last executing test programs: 3.112448202s ago: executing program 0 (id=8733): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.203513701s ago: executing program 4 (id=8743): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x4, 0xa3ef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x4, 0xa3ef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) unlink(&(0x7f0000000000)='./file0\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) (async) 1.707767346s ago: executing program 0 (id=8744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa0000000000007910be74442337f2592d000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0xfffffffd, [{0x200, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000040)=""/156, 0x4e, 0x9c, 0x1}, 0x28) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0x2a8, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x8820, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0xc8, 0x0, 0x6, 0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000fb0000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r9, &(0x7f0000000400), 0x0}, 0x20) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) write$cgroup_subtree(r10, &(0x7f0000000000), 0xfdef) r11 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x4, 0x3, 0xcf, 0x0, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xc, 0x6}, 0x50, 0x6f, 0x433ee885, 0x2, 0x100000001, 0xffffd7c0, 0xffbe, 0x0, 0x96, 0x0, 0x2}, r11, 0xa, 0xffffffffffffffff, 0x8) 868.231543ms ago: executing program 1 (id=8749): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x48, 0x6, 0x0, 0x1b, 0x0, 0x7, 0x8000c, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x100000, 0x1, 0xe3b, 0x5, 0x3, 0x5, 0x501, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xd, 0x7, 0x3, 0x6, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0x6}, 0x208, 0x400, 0x80000000, 0x9, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0, 0x8}, r1, 0x5, r0, 0x8) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0xd3, 0x6, 0xa, 0x0, 0x200, 0x80994, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0xb, @perf_config_ext={0x3, 0x4}, 0x1040, 0x7, 0x1, 0x3, 0x8001, 0x6, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xd, r0, 0x1) (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0xc, 0x3, 0x2, 0x40, 0x4b4a}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x9, 0x4, 0x6, 0x1}, @alu={0x4, 0x1, 0x2, 0x0, 0x8, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x6, 0x2, 0x2, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000340)='syzkaller\x00', 0xff, 0x0, &(0x7f0000000380), 0x40f00, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0xe}, {0x0, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x14d1dd61) openat$cgroup(r1, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@union={0x10, 0x6, 0x0, 0x5, 0x0, 0x8, [{0x0, 0x2, 0xe}, {0x5, 0x5, 0x80000001}, {0x10, 0x1, 0xc9c8}, {0xf, 0x2, 0x4}, {0xb, 0x5, 0xfffffff9}, {0x0, 0x2, 0xa}]}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x3, 0x8}, @var={0xb, 0x0, 0x0, 0xe, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x2}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x28, 0x3}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000940)=""/165, 0xd5, 0xa5, 0x1, 0xfffffffd}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x10, 0x2, 0x8, 0x0, r0, 0x81, '\x00', r5, r7, 0x5, 0x5, 0x3, 0x3}, 0x50) (async, rerun: 64) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, r4}, 0x18) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1e, 0x23, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0x7f2e577e07d430d5, 0x5, 0x0, 0x9}, @generic={0x4, 0x5, 0x1, 0x2f30, 0x7fff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0xb, 0x3, 0x8, 0x30, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x95, 0xa7, &(0x7f0000000cc0)=""/167, 0x41100, 0x2, '\x00', r5, @fallback=0x2d, r7, 0x8, &(0x7f0000000d80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x5, 0xc, 0x0, 0x3}, 0x10, r6, r4, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) socketpair(0x6, 0x6, 0x1000, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000001080)={&(0x7f0000000f00)=@alg, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/42, 0x2a}], 0x1, &(0x7f0000001000)=""/106, 0x6a}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r10, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x11, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x51ac2a24, '\x00', r12, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000001480), 0x4) r13 = syz_clone(0x30000400, &(0x7f00000014c0)="e89a796042d723a0c8c76bfd2b9f0ce74598f995341f982abc09fac10858bb5e68bcab261e7d2cb0f5f16865ac34db6f5433b9c2a625da1f3a450cd78c64fffb7b86ef2f94f54f06d4b5b058ded344a9a86bf0f1ac12b3f7010231f00284abfb5811f179f2c7b540014465491033c166999b88ca", 0x74, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)="341164d4f4bdf18ad1cdf4e25f3430f6becd041d65512e4ee2bee91c6b6e02d737fe693e854fbfdeae7da749a2c8d2fc8a7d4ac770a171910a122b521870e37f4b7c98540e21554ca9e1b4d1f24160650971a8c3a73b15428026bcc2e24669c8182ff7b6520b8145c61ccc425f72e061106d204e56281fd3638bd67b1223e05ae8d718146b48b24a598c362f7941ad44d95d4c3d48cdb07d91d80fe7e5a84e27506faaa8f9ee807c29650da4") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@union={0xb, 0x1, 0x0, 0x5, 0x1, 0x5, [{0xb, 0x4, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f0000001700)=""/238, 0x4d, 0xee, 0x1, 0x7}, 0x28) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001840)={'gretap0\x00', 0x10}) (async, rerun: 32) r14 = perf_event_open(&(0x7f00000018c0)={0x2, 0x80, 0x4, 0xf9, 0x7, 0x0, 0x0, 0x9, 0x80, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000001880), 0x1}, 0x8480, 0x5f, 0x10000, 0x6, 0x8, 0x1, 0xfa, 0x0, 0x8, 0x0, 0x945}, r13, 0x0, r0, 0x1) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000001940)='./cgroup.net/syz1\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup.cpu/syz1\x00', 0x1ff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x17828e2e, 0xfffffff1, 0x0, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x2}, 0x50) 867.801113ms ago: executing program 1 (id=8750): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES16, @ANYBLOB="000000ffffffffffffffffd856ea36b8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 773.295976ms ago: executing program 1 (id=8753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000090000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x69264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, @perf_config_ext={0x2, 0x10001}, 0x2018, 0x0, 0xffffffff, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 767.511636ms ago: executing program 4 (id=8755): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000099883c6c7b000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a030000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000fb53484d4d2e2030a912"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x10000) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x4280000, 0x0, 0x0, 0x10000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) close(0x4) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/218, 0xda}], 0x4, &(0x7f0000000ac0)=""/18, 0x12}, 0x12060) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) 766.973286ms ago: executing program 0 (id=8756): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x80, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x100, 0x0, 0x1, 0x0, 0x4000000000000, 0x8, 0x0, 0x0, 0xa, 0x0, 0x20000000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x80, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x100, 0x0, 0x1, 0x0, 0x4000000000000, 0x8, 0x0, 0x0, 0xa, 0x0, 0x20000000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)) 735.732387ms ago: executing program 4 (id=8758): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000000000000711836000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x4, 0xa, 0x44, 0x0, 0xd, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x5, 0x7e, 0x9b98, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x8000, '\x00', r2, r3, 0x5, 0x5, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000002651e43800000d03001b000000000000000002000000000000000000000009030000000000"], 0x0, 0x3e}, 0x28) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000000000000711836000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x4, 0xa, 0x44, 0x0, 0xd, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x5, 0x7e, 0x9b98, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x8000, '\x00', r2, r3, 0x5, 0x5, 0x5}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000002651e43800000d03001b000000000000000002000000000000000000000009030000000000"], 0x0, 0x3e}, 0x28) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x14) (async) 661.343699ms ago: executing program 2 (id=8762): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) close(0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, r3}, 0xc) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) 491.764875ms ago: executing program 4 (id=8763): bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x19, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000050000000000000009000000631127000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000130095000000000000008500000005000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) 446.440186ms ago: executing program 0 (id=8764): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xb8, 0x7, 0x1, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfc, 0x3}, 0x0, 0x80000000, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x8b}, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c30, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffff}, 0x1088, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) unlink(&(0x7f0000000040)='./file0\x00') (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003da21a63884c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 445.384926ms ago: executing program 2 (id=8765): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000f5c7812502fc6f0900000073110300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 444.382186ms ago: executing program 2 (id=8766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(0xffffffffffffffff) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000007900480000000000180000000000000000000080000000009500000000000000d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x11, 0x0, r4, 0x7, '\x00', 0x0, r3, 0x0, 0x3, 0x3}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x25, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) (async) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r13) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r5}, 0x20) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x6, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0x23, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @alu={0x0, 0x0, 0x0, 0xd, 0x1, 0x1, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @generic={0x4, 0x9, 0xa, 0x971, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1d, '\x00', r7, @fallback=0x29, r3, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r2, 0x0, &(0x7f00000009c0)=[r12, r4, r4, r13, r14, r15], &(0x7f0000000a00), 0x10, 0xfffffff8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@typedef={0xa, 0x0, 0x0, 0x8, 0x2}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f0000000140)=""/74, 0x43, 0x4a, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffa, '\x00', r7, r16, 0x0, 0x3, 0x2}, 0x50) 443.250166ms ago: executing program 1 (id=8768): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 341.43578ms ago: executing program 0 (id=8769): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfd4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r0, 0x22, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006000000040000000000000e0300000000000000000000000000000d04000000000000000000000500000000040000000000000e03000000000000000000000061"], 0x0, 0x56}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xb, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000740)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}], &(0x7f00000007c0)='GPL\x00', 0x11, 0xc2, &(0x7f0000000800)=""/194, 0x40f00, 0x40, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x10, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000980)=[r0, r1], &(0x7f00000009c0)=[{0x3, 0x1, 0xd, 0xa}, {0x5, 0x4, 0xf, 0x8}, {0x0, 0x2, 0x5, 0x3}, {0x2, 0x3, 0xa, 0xa}, {0x2, 0x5, 0x4, 0x9}], 0x10, 0x8000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x1, 0x334cf92d3121d928, 0x8, 0x3, 0x1, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8bbf}, @alu={0x7, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x8, 0x2, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f0000000700)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x452, r4, 0x0, &(0x7f0000000b00)=[r0, r0, r1, r0, r0], 0x0, 0x10, 0x2}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000007111a100000000008510000002000000850000002a00000095000000000000009500a50500000000423d05b3e4fcacc9d5914ce21c767a6526f02c5d4ec76fdc6583ee5cf6ea85655a249ef01962ade8f392d1d7aabfe66f7114d4ab18d2f73333fe16a6656c088909599a3bd7ea59acf2361d79a13706df06fa8c98a530d6b5c3d6ff00000000000000fd15dd38bba5040a8eb4e4e42bd2c6c7bec4a1bd35434858999ef1467aba67c50bb8d13379005dce142a5dc1f23223e41b590ecc3f4738e50fab09f103b6b46a46d093a60e7e9688c589438effecfa", @ANYBLOB="061107bed7c846365adae3fc8d209940d4e16e98fee5dbedf6cf6a0cfa8b07f5670908f858333e5f806695de188aa98def7944d835ecfc65c2790e6785cd20d483a2bf50651b9b2fe19786da7b9b4e95f8915ba3e466060c8514f2a4cb0918c095d3052f331f1252cd69c084fdd92370961b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 339.74128ms ago: executing program 3 (id=8770): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="625af16235b83bedde7c6cc4b6f1db1a9b6d6e2c32f107e2c81cb21cbef636b3f52da335b388a05a2cf1e7", 0x2b}, {&(0x7f00000000c0)="90cfa8c83bc0adc1bc04eb45d5c5001efad9aa7b700376104a9e600f0632b892ce09cd5f800565760c5639f36d9e0176eba68e780119a2c03c3fdcfe5ae1bbd99f42d0bed66d3d7fe14bea0b62be8a22d02b678c", 0x54}, {&(0x7f0000000140)="4b99f2ffa114d9a19ba0488e885a3a12f488a03348c360c3c4302ca052a17b42d0312d3cffbe1f12f7591678a540ff285a51e7a14e786a786df32620ff0a87e6b8445ba48773820f7cda85c908647536b443c92f432badcaf9014c4b4875e0ef2f09584330f56ead09b53461c35c", 0x6e}, {&(0x7f00000001c0)="27a141b19bd20dc716b655c46ed8f1109868e2dd3304393cf372f9c108d883b1369e350ced534b8fa8c1aeda341df2a239f8dab4c8ce033ef265dd92b200acf4175c43b1db24b9a247af218eaa19b0e68386b826af8a429d8e001e118adc3b646c03d5788ad2aa837b7ccee4c371e5a532c20943415c738ad35e2154c0c07c4e6eaab256c294bc16b21104e6086045f4fe46796fb384f2c6c557efd6a84a833dd2a54185a4166db5bcf55eaa8935ad28852c561a4280d52807c5c4b08fab0185d7629dbf01c954461448d5f6036c05c0e4608366c9dc29ca690a5c9ae9fa1aa2", 0xe0}], 0x4, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x6c, [@empty, @multicast1, @empty, @remote, @loopback, @loopback, @multicast2]}]}}}], 0xa8}, 0xc080) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x20, 0x1, 0xfffffff8, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000600), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r3, 0xffffffffffffffff, 0x6, 0x2000, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000640)={'veth1\x00', 0x1000}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f0000000900)={&(0x7f00000006c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)="f75845b395c2c6fe952f828369260b29f1898f5fcdcc62b267da7550b12de1cbba927d7a1ab14fe6e0c460396b90236fae5209b53aa08fbf426cf6f7482bc36596e73042704878453552d54f5f618d465bcbd27881d8470d91712a98b02eac94e3f81639b7f676c8cc1024d4b05fe3794a7b044e2f8136c2a0b9b8c6a277eac3ab905a59bcf46c18acb4a2c61cc2b364e8f771cb1587576e9589d06c484cf11e5b04989ce561afa78a623e450f1b5c3dc436686079ec4c", 0xb7}, {&(0x7f0000000800)="df30fc08e98459579ca688b00f3bd9775031edbf815d3c1583c7d2b1ab3f1a62e124b88e6f18509594de7d880262202bcfcb1eefeafe864580d9e8770a238c5dd456058dcb0f0da934ea2c", 0x4b}], 0x2, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}, 0x4000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x23, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x7, 0x0, 0x7, 0x1, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xb, 0x0, 0x6, 0x8}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0xb, 0x4, 0x7, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000b40)='syzkaller\x00', 0x101, 0x74, &(0x7f0000000b80)=""/116, 0x40f00, 0x44, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000c40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xd, 0x8, 0x40000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, r1, r3], 0x0, 0x10, 0x8000}, 0x94) (async) mkdir(&(0x7f0000000dc0)='./file0\x00', 0x8) socketpair(0x10, 0x80000, 0x8, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000e40)={r8, r6}, 0xc) r10 = perf_event_open$cgroup(&(0x7f0000000ec0)={0x1, 0x80, 0x8, 0x8, 0xb4, 0x5, 0x0, 0xe90, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000e80), 0x8}, 0x80906, 0xdd67, 0x8, 0x9, 0x4, 0x7f, 0x8, 0x0, 0x80000000, 0x0, 0x2a4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000f40)='veth1\x00') (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffff9a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001300)={&(0x7f0000000f80)="281d97feb9f7ab9a35c432fd37727c9ec58ac67570c492504d306564aebfb0199d5b0eef965e2b3fc98580796f741c498592de5a5b37ba830c08cb13fd612ad8bfb9e64de5f7c4046e59cad3", &(0x7f0000001000)=""/126, &(0x7f0000001080)="69596b1ffeda841cc067bf37c9f58d5ff2fe3e03f10a92ddfc6cd7276d6efcd2382373ff69357c1482c6e3fdb19154481f75c06896c6d3f71dc219acf7ae0d65f41e750afc04d7e226c08f6f421f57f247bb65b400b50d0beaa21fddee9bb0d40b3c1f00bc1ed46f7ecb25533f95ba1a95828733836ccc9e829ec4d7297afde896944e18df7604338aa0c9beaef8317965b524e0afa065ad31de2a6c8670f9b83d0e263d5db5ddb2ac283caad8cb4c173ae8039531efc6139e30a150225f7ef4495825", &(0x7f0000001180)="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", 0xc67, r11}, 0x38) close(r9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={r3, 0x58, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r9, &(0x7f0000001800)={&(0x7f0000001340)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001380)="51b047139866765e056a07493c31a72ebe840e7e5d56d75a8e489389f2701475ae92d139951ef26c", 0x28}, {&(0x7f00000013c0)="8e3932372d47f74f88ff51f6a87a6685e7d6dfbafd2d438e8be196a862739cfd066924da2ff60b9c447ead1d3df64d91d94082143ab22f8ba359214b0e5a95ad1acdb0c667ecc0bb7c93219dc5115b886f832bf223567451547bc4aa3f3a0fd96c1b76d1f5f09f215061f732721d0c228d9b46fd7addfea0debad2ae100fab5e87fd4e2bc3b5c3b9a8ac3ecf6cb7499407a6f4f1", 0x94}, {&(0x7f0000001480)="5d194ee2aef791c82557040db282bb3d1c7fe24bb5ecfa5f4d863420dfe3b241ea2d0bc22a2873be15e963eb99f8c044f162618ca8ee7910304d2071d7f5dd827173dfab0718c4a5b47bab28851290c6d7a2abf5a176a56647fb631ad1d82dd8d06e896a24c94c5d8e9099a04b3ca4876d587509bbbf2deba1edd2f4ee0f5b679a7ca27175a52c06", 0x88}, {&(0x7f0000001540)="7ab1f1d6cbbfab7cadbdb80e851daaa190174b40123e1a5c1f5518eb887bfd7f5c66d34f6946288b02e67637cad105cddd3756f73cf617e5dca9060cf5405e97a45bc8dabae879000bff22c9410fc9ca36e915af376c3c1a56ce0a438eb5dfcddedb6aebd45f121c63382448207c0a7783132cefc214bcee80086e8f71cd0aecbe60c303801586", 0x87}], 0x4, &(0x7f0000001700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xdf, [@rand_addr=0x6, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @empty}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6d}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0xd8}, 0x10841) (async) r13 = syz_clone(0x88a14000, &(0x7f0000001900)="52c8b467f8e09f03bb1adfaa5d8bfa0827f394e23be3c324848892520f0a7678f592a8bc7020cfd59c4be0c38d9f533379dc3b30a893dc24164433ef7f028aaef04920772e9e72b3ef4cb18c6b69a2e15c4d68a78f935f416e7d3d500852fd956dd98f19d41f0db653d658c68cb1ba8bdb998a7bab378bdaed7700f402ee37d3af1434d699f54d160030871eeb23bbf27a817cc17edf886d893162c32237b585d00cef8345dca1d544998b8be39a051518e68af59799d1cc0a02cb2b4793e22765a29042f670d3d8d89b1eb5be646e358b221131807098f78eed1f3efa6cee4f90de3560a02ed7", 0xe7, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)="a785c4f91c53555734f2e696342325b5858f8394c6374d31c7dcbff483fbd70b8523b1fd60413e7b23dc1a889cbce6812a2fdb76b696320c3272e22801d92bff09adffe4ed22b4ca961ab425b6ebde7e0bbd9f8ad51842d7debc5c7c237ec65da90a8bc4e7f8eb9009d7baeea657a51b61df6b81a6b35d1f474d5552cd3c3eceb4970769e9a33374508fc76fa9b059744d22e950f5f3adb15c0ab01bb5f701039a694d9fe400a4893a6d7236308162a2447c74b655fdf52f314dfb64d1cefe3c4ac7") r14 = perf_event_open(&(0x7f0000001880)={0x3, 0x80, 0x7, 0x3, 0x21, 0x4, 0x0, 0x61c, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000001840), 0x6}, 0x18c5, 0x492e, 0x8a, 0x6, 0x4, 0xf0e, 0x9, 0x0, 0x7, 0x0, 0x10}, r13, 0xa, r10, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001b80)={0x2}, 0x8) (async) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000001c00)={'ip_vti0\x00', @broadcast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000001c40)='\x00') (async) ioctl$TUNSETVNETHDRSZ(r15, 0x400454d8, &(0x7f0000001c80)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000001cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@union={0x7, 0x1, 0x0, 0x5, 0x0, 0x9, [{0xd, 0x3, 0xe1a}]}, @enum64={0xf, 0x4, 0x0, 0x13, 0x0, 0x2, [{0xd, 0x8, 0x4}, {0xb, 0x100, 0x8}, {0xf, 0x1, 0x4}, {0x2, 0x2, 0xc}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @var={0x7, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000001d80), 0x9c, 0x0, 0x1, 0x9, 0x10000}, 0x28) 338.939569ms ago: executing program 3 (id=8771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00'}, 0x18) 309.915801ms ago: executing program 2 (id=8772): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (rerun: 64) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0xc, [@datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x6ef3}, {0x5, 0x57, 0x4}, {0x1, 0xfd3, 0x5}], 'w5'}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x30, 0x61, 0x2e, 0x30, 0x2e, 0x0, 0x0, 0x5e, 0x61, 0x30]}}, &(0x7f0000000180)=""/143, 0x68, 0x8f, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff000000000004000085100000020000008500000023"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='GPL\x00') 299.889271ms ago: executing program 4 (id=8773): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0c00000004000000040000000900000000200000", @ANYRES32, @ANYBLOB="0d000000000000c7af6a0e5174743e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000"], &(0x7f0000001080)='syzkaller\x00'}, 0x94) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, 0x0, 0x201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b7040000000000008500000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x32600) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x3, 0x40, 0x7, 0x0, 0x0, 0xc, 0x60001, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000001000), 0xa}, 0x2000, 0x2, 0x909, 0x6, 0x7fe, 0x92, 0x6, 0x0, 0x146, 0x0, 0x7}, 0x0, 0xe, r3, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 233.266453ms ago: executing program 0 (id=8774): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004b00000000000000a0000000711186000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0xfffffe51) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0xd, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4000800}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004b00000000000000a0000000711186000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000180), 0xfffffe51) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0xd, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) 225.240303ms ago: executing program 1 (id=8775): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4d, 0x1, 0x0, 0xfc, 0x0, 0xd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff}, 0x8, 0x1, 0x0, 0x0, 0x4, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000a00000000000000100000026b110e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 212.191324ms ago: executing program 3 (id=8776): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0xffff, 0x0, 0x71, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063000000bca30000000000002403000020fef6ff720a00fef8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000010c0)={0xffffffffffffffff, &(0x7f0000000100)="9d83f43376be973e5842bd1bd2db6bb2b73e4ef0f3ca62cfb4f05cfad68570943053b0b0d2e58a93c94ec325df02a3bfa1e5f1851ea20162368f831c8b3279211fdf4eb68aba9709c2be9e60d0b0157f59afc0a4b3500849fe0a2b1f26f2d9b07322a5d9add659b319b2e49f31291011081217", &(0x7f0000001000)=""/135, 0x4}, 0x20) 157.380546ms ago: executing program 4 (id=8777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair(0x10, 0x1, 0x6, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x3a, 0x0, &(0x7f0000000280)="348b0d151f8218e3c736060088a849c48906c414d3adeae2c4a1f1120983fc10aa850c5ee9aa25faea6ffb33e3bb857ff4a6c603ee39f69f4926", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83615bd95b4cab6630affce3"], 0xffdd) 147.213266ms ago: executing program 3 (id=8778): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000080), 0x12) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r1}, 0x18) (async) 130.594407ms ago: executing program 3 (id=8779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="0701000010000000180000000000020000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000957500008500000006000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r2, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000080000000b0000000000000e0400000001000000090000000000001010000000000000000400000d0000000001000000000000000800000000000000000000000400000003ab000002000000040000000000000805000000080000000000001105000000beb800000d00000000000008040000000d000000000000010000000030005a0108000000000000010000000063005f05060000000000000c0300000000005f5f002e61006e90436ccc4d2cb733faf7aceaf24feb811676aa35cfd624334a8e02ffda124a0c08800e174258b795db02b8a16911b12b0e980efd8f8a5c923c882967eb443d5884d3de9324b6c312f94799b32ec454c82cf70790187afc038dd5cbce66c8e589cb472c84b4211e"], &(0x7f0000000b00)=""/41, 0xbc, 0x29, 0x1, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x401, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xa, &(0x7f0000000500)=@raw=[@call={0x85, 0x0, 0x0, 0x21}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @generic={0x5, 0x6, 0xe, 0x7d4d}, @call={0x85, 0x0, 0x0, 0xa1}, @generic={0x2, 0x9, 0x8, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0x0, 0x7, 0xfffffffffffffffe, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x40}, @ldst={0x2, 0x2, 0x0, 0x5, 0xa, 0x2, 0xfffffffffffffff0}], &(0x7f0000000580)='syzkaller\x00', 0x4, 0xf5, &(0x7f0000000800)=""/245, 0x41000, 0x3, '\x00', r4, @fallback=0x14, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r0, 0x5, &(0x7f0000000bc0)=[r2, r1, r2], &(0x7f0000000c00)=[{0x2, 0x1, 0x5}, {0x1, 0x5, 0xd}, {0x3, 0x5, 0xb, 0x5}, {0x4, 0x3, 0x3, 0x4}, {0x0, 0x3, 0xf}], 0x10, 0x91d}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 64.422098ms ago: executing program 3 (id=8780): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xff, 0x1000000}, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x13, 0x0, 0x3, 0x0, 0x10000000000, 0x89c0a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4108, 0x3, 0x0, 0x2, 0x7, 0x9, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000003c0000003c00000003000000020000000300000c034a518b55dae0f173f91fe700000001000000000000120400000008000000000000110200000003000000002e0000000000"], 0x0, 0x57}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x11, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4dd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 62.661398ms ago: executing program 1 (id=8781): syz_clone(0x65140000, &(0x7f0000000240)="4e844a41b7fc4cdcb6e6ded7c6ff6528c81efa78af14aa323523a456de8c71583668edb1e47368cb8f111a010442041c8f1d784b5353397daca9c3f62fa461a002edb36d8f6a98cc0953793c6031fbceefc1942ccc08481d78ff43ccc82d177a3c4ae6d12ffe7e4afe55a1f974f54767a7", 0x71, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="b142d5c09507c2c65817f345407c07b6054a752a6e9b393c0aaf8dbd2cc9bd32769930a9489d399c8f08249d169240") r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xd, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x6}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xe}}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @datasec={0xf, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x101, 0x3}, {0x2, 0x8, 0x1}, {0x1, 0x2, 0x3}], "ef92"}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000380)=""/199, 0x98, 0xc7, 0x0, 0x8001}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 62.306489ms ago: executing program 2 (id=8782): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2, r1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x1b, r0}, 0x94) 0s ago: executing program 2 (id=8783): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffff5f7e"], 0x17) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073019f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x3dd, 0x2, 0x0, 0x6, 0x0, 0x1, 0x40, 0x0, 0x3fffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000df0000000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/4, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) kernel console output (not intermixed with test programs): yz4,task=syz.4.2720,pid=9987,uid=0 [ 231.591136][ T9983] Memory cgroup out of memory: Killed process 9987 (syz.4.2720) total-vm:90448kB, anon-rss:1252kB, file-rss:53492kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 231.668949][ T27] oom_reaper: reaped process 9987 (syz.4.2720), now anon-rss:0kB, file-rss:53428kB, shmem-rss:0kB [ 231.684055][T10605] device wg2 entered promiscuous mode [ 232.014949][ T9974] syz.4.2720 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 232.111334][ T9974] CPU: 1 PID: 9974 Comm: syz.4.2720 Tainted: G W syzkaller #0 [ 232.120127][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.130179][ T9974] Call Trace: [ 232.133471][ T9974] __dump_stack+0x21/0x24 [ 232.137796][ T9974] dump_stack_lvl+0x1a7/0x208 [ 232.142468][ T9974] ? show_regs_print_info+0x18/0x18 [ 232.147659][ T9974] ? ___ratelimit+0x3de/0x560 [ 232.152344][ T9974] ? __kasan_check_write+0x14/0x20 [ 232.157455][ T9974] ? _raw_spin_lock+0x94/0xf0 [ 232.162138][ T9974] dump_stack+0x15/0x1c [ 232.166296][ T9974] dump_header+0xdd/0x650 [ 232.170619][ T9974] oom_kill_process+0x1fa/0x2c0 [ 232.175472][ T9974] out_of_memory+0x93f/0xd20 [ 232.180059][ T9974] ? unregister_oom_notifier+0x20/0x20 [ 232.185511][ T9974] ? mutex_lock_killable+0x92/0xf0 [ 232.190615][ T9974] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 232.197117][ T9974] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 232.202655][ T9974] ? mem_cgroup_oom_trylock+0x350/0x350 [ 232.208195][ T9974] ? _raw_spin_trylock_bh+0x150/0x150 [ 232.213558][ T9974] ? _raw_spin_unlock+0x4d/0x70 [ 232.218397][ T9974] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 232.223937][ T9974] try_charge+0xf69/0x1500 [ 232.228348][ T9974] ? pick_next_task_fair+0x812/0xa40 [ 232.233624][ T9974] ? native_set_ldt+0x370/0x370 [ 232.238466][ T9974] ? __memcg_kmem_charge+0x150/0x150 [ 232.243838][ T9974] ? __kasan_check_write+0x14/0x20 [ 232.248961][ T9974] ? finish_task_switch+0x1b7/0x5a0 [ 232.254172][ T9974] ? switch_mm_irqs_off+0x75f/0x990 [ 232.259372][ T9974] ? __switch_to_asm+0x34/0x60 [ 232.264225][ T9974] ? __schedule+0xb5b/0x1320 [ 232.268986][ T9974] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 232.274549][ T9974] __mem_cgroup_charge+0x14c/0x6d0 [ 232.279662][ T9974] shmem_add_to_page_cache+0x574/0xe30 [ 232.285115][ T9974] ? preempt_schedule_notrace+0x120/0x120 [ 232.290830][ T9974] ? __irq_exit_rcu+0x40/0x150 [ 232.295593][ T9974] ? shmem_alloc_page+0x380/0x380 [ 232.300610][ T9974] ? shmem_getpage_gfp+0x8a7/0x2120 [ 232.306147][ T9974] shmem_getpage_gfp+0x8eb/0x2120 [ 232.311168][ T9974] shmem_write_begin+0xce/0x1b0 [ 232.316012][ T9974] generic_perform_write+0x2ce/0x540 [ 232.321294][ T9974] ? atime_needs_update+0x5b0/0x5b0 [ 232.326489][ T9974] ? grab_cache_page_write_begin+0xb0/0xb0 [ 232.332287][ T9974] ? file_remove_privs+0x5b0/0x5b0 [ 232.337390][ T9974] ? __kasan_check_write+0x14/0x20 [ 232.342490][ T9974] ? down_write+0xb2/0x120 [ 232.346899][ T9974] __generic_file_write_iter+0x24b/0x480 [ 232.352528][ T9974] ? generic_write_checks+0x3d4/0x480 [ 232.357982][ T9974] generic_file_write_iter+0xa9/0x1d0 [ 232.363346][ T9974] __kernel_write+0x535/0x910 [ 232.368012][ T9974] ? vfs_read+0xa60/0xa60 [ 232.372332][ T9974] ? populate_vma_page_range+0xf0/0xf0 [ 232.377783][ T9974] ? __kasan_check_write+0x14/0x20 [ 232.382911][ T9974] dump_emit+0x246/0x370 [ 232.387146][ T9974] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 232.392597][ T9974] dump_user_range+0x6a/0x1a0 [ 232.397288][ T9974] elf_core_dump+0x2866/0x2cc0 [ 232.402241][ T9974] ? load_elf_binary+0x28e0/0x28e0 [ 232.407357][ T9974] ? __fsnotify_parent+0x6db/0x7c0 [ 232.412489][ T9974] ? do_truncate+0x1c6/0x240 [ 232.417089][ T9974] ? putname+0xfe/0x150 [ 232.421253][ T9974] ? __kasan_check_read+0x11/0x20 [ 232.426272][ T9974] ? __ia32_sys_unshare+0x40/0x40 [ 232.431399][ T9974] do_coredump+0x1ba3/0x28e0 [ 232.436002][ T9974] ? simple_acl_create+0x1c0/0x1c0 [ 232.441118][ T9974] ? debug_smp_processor_id+0x17/0x20 [ 232.446484][ T9974] ? kmem_cache_free+0x100/0x2d0 [ 232.451414][ T9974] ? ____kasan_slab_free+0x130/0x160 [ 232.456705][ T9974] ? get_signal+0xb98/0x12e0 [ 232.461297][ T9974] ? kmem_cache_free+0x100/0x2d0 [ 232.466232][ T9974] get_signal+0xf23/0x12e0 [ 232.470648][ T9974] arch_do_signal_or_restart+0xe2/0x11d0 [ 232.476273][ T9974] ? send_signal+0x3b1/0x590 [ 232.481044][ T9974] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 232.486670][ T9974] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 232.492486][ T9974] ? force_sig+0xca/0x120 [ 232.496812][ T9974] ? send_sig+0x70/0x70 [ 232.500965][ T9974] ? do_user_addr_fault+0x779/0xde0 [ 232.506154][ T9974] exit_to_user_mode_loop+0xa2/0xe0 [ 232.511352][ T9974] exit_to_user_mode_prepare+0x76/0xa0 [ 232.516798][ T9974] irqentry_exit_to_user_mode+0x9/0x10 [ 232.522264][ T9974] irqentry_exit+0x12/0x60 [ 232.526683][ T9974] exc_general_protection+0x1ca/0x250 [ 232.532055][ T9974] ? debug_smp_processor_id+0x17/0x20 [ 232.537425][ T9974] ? asm_exc_general_protection+0x8/0x30 [ 232.543049][ T9974] asm_exc_general_protection+0x1e/0x30 [ 232.548584][ T9974] RIP: 0033:0x7f2d8ec6fe61 [ 232.552990][ T9974] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 232.572682][ T9974] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 232.578747][ T9974] RAX: 0000000000000000 RBX: 00007f2d8eee9090 RCX: 00007f2d8ec6fe59 [ 232.586715][ T9974] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000000282000 [ 232.594679][ T9974] RBP: 00007f2d8ed05d6f R08: 0000200000001180 R09: 0000200000001180 [ 232.602644][ T9974] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 232.610608][ T9974] R13: 00007f2d8eee9128 R14: 00007f2d8eee9090 R15: 00007ffdc8eacc78 [ 232.897902][ T9974] memory: usage 300144kB, limit 307200kB, failcnt 23661 [ 232.966124][ T9974] memory+swap: usage 403352kB, limit 9007199254740988kB, failcnt 0 [ 233.123333][ T9974] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 233.130739][ T9974] Memory cgroup stats for /syz4: [ 233.130854][ T9974] anon 405504 [ 233.130854][ T9974] file 294395904 [ 233.130854][ T9974] kernel_stack 0 [ 233.130854][ T9974] percpu 0 [ 233.130854][ T9974] sock 0 [ 233.130854][ T9974] shmem 294395904 [ 233.130854][ T9974] file_mapped 0 [ 233.130854][ T9974] file_dirty 0 [ 233.130854][ T9974] file_writeback 0 [ 233.130854][ T9974] anon_thp 0 [ 233.130854][ T9974] inactive_anon 299196416 [ 233.130854][ T9974] active_anon 7434240 [ 233.130854][ T9974] inactive_file 73728 [ 233.130854][ T9974] active_file 204800 [ 233.130854][ T9974] unevictable 0 [ 233.130854][ T9974] slab_reclaimable 0 [ 233.130854][ T9974] slab_unreclaimable 0 [ 233.130854][ T9974] slab 0 [ 233.130854][ T9974] workingset_refault_anon 33 [ 233.130854][ T9974] workingset_refault_file 4719 [ 233.130854][ T9974] workingset_activate_anon 0 [ 233.130854][ T9974] workingset_activate_file 2805 [ 233.130854][ T9974] workingset_restore_anon 0 [ 233.130854][ T9974] workingset_restore_file 1947 [ 233.224848][T10630] device lo entered promiscuous mode [ 233.230699][ T9974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2720,pid=9983,uid=0 [ 233.231380][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.254927][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.265855][ T9974] Memory cgroup out of memory: Killed process 9983 (syz.4.2720) total-vm:90448kB, anon-rss:1292kB, file-rss:55800kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 233.286315][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.301256][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.311596][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.318653][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.331733][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.346343][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.355333][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.362423][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.371702][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.379955][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.388019][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.396403][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.404706][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.413639][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.425129][T10587] device veth0_vlan entered promiscuous mode [ 233.566647][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.574603][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.585966][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.698525][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.707495][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.912643][T10587] device veth1_macvtap entered promiscuous mode [ 233.938957][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.971466][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.980693][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.989390][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.997805][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.181511][T10650] device veth0_vlan left promiscuous mode [ 234.199011][T10650] device veth0_vlan entered promiscuous mode [ 234.473884][T10674] device syzkaller0 entered promiscuous mode [ 234.844486][T10681] b‹¡Y­4`Ga2Ä): renamed from lo [ 235.473672][T10696] device veth1_to_bond entered promiscuous mode [ 235.619456][ T330] device macsec0 left promiscuous mode [ 235.625077][ T330] nr0: port 1(macsec0) entered disabled state [ 235.674614][ T330] device bridge_slave_1 left promiscuous mode [ 235.681187][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.688628][ T330] device bridge_slave_0 left promiscuous mode [ 235.695182][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.759439][ T330] device veth1_macvtap left promiscuous mode [ 236.371669][T10762] device syzkaller0 entered promiscuous mode [ 238.696673][T10888] device syzkaller0 entered promiscuous mode [ 238.970082][T10912] device syzkaller0 entered promiscuous mode [ 239.818147][T10939] device gretap0 left promiscuous mode [ 239.825035][T10939] bridge0: port 3(gretap0) entered disabled state [ 240.233622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 240.267105][T10982] device dummy0 entered promiscuous mode [ 240.962274][T11025] syzkaller0: tun_net_xmit 1280 [ 240.976046][T11028] device syzkaller0 entered promiscuous mode [ 241.255182][T11046] tap0: tun_chr_ioctl cmd 1074025681 [ 241.924942][T11060] device sit0 entered promiscuous mode [ 242.827508][T11085] tap0: tun_chr_ioctl cmd 1074025677 [ 242.838840][T11085] tap0: linktype set to 823 [ 243.004402][T11090] ref_ctr_offset mismatch. inode: 0xef offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 243.051546][T11097] syz.4.3025[11097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.051691][T11097] syz.4.3025[11097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.822655][T11249] device syz_tun entered promiscuous mode [ 246.303009][T11265] device syzkaller0 entered promiscuous mode [ 248.427913][T11417] device syzkaller0 entered promiscuous mode [ 250.424675][T11515] device syzkaller0 left promiscuous mode [ 251.542807][T11602] geneve1: tun_chr_ioctl cmd 1074812118 [ 255.691154][T11820] device syzkaller0 entered promiscuous mode [ 255.915434][T11863] device veth0_vlan left promiscuous mode [ 255.924935][T11863] device veth0_vlan entered promiscuous mode [ 257.083762][T11894] device sit0 entered promiscuous mode [ 258.027893][T11927] device bridge0 left promiscuous mode [ 258.194144][T11931] device sit0 entered promiscuous mode [ 258.375379][T11963] device syzkaller0 entered promiscuous mode [ 258.392623][T11964] device syzkaller0 entered promiscuous mode [ 259.137068][T12019] 7B’ç÷ï: renamed from syzkaller0 [ 261.500204][T12112] device syzkaller0 entered promiscuous mode [ 261.529497][T12112] syzkaller0: tun_net_xmit 1280 [ 262.735933][T12149] device xfrm0 entered promiscuous mode [ 264.142019][T12177] tap0: tun_chr_ioctl cmd 1074025677 [ 264.148809][T12177] tap0: linktype set to 774 [ 264.484629][T12194] veth1_to_hsr: mtu less than device minimum [ 264.639553][T12200] tun0: tun_chr_ioctl cmd 2147767521 [ 264.870699][T12225] ref_ctr_offset mismatch. inode: 0x24d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 265.727144][T12258] device veth0_vlan left promiscuous mode [ 265.741268][T12258] device veth0_vlan entered promiscuous mode [ 270.288035][T12414] bridge0: port 3(ip6gretap0) entered blocking state [ 270.294835][T12414] bridge0: port 3(ip6gretap0) entered disabled state [ 270.302440][T12414] device ip6gretap0 entered promiscuous mode [ 270.332182][T12415] device ip6gretap0 left promiscuous mode [ 270.337988][T12415] bridge0: port 3(ip6gretap0) entered disabled state [ 271.101970][T12478] device syzkaller0 entered promiscuous mode [ 272.001015][T12536] device veth0_vlan left promiscuous mode [ 272.037257][T12536] device veth0_vlan entered promiscuous mode [ 272.826525][T12577] tun0: tun_chr_ioctl cmd 1074025675 [ 272.840758][T12577] tun0: persist enabled [ 272.850703][T12577] tun0: tun_chr_ioctl cmd 1074025675 [ 272.861962][T12577] tun0: persist enabled [ 273.339097][ T24] audit: type=1400 audit(1781263821.490:163): avc: denied { create } for pid=12582 comm="syz.3.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.882788][T12619] device syzkaller0 entered promiscuous mode [ 274.425959][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 275.626155][T12740] device bond_slave_1 entered promiscuous mode [ 275.636067][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 275.647763][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.677447][T12740] device veth1_to_bond entered promiscuous mode [ 278.728390][T12921] ref_ctr_offset mismatch. inode: 0x319 offset: 0x0 ref_ctr_offset(old): 0x1fe ref_ctr_offset(new): 0x0 [ 279.868259][T12971] cgroup: fork rejected by pids controller in /syz3 [ 280.298315][T13094] device sit0 left promiscuous mode [ 280.649238][T13042] device veth0_vlan left promiscuous mode [ 280.666707][T13042] device veth0_vlan entered promiscuous mode [ 280.742054][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.749656][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.757184][T13110] device bridge_slave_0 entered promiscuous mode [ 280.766340][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.773628][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.781130][T13110] device bridge_slave_1 entered promiscuous mode [ 280.941133][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.948553][T13110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.955984][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.963143][T13110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.102930][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.172232][ T24] audit: type=1400 audit(1781263829.330:164): avc: denied { create } for pid=13184 comm="syz.4.