ 379.210899][T15481] do_syscall_64+0x4c/0xa0 [ 379.215315][T15481] ? clear_bhb_loop+0x30/0x80 [ 379.220010][T15481] ? clear_bhb_loop+0x30/0x80 [ 379.224696][T15481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.230596][T15481] RIP: 0033:0x7fba3259f559 [ 379.235024][T15481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.254646][T15481] RSP: 002b:00007fba33425fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 379.263068][T15481] RAX: ffffffffffffffda RBX: 00007fba32825fa0 RCX: 00007fba3259f559 [ 379.271041][T15481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 379.279016][T15481] RBP: 00007fba32636b50 R08: 0000000000000000 R09: 0000000000000000 [ 379.286989][T15481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.294959][T15481] R13: 00007fba32826038 R14: 00007fba32825fa0 R15: 00007ffe52ba4ca8 [ 379.302938][T15481] [ 379.305956][T15481] [ 379.308282][T15481] Allocated by task 15490: [ 379.312697][T15481] kasan_set_track+0x4b/0x70 [ 379.317297][T15481] kasan_save_alloc_info+0x1f/0x30 [ 379.322434][T15481] __kasan_kmalloc+0x95/0xb0 [ 379.327041][T15481] __kmalloc_node+0xb2/0x1e0 [ 379.331711][T15481] bpf_map_area_alloc+0x4b/0xe0 [ 379.336593][T15481] prealloc_elems_and_freelist+0x8a/0x1e0 [ 379.342345][T15481] stack_map_alloc+0x398/0x520 [ 379.347110][T15481] map_create+0x467/0xcf0 [ 379.351444][T15481] __sys_bpf+0x34e/0x850 [ 379.355688][T15481] __x64_sys_bpf+0x7c/0x90 [ 379.360100][T15481] x64_sys_call+0x488/0x9a0 [ 379.364605][T15481] do_syscall_64+0x4c/0xa0 [ 379.369023][T15481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.374923][T15481] [ 379.377249][T15481] The buggy address belongs to the object at ffff88811a896580 [ 379.377249][T15481] which belongs to the cache kmalloc-64 of size 64 [ 379.391160][T15481] The buggy address is located 16 bytes inside of [ 379.391160][T15481] 64-byte region [ffff88811a896580, ffff88811a8965c0) [ 379.404262][T15481] [ 379.406615][T15481] The buggy address belongs to the physical page: [ 379.413067][T15481] page:ffffea00046a2580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a896 [ 379.423301][T15481] flags: 0x4000000000000200(slab|zone=1) [ 379.428978][T15481] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042780 [ 379.437577][T15481] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 379.446170][T15481] page dumped because: kasan: bad access detected [ 379.452610][T15481] page_owner tracks the page as allocated [ 379.458340][T15481] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 12283, tgid 12283 (syz-executor), ts 378834975146, free_ts 378834901978 [ 379.476916][T15481] post_alloc_hook+0x1f5/0x210 [ 379.481725][T15481] prep_new_page+0x1c/0x110 [ 379.486256][T15481] get_page_from_freelist+0x2ca9/0x2d20 [ 379.491837][T15481] __alloc_pages+0x1fa/0x610 [ 379.496437][T15481] alloc_slab_page+0x6e/0xf0 [ 379.501024][T15481] new_slab+0x98/0x3e0 [ 379.505093][T15481] ___slab_alloc+0x70f/0xb70 [ 379.509684][T15481] __slab_alloc+0x5e/0xa0 [ 379.514036][T15481] __kmem_cache_alloc_node+0x204/0x2d0 [ 379.519497][T15481] kmalloc_node_trace+0x26/0xb0 [ 379.524344][T15481] __get_vm_area_node+0x12c/0x360 [ 379.529367][T15481] __vmalloc_node_range+0x326/0x1440 [ 379.534654][T15481] vzalloc+0x78/0x90 [ 379.538550][T15481] xt_counters_alloc+0x44/0x50 [ 379.543352][T15481] __do_replace+0xb1/0x950 [ 379.547775][T15481] do_ipt_set_ctl+0xb23/0xdf0 [ 379.552495][T15481] page last free stack trace: [ 379.557173][T15481] free_unref_page_prepare+0x81b/0x820 [ 379.562641][T15481] free_unref_page+0x93/0x530 [ 379.567320][T15481] __free_pages+0x67/0x100 [ 379.571742][T15481] __vunmap+0xa3c/0xc00 [ 379.575893][T15481] vfree+0x61/0x90 [ 379.579611][T15481] do_ipt_get_ctl+0xe78/0x1190 [ 379.584381][T15481] nf_getsockopt+0x27f/0x2a0 [ 379.589010][T15481] ip_getsockopt+0x157/0x1e0 [ 379.593643][T15481] tcp_getsockopt+0xff/0x130 [ 379.598253][T15481] sock_common_getsockopt+0xaa/0xc0 [ 379.603488][T15481] __sys_getsockopt+0x215/0x490 [ 379.608383][T15481] __x64_sys_getsockopt+0xbf/0xd0 [ 379.613414][T15481] x64_sys_call+0x3d/0x9a0 [ 379.617831][T15481] do_syscall_64+0x4c/0xa0 [ 379.622247][T15481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.628145][T15481] [ 379.630482][T15481] Memory state around the buggy address: [ 379.636115][T15481] ffff88811a896480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 379.644179][T15481] ffff88811a896500: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 379.652239][T15481] >ffff88811a896580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 379.660305][T15481] ^ [ 379.665669][T15481] ffff88811a896600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 379.673730][T15481] ffff88811a896680: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 379.681789][T15481] ================================================================== [ 379.689843][T15481] Disabling lock debugging due to kernel taint [ 379.718112][ T28] audit: type=1400 audit(1793527560.774:170): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 379.752926][ T28] audit: type=1400 audit(1793527560.774:171): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.798325][ T28] audit: type=1400 audit(1793527560.774:172): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.842475][T15488] IPv6: …: Disabled Multicast RS [ 379.894232][ T28] audit: type=1400 audit(1793527560.774:173): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.952985][ T28] audit: type=1400 audit(1793527560.774:174): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.997639][ T28] audit: type=1400 audit(1793527560.774:175): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 380.133344][ T28] audit: type=1400 audit(1793527560.774:176): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1