last executing test programs: 1.237872826s ago: executing program 1 (id=1090): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x842, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x842, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x7c, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x53, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x7c, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x53, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000004c0)=0x1, 0x12) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r11, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000940)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x10, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x3, &(0x7f0000000100)=""/3, 0x41100, 0x3f, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x5, 0x38f4, 0x800}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000980)=[r6, r7, r8, r9, 0xffffffffffffffff, r10, r12], &(0x7f00000009c0)=[{0x5, 0x4, 0x5, 0xb}, {0x3, 0x5, 0xa, 0x9}, {0x0, 0x4, 0xf, 0x6}, {0x5, 0x1, 0x10, 0xb}, {0x3, 0x4, 0xf, 0xc}, {0x4, 0x2, 0x10, 0x3}, {0x1, 0x4, 0x5, 0x5}, {0x5, 0x5, 0xc, 0xb}, {0x4, 0x1, 0x0, 0xa}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0x6}, 0x94) 835.776747ms ago: executing program 2 (id=1105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000800e500fcff0000000085000000ae80000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 835.492997ms ago: executing program 2 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x349ca}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 796.07769ms ago: executing program 2 (id=1110): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00fdff00000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 727.293747ms ago: executing program 2 (id=1114): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xec211, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x39, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000818010000646c6c2500000000700000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 726.808477ms ago: executing program 3 (id=1115): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) 688.486531ms ago: executing program 2 (id=1119): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000fc0)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x801, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000001040)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x4a, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa3b200007"], 0xfdef) 639.437546ms ago: executing program 3 (id=1121): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000001080), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001540)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x20, 0x11, 0x0, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001580)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff], &(0x7f00000015c0)=[{0x0, 0x3, 0x10, 0x8}], 0x10, 0x2}, 0x94) 639.063706ms ago: executing program 2 (id=1122): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) close(0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000e00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000e40)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000009c0), 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1a, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a00000085001cc9fe2900001801000020207025000000170a156d1549cdfb57c3bfa100004000000026010000f8ffffffb702000008000000b703000000d2a00085"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018000000010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000001280)={&(0x7f00000012c0)=@hci, 0x19, &(0x7f0000001340)=[{&(0x7f0000001380)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) 507.181869ms ago: executing program 4 (id=1123): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x26ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 489.612821ms ago: executing program 3 (id=1124): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000023bd0031490000200108000000611974000000000295020000000000005601b3b4292c2a82a5a8e529cb50115fb103bac758510aec27cd9e4f886c7f205695aea5f91399dded3e83bbd15d40d1efdf7580c774c7d23db6423477392bbdc0cf8765efbe42b8f9570fede5cd91f4037681296abda080956bfeb85f729fe398be02e5b2fc2e110b726449433ffc351082d0c15ab63e5050fd0c0370b43827a66026c2169fea"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@union={0x2, 0x4, 0x0, 0x5, 0x0, 0x419f, [{0x3, 0x2, 0x800000}, {0x2, 0x4, 0xdf}, {0x10, 0x5, 0x3}, {0xd, 0x5, 0x9}]}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000980)=""/230, 0x58, 0xe6, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000bc0)={'veth0_virt_wifi\x00', @local}) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={0x0, 0x0}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000f80)) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) 359.006684ms ago: executing program 0 (id=1125): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10000}, 0x28) 358.698444ms ago: executing program 0 (id=1126): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x26ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 347.914126ms ago: executing program 1 (id=1127): close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000001b80)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1e, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000002080)={'wlan1\x00', @random="0100000000eb"}) 344.228766ms ago: executing program 3 (id=1128): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) 281.237462ms ago: executing program 1 (id=1129): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000300)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a40), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000002000)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106820, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000002080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000003b40)={'wlan1\x00', @random="0200"}) 227.462937ms ago: executing program 3 (id=1130): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j8'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 227.165637ms ago: executing program 4 (id=1131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="86", 0xff0f}], 0x1}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)=""/226, 0xe2}], 0x1}, 0x0) 227.015167ms ago: executing program 0 (id=1132): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x26ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe8000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 226.817547ms ago: executing program 4 (id=1133): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 91.246461ms ago: executing program 1 (id=1134): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) close(0x3) 90.965781ms ago: executing program 1 (id=1135): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0xc, &(0x7f0000000ec0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r2, 0x0, 0xe, 0x0, &(0x7f0000001000)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x8d008000, 0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0) 90.712591ms ago: executing program 1 (id=1136): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001280)={&(0x7f00000012c0)=@hci, 0x19, &(0x7f0000001340)=[{&(0x7f0000001380)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000001480)={0x0, 0xfffffff5, &(0x7f00000014c0)=[{&(0x7f0000001500)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) 79.181022ms ago: executing program 4 (id=1137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x0, 0x10, &(0x7f0000001440), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000001500)="b90103606989068c3c27004065582f9e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000001540)="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", &(0x7f0000001680)}, 0x28) 22.212818ms ago: executing program 0 (id=1138): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) 21.939658ms ago: executing program 3 (id=1139): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x4, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) 21.688518ms ago: executing program 4 (id=1140): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x80000009, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x26}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.538078ms ago: executing program 0 (id=1141): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 0s ago: executing program 0 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000e80)={r2, &(0x7f0000000ec0)}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 23.356779][ T28] audit: type=1400 audit(1794405538.509:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.360340][ T279] cgroup: Unknown subsys name 'net' [ 23.379469][ T28] audit: type=1400 audit(1794405538.509:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.406804][ T28] audit: type=1400 audit(1794405538.549:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.407221][ T279] cgroup: Unknown subsys name 'devices' [ 23.524865][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.530511][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.635727][ T28] audit: type=1400 audit(1794405538.789:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.658967][ T28] audit: type=1400 audit(1794405538.789:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.683887][ T28] audit: type=1400 audit(1794405538.789:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.712776][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.721557][ T28] audit: type=1400 audit(1794405538.869:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.746991][ T28] audit: type=1400 audit(1794405538.869:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.770091][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.773036][ T28] audit: type=1400 audit(1794405538.909:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.806754][ T28] audit: type=1400 audit(1794405538.909:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.591128][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.598393][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.606269][ T288] device bridge_slave_0 entered promiscuous mode [ 24.613564][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.620652][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.628341][ T288] device bridge_slave_1 entered promiscuous mode [ 24.699147][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.706248][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.713757][ T287] device bridge_slave_0 entered promiscuous mode [ 