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 281.198514][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.218327][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.227971][T13163] device veth0_vlan left promiscuous mode [ 281.234991][T13163] device veth0_vlan entered promiscuous mode [ 281.256626][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.265649][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.275962][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.284483][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.295129][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.302237][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.310135][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.318969][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.326365][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.360060][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.375573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.403438][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.459144][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.467552][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.475384][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.562482][T13110] device veth0_vlan entered promiscuous mode [ 281.675481][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.703026][T13110] device veth1_macvtap entered promiscuous mode [ 281.800059][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.815496][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.837490][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.862031][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.411991][ T9] device veth1_macvtap left promiscuous mode [ 282.427458][ T9] device veth0_vlan left promiscuous mode [ 282.836274][T13265] device vlan0 entered promiscuous mode [ 283.309426][T13298] device sit0 entered promiscuous mode [ 284.961229][ T24] audit: type=1400 audit(1781263833.120:165): avc: denied { associate } for pid=13352 comm="syz.1.3618" name="memory.numa_stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 285.550271][T13399] device syzkaller0 left promiscuous mode [ 286.446293][T13475] device syzkaller0 entered promiscuous mode [ 286.655041][T13503] device syzkaller0 entered promiscuous mode [ 287.585004][T13538] geneve1: tun_chr_ioctl cmd 1074025692 [ 290.479323][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 291.107406][ T24] audit: type=1400 audit(1781263839.260:166): avc: denied { mounton } for pid=13662 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 291.313756][T13665] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 291.338185][T13665] device veth1_to_bond entered promiscuous mode [ 291.406188][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.413266][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.421952][T13662] device bridge_slave_0 entered promiscuous mode [ 291.428924][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.436008][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.443539][T13662] device bridge_slave_1 entered promiscuous mode [ 291.586115][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.593216][T13662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.600541][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.607727][T13662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.644430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.657619][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.675112][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.732313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.749174][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.756224][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.763928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.772233][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.779295][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.863420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.875213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.889285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.922057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.930292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.937876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.998064][T13662] device veth0_vlan entered promiscuous mode [ 292.047837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.130519][T13662] device veth1_macvtap entered promiscuous mode [ 292.176965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.196786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.246715][T13698] device veth1_macvtap left promiscuous mode [ 292.264954][T13698] device macsec0 entered promiscuous mode [ 292.301248][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.314180][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.347513][ T24] audit: type=1400 audit(1781263840.500:167): avc: denied { unmount } for pid=13662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 292.424612][T13708] device syzkaller0 entered promiscuous mode [ 292.840154][T13734] device syzkaller0 entered promiscuous mode [ 292.859628][T13735] syzkaller0: refused to change device tx_queue_len [ 293.681002][T13794] device syzkaller0 entered promiscuous mode [ 294.208802][T13809] : port 1(ip6gretap0) entered blocking state [ 294.256246][T13809] : port 1(ip6gretap0) entered disabled state [ 294.345416][T13809] device ip6gretap0 entered promiscuous mode [ 294.360583][T13807] device ip6gretap0 left promiscuous mode [ 294.374048][T13807] : port 1(ip6gretap0) entered disabled state [ 296.863511][T13905] device syzkaller0 entered promiscuous mode [ 299.935910][ T24] audit: type=1400 audit(1781263848.090:168): avc: denied { create } for pid=13988 comm="syz.2.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 301.639140][T14046] : renamed from team_slave_1 [ 301.670708][T14031] tun0: tun_chr_ioctl cmd 1074025677 [ 301.845808][T14031] tun0: linktype set to 780 [ 302.110825][T14066] ref_ctr_offset mismatch. inode: 0x91 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 302.296376][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.317060][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.336573][T14059] device bridge_slave_0 entered promiscuous mode [ 302.353525][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.387474][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.401573][T14059] device bridge_slave_1 entered promiscuous mode [ 302.460023][T14081] device syzkaller0 entered promiscuous mode [ 302.715136][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.722229][T14059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.729542][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.736571][T14059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.802821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.811463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.820905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.848488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.860558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.883063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.900329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.908937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.916491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.925493][T14059] device veth0_vlan entered promiscuous mode [ 302.948348][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.958081][T14059] device veth1_macvtap entered promiscuous mode [ 303.029447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.039026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.051244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.060930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.361825][T14102] bridge0: port 3(gretap0) entered blocking state [ 303.371651][T14102] bridge0: port 3(gretap0) entered disabled state [ 303.379605][T14102] device gretap0 entered promiscuous mode [ 303.390604][T14102] bridge0: port 3(gretap0) entered blocking state [ 303.397055][T14102] bridge0: port 3(gretap0) entered forwarding state [ 304.781626][ T333] device bridge_slave_1 left promiscuous mode [ 304.787803][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.848336][ T333] device bridge_slave_0 left promiscuous mode [ 304.854669][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.872845][ T333] device veth1_macvtap left promiscuous mode [ 305.593576][T14226] device syzkaller0 entered promiscuous mode [ 306.387710][T14283] device syzkaller0 entered promiscuous mode [ 307.622773][T14324] device syzkaller0 entered promiscuous mode [ 308.210083][T14333] device syzkaller0 entered promiscuous mode [ 308.329537][T14337] 7B’ç÷ï: renamed from syzkaller0 [ 310.923851][ T24] audit: type=1400 audit(1781263859.060:169): avc: denied { create } for pid=14388 comm="syz.4.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 311.367583][T14422] device syzkaller0 entered promiscuous mode [ 311.385410][T14422] device syzkaller0 left promiscuous mode [ 313.456195][T14536] ÂOÊ÷: renamed from bond_slave_0 [ 314.999038][T14588] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 315.010402][T14587] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 315.058720][T14587] pim6reg0: linktype set to 6 [ 315.269100][T14597] device syzkaller0 entered promiscuous mode [ 316.048406][T14635] device syzkaller0 entered promiscuous mode [ 317.222757][T14686] nr0: port 1(macsec0) entered blocking state [ 317.237934][T14686] nr0: port 1(macsec0) entered disabled state [ 317.246258][T14686] device macsec0 entered promiscuous mode [ 317.300000][T14701] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.307391][T14701] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.348413][T14706] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 317.367833][T14686] device bridge_slave_1 left promiscuous mode [ 317.379973][T14686] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.395306][T14686] device bridge_slave_0 left promiscuous mode [ 317.402072][T14686] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.466524][T14715] device syzkaller0 entered promiscuous mode [ 318.851084][T14841] tun0: tun_chr_ioctl cmd 1074025677 [ 318.866420][T14841] tun0: linktype set to 1 [ 319.181093][T14856] device sit0 entered promiscuous mode [ 321.625104][T14909] device wg2 entered promiscuous mode [ 323.408324][T14968] device syzkaller0 entered promiscuous mode [ 323.605393][T14983] €Â0: renamed from pim6reg1 [ 325.341192][T15054] cgroup: fork rejected by pids controller in /syz2 [ 326.182942][T15086] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.202020][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.216833][T15086] device bridge_slave_0 entered promiscuous mode [ 326.277399][T15086] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.285054][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.292897][T15086] device bridge_slave_1 entered promiscuous mode [ 326.795803][T15086] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.802916][T15086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.810365][T15086] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.817390][T15086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.912220][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.920642][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.938322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.952812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.034742][T15138] device syzkaller0 entered promiscuous mode [ 327.042269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.051103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.059546][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.066645][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.117130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.125997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.134727][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.141772][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.149442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.158139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.166148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.174320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.182492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.191074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.212375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.220464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.229748][T15086] device veth0_vlan entered promiscuous mode [ 327.246162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.259868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.284684][T15086] device veth1_macvtap entered promiscuous mode [ 327.298439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.317039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.361855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.450892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.467072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.475871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.484655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.582179][T15174] bridge0: port 3(veth1_macvtap) entered blocking state [ 327.684304][T15174] bridge0: port 3(veth1_macvtap) entered disabled state [ 328.104648][ T333] device bridge_slave_1 left promiscuous mode [ 328.149767][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.269017][ T333] device bridge_slave_0 left promiscuous mode [ 328.307197][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.784218][T15214] IPv6: …: Disabled Multicast RS [ 329.082329][T15230] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 331.464349][T15337] device syzkaller0 entered promiscuous mode [ 331.889932][T15357] device wg2 entered promiscuous mode [ 332.716466][T15411] device sit0 entered promiscuous mode [ 333.992043][T15450] device dummy0 entered promiscuous mode [ 335.246242][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.253648][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.031574][T15544] device syzkaller0 entered promiscuous mode [ 336.529240][T15567] tun0: tun_chr_ioctl cmd 21731 [ 336.541237][ T24] audit: type=1400 audit(1781263884.700:170): avc: denied { create } for pid=15570 comm="syz.2.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 337.100644][T15603] device sit0 left promiscuous mode [ 337.895734][T15633] device veth0_vlan left promiscuous mode [ 338.018433][T15633] device veth0_vlan entered promiscuous mode [ 338.338153][T15650] device syzkaller0 entered promiscuous mode [ 338.397302][T15657] bridge0: port 4(ip6gretap0) entered blocking state [ 338.415995][T15657] bridge0: port 4(ip6gretap0) entered disabled state [ 338.425198][T15657] device ip6gretap0 entered promiscuous mode [ 338.431464][T15657] bridge0: port 4(ip6gretap0) entered blocking state [ 338.438202][T15657] bridge0: port 4(ip6gretap0) entered listening state [ 338.760068][T15701] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 338.765890][T15701] pim6reg0: linktype set to 825 [ 340.486972][T15864] device syzkaller0 entered promiscuous mode [ 342.436216][T15943] device syzkaller0 entered promiscuous mode [ 345.456137][T16085] device syzkaller0 entered promiscuous mode [ 347.698413][T16197] device aaaaaaaaaaaaaaa entered promiscuous mode [ 348.582678][T16246] device sit0 left promiscuous mode [ 349.641214][T16272] device syzkaller0 entered promiscuous mode [ 350.013618][T16285] device syzkaller0 entered promiscuous mode [ 350.020121][T16285] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 351.215426][T16322] tap0: tun_chr_ioctl cmd 1074025676 [ 351.220950][T16322] tap0: owner set to 0 [ 353.631648][T16421] bridge0: port 3(ip6gretap0) entered blocking state [ 353.638478][T16421] bridge0: port 3(ip6gretap0) entered disabled state [ 353.739491][T16421] device ip6gretap0 entered promiscuous mode [ 353.747151][T16423] device ip6gretap0 left promiscuous mode [ 353.763171][T16423] bridge0: port 3(ip6gretap0) entered disabled state [ 354.566540][T16446] device veth0_vlan left promiscuous mode [ 354.590631][T16446] device veth0_vlan entered promiscuous mode [ 354.827200][T16477] ref_ctr_offset mismatch. inode: 0x3d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 356.252756][T16533] ÿÿÿÿÿÿ: renamed from vlan1 [ 356.942339][T16567] tap0: tun_chr_ioctl cmd 2147767506 [ 357.497910][T16579] ref_ctr_offset mismatch. inode: 0x4b7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 358.783893][T16650] ÿÿÿÿÿÿ: renamed from vlan1 [ 361.605863][T16784] device syzkaller0 entered promiscuous mode [ 362.370205][T16816] device syzkaller0 entered promiscuous mode [ 363.811515][T16945] device syzkaller0 entered promiscuous mode [ 363.847017][T16945] device syzkaller0 left promiscuous mode [ 363.905582][T16947] ref_ctr_offset mismatch. inode: 0x57c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 365.954800][T17015] device syzkaller0 entered promiscuous mode [ 365.969288][T17015] batadv0: tun_chr_ioctl cmd 1074025680 [ 366.647908][T17039] device wg2 left promiscuous mode [ 367.023072][T17042] device wg2 entered promiscuous mode [ 368.226257][T17102] device sit0 entered promiscuous mode [ 368.558648][ C0] bridge0: port 4(ip6gretap0) entered learning state [ 369.748196][T17200] device syzkaller0 entered promiscuous mode [ 369.820727][T17198] tap0: tun_chr_ioctl cmd 2147767506 [ 369.834968][T17198] tap0: tun_chr_ioctl cmd 1074025677 [ 369.842210][T17198] tap0: linktype set to 774 [ 369.858513][T17198] tap0: tun_chr_ioctl cmd 1074025677 [ 369.864326][T17198] tap0: linktype set to 804 [ 370.021317][T17204] device syzkaller0 entered promiscuous mode [ 370.048962][T17204] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 370.435018][T17226] ref_ctr_offset mismatch. inode: 0x4af offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 370.733905][T17211] device syzkaller0 entered promiscuous mode [ 370.877917][T17255] device syzkaller0 entered promiscuous mode [ 371.095168][T17272] sock: sock_set_timeout: `syz.4.4741' (pid 17272) tries to set negative timeout [ 371.099004][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.123963][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.134367][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.139806][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.145309][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.168974][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.180211][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.188424][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.209134][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.227109][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.233216][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.256446][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.333586][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.339663][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.369000][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.374381][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.384412][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.395358][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.401456][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.406974][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.415139][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.423551][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.429150][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.434496][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.439884][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.445202][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.451150][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.456653][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.462786][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.468222][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.476018][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.481418][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.486808][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.492351][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.497655][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.503236][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.508917][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.518589][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.527563][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.534353][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.556058][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.562130][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.578390][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.587269][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.593296][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.599033][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.604603][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.610269][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.616011][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.622588][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.628098][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.633858][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.645151][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.661258][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.667141][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.673523][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.684834][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.690763][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.696177][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.702300][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.707726][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.713173][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.718537][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.724110][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.739778][T17270] tap0: tun_chr_ioctl cmd 1074025692 [ 371.771385][T17320] device veth0_vlan left promiscuous mode [ 371.831121][T17320] device veth0_vlan entered promiscuous mode [ 371.867611][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.879298][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.887293][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 371.937154][T17333] device syzkaller0 entered promiscuous mode [ 372.264397][T17357] bridge0: port 3(ip6gretap0) entered blocking state [ 372.271415][T17357] bridge0: port 3(ip6gretap0) entered disabled state [ 372.284066][T17357] device ip6gretap0 entered promiscuous mode [ 372.315074][T17357] bridge0: port 3(ip6gretap0) entered blocking state [ 372.321934][T17357] bridge0: port 3(ip6gretap0) entered forwarding state [ 372.362940][T17360] device ip6gretap0 left promiscuous mode [ 372.372619][T17360] bridge0: port 3(ip6gretap0) entered disabled state [ 373.487783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 373.956201][T17399] geneve1: tun_chr_ioctl cmd 1074025675 [ 373.979671][T17399] geneve1: persist disabled [ 376.433043][T17504] device syzkaller0 entered promiscuous mode [ 377.067021][T17530] device wg2 left promiscuous mode [ 377.075082][T17530] device wg2 entered promiscuous mode [ 377.641057][T17585] device syzkaller0 entered promiscuous mode [ 377.747540][T17592] bridge0: port 3(gretap0) entered blocking state [ 377.754571][T17592] bridge0: port 3(gretap0) entered disabled state [ 377.764129][T17592] device gretap0 entered promiscuous mode [ 378.601899][T17652] device macsec0 entered promiscuous mode [ 378.717797][T17635] bridge0: port 3(gretap0) entered blocking state [ 378.916624][T17635] bridge0: port 3(gretap0) entered disabled state [ 379.038749][T17635] device gretap0 entered promiscuous mode [ 379.044628][T17635] bridge0: port 3(gretap0) entered blocking state [ 379.051096][T17635] bridge0: port 3(gretap0) entered forwarding state [ 380.963857][T17758] bridge0: port 4(ip6gretap0) entered disabled state [ 380.970671][T17758] bridge0: port 3(gretap0) entered disabled state [ 380.977318][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.984649][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.091562][T17758] device ip6gretap0 left promiscuous mode [ 381.097591][T17758] bridge0: port 4(ip6gretap0) entered disabled state [ 381.108105][T17758] device gretap0 left promiscuous mode [ 381.113736][T17758] bridge0: port 3(gretap0) entered disabled state [ 381.121413][T17758] device bridge_slave_1 left promiscuous mode [ 381.127614][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.135210][T17758] device bridge_slave_0 left promiscuous mode [ 381.197092][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.075791][T17834] device syzkaller0 entered