last executing test programs: 4.790242754s ago: executing program 4 (id=3530): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="ffffffb00000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.681494808s ago: executing program 4 (id=3532): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)=0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000034", @ANYRESDEC], 0xffdd) 4.167260424s ago: executing program 4 (id=3538): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x48, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xf0c, 0x1, 0x7, 0x400, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x4}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1f, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x710}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x1, 0x1, 0xa, 0x3, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, 0x1]}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1d, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0xb, 0x8, 0x4, 0x2, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x6, 0x8, 0x6, 0xffffffffffffff3e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000640)='syzkaller\x00', 0xffffffa8, 0x92, &(0x7f0000000680)=""/146, 0x41100, 0x5, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x7, 0x400, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x3, &(0x7f00000007c0)=[r3, r0], &(0x7f0000000800)=[{0x4, 0x3, 0x4, 0xb}, {0x1, 0x4, 0xb, 0xc}, {0x1, 0x3, 0x9, 0x5}], 0x10, 0xb}, 0x94) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r6, 0x20, &(0x7f0000000a00)={&(0x7f0000000940)=""/11, 0xb, 0x0, &(0x7f0000000980)=""/115, 0x73}}, 0x10) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a80)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000ac0)={'c', ' *:* ', 'wm\x00'}, 0x9) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1c, 0x9, 0x1, 0x18000, 0x0, r3, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000bc0)='^\x00') (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c00)={r10, r4, 0x0, r10}, 0x10) (async) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000c40)=r2) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=r7, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0xc, '\x00', r2, r11, 0x4, 0x1, 0x3}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e40)={r6, 0x20, &(0x7f0000001e00)={&(0x7f0000000d40)=""/155, 0x9b, 0x0, &(0x7f0000000e00)=""/4096, 0x1000}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)={0x1b, 0x0, 0x0, 0x5, 0x0, r12, 0x1, '\x00', r2, r10, 0x5, 0x5}, 0x50) (async) openat$cgroup_int(r10, &(0x7f0000001f00)='memory.max\x00', 0x2, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001f40)={0x81}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@bloom_filter={0x1e, 0x36c4, 0xff, 0xcb23, 0x800, r0, 0x1, '\x00', r2, r6, 0x3, 0x1, 0x1, 0x4}, 0x50) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000002000)={r6}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002300)={r5, 0xe0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0], 0x0, 0x8c, &(0x7f0000002100)=[{}], 0x8, 0x10, &(0x7f0000002140), &(0x7f0000002180), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000021c0)}}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002440)={r13, 0x0, 0x78, 0x0, &(0x7f0000002340)="9bd6b490b13ca45e409ccf3ed031672664d2845e86913b715075ed011567ce09099665e314667119031511c584e7f789421e21126b098b07b437906f52b95143a3526b3b96cbbd2db0ce0db30e99e182636e24098594a721daa1a1b1b671a01bd9ac4d070dfdcf261ccb74c1be517b0d736564fc966de7c8", 0x0, 0xb94b, 0x0, 0x78, 0x0, &(0x7f00000023c0)="153c4b458bdf58c36a01bb99c71abe58480bf5c03a82ee4ed76d2908c75943103a9057f88ab5ed306e0eb398e900ba62e2736f816ab9d0ac8941513f62aaaad5b0c72efbdfc81c67a5d86860e2c4ad19a58d2c28cb1d9a851a1d6236518025c85d36ca1dc55cf335aa9da234b1d315f832a107f6c44b5bf9", 0x0, 0x2, 0x0, 0x1}, 0x50) (async) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000024c0)=r15, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002500)={0x1b, 0x0, 0x0, 0x1f4, 0x0, r3, 0xfffffff9, '\x00', r2, r16, 0x0, 0x4, 0x4}, 0x50) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000027c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffff9, '\x00', r14, r16, 0x1, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x18, 0x11, &(0x7f0000002580)=@raw=[@ldst={0x0, 0x2, 0x2, 0x4, 0x1, 0x18, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6cbe85bc}}], &(0x7f0000002640)='GPL\x00', 0x4, 0xb4, &(0x7f0000002680)=""/180, 0x41100, 0x8, '\x00', r14, 0x0, r6, 0x8, &(0x7f0000002740)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002780)={0x3, 0x2, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002840)=[r0, r10, r10, r0, r11, r17, r1], &(0x7f0000002880)=[{0x1, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xf, 0x5}, {0x1, 0x2, 0xb, 0x1}, {0x0, 0x2, 0xc, 0x8}, {0x3, 0x5, 0x5, 0x9}], 0x10, 0x2}, 0x94) 4.04210839s ago: executing program 4 (id=3539): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) (fail_nth: 2) 3.496062217s ago: executing program 4 (id=3544): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYBLOB="00000000fdfffffffffffffff65f2e"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r6, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020005000000000000000000000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000140)="45f87500121e8f65cec92d5a4317502578cb86674688f2f2f371dd7c2a7dd1c52a7419000a34a54bb50ca14de0ea529c7f4fc843bb4e3bd4029ec2c8bd1d8c1487a21e9b63d5e55af48330166f50d3b395eabf79b05c0a039f09d644ab308021cb3cebbd7d7e3f959fa2"}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r10}, 0xc) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000001200)) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1a, 0x16, &(0x7f00000004c0)=@raw=[@tail_call, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x1, 0x3, 0x4, 0x100, 0x10}, @call={0x85, 0x0, 0x0, 0x35}, @ldst={0x1, 0x2, 0x2, 0x6, 0x3, 0xffffffffffffffff, 0x4}, @call={0x85, 0x0, 0x0, 0x25}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000580)='GPL\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x10, 0x7}, 0x10, 0x0, r8, 0x3, &(0x7f0000000b00)=[r2, r4, r12, r3, r1, r1, r1], &(0x7f0000000b40)=[{0x2, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x3, 0x1}, {0x1, 0x2, 0x1, 0x9}], 0x10, 0x8000}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) socketpair(0x1, 0x1, 0x8000, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r13) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x378fcd6da70fdba1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.04503012s ago: executing program 4 (id=3552): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x2, 0xff}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe5a2b000, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.796594642s ago: executing program 1 (id=3558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.324192925s ago: executing program 1 (id=3563): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x20000000) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0xb, 0x6, 0x86, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x6, 0x0, 0x3}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e80695f4a0adc14cd0eb7bc41337f7aa0910c2000000a80900000100010009e7ff000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.143917934s ago: executing program 2 (id=3568): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0xc48, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0xffffffffffffffcd, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 2.069287688s ago: executing program 3 (id=3569): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 2.048942089s ago: executing program 3 (id=3570): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x3) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)=0x800020000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^%*\x00') 2.037033769s ago: executing program 0 (id=3571): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x50420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x2000000, 0x3, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000080180100002020702500000000002020207b0af8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x52000, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) (async) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) 1.942401494s ago: executing program 3 (id=3572): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000006700000095"], &(0x7f0000000140)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.902948166s ago: executing program 3 (id=3573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.741257944s ago: executing program 2 (id=3574): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000f2ffff070000000023000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (fail_nth: 16) 1.40642221s ago: executing program 2 (id=3575): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x3f}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.405885201s ago: executing program 0 (id=3576): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0xb0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.398356081s ago: executing program 2 (id=3577): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="fffffff50000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.383033462s ago: executing program 1 (id=3578): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.345375024s ago: executing program 2 (id=3579): r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000040)="d2ff03076003008cb89e08f086ddd6b86e9cbde1768470f96012a257d878da58a5d06db96423beab8cfe40c3ac9065bb096bfb20e405", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xc, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001600)="4156ce477a4efc6f0b56c4cb4a6e1e1a229df3b4f49cdb869fac80d3910cb03b68e148c99cdcd8e81ac9020e3df69c664dae51496a0892f2793da60a85", &(0x7f0000000100), 0x3f, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000c40)={0x0, &(0x7f0000000ac0)=""/58, &(0x7f0000000b00), &(0x7f0000000b80), 0x6, r9}, 0x38) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.344819244s ago: executing program 3 (id=3580): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)=0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000030", @ANYRESDEC], 0xffdd) 1.240153639s ago: executing program 0 (id=3581): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000880)=ANY=[@ANYBLOB="18460000fbffffff0000000000000000b7080000000000007b8af8ff00000000b7080000050a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000290000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b7080000980000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000000000154d9fc59c5815191c6d3c431859d38f71890dd38b2d52389f872365051a85fd0fae8dcba561667684a5bdc2d54c7575dadf9bf34ff80c105edd5970ea1b9e47bdf099a3654a30de1a4d884276eabc7a9463277ee40bad74fb058f5654ebde8e76b57995a7e7e9efe85b8832610814f0d37f6d0c9cd487ba056c62e4083f991e1fc5181a9f7682433fd7088ddcae750f22bf700c30a627dd98f0b8db"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc6, &(0x7f0000000500)=""/198, 0x40f00, 0x50, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x5, 0x7fff}, 0x10, 0x2dd4c, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x3, 0x10, 0x9}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1000000000000009}, 0x400, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0xd, 0x7, 0x2, 0x0, 0x0, 0x6, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x2c0, 0x2, 0x2, 0x5, 0x6, 0x3, 0xaead, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r0, 0x3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000180)='syz0\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) close(0x3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x57, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.177999622s ago: executing program 2 (id=3582): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x88702, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800010400400000000900000100110000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x65140000, &(0x7f0000000240)="4e844a41b7fc4cdcb6e6ded7c6ff6528c81efa78af14aa323523a456de8c71583668edb1e47368cb8f111a010442041c8f1d784b5353397daca9c3f62fa461a002edb36d8f6a98cc0953793c6031fbceefc1942ccc08481d78ff43ccc82d177a3c4ae6d12ffe7e4afe55a1f974f54767a7", 0x71, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="b142d5c09507c2c65817f345407c07b6054a752a6e9b393c0aaf8dbd2cc9bd32769930a9489d399c8f08249d169240") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x147c1da6b329adc2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x7, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x0, 0x103, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3}, 0x0, &(0x7f0000000080)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f00000006c0)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0xed, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfff}, 0x850, 0x0, 0xfffffffe, 0x2, 0x7, 0x0, 0xffff, 0x0, 0x800, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x2064800, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r0, 0x58, &(0x7f0000000840)}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="e93c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 1.154431403s ago: executing program 0 (id=3583): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000f2ffff070000000023000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.038839679s ago: executing program 0 (id=3584): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r3 = syz_clone(0x0, &(0x7f0000000380)="ea39f981a2c6ec3614ea42548930b53634b707f48ab6674ee473ccf4ad32ad9bd61ba6b96128b313f79c0f58200d8caffdf7982f3d42266629501d4078f22b8c096c121747e8be2aad51cd3725d01673397fe628dcbf22f071ad4bef6a0200990d2296f89f39f69bca0858612a0ecac8b4180f89eb54777ad3759b8f909327e75883258aab1b75d9ed02329ba1c2305c9409f9c913ddb1f4a88e1b45946ae00365b2d0630c5607484d42df64ce7694e7843e748e8d2e3ccf9d4ae45144097a2f5042e8f244f53368af140f076b", 0xcd, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="fd4125858c023d842b15d6146ae3b4a2cb60da3a536ec32243c9fed178a68ed6dbabfafa0b7f2c95aa81384496371133324026a9571c9670f6889a621faf5457aadb5d") perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xa, 0x8, 0x5, 0xf1, 0x0, 0x5, 0x804, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x6}, 0x100000, 0xf, 0x7, 0x6, 0x7ff, 0xee11, 0xffff, 0x0, 0x6c, 0x0, 0x7fff}, r3, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000580), &(0x7f00000009c0)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="ad02476a521bbbafee2926a3e1d8f5e462b7ca8ff208b6736e892b7691bc2ca289bde86ea6497913fab88dd122a077944619483b8b31bb6ff8b6dd300826f1aa307fc587638878592b6858da501ec1a6aaca34490f53", 0x56}, {&(0x7f0000000200)="5dfe863132fa47cbf1a0e646992866654bb6", 0x12}], 0x2}, 0x44000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 881.356676ms ago: executing program 3 (id=3585): r0 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x9, 0x7, 0x1, 0x0, 0x80, 0x120040, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2, 0x2, 0x7, 0x0, 0x7fff, 0xa51b, 0x5a62, 0x0, 0x5, 0x0, 0xd0a}, 0x0, 0x1000, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={0x0}, 0x10000, 0x8, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xfff5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8, r7}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 485.766566ms ago: executing program 1 (id=3586): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0xffff, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800700}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 418.64182ms ago: executing program 1 (id=3587): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 278.228796ms ago: executing program 1 (id=3588): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x772}, 0x18000, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x95ec}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x80) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc51, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000040000000000000005c04000000bb7f1a006601feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 0s ago: executing program 0 (id=3589): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000f2ffff070000000023000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (fail_nth: 17) kernel console output (not intermixed with test programs): 146.581025][ T5789] active_anon 1081344 [ 146.581025][ T5789] inactive_file 135168 [ 146.581025][ T5789] active_file 0 [ 146.581025][ T5789] unevictable 0 [ 146.581025][ T5789] slab_reclaimable 0 [ 146.581025][ T5789] slab_unreclaimable 0 [ 146.581025][ T5789] slab 0 [ 146.581025][ T5789] workingset_refault_anon 0 [ 146.581025][ T5789] workingset_refault_file 0 [ 146.581025][ T5789] workingset_activate_anon 0 [ 146.581025][ T5789] workingset_activate_file 0 [ 146.581025][ T5789] workingset_restore_anon 0 [ 146.581025][ T5789] workingset_restore_file 0 [ 146.989939][ T5789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5474,uid=0 [ 147.013774][ T5915] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 147.035114][ T5915] device syzkaller0 entered promiscuous mode [ 147.246300][ T5789] Memory cgroup out of memory: Killed process 5474 (syz.0.1415) total-vm:91128kB, anon-rss:1260kB, file-rss:57664kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 147.449230][ T5462] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 147.479975][ T5462] CPU: 0 PID: 5462 Comm: syz.0.1415 Not tainted syzkaller #0 [ 147.487396][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.497463][ T5462] Call Trace: [ 147.500786][ T5462] __dump_stack+0x21/0x24 [ 147.505137][ T5462] dump_stack_lvl+0x1a7/0x208 [ 147.509827][ T5462] ? show_regs_print_info+0x18/0x18 [ 147.515037][ T5462] ? ___ratelimit+0x421/0x5a0 [ 147.519722][ T5462] ? _raw_spin_lock+0x94/0xf0 [ 147.524416][ T5462] dump_stack+0x15/0x1c [ 147.528586][ T5462] dump_header+0xd9/0x650 [ 147.532936][ T5462] oom_kill_process+0x1fa/0x2c0 [ 147.537810][ T5462] out_of_memory+0x879/0xce0 [ 147.542417][ T5462] ? unregister_oom_notifier+0x20/0x20 [ 147.547890][ T5462] ? mutex_lock_killable+0xdf/0xf0 [ 147.553053][ T5462] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 147.559570][ T5462] ? __alloc_pages_nodemask+0x29a/0x640 [ 147.565141][ T5462] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 147.570708][ T5462] ? mem_cgroup_oom_trylock+0x340/0x340 [ 147.576266][ T5462] ? _raw_spin_trylock_bh+0x150/0x150 [ 147.581649][ T5462] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 147.587206][ T5462] try_charge+0xfa9/0x1580 [ 147.591653][ T5462] ? __memcg_kmem_charge+0x150/0x150 [ 147.596962][ T5462] ? __kasan_check_write+0x14/0x20 [ 147.602097][ T5462] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 147.607929][ T5462] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 147.613498][ T5462] __mem_cgroup_charge+0x148/0x6d0 [ 147.618629][ T5462] shmem_add_to_page_cache+0x569/0xe10 [ 147.624157][ T5462] ? shmem_alloc_page+0x380/0x380 [ 147.629228][ T5462] ? _raw_spin_lock_irqsave+0x130/0x130 [ 147.634801][ T5462] ? find_lock_entry+0x4b/0x200 [ 147.639668][ T5462] shmem_getpage_gfp+0x907/0x20f0 [ 147.644715][ T5462] shmem_write_begin+0xce/0x1b0 [ 147.649586][ T5462] generic_perform_write+0x2ce/0x540 [ 147.654900][ T5462] ? grab_cache_page_write_begin+0xb0/0xb0 [ 147.660723][ T5462] ? file_remove_privs+0x590/0x590 [ 147.665853][ T5462] ? __kasan_check_write+0x14/0x20 [ 147.670982][ T5462] ? down_write+0xb2/0x120 [ 147.675425][ T5462] __generic_file_write_iter+0x24b/0x480 [ 147.681077][ T5462] ? generic_write_checks+0x3df/0x480 [ 147.686470][ T5462] generic_file_write_iter+0xa9/0x1d0 [ 147.691855][ T5462] __kernel_write+0x5a5/0x9d0 [ 147.696552][ T5462] ? vfs_read+0xa50/0xa50 [ 147.700924][ T5462] ? populate_vma_page_range+0xf0/0xf0 [ 147.706509][ T5462] ? __kasan_check_write+0x14/0x20 [ 147.711647][ T5462] dump_emit+0x255/0x380 [ 147.715902][ T5462] ? wait_for_dump_helpers+0x380/0x380 [ 147.721403][ T5462] ? dump_skip+0x2e1/0x300 [ 147.725830][ T5462] ? dump_user_range+0xbd/0x1a0 [ 147.730698][ T5462] dump_user_range+0x6a/0x1a0 [ 147.735382][ T5462] elf_core_dump+0x27af/0x2c20 [ 147.740177][ T5462] ? load_elf_binary+0x2910/0x2910 [ 147.745323][ T5462] ? _raw_spin_unlock+0x4d/0x70 [ 147.750187][ T5462] ? __kasan_check_write+0x14/0x20 [ 147.755313][ T5462] ? put_files_struct+0x229/0x310 [ 147.760373][ T5462] do_coredump+0x1be6/0x2910 [ 147.765018][ T5462] ? simple_acl_create+0x1c0/0x1c0 [ 147.770160][ T5462] ? debug_smp_processor_id+0x17/0x20 [ 147.775571][ T5462] ? kmem_cache_free+0x100/0x2d0 [ 147.780532][ T5462] ? ____kasan_slab_free+0x130/0x160 [ 147.785840][ T5462] ? get_signal+0xbdb/0x1300 [ 147.790455][ T5462] ? kmem_cache_free+0x100/0x2d0 [ 147.795408][ T5462] get_signal+0xf4c/0x1300 [ 147.799863][ T5462] arch_do_signal_or_restart+0xe7/0x11b0 [ 147.805561][ T5462] ? __bad_area_nosemaphore+0x2ca/0x410 [ 147.811326][ T5462] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 147.816973][ T5462] ? bad_area+0x6a/0x80 [ 147.821137][ T5462] exit_to_user_mode_loop+0xa2/0xe0 [ 147.826341][ T5462] exit_to_user_mode_prepare+0x76/0xa0 [ 147.831806][ T5462] irqentry_exit_to_user_mode+0x9/0x10 [ 147.837276][ T5462] irqentry_exit+0x12/0x60 [ 147.841703][ T5462] exc_page_fault+0x67/0xc0 [ 147.846240][ T5462] ? asm_exc_page_fault+0x8/0x30 [ 147.851182][ T5462] asm_exc_page_fault+0x1e/0x30 [ 147.856034][ T5462] RIP: 0033:0x82 [ 147.859590][ T5462] Code: Unable to access opcode bytes at RIP 0x58. [ 147.866090][ T5462] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 147.872167][ T5462] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 147.880147][ T5462] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 147.888123][ T5462] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 147.896116][ T5462] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 147.904122][ T5462] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 149.263955][ T5462] memory: usage 301732kB, limit 307200kB, failcnt 12516 [ 149.482962][ T5462] memory+swap: usage 411200kB, limit 9007199254740988kB, failcnt 0 [ 149.530196][ T5462] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 149.609525][ T5462] Memory cgroup stats for /syz0: [ 149.609656][ T5462] anon 405504 [ 149.609656][ T5462] file 304128000 [ 149.609656][ T5462] kernel_stack 0 [ 149.609656][ T5462] percpu 0 [ 149.609656][ T5462] sock 0 [ 149.609656][ T5462] shmem 304128000 [ 149.609656][ T5462] file_mapped 0 [ 149.609656][ T5462] file_dirty 135168 [ 149.609656][ T5462] file_writeback 0 [ 149.609656][ T5462] anon_thp 0 [ 149.609656][ T5462] inactive_anon 312504320 [ 149.609656][ T5462] active_anon 1486848 [ 149.609656][ T5462] inactive_file 0 [ 149.609656][ T5462] active_file 200704 [ 149.609656][ T5462] unevictable 0 [ 149.609656][ T5462] slab_reclaimable 0 [ 149.609656][ T5462] slab_unreclaimable 0 [ 149.609656][ T5462] slab 0 [ 149.609656][ T5462] workingset_refault_anon 0 [ 149.609656][ T5462] workingset_refault_file 33 [ 149.609656][ T5462] workingset_activate_anon 0 [ 149.609656][ T5462] workingset_activate_file 33 [ 149.609656][ T5462] workingset_restore_anon 0 [ 149.609656][ T5462] workingset_restore_file 33 [ 149.981021][ T5462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5463,uid=0 [ 150.112031][ T5462] Memory cgroup out of memory: Killed process 5463 (syz.0.1415) total-vm:90468kB, anon-rss:1272kB, file-rss:57664kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 150.194758][ T27] oom_reaper: reaped process 5463 (syz.0.1415), now anon-rss:0kB, file-rss:57600kB, shmem-rss:0kB [ 150.230878][ T5449] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 150.330194][ T5449] CPU: 0 PID: 5449 Comm: syz.0.1415 Not tainted syzkaller #0 [ 150.337634][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.347705][ T5449] Call Trace: [ 150.351025][ T5449] __dump_stack+0x21/0x24 [ 150.355373][ T5449] dump_stack_lvl+0x1a7/0x208 [ 150.360068][ T5449] ? show_regs_print_info+0x18/0x18 [ 150.365279][ T5449] ? ___ratelimit+0x421/0x5a0 [ 150.369966][ T5449] ? _raw_spin_lock+0x94/0xf0 [ 150.374654][ T5449] dump_stack+0x15/0x1c [ 150.378826][ T5449] dump_header+0xd9/0x650 [ 150.383169][ T5449] oom_kill_process+0x1fa/0x2c0 [ 150.388037][ T5449] out_of_memory+0x879/0xce0 [ 150.392648][ T5449] ? unregister_oom_notifier+0x20/0x20 [ 150.398142][ T5449] ? mutex_lock_killable+0xdf/0xf0 [ 150.403271][ T5449] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 150.409784][ T5449] ? __alloc_pages_nodemask+0x29a/0x640 [ 150.415364][ T5449] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 150.420929][ T5449] ? mem_cgroup_oom_trylock+0x340/0x340 [ 150.426496][ T5449] ? _raw_spin_trylock_bh+0x150/0x150 [ 150.431883][ T5449] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 150.437457][ T5449] try_charge+0xfa9/0x1580 [ 150.441894][ T5449] ? __memcg_kmem_charge+0x150/0x150 [ 150.447211][ T5449] ? __kasan_check_write+0x14/0x20 [ 150.452338][ T5449] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 150.458163][ T5449] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 150.463728][ T5449] __mem_cgroup_charge+0x148/0x6d0 [ 150.468855][ T5449] shmem_add_to_page_cache+0x569/0xe10 [ 150.474333][ T5449] ? shmem_alloc_page+0x380/0x380 [ 150.479373][ T5449] ? _raw_spin_lock_irqsave+0x130/0x130 [ 150.484933][ T5449] ? find_lock_entry+0x4b/0x200 [ 150.489796][ T5449] shmem_getpage_gfp+0x907/0x20f0 [ 150.494839][ T5449] shmem_write_begin+0xce/0x1b0 [ 150.499693][ T5449] generic_perform_write+0x2ce/0x540 [ 150.504985][ T5449] ? atime_needs_update+0x5b0/0x5b0 [ 150.510192][ T5449] ? grab_cache_page_write_begin+0xb0/0xb0 [ 150.516019][ T5449] ? file_remove_privs+0x590/0x590 [ 150.521157][ T5449] ? __kasan_check_write+0x14/0x20 [ 150.526271][ T5449] ? down_write+0xb2/0x120 [ 150.530690][ T5449] __generic_file_write_iter+0x24b/0x480 [ 150.536329][ T5449] ? generic_write_checks+0x3df/0x480 [ 150.541708][ T5449] generic_file_write_iter+0xa9/0x1d0 [ 150.547088][ T5449] __kernel_write+0x5a5/0x9d0 [ 150.551786][ T5449] ? vfs_read+0xa50/0xa50 [ 150.556117][ T5449] ? populate_vma_page_range+0xf0/0xf0 [ 150.561577][ T5449] ? __kasan_check_write+0x14/0x20 [ 150.566697][ T5449] dump_emit+0x255/0x380 [ 150.570945][ T5449] ? wait_for_dump_helpers+0x380/0x380 [ 150.576409][ T5449] ? kasan_check_range+0x1c2/0x2a0 [ 150.581523][ T5449] dump_user_range+0x6a/0x1a0 [ 150.586206][ T5449] elf_core_dump+0x27af/0x2c20 [ 150.590979][ T5449] ? load_elf_binary+0x2910/0x2910 [ 150.596151][ T5449] ? _raw_spin_unlock+0x4d/0x70 [ 150.601014][ T5449] ? __kasan_check_write+0x14/0x20 [ 150.606163][ T5449] ? put_files_struct+0x229/0x310 [ 150.611191][ T5449] do_coredump+0x1be6/0x2910 [ 150.615788][ T5449] ? simple_acl_create+0x1c0/0x1c0 [ 150.620900][ T5449] ? debug_smp_processor_id+0x17/0x20 [ 150.626275][ T5449] ? kmem_cache_free+0x100/0x2d0 [ 150.631212][ T5449] ? ____kasan_slab_free+0x130/0x160 [ 150.636506][ T5449] ? get_signal+0xbdb/0x1300 [ 150.641102][ T5449] ? kmem_cache_free+0x100/0x2d0 [ 150.646048][ T5449] get_signal+0xf4c/0x1300 [ 150.650467][ T5449] arch_do_signal_or_restart+0xe7/0x11b0 [ 150.656101][ T5449] ? __bad_area_nosemaphore+0x2ca/0x410 [ 150.661652][ T5449] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 150.667299][ T5449] ? bad_area+0x6a/0x80 [ 150.671491][ T5449] exit_to_user_mode_loop+0xa2/0xe0 [ 150.676705][ T5449] exit_to_user_mode_prepare+0x76/0xa0 [ 150.682174][ T5449] irqentry_exit_to_user_mode+0x9/0x10 [ 150.687650][ T5449] irqentry_exit+0x12/0x60 [ 150.692207][ T5449] exc_page_fault+0x67/0xc0 [ 150.696735][ T5449] ? asm_exc_page_fault+0x8/0x30 [ 150.701679][ T5449] asm_exc_page_fault+0x1e/0x30 [ 150.706530][ T5449] RIP: 0033:0x82 [ 150.710079][ T5449] Code: Unable to access opcode bytes at RIP 0x58. [ 150.716677][ T5449] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 150.722748][ T5449] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 150.730727][ T5449] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 150.738703][ T5449] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 150.746678][ T5449] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 150.754656][ T5449] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 150.872229][ T5449] memory: usage 306900kB, limit 307200kB, failcnt 13107 [ 150.879606][ T5449] memory+swap: usage 421568kB, limit 9007199254740988kB, failcnt 0 [ 150.887599][ T5449] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 150.894570][ T5449] Memory cgroup stats for /syz0: [ 150.894695][ T5449] anon 135168 [ 150.894695][ T5449] file 305209344 [ 150.894695][ T5449] kernel_stack 0 [ 150.894695][ T5449] percpu 0 [ 150.894695][ T5449] sock 0 [ 150.894695][ T5449] shmem 305209344 [ 150.894695][ T5449] file_mapped 0 [ 150.894695][ T5449] file_dirty 135168 [ 150.894695][ T5449] file_writeback 0 [ 150.894695][ T5449] anon_thp 0 [ 150.894695][ T5449] inactive_anon 312266752 [ 150.894695][ T5449] active_anon 2027520 [ 150.894695][ T5449] inactive_file 0 [ 150.894695][ T5449] active_file 200704 [ 150.894695][ T5449] unevictable 0 [ 150.894695][ T5449] slab_reclaimable 0 [ 150.894695][ T5449] slab_unreclaimable 0 [ 150.894695][ T5449] slab 0 [ 150.894695][ T5449] workingset_refault_anon 0 [ 150.894695][ T5449] workingset_refault_file 33 [ 150.894695][ T5449] workingset_activate_anon 0 [ 150.894695][ T5449] workingset_activate_file 33 [ 150.894695][ T5449] workingset_restore_anon 0 [ 150.894695][ T5449] workingset_restore_file 33 [ 150.995773][ T5449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5478,uid=0 [ 151.013242][ T5449] Memory cgroup out of memory: Killed process 5478 (syz.0.1415) total-vm:91128kB, anon-rss:1252kB, file-rss:54208kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 151.583549][ T6101] device syzkaller0 entered promiscuous mode [ 151.893504][ T5448] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 151.907292][ T5448] CPU: 0 PID: 5448 Comm: syz.0.1415 Not tainted syzkaller #0 [ 151.914701][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.924768][ T5448] Call Trace: [ 151.928085][ T5448] __dump_stack+0x21/0x24 [ 151.932461][ T5448] dump_stack_lvl+0x1a7/0x208 [ 151.937161][ T5448] ? show_regs_print_info+0x18/0x18 [ 151.942377][ T5448] ? ___ratelimit+0x421/0x5a0 [ 151.947083][ T5448] ? _raw_spin_lock+0x94/0xf0 [ 151.951773][ T5448] dump_stack+0x15/0x1c [ 151.955947][ T5448] dump_header+0xd9/0x650 [ 151.960299][ T5448] oom_kill_process+0x1fa/0x2c0 [ 151.965167][ T5448] out_of_memory+0x879/0xce0 [ 151.969783][ T5448] ? unregister_oom_notifier+0x20/0x20 [ 151.975266][ T5448] ? mutex_lock_killable+0x92/0xf0 [ 151.980415][ T5448] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 151.986933][ T5448] ? __alloc_pages_nodemask+0x29a/0x640 [ 151.992505][ T5448] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 151.998098][ T5448] ? mem_cgroup_oom_trylock+0x340/0x340 [ 152.003667][ T5448] ? _raw_spin_trylock_bh+0x150/0x150 [ 152.009067][ T5448] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 152.014636][ T5448] try_charge+0xfa9/0x1580 [ 152.019075][ T5448] ? __memcg_kmem_charge+0x150/0x150 [ 152.024379][ T5448] ? __kasan_check_write+0x14/0x20 [ 152.029506][ T5448] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 152.035328][ T5448] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 152.040895][ T5448] __mem_cgroup_charge+0x148/0x6d0 [ 152.046024][ T5448] shmem_add_to_page_cache+0x569/0xe10 [ 152.051527][ T5448] ? shmem_alloc_page+0x380/0x380 [ 152.056573][ T5448] ? _raw_spin_lock_irqsave+0x130/0x130 [ 152.062140][ T5448] ? find_lock_entry+0x4b/0x200 [ 152.067012][ T5448] shmem_getpage_gfp+0x907/0x20f0 [ 152.072076][ T5448] shmem_write_begin+0xce/0x1b0 [ 152.076951][ T5448] generic_perform_write+0x2ce/0x540 [ 152.082344][ T5448] ? atime_needs_update+0x5b0/0x5b0 [ 152.087562][ T5448] ? grab_cache_page_write_begin+0xb0/0xb0 [ 152.093381][ T5448] ? file_remove_privs+0x590/0x590 [ 152.098501][ T5448] ? __kasan_check_write+0x14/0x20 [ 152.103630][ T5448] ? down_write+0xb2/0x120 [ 152.108081][ T5448] __generic_file_write_iter+0x24b/0x480 [ 152.113734][ T5448] ? generic_write_checks+0x3df/0x480 [ 152.119116][ T5448] generic_file_write_iter+0xa9/0x1d0 [ 152.124511][ T5448] __kernel_write+0x5a5/0x9d0 [ 152.129211][ T5448] ? vfs_read+0xa50/0xa50 [ 152.133559][ T5448] ? populate_vma_page_range+0xf0/0xf0 [ 152.139034][ T5448] ? sched_clock_cpu+0x1b/0x3d0 [ 152.143920][ T5448] ? __kasan_check_write+0x14/0x20 [ 152.149054][ T5448] dump_emit+0x255/0x380 [ 152.153325][ T5448] ? wait_for_dump_helpers+0x380/0x380 [ 152.158818][ T5448] ? dump_skip+0x2e1/0x300 [ 152.163250][ T5448] dump_user_range+0x6a/0x1a0 [ 152.167944][ T5448] elf_core_dump+0x27af/0x2c20 [ 152.172749][ T5448] ? load_elf_binary+0x2910/0x2910 [ 152.177917][ T5448] ? _raw_spin_unlock+0x4d/0x70 [ 152.182797][ T5448] ? __kasan_check_write+0x14/0x20 [ 152.187930][ T5448] ? put_files_struct+0x229/0x310 [ 152.192981][ T5448] do_coredump+0x1be6/0x2910 [ 152.197618][ T5448] ? simple_acl_create+0x1c0/0x1c0 [ 152.202751][ T5448] ? debug_smp_processor_id+0x17/0x20 [ 152.208142][ T5448] ? kmem_cache_free+0x100/0x2d0 [ 152.213091][ T5448] ? ____kasan_slab_free+0x130/0x160 [ 152.218390][ T5448] ? get_signal+0xbdb/0x1300 [ 152.222989][ T5448] ? kmem_cache_free+0x100/0x2d0 [ 152.227943][ T5448] get_signal+0xf4c/0x1300 [ 152.232381][ T5448] arch_do_signal_or_restart+0xe7/0x11b0 [ 152.238032][ T5448] ? __bad_area_nosemaphore+0x2ca/0x410 [ 152.243592][ T5448] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 152.249239][ T5448] ? bad_area+0x6a/0x80 [ 152.253419][ T5448] exit_to_user_mode_loop+0xa2/0xe0 [ 152.258633][ T5448] exit_to_user_mode_prepare+0x76/0xa0 [ 152.264114][ T5448] irqentry_exit_to_user_mode+0x9/0x10 [ 152.269583][ T5448] irqentry_exit+0x12/0x60 [ 152.274047][ T5448] exc_page_fault+0x67/0xc0 [ 152.278570][ T5448] ? asm_exc_page_fault+0x8/0x30 [ 152.283519][ T5448] asm_exc_page_fault+0x1e/0x30 [ 152.288381][ T5448] RIP: 0033:0x82 [ 152.291941][ T5448] Code: Unable to access opcode bytes at RIP 0x58. [ 152.298452][ T5448] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 152.304537][ T5448] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 152.312525][ T5448] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 152.320510][ T5448] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 152.328492][ T5448] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 152.336485][ T5448] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 152.361271][ T5448] memory: usage 307140kB, limit 307200kB, failcnt 14694 [ 152.384220][ T5448] memory+swap: usage 423036kB, limit 9007199254740988kB, failcnt 0 [ 152.431203][ T5448] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 152.478554][ T5448] Memory cgroup stats for /syz0: [ 152.478675][ T5448] anon 135168 [ 152.478675][ T5448] file 296693760 [ 152.478675][ T5448] kernel_stack 0 [ 152.478675][ T5448] percpu 0 [ 152.478675][ T5448] sock 0 [ 152.478675][ T5448] shmem 296558592 [ 152.478675][ T5448] file_mapped 0 [ 152.478675][ T5448] file_dirty 135168 [ 152.478675][ T5448] file_writeback 0 [ 152.478675][ T5448] anon_thp 0 [ 152.478675][ T5448] inactive_anon 303632384 [ 152.478675][ T5448] active_anon 2297856 [ 152.478675][ T5448] inactive_file 0 [ 152.478675][ T5448] active_file 200704 [ 152.478675][ T5448] unevictable 0 [ 152.478675][ T5448] slab_reclaimable 0 [ 152.478675][ T5448] slab_unreclaimable 0 [ 152.478675][ T5448] slab 0 [ 152.478675][ T5448] workingset_refault_anon 0 [ 152.478675][ T5448] workingset_refault_file 33 [ 152.478675][ T5448] workingset_activate_anon 0 [ 152.478675][ T5448] workingset_activate_file 33 [ 152.478675][ T5448] workingset_restore_anon 0 [ 152.478675][ T5448] workingset_restore_file 33 [ 152.590354][ T5448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5475,uid=0 [ 152.605746][ T5448] Memory cgroup out of memory: Killed process 5475 (syz.0.1415) total-vm:91128kB, anon-rss:1252kB, file-rss:54144kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 153.532257][ T6165] device syzkaller0 entered promiscuous mode [ 153.586839][ T6177] device syzkaller0 entered promiscuous mode [ 154.306262][ T5450] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 154.316498][ T5450] CPU: 0 PID: 5450 Comm: syz.0.1415 Not tainted syzkaller #0 [ 154.323918][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.333981][ T5450] Call Trace: [ 154.337291][ T5450] __dump_stack+0x21/0x24 [ 154.341634][ T5450] dump_stack_lvl+0x1a7/0x208 [ 154.346363][ T5450] ? show_regs_print_info+0x18/0x18 [ 154.351573][ T5450] ? ___ratelimit+0x421/0x5a0 [ 154.356260][ T5450] ? _raw_spin_lock+0x94/0xf0 [ 154.360956][ T5450] dump_stack+0x15/0x1c [ 154.365125][ T5450] dump_header+0xd9/0x650 [ 154.369483][ T5450] oom_kill_process+0x1fa/0x2c0 [ 154.374349][ T5450] out_of_memory+0x879/0xce0 [ 154.378952][ T5450] ? unregister_oom_notifier+0x20/0x20 [ 154.384423][ T5450] ? mutex_lock_killable+0x92/0xf0 [ 154.389548][ T5450] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 154.396063][ T5450] ? __alloc_pages_nodemask+0x29a/0x640 [ 154.401630][ T5450] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 154.407189][ T5450] ? mem_cgroup_oom_trylock+0x340/0x340 [ 154.412746][ T5450] ? _raw_spin_trylock_bh+0x150/0x150 [ 154.418185][ T5450] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 154.423782][ T5450] try_charge+0xfa9/0x1580 [ 154.428220][ T5450] ? __memcg_kmem_charge+0x150/0x150 [ 154.433522][ T5450] ? __kasan_check_write+0x14/0x20 [ 154.438646][ T5450] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 154.444460][ T5450] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 154.450010][ T5450] __mem_cgroup_charge+0x148/0x6d0 [ 154.455123][ T5450] shmem_add_to_page_cache+0x569/0xe10 [ 154.460591][ T5450] ? shmem_alloc_page+0x380/0x380 [ 154.465620][ T5450] ? _raw_spin_lock_irqsave+0x130/0x130 [ 154.471171][ T5450] ? find_lock_entry+0x4b/0x200 [ 154.476024][ T5450] shmem_getpage_gfp+0x907/0x20f0 [ 154.481058][ T5450] shmem_write_begin+0xce/0x1b0 [ 154.485908][ T5450] generic_perform_write+0x2ce/0x540 [ 154.491193][ T5450] ? atime_needs_update+0x5b0/0x5b0 [ 154.496392][ T5450] ? grab_cache_page_write_begin+0xb0/0xb0 [ 154.502209][ T5450] ? file_remove_privs+0x590/0x590 [ 154.507326][ T5450] ? __kasan_check_write+0x14/0x20 [ 154.512443][ T5450] ? down_write+0xb2/0x120 [ 154.516864][ T5450] __generic_file_write_iter+0x24b/0x480 [ 154.522500][ T5450] ? generic_write_checks+0x3df/0x480 [ 154.527884][ T5450] generic_file_write_iter+0xa9/0x1d0 [ 154.533262][ T5450] __kernel_write+0x5a5/0x9d0 [ 154.537944][ T5450] ? vfs_read+0xa50/0xa50 [ 154.542282][ T5450] ? populate_vma_page_range+0xf0/0xf0 [ 154.547764][ T5450] ? __kasan_check_write+0x14/0x20 [ 154.552878][ T5450] dump_emit+0x255/0x380 [ 154.557120][ T5450] ? wait_for_dump_helpers+0x380/0x380 [ 154.562582][ T5450] ? dump_user_range+0xe0/0x1a0 [ 154.567472][ T5450] dump_user_range+0x6a/0x1a0 [ 154.572175][ T5450] elf_core_dump+0x27af/0x2c20 [ 154.576947][ T5450] ? load_elf_binary+0x2910/0x2910 [ 154.582069][ T5450] ? _raw_spin_unlock+0x4d/0x70 [ 154.586926][ T5450] ? __kasan_check_write+0x14/0x20 [ 154.592042][ T5450] ? put_files_struct+0x229/0x310 [ 154.597070][ T5450] do_coredump+0x1be6/0x2910 [ 154.601677][ T5450] ? simple_acl_create+0x1c0/0x1c0 [ 154.606790][ T5450] ? debug_smp_processor_id+0x17/0x20 [ 154.612171][ T5450] ? kmem_cache_free+0x100/0x2d0 [ 154.617105][ T5450] ? ____kasan_slab_free+0x130/0x160 [ 154.622390][ T5450] ? get_signal+0xbdb/0x1300 [ 154.626985][ T5450] ? kmem_cache_free+0x100/0x2d0 [ 154.631928][ T5450] get_signal+0xf4c/0x1300 [ 154.636354][ T5450] arch_do_signal_or_restart+0xe7/0x11b0 [ 154.641987][ T5450] ? __bad_area_nosemaphore+0x2ca/0x410 [ 154.647533][ T5450] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 154.653169][ T5450] ? bad_area+0x6a/0x80 [ 154.657336][ T5450] exit_to_user_mode_loop+0xa2/0xe0 [ 154.662539][ T5450] exit_to_user_mode_prepare+0x76/0xa0 [ 154.668001][ T5450] irqentry_exit_to_user_mode+0x9/0x10 [ 154.673463][ T5450] irqentry_exit+0x12/0x60 [ 154.677881][ T5450] exc_page_fault+0x67/0xc0 [ 154.682386][ T5450] ? asm_exc_page_fault+0x8/0x30 [ 154.687332][ T5450] asm_exc_page_fault+0x1e/0x30 [ 154.692185][ T5450] RIP: 0033:0x82 [ 154.695737][ T5450] Code: Unable to access opcode bytes at RIP 0x58. [ 154.702243][ T5450] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 154.708323][ T5450] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 154.716295][ T5450] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 154.724292][ T5450] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 154.732287][ T5450] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 154.740269][ T5450] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 154.826435][ T5450] memory: usage 307200kB, limit 307200kB, failcnt 16089 [ 154.834263][ T5450] memory+swap: usage 422832kB, limit 9007199254740988kB, failcnt 0 [ 154.846676][ T5450] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 154.853713][ T5450] Memory cgroup stats for /syz0: [ 154.853877][ T5450] anon 405504 [ 154.853877][ T5450] file 304398336 [ 154.853877][ T5450] kernel_stack 0 [ 154.853877][ T5450] percpu 0 [ 154.853877][ T5450] sock 0 [ 154.853877][ T5450] shmem 304398336 [ 154.853877][ T5450] file_mapped 0 [ 154.853877][ T5450] file_dirty 135168 [ 154.853877][ T5450] file_writeback 0 [ 154.853877][ T5450] anon_thp 0 [ 154.853877][ T5450] inactive_anon 312115200 [ 154.853877][ T5450] active_anon 2297856 [ 154.853877][ T5450] inactive_file 118784 [ 154.853877][ T5450] active_file 0 [ 154.853877][ T5450] unevictable 0 [ 154.853877][ T5450] slab_reclaimable 0 [ 154.853877][ T5450] slab_unreclaimable 0 [ 154.853877][ T5450] slab 0 [ 154.853877][ T5450] workingset_refault_anon 66 [ 154.853877][ T5450] workingset_refault_file 99 [ 154.853877][ T5450] workingset_activate_anon 0 [ 154.853877][ T5450] workingset_activate_file 99 [ 154.853877][ T5450] workingset_restore_anon 0 [ 154.853877][ T5450] workingset_restore_file 99 [ 154.976345][ T5450] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5502,uid=0 [ 155.054927][ T5450] Memory cgroup out of memory: Killed process 5502 (syz.0.1415) total-vm:91128kB, anon-rss:1288kB, file-rss:57552kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 155.160478][ T27] oom_reaper: reaped process 5502 (syz.0.1415), now anon-rss:0kB, file-rss:57488kB, shmem-rss:0kB [ 155.194180][ T5464] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 155.204879][ T5464] CPU: 0 PID: 5464 Comm: syz.0.1415 Not tainted syzkaller #0 [ 155.212271][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.222342][ T5464] Call Trace: [ 155.225791][ T5464] __dump_stack+0x21/0x24 [ 155.230134][ T5464] dump_stack_lvl+0x1a7/0x208 [ 155.234824][ T5464] ? show_regs_print_info+0x18/0x18 [ 155.240045][ T5464] ? ___ratelimit+0x421/0x5a0 [ 155.244737][ T5464] ? _raw_spin_lock+0x94/0xf0 [ 155.249428][ T5464] dump_stack+0x15/0x1c [ 155.253645][ T5464] dump_header+0xd9/0x650 [ 155.257988][ T5464] oom_kill_process+0x1fa/0x2c0 [ 155.262854][ T5464] out_of_memory+0x879/0xce0 [ 155.267456][ T5464] ? unregister_oom_notifier+0x20/0x20 [ 155.272929][ T5464] ? mutex_lock_killable+0xdf/0xf0 [ 155.278229][ T5464] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 155.284753][ T5464] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 155.290310][ T5464] ? mem_cgroup_oom_trylock+0x340/0x340 [ 155.295864][ T5464] ? _raw_spin_trylock_bh+0x150/0x150 [ 155.301252][ T5464] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 155.306823][ T5464] try_charge+0xfa9/0x1580 [ 155.311262][ T5464] ? __memcg_kmem_charge+0x150/0x150 [ 155.316573][ T5464] ? __kasan_check_write+0x14/0x20 [ 155.321691][ T5464] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 155.327502][ T5464] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 155.333061][ T5464] __mem_cgroup_charge+0x148/0x6d0 [ 155.338176][ T5464] shmem_add_to_page_cache+0x569/0xe10 [ 155.343646][ T5464] ? shmem_alloc_page+0x380/0x380 [ 155.348675][ T5464] ? _raw_spin_lock_irqsave+0x130/0x130 [ 155.354229][ T5464] ? find_lock_entry+0x4b/0x200 [ 155.359101][ T5464] shmem_getpage_gfp+0x907/0x20f0 [ 155.364132][ T5464] shmem_write_begin+0xce/0x1b0 [ 155.368983][ T5464] generic_perform_write+0x2ce/0x540 [ 155.374269][ T5464] ? atime_needs_update+0x5b0/0x5b0 [ 155.379468][ T5464] ? grab_cache_page_write_begin+0xb0/0xb0 [ 155.385278][ T5464] ? file_remove_privs+0x590/0x590 [ 155.390424][ T5464] ? __kasan_check_write+0x14/0x20 [ 155.395535][ T5464] ? down_write+0xb2/0x120 [ 155.399954][ T5464] __generic_file_write_iter+0x24b/0x480 [ 155.405608][ T5464] ? generic_write_checks+0x3df/0x480 [ 155.410990][ T5464] generic_file_write_iter+0xa9/0x1d0 [ 155.416392][ T5464] __kernel_write+0x5a5/0x9d0 [ 155.421073][ T5464] ? vfs_read+0xa50/0xa50 [ 155.425412][ T5464] ? populate_vma_page_range+0xf0/0xf0 [ 155.430871][ T5464] ? __kasan_check_write+0x14/0x20 [ 155.435983][ T5464] dump_emit+0x255/0x380 [ 155.440234][ T5464] ? wait_for_dump_helpers+0x380/0x380 [ 155.445696][ T5464] ? dump_user_range+0xa0/0x1a0 [ 155.450548][ T5464] dump_user_range+0x6a/0x1a0 [ 155.455229][ T5464] elf_core_dump+0x27af/0x2c20 [ 155.459999][ T5464] ? load_elf_binary+0x2910/0x2910 [ 155.465131][ T5464] ? _raw_spin_unlock+0x4d/0x70 [ 155.470008][ T5464] ? __kasan_check_write+0x14/0x20 [ 155.475125][ T5464] ? put_files_struct+0x229/0x310 [ 155.480158][ T5464] do_coredump+0x1be6/0x2910 [ 155.484753][ T5464] ? simple_acl_create+0x1c0/0x1c0 [ 155.489863][ T5464] ? debug_smp_processor_id+0x17/0x20 [ 155.495239][ T5464] ? kmem_cache_free+0x100/0x2d0 [ 155.500179][ T5464] ? ____kasan_slab_free+0x130/0x160 [ 155.505475][ T5464] ? get_signal+0xbdb/0x1300 [ 155.510071][ T5464] ? kmem_cache_free+0x100/0x2d0 [ 155.515009][ T5464] get_signal+0xf4c/0x1300 [ 155.519427][ T5464] arch_do_signal_or_restart+0xe7/0x11b0 [ 155.525060][ T5464] ? __bad_area_nosemaphore+0x2ca/0x410 [ 155.530607][ T5464] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 155.536241][ T5464] ? bad_area+0x6a/0x80 [ 155.540404][ T5464] exit_to_user_mode_loop+0xa2/0xe0 [ 155.545601][ T5464] exit_to_user_mode_prepare+0x76/0xa0 [ 155.551063][ T5464] irqentry_exit_to_user_mode+0x9/0x10 [ 155.556534][ T5464] irqentry_exit+0x12/0x60 [ 155.560952][ T5464] exc_page_fault+0x67/0xc0 [ 155.565454][ T5464] ? asm_exc_page_fault+0x8/0x30 [ 155.570415][ T5464] asm_exc_page_fault+0x1e/0x30 [ 155.575263][ T5464] RIP: 0033:0x82 [ 155.578824][ T5464] Code: Unable to access opcode bytes at RIP 0x58. [ 155.585326][ T5464] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 155.591394][ T5464] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 155.599367][ T5464] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 155.607347][ T5464] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 155.615324][ T5464] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 155.623297][ T5464] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 155.659864][ T6231] device syzkaller0 entered promiscuous mode [ 155.805690][ T5464] memory: usage 289144kB, limit 307200kB, failcnt 16317 [ 155.970182][ T5464] memory+swap: usage 391872kB, limit 9007199254740988kB, failcnt 0 [ 156.160190][ T5464] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 156.260418][ T5464] Memory cgroup stats for /syz0: [ 156.260563][ T5464] anon 405504 [ 156.260563][ T5464] file 277094400 [ 156.260563][ T5464] kernel_stack 0 [ 156.260563][ T5464] percpu 0 [ 156.260563][ T5464] sock 0 [ 156.260563][ T5464] shmem 277094400 [ 156.260563][ T5464] file_mapped 0 [ 156.260563][ T5464] file_dirty 135168 [ 156.260563][ T5464] file_writeback 0 [ 156.260563][ T5464] anon_thp 0 [ 156.260563][ T5464] inactive_anon 283865088 [ 156.260563][ T5464] active_anon 2297856 [ 156.260563][ T5464] inactive_file 118784 [ 156.260563][ T5464] active_file 0 [ 156.260563][ T5464] unevictable 0 [ 156.260563][ T5464] slab_reclaimable 0 [ 156.260563][ T5464] slab_unreclaimable 0 [ 156.260563][ T5464] slab 0 [ 156.260563][ T5464] workingset_refault_anon 66 [ 156.260563][ T5464] workingset_refault_file 99 [ 156.260563][ T5464] workingset_activate_anon 0 [ 156.260563][ T5464] workingset_activate_file 99 [ 156.260563][ T5464] workingset_restore_anon 0 [ 156.260563][ T5464] workingset_restore_file 99 [ 156.533526][ T5464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5500,uid=0 [ 156.657100][ T6248] device syzkaller0 entered promiscuous mode [ 156.669245][ T5464] Memory cgroup out of memory: Killed process 5500 (syz.0.1415) total-vm:91128kB, anon-rss:1292kB, file-rss:57552kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 156.973328][ T6259] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 158.167919][ T5490] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 158.586243][ T6300] device syzkaller0 entered promiscuous mode [ 158.726657][ T5490] CPU: 0 PID: 5490 Comm: syz.0.1415 Not tainted syzkaller #0 [ 158.734068][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.744134][ T5490] Call Trace: [ 158.747455][ T5490] __dump_stack+0x21/0x24 [ 158.751844][ T5490] dump_stack_lvl+0x1a7/0x208 [ 158.756544][ T5490] ? show_regs_print_info+0x18/0x18 [ 158.761762][ T5490] ? ___ratelimit+0x421/0x5a0 [ 158.766461][ T5490] ? _raw_spin_lock+0x94/0xf0 [ 158.771159][ T5490] dump_stack+0x15/0x1c [ 158.775333][ T5490] dump_header+0xd9/0x650 [ 158.779681][ T5490] oom_kill_process+0x1fa/0x2c0 [ 158.784550][ T5490] out_of_memory+0x879/0xce0 [ 158.789155][ T5490] ? unregister_oom_notifier+0x20/0x20 [ 158.794648][ T5490] ? mutex_lock_killable+0x92/0xf0 [ 158.799779][ T5490] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 158.806292][ T5490] ? __alloc_pages_nodemask+0x29a/0x640 [ 158.811861][ T5490] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 158.817546][ T5490] ? mem_cgroup_oom_trylock+0x340/0x340 [ 158.823124][ T5490] ? _raw_spin_trylock_bh+0x150/0x150 [ 158.828523][ T5490] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 158.834093][ T5490] try_charge+0xfa9/0x1580 [ 158.838537][ T5490] ? __memcg_kmem_charge+0x150/0x150 [ 158.843842][ T5490] ? __kasan_check_write+0x14/0x20 [ 158.848974][ T5490] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 158.854793][ T5490] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 158.860365][ T5490] __mem_cgroup_charge+0x148/0x6d0 [ 158.865497][ T5490] shmem_add_to_page_cache+0x569/0xe10 [ 158.870988][ T5490] ? shmem_alloc_page+0x380/0x380 [ 158.876021][ T5490] ? _raw_spin_lock_irqsave+0x130/0x130 [ 158.881584][ T5490] ? find_lock_entry+0x4b/0x200 [ 158.886456][ T5490] shmem_getpage_gfp+0x907/0x20f0 [ 158.891539][ T5490] shmem_write_begin+0xce/0x1b0 [ 158.896402][ T5490] generic_perform_write+0x2ce/0x540 [ 158.901702][ T5490] ? atime_needs_update+0x5b0/0x5b0 [ 158.907031][ T5490] ? grab_cache_page_write_begin+0xb0/0xb0 [ 158.912851][ T5490] ? file_remove_privs+0x590/0x590 [ 158.917979][ T5490] ? __kasan_check_write+0x14/0x20 [ 158.923103][ T5490] ? down_write+0xb2/0x120 [ 158.927528][ T5490] __generic_file_write_iter+0x24b/0x480 [ 158.933179][ T5490] ? generic_write_checks+0x3df/0x480 [ 158.938562][ T5490] generic_file_write_iter+0xa9/0x1d0 [ 158.943955][ T5490] __kernel_write+0x5a5/0x9d0 [ 158.948676][ T5490] ? vfs_read+0xa50/0xa50 [ 158.953031][ T5490] ? populate_vma_page_range+0xf0/0xf0 [ 158.958509][ T5490] ? __kasan_check_write+0x14/0x20 [ 158.963642][ T5490] dump_emit+0x255/0x380 [ 158.967907][ T5490] ? wait_for_dump_helpers+0x380/0x380 [ 158.973381][ T5490] dump_user_range+0x6a/0x1a0 [ 158.978079][ T5490] elf_core_dump+0x27af/0x2c20 [ 158.982863][ T5490] ? load_elf_binary+0x2910/0x2910 [ 158.988003][ T5490] ? _raw_spin_unlock+0x4d/0x70 [ 158.992866][ T5490] ? __kasan_check_write+0x14/0x20 [ 158.997979][ T5490] ? put_files_struct+0x229/0x310 [ 159.003039][ T5490] do_coredump+0x1be6/0x2910 [ 159.007634][ T5490] ? simple_acl_create+0x1c0/0x1c0 [ 159.012768][ T5490] ? debug_smp_processor_id+0x17/0x20 [ 159.018137][ T5490] ? kmem_cache_free+0x100/0x2d0 [ 159.023095][ T5490] ? ____kasan_slab_free+0x130/0x160 [ 159.028386][ T5490] ? get_signal+0xbdb/0x1300 [ 159.032976][ T5490] ? kmem_cache_free+0x2a9/0x2d0 [ 159.037919][ T5490] get_signal+0xf4c/0x1300 [ 159.042343][ T5490] arch_do_signal_or_restart+0xe7/0x11b0 [ 159.047982][ T5490] ? __bad_area_nosemaphore+0x2ca/0x410 [ 159.053531][ T5490] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 159.059178][ T5490] ? bad_area+0x6a/0x80 [ 159.063345][ T5490] exit_to_user_mode_loop+0xa2/0xe0 [ 159.068542][ T5490] exit_to_user_mode_prepare+0x76/0xa0 [ 159.074008][ T5490] irqentry_exit_to_user_mode+0x9/0x10 [ 159.079472][ T5490] irqentry_exit+0x12/0x60 [ 159.083886][ T5490] exc_page_fault+0x67/0xc0 [ 159.088390][ T5490] ? asm_exc_page_fault+0x8/0x30 [ 159.093327][ T5490] asm_exc_page_fault+0x1e/0x30 [ 159.098258][ T5490] RIP: 0033:0x82 [ 159.101810][ T5490] Code: Unable to access opcode bytes at RIP 0x58. [ 159.108312][ T5490] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 159.114384][ T5490] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 159.122359][ T5490] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 159.130333][ T5490] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 159.138310][ T5490] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 159.146289][ T5490] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 159.181578][ T5490] memory: usage 307200kB, limit 307200kB, failcnt 18375 [ 159.188773][ T5490] memory+swap: usage 424920kB, limit 9007199254740988kB, failcnt 0 [ 159.228086][ T5490] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 159.237367][ T5490] Memory cgroup stats for /syz0: [ 159.241094][ T5490] anon 405504 [ 159.241094][ T5490] file 306561024 [ 159.241094][ T5490] kernel_stack 0 [ 159.241094][ T5490] percpu 0 [ 159.241094][ T5490] sock 0 [ 159.241094][ T5490] shmem 306561024 [ 159.241094][ T5490] file_mapped 0 [ 159.241094][ T5490] file_dirty 135168 [ 159.241094][ T5490] file_writeback 0 [ 159.241094][ T5490] anon_thp 0 [ 159.241094][ T5490] inactive_anon 304680960 [ 159.241094][ T5490] active_anon 9732096 [ 159.241094][ T5490] inactive_file 0 [ 159.241094][ T5490] active_file 45056 [ 159.241094][ T5490] unevictable 0 [ 159.241094][ T5490] slab_reclaimable 0 [ 159.241094][ T5490] slab_unreclaimable 0 [ 159.241094][ T5490] slab 0 [ 159.241094][ T5490] workingset_refault_anon 66 [ 159.241094][ T5490] workingset_refault_file 231 [ 159.241094][ T5490] workingset_activate_anon 0 [ 159.241094][ T5490] workingset_activate_file 165 [ 159.241094][ T5490] workingset_restore_anon 0 [ 159.241094][ T5490] workingset_restore_file 132 [ 159.355728][ T5490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5493,uid=0 [ 159.380329][ T5490] Memory cgroup out of memory: Killed process 5493 (syz.0.1415) total-vm:91128kB, anon-rss:1296kB, file-rss:57552kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 159.419846][ T5462] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.445567][ T5462] CPU: 1 PID: 5462 Comm: syz.0.1415 Not tainted syzkaller #0 [ 159.452971][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.463034][ T5462] Call Trace: [ 159.466336][ T5462] __dump_stack+0x21/0x24 [ 159.470678][ T5462] dump_stack_lvl+0x1a7/0x208 [ 159.475366][ T5462] ? show_regs_print_info+0x18/0x18 [ 159.480607][ T5462] ? ___ratelimit+0x421/0x5a0 [ 159.485306][ T5462] ? _raw_spin_lock+0x94/0xf0 [ 159.489996][ T5462] dump_stack+0x15/0x1c [ 159.494189][ T5462] dump_header+0xd9/0x650 [ 159.498534][ T5462] oom_kill_process+0x1fa/0x2c0 [ 159.503402][ T5462] out_of_memory+0x879/0xce0 [ 159.508009][ T5462] ? unregister_oom_notifier+0x20/0x20 [ 159.513480][ T5462] ? mutex_lock_killable+0xdf/0xf0 [ 159.518613][ T5462] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 159.525127][ T5462] ? __alloc_pages_nodemask+0x29a/0x640 [ 159.530708][ T5462] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 159.536268][ T5462] ? mem_cgroup_oom_trylock+0x340/0x340 [ 159.541827][ T5462] ? _raw_spin_trylock_bh+0x150/0x150 [ 159.547217][ T5462] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 159.552774][ T5462] try_charge+0xfa9/0x1580 [ 159.557208][ T5462] ? __memcg_kmem_charge+0x150/0x150 [ 159.562516][ T5462] ? __kasan_check_write+0x14/0x20 [ 159.567646][ T5462] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 159.573492][ T5462] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 159.579052][ T5462] __mem_cgroup_charge+0x148/0x6d0 [ 159.584201][ T5462] shmem_add_to_page_cache+0x569/0xe10 [ 159.589715][ T5462] ? shmem_alloc_page+0x380/0x380 [ 159.594754][ T5462] ? _raw_spin_lock_irqsave+0x130/0x130 [ 159.600327][ T5462] ? find_lock_entry+0x4b/0x200 [ 159.605218][ T5462] shmem_getpage_gfp+0x907/0x20f0 [ 159.610267][ T5462] shmem_write_begin+0xce/0x1b0 [ 159.615137][ T5462] generic_perform_write+0x2ce/0x540 [ 159.620436][ T5462] ? atime_needs_update+0x5b0/0x5b0 [ 159.625653][ T5462] ? grab_cache_page_write_begin+0xb0/0xb0 [ 159.631479][ T5462] ? file_remove_privs+0x590/0x590 [ 159.636624][ T5462] ? __kasan_check_write+0x14/0x20 [ 159.641745][ T5462] ? down_write+0xb2/0x120 [ 159.646175][ T5462] __generic_file_write_iter+0x24b/0x480 [ 159.651821][ T5462] ? generic_write_checks+0x3df/0x480 [ 159.657209][ T5462] generic_file_write_iter+0xa9/0x1d0 [ 159.662596][ T5462] __kernel_write+0x5a5/0x9d0 [ 159.667301][ T5462] ? vfs_read+0xa50/0xa50 [ 159.671645][ T5462] ? populate_vma_page_range+0xf0/0xf0 [ 159.677126][ T5462] ? __kasan_check_write+0x14/0x20 [ 159.682254][ T5462] dump_emit+0x255/0x380 [ 159.686525][ T5462] ? wait_for_dump_helpers+0x380/0x380 [ 159.691998][ T5462] ? dump_skip+0x2e1/0x300 [ 159.696425][ T5462] ? dump_user_range+0xbd/0x1a0 [ 159.701293][ T5462] dump_user_range+0x6a/0x1a0 [ 159.706000][ T5462] elf_core_dump+0x27af/0x2c20 [ 159.710857][ T5462] ? load_elf_binary+0x2910/0x2910 [ 159.716008][ T5462] ? _raw_spin_unlock+0x4d/0x70 [ 159.720876][ T5462] ? __kasan_check_write+0x14/0x20 [ 159.726005][ T5462] ? put_files_struct+0x229/0x310 [ 159.731052][ T5462] do_coredump+0x1be6/0x2910 [ 159.735691][ T5462] ? simple_acl_create+0x1c0/0x1c0 [ 159.740827][ T5462] ? debug_smp_processor_id+0x17/0x20 [ 159.746210][ T5462] ? kmem_cache_free+0x100/0x2d0 [ 159.751178][ T5462] ? ____kasan_slab_free+0x130/0x160 [ 159.756478][ T5462] ? get_signal+0xbdb/0x1300 [ 159.761091][ T5462] ? kmem_cache_free+0x100/0x2d0 [ 159.766044][ T5462] get_signal+0xf4c/0x1300 [ 159.770493][ T5462] arch_do_signal_or_restart+0xe7/0x11b0 [ 159.776153][ T5462] ? __bad_area_nosemaphore+0x2ca/0x410 [ 159.781712][ T5462] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 159.787353][ T5462] ? bad_area+0x6a/0x80 [ 159.791526][ T5462] exit_to_user_mode_loop+0xa2/0xe0 [ 159.796747][ T5462] exit_to_user_mode_prepare+0x76/0xa0 [ 159.802221][ T5462] irqentry_exit_to_user_mode+0x9/0x10 [ 159.807687][ T5462] irqentry_exit+0x12/0x60 [ 159.812115][ T5462] exc_page_fault+0x67/0xc0 [ 159.816640][ T5462] ? asm_exc_page_fault+0x8/0x30 [ 159.821591][ T5462] asm_exc_page_fault+0x1e/0x30 [ 159.826454][ T5462] RIP: 0033:0x82 [ 159.830014][ T5462] Code: Unable to access opcode bytes at RIP 0x58. [ 159.836524][ T5462] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 159.842626][ T5462] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 159.850615][ T5462] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 159.858607][ T5462] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 159.866593][ T5462] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 159.874577][ T5462] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 160.050975][ T5462] memory: usage 307200kB, limit 307200kB, failcnt 18430 [ 160.140307][ T5462] memory+swap: usage 404100kB, limit 9007199254740988kB, failcnt 0 [ 160.148329][ T5462] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 160.270124][ T5462] Memory cgroup stats for /syz0: [ 160.270265][ T5462] anon 405504 [ 160.270265][ T5462] file 288448512 [ 160.270265][ T5462] kernel_stack 0 [ 160.270265][ T5462] percpu 0 [ 160.270265][ T5462] sock 0 [ 160.270265][ T5462] shmem 288583680 [ 160.270265][ T5462] file_mapped 0 [ 160.270265][ T5462] file_dirty 135168 [ 160.270265][ T5462] file_writeback 0 [ 160.270265][ T5462] anon_thp 0 [ 160.270265][ T5462] inactive_anon 286162944 [ 160.270265][ T5462] active_anon 9596928 [ 160.270265][ T5462] inactive_file 0 [ 160.270265][ T5462] active_file 45056 [ 160.270265][ T5462] unevictable 0 [ 160.270265][ T5462] slab_reclaimable 0 [ 160.270265][ T5462] slab_unreclaimable 0 [ 160.270265][ T5462] slab 0 [ 160.270265][ T5462] workingset_refault_anon 66 [ 160.270265][ T5462] workingset_refault_file 231 [ 160.270265][ T5462] workingset_activate_anon 0 [ 160.270265][ T5462] workingset_activate_file 165 [ 160.270265][ T5462] workingset_restore_anon 0 [ 160.270265][ T5462] workingset_restore_file 132 [ 160.803555][ T5462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5490,uid=0 [ 160.830279][ T5462] Memory cgroup out of memory: Killed process 5490 (syz.0.1415) total-vm:91128kB, anon-rss:1296kB, file-rss:57552kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 161.707124][ T5465] syz.0.1415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 161.934692][ T5465] CPU: 1 PID: 5465 Comm: syz.0.1415 Not tainted syzkaller #0 [ 161.942101][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.952169][ T5465] Call Trace: [ 161.955470][ T5465] __dump_stack+0x21/0x24 [ 161.959802][ T5465] dump_stack_lvl+0x1a7/0x208 [ 161.964482][ T5465] ? show_regs_print_info+0x18/0x18 [ 161.969685][ T5465] ? ___ratelimit+0x421/0x5a0 [ 161.974371][ T5465] ? _raw_spin_lock+0x94/0xf0 [ 161.979053][ T5465] dump_stack+0x15/0x1c [ 161.983236][ T5465] dump_header+0xd9/0x650 [ 161.987569][ T5465] oom_kill_process+0x1fa/0x2c0 [ 161.992435][ T5465] out_of_memory+0x879/0xce0 [ 161.997035][ T5465] ? unregister_oom_notifier+0x20/0x20 [ 162.002498][ T5465] ? mutex_lock_killable+0x92/0xf0 [ 162.007640][ T5465] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 162.014146][ T5465] ? __alloc_pages_nodemask+0x29a/0x640 [ 162.019696][ T5465] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 162.025240][ T5465] ? mem_cgroup_oom_trylock+0x340/0x340 [ 162.030792][ T5465] ? _raw_spin_trylock_bh+0x150/0x150 [ 162.036172][ T5465] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 162.041727][ T5465] try_charge+0xfa9/0x1580 [ 162.046154][ T5465] ? __memcg_kmem_charge+0x150/0x150 [ 162.051442][ T5465] ? __kasan_check_write+0x14/0x20 [ 162.056588][ T5465] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 162.062401][ T5465] ? free_unref_page_commit+0x2f0/0x2f0 [ 162.067951][ T5465] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 162.073516][ T5465] __mem_cgroup_charge+0x148/0x6d0 [ 162.078632][ T5465] shmem_add_to_page_cache+0x569/0xe10 [ 162.084099][ T5465] ? shmem_alloc_page+0x380/0x380 [ 162.089131][ T5465] ? _raw_spin_lock_irqsave+0x130/0x130 [ 162.094680][ T5465] ? find_lock_entry+0x4b/0x200 [ 162.099534][ T5465] shmem_getpage_gfp+0x907/0x20f0 [ 162.104575][ T5465] shmem_write_begin+0xce/0x1b0 [ 162.109431][ T5465] generic_perform_write+0x2ce/0x540 [ 162.114724][ T5465] ? atime_needs_update+0x5b0/0x5b0 [ 162.119932][ T5465] ? grab_cache_page_write_begin+0xb0/0xb0 [ 162.125743][ T5465] ? file_remove_privs+0x590/0x590 [ 162.130857][ T5465] ? __kasan_check_write+0x14/0x20 [ 162.135967][ T5465] ? down_write+0xb2/0x120 [ 162.140385][ T5465] __generic_file_write_iter+0x24b/0x480 [ 162.146021][ T5465] ? generic_write_checks+0x3df/0x480 [ 162.151393][ T5465] generic_file_write_iter+0xa9/0x1d0 [ 162.156766][ T5465] __kernel_write+0x5a5/0x9d0 [ 162.161449][ T5465] ? vfs_read+0xa50/0xa50 [ 162.165793][ T5465] ? populate_vma_page_range+0xf0/0xf0 [ 162.171278][ T5465] ? __kasan_check_write+0x14/0x20 [ 162.176393][ T5465] dump_emit+0x255/0x380 [ 162.180649][ T5465] ? wait_for_dump_helpers+0x380/0x380 [ 162.186132][ T5465] dump_user_range+0x6a/0x1a0 [ 162.190835][ T5465] elf_core_dump+0x27af/0x2c20 [ 162.195613][ T5465] ? load_elf_binary+0x2910/0x2910 [ 162.200736][ T5465] ? _raw_spin_unlock+0x4d/0x70 [ 162.205596][ T5465] ? __kasan_check_write+0x14/0x20 [ 162.210720][ T5465] ? put_files_struct+0x229/0x310 [ 162.215752][ T5465] do_coredump+0x1be6/0x2910 [ 162.220351][ T5465] ? simple_acl_create+0x1c0/0x1c0 [ 162.225470][ T5465] ? debug_smp_processor_id+0x17/0x20 [ 162.230847][ T5465] ? kmem_cache_free+0x100/0x2d0 [ 162.235781][ T5465] ? ____kasan_slab_free+0x130/0x160 [ 162.241077][ T5465] ? get_signal+0xbdb/0x1300 [ 162.245677][ T5465] ? kmem_cache_free+0x100/0x2d0 [ 162.250617][ T5465] get_signal+0xf4c/0x1300 [ 162.255041][ T5465] arch_do_signal_or_restart+0xe7/0x11b0 [ 162.260715][ T5465] ? __bad_area_nosemaphore+0x2ca/0x410 [ 162.266285][ T5465] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 162.271924][ T5465] ? bad_area+0x6a/0x80 [ 162.276097][ T5465] exit_to_user_mode_loop+0xa2/0xe0 [ 162.281299][ T5465] exit_to_user_mode_prepare+0x76/0xa0 [ 162.286761][ T5465] irqentry_exit_to_user_mode+0x9/0x10 [ 162.292224][ T5465] irqentry_exit+0x12/0x60 [ 162.296668][ T5465] exc_page_fault+0x67/0xc0 [ 162.301177][ T5465] ? asm_exc_page_fault+0x8/0x30 [ 162.306118][ T5465] asm_exc_page_fault+0x1e/0x30 [ 162.310967][ T5465] RIP: 0033:0x82 [ 162.314520][ T5465] Code: Unable to access opcode bytes at RIP 0x58. [ 162.321023][ T5465] RSP: 002b:0000200000000228 EFLAGS: 00010217 [ 162.327119][ T5465] RAX: 0000000000000000 RBX: 00007f48cfb61090 RCX: 00007f48cf8d9159 [ 162.335097][ T5465] RDX: 0000200000000240 RSI: 0000200000000220 RDI: 0000000002080400 [ 162.343074][ T5465] RBP: 00007f48cf97006b R08: 00002000000002c0 R09: 00002000000002c0 [ 162.351055][ T5465] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 162.359027][ T5465] R13: 00007f48cfb61128 R14: 00007f48cfb61090 R15: 00007fffc9b09518 [ 162.379441][ T5465] memory: usage 307088kB, limit 307200kB, failcnt 20317 [ 162.386490][ T5465] memory+swap: usage 426512kB, limit 9007199254740988kB, failcnt 0 [ 162.394633][ T5465] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 162.411374][ T5465] Memory cgroup stats for /syz0: [ 162.411520][ T5465] anon 405504 [ 162.411520][ T5465] file 308453376 [ 162.411520][ T5465] kernel_stack 0 [ 162.411520][ T5465] percpu 0 [ 162.411520][ T5465] sock 0 [ 162.411520][ T5465] shmem 308453376 [ 162.411520][ T5465] file_mapped 0 [ 162.411520][ T5465] file_dirty 135168 [ 162.411520][ T5465] file_writeback 0 [ 162.411520][ T5465] anon_thp 0 [ 162.411520][ T5465] inactive_anon 307175424 [ 162.411520][ T5465] active_anon 7163904 [ 162.411520][ T5465] inactive_file 0 [ 162.411520][ T5465] active_file 180224 [ 162.411520][ T5465] unevictable 0 [ 162.411520][ T5465] slab_reclaimable 0 [ 162.411520][ T5465] slab_unreclaimable 0 [ 162.411520][ T5465] slab 0 [ 162.411520][ T5465] workingset_refault_anon 99 [ 162.411520][ T5465] workingset_refault_file 264 [ 162.411520][ T5465] workingset_activate_anon 0 [ 162.411520][ T5465] workingset_activate_file 198 [ 162.411520][ T5465] workingset_restore_anon 0 [ 162.411520][ T5465] workingset_restore_file 165 [ 162.612794][ T5465] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1415,pid=5464,uid=0 [ 162.642562][ T5465] Memory cgroup out of memory: Killed process 5464 (syz.0.1415) total-vm:90468kB, anon-rss:1312kB, file-rss:60288kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 162.803154][ T6451] device syzkaller0 entered promiscuous mode [ 164.301565][ T6506] : port 1(dummy0) entered blocking state [ 164.307471][ T6506] : port 1(dummy0) entered disabled state [ 164.392469][ T6506] device dummy0 entered promiscuous mode [ 165.252331][ T6535] ref_ctr_offset mismatch. inode: 0x6d4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 165.485144][ T6542] device syzkaller0 entered promiscuous mode [ 166.794707][ T6600] device syzkaller0 entered promiscuous mode [ 166.911552][ T6598] device syzkaller0 entered promiscuous mode [ 166.931405][ T6600] tap0: tun_chr_ioctl cmd 1074025677 [ 166.940386][ T6600] tap0: linktype set to 768 [ 167.073996][ T24] audit: type=1400 audit(1790111216.090:160): avc: denied { create } for pid=6631 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 167.149720][ T6640] device macsec0 left promiscuous mode [ 167.617751][ T6655] device syzkaller0 entered promiscuous mode [ 167.868367][ T6668] device syzkaller0 entered promiscuous mode [ 168.061787][ T6676] device syzkaller0 entered promiscuous mode [ 168.206492][ T6697] device syzkaller0 entered promiscuous mode [ 168.253719][ T6703] device syzkaller0 entered promiscuous mode [ 168.493229][ T6739] device syzkaller0 entered promiscuous mode [ 169.100730][ T6762] device syzkaller0 entered promiscuous mode [ 169.426279][ T6771] device syzkaller0 entered promiscuous mode [ 169.636154][ T6785] device syzkaller0 entered promiscuous mode [ 170.714395][ T6846] device syzkaller0 entered promiscuous mode [ 170.787050][ T6846] syz.2.1761[6846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.787131][ T6846] syz.2.1761[6846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.143787][ T6893] device syzkaller0 entered promiscuous mode [ 172.002062][ T6927] device veth0_vlan left promiscuous mode [ 172.017971][ T6927] device veth0_vlan entered promiscuous mode [ 172.087418][ T6932] device syzkaller0 entered promiscuous