24.720874][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.727994][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.735619][ T287] device bridge_slave_1 entered promiscuous mode [ 24.803498][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.810585][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.818520][ T291] device bridge_slave_0 entered promiscuous mode [ 24.828714][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.836130][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.843684][ T291] device bridge_slave_1 entered promiscuous mode [ 24.850327][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.857463][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.864966][ T290] device bridge_slave_0 entered promiscuous mode [ 24.876891][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.883982][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.891498][ T289] device bridge_slave_0 entered promiscuous mode [ 24.901659][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.908834][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.916411][ T289] device bridge_slave_1 entered promiscuous mode [ 24.929671][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.936917][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.944504][ T290] device bridge_slave_1 entered promiscuous mode [ 25.142265][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.149387][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.156718][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.163778][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.175286][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.182898][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.191290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.199237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.231487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.240193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.248617][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.255683][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.263270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.271655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.280773][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.287860][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.295473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.315810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.323794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.331867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.340388][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.347521][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.355587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.365649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.391399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.400379][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.407474][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.433800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.443797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.463810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.472376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.480894][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.488073][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.495750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.504088][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.511118][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.525195][ T288] device veth0_vlan entered promiscuous mode [ 25.535930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.543950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.551937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.559801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.568745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.577050][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.584113][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.592442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.600742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.608993][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.616092][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.623667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.631876][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.638970][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.646510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.654696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.662194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.681845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.690554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.699088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.707758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.716213][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.723319][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.730861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.739180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.750058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.758560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.768277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.776567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.786274][ T288] device veth1_macvtap entered promiscuous mode [ 25.795647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.803635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.811710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.827379][ T287] device veth0_vlan entered promiscuous mode [ 25.833915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.842395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.850973][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.859370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.867778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.875440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.898138][ T287] device veth1_macvtap entered promiscuous mode [ 25.907935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.916422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.924930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.933264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.941701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.950282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.958616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.980145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.988786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.997397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.005799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.014904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.023323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.031377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.039994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.048528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.056990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.079697][ T289] device veth0_vlan entered promiscuous mode [ 26.088663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.097500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.106228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.114735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.123791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.131721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.140189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.147902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.156409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.164495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.177188][ T291] device veth0_vlan entered promiscuous mode [ 26.184805][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 26.194920][ T290] device veth0_vlan entered promiscuous mode [ 26.207308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.215017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.222454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.231539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.240107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.247699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.259434][ T289] device veth1_macvtap entered promiscuous mode [ 26.275934][ T291] device veth1_macvtap entered promiscuous mode [ 26.283311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.291680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.300170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.309301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.317719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.326240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.331887][ C0] hrtimer: interrupt took 57912 ns [ 26.361084][ T290] device veth1_macvtap entered promiscuous mode [ 26.368335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.384170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.394715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.402712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.414911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.423597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.432040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.440907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.449542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.458549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.469065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.525451][ T315] -: renamed from syzkaller0 [ 26.543621][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.552048][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.567366][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.576390][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.792821][ T373] Ã2®|: renamed from team_slave_1 [ 28.902598][ T369] device syzkaller0 entered promiscuous mode [ 29.046432][ T366] device sit0 entered promiscuous mode [ 29.697186][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 29.697204][ T28] audit: type=1400 audit(1794405544.849:122): avc: denied { append } for pid=400 comm="syz.0.29" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.176630][ T28] audit: type=1400 audit(1794405545.329:123): avc: denied { create } for pid=418 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.442323][ T28] audit: type=1400 audit(1794405547.589:124): avc: denied { tracepoint } for pid=456 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.562835][ T28] audit: type=1400 audit(1794405547.719:125): avc: denied { setopt } for pid=456 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.303070][ T475] device syzkaller0 entered promiscuous mode [ 34.699812][ T28] audit: type=1400 audit(1794405549.849:126): avc: denied { create } for pid=499 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.139459][ T28] audit: type=1400 audit(1794405550.289:127): avc: denied { write } for pid=523 comm="syz.2.62" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.469666][ T536] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 35.572149][ T535] -1: renamed from syzkaller0 [ 36.288316][ T28] audit: type=1400 audit(1794405551.439:128): avc: denied { create } for pid=549 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 37.896577][ T602] device syzkaller0 entered promiscuous mode [ 38.705949][ T634] device wg2 entered promiscuous mode [ 39.400805][ T665] cgroup: fork rejected by pids controller in /syz3 [ 40.272373][ T716] Illegal XDP return value 4294967274 on prog (id 134) dev N/A, expect packet loss! [ 41.972495][ C0] sched: RT throttling activated [ 44.220389][ T728] device wg2 entered promiscuous mode [ 44.276186][ T739] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 44.331323][ T739] device syzkaller0 entered promiscuous mode [ 45.289569][ T28] audit: type=1400 audit(1794405560.439:129): avc: denied { create } for pid=760 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.344232][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.351397][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.359684][ T744] device bridge_slave_0 entered promiscuous mode [ 45.367170][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.374504][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.382090][ T744] device bridge_slave_1 entered promiscuous mode [ 45.597288][ T28] audit: type=1400 audit(1794405560.749:130): avc: denied { create } for pid=744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.714000][ T28] audit: type=1400 audit(1794405560.829:131): avc: denied { write } for pid=744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.740386][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.747507][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.754855][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.761946][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.785206][ T28] audit: type=1400 audit(1794405560.829:132): avc: denied { read } for pid=744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.904393][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.912243][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.920888][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.944730][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.953233][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.960328][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.967927][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.976512][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.983614][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.006459][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.063304][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.080608][ T744] device veth0_vlan entered promiscuous mode [ 46.097162][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.107892][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.127270][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.152768][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.179058][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.201167][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.240940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.255094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.284248][ T744] device veth1_macvtap entered promiscuous mode [ 46.312213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.320164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.328804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.340064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.360950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.475068][ T798] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 46.498534][ T798] device syzkaller0 entered promiscuous mode [ 46.573493][ T819] -: renamed from syzkaller0 [ 46.653463][ T10] device bridge_slave_1 left promiscuous mode [ 46.669940][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.703281][ T10] device bridge_slave_0 left promiscuous mode [ 46.709493][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.747318][ T10] device veth1_macvtap left promiscuous mode [ 46.760084][ T10] device veth0_vlan left promiscuous mode [ 46.840456][ T28] audit: type=1400 audit(1794405561.989:133): avc: denied { create } for pid=851 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.985416][ T850] Ã2®|: renamed from team_slave_1 [ 47.041863][ T854] device sit0 entered promiscuous mode [ 48.589023][ T934] syz.2.168 (934) used obsolete PPPIOCDETACH ioctl [ 49.050359][ T947] device sit0 entered promiscuous mode [ 50.667647][ T28] audit: type=1400 audit(1794405565.819:134): avc: denied { ioctl } for pid=1034 comm="syz.1.186" path="socket:[18386]" dev="sockfs" ino=18386 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.698386][ T1035] device syzkaller0 entered promiscuous mode [ 50.723709][ T1035] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 50.986582][ T28] audit: type=1400 audit(1794405566.139:135): avc: denied { create } for pid=1047 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.194362][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 52.447718][ T1085] device syzkaller0 entered promiscuous mode [ 52.835755][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.844306][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.890471][ T1097] device bridge_slave_1 left promiscuous mode [ 52.903330][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.925366][ T1097] device bridge_slave_0 left promiscuous mode [ 52.943508][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.574299][ T1122] device sit0 left promiscuous mode [ 54.600960][ T1123] device sit0 entered promiscuous mode [ 54.643199][ T1129] erspan0: refused to change device tx_queue_len [ 54.712590][ T1120] syz.0.207 (1120) used greatest stack depth: 17576 bytes left [ 54.755671][ T1132] device sit0 left promiscuous mode [ 54.885016][ T1132] device sit0 entered promiscuous mode [ 55.460051][ T1150] pimreg1: tun_chr_ioctl cmd 1074025677 [ 55.482638][ T1150] pimreg1: linktype set to 773 [ 56.741111][ T28] audit: type=1400 audit(1794405571.889:136): avc: denied { create } for pid=1221 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.747429][ T1219] device syzkaller0 entered promiscuous mode [ 56.947677][ T1237] device syzkaller0 entered promiscuous mode [ 57.559843][ T1255] device syzkaller0 entered promiscuous mode [ 58.158242][ T948] syz.0.165 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.185069][ T948] CPU: 1 PID: 948 Comm: syz.0.165 Not tainted syzkaller #0 [ 58.192333][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 58.202426][ T948] Call Trace: [ 58.205724][ T948] [ 58.208675][ T948] __dump_stack+0x21/0x24 [ 58.213034][ T948] dump_stack_lvl+0x110/0x170 [ 58.217723][ T948] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.222773][ T948] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 58.228599][ T948] ? ___ratelimit+0x40a/0x590 [ 58.233306][ T948] dump_stack+0x15/0x24 [ 58.237477][ T948] dump_header+0xdb/0x660 [ 58.241848][ T948] ? __cfi_gfp_zone+0x10/0x10 [ 58.246541][ T948] oom_kill_process+0x32a/0x410 [ 58.251420][ T948] ? kvm_sched_clock_read+0x18/0x40 [ 58.256646][ T948] out_of_memory+0x630/0x930 [ 58.261280][ T948] ? __cfi_out_of_memory+0x10/0x10 [ 58.266440][ T948] mem_cgroup_out_of_memory+0x2be/0x390 [ 58.272016][ T948] ? __kasan_check_write+0x14/0x20 [ 58.277155][ T948] ? mem_cgroup_oom_trylock+0x360/0x360 [ 58.282730][ T948] try_charge_memcg+0xb8a/0x1650 [ 58.287698][ T948] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 58.293099][ T948] ? __asan_set_shadow_00+0xe/0x10 [ 58.298246][ T948] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 58.304180][ T948] charge_memcg+0x81/0x1f0 [ 58.308631][ T948] __mem_cgroup_charge+0x93/0x290 [ 58.313690][ T948] ? xas_start+0x31d/0x3e0 [ 58.318151][ T948] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.323801][ T948] ? xas_load+0x3a2/0x3c0 [ 58.328151][ T948] shmem_add_to_page_cache+0x5b1/0xae0 [ 58.333660][ T948] ? put_page+0xb0/0xb0 [ 58.337846][ T948] ? do_fault+0x1b23/0x1e30 [ 58.342369][ T948] shmem_get_folio_gfp+0xef9/0x20f0 [ 58.347594][ T948] shmem_write_begin+0xea/0x2c0 [ 58.352463][ T948] generic_perform_write+0x32d/0x740 [ 58.357772][ T948] ? __cfi_generic_perform_write+0x10/0x10 [ 58.363600][ T948] ? __cfi_file_update_time+0x10/0x10 [ 58.369000][ T948] shmem_file_write_iter+0x104/0x130 [ 58.374305][ T948] __kernel_write_iter+0x2a9/0x6a0 [ 58.379429][ T948] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.385083][ T948] ? __sanitizer_cov_trace_pc+0x5c/0x60 [ 58.390660][ T948] ? iov_iter_bvec+0x53/0x1f0 [ 58.395397][ T948] dump_user_range+0x3e6/0x630 [ 58.400209][ T948] ? __cfi_dump_user_range+0x10/0x10 [ 58.405531][ T948] ? dump_align+0xfe/0x120 [ 58.409973][ T948] ? dump_emit+0xa8/0xc0 [ 58.414232][ T948] elf_core_dump+0x2b60/0x30b0 [ 58.419021][ T948] ? __cfi_elf_core_dump+0x10/0x10 [ 58.424185][ T948] ? dump_interrupted+0xd0/0xd0 [ 58.429051][ T948] ? filp_open+0x195/0x1e0 [ 58.433512][ T948] ? 