promiscuous mode [ 383.091540][T17834] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 383.126600][T17834] syzkaller0: mtu greater than device maximum [ 383.961074][T17886] syz.1.4917[17886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.961156][T17886] syz.1.4917[17886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.340943][T17891] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 384.378672][T17891] pim6reg0: linktype set to 768 [ 384.635068][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.692429][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.720775][T17897] device bridge_slave_0 entered promiscuous mode [ 384.768019][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.798321][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.823431][T17897] device bridge_slave_1 entered promiscuous mode [ 385.091040][ T333] device macsec0 left promiscuous mode [ 385.096654][ T333] nr0: port 1(macsec0) entered disabled state [ 385.104371][ T333] device veth1_macvtap left promiscuous mode [ 385.409309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.419390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.443242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.456909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.470706][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.477788][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.486128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.499687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.508011][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.515337][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.523498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.533176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.565641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.576946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.587304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.605098][T17897] device veth0_vlan entered promiscuous mode [ 385.623354][T17897] device veth1_macvtap entered promiscuous mode [ 385.670192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.696682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.719205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.727977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.737221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.745670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.769350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.779229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.789307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.799826][T17946] device wg2 left promiscuous mode [ 385.830223][T17955] device dummy0 entered promiscuous mode [ 385.869039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.890488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.587497][T17994] bridge0: port 3(ip6gretap0) entered blocking state [ 386.628838][T17994] bridge0: port 3(ip6gretap0) entered disabled state [ 386.651383][T17994] device ip6gretap0 entered promiscuous mode [ 386.658060][T17994] bridge0: port 3(ip6gretap0) entered blocking state [ 386.664793][T17994] bridge0: port 3(ip6gretap0) entered forwarding state [ 386.859878][T17988] device ip6gretap0 left promiscuous mode [ 386.865774][T17988] bridge0: port 3(ip6gretap0) entered disabled state [ 388.045801][T18110] batadv0: tun_chr_ioctl cmd 1074025680 [ 388.536746][T18155] ref_ctr_offset mismatch. inode: 0x5af offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 389.226914][T18181] Ÿë: port 1(ÿÿÿÿÿÿ) entered blocking state [ 389.233426][T18181] Ÿë: port 1(ÿÿÿÿÿÿ) entered disabled state [ 389.320745][T18181] device ÿÿÿÿÿÿ entered promiscuous mode [ 389.983853][T18194] device veth1_macvtap left promiscuous mode [ 390.853426][T18253] ref_ctr_offset mismatch. inode: 0x50 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 397.017694][T18460] device syzkaller0 entered promiscuous mode [ 397.472898][T18532] device syzkaller0 entered promiscuous mode [ 398.485470][T18566] device syzkaller0 entered promiscuous mode [ 398.513965][T18571] device syzkaller0 entered promiscuous mode [ 398.601524][T18583] device syzkaller0 entered promiscuous mode [ 398.684367][T18591] device syzkaller0 entered promiscuous mode [ 399.742606][T18649] device veth0_vlan left promiscuous mode [ 399.820522][T18649] device veth0_vlan entered promiscuous mode [ 399.944668][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.954750][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.967645][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.401315][T18791] syz.4.5189[18791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.401374][T18791] syz.4.5189[18791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.469866][T18789] ref_ctr_offset mismatch. inode: 0x3f6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 405.140202][T18847] ÿÿÿÿÿÿ: renamed from vlan1 [ 406.524707][T18955] device syzkaller0 entered promiscuous mode [ 407.147676][T19000] ±ÿÿÿ: renamed from team_slave_1 [ 408.490332][T19069] ref_ctr_offset mismatch. inode: 0x842 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 408.627030][T19073] ref_ctr_offset mismatch. inode: 0x6c0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 412.062683][T19200] ÿÿÿÿÿÿ: renamed from vlan1 [ 412.294342][T19217] device veth1_macvtap entered promiscuous mode [ 412.302032][T19217] device macsec0 entered promiscuous mode [ 412.312392][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.886195][T19273] syz.0.5333[19273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.888071][T19273] syz.0.5333[19273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.052218][T19277] device syzkaller0 left promiscuous mode [ 413.289328][T19281] bridge0: port 3(gretap0) entered disabled state [ 413.297280][T19281] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.305534][T19281] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.359329][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 413.651435][T19290] device syzkaller0 entered promiscuous mode [ 414.024625][T19326] ref_ctr_offset mismatch. inode: 0x1e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 414.099712][T19325] ref_ctr_offset mismatch. inode: 0x1e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 414.959742][ T24] audit: type=1400 audit(1781263963.120:171): avc: denied { create } for pid=19363 comm="syz.0.5358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.277998][T19393] : port 1(ip6gretap0) entered blocking state [ 416.287451][T19393] : port 1(ip6gretap0) entered disabled state [ 416.297211][T19393] device ip6gretap0 entered promiscuous mode [ 416.347793][T19393] device ip6gretap0 left promiscuous mode [ 416.378178][T19393] : port 1(ip6gretap0) entered disabled state [ 416.479311][T19403] device syzkaller0 entered promiscuous mode [ 417.239765][T19437] Â: renamed from pim6reg1 [ 419.755935][T19535] : port 1(veth0) entered blocking state [ 419.762433][T19535] : port 1(veth0) entered disabled state [ 419.790839][T19535] device veth0 entered promiscuous mode [ 419.811565][T19535] device veth0 left promiscuous mode [ 419.828342][T19535] : port 1(veth0) entered disabled state [ 420.542107][T19564] geneve1: tun_chr_ioctl cmd 1074025672 [ 420.629125][T19564] geneve1: ignored: set checksum enabled [ 421.959112][T19626] batadv0: tun_chr_ioctl cmd 35108 [ 421.967517][T19627] batadv0: tun_chr_ioctl cmd 21731 [ 421.974842][T19626] batadv0: tun_chr_ioctl cmd 21731 [ 422.592615][T19648] ref_ctr_offset mismatch. inode: 0x910 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 424.513437][T19714] device bridge0 entered promiscuous mode [ 424.794240][T19750] device gretap0 left promiscuous mode [ 424.809594][T19750] bridge0: port 3(gretap0) entered disabled state [ 424.829538][T19750] device bridge_slave_1 left promiscuous mode [ 424.836362][T19750] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.853857][T19750] device bridge_slave_0 left promiscuous mode [ 424.879863][T19750] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.304872][T19780] device veth1_to_bond entered promiscuous mode [ 426.370752][T19840] device syzkaller0 entered promiscuous mode [ 428.200391][T19936] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.207880][T19936] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.246260][T19936] device bridge0 left promiscuous mode [ 428.421977][T19935] device bridge_slave_1 left promiscuous mode [ 428.448653][T19935] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.511557][T19935] device bridge_slave_0 left promiscuous mode [ 428.534672][T19935] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.210215][T19943] -1: renamed from syzkaller0 [ 429.753525][T19954] device syzkaller0 entered promiscuous mode [ 433.215956][T20084] device syzkaller0 entered promiscuous mode [ 435.737015][T20194] device syzkaller0 entered promiscuous mode [ 437.199755][T20269] device wg2 entered promiscuous mode [ 437.462722][T20293] device syzkaller0 entered promiscuous mode [ 438.836384][T20367] tap0: tun_chr_ioctl cmd 35111 [ 439.544513][T20391] device syzkaller0 entered promiscuous mode [ 441.074633][T20434] device syzkaller0 entered promiscuous mode [ 445.200159][T20680] syz.3.5722[20680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.200261][T20680] syz.3.5722[20680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.974238][T20712] device sit0 left promiscuous mode [ 446.010641][T20712] device sit0 entered promiscuous mode [ 446.051736][T20710] device syzkaller0 entered promiscuous mode [ 446.203505][T20730] syz.2.5738[20730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.247192][T20737] -: renamed from syzkaller0 [ 446.593013][T20761] device syzkaller0 entered promiscuous mode [ 448.247303][T20838] syz.0.5771[20838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.247381][T20838] syz.0.5771[20838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.372271][T20872] device veth0_vlan left promiscuous mode [ 449.461597][T20872] device veth0_vlan entered promiscuous mode [ 449.585395][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.596426][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.606488][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 451.157993][T20998] device syzkaller0 entered promiscuous mode [ 451.309599][T21000] syz.1.5817[21000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.309672][T21000] syz.1.5817[21000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.598543][T21028] device syzkaller0 entered promiscuous mode [ 451.864088][T21047] device syzkaller0 entered promiscuous mode [ 452.452793][T21099] : port 1(veth0) entered blocking state [ 452.521529][T21099] : port 1(veth0) entered disabled state [ 452.530422][T21099] device veth0 entered promiscuous mode [ 453.217186][T21121] device syzkaller0 entered promiscuous mode [ 453.977215][T21124] device syzkaller0 entered promiscuous mode [ 454.286292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 454.432906][T21168] device syzkaller0 left promiscuous mode [ 454.442877][T21168] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 454.770701][T21179] device syzkaller0 entered promiscuous mode [ 454.823586][T21167] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 454.838131][T21167] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 455.090467][T21193] device sit0 left promiscuous mode [ 455.192710][T21193] device sit0 entered promiscuous mode [ 456.578094][T21220] ref_ctr_offset mismatch. inode: 0x6b7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 457.262783][T21251] device syzkaller0 entered promiscuous mode [ 457.860147][T21304] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 461.404981][T21455] device syzkaller0 entered promiscuous mode [ 462.364120][T21515] device wg2 left promiscuous mode [ 462.398966][T21515] device wg2 entered promiscuous mode [ 462.525729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.552967][T21529] device syzkaller0 entered promiscuous mode [ 462.561873][T21529] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.608197][T21532] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.682599][T21528] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.736309][T21528] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.959771][T21558] device gretap0 left promiscuous mode [ 462.968844][T21558] bridge0: port 3(gretap0) entered disabled state [ 462.989569][T21558] device bridge_slave_1 left promiscuous mode [ 462.996433][T21558] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.013814][T21558] device bridge_slave_0 left promiscuous mode [ 463.058909][T21558] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.763954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.819253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.839111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 465.103300][T21688] device syzkaller0 entered promiscuous mode [ 467.396182][T21775] device wg2 entered promiscuous mode [ 467.649667][T21784] @0Ù: renamed from bond_slave_1 [ 468.319680][T21800] : renamed from bond_slave_0 [ 469.437003][T21849] device syzkaller0 entered promiscuous mode [ 470.243053][T21871] device syzkaller0 entered promiscuous mode [ 471.230494][T21904] device wg2 left promiscuous mode [ 471.509543][T21925] IPv6: pim6reg1: Disabled Multicast RS [ 472.154632][T21968] device syzkaller0 entered promiscuous mode [ 472.844235][T22123] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.862526][T22123] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.883655][T22123] device bridge_slave_0 entered promiscuous mode [ 472.895828][T22123] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.903621][T22123] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.911783][T22123] device bridge_slave_1 entered promiscuous mode [ 473.002156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 473.208777][T22145] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 473.270491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.282164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.299331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.309883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.319663][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.328087][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.337063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.354512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.389241][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.396953][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.504366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.514945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.535282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.545206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.581469][T22123] device veth0_vlan entered promiscuous mode [ 473.649295][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.659607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.668272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.683453][T22123] device veth1_macvtap entered promiscuous mode [ 473.699884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.755481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.772907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.730118][T22212] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.738023][T22212] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.745982][T22212] device bridge_slave_0 entered promiscuous mode [ 474.759613][T22212] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.772872][T22212] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.786226][T22212] device bridge_slave_1 entered promiscuous mode [ 474.845572][ T330] device ÿÿÿÿÿÿ left promiscuous mode [ 474.852926][ T330] Ÿë: port 1(ÿÿÿÿÿÿ) entered disabled state [ 474.863032][ T330] device veth1_macvtap left promiscuous mode [ 474.870929][ T330] device veth0_vlan left promiscuous mode [ 475.025613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.038357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.057471][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.068209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.079972][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.088062][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.096018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.106719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.120071][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.127291][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.153689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.166168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.176055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.187899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.203154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.215986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.225578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.252954][T22252] device syzkaller0 entered promiscuous mode [ 475.263483][T22212] device veth0_vlan entered promiscuous mode [ 475.297771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.321714][T22260] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 475.357747][T22212] device veth1_macvtap entered promiscuous mode [ 475.375078][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.391869][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.434780][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.457155][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.764404][T22272] device syzkaller0 entered promiscuous mode [ 475.878260][T22306] device syzkaller0 entered promiscuous mode [ 476.467865][ T330] device veth0 left promiscuous mode [ 476.479825][ T330] : port 1(veth0) entered disabled state [ 476.501048][ T330] device veth1_macvtap left promiscuous mode [ 476.515896][ T330] device veth0_vlan left promiscuous mode [ 478.783712][T22517] device syzkaller0 entered promiscuous mode [ 478.923298][T22527] erspan0: refused to change device tx_queue_len [ 479.326584][T22566] device veth0_vlan left promiscuous mode [ 479.341055][T22566] device veth0_vlan entered promiscuous mode [ 479.397115][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.424565][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.504044][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.437885][T22609] device syzkaller0 entered promiscuous mode [ 480.552312][T22627] device syzkaller0 entered promiscuous mode [ 480.899464][ T24] audit: type=1400 audit(1781264029.060:172): avc: denied { create } for pid=22642 comm="syz.3.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 481.897127][T22697] device sit0 entered promiscuous mode [ 482.525168][T22699] device syzkaller0 entered promiscuous mode [ 485.360924][T22838] tap0: tun_chr_ioctl cmd 1074025688 [ 490.224826][T23043] device syzkaller0 left promiscuous mode [ 490.969276][T23093] device syzkaller0 entered promiscuous mode [ 491.751647][T23113] device vlan0 entered promiscuous mode [ 491.791782][T23115] ÿÿÿÿÿÿ: renamed from vlan1 [ 492.186570][T23129] device wg2 entered promiscuous mode [ 492.481450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.495581][T23193] device syzkaller0 entered promiscuous mode [ 493.810743][T23200] device syzkaller0 left promiscuous mode [ 493.821213][T23204] device veth0_vlan left promiscuous mode [ 493.829209][T23204] device veth0_vlan entered promiscuous mode [ 493.844579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.853027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.861117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 494.012557][T23211] bridge0: port 3(gretap0) entered blocking state [ 494.035415][T23211] bridge0: port 3(gretap0) entered disabled state [ 494.050734][T23211] device gretap0 entered promiscuous mode [ 494.075451][T23211] bridge0: port 3(gretap0) entered blocking state [ 494.083063][T23211] bridge0: port 3(gretap0) entered forwarding state [ 495.395703][T23308] device sit0 entered promiscuous mode [ 496.739007][T23373] device syzkaller0 entered promiscuous mode [ 497.265922][T23416] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 497.352109][T23416] device syzkaller0 entered promiscuous mode [ 497.452432][T23425] device syzkaller0 entered promiscuous mode [ 499.146164][T23491] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.153760][T23491] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.404471][T23508] device syzkaller0 entered promiscuous mode [ 499.603987][T23619] device syzkaller0 entered promiscuous mode [ 499.638301][T23619] syzkaller0: mtu less than device minimum [ 501.852329][T23663] device syzkaller0 entered promiscuous mode [ 501.883739][T23673] syz.4.6535[23673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.883848][T23673] syz.4.6535[23673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.251933][T23699] device wg0 entered promiscuous mode [ 503.324857][T23741] Â: renamed from pim6reg1 [ 505.382861][T23843] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.391363][T23843] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.417557][T23843] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.424774][T23843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.432404][T23843] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.440147][T23843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.474972][T23843] device bridge0 entered promiscuous mode [ 505.840650][T23867] device syzkaller0 entered promiscuous mode [ 507.184210][T23961] device sit0 left promiscuous mode [ 507.294552][T23961] device sit0 entered promiscuous mode [ 508.255948][T23984] device syzkaller0 entered promiscuous mode [ 508.462075][T23982] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.478637][T23982] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.499119][T23982] device bridge_slave_0 entered promiscuous mode [ 508.558180][T23982] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.567357][T23982] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.591110][T23982] device bridge_slave_1 entered promiscuous mode [ 508.696219][T24033] device syzkaller0 entered promiscuous mode [ 508.774932][T24033] syzkaller0: tun_net_xmit 1280 [ 509.332879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.349540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.379254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.398911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.418875][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.428773][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.438720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.448255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.463515][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.473038][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.482150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.523942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.549204][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.610810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.658919][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.674348][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.724719][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.758466][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.767256][T23982] device