mode [ 172.416855][ T6967] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 172.479219][ T6967] device syzkaller0 entered promiscuous mode [ 173.101551][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.109206][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.150805][ T7005] device bridge0 left promiscuous mode [ 173.197574][ T7008] device syzkaller0 entered promiscuous mode [ 173.216907][ T7010] device bridge_slave_1 left promiscuous mode [ 173.227300][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.244306][ T7010] device bridge_slave_0 left promiscuous mode [ 173.260185][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.875791][ T7061] device syzkaller0 entered promiscuous mode [ 174.283663][ T7080] device syzkaller0 entered promiscuous mode [ 174.824633][ T7084] cgroup: fork rejected by pids controller in /syz0 [ 175.559555][ T7180] ref_ctr_offset mismatch. inode: 0x783 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 176.966325][ T7241] device syzkaller0 entered promiscuous mode [ 178.271482][ T7283] device syzkaller0 entered promiscuous mode [ 179.995844][ T7381] tun0: tun_chr_ioctl cmd 2147767511 [ 180.545182][ T7421] device syzkaller0 entered promiscuous mode [ 181.500169][ T7494] device syzkaller0 entered promiscuous mode [ 183.294448][ T7577] device syzkaller0 entered promiscuous mode [ 184.117421][ T7627] device syzkaller0 entered promiscuous mode [ 184.135370][ T7621] device syzkaller0 entered promiscuous mode [ 185.135395][ T7674] device syzkaller0 entered promiscuous mode [ 185.213154][ T7676] tap0: tun_chr_ioctl cmd 1074025692 [ 186.345518][ T7734] device syzkaller0 entered promiscuous mode [ 186.676095][ T7742] device  entered promiscuous mode [ 187.192146][ T7778] tap0: tun_chr_ioctl cmd 1074025677 [ 187.206764][ T7778] tap0: linktype set to 769 [ 187.447634][ T7786] device syzkaller0 entered promiscuous mode [ 188.725104][ T7840] device syzkaller0 entered promiscuous mode [ 189.884808][ T7884] device syzkaller0 entered promiscuous mode [ 191.166767][ T7912] : port 1(ip6gretap0) entered blocking state [ 191.225081][ T7912] : port 1(ip6gretap0) entered disabled state [ 191.365341][ T7912] device ip6gretap0 entered promiscuous mode [ 191.445699][ T7912] : port 1(ip6gretap0) entered blocking state [ 191.452155][ T7912] : port 1(ip6gretap0) entered forwarding state [ 192.108299][ T7948] geneve0: tun_chr_ioctl cmd 2148553947 [ 193.180118][ T7976] device wg2 entered promiscuous mode [ 194.297367][ T8011] device syzkaller0 entered promiscuous mode [ 194.765994][ T8020] device syzkaller0 entered promiscuous mode [ 195.379143][ T8071] : port 2(ip6gretap0) entered blocking state [ 195.415324][ T8071] : port 2(ip6gretap0) entered disabled state [ 195.464275][ T8071] device ip6gretap0 entered promiscuous mode [ 195.526163][ T8073] device ip6gretap0 left promiscuous mode [ 195.608418][ T8073] : port 2(ip6gretap0) entered disabled state [ 196.439476][ T8098] device syzkaller0 entered promiscuous mode [ 196.955851][ T8106] device syzkaller0 entered promiscuous mode [ 198.363816][ T8169] FAULT_INJECTION: forcing a failure. [ 198.363816][ T8169] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.429689][ T8171] FAULT_INJECTION: forcing a failure. [ 198.429689][ T8171] name failslab, interval 1, probability 0, space 0, times 1 [ 198.480212][ T8169] CPU: 0 PID: 8169 Comm: syz.2.2140 Not tainted syzkaller #0 [ 198.487616][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.497722][ T8169] Call Trace: [ 198.501046][ T8169] __dump_stack+0x21/0x24 [ 198.505395][ T8169] dump_stack_lvl+0x1a7/0x208 [ 198.510092][ T8169] ? show_regs_print_info+0x18/0x18 [ 198.515312][ T8169] ? vfs_write+0xae4/0xd70 [ 198.519758][ T8169] dump_stack+0x15/0x1c [ 198.523922][ T8169] should_fail+0x3ab/0x500 [ 198.528347][ T8169] should_fail_usercopy+0x1a/0x20 [ 198.533379][ T8169] _copy_from_user+0x20/0xd0 [ 198.537977][ T8169] __se_sys_bpf+0x1bb/0x740 [ 198.542495][ T8169] ? __x64_sys_bpf+0x90/0x90 [ 198.547107][ T8169] ? debug_smp_processor_id+0x17/0x20 [ 198.552494][ T8169] __x64_sys_bpf+0x7b/0x90 [ 198.556931][ T8169] do_syscall_64+0x31/0x40 [ 198.561367][ T8169] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 198.567265][ T8169] RIP: 0033:0x7f5e8b8e2159 [ 198.571701][ T8169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.591324][ T8169] RSP: 002b:00007f5e8a33b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.599761][ T8169] RAX: ffffffffffffffda RBX: 00007f5e8bb69fa0 RCX: 00007f5e8b8e2159 [ 198.607855][ T8169] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 198.615852][ T8169] RBP: 00007f5e8a33b090 R08: 0000000000000000 R09: 0000000000000000 [ 198.623839][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.631832][ T8169] R13: 00007f5e8bb6a038 R14: 00007f5e8bb69fa0 R15: 00007ffe981a03e8 [ 198.649844][ T8171] CPU: 0 PID: 8171 Comm: syz.1.2141 Not tainted syzkaller #0 [ 198.657249][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.667323][ T8171] Call Trace: [ 198.670634][ T8171] __dump_stack+0x21/0x24 [ 198.674977][ T8171] dump_stack_lvl+0x1a7/0x208 [ 198.679672][ T8171] ? thaw_kernel_threads+0x220/0x220 [ 198.684969][ T8171] ? show_regs_print_info+0x18/0x18 [ 198.690213][ T8171] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 198.696856][ T8171] dump_stack+0x15/0x1c [ 198.701028][ T8171] should_fail+0x3ab/0x500 [ 198.705460][ T8171] ? map_lookup_elem+0x2b1/0x630 [ 198.710546][ T8171] __should_failslab+0xa4/0xe0 [ 198.715346][ T8171] should_failslab+0x9/0x20 [ 198.719867][ T8171] __kmalloc_track_caller+0x5f/0x310 [ 198.725203][ T8171] memdup_user+0x25/0xb0 [ 198.729452][ T8171] map_lookup_elem+0x2b1/0x630 [ 198.734221][ T8171] ? security_bpf+0x82/0xa0 [ 198.738731][ T8171] __se_sys_bpf+0x433/0x740 [ 198.743245][ T8171] ? __x64_sys_bpf+0x90/0x90 [ 198.747881][ T8171] ? debug_smp_processor_id+0x17/0x20 [ 198.753269][ T8171] __x64_sys_bpf+0x7b/0x90 [ 198.757728][ T8171] do_syscall_64+0x31/0x40 [ 198.762165][ T8171] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 198.768066][ T8171] RIP: 0033:0x7f4ea822f159 [ 198.772506][ T8171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.792127][ T8171] RSP: 002b:00007f4ea6c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.800569][ T8171] RAX: ffffffffffffffda RBX: 00007f4ea84b6fa0 RCX: 00007f4ea822f159 [ 198.808567][ T8171] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000001 [ 198.816554][ T8171] RBP: 00007f4ea6c88090 R08: 0000000000000000 R09: 0000000000000000 [ 198.824545][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.832545][ T8171] R13: 00007f4ea84b7038 R14: 00007f4ea84b6fa0 R15: 00007ffc3f739058 [ 199.216223][ T8207] FAULT_INJECTION: forcing a failure. [ 199.216223][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.391892][ T8207] CPU: 0 PID: 8207 Comm: syz.4.2155 Not tainted syzkaller #0 [ 199.399311][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.409378][ T8207] Call Trace: [ 199.412703][ T8207] __dump_stack+0x21/0x24 [ 199.417055][ T8207] dump_stack_lvl+0x1a7/0x208 [ 199.421756][ T8207] ? show_regs_print_info+0x18/0x18 [ 199.426973][ T8207] dump_stack+0x15/0x1c [ 199.431148][ T8207] should_fail+0x3ab/0x500 [ 199.435582][ T8207] should_fail_usercopy+0x1a/0x20 [ 199.440651][ T8207] strncpy_from_user+0x24/0x2d0 [ 199.445519][ T8207] bpf_prog_load+0x18f/0x14e0 [ 199.450218][ T8207] ? avc_has_perm_noaudit+0x260/0x260 [ 199.455605][ T8207] ? map_freeze+0x330/0x330 [ 199.460323][ T8207] ? vfs_write+0xae4/0xd70 [ 199.464757][ T8207] ? selinux_bpf+0xc7/0xf0 [ 199.469184][ T8207] ? security_bpf+0x82/0xa0 [ 199.473693][ T8207] __se_sys_bpf+0x49a/0x740 [ 199.478207][ T8207] ? __x64_sys_bpf+0x90/0x90 [ 199.482816][ T8207] ? debug_smp_processor_id+0x17/0x20 [ 199.488201][ T8207] __x64_sys_bpf+0x7b/0x90 [ 199.492642][ T8207] do_syscall_64+0x31/0x40 [ 199.497079][ T8207] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.502986][ T8207] RIP: 0033:0x7ff1182b8159 [ 199.507421][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.527039][ T8207] RSP: 002b:00007ff116d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.535461][ T8207] RAX: ffffffffffffffda RBX: 00007ff11853ffa0 RCX: 00007ff1182b8159 [ 199.543441][ T8207] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 199.551421][ T8207] RBP: 00007ff116d11090 R08: 0000000000000000 R09: 0000000000000000 [ 199.559408][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.567384][ T8207] R13: 00007ff118540038 R14: 00007ff11853ffa0 R15: 00007ffd7d78f9c8 [ 199.821908][ T8227] FAULT_INJECTION: forcing a failure. [ 199.821908][ T8227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.970161][ T8227] CPU: 1 PID: 8227 Comm: syz.1.2160 Not tainted syzkaller #0 [ 199.977588][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.987658][ T8227] Call Trace: [ 199.990973][ T8227] __dump_stack+0x21/0x24 [ 199.995315][ T8227] dump_stack_lvl+0x1a7/0x208 [ 200.000015][ T8227] ? show_regs_print_info+0x18/0x18 [ 200.005224][ T8227] dump_stack+0x15/0x1c [ 200.009402][ T8227] should_fail+0x3ab/0x500 [ 200.013828][ T8227] should_fail_usercopy+0x1a/0x20 [ 200.018866][ T8227] _copy_from_user+0x20/0xd0 [ 200.023472][ T8227] memdup_user+0x5e/0xb0 [ 200.027722][ T8227] map_lookup_elem+0x2b1/0x630 [ 200.032499][ T8227] ? security_bpf+0x82/0xa0 [ 200.037020][ T8227] __se_sys_bpf+0x433/0x740 [ 200.041590][ T8227] ? __x64_sys_bpf+0x90/0x90 [ 200.046209][ T8227] ? debug_smp_processor_id+0x17/0x20 [ 200.051591][ T8227] __x64_sys_bpf+0x7b/0x90 [ 200.056024][ T8227] do_syscall_64+0x31/0x40 [ 200.060461][ T8227] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 200.066464][ T8227] RIP: 0033:0x7f4ea822f159 [ 200.070980][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.090593][ T8227] RSP: 002b:00007f4ea6c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.099016][ T8227] RAX: ffffffffffffffda RBX: 00007f4ea84b6fa0 RCX: 00007f4ea822f159 [ 200.106998][ T8227] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000001 [ 200.114983][ T8227] RBP: 00007f4ea6c88090 R08: 0000000000000000 R09: 0000000000000000 [ 200.122986][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.130991][ T8227] R13: 00007f4ea84b7038 R14: 00007f4ea84b6fa0 R15: 00007ffc3f739058 [ 200.437333][ T8235] device syzkaller0 entered promiscuous mode [ 200.755469][ T8257] FAULT_INJECTION: forcing a failure. [ 200.755469][ T8257] name failslab, interval 1, probability 0, space 0, times 0 [ 200.800257][ T8257] CPU: 0 PID: 8257 Comm: syz.2.2171 Not tainted syzkaller #0 [ 200.807664][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.817730][ T8257] Call Trace: [ 200.821049][ T8257] __dump_stack+0x21/0x24 [ 200.825400][ T8257] dump_stack_lvl+0x1a7/0x208 [ 200.830094][ T8257] ? show_regs_print_info+0x18/0x18 [ 200.835305][ T8257] ? unwind_get_return_address+0x4d/0x90 [ 200.840975][ T8257] dump_stack+0x15/0x1c [ 200.845137][ T8257] should_fail+0x3ab/0x500 [ 200.849582][ T8257] ? __get_vm_area_node+0x113/0x450 [ 200.854832][ T8257] __should_failslab+0xa4/0xe0 [ 200.859610][ T8257] should_failslab+0x9/0x20 [ 200.864143][ T8257] kmem_cache_alloc_trace+0x3a/0x2e0 [ 200.869447][ T8257] __get_vm_area_node+0x113/0x450 [ 200.874484][ T8257] ? selinux_capable+0x2b6/0x3b0 [ 200.879435][ T8257] __vmalloc_node_range+0xe7/0x7a0 [ 200.884566][ T8257] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 200.890136][ T8257] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 200.895693][ T8257] __vmalloc+0x79/0x90 [ 200.899783][ T8257] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 200.905354][ T8257] bpf_prog_alloc_no_stats+0x3a/0x240 [ 200.910742][ T8257] bpf_prog_alloc+0x21/0x1f0 [ 200.915344][ T8257] bpf_prog_load+0x7ca/0x14e0 [ 200.920039][ T8257] ? map_freeze+0x330/0x330 [ 200.924560][ T8257] ? vfs_write+0xae4/0xd70 [ 200.929001][ T8257] ? selinux_bpf+0xc7/0xf0 [ 200.933435][ T8257] ? security_bpf+0x82/0xa0 [ 200.937954][ T8257] __se_sys_bpf+0x49a/0x740 [ 200.942470][ T8257] ? __x64_sys_bpf+0x90/0x90 [ 200.947085][ T8257] ? debug_smp_processor_id+0x17/0x20 [ 200.952472][ T8257] __x64_sys_bpf+0x7b/0x90 [ 200.956895][ T8257] do_syscall_64+0x31/0x40 [ 200.961315][ T8257] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 200.967209][ T8257] RIP: 0033:0x7f5e8b8e2159 [ 200.971628][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.991234][ T8257] RSP: 002b:00007f5e8a33b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.999653][ T8257] RAX: ffffffffffffffda RBX: 00007f5e8bb69fa0 RCX: 00007f5e8b8e2159 [ 201.007630][ T8257] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 201.015610][ T8257] RBP: 00007f5e8a33b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.023595][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.031580][ T8257] R13: 00007f5e8bb6a038 R14: 00007f5e8bb69fa0 R15: 00007ffe981a03e8 [ 201.140184][ T8257] syz.2.2171: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 201.156161][ T8257] CPU: 1 PID: 8257 Comm: syz.2.2171 Not tainted syzkaller #0 [ 201.163557][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.173622][ T8257] Call Trace: [ 201.176933][ T8257] __dump_stack+0x21/0x24 [ 201.181268][ T8257] dump_stack_lvl+0x1a7/0x208 [ 201.185945][ T8257] ? show_regs_print_info+0x18/0x18 [ 201.191145][ T8257] ? pr_cont_kernfs_name+0xe3/0xf0 [ 201.196261][ T8257] dump_stack+0x15/0x1c [ 201.200421][ T8257] warn_alloc+0x1dc/0x200 [ 201.204767][ T8257] ? zone_watermark_ok_safe+0x290/0x290 [ 201.210318][ T8257] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 201.215868][ T8257] ? __get_vm_area_node+0x345/0x450 [ 201.221076][ T8257] ? selinux_capable+0x2b6/0x3b0 [ 201.226031][ T8257] __vmalloc_node_range+0x272/0x7a0 [ 201.231232][ T8257] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 201.236786][ T8257] __vmalloc+0x79/0x90 [ 201.240870][ T8257] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 201.246423][ T8257] bpf_prog_alloc_no_stats+0x3a/0x240 [ 201.251806][ T8257] bpf_prog_alloc+0x21/0x1f0 [ 201.256408][ T8257] bpf_prog_load+0x7ca/0x14e0 [ 201.261091][ T8257] ? map_freeze+0x330/0x330 [ 201.265603][ T8257] ? vfs_write+0xae4/0xd70 [ 201.270033][ T8257] ? selinux_bpf+0xc7/0xf0 [ 201.274452][ T8257] ? security_bpf+0x82/0xa0 [ 201.278962][ T8257] __se_sys_bpf+0x49a/0x740 [ 201.283471][ T8257] ? __x64_sys_bpf+0x90/0x90 [ 201.288067][ T8257] ? debug_smp_processor_id+0x17/0x20 [ 201.293444][ T8257] __x64_sys_bpf+0x7b/0x90 [ 201.297868][ T8257] do_syscall_64+0x31/0x40 [ 201.302290][ T8257] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 201.308184][ T8257] RIP: 0033:0x7f5e8b8e2159 [ 201.312603][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.332208][ T8257] RSP: 002b:00007f5e8a33b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.340628][ T8257] RAX: ffffffffffffffda RBX: 00007f5e8bb69fa0 RCX: 00007f5e8b8e2159 [ 201.348602][ T8257] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 201.356589][ T8257] RBP: 00007f5e8a33b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.364567][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.372542][ T8257] R13: 00007f5e8bb6a038 R14: 00007f5e8bb69fa0 R15: 00007ffe981a03e8 [ 201.609504][ T8257] Mem-Info: [ 201.613076][ T8257] active_anon:38 inactive_anon:9434 isolated_anon:0 [ 201.613076][ T8257] active_file:23690 inactive_file:4195 isolated_file:0 [ 201.613076][ T8257] unevictable:0 dirty:246 writeback:0 [ 201.613076][ T8257] slab_reclaimable:7507 slab_unreclaimable:78669 [ 201.613076][ T8257] mapped:29197 shmem:185 pagetables:641 bounce:0 [ 201.613076][ T8257] free:1553256 free_pcp:1407 free_cma:0 [ 201.921023][ T8257] Node 0 active_anon:152kB inactive_anon:37696kB active_file:94760kB inactive_file:16780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116676kB dirty:984kB writeback:0kB shmem:728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9536kB all_unreclaimable? no [ 201.990341][ T8257] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986544kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2908kB local_pcp:1440kB free_cma:0kB [ 202.000224][ T8264] device syzkaller0 entered promiscuous mode [ 202.023295][ T8257] lowmem_reserve[]: 0 3941 3941 [ 202.053272][ T8257] Normal free:3237020kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:152kB inactive_anon:40296kB active_file:94760kB inactive_file:16780kB unevictable:0kB writepending:984kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:2612kB bounce:0kB free_pcp:2116kB local_pcp:1568kB free_cma:0kB [ 202.225926][ T8257] lowmem_reserve[]: 0 0 0 [ 202.250103][ T8257] DMA32: 7*4kB (UM) 7*8kB (M) 4*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 202.286089][ T8257] Normal: 1143*4kB (UME) 1540*8kB (UME) 913*16kB (UM) 613*32kB (UME) 528*64kB (UME) 295*128kB (UME) 101*256kB (UM) 49*512kB (UM) 39*1024kB (UME) 23*2048kB (M) 726*4096kB (UM) = 3234348kB [ 202.306440][ T8257] 28693 total pagecache pages [ 202.342372][ T8257] 1 pages in swap cache [ 202.358105][ T8257] Swap cache stats: add 61281, delete 61280, find 300/369 [ 202.470093][ T8257] Free swap = 124612kB [ 202.474293][ T8257] Total swap = 124996kB [ 202.478545][ T8257] 2097051 pages RAM [ 202.508485][ T8257] 0 pages HighMem/MovableOnly [ 202.518563][ T8257] 341387 pages reserved [ 202.524145][ T8257] 0 pages cma reserved [ 203.204550][ T8340] device macsec0 entered promiscuous mode [ 