0xffffffffff600000 [ 58.437697][ T948] do_coredump+0x160e/0x23a0 [ 58.442308][ T948] ? __cfi_do_coredump+0x10/0x10 [ 58.447264][ T948] ? kmem_cache_free+0x12d/0x300 [ 58.452225][ T948] ? ____kasan_slab_free+0x13d/0x180 [ 58.457536][ T948] ? get_signal+0xac2/0x1700 [ 58.462151][ T948] ? kmem_cache_free+0x12d/0x300 [ 58.467111][ T948] get_signal+0x157d/0x1700 [ 58.471639][ T948] ? __cfi_get_signal+0x10/0x10 [ 58.476526][ T948] ? force_sig_info_to_task+0x306/0x3b0 [ 58.482098][ T948] arch_do_signal_or_restart+0xd1/0x11c0 [ 58.487752][ T948] ? page_fault_oops+0x8b0/0x8b0 [ 58.492714][ T948] ? down_read_trylock+0x27f/0x660 [ 58.497848][ T948] ? find_vma+0x89/0xd0 [ 58.502034][ T948] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.508234][ T948] ? do_user_addr_fault+0xd10/0x1030 [ 58.513550][ T948] exit_to_user_mode_loop+0x7a/0xb0 [ 58.518762][ T948] exit_to_user_mode_prepare+0x87/0xd0 [ 58.524263][ T948] irqentry_exit_to_user_mode+0x9/0x10 [ 58.529748][ T948] irqentry_exit+0x12/0x40 [ 58.534197][ T948] exc_page_fault+0x5e/0xb0 [ 58.538722][ T948] asm_exc_page_fault+0x27/0x30 [ 58.543612][ T948] RIP: 0033:0x7f0e67da8f21 [ 58.548049][ T948] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.567676][ T948] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 58.573848][ T948] RAX: 0000000000000000 RBX: 00007f0e68025fa0 RCX: 00007f0e67da8f19 [ 58.581859][ T948] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 58.589936][ T948] RBP: 00007f0e67e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 58.597926][ T948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.605924][ T948] R13: 00007f0e68026038 R14: 00007f0e68025fa0 R15: 00007ffde9e52918 [ 58.613927][ T948] [ 58.627291][ T948] memory: usage 307200kB, limit 307200kB, failcnt 16837 [ 58.669788][ T948] memory+swap: usage 431480kB, limit 9007199254740988kB, failcnt 0 [ 58.686927][ T948] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 58.694616][ T948] Memory cgroup stats for /syz0: [ 58.694784][ T948] anon 638976 [ 58.694784][ T948] file 313200640 [ 58.694784][ T948] kernel 0 [ 58.694784][ T948] kernel_stack 0 [ 58.694784][ T948] pagetables 0 [ 58.694784][ T948] sec_pagetables 0 [ 58.694784][ T948] percpu 0 [ 58.694784][ T948] sock 0 [ 58.694784][ T948] vmalloc 0 [ 58.694784][ T948] shmem 313192448 [ 58.694784][ T948] file_mapped 8192 [ 58.694784][ T948] file_dirty 8192 [ 58.694784][ T948] file_writeback 0 [ 58.694784][ T948] swapcached 733184 [ 58.694784][ T948] anon_thp 0 [ 58.694784][ T948] file_thp 0 [ 58.694784][ T948] shmem_thp 0 [ 58.694784][ T948] inactive_anon 166064128 [ 58.694784][ T948] active_anon 148500480 [ 58.694784][ T948] inactive_file 8192 [ 58.694784][ T948] active_file 0 [ 58.694784][ T948] unevictable 0 [ 58.694784][ T948] slab_reclaimable 0 [ 58.694784][ T948] slab_unreclaimable 0 [ 58.694784][ T948] slab 0 [ 58.694784][ T948] workingset_refault_anon 0 [ 58.791300][ T948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.165,pid=951,uid=0 [ 58.848075][ T948] Memory cgroup out of memory: Killed process 951 (syz.0.165) total-vm:90696kB, anon-rss:1388kB, file-rss:52480kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 59.198355][ T931] syz.0.165 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.781731][ T931] CPU: 0 PID: 931 Comm: syz.0.165 Not tainted syzkaller #0 [ 59.789012][ T931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 59.799115][ T931] Call Trace: [ 59.802427][ T931] [ 59.805561][ T931] __dump_stack+0x21/0x24 [ 59.810017][ T931] dump_stack_lvl+0x110/0x170 [ 59.814739][ T931] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.819806][ T931] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 59.825634][ T931] ? ___ratelimit+0x40a/0x590 [ 59.830361][ T931] dump_stack+0x15/0x24 [ 59.834562][ T931] dump_header+0xdb/0x660 [ 59.838922][ T931] ? __cfi_gfp_zone+0x10/0x10 [ 59.843624][ T931] oom_kill_process+0x32a/0x410 [ 59.848501][ T931] ? kvm_sched_clock_read+0x18/0x40 [ 59.853757][ T931] out_of_memory+0x630/0x930 [ 59.858403][ T931] ? __cfi_out_of_memory+0x10/0x10 [ 59.863541][ T931] mem_cgroup_out_of_memory+0x2be/0x390 [ 59.869113][ T931] ? __kasan_check_write+0x14/0x20 [ 59.874250][ T931] ? mem_cgroup_oom_trylock+0x360/0x360 [ 59.879821][ T931] try_charge_memcg+0xb8a/0x1650 [ 59.884792][ T931] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 59.890537][ T931] ? __asan_set_shadow_00+0xe/0x10 [ 59.895676][ T931] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 59.901599][ T931] charge_memcg+0x81/0x1f0 [ 59.906038][ T931] __mem_cgroup_charge+0x93/0x290 [ 59.911080][ T931] ? xas_start+0x31d/0x3e0 [ 59.915516][ T931] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 59.921170][ T931] ? xas_load+0x3a2/0x3c0 [ 59.925519][ T931] shmem_add_to_page_cache+0x5b1/0xae0 [ 59.931005][ T931] ? put_page+0xb0/0xb0 [ 59.935182][ T931] ? do_fault+0x1b23/0x1e30 [ 59.939708][ T931] shmem_get_folio_gfp+0xef9/0x20f0 [ 59.944952][ T931] shmem_write_begin+0xea/0x2c0 [ 59.949914][ T931] generic_perform_write+0x32d/0x740 [ 59.955682][ T931] ? __cfi_generic_perform_write+0x10/0x10 [ 59.961692][ T931] ? __cfi_file_update_time+0x10/0x10 [ 59.967114][ T931] shmem_file_write_iter+0x104/0x130 [ 59.972477][ T931] __kernel_write_iter+0x2a9/0x6a0 [ 59.977621][ T931] ? __cfi___kernel_write_iter+0x10/0x10 [ 59.983363][ T931] ? dump_user_range+0x547/0x630 [ 59.988320][ T931] ? iov_iter_bvec+0x53/0x1f0 [ 59.993017][ T931] dump_user_range+0x3e6/0x630 [ 59.997827][ T931] ? __cfi_dump_user_range+0x10/0x10 [ 60.003131][ T931] ? dump_align+0xfe/0x120 [ 60.007570][ T931] ? dump_emit+0xa8/0xc0 [ 60.011829][ T931] elf_core_dump+0x2b60/0x30b0 [ 60.016618][ T931] ? __cfi_elf_core_dump+0x10/0x10 [ 60.021764][ T931] ? dump_interrupted+0xd0/0xd0 [ 60.026636][ T931] ? filp_open+0x195/0x1e0 [ 60.031240][ T931] ? 0xffffffffff600000 [ 60.035422][ T931] do_coredump+0x160e/0x23a0 [ 60.040034][ T931] ? __cfi_do_coredump+0x10/0x10 [ 60.044989][ T931] ? kmem_cache_free+0x12d/0x300 [ 60.049967][ T931] ? ____kasan_slab_free+0x13d/0x180 [ 60.055297][ T931] ? get_signal+0xac2/0x1700 [ 60.059913][ T931] ? kmem_cache_free+0x12d/0x300 [ 60.064878][ T931] get_signal+0x157d/0x1700 [ 60.069411][ T931] ? __cfi_get_signal+0x10/0x10 [ 60.074315][ T931] ? force_sig_info_to_task+0x306/0x3b0 [ 60.079901][ T931] arch_do_signal_or_restart+0xd1/0x11c0 [ 60.085562][ T931] ? page_fault_oops+0x8b0/0x8b0 [ 60.090523][ T931] ? down_read_trylock+0x27f/0x660 [ 60.095674][ T931] ? find_vma+0x89/0xd0 [ 60.099888][ T931] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.106075][ T931] ? do_user_addr_fault+0xd10/0x1030 [ 60.111397][ T931] exit_to_user_mode_loop+0x7a/0xb0 [ 60.116615][ T931] exit_to_user_mode_prepare+0x87/0xd0 [ 60.122121][ T931] irqentry_exit_to_user_mode+0x9/0x10 [ 60.127603][ T931] irqentry_exit+0x12/0x40 [ 60.132051][ T931] exc_page_fault+0x5e/0xb0 [ 60.136578][ T931] asm_exc_page_fault+0x27/0x30 [ 60.141461][ T931] RIP: 0033:0x7f0e67da8f21 [ 60.145894][ T931] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 60.165615][ T931] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 60.171826][ T931] RAX: 0000000000000000 RBX: 00007f0e68025fa0 RCX: 00007f0e67da8f19 [ 60.179833][ T931] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 60.187835][ T931] RBP: 00007f0e67e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 60.195831][ T931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.203816][ T931] R13: 00007f0e68026038 R14: 00007f0e68025fa0 R15: 00007ffde9e52918 [ 60.211812][ T931] [ 60.640326][ T1339] bridge0: port 3(7Ã2®|) entered blocking state [ 60.652562][ T1339] bridge0: port 3(7Ã2®|) entered disabled state [ 60.669678][ T1339] device 7Ã2®| entered promiscuous mode [ 60.881136][ T1349] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.888431][ T1349] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.998981][ T931] memory: usage 304292kB, limit 307200kB, failcnt 18952 [ 61.006197][ T931] memory+swap: usage 429052kB, limit 9007199254740988kB, failcnt 0 [ 61.050463][ T931] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.112265][ T951] syz.0.165 (951) used greatest stack depth: 15624 bytes left [ 61.251916][ T931] Memory cgroup stats for /syz0: [ 61.252117][ T931] anon 647168 [ 61.252117][ T931] file 313430016 [ 61.252117][ T931] kernel 0 [ 61.252117][ T931] kernel_stack 0 [ 61.252117][ T931] pagetables 0 [ 61.252117][ T931] sec_pagetables 0 [ 61.252117][ T931] percpu 0 [ 61.252117][ T931] sock 0 [ 61.252117][ T931] vmalloc 0 [ 61.252117][ T931] shmem 311123968 [ 61.252117][ T931] file_mapped 1732608 [ 61.252117][ T931] file_dirty 8192 [ 61.252117][ T931] file_writeback 196608 [ 61.252117][ T931] swapcached 233472 [ 61.252117][ T931] anon_thp 0 [ 61.252117][ T931] file_thp 0 [ 61.252117][ T931] shmem_thp 0 [ 61.252117][ T931] inactive_anon 210481152 [ 61.252117][ T931] active_anon 100208640 [ 61.252117][ T931] inactive_file 987136 [ 61.252117][ T931] active_file 622592 [ 61.252117][ T931] unevictable 0 [ 61.252117][ T931] slab_reclaimable 0 [ 61.252117][ T931] slab_unreclaimable 0 [ 61.252117][ T931] slab 0 [ 61.252117][ T931] workingset_refault_anon 0 [ 61.376066][ T931] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.165,pid=926,uid=0 [ 62.049778][ T931] Memory cgroup out of memory: Killed process 926 (syz.0.165) total-vm:90300kB, anon-rss:1364kB, file-rss:50740kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 64.616901][ T926] syz.0.165 (926) used greatest stack depth: 14464 bytes left [ 65.204897][ T919] syz.0.165 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.282547][ T919] CPU: 0 PID: 919 Comm: syz.0.165 Not tainted syzkaller #0 [ 65.289834][ T919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 65.299921][ T919] Call Trace: [ 65.303238][ T919] [ 65.306668][ T919] __dump_stack+0x21/0x24 [ 65.311064][ T919] dump_stack_lvl+0x110/0x170 [ 65.315805][ T919] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.320874][ T919] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 65.326734][ T919] ? ___ratelimit+0x40a/0x590 [ 65.331466][ T919] dump_stack+0x15/0x24 [ 65.335662][ T919] dump_header+0xdb/0x660 [ 65.340046][ T919] ? __cfi_gfp_zone+0x10/0x10 [ 65.344772][ T919] oom_kill_process+0x32a/0x410 [ 65.349709][ T919] ? kvm_sched_clock_read+0x18/0x40 [ 65.354986][ T919] out_of_memory+0x630/0x930 [ 65.359648][ T919] ? __cfi_out_of_memory+0x10/0x10 [ 65.364815][ T919] mem_cgroup_out_of_memory+0x2be/0x390 [ 65.370421][ T919] ? __kasan_check_write+0x14/0x20 [ 65.375567][ T919] ? mem_cgroup_oom_trylock+0x360/0x360 [ 65.381156][ T919] try_charge_memcg+0xb8a/0x1650 [ 65.386161][ T919] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 65.391571][ T919] ? __asan_set_shadow_00+0xe/0x10 [ 65.396725][ T919] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 65.402663][ T919] charge_memcg+0x81/0x1f0 [ 65.407113][ T919] __mem_cgroup_charge+0x93/0x290 [ 65.412174][ T919] ? xas_start+0x31d/0x3e0 [ 65.416627][ T919] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.422297][ T919] ? xas_load+0x3a2/0x3c0 [ 65.426670][ T919] shmem_add_to_page_cache+0x5b1/0xae0 [ 65.432165][ T919] ? put_page+0xb0/0xb0 [ 65.436363][ T919] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 65.442759][ T919] shmem_get_folio_gfp+0xef9/0x20f0 [ 65.448052][ T919] shmem_write_begin+0xea/0x2c0 [ 65.452967][ T919] generic_perform_write+0x32d/0x740 [ 65.458303][ T919] ? __cfi_generic_perform_write+0x10/0x10 [ 65.464146][ T919] ? __cfi_file_update_time+0x10/0x10 [ 65.469572][ T919] shmem_file_write_iter+0x104/0x130 [ 65.474903][ T919] __kernel_write_iter+0x2a9/0x6a0 [ 65.480047][ T919] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.485712][ T919] ? vfs_llseek+0xbb/0xf0 [ 65.490083][ T919] ? iov_iter_bvec+0x53/0x1f0 [ 65.494809][ T919] dump_user_range+0x3e6/0x630 [ 65.499602][ T919] ? __cfi_dump_user_range+0x10/0x10 [ 65.504919][ T919] ? dump_align+0xfe/0x120 [ 65.509366][ T919] ? dump_emit+0xa8/0xc0 [ 65.513642][ T919] elf_core_dump+0x2b60/0x30b0 [ 65.518447][ T919] ? __cfi_elf_core_dump+0x10/0x10 [ 65.523600][ T919] ? dump_interrupted+0xd0/0xd0 [ 65.528651][ T919] ? filp_open+0x195/0x1e0 [ 65.533105][ T919] ? 