veth0_vlan entered promiscuous mode [ 510.218061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.228766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.318078][T23982] device veth1_macvtap entered promiscuous mode [ 510.415301][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.453439][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.485166][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.523130][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.533794][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 511.240093][T24126] b‹¡Y­4`Ga2Ä): renamed from lo [ 515.153976][T24279] device veth1_macvtap left promiscuous mode [ 515.304006][T24291] device erspan0 entered promiscuous mode [ 515.527855][T24322] device syzkaller0 entered promiscuous mode [ 515.691170][T24344] device syzkaller0 entered promiscuous mode [ 516.013083][T24374] device veth0_vlan left promiscuous mode [ 516.098948][T24374] device veth0_vlan entered promiscuous mode [ 516.111049][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.138738][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.147469][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 516.566834][T24385] device syzkaller0 entered promiscuous mode [ 516.919584][T24421] device syzkaller0 entered promiscuous mode [ 517.102929][T24432] nr0: port 1(macsec0) entered blocking state [ 517.188949][T24432] nr0: port 1(macsec0) entered disabled state [ 517.305377][T24432] device macsec0 entered promiscuous mode [ 518.073728][T24469] device syzkaller0 entered promiscuous mode [ 518.808483][T24532] device syzkaller0 entered promiscuous mode [ 520.377213][T24641] ref_ctr_offset mismatch. inode: 0x30a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 521.893294][T24704] device syzkaller0 entered promiscuous mode [ 524.859335][T24766] device aaaaaaaaaaaaaaa entered promiscuous mode [ 525.511725][T24780] device syzkaller0 entered promiscuous mode [ 529.395877][T24874] device syzkaller0 entered promiscuous mode [ 529.429378][T24877] geneve1: tun_chr_ioctl cmd 1074025692 [ 529.438281][T24877] geneve1: tun_chr_ioctl cmd 2147767511 [ 534.188387][T25191] device syzkaller0 entered promiscuous mode [ 534.203596][T25191] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 534.447679][T25211] device syzkaller0 entered promiscuous mode [ 534.648009][T25226] device syzkaller0 entered promiscuous mode [ 534.916587][T25260] device syzkaller0 entered promiscuous mode [ 535.458877][T25284] : renamed from team_slave_1 [ 536.366996][T25302] device syzkaller0 entered promiscuous mode [ 536.814656][T25313] bridge0: port 3(gretap0) entered blocking state [ 536.824626][T25313] bridge0: port 3(gretap0) entered disabled state [ 536.839165][T25313] device gretap0 entered promiscuous mode [ 537.650165][T25352] geneve1: tun_chr_ioctl cmd 1074025692 [ 537.793025][T25350] device syzkaller0 entered promiscuous mode [ 537.914898][T25367] device syzkaller0 entered promiscuous mode [ 546.370339][T25519] device syzkaller0 entered promiscuous mode [ 546.798283][T25552] ref_ctr_offset mismatch. inode: 0x1f0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 548.839026][T25648] syz.1.7057[25648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.839142][T25648] syz.1.7057[25648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.719811][T25717] device syzkaller0 entered promiscuous mode [ 550.869946][T25729] device syzkaller0 entered promiscuous mode [ 551.354738][T25746] ref_ctr_offset mismatch. inode: 0x22d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 552.047506][T25780] device syzkaller0 entered promiscuous mode [ 552.455251][T25796] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 554.224383][T25941] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.231663][T25941] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.239091][T25941] device bridge_slave_0 entered promiscuous mode [ 554.246066][T25941] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.253117][T25941] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.260660][T25941] device bridge_slave_1 entered promiscuous mode [ 554.454538][T25946] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.468640][T25946] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.476214][T25946] device bridge_slave_0 entered promiscuous mode [ 554.491038][T25946] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.498218][T25946] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.529417][T25946] device bridge_slave_1 entered promiscuous mode [ 554.547471][T25941] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.554561][T25941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.561864][T25941] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.568905][T25941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.734608][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.753627][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.792215][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.799958][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.820503][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.828977][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.837203][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.844262][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.852449][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.862080][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.870314][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.877348][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.905646][T25967] erspan0: refused to change device tx_queue_len [ 554.935405][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.944103][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.952277][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.961638][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.986024][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.994794][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.039074][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 555.076096][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 555.129361][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.136432][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.203494][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.220411][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.245765][T25941] device veth0_vlan entered promiscuous mode [ 555.259570][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 555.272209][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 555.303293][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 555.343357][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.350447][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.361252][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.369348][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.378178][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.386005][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.404589][T25941] device veth1_macvtap entered promiscuous mode [ 555.439690][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.454814][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.466084][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.474559][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.482881][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.495685][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.504084][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.519311][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.527706][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.552529][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.568901][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.682146][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.690595][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.700186][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.708520][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.718330][T25946] device veth0_vlan entered promiscuous mode [ 555.728051][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.739081][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.773707][T25946] device veth1_macvtap entered promiscuous mode [ 555.781980][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.801731][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.815781][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.974117][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.990594][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.157620][T26041] device syzkaller0 entered promiscuous mode [ 556.201904][ T9] device macsec0 left promiscuous mode [ 556.212573][ T9] nr0: port 1(macsec0) entered disabled state [ 556.242321][ T9] device bridge_slave_1 left promiscuous mode [ 556.250695][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.261637][ T9] device bridge_slave_0 left promiscuous mode [ 556.272257][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.284465][ T9] device veth1_macvtap left promiscuous mode [ 556.292732][ T9] device veth0_vlan left promiscuous mode [ 556.668017][T26082] device syzkaller0 entered promiscuous mode [ 556.695721][T26085] device syzkaller0 entered promiscuous mode [ 556.953823][T26103] ref_ctr_offset mismatch. inode: 0x3c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 557.602932][T26144] nr0: port 1(macsec0) entered blocking state [ 557.611284][T26144] nr0: port 1(macsec0) entered disabled state [ 557.645109][T26144] device macsec0 entered promiscuous mode [ 558.119165][T26142] device syzkaller0 entered promiscuous mode [ 558.188503][T26153] device syzkaller0 entered promiscuous mode [ 558.975133][T26213] tun0: tun_chr_ioctl cmd 1074025684 [ 558.980805][T26213] tun0: tun_chr_ioctl cmd 1074025677 [ 558.986142][T26213] tun0: linktype set to 1 [ 559.507998][T26226] device syzkaller0 entered promiscuous mode [ 561.263247][T26287] device syzkaller0 entered promiscuous mode [ 561.383232][T26302] syz.3.7210[26302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.383286][T26302] syz.3.7210[26302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.736141][T26329] device bridge0 entered promiscuous mode [ 561.990820][T26329] batadv0: tun_chr_ioctl cmd 1074025677 [ 561.996395][T26329] batadv0: linktype set to 805 [ 563.260233][T26384] device syzkaller0 entered promiscuous mode [ 565.252945][T26480] device sit0 entered promiscuous mode [ 565.951595][T26500] device syzkaller0 entered promiscuous mode [ 566.528746][T26537] device veth0_vlan left promiscuous mode [ 566.539601][T26537] device veth0_vlan entered promiscuous mode [ 566.611326][T26549] sock: sock_set_timeout: `syz.2.7278' (pid 26549) tries to set negative timeout [ 566.787886][T26560] tap0: tun_chr_ioctl cmd 1074025676 [ 566.848940][T26560] tap0: owner set to 0 [ 567.802777][T26619] syz.1.7303[26619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.802853][T26619] syz.1.7303[26619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.848924][T26620] syz.1.7303[26620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.863486][T26620] syz.1.7303[26620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.207956][T26738] bridge0: port 3(gretap0) entered blocking state [ 571.226448][T26738] bridge0: port 3(gretap0) entered disabled state [ 571.234057][T26738] device gretap0 entered promiscuous mode [ 571.240804][T26738] bridge0: port 3(gretap0) entered blocking state [ 571.247285][T26738] bridge0: port 3(gretap0) entered forwarding state [ 571.735373][T26768] device syzkaller0 entered promiscuous mode [ 573.031022][T26838] device syzkaller0 entered promiscuous mode [ 573.279473][T26848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.369413][T26848] device syzkaller0 entered promiscuous mode [ 575.194577][T26944] lo: mtu less than device minimum [ 576.232387][T27038] device wg2 left promiscuous mode [ 576.374250][T27049] device syzkaller0 entered promiscuous mode [ 576.387272][T27047] device wg2 entered promiscuous mode [ 576.574641][T27059] device syzkaller0 entered promiscuous mode [ 577.732838][T27088] device syzkaller0 entered promiscuous mode [ 579.379788][T27177] tun0: tun_chr_ioctl cmd 1074025677 [ 579.385099][T27177] tun0: linktype set to 0 [ 579.947107][T27193] IPv6: pim6reg1: Disabled Multicast RS [ 581.140526][T27227] device lo entered promiscuous mode [ 582.397280][T27263] ref_ctr_offset mismatch. inode: 0x674 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 582.453881][T27272] device sit0 left promiscuous mode [ 582.527268][T27275] device sit0 entered promiscuous mode [ 584.435443][T27401] device syzkaller0 entered promiscuous mode [ 584.543974][T27413] device syzkaller0 entered promiscuous mode [ 585.129880][T27423] device syzkaller0 entered promiscuous mode [ 585.183205][T27439] device syzkaller0 entered promiscuous mode [ 585.401172][T27462] ref_ctr_offset mismatch. inode: 0x6ad offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 585.516272][T27465] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.524501][T27465] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.532101][T27465] device bridge_slave_0 entered promiscuous mode [ 585.547951][T27465] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.555110][T27465] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.562591][T27465] device bridge_slave_1 entered promiscuous mode [ 585.701987][T27465] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.709066][T27465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.716320][T27465] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.723352][T27465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.940650][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.962284][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.970330][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.979589][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.987804][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.994854][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.117279][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.125616][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.132674][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.140899][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.149330][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.173279][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.183093][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.195954][T27465] device veth0_vlan entered promiscuous mode [ 586.204643][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.242278][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.285931][T27465] device veth1_macvtap entered promiscuous mode [ 586.295543][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.309830][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.317348][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.325606][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.337045][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 586.557928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.568889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.698953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.716487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.070593][T27498] tap0: tun_chr_ioctl cmd 2147767520 [ 587.497124][ T7] device gretap0 left promiscuous mode [ 587.507171][ T7] bridge0: port 3(gretap0) entered disabled state [ 587.851501][ T7] device bridge_slave_1 left promiscuous mode [ 587.863804][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.871479][ T7] device bridge_slave_0 left promiscuous mode [ 587.877642][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.885896][ T7] device veth1_macvtap left promiscuous mode [ 588.154862][T27531] device sit0 left promiscuous mode [ 588.514431][T27559] device macsec0 entered promiscuous mode [ 588.665700][T27588] sit0: mtu greater than device maximum [ 588.779192][T27594] ref_ctr_offset mismatch. inode: 0x6c7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 590.150988][T27638] device sit0 left promiscuous mode [ 590.184430][T27638] device sit0 entered promiscuous mode [ 590.237880][T27674] bridge0: port 3(ip6gretap0) entered blocking state [ 590.257340][T27674] bridge0: port 3(ip6gretap0) entered disabled state [ 590.340734][T27674] device ip6gretap0 entered promiscuous mode [ 590.357182][T27674] bridge0: port 3(ip6gretap0) entered blocking state [ 590.364045][T27674] bridge0: port 3(ip6gretap0) entered forwarding state [ 590.420283][T27686] device ip6gretap0 left promiscuous mode [ 590.431357][T27686] bridge0: port 3(ip6gretap0) entered disabled state [ 590.445723][T27688] device veth0_vlan left promiscuous mode [ 590.489279][T27688] device veth0_vlan entered promiscuous mode [ 590.575398][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.583579][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.591127][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 591.246428][T27740] ÿÿÿÿÿÿ: renamed from vlan1 [ 591.509676][T27748] device sit0 entered promiscuous mode [ 591.748137][T27770] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.778639][T27770] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.798272][T27770] device bridge_slave_0 entered promiscuous mode [ 591.838826][T27770] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.866322][T27770] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.897013][T27770] device bridge_slave_1 entered promiscuous mode [ 591.912404][T27791] bridge0: port 3(gretap0) entered blocking state [ 591.919191][T27791] bridge0: port 3(gretap0) entered disabled state [ 591.926039][T27791] device gretap0 entered promiscuous mode [ 591.931924][T27791] bridge0: port 3(gretap0) entered blocking state [ 591.938354][T27791] bridge0: port 3(gretap0) entered forwarding state [ 592.069463][T27770] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.076521][T27770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.083810][T27770] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.090843][T27770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.238714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.258500][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.278881][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.312060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.339334][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.346443][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.437644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.454555][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.461639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.534331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 592.562811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.611838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 592.637687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 592.692443][T27770] device veth0_vlan entered promiscuous mode [ 592.716930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 592.735417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 592.785281][T27770] device veth1_macvtap entered promiscuous mode [ 592.828350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.839231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.856106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 592.888948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 592.897118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 592.957147][T27825] device syzkaller0 entered promiscuous mode [ 592.985796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.048423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 593.109128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 593.168745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.244627][T27871] device syzkaller0 entered promiscuous mode [ 594.309007][T27870] device syzkaller0 entered promiscuous mode [ 595.262759][ T7] device veth0_vlan left promiscuous mode [ 595.934200][T27901] ref_ctr_offset mismatch. inode: 0xbe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 597.483665][T27910] syz.0.7680[27910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.483725][T27910] syz.0.7680[27910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 599.192271][T27965] device syzkaller0 entered promiscuous mode [ 600.201754][T28008] device sit0 left promiscuous mode [ 600.420702][T28017] device sit0 entered promiscuous mode [ 600.667026][T28046] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.674232][T28046] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.780347][T28036] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.787644][T28036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.795548][T28036] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.802676][T28036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.811819][T28036] device bridge0 entered promiscuous mode [ 601.291754][T28075] device syzkaller0 entered promiscuous mode [ 601.298687][T28075] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 601.688971][T28070] device syzkaller0 entered promiscuous mode [ 602.033781][T28102] device syzkaller0 entered promiscuous mode [ 602.733806][T28151] 7B’ç÷ï: renamed from syzkaller0 [ 602.821190][T28152] device syzkaller0 entered promiscuous mode [ 603.319818][T28206] bridge0: port 3(gretap0) entered disabled state [ 603.326313][T28206] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.333452][T28206] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.428851][ T24] audit: type=1400 audit(1781264151.580:173): avc: denied { setattr } for pid=28224 comm="syz.4.7769" path="pipe:[93021]" dev="pipefs" ino=93021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 603.477926][T28227] device syzkaller0 entered promiscuous mode [ 603.846392][T28236] geneve1: tun_chr_ioctl cmd 2148553947 [ 604.086528][T28288] device syzkaller0 entered promiscuous mode [ 604.580819][T28303] device sit0 entered promiscuous mode [ 605.738264][T28370] device syzkaller0 entered promiscuous mode [ 606.317741][T28422] device syzkaller0 entered promiscuous mode [ 606.446140][T28435] device syzkaller0 entered promiscuous mode [ 606.477838][T28440] device syzkaller0 entered promiscuous mode [ 606.775932][T28453] device macsec0 entered promiscuous mode [ 607.161770][T28497] device syzkaller0 entered promiscuous mode [ 607.312894][T28517] device syzkaller0 entered promiscuous mode [ 608.878217][T28575] tap0: tun_chr_ioctl cmd 1074025688 [ 609.016930][T28591] device syzkaller0 entered promiscuous mode [ 