203.358487][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.675405][ T8388] device syzkaller0 entered promiscuous mode [ 205.638483][ T8413] device syzkaller0 entered promiscuous mode [ 205.673775][ T8419] device veth0_vlan left promiscuous mode [ 205.680002][ T8419] device veth0_vlan entered promiscuous mode [ 205.694357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.728529][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.819177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.092601][ T8422] device syzkaller0 entered promiscuous mode [ 206.841471][ T8459] device syzkaller0 entered promiscuous mode [ 207.012495][ T8465] device lo entered promiscuous mode [ 208.120785][ T8539] žÿ: renamed from team_slave_1 [ 208.731899][ T8578] : port 1(ip6gretap0) entered blocking state [ 208.738140][ T8578] : port 1(ip6gretap0) entered forwarding state [ 208.750566][ T8578] device  left promiscuous mode [ 208.756175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 208.784962][ T8580] device syzkaller0 entered promiscuous mode [ 210.289923][ T8628] device syzkaller0 entered promiscuous mode [ 214.341036][ T8780] device syzkaller0 entered promiscuous mode [ 214.396136][ T8774] device veth0_vlan left promiscuous mode [ 214.452614][ T8774] device veth0_vlan entered promiscuous mode [ 216.708034][ T8853] device syzkaller0 entered promiscuous mode [ 217.188090][ T8870] device syzkaller0 entered promiscuous mode [ 217.800882][ T8886] device syzkaller0 entered promiscuous mode [ 220.239495][ T9007] syzkaller0: create flow: hash 3962587555 index 2 [ 220.424308][ T6417] syzkaller0: tun_net_xmit 76 [ 220.429130][ T6417] syzkaller0: tun_net_xmit 48 [ 220.444276][ T9001] syzkaller0: delete flow: hash 3962587555 index 2 [ 220.480131][ C1] syzkaller0: tun_net_xmit 76 [ 220.561842][ T9018] ªªªªª6: renamed from veth0_vlan [ 220.633400][ T9018] device syzkaller0 entered promiscuous mode [ 220.898875][ T9030] device syzkaller0 entered promiscuous mode [ 222.648854][ T9115] device syzkaller0 entered promiscuous mode [ 223.919779][ T9165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.931945][ T9165] device veth1_macvtap left promiscuous mode [ 225.781807][ T9203] device syzkaller0 entered promiscuous mode [ 225.796300][ T9205] device syzkaller0 entered promiscuous mode [ 225.968937][ T9221] device syzkaller0 entered promiscuous mode [ 227.088682][ T9245] device sit0 entered promiscuous mode [ 229.079700][ T9306] device syzkaller0 entered promiscuous mode [ 229.993053][ T9342] device syzkaller0 entered promiscuous mode [ 230.052832][ T9352] device syzkaller0 entered promiscuous mode [ 230.060256][ T9351] device sit0 left promiscuous mode [ 230.179670][ T9357] device sit0 entered promiscuous mode [ 230.332340][ T9364] device sit0 entered promiscuous mode [ 231.446101][ T9415] device syzkaller0 entered promiscuous mode [ 231.710378][ T9428] device syzkaller0 entered promiscuous mode [ 232.636810][ T9472] device sit0 left promiscuous mode [ 232.759633][ T9507] device syzkaller0 entered promiscuous mode [ 234.036479][ T9565] device syzkaller0 entered promiscuous mode [ 234.530898][ T9587] device ip6gretap0 left promiscuous mode [ 234.538198][ T9587] : port 1(ip6gretap0) entered disabled state [ 235.273128][ T9619] : renamed from bond_slave_0 [ 235.315339][ T9623] device syzkaller0 entered promiscuous mode [ 236.884189][ T9665] device syzkaller0 entered promiscuous mode [ 237.113835][ T9682] device syzkaller0 entered promiscuous mode [ 237.174689][ T9689] device veth1_to_bond entered promiscuous mode [ 237.819043][ T9732] device syzkaller0 entered promiscuous mode [ 237.887216][ T9701] cgroup: fork rejected by pids controller in /syz3 [ 238.638183][ T9792] device syzkaller0 entered promiscuous mode [ 238.983108][ T9823] device syzkaller0 entered promiscuous mode [ 239.892326][ T9850] syz.2.2642[9850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.892416][ T9850] syz.2.2642[9850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.039106][ T9852] device sit0 left promiscuous mode [ 240.246678][ T9854] device sit0 entered promiscuous mode [ 240.410926][ T9864] device syzkaller0 entered promiscuous mode [ 240.700641][ T9901] syz.1.2660[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.701525][ T9902] syz.1.2660[9902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.294538][ T9914] device sit0 left promiscuous mode [ 241.358742][ T9931] device syzkaller0 entered promiscuous mode [ 241.843744][ T9972] device syzkaller0 entered promiscuous mode [ 241.853185][ T9974] Ÿë: port 1(ÿÿÿÿÿÿ) entered blocking state [ 241.859198][ T9974] Ÿë: port 1(ÿÿÿÿÿÿ) entered disabled state [ 241.868143][ T9974] device ÿÿÿÿÿÿ entered promiscuous mode [ 243.063903][T10032] device syzkaller0 entered promiscuous mode [ 243.526912][T10058] device syzkaller0 entered promiscuous mode [ 243.859713][T10080] device syzkaller0 entered promiscuous mode [ 244.417293][T10124] device syzkaller0 entered promiscuous mode [ 244.434968][T10123] device syzkaller0 entered promiscuous mode [ 244.776153][T10175] device syzkaller0 entered promiscuous mode [ 245.627722][T10251] device syzkaller0 entered promiscuous mode [ 245.714260][T10264] device syzkaller0 entered promiscuous mode [ 245.751175][ T24] audit: type=1400 audit(1790111294.770:161): avc: denied { create } for pid=10266 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 246.712067][T10327] nr0: port 1(macsec0) entered blocking state [ 246.718216][T10327] nr0: port 1(macsec0) entered disabled state [ 246.741880][T10327] device macsec0 entered promiscuous mode [ 248.171774][T10413] device syzkaller0 left promiscuous mode [ 250.353199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 250.365611][T10511] device syzkaller0 entered promiscuous mode [ 251.413798][T10548] device syzkaller0 entered promiscuous mode [ 251.503530][T10549] device veth0_vlan left promiscuous mode [ 251.662494][T10549] device veth0_vlan entered promiscuous mode [ 253.262055][T10621] device syzkaller0 entered promiscuous mode [ 253.453489][T10639] device syzkaller0 entered promiscuous mode [ 253.738186][T10662] tun0: tun_chr_ioctl cmd 1074025692 [ 253.907611][T10668] device syzkaller0 entered promiscuous mode [ 254.369923][T10691] device syzkaller0 entered promiscuous mode [ 254.399345][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.407486][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.415103][T10683] device bridge_slave_0 entered promiscuous mode [ 254.433899][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.447439][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.470456][T10683] device bridge_slave_1 entered promiscuous mode [ 254.711951][ T24] audit: type=1400 audit(1790111303.730:162): avc: denied { write } for pid=10683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.745612][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.752713][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.760060][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.767090][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.823967][ T24] audit: type=1400 audit(1790111303.750:163): avc: denied { read } for pid=10683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.253180][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.272221][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.334327][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.372609][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.427454][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.487737][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.536958][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.544229][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.600523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.637713][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.690300][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.697368][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.768265][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.787295][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.803536][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.812719][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.873453][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.887201][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.906954][T10683] device veth0_vlan entered promiscuous mode [ 255.941314][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.949245][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.957515][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.965434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.025041][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.040519][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.059143][T10683] device veth1_macvtap entered promiscuous mode [ 256.080264][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.098239][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.135310][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.170890][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.189394][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.465203][ T300] : port 1(ip6gretap0) entered disabled state [ 256.515460][ T300] device ip6gretap0 left promiscuous mode [ 256.566651][ T300] : port 1(ip6gretap0) entered disabled state [ 256.867372][T10805] device syzkaller0 entered promiscuous mode [ 257.014275][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.131530][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.144093][T10807] device bridge_slave_0 entered promiscuous mode [ 257.153846][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.161044][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.168491][T10807] device bridge_slave_1 entered promiscuous mode [ 257.666875][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.707632][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.737615][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.761626][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.842011][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.849091][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.921596][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.988197][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.033887][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.041117][ T758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.151798][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.385315][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.405859][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.419367][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.473068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.526703][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.543093][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.570413][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.579267][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.597124][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.608187][T10807] device veth0_vlan entered promiscuous mode [ 258.629136][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.644402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.680887][T10807] device veth1_macvtap entered promiscuous mode [ 258.790425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.803980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.837479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.845922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.854233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.112482][ T300] device veth1_macvtap left promiscuous mode [ 260.850784][ T49] device ÿÿÿÿÿÿ left promiscuous mode [ 260.856358][ T49] Ÿë: port 1(ÿÿÿÿÿÿ) entered disabled state [ 260.912859][ T49] device bridge_slave_1 left promiscuous mode [ 260.940471][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.990330][ T49] device bridge_slave_0 left promiscuous mode [ 260.996502][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.058254][ T49] device veth1_macvtap left promiscuous mode [ 261.189200][T11010] device syzkaller0 entered promiscuous mode [ 261.319927][T11032] caif0: tun_chr_ioctl cmd 2148553947 [ 262.889513][T11091] syz.0.3023[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.889588][T11091] syz.0.3023[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.916112][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.935182][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.942716][T11082] device bridge_slave_0 entered promiscuous mode [ 262.953440][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.960558][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.968081][T11082] device bridge_slave_1 entered promiscuous mode [ 263.164674][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.171795][T11082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.179085][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.186187][T11082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.227801][T11112] device syzkaller0 entered promiscuous mode [ 263.256140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.264768][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.277343][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.348449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.361084][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.368160][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.383547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.410611][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.417697][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.447144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.464971][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.508030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.523416][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.560707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.584212][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.600914][T11082] device veth0_vlan entered promiscuous mode [ 263.662052][T11132] device syzkaller0 entered promiscuous mode [ 263.692469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.724719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.749792][T11082] device veth1_macvtap entered promiscuous mode [ 263.812370][T11151] device syzkaller0 entered promiscuous mode [ 263.844805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.855400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.878337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.937136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.963716][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.427874][T11162] device syzkaller0 entered promiscuous mode [ 264.848956][T11179] ref_ctr_offset mismatch. inode: 0xbc2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 265.116719][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.123838][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.131527][T11166] device bridge_slave_0 entered promiscuous mode [ 265.138630][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.145928][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.177945][T11166] device bridge_slave_1 entered promiscuous mode [ 265.577198][T11199] device syzkaller0 entered promiscuous mode [ 265.670364][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.677450][T11166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.684747][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.691818][T11166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.756631][T11212] device syzkaller0 entered promiscuous mode [ 265.764501][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.778431][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.891483][ T49] device macsec0 left promiscuous mode [ 265.907243][ T49] nr0: port 1(macsec0) entered disabled state [ 265.967956][ T49] device veth0_vlan left promiscuous mode [ 266.437646][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.453482][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.488100][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.532956][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.546358][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.553580][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.568576][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.608624][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.645969][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.653258][ T758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.673935][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.683321][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.691607][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.699806][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.806237][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.815832][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.845708][T11166] device veth0_vlan entered promiscuous mode [ 266.864610][T11236] ref_ctr_offset mismatch. inode: 0xa5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 