0xffffffffff600000 [ 65.537464][ T919] do_coredump+0x160e/0x23a0 [ 65.542092][ T919] ? __cfi_do_coredump+0x10/0x10 [ 65.547055][ T919] ? kmem_cache_free+0x12d/0x300 [ 65.552025][ T919] ? ____kasan_slab_free+0x13d/0x180 [ 65.557347][ T919] ? get_signal+0xac2/0x1700 [ 65.561977][ T919] ? kmem_cache_free+0x12d/0x300 [ 65.566958][ T919] get_signal+0x157d/0x1700 [ 65.571510][ T919] ? __cfi_get_signal+0x10/0x10 [ 65.576401][ T919] ? force_sig_info_to_task+0x306/0x3b0 [ 65.581991][ T919] arch_do_signal_or_restart+0xd1/0x11c0 [ 65.587665][ T919] ? page_fault_oops+0x8b0/0x8b0 [ 65.592640][ T919] ? down_read_trylock+0x27f/0x660 [ 65.597789][ T919] ? find_vma+0x89/0xd0 [ 65.601989][ T919] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.608180][ T919] ? do_user_addr_fault+0xd10/0x1030 [ 65.613688][ T919] exit_to_user_mode_loop+0x7a/0xb0 [ 65.619367][ T919] exit_to_user_mode_prepare+0x87/0xd0 [ 65.624866][ T919] irqentry_exit_to_user_mode+0x9/0x10 [ 65.630380][ T919] irqentry_exit+0x12/0x40 [ 65.634849][ T919] exc_page_fault+0x5e/0xb0 [ 65.639412][ T919] asm_exc_page_fault+0x27/0x30 [ 65.644305][ T919] RIP: 0033:0x7f0e67da8f21 [ 65.648746][ T919] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 65.668392][ T919] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 65.674497][ T919] RAX: 0000000000000000 RBX: 00007f0e68025fa0 RCX: 00007f0e67da8f19 [ 65.682508][ T919] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 65.690518][ T919] RBP: 00007f0e67e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 65.698521][ T919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.706520][ T919] R13: 00007f0e68026038 R14: 00007f0e68025fa0 R15: 00007ffde9e52918 [ 65.714536][ T919] [ 66.000904][ T919] memory: usage 307200kB, limit 307200kB, failcnt 26398 [ 66.442590][ T919] memory+swap: usage 431744kB, limit 9007199254740988kB, failcnt 0 [ 66.456378][ T919] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 66.580132][ T919] Memory cgroup stats for /syz0: [ 66.580319][ T919] anon 532480 [ 66.580319][ T919] file 313712640 [ 66.580319][ T919] kernel 0 [ 66.580319][ T919] kernel_stack 0 [ 66.580319][ T919] pagetables 0 [ 66.580319][ T919] sec_pagetables 0 [ 66.580319][ T919] percpu 0 [ 66.580319][ T919] sock 0 [ 66.580319][ T919] vmalloc 0 [ 66.580319][ T919] shmem 313704448 [ 66.580319][ T919] file_mapped 8192 [ 66.580319][ T919] file_dirty 8192 [ 66.580319][ T919] file_writeback 258048 [ 66.580319][ T919] swapcached 327680 [ 66.580319][ T919] anon_thp 0 [ 66.580319][ T919] file_thp 0 [ 66.580319][ T919] shmem_thp 0 [ 66.580319][ T919] inactive_anon 95485952 [ 66.580319][ T919] active_anon 218030080 [ 66.580319][ T919] inactive_file 8192 [ 66.580319][ T919] active_file 0 [ 66.580319][ T919] unevictable 0 [ 66.580319][ T919] slab_reclaimable 0 [ 66.580319][ T919] slab_unreclaimable 0 [ 66.580319][ T919] slab 0 [ 66.580319][ T919] workingset_refault_anon 0 [ 66.939332][ T919] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.165,pid=950,uid=0 [ 66.954315][ T919] Memory cgroup out of memory: Killed process 950 (syz.0.165) total-vm:90696kB, anon-rss:1388kB, file-rss:53440kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 67.066381][ T1446] device sit0 entered promiscuous mode [ 69.963924][ T30] oom_reaper: reaped process 950 (syz.0.165), now anon-rss:0kB, file-rss:22724kB, shmem-rss:0kB [ 72.300166][ T1498] device syzkaller0 entered promiscuous mode [ 72.323437][ T28] audit: type=1400 audit(1794405587.479:137): avc: denied { getattr } for pid=1501 comm="syz.1.310" path="net:[4026532382]" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.322456][ T28] audit: type=1400 audit(1794405588.469:138): avc: denied { setattr } for pid=1535 comm="syz.2.321" path="/net/tun" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 73.417636][ T943] syz.0.165 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 73.472292][ T943] CPU: 0 PID: 943 Comm: syz.0.165 Not tainted syzkaller #0 [ 73.479566][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 73.489653][ T943] Call Trace: [ 73.492959][ T943] [ 73.495917][ T943] __dump_stack+0x21/0x24 [ 73.500277][ T943] dump_stack_lvl+0x110/0x170 [ 73.504989][ T943] ? __cfi_dump_stack_lvl+0x8/0x8 [ 73.510039][ T943] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 73.515883][ T943] ? ___ratelimit+0x40a/0x590 [ 73.520596][ T943] dump_stack+0x15/0x24 [ 73.524767][ T943] dump_header+0xdb/0x660 [ 73.529122][ T943] ? __cfi_gfp_zone+0x10/0x10 [ 73.533816][ T943] oom_kill_process+0x32a/0x410 [ 73.538725][ T943] ? kvm_sched_clock_read+0x18/0x40 [ 73.543953][ T943] out_of_memory+0x630/0x930 [ 73.548573][ T943] ? __cfi_out_of_memory+0x10/0x10 [ 73.553796][ T943] mem_cgroup_out_of_memory+0x2be/0x390 [ 73.559357][ T943] ? __kasan_check_write+0x14/0x20 [ 73.564517][ T943] ? mem_cgroup_oom_trylock+0x360/0x360 [ 73.570118][ T943] try_charge_memcg+0xb8a/0x1650 [ 73.575104][ T943] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 73.580501][ T943] ? __asan_set_shadow_00+0xe/0x10 [ 73.585642][ T943] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 73.591566][ T943] charge_memcg+0x81/0x1f0 [ 73.596004][ T943] __mem_cgroup_charge+0x93/0x290 [ 73.601051][ T943] ? xas_start+0x31d/0x3e0 [ 73.605490][ T943] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 73.611142][ T943] ? xas_load+0x3a2/0x3c0 [ 73.615493][ T943] shmem_add_to_page_cache+0x5b1/0xae0 [ 73.620982][ T943] ? put_page+0xb0/0xb0 [ 73.625181][ T943] ? release_firmware_map_entry+0x190/0x190 [ 73.631100][ T943] shmem_get_folio_gfp+0xef9/0x20f0 [ 73.636331][ T943] shmem_write_begin+0xea/0x2c0 [ 73.641202][ T943] generic_perform_write+0x32d/0x740 [ 73.646506][ T943] ? __mark_inode_dirty+0x264/0x9c0 [ 73.651740][ T943] ? __cfi_generic_perform_write+0x10/0x10 [ 73.657566][ T943] ? __cfi_file_update_time+0x10/0x10 [ 73.662958][ T943] shmem_file_write_iter+0x104/0x130 [ 73.668267][ T943] __kernel_write_iter+0x2a9/0x6a0 [ 73.673401][ T943] ? __cfi___kernel_write_iter+0x10/0x10 [ 73.679050][ T943] ? vfs_llseek+0xbb/0xf0 [ 73.683416][ T943] ? iov_iter_bvec+0x53/0x1f0 [ 73.688137][ T943] dump_user_range+0x3e6/0x630 [ 73.692919][ T943] ? __cfi_dump_user_range+0x10/0x10 [ 73.698236][ T943] ? dump_align+0xfe/0x120 [ 73.702671][ T943] ? dump_emit+0xa8/0xc0 [ 73.706924][ T943] elf_core_dump+0x2b60/0x30b0 [ 73.711714][ T943] ? __cfi_elf_core_dump+0x10/0x10 [ 73.716850][ T943] ? dump_interrupted+0xd0/0xd0 [ 73.721728][ T943] ? filp_open+0x195/0x1e0 [ 73.726166][ T943] ? 0xffffffffff600000 [ 73.730341][ T943] do_coredump+0x160e/0x23a0 [ 73.734975][ T943] ? __cfi_do_coredump+0x10/0x10 [ 73.739930][ T943] ? kmem_cache_free+0x12d/0x300 [ 73.744889][ T943] ? ____kasan_slab_free+0x13d/0x180 [ 73.750203][ T943] ? get_signal+0xac2/0x1700 [ 73.754821][ T943] ? kmem_cache_free+0x12d/0x300 [ 73.759786][ T943] get_signal+0x157d/0x1700 [ 73.764313][ T943] ? __cfi_get_signal+0x10/0x10 [ 73.769186][ T943] ? force_sig_info_to_task+0x306/0x3b0 [ 73.774754][ T943] arch_do_signal_or_restart+0xd1/0x11c0 [ 73.780428][ T943] ? page_fault_oops+0x8b0/0x8b0 [ 73.785382][ T943] ? down_read_trylock+0x27f/0x660 [ 73.790540][ T943] ? find_vma+0x89/0xd0 [ 73.794716][ T943] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 73.800978][ T943] ? do_user_addr_fault+0xd10/0x1030 [ 73.806284][ T943] exit_to_user_mode_loop+0x7a/0xb0 [ 73.811496][ T943] exit_to_user_mode_prepare+0x87/0xd0 [ 73.816972][ T943] irqentry_exit_to_user_mode+0x9/0x10 [ 73.822450][ T943] irqentry_exit+0x12/0x40 [ 73.826885][ T943] exc_page_fault+0x5e/0xb0 [ 73.831411][ T943] asm_exc_page_fault+0x27/0x30 [ 73.836298][ T943] RIP: 0033:0x7f0e67da8f21 [ 73.840730][ T943] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 73.860354][ T943] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 73.866452][ T943] RAX: 0000000000000000 RBX: 00007f0e68025fa0 RCX: 00007f0e67da8f19 [ 73.874449][ T943] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 73.882443][ T943] RBP: 00007f0e67e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 73.890458][ T943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.898446][ T943] R13: 00007f0e68026038 R14: 00007f0e68025fa0 R15: 00007ffde9e52918 [ 73.906451][ T943] [ 73.922726][ T943] memory: usage 307200kB, limit 307200kB, failcnt 27898 [ 73.929716][ T943] memory+swap: usage 431528kB, limit 9007199254740988kB, failcnt 0 [ 73.982061][ T943] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 74.012410][ T943] Memory cgroup stats for /syz0: [ 74.014581][ T943] anon 532480 [ 74.014581][ T943] file 313356288 [ 74.014581][ T943] kernel 0 [ 74.014581][ T943] kernel_stack 0 [ 74.014581][ T943] pagetables 0 [ 74.014581][ T943] sec_pagetables 0 [ 74.014581][ T943] percpu 0 [ 74.014581][ T943] sock 0 [ 74.014581][ T943] vmalloc 0 [ 74.014581][ T943] shmem 313339904 [ 74.014581][ T943] file_mapped 8192 [ 74.014581][ T943] file_dirty 8192 [ 74.014581][ T943] file_writeback 679936 [ 74.014581][ T943] swapcached 684032 [ 74.014581][ T943] anon_thp 0 [ 74.014581][ T943] file_thp 0 [ 74.014581][ T943] shmem_thp 0 [ 74.014581][ T943] inactive_anon 190173184 [ 74.014581][ T943] active_anon 123596800 [ 74.014581][ T943] inactive_file 0 [ 74.014581][ T943] active_file 16384 [ 74.014581][ T943] unevictable 0 [ 74.014581][ T943] slab_reclaimable 0 [ 74.014581][ T943] slab_unreclaimable 0 [ 74.014581][ T943] slab 0 [ 74.014581][ T943] workingset_refault_anon 0 [ 75.152745][ T943] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.165,pid=920,uid=0 [ 75.222567][ T943] Memory cgroup out of memory: Killed process 920 (syz.0.165) total-vm:90300kB, anon-rss:1364kB, file-rss:53420kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 76.206195][ T949] syz.0.165 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 76.455099][ T949] CPU: 0 PID: 949 Comm: syz.0.165 Not tainted syzkaller #0 [ 76.462368][ T949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 76.472467][ T949] Call Trace: [ 76.475775][ T949] [ 76.478736][ T949] __dump_stack+0x21/0x24 [ 76.483106][ T949] dump_stack_lvl+0x110/0x170 [ 76.487823][ T949] ? __cfi_dump_stack_lvl+0x8/0x8 [ 76.492886][ T949] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 76.498731][ T949] ? ___ratelimit+0x40a/0x590 [ 76.503446][ T949] dump_stack+0x15/0x24 [ 76.507618][ T949] dump_header+0xdb/0x660 [ 76.511991][ T949] ? __cfi_gfp_zone+0x10/0x10 [ 76.516695][ T949] oom_kill_process+0x32a/0x410 [ 76.521590][ T949] ? kvm_sched_clock_read+0x18/0x40 [ 76.526832][ T949] out_of_memory+0x630/0x930 [ 76.531452][ T949] ? __cfi_out_of_memory+0x10/0x10 [ 76.536590][ T949] mem_cgroup_out_of_memory+0x2be/0x390 [ 76.542156][ T949] ? __kasan_check_write+0x14/0x20 [ 76.547283][ T949] ? mem_cgroup_oom_trylock+0x360/0x360 [ 76.552847][ T949] try_charge_memcg+0xb8a/0x1650 [ 76.557813][ T949] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 76.563204][ T949] ? __asan_set_shadow_00+0xe/0x10 [ 76.568356][ T949] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 76.574400][ T949] charge_memcg+0x81/0x1f0 [ 76.578862][ T949] __mem_cgroup_charge+0x93/0x290 [ 76.583905][ T949] ? xas_start+0x31d/0x3e0 [ 76.588339][ T949] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 76.593995][ T949] ? xas_load+0x3a2/0x3c0 [ 76.598344][ T949] shmem_add_to_page_cache+0x5b1/0xae0 [ 76.603827][ T949] ? put_page+0xb0/0xb0 [ 76.608007][ T949] shmem_get_folio_gfp+0xef9/0x20f0 [ 76.613236][ T949] shmem_write_begin+0xea/0x2c0 [ 76.618106][ T949] generic_perform_write+0x32d/0x740 [ 76.623415][ T949] ? __cfi_generic_perform_write+0x10/0x10 [ 76.629247][ T949] ? __cfi_file_update_time+0x10/0x10 [ 76.634745][ T949] shmem_file_write_iter+0x104/0x130 [ 76.640058][ T949] __kernel_write_iter+0x2a9/0x6a0 [ 76.645186][ T949] ? __cfi___kernel_write_iter+0x10/0x10 [ 76.650937][ T949] ? iov_iter_bvec+0x53/0x1f0 [ 76.655671][ T949] dump_user_range+0x3e6/0x630 [ 76.660482][ T949] ? __cfi_dump_user_range+0x10/0x10 [ 76.665777][ T949] ? dump_align+0xfe/0x120 [ 76.670218][ T949] ? dump_emit+0xa8/0xc0 [ 76.674528][ T949] elf_core_dump+0x2b60/0x30b0 [ 76.679325][ T949] ? __cfi_elf_core_dump+0x10/0x10 [ 76.684482][ T949] ? dump_interrupted+0xd0/0xd0 [ 76.689395][ T949] ? filp_open+0x195/0x1e0 [ 76.693836][ T949] ? 0xffffffffff600000 [ 76.698010][ T949] do_coredump+0x160e/0x23a0 [ 76.702638][ T949] ? __cfi_do_coredump+0x10/0x10 [ 76.707607][ T949] ? kmem_cache_free+0x12d/0x300 [ 76.712566][ T949] ? ____kasan_slab_free+0x13d/0x180 [ 76.717901][ T949] ? get_signal+0xac2/0x1700 [ 76.722517][ T949] ? kmem_cache_free+0x12d/0x300 [ 76.727571][ T949] get_signal+0x157d/0x1700 [ 76.732104][ T949] ? __cfi_get_signal+0x10/0x10 [ 76.736981][ T949] ? force_sig_info_to_task+0x306/0x3b0 [ 76.742577][ T949] arch_do_signal_or_restart+0xd1/0x11c0 [ 76.748240][ T949] ? page_fault_oops+0x8b0/0x8b0 [ 76.753224][ T949] ? down_read_trylock+0x27f/0x660 [ 76.758394][ T949] ? find_vma+0x89/0xd0 [ 76.762577][ T949] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 76.768755][ T949] ? do_user_addr_fault+0xd10/0x1030 [ 76.774069][ T949] exit_to_user_mode_loop+0x7a/0xb0 [ 76.779298][ T949] exit_to_user_mode_prepare+0x87/0xd0 [ 76.784965][ T949] irqentry_exit_to_user_mode+0x9/0x10 [ 76.790541][ T949] irqentry_exit+0x12/0x40 [ 76.794989][ T949] exc_page_fault+0x5e/0xb0 [ 76.799568][ T949] asm_exc_page_fault+0x27/0x30 [ 76.804454][ T949] RIP: 0033:0x7f0e67da8f21 [ 76.808893][ T949] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 76.828713][ T949] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 76.834811][ T949] RAX: 0000000000000000 RBX: 00007f0e68025fa0 RCX: 00007f0e67da8f19 [ 76.842808][ T949] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 76.850888][ T949] RBP: 00007f0e67e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 76.859053][ T949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.867058][ T949] R13: 00007f0e68026038 R14: 00007f0e68025fa0 R15: 00007ffde9e52918 [ 76.875057][ T949] [ 76.885777][ T949] memory: usage 303984kB, limit 307200kB, failcnt 29152 [ 76.967065][ T949] memory+swap: usage 423764kB, limit 9007199254740988kB, failcnt 0 [ 77.112992][ T949] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 77.622584][ T28] audit: type=1400 audit(1794405592.779:139): avc: denied { create } for pid=1684 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.853686][ T949] Memory cgroup stats for /syz0: [ 77.853887][ T949] anon 372736 [ 77.853887][ T949] file 296513536 [ 77.853887][ T949] kernel 0 [ 77.853887][ T949] kernel_stack 0 [ 77.853887][ T949] pagetables 0 [ 77.853887][ T949] sec_pagetables 0 [ 77.853887][ T949] percpu 0 [ 77.853887][ T949] sock 0 [ 77.853887][ T949] vmalloc 0 [ 77.853887][ T949] shmem 296370176 [ 77.853887][ T949] file_mapped 8192 [ 77.853887][ T949] file_dirty 8192 [ 77.853887][ T949] file_writeback 942080 [ 77.853887][ T949] swapcached 1060864 [ 77.853887][ T949] anon_thp 0 [ 77.853887][ T949] file_thp 0 [ 77.853887][ T949] shmem_thp 0 [ 77.853887][ T949] inactive_anon 156192768 [ 77.853887][ T949] active_anon 140300288 [ 77.853887][ T949] inactive_file 8192 [ 77.853887][ T949] active_file 135168 [ 77.853887][ T949] unevictable 0 [ 77.853887][ T949] slab_reclaimable 0 [ 77.853887][ T949] slab_unreclaimable 0 [ 77.853887][ T949] slab 0 [ 77.853887][ T949] workingset_refault_anon 0 [ 78.026070][ T28] audit: type=1400 audit(1794405593.179:140): avc: denied { create } for pid=1709 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.133568][ T28] audit: type=1400 audit(1794405593.279:141): avc: denied { create } for pid=1713 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 78.172467][ T949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.165,pid=930,uid=0 [ 78.187963][ T949] Memory cgroup out of memory: Killed process 930 (syz.0.165) total-vm:90696kB, anon-rss:1352kB, file-rss:53060kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 78.413960][ T1720] device veth0_vlan left promiscuous mode [ 78.440235][ T1720] device veth0_vlan entered promiscuous mode [ 80.963126][ T30] oom_reaper: reaped process 930 (syz.0.165), now anon-rss:0kB, file-rss:14600kB, shmem-rss:0kB [ 81.348406][ T1762] Ÿë: port 1(bond_slave_1) entered blocking state [ 81.409450][ T1762] Ÿë: port 1(bond_slave_1) entered disabled state [ 81.453228][ T1762] device bond_slave_1 entered promiscuous mode [ 85.244708][ T1817] -: renamed from syzkaller0 [ 85.548389][ T945] syz.0.165 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.800420][ T945] CPU: 1 PID: 945 Comm: syz.0.165 Not tainted syzkaller #0 [ 85.807688][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.817768][ T945] Call Trace: [ 85.821091][ T945] [ 85.824049][ T945] __dump_stack+0x21/0x24 [ 85.828414][ T945] dump_stack_lvl+0x110/0x170 [ 85.833118][ T945] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.838172][ T945] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 85.844004][ T945] ? ___ratelimit+0x40a/0x590 [ 85.848719][ T945] dump_stack+0x15/0x24 [ 85.852906][ T945] dump_header+0xdb/0x660 [ 85.857275][ T945] ? __cfi_gfp_zone+0x10/0x10 [ 85.861996][ T945] oom_kill_process+0x32a/0x410 [ 85.866971][ T945] ? kvm_sched_clock_read+0x18/0x40 [ 85.872207][ T945] out_of_memory+0x630/0x930 [ 85.876833][ T945] ? __cfi_out_of_memory+0x10/0x10 [ 85.881991][ T945] mem_cgroup_out_of_memory+0x2be/0x390 [ 85.887559][ T945] ? __kasan_check_write+0x14/0x20 [ 85.892717][ T945] ? mem_cgroup_oom_trylock+0x360/0x360 [ 85.898472][ T945] try_charge_memcg+0xb8a/0x1650 [ 85.903448][ T945] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 85.908857][ T945] ? __asan_set_shadow_00+0xe/0x10 [ 85.914007][ T945] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 85.919957][ T945] charge_memcg+0x81/0x1f0 [ 85.924429][ T945] __mem_cgroup_charge+0x93/0x290 [ 85.929580][ T945] ? xas_start+0x31d/0x3e0 [ 85.934036][ T945] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 85.939713][ T945] ? xas_load+0x3a2/0x3c0 [ 85.944084][ T945] shmem_add_to_page_cache+0x5b1/0xae0 [ 85.949597][ T945] ? put_page+0xb0/0xb0 [ 85.953834][ T945] ? __cfi_do_swap_page+0x10/0x10 [ 85.965183][ T945] shmem_get_folio_gfp+0xef9/0x20f0 [ 85.970745][ T945] shmem_write_begin+0xea/0x2c0 [ 85.975657][ T945] generic_perform_write+0x32d/0x740 [ 85.980988][ T945] ? __cfi_generic_perform_write+0x10/0x10 [ 85.986861][ T945] ? __cfi_file_update_time+0x10/0x10 [ 85.992292][ T945] shmem_file_write_iter+0x104/0x130 [ 85.997633][ T945] __kernel_write_iter+0x2a9/0x6a0 [ 86.002787][ T945] ? __cfi___kernel_write_iter+0x10/0x10 [ 86.008551][ T945] ? vfs_llseek+0xbb/0xf0 [ 86.012927][ T945] ? iov_iter_bvec+0x53/0x1f0 [ 86.017648][ T945] dump_user_range+0x3e6/0x630 [ 86.022453][ T945] ? __cfi_dump_user_range+0x10/0x10 [ 86.027771][ T945] ? dump_align+0xfe/0x120 [ 86.032225][ T945] ? dump_emit+0xa8/0xc0 [ 86.036505][ T945] elf_core_dump+0x2b60/0x30b0 [ 86.041317][ T945] ? __cfi_elf_core_dump+0x10/0x10 [ 86.046481][ T945] ? dump_interrupted+0xd0/0xd0 [ 86.051477][ T945] ? filp_open+0x195/0x1e0 [ 86.055935][ T945] ? 