609.405133][T28639] device syzkaller0 entered promiscuous mode [ 609.412911][T28639] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 610.199352][T28692] device wg0 entered promiscuous mode [ 611.103803][T28734] device syzkaller0 entered promiscuous mode [ 611.177748][T28737] device syzkaller0 entered promiscuous mode [ 611.610801][T28761] device syzkaller0 entered promiscuous mode [ 612.288227][T28800] geneve1: tun_chr_ioctl cmd 1074812118 [ 613.065780][T28872] device veth0_vlan left promiscuous mode [ 613.104189][T28872] device veth0_vlan entered promiscuous mode [ 613.158736][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.167130][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.185822][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.615907][T29004] syz.2.7996[29004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.615958][T29004] syz.2.7996[29004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.946128][T29117] device sit0 entered promiscuous mode [ 619.040663][T29169] nr0: port 1(macsec0) entered blocking state [ 619.047672][T29169] nr0: port 1(macsec0) entered disabled state [ 620.030959][T29218] device syzkaller0 entered promiscuous mode [ 621.763485][T29296] device syzkaller0 entered promiscuous mode [ 622.057683][T29301] Ÿë: port 1(veth0_to_team) entered blocking state [ 622.064388][T29301] Ÿë: port 1(veth0_to_team) entered disabled state [ 622.071547][T29301] device veth0_to_team entered promiscuous mode [ 622.375018][T29327] device syzkaller0 entered promiscuous mode [ 622.512768][T29346] device sit0 entered promiscuous mode [ 624.234671][T29425] device wg2 entered promiscuous mode [ 624.584231][T29438] device sit0 left promiscuous mode [ 624.609539][T29437] device sit0 entered promiscuous mode [ 625.049692][T29433] device pim6reg1 entered promiscuous mode [ 625.861061][T29502] device sit0 left promiscuous mode [ 626.468751][T29508] device sit0 entered promiscuous mode [ 626.669883][T29519] device veth0_vlan left promiscuous mode [ 626.748375][T29519] device veth0_vlan entered promiscuous mode [ 627.132752][T29546] device veth0_vlan left promiscuous mode [ 627.172951][T29546] device veth0_vlan entered promiscuous mode [ 627.312967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.323628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.331296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 628.224680][T29607] device syzkaller0 entered promiscuous mode [ 630.108872][T29698] device veth1_macvtap left promiscuous mode [ 630.770063][T29740] device syzkaller0 entered promiscuous mode [ 630.860870][T29739] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 631.088848][T29739] device syzkaller0 entered promiscuous mode [ 636.957943][T29905] device syzkaller0 entered promiscuous mode [ 637.312112][T29933] device syz_tun entered promiscuous mode [ 637.610935][T29948] device wg2 left promiscuous mode [ 637.831053][T29971] device syzkaller0 entered promiscuous mode [ 637.837685][T29973] device lo entered promiscuous mode [ 638.148633][T29994] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.155850][T29994] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.194094][T29994] device bridge_slave_1 left promiscuous mode [ 638.200646][T29994] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.208340][T29994] device bridge_slave_0 left promiscuous mode [ 638.214835][T29994] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.319599][T30036] device syzkaller0 entered promiscuous mode [ 642.517827][T30174] device syzkaller0 entered promiscuous mode [ 642.689114][T30186] device veth0_vlan left promiscuous mode [ 642.699181][T30186] device veth0_vlan entered promiscuous mode [ 642.971422][T30202] device syzkaller0 entered promiscuous mode [ 643.261500][T30209] bridge0: port 3(gretap0) entered blocking state [ 643.267967][T30209] bridge0: port 3(gretap0) entered disabled state [ 643.275124][T30209] device gretap0 entered promiscuous mode [ 643.281282][T30209] bridge0: port 3(gretap0) entered blocking state [ 643.287714][T30209] bridge0: port 3(gretap0) entered forwarding state [ 644.191195][T30260] syz.3.8350[30260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.191252][T30260] syz.3.8350[30260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.935420][T30411] device syzkaller0 entered promiscuous mode [ 647.341436][T30443] device pim6reg1 entered promiscuous mode [ 647.400896][T30453] bridge0: port 4(syz_tun) entered blocking state [ 647.411293][T30453] bridge0: port 4(syz_tun) entered disabled state [ 647.447659][T30462] device pim6reg1 left promiscuous mode [ 647.906148][T30502] ref_ctr_offset mismatch. inode: 0xa98 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 651.294072][T30634] device syzkaller0 entered promiscuous mode [ 651.898311][T30656] device syzkaller0 entered promiscuous mode [ 652.311370][T30674] device wg2 entered promiscuous mode [ 652.427597][T30679] device syzkaller0 entered promiscuous mode [ 652.480150][T30678] syzkaller0: create flow: hash 1985525904 index 1 [ 652.863299][T30692] -1: renamed from syzkaller0 [ 653.335650][T30677] syzkaller0: delete flow: hash 1985525904 index 1 [ 653.525661][T30700] bridge0: port 4(ip6gretap0) entered blocking state [ 653.532875][T30700] bridge0: port 4(ip6gretap0) entered disabled state [ 653.546926][T30700] device ip6gretap0 entered promiscuous mode [ 653.554100][T30700] bridge0: port 4(ip6gretap0) entered blocking state [ 653.560941][T30700] bridge0: port 4(ip6gretap0) entered forwarding state [ 653.678111][T30710] device ip6gretap0 left promiscuous mode [ 653.684322][T30710] bridge0: port 4(ip6gretap0) entered disabled state [ 653.694742][T30711] tap0: tun_chr_ioctl cmd 1074025673 [ 654.001110][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 654.681417][T30746] device syzkaller0 entered promiscuous mode [ 654.951961][T30777] device syzkaller0 entered promiscuous mode [ 655.380142][T30798] syz.2.8504[30798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.380230][T30798] syz.2.8504[30798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.508739][T30798] syz.2.8504[30798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.521844][T30798] syz.2.8504[30798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 657.236186][T30838] device syzkaller0 entered promiscuous mode [ 658.067734][T30889] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.074915][T30889] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.188709][T30889] device bridge0 left promiscuous mode [ 659.404943][T30929] device syzkaller0 entered promiscuous mode [ 659.554024][T30934] device pim6reg1 entered promiscuous mode [ 660.053503][T30979] geneve1: tun_chr_ioctl cmd 2148553947 [ 661.594255][T31034] bridge0: port 3(gretap0) entered disabled state [ 661.600809][T31034] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.607964][T31034] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.724902][T30893] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 661.751523][T30893] CPU: 0 PID: 30893 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 661.760385][T30893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.770428][T30893] Call Trace: [ 661.773806][T30893] __dump_stack+0x21/0x24 [ 661.778128][T30893] dump_stack_lvl+0x1a7/0x208 [ 661.782801][T30893] ? show_regs_print_info+0x18/0x18 [ 661.788029][T30893] ? ___ratelimit+0x3de/0x560 [ 661.792767][T30893] ? _raw_spin_lock+0x94/0xf0 [ 661.797435][T30893] dump_stack+0x15/0x1c [ 661.801580][T30893] dump_header+0xdd/0x650 [ 661.805970][T30893] oom_kill_process+0x1fa/0x2c0 [ 661.810806][T30893] out_of_memory+0x93f/0xd20 [ 661.815372][T30893] ? unregister_oom_notifier+0x20/0x20 [ 661.820809][T30893] ? mutex_lock_killable+0x92/0xf0 [ 661.825897][T30893] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 661.832438][T30893] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 661.837963][T30893] ? mem_cgroup_oom_trylock+0x350/0x350 [ 661.843486][T30893] ? _raw_spin_trylock_bh+0x150/0x150 [ 661.848835][T30893] ? _raw_spin_unlock+0x4d/0x70 [ 661.853664][T30893] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 661.859187][T30893] try_charge+0xf69/0x1500 [ 661.863583][T30893] ? __memcg_kmem_charge+0x150/0x150 [ 661.868923][T30893] ? percpu_counter_add_batch+0x13c/0x160 [ 661.874627][T30893] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 661.880150][T30893] __mem_cgroup_charge+0x14c/0x6d0 [ 661.885289][T30893] shmem_add_to_page_cache+0x574/0xe30 [ 661.890732][T30893] ? shmem_alloc_page+0x380/0x380 [ 661.895740][T30893] ? _raw_spin_lock_irqsave+0x130/0x130 [ 661.901313][T30893] ? find_lock_entry+0x4b/0x200 [ 661.906146][T30893] shmem_getpage_gfp+0x8eb/0x2120 [ 661.911155][T30893] shmem_write_begin+0xce/0x1b0 [ 661.915988][T30893] generic_perform_write+0x2ce/0x540 [ 661.921329][T30893] ? atime_needs_update+0x5b0/0x5b0 [ 661.926511][T30893] ? grab_cache_page_write_begin+0xb0/0xb0 [ 661.932297][T30893] ? file_remove_privs+0x5b0/0x5b0 [ 661.937435][T30893] ? __kasan_check_write+0x14/0x20 [ 661.942526][T30893] ? down_write+0xb2/0x120 [ 661.946925][T30893] __generic_file_write_iter+0x24b/0x480 [ 661.952623][T30893] ? generic_write_checks+0x3d4/0x480 [ 661.957976][T30893] generic_file_write_iter+0xa9/0x1d0 [ 661.963327][T30893] __kernel_write+0x535/0x910 [ 661.967983][T30893] ? vfs_read+0xa60/0xa60 [ 661.972368][T30893] ? populate_vma_page_range+0xf0/0xf0 [ 661.977847][T30893] ? cgroup_freezing+0x86/0xb0 [ 661.982632][T30893] ? freezing_slow_path+0x10a/0x150 [ 661.987849][T30893] dump_emit+0x246/0x370 [ 661.992075][T30893] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 661.997514][T30893] ? freezing_slow_path+0x10a/0x150 [ 662.002688][T30893] dump_user_range+0x6a/0x1a0 [ 662.007341][T30893] elf_core_dump+0x2866/0x2cc0 [ 662.012085][T30893] ? load_elf_binary+0x28e0/0x28e0 [ 662.017255][T30893] ? __fsnotify_parent+0x6db/0x7c0 [ 662.022357][T30893] ? do_truncate+0x1c6/0x240 [ 662.026924][T30893] ? putname+0xfe/0x150 [ 662.031058][T30893] ? __kasan_check_read+0x11/0x20 [ 662.036060][T30893] ? cgroup_freezing+0x86/0xb0 [ 662.040803][T30893] ? freezing_slow_path+0x10a/0x150 [ 662.045979][T30893] do_coredump+0x1ba3/0x28e0 [ 662.050554][T30893] ? simple_acl_create+0x1c0/0x1c0 [ 662.055736][T30893] ? debug_smp_processor_id+0x17/0x20 [ 662.061104][T30893] ? kmem_cache_free+0x100/0x2d0 [ 662.066018][T30893] ? ____kasan_slab_free+0x130/0x160 [ 662.071323][T30893] ? get_signal+0xb98/0x12e0 [ 662.075892][T30893] ? kmem_cache_free+0x100/0x2d0 [ 662.080809][T30893] get_signal+0xf23/0x12e0 [ 662.085247][T30893] arch_do_signal_or_restart+0xe2/0x11d0 [ 662.090864][T30893] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 662.096512][T30893] ? bad_area+0x6a/0x80 [ 662.100652][T30893] ? do_user_addr_fault+0xd75/0xde0 [ 662.105870][T30893] ? switch_fpu_return+0x19c/0x330 [ 662.110961][T30893] exit_to_user_mode_loop+0xa2/0xe0 [ 662.116135][T30893] exit_to_user_mode_prepare+0x76/0xa0 [ 662.121571][T30893] irqentry_exit_to_user_mode+0x9/0x10 [ 662.127010][T30893] irqentry_exit+0x12/0x60 [ 662.131471][T30893] exc_page_fault+0x67/0xc0 [ 662.135953][T30893] ? asm_exc_page_fault+0x8/0x30 [ 662.140869][T30893] asm_exc_page_fault+0x1e/0x30 [ 662.145692][T30893] RIP: 0033:0xe8 [ 662.149222][T30893] Code: Unable to access opcode bytes at RIP 0xbe. [ 662.155699][T30893] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 662.161746][T30893] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 662.169692][T30893] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 662.177639][T30893] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 662.185589][T30893] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 662.193536][T30893] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 662.220085][T30893] memory: usage 307200kB, limit 307200kB, failcnt 34516 [ 662.227233][T30893] memory+swap: usage 426820kB, limit 9007199254740988kB, failcnt 0 [ 662.235517][T30893] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 662.242972][T30893] Memory cgroup stats for /syz4: [ 662.243088][T30893] anon 405504 [ 662.243088][T30893] file 308723712 [ 662.243088][T30893] kernel_stack 0 [ 662.243088][T30893] percpu 0 [ 662.243088][T30893] sock 0 [ 662.243088][T30893] shmem 308723712 [ 662.243088][T30893] file_mapped 135168 [ 662.243088][T30893] file_dirty 0 [ 662.243088][T30893] file_writeback 0 [ 662.243088][T30893] anon_thp 0 [ 662.243088][T30893] inactive_anon 313442304 [ 662.243088][T30893] active_anon 405504 [ 662.243088][T30893] inactive_file 16384 [ 662.243088][T30893] active_file 77824 [ 662.243088][T30893] unevictable 0 [ 662.243088][T30893] slab_reclaimable 0 [ 662.243088][T30893] slab_unreclaimable 0 [ 662.243088][T30893] slab 0 [ 662.243088][T30893] workingset_refault_anon 66 [ 662.243088][T30893] workingset_refault_file 6765 [ 662.243088][T30893] workingset_activate_anon 0 [ 662.243088][T30893] workingset_activate_file 2805 [ 662.243088][T30893] workingset_restore_anon 0 [ 662.243088][T30893] workingset_restore_file 1947 [ 662.274431][T31053] device syzkaller0 entered promiscuous mode [ 662.338269][T30893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30853,uid=0 [ 662.358048][T30893] Memory cgroup out of memory: Killed process 30853 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:45696kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 662.375977][ T27] oom_reaper: reaped process 30853 (syz.4.8517), now anon-rss:0kB, file-rss:45632kB, shmem-rss:0kB [ 662.409995][T30871] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 662.441435][T30871] CPU: 1 PID: 30871 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 662.450287][T30871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.460325][T30871] Call Trace: [ 662.463610][T30871] __dump_stack+0x21/0x24 [ 662.467922][T30871] dump_stack_lvl+0x1a7/0x208 [ 662.472583][T30871] ? show_regs_print_info+0x18/0x18 [ 662.477773][T30871] ? ___ratelimit+0x3de/0x560 [ 662.482437][T30871] ? __kasan_check_write+0x14/0x20 [ 662.487533][T30871] ? _raw_spin_lock+0x94/0xf0 [ 662.492197][T30871] dump_stack+0x15/0x1c [ 662.496335][T30871] dump_header+0xdd/0x650 [ 662.500653][T30871] oom_kill_process+0x1fa/0x2c0 [ 662.505487][T30871] out_of_memory+0x93f/0xd20 [ 662.510064][T30871] ? unregister_oom_notifier+0x20/0x20 [ 662.515506][T30871] ? mutex_lock_killable+0xdf/0xf0 [ 662.520622][T30871] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 662.527117][T30871] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 662.532656][T30871] ? mem_cgroup_oom_trylock+0x350/0x350 [ 662.538193][T30871] ? _raw_spin_trylock_bh+0x150/0x150 [ 662.543561][T30871] ? _raw_spin_unlock+0x4d/0x70 [ 662.548398][T30871] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 662.553933][T30871] try_charge+0xf69/0x1500 [ 662.558344][T30871] ? __memcg_kmem_charge+0x150/0x150 [ 662.563613][T30871] ? percpu_counter_add_batch+0x13c/0x160 [ 662.569321][T30871] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 662.575113][T30871] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 662.580642][T30871] __mem_cgroup_charge+0x14c/0x6d0 [ 662.585742][T30871] shmem_add_to_page_cache+0x574/0xe30 [ 662.591189][T30871] ? shmem_alloc_page+0x380/0x380 [ 662.596201][T30871] ? _raw_spin_lock_irqsave+0x130/0x130 [ 662.601735][T30871] ? find_lock_entry+0x4b/0x200 [ 662.606576][T30871] shmem_getpage_gfp+0x8eb/0x2120 [ 662.611596][T30871] shmem_write_begin+0xce/0x1b0 [ 662.616439][T30871] generic_perform_write+0x2ce/0x540 [ 662.621709][T30871] ? atime_needs_update+0x5b0/0x5b0 [ 662.626895][T30871] ? grab_cache_page_write_begin+0xb0/0xb0 [ 662.632687][T30871] ? file_remove_privs+0x5b0/0x5b0 [ 662.637784][T30871] ? __kasan_check_write+0x14/0x20 [ 662.642881][T30871] ? down_write+0xb2/0x120 [ 662.647283][T30871] __generic_file_write_iter+0x24b/0x480 [ 662.652900][T30871] ? generic_write_checks+0x3d4/0x480 [ 662.658260][T30871] generic_file_write_iter+0xa9/0x1d0 [ 662.663628][T30871] __kernel_write+0x535/0x910 [ 662.668295][T30871] ? vfs_read+0xa60/0xa60 [ 662.672613][T30871] ? populate_vma_page_range+0xf0/0xf0 [ 662.678061][T30871] ? cgroup_freezing+0x86/0xb0 [ 662.682809][T30871] ? freezing_slow_path+0x10a/0x150 [ 662.687994][T30871] dump_emit+0x246/0x370 [ 662.692225][T30871] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 662.697669][T30871] ? freezing_slow_path+0x10a/0x150 [ 662.702857][T30871] dump_user_range+0x6a/0x1a0 [ 662.707519][T30871] elf_core_dump+0x2866/0x2cc0 [ 662.712273][T30871] ? load_elf_binary+0x28e0/0x28e0 [ 662.717369][T30871] ? __fsnotify_parent+0x6db/0x7c0 [ 662.722481][T30871] ? do_truncate+0x1c6/0x240 [ 662.727057][T30871] ? putname+0xfe/0x150 [ 662.731201][T30871] ? __kasan_check_read+0x11/0x20 [ 662.736216][T30871] ? cgroup_freezing+0x86/0xb0 [ 662.740968][T30871] ? freezing_slow_path+0x10a/0x150 [ 662.746156][T30871] do_coredump+0x1ba3/0x28e0 [ 662.750737][T30871] ? simple_acl_create+0x1c0/0x1c0 [ 662.755836][T30871] ? debug_smp_processor_id+0x17/0x20 [ 662.761283][T30871] ? kmem_cache_free+0x100/0x2d0 [ 662.766203][T30871] ? ____kasan_slab_free+0x130/0x160 [ 662.771479][T30871] ? get_signal+0xb98/0x12e0 [ 662.776055][T30871] ? kmem_cache_free+0x100/0x2d0 [ 662.780982][T30871] get_signal+0xf23/0x12e0 [ 662.785393][T30871] arch_do_signal_or_restart+0xe2/0x11d0 [ 662.791121][T30871] ? down_read_trylock+0x106/0x160 [ 662.796224][T30871] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 662.801846][T30871] ? bad_area+0x6a/0x80 [ 662.805989][T30871] ? do_user_addr_fault+0xd75/0xde0 [ 662.811174][T30871] ? switch_fpu_return+0x19c/0x330 [ 662.816275][T30871] exit_to_user_mode_loop+0xa2/0xe0 [ 662.821459][T30871] exit_to_user_mode_prepare+0x76/0xa0 [ 662.826923][T30871] irqentry_exit_to_user_mode+0x9/0x10 [ 662.832366][T30871] irqentry_exit+0x12/0x60 [ 662.836767][T30871] exc_page_fault+0x67/0xc0 [ 662.841258][T30871] ? asm_exc_page_fault+0x8/0x30 [ 662.846183][T30871] asm_exc_page_fault+0x1e/0x30 [ 662.851014][T30871] RIP: 0033:0xe8 [ 662.854551][T30871] Code: Unable to access opcode bytes at RIP 0xbe. [ 662.861037][T30871] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 662.867093][T30871] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 662.875053][T30871] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 662.883014][T30871] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 662.890973][T30871] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 662.898930][T30871] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 662.933562][T30871] memory: usage 307200kB, limit 307200kB, failcnt 34821 [ 662.950723][T30871] memory+swap: usage 419620kB, limit 9007199254740988kB, failcnt 0 [ 662.960919][T30871] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 662.979392][T30871] Memory cgroup stats for /syz4: [ 662.979494][T30871] anon 270336 [ 662.979494][T30871] file 299802624 [ 662.979494][T30871] kernel_stack 0 [ 662.979494][T30871] percpu 0 [ 662.979494][T30871] sock 0 [ 662.979494][T30871] shmem 299802624 [ 662.979494][T30871] file_mapped 135168 [ 662.979494][T30871] file_dirty 0 [ 662.979494][T30871] file_writeback 0 [ 662.979494][T30871] anon_thp 0 [ 662.979494][T30871] inactive_anon 304607232 [ 662.979494][T30871] active_anon 946176 [ 662.979494][T30871] inactive_file 16384 [ 662.979494][T30871] active_file 77824 [ 662.979494][T30871] unevictable 0 [ 662.979494][T30871] slab_reclaimable 0 [ 662.979494][T30871] slab_unreclaimable 0 [ 662.979494][T30871] slab 0 [ 662.979494][T30871] workingset_refault_anon 66 [ 662.979494][T30871] workingset_refault_file 6765 [ 662.979494][T30871] workingset_activate_anon 0 [ 662.979494][T30871] workingset_activate_file 2805 [ 662.979494][T30871] workingset_restore_anon 0 [ 662.979494][T30871] workingset_restore_file 1947 [ 663.095715][T30871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30846,uid=0 [ 663.110796][T30871] Memory cgroup out of memory: Killed process 30846 (syz.4.8517) total-vm:90316kB, anon-rss:1260kB, file-rss:45696kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 664.076234][T30859] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 664.133217][T31101] device syzkaller0 entered promiscuous mode [ 664.142638][T30859] CPU: 0 PID: 30859 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 664.151489][T30859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.161533][T30859] Call Trace: [ 664.164819][T30859] __dump_stack+0x21/0x24 [ 664.169145][T30859] dump_stack_lvl+0x1a7/0x208 [ 664.173817][T30859] ? show_regs_print_info+0x18/0x18 [ 664.179008][T30859] ? ___ratelimit+0x3de/0x560 [ 664.183680][T30859] ? __kasan_check_write+0x14/0x20 [ 664.188782][T30859] ? _raw_spin_lock+0x94/0xf0 [ 664.193451][T30859] dump_stack+0x15/0x1c [ 664.197592][T30859] dump_header+0xdd/0x650 [ 664.201914][T30859] oom_kill_process+0x1fa/0x2c0 [ 664.206749][T30859] out_of_memory+0x93f/0xd20 [ 664.211338][T30859] ? unregister_oom_notifier+0x20/0x20 [ 664.216784][T30859] ? mutex_lock_killable+0x92/0xf0 [ 664.221883][T30859] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 664.228374][T30859] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 664.233909][T30859] ? mem_cgroup_oom_trylock+0x350/0x350 [ 664.239469][T30859] ? _raw_spin_trylock_bh+0x150/0x150 [ 664.244836][T30859] ? _raw_spin_unlock+0x4d/0x70 [ 664.249686][T30859] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 664.255227][T30859] try_charge+0xf69/0x1500 [ 664.259643][T30859] ? __memcg_kmem_charge+0x150/0x150 [ 664.264916][T30859] ? percpu_counter_add_batch+0x13c/0x160 [ 664.270630][T30859] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 664.276163][T30859] __mem_cgroup_charge+0x14c/0x6d0 [ 664.281266][T30859] shmem_add_to_page_cache+0x574/0xe30 [ 664.286716][T30859] ? shmem_alloc_page+0x380/0x380 [ 664.291733][T30859] ? _raw_spin_lock_irqsave+0x130/0x130 [ 664.297264][T30859] ? find_lock_entry+0x4b/0x200 [ 664.302102][T30859] shmem_getpage_gfp+0x8eb/0x2120 [ 664.307118][T30859] shmem_write_begin+0xce/0x1b0 [ 664.311957][T30859] generic_perform_write+0x2ce/0x540 [ 664.317234][T30859] ? atime_needs_update+0x5b0/0x5b0 [ 664.322420][T30859] ? grab_cache_page_write_begin+0xb0/0xb0 [ 664.328218][T30859] ? file_remove_privs+0x5b0/0x5b0 [ 664.333314][T30859] ? __kasan_check_write+0x14/0x20 [ 664.338411][T30859] ? down_write+0xb2/0x120 [ 664.342812][T30859] __generic_file_write_iter+0x24b/0x480 [ 664.348428][T30859] ? generic_write_checks+0x3d4/0x480 [ 664.353792][T30859] generic_file_write_iter+0xa9/0x1d0 [ 664.359148][T30859] __kernel_write+0x535/0x910 [ 664.363813][T30859] ? vfs_read+0xa60/0xa60 [ 664.368131][T30859] ? populate_vma_page_range+0xf0/0xf0 [ 664.373575][T30859] ? cgroup_freezing+0x86/0xb0 [ 664.378324][T30859] ? freezing_slow_path+0x10a/0x150 [ 664.383509][T30859] dump_emit+0x246/0x370 [ 664.387737][T30859] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 664.393183][T30859] dump_user_range+0x6a/0x1a0 [ 664.397850][T30859] elf_core_dump+0x2866/0x2cc0 [ 664.402602][T30859] ? load_elf_binary+0x28e0/0x28e0 [ 664.407699][T30859] ? __fsnotify_parent+0x6db/0x7c0 [ 664.412812][T30859] ? do_truncate+0x1c6/0x240 [ 664.417386][T30859] ? putname+0xfe/0x150 [ 664.421536][T30859] ? __kasan_check_read+0x11/0x20 [ 664.426548][T30859] ? cgroup_freezing+0x86/0xb0 [ 664.431297][T30859] ? freezing_slow_path+0x10a/0x150 [ 664.436489][T30859] do_coredump+0x1ba3/0x28e0 [ 664.441068][T30859] ? simple_acl_create+0x1c0/0x1c0 [ 664.446166][T30859] ? debug_smp_processor_id+0x17/0x20 [ 664.451528][T30859] ? kmem_cache_free+0x100/0x2d0 [ 664.456454][T30859] ? ____kasan_slab_free+0x130/0x160 [ 664.461730][T30859] ? get_signal+0xb98/0x12e0 [ 664.466304][T30859] ? kmem_cache_free+0x100/0x2d0 [ 664.471229][T30859] get_signal+0xf23/0x12e0 [ 664.475640][T30859] arch_do_signal_or_restart+0xe2/0x11d0 [ 664.481259][T30859] ? down_read_trylock+0x106/0x160 [ 664.486363][T30859] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 664.491979][T30859] ? bad_area+0x6a/0x80 [ 664.496122][T30859] ? do_user_addr_fault+0xd75/0xde0 [ 664.501313][T30859] ? switch_fpu_return+0x19c/0x330 [ 664.506417][T30859] exit_to_user_mode_loop+0xa2/0xe0 [ 664.511605][T30859] exit_to_user_mode_prepare+0x76/0xa0 [ 664.517054][T30859] irqentry_exit_to_user_mode+0x9/0x10 [ 664.522502][T30859] irqentry_exit+0x12/0x60 [ 664.526906][T30859] exc_page_fault+0x67/0xc0 [ 664.531393][T30859] ? asm_exc_page_fault+0x8/0x30 [ 664.536316][T30859] asm_exc_page_fault+0x1e/0x30 [ 664.541151][T30859] RIP: 0033:0xe8 [ 664.544690][T30859] Code: Unable to access opcode bytes at RIP 0xbe. [ 664.551172][T30859] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 664.557227][T30859] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 664.565185][T30859] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 664.573148][T30859] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 664.581104][T30859] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 664.589064][T30859] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 664.604083][T30859] memory: usage 307200kB, limit 307200kB, failcnt 36806 [ 664.611110][T30859] memory+swap: usage 423860kB, limit 9007199254740988kB, failcnt 0 [ 664.619189][T30859] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 664.626097][T30859] Memory cgroup stats for /syz4: [ 664.626207][T30859] anon 270336 [ 664.626207][T30859] file 305614848 [ 664.626207][T30859] kernel_stack 0 [ 664.626207][T30859] percpu 0 [ 664.626207][T30859] sock 0 [ 664.626207][T30859] shmem 305614848 [ 664.626207][T30859] file_mapped 135168 [ 664.626207][T30859] file_dirty 0 [ 664.626207][T30859] file_writeback 0 [ 664.626207][T30859] anon_thp 0 [ 664.626207][T30859] inactive_anon 312340480 [ 664.626207][T30859] active_anon 2027520 [ 664.626207][T30859] inactive_file 16384 [ 664.626207][T30859] active_file 77824 [ 664.626207][T30859] unevictable 0 [ 664.626207][T30859] slab_reclaimable 0 [ 664.626207][T30859] slab_unreclaimable 0 [ 664.626207][T30859] slab 0 [ 664.626207][T30859] workingset_refault_anon 66 [ 664.626207][T30859] workingset_refault_file 6765 [ 664.626207][T30859] workingset_activate_anon 0 [ 664.626207][T30859] workingset_activate_file 2805 [ 664.626207][T30859] workingset_restore_anon 0 [ 664.626207][T30859] workingset_restore_file 1947 [ 664.726920][T30859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30851,uid=0 [ 664.747982][T30859] Memory cgroup out of memory: Killed process 30851 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:45696kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 664.822965][T30868] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 664.928050][T31113] device syzkaller0 entered promiscuous mode [ 665.224690][T30868] CPU: 1 PID: 30868 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 665.233563][T30868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.243612][T30868] Call Trace: [ 665.246898][T30868] __dump_stack+0x21/0x24 [ 665.251221][T30868] dump_stack_lvl+0x1a7/0x208 [ 665.255882][T30868] ? show_regs_print_info+0x18/0x18 [ 665.261068][T30868] ? ___ratelimit+0x3de/0x560 [ 665.265727][T30868] ? __kasan_check_write+0x14/0x20 [ 665.270824][T30868] ? _raw_spin_lock+0x94/0xf0 [ 665.275489][T30868] dump_stack+0x15/0x1c [ 665.279629][T30868] dump_header+0xdd/0x650 [ 665.283938][T30868] oom_kill_process+0x1fa/0x2c0 [ 665.288765][T30868] out_of_memory+0x93f/0xd20 [ 665.293332][T30868] ? unregister_oom_notifier+0x20/0x20 [ 665.298766][T30868] ? mutex_lock_killable+0xdf/0xf0 [ 665.303852][T30868] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 665.310331][T30868] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 665.315855][T30868] ? mem_cgroup_oom_trylock+0x350/0x350 [ 665.321386][T30868] ? _raw_spin_trylock_bh+0x150/0x150 [ 665.326740][T30868] ? _raw_spin_unlock+0x4d/0x70 [ 665.331574][T30868] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 665.337101][T30868] try_charge+0xf69/0x1500 [ 665.341502][T30868] ? __memcg_kmem_charge+0x150/0x150 [ 665.346764][T30868] ? percpu_counter_add_batch+0x13c/0x160 [ 665.352460][T30868] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 665.357982][T30868] __mem_cgroup_charge+0x14c/0x6d0 [ 665.363077][T30868] shmem_add_to_page_cache+0x574/0xe30 [ 665.368518][T30868] ? shmem_alloc_page+0x380/0x380 [ 665.373543][T30868] ? _raw_spin_lock_irqsave+0x130/0x130 [ 665.379066][T30868] ? find_lock_entry+0x4b/0x200 [ 665.383894][T30868] shmem_getpage_gfp+0x8eb/0x2120 [ 665.388899][T30868] shmem_write_begin+0xce/0x1b0 [ 665.393729][T30868] generic_perform_write+0x2ce/0x540 [ 665.398998][T30868] ? atime_needs_update+0x5b0/0x5b0 [ 665.404177][T30868] ? grab_cache_page_write_begin+0xb0/0xb0 [ 665.409961][T30868] ? file_remove_privs+0x5b0/0x5b0 [ 665.415049][T30868] ? __kasan_check_write+0x14/0x20 [ 665.420135][T30868] ? down_write+0xb2/0x120 [ 665.424539][T30868] __generic_file_write_iter+0x24b/0x480 [ 665.430150][T30868] ? generic_write_checks+0x3d4/0x480 [ 665.435504][T30868] generic_file_write_iter+0xa9/0x1d0 [ 665.440853][T30868] __kernel_write+0x535/0x910 [ 665.445508][T30868] ? vfs_read+0xa60/0xa60 [ 665.449816][T30868] ? populate_vma_page_range+0xf0/0xf0 [ 665.455252][T30868] ? cgroup_freezing+0x86/0xb0 [ 665.459992][T30868] ? freezing_slow_path+0x10a/0x150 [ 665.465169][T30868] dump_emit+0x246/0x370 [ 665.469391][T30868] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 665.474827][T30868] ? dump_skip+0x2b1/0x300 [ 665.479218][T30868] ? dump_user_range+0xbd/0x1a0 [ 665.484048][T30868] dump_user_range+0x6a/0x1a0 [ 665.488703][T30868] elf_core_dump+0x2866/0x2cc0 [ 665.493448][T30868] ? load_elf_binary+0x28e0/0x28e0 [ 665.498537][T30868] ? __fsnotify_parent+0x6db/0x7c0 [ 665.503639][T30868] ? do_truncate+0x1c6/0x240 [ 665.508203][T30868] ? putname+0xfe/0x150 [ 665.512339][T30868] ? __kasan_check_read+0x11/0x20 [ 665.517345][T30868] ? cgroup_freezing+0x86/0xb0 [ 665.522086][T30868] ? freezing_slow_path+0x10a/0x150 [ 665.527264][T30868] do_coredump+0x1ba3/0x28e0 [ 665.531834][T30868] ? simple_acl_create+0x1c0/0x1c0 [ 665.536926][T30868] ? debug_smp_processor_id+0x17/0x20 [ 665.542281][T30868] ? kmem_cache_free+0x100/0x2d0 [ 665.547202][T30868] ? ____kasan_slab_free+0x130/0x160 [ 665.552471][T30868] ? get_signal+0xb98/0x12e0 [ 665.557038][T30868] ? kmem_cache_free+0x100/0x2d0 [ 665.562042][T30868] get_signal+0xf23/0x12e0 [ 665.566441][T30868] arch_do_signal_or_restart+0xe2/0x11d0 [ 665.572052][T30868] ? down_read_trylock+0x106/0x160 [ 665.577137][T30868] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 665.582743][T30868] ? bad_area+0x6a/0x80 [ 665.586876][T30868] ? do_user_addr_fault+0xd75/0xde0 [ 665.592051][T30868] ? switch_fpu_return+0x19c/0x330 [ 665.597171][T30868] exit_to_user_mode_loop+0xa2/0xe0 [ 665.602345][T30868] exit_to_user_mode_prepare+0x76/0xa0 [ 665.607782][T30868] irqentry_exit_to_user_mode+0x9/0x10 [ 665.613218][T30868] irqentry_exit+0x12/0x60 [ 665.617606][T30868] exc_page_fault+0x67/0xc0 [ 665.622082][T30868] ? asm_exc_page_fault+0x8/0x30 [ 665.626997][T30868] asm_exc_page_fault+0x1e/0x30 [ 665.631822][T30868] RIP: 0033:0xe8 [ 665.635349][T30868] Code: Unable to access opcode bytes at RIP 0xbe. [ 665.641821][T30868] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 665.647864][T30868] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 665.655817][T30868] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 665.663767][T30868] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 665.671717][T30868] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 665.679756][T30868] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 665.701477][T30868] memory: usage 307200kB, limit 307200kB, failcnt 38121 [ 665.708468][T30868] memory+swap: usage 425936kB, limit 9007199254740988kB, failcnt 0 [ 665.716759][T30868] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 665.730892][T30868] Memory cgroup stats for /syz4: [ 665.731008][T30868] anon 135168 [ 665.731008][T30868] file 306966528 [ 665.731008][T30868] kernel_stack 0 [ 665.731008][T30868] percpu 0 [ 665.731008][T30868] sock 0 [ 665.731008][T30868] shmem 306966528 [ 665.731008][T30868] file_mapped 135168 [ 665.731008][T30868] file_dirty 0 [ 665.731008][T30868] file_writeback 0 [ 665.731008][T30868] anon_thp 0 [ 665.731008][T30868] inactive_anon 311287808 [ 665.731008][T30868] active_anon 2162688 [ 665.731008][T30868] inactive_file 16384 [ 665.731008][T30868] active_file 77824 [ 665.731008][T30868] unevictable 0 [ 665.731008][T30868] slab_reclaimable 0 [ 665.731008][T30868] slab_unreclaimable 0 [ 665.731008][T30868] slab 0 [ 665.731008][T30868] workingset_refault_anon 66 [ 665.731008][T30868] workingset_refault_file 6765 [ 665.731008][T30868] workingset_activate_anon 0 [ 665.731008][T30868] workingset_activate_file 2805 [ 665.731008][T30868] workingset_restore_anon 0 [ 665.731008][T30868] workingset_restore_file 1947 [ 665.901133][T30868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30852,uid=0 [ 665.928619][T30868] Memory cgroup out of memory: Killed process 30852 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:45696kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 666.032288][ T24] audit: type=1400 audit(1781264214.180:174): avc: denied { create } for pid=31114 comm="syz.1.8589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 666.199104][T30892] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 666.229456][T30892] CPU: 0 PID: 30892 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 666.238333][T30892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.248384][T30892] Call Trace: [ 666.251676][T30892] __dump_stack+0x21/0x24 [ 666.255993][T30892] dump_stack_lvl+0x1a7/0x208 [ 666.260669][T30892] ? show_regs_print_info+0x18/0x18 [ 666.265853][T30892] ? ___ratelimit+0x3de/0x560 [ 666.270523][T30892] ? __kasan_check_write+0x14/0x20 [ 666.275625][T30892] ? _raw_spin_lock+0x94/0xf0 [ 666.280301][T30892] dump_stack+0x15/0x1c [ 666.284471][T30892] dump_header+0xdd/0x650 [ 666.288795][T30892] oom_kill_process+0x1fa/0x2c0 [ 666.293635][T30892] out_of_memory+0x93f/0xd20 [ 666.298218][T30892] ? unregister_oom_notifier+0x20/0x20 [ 666.303666][T30892] ? mutex_lock_killable+0xdf/0xf0 [ 666.308770][T30892] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 666.315266][T30892] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 666.320795][T30892] ? mem_cgroup_oom_trylock+0x350/0x350 [ 666.326326][T30892] ? _raw_spin_trylock_bh+0x150/0x150 [ 666.331682][T30892] ? _raw_spin_unlock+0x4d/0x70 [ 666.336526][T30892] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 666.342060][T30892] try_charge+0xf69/0x1500 [ 666.346469][T30892] ? __memcg_kmem_charge+0x150/0x150 [ 666.351743][T30892] ? percpu_counter_add_batch+0x13c/0x160 [ 666.357451][T30892] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 666.362979][T30892] __mem_cgroup_charge+0x14c/0x6d0 [ 666.368074][T30892] shmem_add_to_page_cache+0x574/0xe30 [ 666.373518][T30892] ? shmem_alloc_page+0x380/0x380 [ 666.378535][T30892] ? _raw_spin_lock_irqsave+0x130/0x130 [ 666.384065][T30892] ? find_lock_entry+0x4b/0x200 [ 666.388900][T30892] shmem_getpage_gfp+0x8eb/0x2120 [ 666.394003][T30892] shmem_write_begin+0xce/0x1b0 [ 666.398837][T30892] generic_perform_write+0x2ce/0x540 [ 666.404111][T30892] ? atime_needs_update+0x5b0/0x5b0 [ 666.409299][T30892] ? grab_cache_page_write_begin+0xb0/0xb0 [ 666.415111][T30892] ? file_remove_privs+0x5b0/0x5b0 [ 666.420223][T30892] ? __kasan_check_write+0x14/0x20 [ 666.425324][T30892] ? down_write+0xb2/0x120 [ 666.429741][T30892] __generic_file_write_iter+0x24b/0x480 [ 666.435360][T30892] ? generic_write_checks+0x3d4/0x480 [ 666.440719][T30892] generic_file_write_iter+0xa9/0x1d0 [ 666.446074][T30892] __kernel_write+0x535/0x910 [ 666.450733][T30892] ? vfs_read+0xa60/0xa60 [ 666.455046][T30892] ? populate_vma_page_range+0xf0/0xf0 [ 666.460493][T30892] ? cgroup_freezing+0x86/0xb0 [ 666.465238][T30892] ? freezing_slow_path+0x10a/0x150 [ 666.470426][T30892] dump_emit+0x246/0x370 [ 666.474653][T30892] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 666.480093][T30892] ? freezing_slow_path+0x10a/0x150 [ 666.485279][T30892] dump_user_range+0x6a/0x1a0 [ 666.489944][T30892] elf_core_dump+0x2866/0x2cc0 [ 666.494697][T30892] ? load_elf_binary+0x28e0/0x28e0 [ 666.499797][T30892] ? __fsnotify_parent+0x6db/0x7c0 [ 666.504905][T30892] ? do_truncate+0x1c6/0x240 [ 666.509487][T30892] ? putname+0xfe/0x150 [ 666.513634][T30892] ? __kasan_check_read+0x11/0x20 [ 666.518644][T30892] ? cgroup_freezing+0x86/0xb0 [ 666.523392][T30892] ? freezing_slow_path+0x10a/0x150 [ 666.528573][T30892] do_coredump+0x1ba3/0x28e0 [ 666.533151][T30892] ? simple_acl_create+0x1c0/0x1c0 [ 666.538260][T30892] ? debug_smp_processor_id+0x17/0x20 [ 666.543618][T30892] ? kmem_cache_free+0x100/0x2d0 [ 666.548537][T30892] ? ____kasan_slab_free+0x130/0x160 [ 666.553806][T30892] ? get_signal+0xb98/0x12e0 [ 666.558384][T30892] ? kmem_cache_free+0x100/0x2d0 [ 666.563315][T30892] get_signal+0xf23/0x12e0 [ 666.567719][T30892] arch_do_signal_or_restart+0xe2/0x11d0 [ 666.573342][T30892] ? down_read_trylock+0x106/0x160 [ 666.578439][T30892] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 666.584055][T30892] ? bad_area+0x6a/0x80 [ 666.588196][T30892] ? do_user_addr_fault+0xd75/0xde0 [ 666.593383][T30892] ? switch_fpu_return+0x19c/0x330 [ 666.598481][T30892] exit_to_user_mode_loop+0xa2/0xe0 [ 666.603661][T30892] exit_to_user_mode_prepare+0x76/0xa0 [ 666.609103][T30892] irqentry_exit_to_user_mode+0x9/0x10 [ 666.614548][T30892] irqentry_exit+0x12/0x60 [ 666.618956][T30892] exc_page_fault+0x67/0xc0 [ 666.623444][T30892] ? asm_exc_page_fault+0x8/0x30 [ 666.628366][T30892] asm_exc_page_fault+0x1e/0x30 [ 666.633197][T30892] RIP: 0033:0xe8 [ 666.636734][T30892] Code: Unable to access opcode bytes at RIP 0xbe. [ 666.643218][T30892] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 666.649274][T30892] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 666.657228][T30892] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 666.665192][T30892] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 666.673146][T30892] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 666.681101][T30892] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 666.755052][T30892] memory: usage 307200kB, limit 307200kB, failcnt 38857 [ 666.788558][T30892] memory+swap: usage 421956kB, limit 9007199254740988kB, failcnt 0 [ 666.796470][T30892] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 667.089396][T30892] Memory cgroup stats for /syz4: [ 667.089514][T30892] anon 135168 [ 667.089514][T30892] file 307912704 [ 667.089514][T30892] kernel_stack 0 [ 667.089514][T30892] percpu 0 [ 667.089514][T30892] sock 0 [ 667.089514][T30892] shmem 307912704 [ 667.089514][T30892] file_mapped 135168 [ 667.089514][T30892] file_dirty 0 [ 667.089514][T30892] file_writeback 270336 [ 667.089514][T30892] anon_thp 0 [ 667.089514][T30892] inactive_anon 311832576 [ 667.089514][T30892] active_anon 2027520 [ 667.089514][T30892] inactive_file 16384 [ 667.089514][T30892] active_file 77824 [ 667.089514][T30892] unevictable 0 [ 667.089514][T30892] slab_reclaimable 0 [ 667.089514][T30892] slab_unreclaimable 0 [ 667.089514][T30892] slab 0 [ 667.089514][T30892] workingset_refault_anon 66 [ 667.089514][T30892] workingset_refault_file 6765 [ 667.089514][T30892] workingset_activate_anon 0 [ 667.089514][T30892] workingset_activate_file 2805 [ 667.089514][T30892] workingset_restore_anon 0 [ 667.089514][T30892] workingset_restore_file 1947 [ 667.260087][T30892] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30875,uid=0 [ 667.276396][T30892] Memory cgroup out of memory: Killed process 30875 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:49920kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 667.309209][ T27] oom_reaper: reaped process 30875 (syz.4.8517), now anon-rss:0kB, file-rss:49856kB, shmem-rss:0kB [ 667.343720][T30848] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 667.373954][T30848] CPU: 0 PID: 30848 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 667.382813][T30848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 667.392857][T30848] Call Trace: [ 667.396142][T30848] __dump_stack+0x21/0x24 [ 667.400469][T30848] dump_stack_lvl+0x1a7/0x208 [ 667.405136][T30848] ? show_regs_print_info+0x18/0x18 [ 667.410332][T30848] ? ___ratelimit+0x3de/0x560 [ 667.415008][T30848] ? _raw_spin_lock+0x94/0xf0 [ 667.419680][T30848] dump_stack+0x15/0x1c [ 667.423826][T30848] dump_header+0xdd/0x650 [ 667.428141][T30848] oom_kill_process+0x1fa/0x2c0 [ 667.432985][T30848] out_of_memory+0x93f/0xd20 [ 667.437560][T30848] ? unregister_oom_notifier+0x20/0x20 [ 667.443007][T30848] ? mutex_lock_killable+0xdf/0xf0 [ 667.448106][T30848] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 667.454597][T30848] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 667.460131][T30848] ? mem_cgroup_oom_trylock+0x350/0x350 [ 667.465683][T30848] ? _raw_spin_trylock_bh+0x150/0x150 [ 667.471047][T30848] ? _raw_spin_unlock+0x4d/0x70 [ 667.475888][T30848] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 667.481429][T30848] try_charge+0xf69/0x1500 [ 667.485836][T30848] ? __memcg_kmem_charge+0x150/0x150 [ 667.491110][T30848] ? percpu_counter_add_batch+0x13c/0x160 [ 667.496829][T30848] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 667.502623][T30848] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 667.508160][T30848] __mem_cgroup_charge+0x14c/0x6d0 [ 667.513264][T30848] shmem_add_to_page_cache+0x574/0xe30 [ 667.518712][T30848] ? shmem_alloc_page+0x380/0x380 [ 667.523724][T30848] ? _raw_spin_lock_irqsave+0x130/0x130 [ 667.529259][T30848] ? find_lock_entry+0x4b/0x200 [ 667.534099][T30848] shmem_getpage_gfp+0x8eb/0x2120 [ 667.539119][T30848] shmem_write_begin+0xce/0x1b0 [ 667.543970][T30848] generic_perform_write+0x2ce/0x540 [ 667.549248][T30848] ? atime_needs_update+0x5b0/0x5b0 [ 667.554448][T30848] ? grab_cache_page_write_begin+0xb0/0xb0 [ 667.560243][T30848] ? file_remove_privs+0x5b0/0x5b0 [ 667.565342][T30848] ? __kasan_check_write+0x14/0x20 [ 667.570438][T30848] ? down_write+0xb2/0x120 [ 667.574843][T30848] __generic_file_write_iter+0x24b/0x480 [ 667.580463][T30848] ? generic_write_checks+0x3d4/0x480 [ 667.585823][T30848] generic_file_write_iter+0xa9/0x1d0 [ 667.591183][T30848] __kernel_write+0x535/0x910 [ 667.595847][T30848] ? vfs_read+0xa60/0xa60 [ 667.600164][T30848] ? populate_vma_page_range+0xf0/0xf0 [ 667.605615][T30848] ? cgroup_freezing+0x86/0xb0 [ 667.610372][T30848] ? freezing_slow_path+0x10a/0x150 [ 667.615556][T30848] dump_emit+0x246/0x370 [ 667.619788][T30848] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 667.625237][T30848] ? dump_user_range+0x13b/0x1a0 [ 667.630163][T30848] dump_user_range+0x6a/0x1a0 [ 667.634829][T30848] elf_core_dump+0x2866/0x2cc0 [ 667.639584][T30848] ? load_elf_binary+0x28e0/0x28e0 [ 667.644686][T30848] ? __fsnotify_parent+0x6db/0x7c0 [ 667.649800][T30848] ? do_truncate+0x1c6/0x240 [ 667.654375][T30848] ? putname+0xfe/0x150 [ 667.658517][T30848] ? __kasan_check_read+0x11/0x20 [ 667.663536][T30848] ? cgroup_freezing+0x86/0xb0 [ 667.668286][T30848] ? freezing_slow_path+0x10a/0x150 [ 667.673473][T30848] do_coredump+0x1ba3/0x28e0 [ 667.678059][T30848] ? simple_acl_create+0x1c0/0x1c0 [ 667.683161][T30848] ? debug_smp_processor_id+0x17/0x20 [ 667.688517][T30848] ? kmem_cache_free+0x100/0x2d0 [ 667.693440][T30848] ? ____kasan_slab_free+0x130/0x160 [ 667.698717][T30848] ? get_signal+0xb98/0x12e0 [ 667.703299][T30848] ? kmem_cache_free+0x100/0x2d0 [ 667.708222][T30848] get_signal+0xf23/0x12e0 [ 667.712633][T30848] arch_do_signal_or_restart+0xe2/0x11d0 [ 667.718251][T30848] ? down_read_trylock+0x106/0x160 [ 667.723356][T30848] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 667.728977][T30848] ? bad_area+0x6a/0x80 [ 667.733123][T30848] ? do_user_addr_fault+0xd75/0xde0 [ 667.738312][T30848] ? switch_fpu_return+0x19c/0x330 [ 667.743409][T30848] exit_to_user_mode_loop+0xa2/0xe0 [ 667.748592][T30848] exit_to_user_mode_prepare+0x76/0xa0 [ 667.754037][T30848] irqentry_exit_to_user_mode+0x9/0x10 [ 667.759486][T30848] irqentry_exit+0x12/0x60 [ 667.763901][T30848] exc_page_fault+0x67/0xc0 [ 667.768403][T30848] ? asm_exc_page_fault+0x8/0x30 [ 667.773328][T30848] asm_exc_page_fault+0x1e/0x30 [ 667.778170][T30848] RIP: 0033:0xe8 [ 667.781707][T30848] Code: Unable to access opcode bytes at RIP 0xbe. [ 667.788195][T30848] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 667.794253][T30848] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 667.802212][T30848] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 667.810173][T30848] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 667.818138][T30848] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 667.826096][T30848] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 668.160758][T30848] memory: usage 300276kB, limit 307200kB, failcnt 39806 [ 668.230411][T30848] memory+swap: usage 425340kB, limit 9007199254740988kB, failcnt 0 [ 668.270687][T30848] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 668.295038][T30848] Memory cgroup stats for /syz4: [ 668.295157][T30848] anon 270336 [ 668.295157][T30848] file 308318208 [ 668.295157][T30848] kernel_stack 0 [ 668.295157][T30848] percpu 0 [ 668.295157][T30848] sock 0 [ 668.295157][T30848] shmem 308318208 [ 668.295157][T30848] file_mapped 135168 [ 668.295157][T30848] file_dirty 0 [ 668.295157][T30848] file_writeback 0 [ 668.295157][T30848] anon_thp 0 [ 668.295157][T30848] inactive_anon 312012800 [ 668.295157][T30848] active_anon 2433024 [ 668.295157][T30848] inactive_file 0 [ 668.295157][T30848] active_file 126976 [ 668.295157][T30848] unevictable 0 [ 668.295157][T30848] slab_reclaimable 0 [ 668.295157][T30848] slab_unreclaimable 0 [ 668.295157][T30848] slab 0 [ 668.295157][T30848] workingset_refault_anon 66 [ 668.295157][T30848] workingset_refault_file 7062 [ 668.295157][T30848] workingset_activate_anon 0 [ 668.295157][T30848] workingset_activate_file 3102 [ 668.295157][T30848] workingset_restore_anon 0 [ 668.295157][T30848] workingset_restore_file 2211 [ 