266.891053][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.901291][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.910928][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.918417][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.954602][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.977140][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.025681][T11166] device veth1_macvtap entered promiscuous mode [ 267.090118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.097757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.116625][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.130435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.148963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.870833][T11272] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.878044][T11272] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.973064][T11276] device bridge_slave_1 left promiscuous mode [ 267.986955][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.010318][T11276] device bridge_slave_0 left promiscuous mode [ 268.020589][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.393633][ T49] device macsec0 left promiscuous mode [ 268.399215][ T49] nr0: port 1(macsec0) entered disabled state [ 268.426198][ T49] device dummy0 left promiscuous mode [ 268.439390][ T49] : port 1(dummy0) entered disabled state [ 268.461057][ T49] device veth0_vlan left promiscuous mode [ 269.603643][T11399] syz.1.3109 (11399) used obsolete PPPIOCDETACH ioctl [ 270.649209][T11452] device syzkaller0 entered promiscuous mode [ 271.666868][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.752027][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.759650][T11477] device bridge_slave_0 entered promiscuous mode [ 271.791193][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.825561][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.853413][T11477] device bridge_slave_1 entered promiscuous mode [ 271.996481][T11495] device syzkaller0 entered promiscuous mode [ 272.216834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.236411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.290410][T11506] device syzkaller0 entered promiscuous mode [ 272.309281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.335126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.356242][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.363362][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.377069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.385812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.401796][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.408873][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.416460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.424904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.433278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.441365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.449756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.504071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.512671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.535617][T11477] device veth0_vlan entered promiscuous mode [ 272.549098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.561676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.577597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.593842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.605605][T11477] device veth1_macvtap entered promiscuous mode [ 272.632063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.641294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.669587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.688609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.819674][T11539] device syzkaller0 entered promiscuous mode [ 272.846187][T11536] : port 1(ip6gretap0) entered blocking state [ 272.870460][T11536] : port 1(ip6gretap0) entered disabled state [ 272.887165][T11536] device ip6gretap0 entered promiscuous mode [ 272.932809][T11543] device ip6gretap0 left promiscuous mode [ 272.938678][T11543] : port 1(ip6gretap0) entered disabled state [ 273.164360][T11546] cgroup: fork rejected by pids controller in /syz2 [ 273.673810][T11646] device syzkaller0 entered promiscuous mode [ 273.974903][ T49] device veth1_macvtap left promiscuous mode [ 274.364678][ T24] audit: type=1400 audit(1790111323.380:164): avc: denied { create } for pid=11685 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 274.768311][T11707] device syzkaller0 entered promiscuous mode [ 274.946309][T11709] device syzkaller0 entered promiscuous mode [ 276.462827][T11769] device veth1_macvtap left promiscuous mode [ 277.068942][T11795] device syzkaller0 entered promiscuous mode [ 277.623220][T11809] device syzkaller0 entered promiscuous mode [ 277.679570][T11808] ªªªªª6: renamed from veth0_vlan [ 278.272628][T11841] device syzkaller0 entered promiscuous mode [ 278.424541][T11852] : port 1(ip6gretap0) entered blocking state [ 278.441195][T11852] : port 1(ip6gretap0) entered disabled state [ 278.475368][T11852] device ip6gretap0 entered promiscuous mode [ 279.385307][ T24] audit: type=1400 audit(1790111328.400:165): avc: denied { create } for pid=11916 comm="syz.2.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.831791][T11944] -1O2~�: renamed from syzkaller0 [ 281.245324][T12029] device syzkaller0 entered promiscuous mode [ 281.381798][T12033] : port 1(ip6gretap0) entered blocking state [ 281.419705][T12033] : port 1(ip6gretap0) entered disabled state [ 281.440471][T12033] device ip6gretap0 entered promiscuous mode [ 281.592350][T12035] device ip6gretap0 left promiscuous mode [ 281.615994][T12035] : port 1(ip6gretap0) entered disabled state [ 281.926746][T12028] device veth1_macvtap left promiscuous mode [ 282.141397][T12055] device syzkaller0 entered promiscuous mode [ 282.182593][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.190431][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.299908][T12068] device bridge_slave_1 left promiscuous mode [ 282.316233][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.326136][T12068] device bridge_slave_0 left promiscuous mode [ 282.343950][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.989251][T12122] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 283.555273][T12173] device syzkaller0 entered promiscuous mode [ 283.793860][T12180] syz.2.3337[12180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.793923][T12180] syz.2.3337[12180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.239084][T12200] device sit0 entered promiscuous mode [ 284.532292][T12252] FAULT_INJECTION: forcing a failure. [ 284.532292][T12252] name failslab, interval 1, probability 0, space 0, times 0 [ 284.559153][T12252] CPU: 0 PID: 12252 Comm: syz.3.3357 Not tainted syzkaller #0 [ 284.566651][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.576718][T12252] Call Trace: [ 284.580028][T12252] __dump_stack+0x21/0x24 [ 284.584376][T12252] dump_stack_lvl+0x1a7/0x208 [ 284.589086][T12252] ? thaw_kernel_threads+0x220/0x220 [ 284.594383][T12252] ? show_regs_print_info+0x18/0x18 [ 284.599596][T12252] dump_stack+0x15/0x1c [ 284.603770][T12252] should_fail+0x3ab/0x500 [ 284.608212][T12252] ? security_file_alloc+0x33/0x120 [ 284.613422][T12252] __should_failslab+0xa4/0xe0 [ 284.618197][T12252] should_failslab+0x9/0x20 [ 284.622712][T12252] kmem_cache_alloc+0x3d/0x2d0 [ 284.627493][T12252] ? __alloc_file+0x28/0x320 [ 284.632106][T12252] security_file_alloc+0x33/0x120 [ 284.637150][T12252] __alloc_file+0xb5/0x320 [ 284.641606][T12252] alloc_empty_file+0x97/0x180 [ 284.646411][T12252] path_openat+0xf4/0x3040 [ 284.650842][T12252] ? __kasan_slab_alloc+0xc9/0xe0 [ 284.655877][T12252] ? __kasan_slab_alloc+0xb7/0xe0 [ 284.660918][T12252] ? kmem_cache_alloc+0x15a/0x2d0 [ 284.665964][T12252] ? getname_flags+0xba/0x510 [ 284.670662][T12252] ? getname+0x19/0x20 [ 284.674749][T12252] ? do_sys_openat2+0xde/0x750 [ 284.679529][T12252] ? __x64_sys_openat+0x136/0x160 [ 284.684565][T12252] ? do_syscall_64+0x31/0x40 [ 284.689186][T12252] ? do_filp_open+0x400/0x400 [ 284.693879][T12252] do_filp_open+0x1df/0x400 [ 284.698394][T12252] ? vfs_tmpfile+0x2c0/0x2c0 [ 284.703007][T12252] ? get_unused_fd_flags+0x92/0xa0 [ 284.708128][T12252] do_sys_openat2+0x19f/0x750 [ 284.712839][T12252] ? do_sys_open+0xe0/0xe0 [ 284.717270][T12252] ? switch_fpu_return+0x19c/0x330 [ 284.722397][T12252] ? kvm_sched_clock_read+0x18/0x40 [ 284.727614][T12252] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 284.733695][T12252] __x64_sys_openat+0x136/0x160 [ 284.738569][T12252] do_syscall_64+0x31/0x40 [ 284.743012][T12252] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 284.748923][T12252] RIP: 0033:0x7f47e7d3498e [ 284.753356][T12252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.772979][T12252] RSP: 002b:00007f47e67ccec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.781419][T12252] RAX: ffffffffffffffda RBX: 00007f47e67cd6c0 RCX: 00007f47e7d3498e [ 284.789404][T12252] RDX: 0000000000000002 RSI: 00007f47e67ccf90 RDI: ffffffffffffff9c [ 284.797382][T12252] RBP: 00007f47e67cd090 R08: 0000000000000000 R09: 0000000000000000 [ 284.805361][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.813344][T12252] R13: 00007f47e7ffc038 R14: 00007f47e7ffbfa0 R15: 00007ffea32d58b8 [ 284.939024][T12260] syz.3.3361[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.939138][T12260] syz.3.3361[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.284551][T12269] ref_ctr_offset mismatch. inode: 0x1e3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 286.408679][T12336] : port 1(ip6gretap0) entered blocking state [ 286.436217][T12336] : port 1(ip6gretap0) entered disabled state [ 286.461573][T12336] device ip6gretap0 entered promiscuous mode [ 286.495862][T12339] device ip6gretap0 left promiscuous mode [ 286.509517][T12339] : port 1(ip6gretap0) entered disabled state [ 286.764023][T12358] device veth1_macvtap left promiscuous mode [ 286.956950][T12354] device veth1_macvtap entered promiscuous mode [ 287.000299][T12354] device macsec0 entered promiscuous mode [ 287.084160][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.388893][T12381] device veth1_to_bond entered promiscuous mode [ 287.395254][T12377] FAULT_INJECTION: forcing a failure. [ 287.395254][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 287.408909][T12377] CPU: 1 PID: 12377 Comm: syz.3.3399 Not tainted syzkaller #0 [ 287.416394][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.426469][T12377] Call Trace: [ 287.429783][T12377] __dump_stack+0x21/0x24 [ 287.434131][T12377] dump_stack_lvl+0x1a7/0x208 [ 287.438828][T12377] ? show_regs_print_info+0x18/0x18 [ 287.444038][T12377] dump_stack+0x15/0x1c [ 287.448198][T12377] should_fail+0x3ab/0x500 [ 287.452644][T12377] ? __alloc_file+0x28/0x320 [ 287.457290][T12377] __should_failslab+0xa4/0xe0 [ 287.462072][T12377] should_failslab+0x9/0x20 [ 287.466580][T12377] kmem_cache_alloc+0x3d/0x2d0 [ 287.471352][T12377] __alloc_file+0x28/0x320 [ 287.475797][T12377] alloc_empty_file+0x97/0x180 [ 287.480578][T12377] path_openat+0xf4/0x3040 [ 287.485006][T12377] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 287.490814][T12377] ? __kasan_slab_alloc+0xc9/0xe0 [ 287.495850][T12377] ? do_filp_open+0x400/0x400 [ 287.500545][T12377] do_filp_open+0x1df/0x400 [ 287.505061][T12377] ? vfs_tmpfile+0x2c0/0x2c0 [ 287.509671][T12377] ? get_unused_fd_flags+0x92/0xa0 [ 287.514785][T12377] do_sys_openat2+0x19f/0x750 [ 287.519492][T12377] ? __kasan_check_write+0x14/0x20 [ 287.524605][T12377] ? fput_many+0x15a/0x1a0 [ 287.529023][T12377] ? do_sys_open+0xe0/0xe0 [ 287.533446][T12377] ? fput+0x1a/0x20 [ 287.537259][T12377] ? ksys_write+0x1fa/0x260 [ 287.541780][T12377] ? __ia32_sys_read+0x90/0x90 [ 287.546546][T12377] __x64_sys_openat+0x136/0x160 [ 287.551410][T12377] do_syscall_64+0x31/0x40 [ 287.555828][T12377] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.561720][T12377] RIP: 0033:0x7f47e7d74159 [ 287.566140][T12377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.585753][T12377] RSP: 002b:00007f47e67cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.594176][T12377] RAX: ffffffffffffffda RBX: 00007f47e7ffbfa0 RCX: 00007f47e7d74159 [ 287.602148][T12377] RDX: 0000000000000201 RSI: 0000200000003000 RDI: 0000000000000003 [ 287.610121][T12377] RBP: 00007f47e67cd090 R08: 0000000000000000 R09: 0000000000000000 [ 287.618107][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.626090][T12377] R13: 00007f47e7ffc038 R14: 00007f47e7ffbfa0 R15: 00007ffea32d58b8 [ 287.699221][T12390] FAULT_INJECTION: forcing a failure. [ 287.699221][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 287.712238][T12390] CPU: 0 PID: 12390 Comm: syz.3.3405 Not tainted syzkaller #0 [ 287.719712][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.729814][T12390] Call Trace: [ 287.733141][T12390] __dump_stack+0x21/0x24 [ 287.737507][T12390] dump_stack_lvl+0x1a7/0x208 [ 287.742337][T12390] ? thaw_kernel_threads+0x220/0x220 [ 287.747634][T12390] ? show_regs_print_info+0x18/0x18 [ 287.752847][T12390] dump_stack+0x15/0x1c [ 287.757028][T12390] should_fail+0x3ab/0x500 [ 287.761455][T12390] ? proc_alloc_inode+0x1d/0xb0 [ 287.766315][T12390] __should_failslab+0xa4/0xe0 [ 287.771102][T12390] should_failslab+0x9/0x20 [ 287.775610][T12390] kmem_cache_alloc+0x3d/0x2d0 [ 287.780388][T12390] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 287.786728][T12390] proc_alloc_inode+0x1d/0xb0 [ 287.791414][T12390] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 287.797747][T12390] new_inode_pseudo+0x62/0x210 [ 287.802521][T12390] new_inode+0x28/0x1e0 [ 287.806699][T12390] proc_pid_make_inode+0x24/0x1c0 [ 287.811739][T12390] proc_pident_instantiate+0x69/0x2b0 [ 287.817226][T12390] proc_pident_lookup+0x1d5/0x280 [ 287.822262][T12390] proc_tid_base_lookup+0x2b/0x30 [ 287.827304][T12390] __lookup_slow+0x2b8/0x410 [ 287.831994][T12390] ? lookup_one_len+0x2d0/0x2d0 [ 287.836887][T12390] ? __kasan_check_write+0x14/0x20 [ 287.842092][T12390] lookup_slow+0x57/0x70 [ 287.846342][T12390] walk_component+0x326/0x460 [ 287.851025][T12390] ? inode_permission+0xf1/0x520 [ 287.855968][T12390] link_path_walk+0x5d8/0xbd0 [ 287.860655][T12390] ? handle_lookup_down+0x130/0x130 [ 287.865863][T12390] path_openat+0x290/0x3040 [ 287.870464][T12390] ? __kasan_slab_alloc+0xc9/0xe0 [ 287.875516][T12390] ? getname_flags+0xba/0x510 [ 287.880231][T12390] ? getname+0x19/0x20 [ 287.884304][T12390] ? do_sys_openat2+0xde/0x750 [ 287.889078][T12390] ? do_filp_open+0x400/0x400 [ 287.893761][T12390] do_filp_open+0x1df/0x400 [ 287.898286][T12390] ? vfs_tmpfile+0x2c0/0x2c0 [ 287.902904][T12390] ? noop_direct_IO+0x20/0x20 [ 287.907589][T12390] ? get_unused_fd_flags+0x92/0xa0 [ 287.912708][T12390] do_sys_openat2+0x19f/0x750 [ 287.917395][T12390] ? do_sys_open+0xe0/0xe0 [ 287.921814][T12390] ? notify_die+0x17c/0x1d0 [ 287.926327][T12390] ? fput+0x1a/0x20 [ 287.930144][T12390] ? debug_smp_processor_id+0x17/0x20 [ 287.935518][T12390] __x64_sys_openat+0x136/0x160 [ 287.940371][T12390] do_syscall_64+0x31/0x40 [ 287.944790][T12390] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.950714][T12390] RIP: 0033:0x7f47e7d3498e [ 287.955147][T12390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.974760][T12390] RSP: 002b:00007f47e67ccec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.983180][T12390] RAX: ffffffffffffffda RBX: 00007f47e67cd6c0 RCX: 00007f47e7d3498e [ 287.991165][T12390] RDX: 0000000000000002 RSI: 00007f47e67ccf90 RDI: ffffffffffffff9c [ 287.999146][T12390] RBP: 00007f47e67cd090 R08: 0000000000000000 R09: 0000000000000000 [ 288.007124][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.015105][T12390] R13: 00007f47e7ffc038 R14: 00007f47e7ffbfa0 R15: 00007ffea32d58b8 [ 288.366489][T12422] device syzkaller0 entered promiscuous mode [ 289.568298][T12492] device syzkaller0 entered promiscuous mode [ 290.118673][T12509] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 290.527878][T12528] device syzkaller0 entered promiscuous mode [ 290.577044][T12536] device syzkaller0 entered promiscuous mode [ 291.248254][T12575] device syzkaller0 entered promiscuous mode [ 292.358493][T12618] device syzkaller0 entered promiscuous mode [ 292.496303][T12628] device syzkaller0 entered promiscuous mode [ 292.840922][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.848162][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.939949][T12634] device bridge0 entered promiscuous mode [ 292.953853][T12652] ------------[ cut here ]------------ [ 292.988327][T12652] trace type BPF program uses run-time allocation [ 293.016661][T12652] WARNING: CPU: 1 PID: 12652 at kernel/bpf/verifier.c:10536 check_map_prog_compatibility+0x5d8/0x740 [ 293.032195][T12653] batadv_slave_0: mtu greater than device maximum [ 293.073610][T12652] Modules linked in: [ 293.090794][T12652] CPU: 1 PID: 12652 Comm: syz.3.3491 Not tainted syzkaller #0 [ 293.125126][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.163605][T12652] RIP: 0010:check_map_prog_compatibility+0x5d8/0x740 [ 293.187782][T12652] Code: 85 e9 14 fe ff ff e8 a7 d8 ef ff 31 c0 e9 15 fe ff ff e8 9b d8 ef ff c6 05 f5 bc 4b 05 01 48 c7 c7 80 dd 25 85 e8 98 aa 04 03 <0f> 0b e9 7d fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fa ff [ 293.291559][T12652] RSP: 0018:ffffc90000cf7430 EFLAGS: 00010246 [ 293.315132][T12652] RAX: 279461287a486a00 RBX: 0000000000000001 RCX: 0000000000080000 [ 293.350238][T12652] RDX: ffffc90001a9d000 RSI: 0000000000001d7d RDI: 0000000000001d7e [ 293.367791][T12652] RBP: ffffc90000cf7470 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 293.383676][T12652] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: ffff888133c78000 [ 293.408738][T12652] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888127757800 [ 293.425499][T12652] FS: 00007f47e67cd6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 293.437902][T12672] device syzkaller0 entered promiscuous mode [ 293.444749][T12652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.460049][T12652] CR2: 00007f1b3af75840 CR3: 00000001281c0000 CR4: 00000000003506a0 [ 293.482756][T12652] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 293.507977][T12652] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 293.524918][T12652] Call Trace: [ 293.530214][T12652] resolve_pseudo_ldimm64+0x557/0x10b0 [ 293.544473][T12652] ? bpf_check+0xdce0/0xdce0 [ 293.552406][T12652] ? kvmalloc_node+0x88/0x130 [ 293.575438][T12652] bpf_check+0x91f9/0xdce0 [ 293.586797][T12652] ? get_page_from_freelist+0x225f/0x23f0 [ 293.601124][T12652] ? __alloc_pages_nodemask+0x29a/0x640 [ 293.616880][T12652] ? bpf_get_btf_vmlinux+0x60/0x60 [ 293.638550][T12652] ? 