0xffffffffff600000 [ 86.060121][ T945] do_coredump+0x160e/0x23a0 [ 86.064752][ T945] ? __cfi_do_coredump+0x10/0x10 [ 86.069732][ T945] ? kmem_cache_free+0x12d/0x300 [ 86.074723][ T945] ? ____kasan_slab_free+0x13d/0x180 [ 86.080062][ T945] ? get_signal+0xac2/0x1700 [ 86.084699][ T945] ? kmem_cache_free+0x12d/0x300 [ 86.089690][ T945] get_signal+0x157d/0x1700 [ 86.094243][ T945] ? __cfi_get_signal+0x10/0x10 [ 86.099136][ T945] ? force_sig_info_to_task+0x306/0x3b0 [ 86.104727][ T945] arch_do_signal_or_restart+0xd1/0x11c0 [ 86.110414][ T945] ? page_fault_oops+0x8b0/0x8b0 [ 86.115406][ T945] ? down_read_trylock+0x27f/0x660 [ 86.120559][ T945] ? find_vma+0x89/0xd0 [ 86.124779][ T945] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 86.130979][ T945] ? do_user_addr_fault+0xd10/0x1030 [ 86.136306][ T945] exit_to_user_mode_loop+0x7a/0xb0 [ 86.141628][ T945] exit_to_user_mode_prepare+0x87/0xd0 [ 86.147123][ T945] irqentry_exit_to_user_mode+0x9/0x10 [ 86.152625][ T945] irqentry_exit+0x12/0x40 [ 86.157085][ T945] exc_page_fault+0x5e/0xb0 [ 86.161626][ T945] asm_exc_page_fault+0x27/0x30 [ 86.166596][ T945] RIP: 0033:0x7f0e67da8f21 [ 86.171042][ T945] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 86.190680][ T945] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 86.196781][ T945] RAX: 0000000000000000 RBX: 00007f0e68025fa0 RCX: 00007f0e67da8f19 [ 86.204779][ T945] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 86.212782][ T945] RBP: 00007f0e67e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 86.220785][ T945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.228817][ T945] R13: 00007f0e68026038 R14: 00007f0e68025fa0 R15: 00007ffde9e52918 [ 86.237440][ T945] [ 86.249359][ T1858] device macsec0 entered promiscuous mode [ 86.273459][ T945] memory: usage 307140kB, limit 307200kB, failcnt 31747 [ 86.280461][ T945] memory+swap: usage 431440kB, limit 9007199254740988kB, failcnt 0 [ 86.382558][ T945] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 86.450268][ T945] Memory cgroup stats for /syz0: [ 86.450449][ T945] anon 372736 [ 86.450449][ T945] file 313524224 [ 86.450449][ T945] kernel 0 [ 86.450449][ T945] kernel_stack 0 [ 86.450449][ T945] pagetables 0 [ 86.450449][ T945] sec_pagetables 0 [ 86.450449][ T945] percpu 0 [ 86.450449][ T945] sock 0 [ 86.450449][ T945] vmalloc 0 [ 86.450449][ T945] shmem 313516032 [ 86.450449][ T945] file_mapped 8192 [ 86.450449][ T945] file_dirty 8192 [ 86.450449][ T945] file_writeback 565248 [ 86.450449][ T945] swapcached 618496 [ 86.450449][ T945] anon_thp 0 [ 86.450449][ T945] file_thp 0 [ 86.450449][ T945] shmem_thp 0 [ 86.450449][ T945] inactive_anon 53555200 [ 86.450449][ T945] active_anon 260947968 [ 86.450449][ T945] inactive_file 8192 [ 86.450449][ T945] active_file 0 [ 86.450449][ T945] unevictable 0 [ 86.450449][ T945] slab_reclaimable 0 [ 86.450449][ T945] slab_unreclaimable 0 [ 86.450449][ T945] slab 0 [ 86.450449][ T945] workingset_refault_anon 7 [ 86.546357][ T1878] device sit0 left promiscuous mode [ 86.574748][ T945] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.165,pid=932,uid=0 [ 86.640230][ T945] Memory cgroup out of memory: Killed process 932 (syz.0.165) total-vm:90696kB, anon-rss:1352kB, file-rss:56004kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 88.047250][ T28] audit: type=1400 audit(1794405603.199:142): avc: denied { create } for pid=1925 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.160757][ T1941] -1: renamed from syzkaller0 [ 90.040599][ T932] syz.0.165 (932) used greatest stack depth: 14208 bytes left [ 90.502755][ T1989] device 7Ã2®| left promiscuous mode [ 90.519941][ T1989] bridge0: port 3(7Ã2®|) entered disabled state [ 90.583405][ T1989] device bridge_slave_1 left promiscuous mode [ 90.698796][ T1989] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.912122][ T1989] device bridge_slave_0 left promiscuous mode [ 90.939946][ T1989] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.008901][ T28] audit: type=1400 audit(1794405607.159:143): avc: denied { create } for pid=2033 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.865124][ T2059] device sit0 left promiscuous mode [ 93.039546][ T2066] device sit0 entered promiscuous mode [ 100.770594][ T28] audit: type=1400 audit(1794405615.919:144): avc: denied { create } for pid=2206 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.065623][ T28] audit: type=1400 audit(1794405616.219:145): avc: denied { create } for pid=2218 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.437878][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.445158][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.575862][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.583085][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.590470][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.597614][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.662667][ T2248] device bridge0 entered promiscuous mode [ 101.724153][ T28] audit: type=1400 audit(1794405616.869:146): avc: denied { create } for pid=2257 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 109.014108][ T2306] device sit0 left promiscuous mode [ 109.135321][ T2312] device sit0 entered promiscuous mode [ 109.970540][ T28] audit: type=1400 audit(1794405625.119:147): avc: denied { create } for pid=2374 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.708843][ T2428] device veth1_macvtap left promiscuous mode [ 110.722023][ T2428] device macsec0 entered promiscuous mode [ 110.774080][ T2428] device veth1_macvtap entered promiscuous mode [ 110.808817][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.454330][ T2597] 0�ÿ: renamed from bond_slave_0 [ 113.687817][ T2673] device dummy0 entered promiscuous mode [ 114.442483][ T2704] device sit0 entered promiscuous mode [ 114.714513][ T2719] device syzkaller0 entered promiscuous mode [ 115.261786][ T2746] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 115.291000][ T2746] device syzkaller0 entered promiscuous mode [ 115.505046][ T2761] device syzkaller0 entered promiscuous mode [ 115.511931][ T2725] syzkaller0: tun_net_xmit 48 [ 115.559643][ T2761] syzkaller0: create flow: hash 3900196368 index 2 [ 115.617174][ T2773] device syzkaller0 entered promiscuous mode [ 115.624735][ T2761] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 115.656086][ T2779] device veth1_macvtap left promiscuous mode [ 115.710336][ T2760] syzkaller0: delete flow: hash 3900196368 index 2 [ 115.898057][ T2784] device syzkaller0 entered promiscuous mode [ 123.534337][ T2962] : port 1(dummy0) entered blocking state [ 123.540345][ T2962] : port 1(dummy0) entered disabled state [ 124.000582][ T2991] device syzkaller0 entered promiscuous mode [ 124.077832][ T2997] device veth0_vlan left promiscuous mode [ 124.092778][ T2997] device veth0_vlan entered promiscuous mode [ 124.697242][ T3038] device wg2 entered promiscuous mode [ 124.787296][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.805292][ T3034] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.831315][ T3034] device bridge_slave_0 entered promiscuous mode [ 124.849898][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.870965][ T3034] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.878653][ T3034] device bridge_slave_1 entered promiscuous mode [ 125.007070][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.015263][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.033687][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.042360][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.050689][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.057789][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.073308][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.091638][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.113038][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.133922][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.141011][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.157389][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.194124][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.222010][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.244490][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.260390][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.278263][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.294721][ T3034] device veth0_vlan entered promiscuous mode [ 125.319335][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.333501][ T3034] device veth1_macvtap entered promiscuous mode [ 125.370834][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.383130][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.634466][ T8] device veth0_vlan left promiscuous mode [ 126.090304][ T28] audit: type=1400 audit(1794405641.239:148): avc: denied { create } for pid=3112 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.239954][ T3134] device syzkaller0 entered promiscuous mode [ 126.265738][ T3132] device syzkaller0 left promiscuous mode [ 126.336608][ T3123] -: renamed from syzkaller0 [ 126.974018][ T28] audit: type=1400 audit(1794405642.129:149): avc: denied { create } for pid=3174 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 127.636911][ T3210] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.645076][ T3210] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.683147][ T3210] device bridge0 left promiscuous mode [ 130.063072][ T3217] device bridge_slave_1 left promiscuous mode [ 130.153771][ T3217] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.203848][ T3217] device bridge_slave_0 left promiscuous mode [ 130.219927][ T3217] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.117918][ T3276] device syzkaller0 entered promiscuous mode [ 137.406767][ T28] audit: type=1400 audit(1794405652.559:150): avc: denied { create } for pid=3318 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 137.478710][ T28] audit: type=1400 audit(1794405652.589:151): avc: denied { create } for pid=3318 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.289535][ T3466] tap0: tun_chr_ioctl cmd 1074025673 [ 143.305823][ T28] audit: type=1400 audit(1794405658.459:152): avc: denied { setattr } for pid=3453 comm="syz.3.826" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.930624][ T28] audit: type=1400 audit(1794405660.079:153): avc: denied { setattr } for pid=3540 comm="syz.4.855" path="/proc/663" dev="proc" ino=27796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 146.026320][ T28] audit: type=1400 audit(1794405661.179:154): avc: denied { ioctl } for pid=3540 comm="syz.4.855" path="pid:[4026532294]" dev="nsfs" ino=4026532294 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.621490][ T3582] device wg2 left promiscuous mode [ 146.697575][ T3559] cgroup: fork rejected by pids controller in /syz4 [ 148.019967][ T3716] tap0: tun_chr_ioctl cmd 1074025676 [ 148.038188][ T3716] tap0: owner set to 0 [ 148.224943][ T3725] device syzkaller0 entered promiscuous mode [ 149.534714][ T3828] syz.2.909[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.534800][ T3828] syz.2.909[3828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.348349][ T3952] device syzkaller0 entered promiscuous mode [ 151.926873][ T3968] device syzkaller0 entered promiscuous mode [ 152.218602][ T3989] tap0: tun_chr_ioctl cmd 1074025675 [ 152.253307][ T3989] tap0: persist enabled [ 152.318610][ T3989] tap0: tun_chr_ioctl cmd 1074025675 [ 152.364462][ T3989] tap0: persist disabled [ 159.052502][ T4141] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.059780][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.159235][ T4141] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.166425][ T4141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.173814][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.180903][ T4141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.359626][ T4141] device bridge0 entered promiscuous mode [ 163.929632][ T4265] -1: renamed from syzkaller0 [ 166.320436][ T28] audit: type=1400 audit(1794405681.469:155): avc: denied { create } for pid=4359 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.812209][ T4390] device syzkaller0 entered promiscuous mode [ 167.739038][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.746230][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.753781][ T4423] device bridge0 left promiscuous mode [ 168.408062][ T4496] device syzkaller0 entered promiscuous mode [ 169.100714][ T4539] ================================================================== [ 169.108854][ T4539] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6fa/0x960 [ 169.116811][ T4539] Write of size 72 at addr ffff888136df2810 by task syz.1.1136/4539 [ 169.124835][ T4539] [ 169.127193][ T4539] CPU: 1 PID: 4539 Comm: syz.1.1136 Not tainted syzkaller #0 [ 169.134588][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 169.144688][ T4539] Call Trace: [ 169.147995][ T4539] [ 169.150955][ T4539] __dump_stack+0x21/0x24 [ 169.155319][ T4539] dump_stack_lvl+0x110/0x170 [ 169.160046][ T4539] ? __cfi_dump_stack_lvl+0x8/0x8 [ 169.165110][ T4539] ? __bpf_get_stackid+0x6fa/0x960 [ 169.170268][ T4539] print_address_description+0x71/0x200 [ 169.175852][ T4539] print_report+0x4a/0x60 [ 169.180224][ T4539] kasan_report+0x122/0x150 [ 169.184768][ T4539] ? __bpf_get_stackid+0x6fa/0x960 [ 169.189942][ T4539] kasan_check_range+0x249/0x2a0 [ 169.194928][ T4539] ? __bpf_get_stackid+0x6fa/0x960 [ 169.200071][ T4539] memcpy+0x44/0x70 [ 169.203908][ T4539] __bpf_get_stackid+0x6fa/0x960 [ 169.208888][ T4539] bpf_get_stackid_pe+0x2ee/0x400 [ 169.213947][ T4539] bpf_prog_47bcecfbcadd1995+0x21/0x39 [ 169.219436][ T4539] bpf_overflow_handler+0x3c7/0x5e0 [ 169.224670][ T4539] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 169.230432][ T4539] ? perf_event_context_sched_in+0x502/0x600 [ 169.236459][ T4539] ? __this_cpu_preempt_check+0x13/0x20 [ 169.242151][ T4539] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 169.248432][ T4539] __perf_event_overflow+0x458/0x640 [ 169.253756][ T4539] perf_swevent_overflow+0x1ae/0x240 [ 169.259089][ T4539] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 169.265465][ T4539] perf_swevent_event+0x3a9/0x440 [ 169.270557][ T4539] ? finish_task_switch+0x16b/0x7c0 [ 169.275795][ T4539] ? perf_tp_event+0xa20/0xa20 [ 169.280610][ T4539] ? __schedule+0xcbb/0x1700 [ 169.285260][ T4539] ___perf_sw_event+0x3bf/0x500 [ 169.290152][ T4539] ? release_firmware_map_entry+0x190/0x190 [ 169.296084][ T4539] ? __cfi____perf_sw_event+0x10/0x10 [ 169.301509][ T4539] ? __kasan_check_write+0x14/0x20 [ 169.306656][ T4539] ? tipc_sk_rcv+0x2b7a/0x2c20 [ 169.311462][ T4539] __perf_sw_event+0x134/0x270 [ 169.316295][ T4539] do_user_addr_fault+0xfe9/0x1030 [ 169.321452][ T4539] ? __alloc_skb+0x226/0x4a0 [ 169.326084][ T4539] exc_page_fault+0x51/0xb0 [ 169.330629][ T4539] asm_exc_page_fault+0x27/0x30 [ 169.335514][ T4539] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 169.342154][ T4539] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 169.362055][ T4539] RSP: 0018:ffffc90000c576a0 EFLAGS: 00050206 [ 169.368168][ T4539] RAX: ffffffff82677e01 RBX: 00000000000101d0 RCX: 000000000000fca0 [ 169.376460][ T4539] RDX: 00000000000101d0 RSI: ffff8881115405f8 RDI: 0000200000398000 [ 169.384468][ T4539] RBP: ffffc90000c576d0 R08: ffff888111550297 R09: 1ffff110222aa052 [ 169.392472][ T4539] R10: dffffc0000000000 R11: ffffed10222aa053 R12: 00007ffffffeee30 [ 169.400496][ T4539] R13: 0000000000010100 R14: 0000200000397ad0 R15: ffff8881115400c8 [ 169.408507][ T4539] ? copyout+0x61/0xa0 [ 169.412622][ T4539] ? copyout+0x82/0xa0 [ 169.416738][ T4539] _copy_to_iter+0x3ce/0xe60 [ 169.421370][ T4539] ? __cfi__copy_to_iter+0x10/0x10 [ 169.426521][ T4539] ? __kasan_check_read+0x11/0x20 [ 169.431590][ T4539] ? __check_object_size+0x45a/0x600 [ 169.436900][ T4539] simple_copy_to_iter+0x50/0x70 [ 169.441875][ T4539] __skb_datagram_iter+0xf1/0x730 [ 169.446933][ T4539] ? tsk_importance+0x150/0x150 [ 169.451808][ T4539] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 169.457486][ T4539] ? __cfi_woken_wake_function+0x10/0x10 [ 169.463151][ T4539] skb_copy_datagram_iter+0x40/0x150 [ 169.468489][ T4539] tipc_recvstream+0x703/0xe70 [ 169.473319][ T4539] ? __cfi_tipc_recvstream+0x10/0x10 [ 169.478657][ T4539] ____sys_recvmsg+0x2d6/0x5c0 [ 169.483458][ T4539] ? __sys_recvmsg_sock+0x50/0x50 [ 169.488533][ T4539] ? import_iovec+0x7c/0xb0 [ 169.493082][ T4539] ___sys_recvmsg+0x210/0x590 [ 169.497794][ T4539] ? __cfi_futex_wake+0x10/0x10 [ 169.502678][ T4539] ? __sys_recvmsg+0x290/0x290 [ 169.507501][ T4539] ? percpu_counter_add_batch+0x13c/0x160 [ 169.513257][ T4539] ? __fget_files+0x2d1/0x330 [ 169.518014][ T4539] ? __fdget+0x19c/0x220 [ 169.522297][ T4539] __x64_sys_recvmsg+0x20a/0x2e0 [ 169.527269][ T4539] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 169.532799][ T4539] ? __kasan_check_write+0x14/0x20 [ 169.537954][ T4539] ? fpregs_restore_userregs+0x128/0x260 [ 169.543650][ T4539] ? switch_fpu_return+0xe/0x10 [ 169.548545][ T4539] x64_sys_call+0x75/0x9a0 [ 169.553004][ T4539] do_syscall_64+0x4c/0xa0 [ 169.557457][ T4539] ? clear_bhb_loop+0x30/0x80 [ 169.562166][ T4539] ? clear_bhb_loop+0x30/0x80 [ 169.566879][ T4539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.572811][ T4539] RIP: 0033:0x7f165a1a8f19 [ 169.577253][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.596889][ T4539] RSP: 002b:00007f165b15d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 169.605349][ T4539] RAX: ffffffffffffffda RBX: 00007f165a425fa0 RCX: 00007f165a1a8f19 [ 169.613379][ T4539] RDX: 0000000000001f00 RSI: 0000200000001280 RDI: 0000000000000005 [ 169.621387][ T4539] RBP: 00007f165a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 169.629401][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.637404][ T4539] R13: 00007f165a426038 R14: 00007f165a425fa0 R15: 00007fff4b707c98 [ 169.645858][ T4539] [ 169.648911][ T4539] [ 169.651294][ T4539] Allocated by task 4539: [ 169.655639][ T4539] kasan_set_track+0x4b/0x70 [ 169.660269][ T4539] kasan_save_alloc_info+0x1f/0x30 [ 169.665503][ T4539] __kasan_kmalloc+0x95/0xb0 [ 169.670181][ T4539] __kmalloc_node+0xb2/0x1e0 [ 169.674813][ T4539] bpf_map_area_alloc+0x4b/0xe0 [ 169.679703][ T4539] prealloc_elems_and_freelist+0x8a/0x1e0 [ 169.685462][ T4539] stack_map_alloc+0x398/0x520 [ 169.690370][ T4539] map_create+0x467/0xcf0 [ 169.694733][ T4539] __sys_bpf+0x34e/0x850 [ 169.699032][ T4539] __x64_sys_bpf+0x7c/0x90 [ 169.703475][ T4539] x64_sys_call+0x488/0x9a0 [ 169.708017][ T4539] do_syscall_64+0x4c/0xa0 [ 169.712479][ T4539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.718416][ T4539] [ 169.720764][ T4539] The buggy address belongs to the object at ffff888136df2800 [ 169.720764][ T4539] which belongs to the cache kmalloc-64 of size 64 [ 169.734682][ T4539] The buggy address is located 16 bytes inside of [ 169.734682][ T4539] 64-byte region [ffff888136df2800, ffff888136df2840) [ 169.747907][ T4539] [ 169.750281][ T4539] The buggy address belongs to the physical page: [ 169.756712][ T4539] page:ffffea0004db7c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136df2 [ 169.767175][ T4539] flags: 0x4000000000000200(slab|zone=1) [ 169.772868][ T4539] raw: 4000000000000200 ffffea0004c916c0 dead000000000004 ffff888100042780 [ 169.781717][ T4539] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 169.790364][ T4539] page dumped because: kasan: bad access detected [ 169.796898][ T4539] page_owner tracks the page as allocated [ 169.802673][ T4539] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3957, tgid 3957 (syz-executor), ts 151335687192, free_ts 151335301632 [ 169.821111][ T4539] post_alloc_hook+0x1f5/0x210 [ 169.825922][ T4539] prep_new_page+0x1c/0x110 [ 169.830460][ T4539] get_page_from_freelist+0x2ca9/0x2d20 [ 169.836041][ T4539] __alloc_pages+0x1fa/0x610 [ 169.840694][ T4539] alloc_slab_page+0x6e/0xf0 [ 169.845362][ T4539] new_slab+0x98/0x3e0 [ 169.849454][ T4539] ___slab_alloc+0x70f/0xb70 [ 169.854117][ T4539] __slab_alloc+0x5e/0xa0 [ 169.858474][ T4539] __kmem_cache_alloc_node+0x204/0x2d0 [ 169.863963][ T4539] __kmalloc_node+0xa2/0x1e0 [ 169.868626][ T4539] kvmalloc_node+0x28a/0x460 [ 169.873273][ T4539] simple_xattr_alloc+0x43/0xa0 [ 169.878154][ T4539] shmem_initxattrs+0x8d/0x1e0 [ 169.882948][ T4539] security_inode_init_security+0x295/0x3c0 [ 169.888893][ T4539] shmem_symlink+0xd0/0x4c0 [ 169.893438][ T4539] vfs_symlink+0x261/0x3f0 [ 169.897893][ T4539] page last free stack trace: [ 169.902583][ T4539] free_unref_page_prepare+0x81b/0x820 [ 169.908076][ T4539] free_unref_page+0x93/0x530 [ 169.912794][ T4539] __free_pages+0x67/0x100 [ 169.917241][ T4539] pcpu_depopulate_chunk+0x4b4/0x580 [ 169.922585][ T4539] pcpu_balance_workfn+0x2d8/0x10b0 [ 169.927815][ T4539] process_one_work+0x717/0xc30 [ 169.932687][ T4539] worker_thread+0xa4d/0x11d0 [ 169.937400][ T4539] kthread+0x281/0x320 [ 169.941501][ T4539] ret_from_fork+0x1f/0x30 [ 169.945945][ T4539] [ 169.948374][ T4539] Memory state around the buggy address: [ 169.954021][ T4539] ffff888136df2700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.962189][ T4539] ffff888136df2780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.970271][ T4539] >ffff888136df2800: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 169.978344][ T4539] ^ [ 169.983733][ T4539] ffff888136df2880: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 169.991894][ T4539] ffff888136df2900: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 169.999969][ T4539] ================================================================== [ 170.008064][ T4539] Disabling lock debugging due to kernel taint [ 170.032381][ T28] audit: type=1400 audit(1794405685.179:156): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 170.055091][ T28] audit: type=1400 audit(1794405685.219:157): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.078701][ T28] audit: type=1400 audit(1794405685.219:158): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.100597][ T28] audit: type=1400 audit(1794405685.219:159): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.121594][ T28] audit: type=1400 audit(1794405685.219:160): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.142317][ T28] audit: type=1400 audit(1794405685.219:161): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.165359][ T28] audit: type=1400 audit(1794405685.219:162): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1