0xffffffffa0018000 [ 293.648174][T12652] ? is_bpf_text_address+0x177/0x190 [ 293.654015][T12652] ? selinux_bpf_prog_alloc+0x51/0x140 [ 293.659549][T12652] ? __kernel_text_address+0xa0/0x100 [ 293.690132][T12652] ? unwind_get_return_address+0x4d/0x90 [ 293.723511][T12652] ? stack_trace_save+0xf0/0xf0 [ 293.728431][T12652] ? arch_stack_walk+0xee/0x140 [ 293.742587][T12652] ? stack_trace_save+0xa6/0xf0 [ 293.747720][T12652] ? stack_trace_snprint+0xe0/0xe0 [ 293.753309][T12652] ? selinux_bpf_prog_alloc+0x51/0x140 [ 293.758905][T12652] ? selinux_bpf_prog_alloc+0x51/0x140 [ 293.764764][T12652] ? __kasan_kmalloc+0xe6/0x100 [ 293.769930][T12652] ? __kasan_kmalloc+0xd4/0x100 [ 293.775239][T12652] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 293.790344][T12652] ? selinux_bpf_prog_alloc+0x51/0x140 [ 293.796002][T12652] ? security_bpf_prog_alloc+0x62/0x90 [ 293.804943][T12652] ? bpf_prog_load+0x9fa/0x14e0 [ 293.814225][T12652] ? __se_sys_bpf+0x49a/0x740 [ 293.823788][T12652] ? __x64_sys_bpf+0x7b/0x90 [ 293.831718][T12652] ? do_syscall_64+0x31/0x40 [ 293.839238][T12652] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 293.852519][T12652] ? memset+0x35/0x40 [ 293.924903][T12652] ? bpf_obj_name_cpy+0x193/0x1e0 [ 293.971558][T12652] bpf_prog_load+0x1004/0x14e0 [ 293.976403][T12652] ? map_freeze+0x330/0x330 [ 293.990139][T12652] ? selinux_bpf+0xc7/0xf0 [ 293.994964][T12652] ? security_bpf+0x82/0xa0 [ 293.999490][T12652] __se_sys_bpf+0x49a/0x740 [ 294.004918][T12652] ? __x64_sys_bpf+0x90/0x90 [ 294.026932][T12652] ? ____fput+0x15/0x20 [ 294.050852][T12652] ? __kasan_check_read+0x11/0x20 [ 294.055932][T12652] __x64_sys_bpf+0x7b/0x90 [ 294.068658][T12652] do_syscall_64+0x31/0x40 [ 294.078354][T12652] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 294.084494][T12652] RIP: 0033:0x7f47e7d74159 [ 294.091446][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.098490][T12694] ÿÿÿÿÿÿ: renamed from vlan1 [ 294.127935][T12652] RSP: 002b:00007f47e67cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.162123][T12652] RAX: ffffffffffffffda RBX: 00007f47e7ffbfa0 RCX: 00007f47e7d74159 [ 294.171381][T12698] device aaaaaaaaaaaaaaa entered promiscuous mode [ 294.177961][T12652] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 294.188099][T12652] RBP: 00007f47e7e0b06b R08: 0000000000000000 R09: 0000000000000000 [ 294.200234][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.208244][T12652] R13: 00007f47e7ffc038 R14: 00007f47e7ffbfa0 R15: 00007ffea32d58b8 [ 294.245755][T12652] ---[ end trace ed9bc2175d8c106b ]--- [ 294.295063][T12708] device syzkaller0 entered promiscuous mode [ 294.380916][T12712] device syzkaller0 entered promiscuous mode [ 294.448423][T12715] device syzkaller0 entered promiscuous mode [ 294.474110][T12708] device wg2 entered promiscuous mode [ 294.525155][T12708] syzkaller0: tun_net_xmit 1280 [ 295.335429][T12806] FAULT_INJECTION: forcing a failure. [ 295.335429][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.440281][T12806] CPU: 1 PID: 12806 Comm: syz.3.3529 Tainted: G W syzkaller #0 [ 295.449178][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.459248][T12806] Call Trace: [ 295.462554][T12806] __dump_stack+0x21/0x24 [ 295.466902][T12806] dump_stack_lvl+0x1a7/0x208 [ 295.471610][T12806] ? thaw_kernel_threads+0x220/0x220 [ 295.476917][T12806] ? show_regs_print_info+0x18/0x18 [ 295.482134][T12806] ? proc_fail_nth_read+0x220/0x220 [ 295.487350][T12806] dump_stack+0x15/0x1c [ 295.491524][T12806] should_fail+0x3ab/0x500 [ 295.495967][T12806] should_fail_usercopy+0x1a/0x20 [ 295.501010][T12806] _copy_from_user+0x20/0xd0 [ 295.505648][T12806] perf_copy_attr+0x14c/0x730 [ 295.506710][T12815] device syzkaller0 entered promiscuous mode [ 295.510355][T12806] __se_sys_perf_event_open+0x100/0x1b40 [ 295.510371][T12806] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 295.510413][T12806] __x64_sys_perf_event_open+0xbf/0xd0 [ 295.533113][T12806] do_syscall_64+0x31/0x40 [ 295.537548][T12806] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 295.543448][T12806] RIP: 0033:0x7f47e7d74159 [ 295.547881][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.567499][T12806] RSP: 002b:00007f47e67cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 295.575926][T12806] RAX: ffffffffffffffda RBX: 00007f47e7ffbfa0 RCX: 00007f47e7d74159 [ 295.583908][T12806] RDX: ffefffffffffffff RSI: 0000000000000000 RDI: 0000200000000700 [ 295.591884][T12806] RBP: 00007f47e67cd090 R08: 0000000000000000 R09: 0000000000000000 [ 295.599859][T12806] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 295.607837][T12806] R13: 00007f47e7ffc038 R14: 00007f47e7ffbfa0 R15: 00007ffea32d58b8 [ 296.100573][T12836] FAULT_INJECTION: forcing a failure. [ 296.100573][T12836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.219576][T12836] CPU: 1 PID: 12836 Comm: syz.4.3539 Tainted: G W syzkaller #0 [ 296.228674][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.238753][T12836] Call Trace: [ 296.242065][T12836] __dump_stack+0x21/0x24 [ 296.246410][T12836] dump_stack_lvl+0x1a7/0x208 [ 296.251192][T12836] ? thaw_kernel_threads+0x220/0x220 [ 296.256489][T12836] ? vsnprintf+0x189d/0x1990 [ 296.261095][T12836] ? show_regs_print_info+0x18/0x18 [ 296.266315][T12836] dump_stack+0x15/0x1c [ 296.270500][T12836] should_fail+0x3ab/0x500 [ 296.274938][T12836] should_fail_usercopy+0x1a/0x20 [ 296.279987][T12836] _copy_to_user+0x20/0x90 [ 296.284426][T12836] simple_read_from_buffer+0xe9/0x160 [ 296.289815][T12836] proc_fail_nth_read+0x1a6/0x220 [ 296.294874][T12836] ? proc_fault_inject_write+0x310/0x310 [ 296.300521][T12836] ? rw_verify_area+0x1c0/0x360 [ 296.305393][T12836] ? proc_fault_inject_write+0x310/0x310 [ 296.311049][T12836] vfs_read+0x209/0xa50 [ 296.315227][T12836] ? kernel_read+0x70/0x70 [ 296.319662][T12836] ? __kasan_check_write+0x14/0x20 [ 296.324799][T12836] ? mutex_lock+0x92/0xf0 [ 296.329147][T12836] ? mutex_trylock+0xb0/0xb0 [ 296.333830][T12836] ? __fget_files+0x2e1/0x340 [ 296.338515][T12836] ? __fdget_pos+0x2d2/0x380 [ 296.343105][T12836] ? ksys_read+0x70/0x260 [ 296.347438][T12836] ksys_read+0x14a/0x260 [ 296.351687][T12836] ? vfs_write+0xd70/0xd70 [ 296.356111][T12836] ? debug_smp_processor_id+0x17/0x20 [ 296.361494][T12836] __x64_sys_read+0x7b/0x90 [ 296.366002][T12836] do_syscall_64+0x31/0x40 [ 296.370425][T12836] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 296.376421][T12836] RIP: 0033:0x7f279e35998e [ 296.380854][T12836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.400496][T12836] RSP: 002b:00007f279cdf1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.408953][T12836] RAX: ffffffffffffffda RBX: 00007f279cdf26c0 RCX: 00007f279e35998e [ 296.416938][T12836] RDX: 000000000000000f RSI: 00007f279cdf20a0 RDI: 0000000000000005 [ 296.424921][T12836] RBP: 00007f279cdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 296.432910][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.440893][T12836] R13: 00007f279e621038 R14: 00007f279e620fa0 R15: 00007ffd00c72858 [ 297.459811][T12899] device syzkaller0 entered promiscuous mode [ 298.247595][T12940] device syzkaller0 entered promiscuous mode [ 298.350130][T12949] device syzkaller0 entered promiscuous mode [ 298.410567][T12952] FAULT_INJECTION: forcing a failure. [ 298.410567][T12952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.423856][T12952] CPU: 0 PID: 12952 Comm: syz.2.3574 Tainted: G W syzkaller #0 [ 298.432730][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.443154][T12952] Call Trace: [ 298.446477][T12952] __dump_stack+0x21/0x24 [ 298.450864][T12952] dump_stack_lvl+0x1a7/0x208 [ 298.455543][T12952] ? thaw_kernel_threads+0x220/0x220 [ 298.460831][T12952] ? show_regs_print_info+0x18/0x18 [ 298.466125][T12952] dump_stack+0x15/0x1c [ 298.470279][T12952] should_fail+0x3ab/0x500 [ 298.474695][T12952] should_fail_usercopy+0x1a/0x20 [ 298.479723][T12952] strncpy_from_user+0x24/0x2d0 [ 298.484574][T12952] ? kmem_cache_alloc+0x15a/0x2d0 [ 298.489614][T12952] ? getname_flags+0xba/0x510 [ 298.494301][T12952] getname_flags+0xf5/0x510 [ 298.498817][T12952] getname+0x19/0x20 [ 298.502750][T12952] do_sys_openat2+0xde/0x750 [ 298.507467][T12952] ? percpu_counter_add_batch+0x13c/0x160 [ 298.513219][T12952] ? blkcg_maybe_throttle_current+0x1e0/0x9e0 [ 298.519290][T12952] ? do_sys_open+0xe0/0xe0 [ 298.523726][T12952] ? __kasan_check_write+0x14/0x20 [ 298.528847][T12952] ? switch_fpu_return+0x19c/0x330 [ 298.533965][T12952] ? fpu__clear_all+0x20/0x20 [ 298.538663][T12952] ? ____fput+0x15/0x20 [ 298.542818][T12952] ? task_work_run+0x170/0x190 [ 298.547643][T12952] __x64_sys_openat+0x136/0x160 [ 298.552510][T12952] do_syscall_64+0x31/0x40 [ 298.556931][T12952] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 298.562823][T12952] RIP: 0033:0x7f1b3aee898e [ 298.567242][T12952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.586852][T12952] RSP: 002b:00007f1b39980ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.595268][T12952] RAX: ffffffffffffffda RBX: 00007f1b399816c0 RCX: 00007f1b3aee898e [ 298.603255][T12952] RDX: 0000000000000000 RSI: 00007f1b39980f90 RDI: ffffffffffffff9c [ 298.611225][T12952] RBP: 00007f1b39981090 R08: 0000000000000000 R09: 0000000000000000 [ 298.619196][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.627167][T12952] R13: 00007f1b3b1b0038 R14: 00007f1b3b1affa0 R15: 00007ffd8ad20528 [ 298.889893][T12963] device syzkaller0 entered promiscuous mode [ 299.851464][T12976] device veth0_vlan left promiscuous mode [ 299.865095][T12976] device veth0_vlan entered promiscuous mode [ 299.930301][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.979219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.059735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 300.191210][T12990] FAULT_INJECTION: forcing a failure. [ 300.191210][T12990] name failslab, interval 1, probability 0, space 0, times 0 [ 300.233248][T12990] CPU: 1 PID: 12990 Comm: syz.0.3589 Tainted: G W syzkaller #0 [ 300.242138][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.252254][T12990] Call Trace: [ 300.255581][T12990] __dump_stack+0x21/0x24 [ 300.259931][T12990] dump_stack_lvl+0x1a7/0x208 [ 300.264648][T12990] ? show_regs_print_info+0x18/0x18 [ 300.269867][T12990] dump_stack+0x15/0x1c [ 300.274041][T12990] should_fail+0x3ab/0x500 [ 300.278482][T12990] ? __alloc_file+0x28/0x320 [ 300.283108][T12990] __should_failslab+0xa4/0xe0 [ 300.287899][T12990] should_failslab+0x9/0x20 [ 300.292425][T12990] kmem_cache_alloc+0x3d/0x2d0 [ 300.297265][T12990] __alloc_file+0x28/0x320 [ 300.301700][T12990] alloc_empty_file+0x97/0x180 [ 300.306487][T12990] path_openat+0xf4/0x3040 [ 300.310924][T12990] ? __kasan_slab_alloc+0xc9/0xe0 [ 300.315969][T12990] ? __kasan_slab_alloc+0xb7/0xe0 [ 300.321020][T12990] ? kmem_cache_alloc+0x15a/0x2d0 [ 300.326166][T12990] ? getname_flags+0xba/0x510 [ 300.330861][T12990] ? getname+0x19/0x20 [ 300.334951][T12990] ? do_sys_openat2+0xde/0x750 [ 300.339736][T12990] ? __x64_sys_openat+0x136/0x160 [ 300.344775][T12990] ? do_syscall_64+0x31/0x40 [ 300.349390][T12990] ? do_filp_open+0x400/0x400 [ 300.354095][T12990] do_filp_open+0x1df/0x400 [ 300.358628][T12990] ? vfs_tmpfile+0x2c0/0x2c0 [ 300.363249][T12990] ? get_unused_fd_flags+0x92/0xa0 [ 300.368383][T12990] do_sys_openat2+0x19f/0x750 [ 300.373096][T12990] ? percpu_counter_add_batch+0x13c/0x160 [ 300.378836][T12990] ? blkcg_maybe_throttle_current+0x1e0/0x9e0 [ 300.384928][T12990] ? do_sys_open+0xe0/0xe0 [ 300.389363][T12990] ? __blkcg_punt_bio_submit+0x170/0x170 [ 300.395036][T12990] ? ____fput+0x15/0x20 [ 300.399216][T12990] __x64_sys_openat+0x136/0x160 [ 300.404086][T12990] do_syscall_64+0x31/0x40 [ 300.408524][T12990] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 300.414463][T12990] RIP: 0033:0x7fe4c1ef598e [ 300.418910][T12990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.438546][T12990] RSP: 002b:00007fe4c098dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.446978][T12990] RAX: ffffffffffffffda RBX: 00007fe4c098e6c0 RCX: 00007fe4c1ef598e [ 300.454962][T12990] RDX: 0000000000000000 RSI: 00007fe4c098df90 RDI: ffffffffffffff9c [ 300.462942][T12990] RBP: 00007fe4c098e090 R08: 0000000000000000 R09: 0000000000000000 [ 300.470929][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.478916][T12990] R13: 00007fe4c21bd038 R14: 00007fe4c21bcfa0 R15: 00007ffc0955fe08 [ 300.508194][ T6435] ------------[ cut here ]------------ [ 300.513805][ T6435] kernel BUG at kernel/bpf/arraymap.c:993! [ 300.519763][ T6435] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 300.525866][ T6435] CPU: 1 PID: 6435 Comm: kworker/1:102 Tainted: G W syzkaller #0 [ 300.534893][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.545110][ T6435] Workqueue: events prog_array_map_clear_deferred [ 300.551553][ T6435] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 300.557807][ T6435] Code: 59 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 48 59 e9 ff 0f 0b e9 78 f9 ff ff e8 3c 59 e9 ff 0f 0b e8 35 59 e9 ff <0f> 0b e8 2e 59 e9 ff 0f 0b e8 27 59 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 300.577512][ T6435] RSP: 0018:ffffc900092c7c20 EFLAGS: 00010293 [ 300.583592][ T6435] RAX: ffffffff817b5b7b RBX: ffff888117d40450 RCX: ffff88810bc32800 [ 300.591577][ T6435] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 300.599558][ T6435] RBP: ffffc900092c7c98 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 300.607543][ T6435] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 300.615519][ T6435] R13: ffff888125a38880 R14: 0000000000000001 R15: ffffffffa002e400 [ 300.623501][ T6435] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 300.632437][ T6435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.639029][ T6435] CR2: 00007f622f7d7ff8 CR3: 000000000640f000 CR4: 00000000003506a0 [ 300.647018][ T6435] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 300.654996][ T6435] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 300.662987][ T6435] Call Trace: [ 300.666287][ T6435] ? bpf_prog_47cf57ee41afe8de+0xb/0xf0 [ 300.671847][ T6435] fd_array_map_delete_elem+0x142/0x240 [ 300.677413][ T6435] prog_array_map_clear_deferred+0x9e/0x140 [ 300.683314][ T6435] process_one_work+0x6fd/0xbc0 [ 300.688172][ T6435] worker_thread+0xa8e/0x13c0 [ 300.692870][ T6435] kthread+0x324/0x3b0 [ 300.696943][ T6435] ? worker_clr_flags+0x190/0x190 [ 300.701975][ T6435] ? kthread_blkcg+0xd0/0xd0 [ 300.706575][ T6435] ret_from_fork+0x1f/0x30 [ 300.711000][ T6435] Modules linked in: [ 300.745134][ T6435] ---[ end trace ed9bc2175d8c106c ]--- [ 300.775229][ T6435] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 300.806927][ T6435] Code: 59 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 48 59 e9 ff 0f 0b e9 78 f9 ff ff e8 3c 59 e9 ff 0f 0b e8 35 59 e9 ff <0f> 0b e8 2e 59 e9 ff 0f 0b e8 27 59 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 300.842601][ T6435] RSP: 0018:ffffc900092c7c20 EFLAGS: 00010293 [ 300.848727][ T6435] RAX: ffffffff817b5b7b RBX: ffff888117d40450 RCX: ffff88810bc32800 [ 300.856782][ T6435] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 300.864948][ T6435] RBP: ffffc900092c7c98 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 300.872970][ T6435] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 300.880983][ T6435] R13: ffff888125a38880 R14: 0000000000000001 R15: ffffffffa002e400 [ 300.889003][ T6435] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 300.897989][ T6435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.904618][ T6435] CR2: 00007f6230ff12f8 CR3: 000000011b89a000 CR4: 00000000003506a0 [ 300.912664][ T6435] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 300.920777][ T6435] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 300.928786][ T6435] Kernel panic - not syncing: Fatal exception [ 300.935272][ T6435] Kernel Offset: disabled [ 300.939610][ T6435] Rebooting in 86400 seconds..