668.397653][T30848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30850,uid=0 [ 668.412645][T30848] Memory cgroup out of memory: Killed process 30850 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:49920kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 668.434743][T31193] device syzkaller0 entered promiscuous mode [ 668.643014][T30879] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 668.677504][T30879] CPU: 1 PID: 30879 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 668.686366][T30879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.696412][T30879] Call Trace: [ 668.699696][T30879] __dump_stack+0x21/0x24 [ 668.704015][T30879] dump_stack_lvl+0x1a7/0x208 [ 668.708685][T30879] ? show_regs_print_info+0x18/0x18 [ 668.713871][T30879] ? ___ratelimit+0x3de/0x560 [ 668.718541][T30879] ? __kasan_check_write+0x14/0x20 [ 668.723640][T30879] ? _raw_spin_lock+0x94/0xf0 [ 668.728305][T30879] dump_stack+0x15/0x1c [ 668.732450][T30879] dump_header+0xdd/0x650 [ 668.736770][T30879] oom_kill_process+0x1fa/0x2c0 [ 668.741605][T30879] out_of_memory+0x93f/0xd20 [ 668.746186][T30879] ? unregister_oom_notifier+0x20/0x20 [ 668.751626][T30879] ? mutex_lock_killable+0xdf/0xf0 [ 668.756716][T30879] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 668.763194][T30879] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 668.768714][T30879] ? mem_cgroup_oom_trylock+0x350/0x350 [ 668.774233][T30879] ? _raw_spin_trylock_bh+0x150/0x150 [ 668.779585][T30879] ? _raw_spin_unlock+0x4d/0x70 [ 668.784415][T30879] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 668.789937][T30879] try_charge+0xf69/0x1500 [ 668.794333][T30879] ? __memcg_kmem_charge+0x150/0x150 [ 668.799593][T30879] ? percpu_counter_add_batch+0x13c/0x160 [ 668.805292][T30879] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 668.810815][T30879] __mem_cgroup_charge+0x14c/0x6d0 [ 668.815908][T30879] shmem_add_to_page_cache+0x574/0xe30 [ 668.821346][T30879] ? shmem_alloc_page+0x380/0x380 [ 668.826345][T30879] ? _raw_spin_lock_irqsave+0x130/0x130 [ 668.831868][T30879] ? find_lock_entry+0x4b/0x200 [ 668.836732][T30879] shmem_getpage_gfp+0x8eb/0x2120 [ 668.841742][T30879] shmem_write_begin+0xce/0x1b0 [ 668.846574][T30879] generic_perform_write+0x2ce/0x540 [ 668.851835][T30879] ? atime_needs_update+0x5b0/0x5b0 [ 668.857013][T30879] ? grab_cache_page_write_begin+0xb0/0xb0 [ 668.862798][T30879] ? file_remove_privs+0x5b0/0x5b0 [ 668.867997][T30879] ? __kasan_check_write+0x14/0x20 [ 668.873100][T30879] ? down_write+0xb2/0x120 [ 668.877504][T30879] __generic_file_write_iter+0x24b/0x480 [ 668.883122][T30879] ? generic_write_checks+0x3d4/0x480 [ 668.888475][T30879] generic_file_write_iter+0xa9/0x1d0 [ 668.893825][T30879] __kernel_write+0x535/0x910 [ 668.898481][T30879] ? vfs_read+0xa60/0xa60 [ 668.902790][T30879] ? populate_vma_page_range+0xf0/0xf0 [ 668.908230][T30879] ? cgroup_freezing+0x86/0xb0 [ 668.912969][T30879] ? freezing_slow_path+0x10a/0x150 [ 668.918147][T30879] dump_emit+0x246/0x370 [ 668.922369][T30879] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 668.927802][T30879] ? freezing_slow_path+0x10a/0x150 [ 668.932977][T30879] dump_user_range+0x6a/0x1a0 [ 668.937631][T30879] elf_core_dump+0x2866/0x2cc0 [ 668.942373][T30879] ? load_elf_binary+0x28e0/0x28e0 [ 668.947474][T30879] ? __fsnotify_parent+0x6db/0x7c0 [ 668.952581][T30879] ? do_truncate+0x1c6/0x240 [ 668.957146][T30879] ? putname+0xfe/0x150 [ 668.961281][T30879] ? __kasan_check_read+0x11/0x20 [ 668.966285][T30879] ? cgroup_freezing+0x86/0xb0 [ 668.971028][T30879] ? freezing_slow_path+0x10a/0x150 [ 668.976207][T30879] do_coredump+0x1ba3/0x28e0 [ 668.980778][T30879] ? simple_acl_create+0x1c0/0x1c0 [ 668.985865][T30879] ? debug_smp_processor_id+0x17/0x20 [ 668.991213][T30879] ? kmem_cache_free+0x100/0x2d0 [ 668.996125][T30879] ? ____kasan_slab_free+0x130/0x160 [ 669.001392][T30879] ? get_signal+0xb98/0x12e0 [ 669.005966][T30879] ? kmem_cache_free+0x100/0x2d0 [ 669.010882][T30879] get_signal+0xf23/0x12e0 [ 669.015284][T30879] arch_do_signal_or_restart+0xe2/0x11d0 [ 669.020896][T30879] ? down_read_trylock+0x106/0x160 [ 669.025983][T30879] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 669.031608][T30879] ? bad_area+0x6a/0x80 [ 669.035753][T30879] ? do_user_addr_fault+0xd75/0xde0 [ 669.040978][T30879] ? switch_fpu_return+0x19c/0x330 [ 669.046080][T30879] exit_to_user_mode_loop+0xa2/0xe0 [ 669.051261][T30879] exit_to_user_mode_prepare+0x76/0xa0 [ 669.056700][T30879] irqentry_exit_to_user_mode+0x9/0x10 [ 669.062134][T30879] irqentry_exit+0x12/0x60 [ 669.066525][T30879] exc_page_fault+0x67/0xc0 [ 669.071005][T30879] ? asm_exc_page_fault+0x8/0x30 [ 669.075926][T30879] asm_exc_page_fault+0x1e/0x30 [ 669.080754][T30879] RIP: 0033:0xe8 [ 669.084281][T30879] Code: Unable to access opcode bytes at RIP 0xbe. [ 669.090757][T30879] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 669.096802][T30879] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 669.104752][T30879] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 669.112706][T30879] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 669.120662][T30879] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 669.128619][T30879] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 669.254994][ T24] audit: type=1400 audit(1781264217.410:175): avc: denied { read } for pid=31202 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 186) OK Stopping crond: stopped /usr/sbin/crond (pid 179) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 133) [ 669.772171][ T24] audit: type=1400 audit(1781264217.930:176): avc: denied { search } for pid=31243 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 669.996427][T30879] memory: usage 307200kB, limit 307200kB, failcnt 41353 [ 670.122752][T30879] memory+swap: usage 426276kB, limit 9007199254740988kB, failcnt 0 OK [ 670.192063][T30879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 Stopping iptables: [ 670.278735][T30879] Memory cgroup stats for /syz4: [ 670.278861][T30879] anon 270336 [ 670.278861][T30879] file 308047872 [ 670.278861][T30879] kernel_stack 0 [ 670.278861][T30879] percpu 0 [ 670.278861][T30879] sock 0 [ 670.278861][T30879] shmem 308047872 [ 670.278861][T30879] file_mapped 135168 [ 670.278861][T30879] file_dirty 0 [ 670.278861][T30879] file_writeback 0 [ 670.278861][T30879] anon_thp 0 [ 670.278861][T30879] inactive_anon 311783424 [ 670.278861][T30879] active_anon 2568192 [ 670.278861][T30879] inactive_file 0 [ 670.278861][T30879] active_file 126976 [ 670.278861][T30879] unevictable 0 [ 670.278861][T30879] slab_reclaimable 0 [ 670.278861][T30879] slab_unreclaimable 0 [ 670.278861][T30879] slab 0 [ 670.278861][T30879] workingset_refault_anon 66 [ 670.278861][T30879] workingset_refault_file 7062 [ 670.278861][T30879] workingset_activate_anon 0 [ 670.278861][T30879] workingset_activate_file 3102 [ 670.278861][T30879] workingset_restore_anon 0 [ 670.278861][T30879] workingset_restore_file 2211 [ 670.435808][ T24] audit: type=1400 audit(1781264218.590:177): avc: denied { search } for pid=31281 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 670.478706][T30879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30863,uid=0 Stopping system message bus: [ 670.569037][ T24] audit: type=1400 audit(1781264218.590:178): avc: denied { write } for pid=31281 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.669354][T30879] Memory cgroup out of memory: Killed process 30863 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:52732kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 670.788961][T31280] : port 1(ip6gretap0) entered blocking state [ 670.795142][T31280] : port 1(ip6gretap0) entered disabled state [ 670.797931][ T24] audit: type=1400 audit(1781264218.590:179): avc: denied { add_name } for pid=31281 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.823115][T31280] device ip6gretap0 entered promiscuous mode [ 670.830073][T31282] device ip6gretap0 left promiscuous mode [ 670.835898][T31282] : port 1(ip6gretap0) entered disabled state [ 670.842647][ T24] audit: type=1400 audit(1781264218.590:180): avc: denied { create } for pid=31281 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 670.911670][ T24] audit: type=1400 audit(1781264218.590:181): avc: denied { read open } for pid=31281 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=34589 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 671.018568][T31283] device bridge_slave_1 left promiscuous mode [ 671.056816][ T24] audit: type=1400 audit(1781264218.590:182): avc: denied { lock } for pid=31281 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=34589 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 671.080752][T31283] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.176240][T30895] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 671.189259][ T24] audit: type=1400 audit(1781264219.140:183): avc: denied { write } for pid=134 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.211493][T31283] device bridge_slave_0 left promiscuous mode [ 671.218295][T31283] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.251538][ T24] audit: type=1400 audit(1781264219.140:184): avc: denied { remove_name } for pid=134 comm="dhcpcd" name="sock" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.442008][ T24] audit: type=1400 audit(1781264219.140:185): avc: denied { unlink } for pid=134 comm="dhcpcd" name="sock" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 671.484443][T30895] CPU: 1 PID: 30895 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 671.493314][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.503360][T30895] Call Trace: [ 671.506636][T30895] __dump_stack+0x21/0x24 [ 671.510941][T30895] dump_stack_lvl+0x1a7/0x208 [ 671.515613][T30895] ? show_regs_print_info+0x18/0x18 [ 671.520796][T30895] ? ___ratelimit+0x3de/0x560 [ 671.525455][T30895] ? __kasan_check_write+0x14/0x20 [ 671.530547][T30895] ? _raw_spin_lock+0x94/0xf0 [ 671.535204][T30895] dump_stack+0x15/0x1c [ 671.539338][T30895] dump_header+0xdd/0x650 [ 671.543649][T30895] oom_kill_process+0x1fa/0x2c0 [ 671.548478][T30895] out_of_memory+0x93f/0xd20 [ 671.553047][T30895] ? unregister_oom_notifier+0x20/0x20 [ 671.558484][T30895] ? mutex_lock_killable+0xdf/0xf0 [ 671.563569][T30895] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 671.570048][T30895] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 671.575569][T30895] ? mem_cgroup_oom_trylock+0x350/0x350 [ 671.581093][T30895] ? _raw_spin_trylock_bh+0x150/0x150 [ 671.586440][T30895] ? _raw_spin_unlock+0x4d/0x70 [ 671.591264][T30895] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 671.596786][T30895] try_charge+0xf69/0x1500 [ 671.601182][T30895] ? __memcg_kmem_charge+0x150/0x150 [ 671.606535][T30895] ? percpu_counter_add_batch+0x13c/0x160 [ 671.612233][T30895] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 671.617755][T30895] __mem_cgroup_charge+0x14c/0x6d0 [ 671.622843][T30895] shmem_add_to_page_cache+0x574/0xe30 [ 671.628277][T30895] ? shmem_alloc_page+0x380/0x380 [ 671.633279][T30895] ? _raw_spin_lock_irqsave+0x130/0x130 [ 671.638799][T30895] ? find_lock_entry+0x4b/0x200 [ 671.643623][T30895] shmem_getpage_gfp+0x8eb/0x2120 [ 671.648626][T30895] shmem_write_begin+0xce/0x1b0 [ 671.653455][T30895] generic_perform_write+0x2ce/0x540 [ 671.658715][T30895] ? atime_needs_update+0x5b0/0x5b0 [ 671.663893][T30895] ? grab_cache_page_write_begin+0xb0/0xb0 [ 671.669673][T30895] ? file_remove_privs+0x5b0/0x5b0 [ 671.676139][T30895] ? __kasan_check_write+0x14/0x20 [ 671.681229][T30895] ? down_write+0xb2/0x120 [ 671.685625][T30895] __generic_file_write_iter+0x24b/0x480 [ 671.691365][T30895] ? generic_write_checks+0x3d4/0x480 [ 671.696725][T30895] generic_file_write_iter+0xa9/0x1d0 [ 671.702077][T30895] __kernel_write+0x535/0x910 [ 671.706736][T30895] ? vfs_read+0xa60/0xa60 [ 671.711062][T30895] ? populate_vma_page_range+0xf0/0xf0 [ 671.716511][T30895] ? cgroup_freezing+0x86/0xb0 [ 671.721259][T30895] ? freezing_slow_path+0x10a/0x150 [ 671.726441][T30895] dump_emit+0x246/0x370 [ 671.730666][T30895] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 671.736101][T30895] ? freezing_slow_path+0x10a/0x150 [ 671.741277][T30895] dump_user_range+0x6a/0x1a0 [ 671.745930][T30895] elf_core_dump+0x2866/0x2cc0 [ 671.750670][T30895] ? load_elf_binary+0x28e0/0x28e0 [ 671.755758][T30895] ? __fsnotify_parent+0x6db/0x7c0 [ 671.760854][T30895] ? do_truncate+0x1c6/0x240 [ 671.765419][T30895] ? putname+0xfe/0x150 [ 671.769551][T30895] ? __kasan_check_read+0x11/0x20 [ 671.774556][T30895] ? cgroup_freezing+0x86/0xb0 [ 671.779296][T30895] ? freezing_slow_path+0x10a/0x150 [ 671.784470][T30895] do_coredump+0x1ba3/0x28e0 [ 671.789040][T30895] ? simple_acl_create+0x1c0/0x1c0 [ 671.794144][T30895] ? debug_smp_processor_id+0x17/0x20 [ 671.799502][T30895] ? kmem_cache_free+0x100/0x2d0 [ 671.804426][T30895] ? ____kasan_slab_free+0x130/0x160 [ 671.809695][T30895] ? get_signal+0xb98/0x12e0 [ 671.814265][T30895] ? kmem_cache_free+0x100/0x2d0 [ 671.819184][T30895] get_signal+0xf23/0x12e0 [ 671.823580][T30895] arch_do_signal_or_restart+0xe2/0x11d0 [ 671.829189][T30895] ? down_read_trylock+0x106/0x160 [ 671.834276][T30895] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 671.839883][T30895] ? bad_area+0x6a/0x80 [ 671.844014][T30895] ? do_user_addr_fault+0xd75/0xde0 [ 671.849190][T30895] ? switch_fpu_return+0x19c/0x330 [ 671.854280][T30895] exit_to_user_mode_loop+0xa2/0xe0 [ 671.859451][T30895] exit_to_user_mode_prepare+0x76/0xa0 [ 671.864884][T30895] irqentry_exit_to_user_mode+0x9/0x10 [ 671.870316][T30895] irqentry_exit+0x12/0x60 [ 671.874709][T30895] exc_page_fault+0x67/0xc0 [ 671.879190][T30895] ? asm_exc_page_fault+0x8/0x30 [ 671.884101][T30895] asm_exc_page_fault+0x1e/0x30 [ 671.888931][T30895] RIP: 0033:0xe8 [ 671.892457][T30895] Code: Unable to access opcode bytes at RIP 0xbe. [ 671.898928][T30895] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 671.904969][T30895] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 671.912921][T30895] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 671.920871][T30895] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 671.928820][T30895] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 671.936771][T30895] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 killall: can't kill pid 300: No such process killall: can't kill pid 1522: No such process [ 671.994156][ T24] audit: type=1400 audit(1781264219.140:186): avc: denied { unlink } for pid=134 comm="dhcpcd" name="pid" dev="tmpfs" ino=413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Stopping klogd: OK Stopping acpid: [ 672.083333][ T24] audit: type=1400 audit(1781264219.320:187): avc: denied { module_request } for pid=31294 comm="syz.2.8627" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 672.233497][ T24] audit: type=1400 audit(1781264220.270:188): avc: denied { write } for pid=79 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.295531][ T24] audit: type=1400 audit(1781264220.270:189): avc: denied { remove_name } for pid=79 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.358152][ T24] audit: type=1400 audit(1781264220.270:190): avc: denied { unlink } for pid=79 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 672.487357][T30895] memory: usage 307200kB, limit 307200kB, failcnt 42585 [ 672.494481][T30895] memory+swap: usage 426564kB, limit 9007199254740988kB, failcnt 0 [ 672.507157][T31315] device syzkaller0 entered promiscuous mode [ 672.508712][T30895] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.520062][T30895] Memory cgroup stats for /syz4: [ 672.520177][T30895] anon 405504 [ 672.520177][T30895] file 308318208 [ 672.520177][T30895] kernel_stack 0 [ 672.520177][T30895] percpu 0 [ 672.520177][T30895] sock 0 [ 672.520177][T30895] shmem 308318208 [ 672.520177][T30895] file_mapped 135168 [ 672.520177][T30895] file_dirty 0 [ 672.520177][T30895] file_writeback 0 [ 672.520177][T30895] anon_thp 0 [ 672.520177][T30895] inactive_anon 311058432 [ 672.520177][T30895] active_anon 3379200 [ 672.520177][T30895] inactive_file 69632 [ 672.520177][T30895] active_file 143360 [ 672.520177][T30895] unevictable 0 [ 672.520177][T30895] slab_reclaimable 0 [ 672.520177][T30895] slab_unreclaimable 0 [ 672.520177][T30895] slab 0 [ 672.520177][T30895] workingset_refault_anon 66 [ 672.520177][T30895] workingset_refault_file 7623 [ 672.520177][T30895] workingset_activate_anon 0 [ 672.520177][T30895] workingset_activate_file 3465 [ 672.520177][T30895] workingset_restore_anon 0 [ 672.520177][T30895] workingset_restore_file 2475 [ 672.615565][T30895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30858,uid=0 [ 672.630613][T30895] Memory cgroup out of memory: Killed process 30858 (syz.4.8517) total-vm:90448kB, anon-rss:1260kB, file-rss:49920kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 672.998272][T30877] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 673.008176][T30877] CPU: 1 PID: 30877 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 673.017017][T30877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.027065][T30877] Call Trace: [ 673.030343][T30877] __dump_stack+0x21/0x24 [ 673.034647][T30877] dump_stack_lvl+0x1a7/0x208 [ 673.039302][T30877] ? show_regs_print_info+0x18/0x18 [ 673.044474][T30877] ? ___ratelimit+0x3de/0x560 [ 673.049127][T30877] ? _raw_spin_lock+0x94/0xf0 [ 673.053780][T30877] dump_stack+0x15/0x1c [ 673.057910][T30877] dump_header+0xdd/0x650 [ 673.062215][T30877] oom_kill_process+0x1fa/0x2c0 [ 673.067058][T30877] out_of_memory+0x93f/0xd20 [ 673.071646][T30877] ? unregister_oom_notifier+0x20/0x20 [ 673.077086][T30877] ? mutex_lock_killable+0x92/0xf0 [ 673.082184][T30877] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 673.088671][T30877] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 673.094198][T30877] ? mem_cgroup_oom_trylock+0x350/0x350 [ 673.099724][T30877] ? _raw_spin_trylock_bh+0x150/0x150 [ 673.105072][T30877] ? _raw_spin_unlock+0x4d/0x70 [ 673.109899][T30877] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 673.115421][T30877] try_charge+0xf69/0x1500 [ 673.119818][T30877] ? __memcg_kmem_charge+0x150/0x150 [ 673.125078][T30877] ? percpu_counter_add_batch+0x13c/0x160 [ 673.130779][T30877] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 673.136303][T30877] __mem_cgroup_charge+0x14c/0x6d0 [ 673.141392][T30877] shmem_add_to_page_cache+0x574/0xe30 [ 673.146828][T30877] ? shmem_alloc_page+0x380/0x380 [ 673.151828][T30877] ? _raw_spin_lock_irqsave+0x130/0x130 [ 673.157352][T30877] ? find_lock_entry+0x4b/0x200 [ 673.162179][T30877] shmem_getpage_gfp+0x8eb/0x2120 [ 673.167181][T30877] shmem_write_begin+0xce/0x1b0 [ 673.172006][T30877] generic_perform_write+0x2ce/0x540 [ 673.177269][T30877] ? atime_needs_update+0x5b0/0x5b0 [ 673.182447][T30877] ? grab_cache_page_write_begin+0xb0/0xb0 [ 673.188232][T30877] ? file_remove_privs+0x5b0/0x5b0 [ 673.193320][T30877] ? __kasan_check_write+0x14/0x20 [ 673.198406][T30877] ? down_write+0xb2/0x120 [ 673.202799][T30877] __generic_file_write_iter+0x24b/0x480 [ 673.208404][T30877] ? generic_write_checks+0x3d4/0x480 [ 673.213760][T30877] generic_file_write_iter+0xa9/0x1d0 [ 673.219106][T30877] __kernel_write+0x535/0x910 [ 673.223758][T30877] ? vfs_read+0xa60/0xa60 [ 673.228067][T30877] ? populate_vma_page_range+0xf0/0xf0 [ 673.233502][T30877] ? cgroup_freezing+0x86/0xb0 [ 673.238242][T30877] ? freezing_slow_path+0x10a/0x150 [ 673.243416][T30877] dump_emit+0x246/0x370 [ 673.247638][T30877] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 673.253078][T30877] ? freezing_slow_path+0x10a/0x150 [ 673.258250][T30877] dump_user_range+0x6a/0x1a0 [ 673.262939][T30877] elf_core_dump+0x2866/0x2cc0 [ 673.267685][T30877] ? load_elf_binary+0x28e0/0x28e0 [ 673.272779][T30877] ? __fsnotify_parent+0x6db/0x7c0 [ 673.277878][T30877] ? do_truncate+0x1c6/0x240 [ 673.282448][T30877] ? putname+0xfe/0x150 [ 673.286586][T30877] ? __kasan_check_read+0x11/0x20 [ 673.291593][T30877] ? cgroup_freezing+0x86/0xb0 [ 673.296337][T30877] ? freezing_slow_path+0x10a/0x150 [ 673.301513][T30877] do_coredump+0x1ba3/0x28e0 [ 673.306081][T30877] ? simple_acl_create+0x1c0/0x1c0 [ 673.311169][T30877] ? debug_smp_processor_id+0x17/0x20 [ 673.316517][T30877] ? kmem_cache_free+0x100/0x2d0 [ 673.321430][T30877] ? ____kasan_slab_free+0x130/0x160 [ 673.326691][T30877] ? get_signal+0xb98/0x12e0 [ 673.331257][T30877] ? kmem_cache_free+0x100/0x2d0 [ 673.336170][T30877] get_signal+0xf23/0x12e0 [ 673.340565][T30877] arch_do_signal_or_restart+0xe2/0x11d0 [ 673.346173][T30877] ? down_read_trylock+0x106/0x160 [ 673.351260][T30877] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 673.356866][T30877] ? bad_area+0x6a/0x80 [ 673.361001][T30877] ? do_user_addr_fault+0xd75/0xde0 [ 673.366174][T30877] ? switch_fpu_return+0x19c/0x330 [ 673.371264][T30877] exit_to_user_mode_loop+0xa2/0xe0 [ 673.376437][T30877] exit_to_user_mode_prepare+0x76/0xa0 [ 673.381871][T30877] irqentry_exit_to_user_mode+0x9/0x10 [ 673.387302][T30877] irqentry_exit+0x12/0x60 [ 673.391694][T30877] exc_page_fault+0x67/0xc0 [ 673.396171][T30877] ? asm_exc_page_fault+0x8/0x30 [ 673.401081][T30877] asm_exc_page_fault+0x1e/0x30 [ 673.405904][T30877] RIP: 0033:0xe8 [ 673.409431][T30877] Code: Unable to access opcode bytes at RIP 0xbe. [ 673.415906][T30877] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 673.421948][T30877] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 673.429902][T30877] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 673.437856][T30877] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 673.445804][T30877] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 673.453754][T30877] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 OK Stopping syslogd: [ 673.480601][T30877] memory: usage 307200kB, limit 307200kB, failcnt 43711 stopped /sbin/syslogd (pid 76) [ 673.494117][T30877] memory+swap: usage 427400kB, limit 9007199254740988kB, failcnt 0 OK [ 673.508516][T30877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 673.525369][T30877] Memory cgroup stats for /syz4: [ 673.525556][T30877] anon 405504 [ 673.525556][T30877] file 308588544 [ 673.525556][T30877] kernel_stack 0 [ 673.525556][T30877] percpu 0 [ 673.525556][T30877] sock 0 [ 673.525556][T30877] shmem 308588544 [ 673.525556][T30877] file_mapped 0 [ 673.525556][T30877] file_dirty 0 [ 673.525556][T30877] file_writeback 0 [ 673.525556][T30877] anon_thp 0 [ 673.525556][T30877] inactive_anon 310136832 [ 673.525556][T30877] active_anon 3514368 [ 673.525556][T30877] inactive_file 0 [ 673.525556][T30877] active_file 36864 [ 673.525556][T30877] unevictable 0 [ 673.525556][T30877] slab_reclaimable 0 [ 673.525556][T30877] slab_unreclaimable 0 [ 673.525556][T30877] slab 0 [ 673.525556][T30877] workingset_refault_anon 66 [ 673.525556][T30877] workingset_refault_file 7755 [ 673.525556][T30877] workingset_activate_anon 0 [ 673.525556][T30877] workingset_activate_file 3564 [ 673.525556][T30877] workingset_restore_anon 0 [ 673.525556][T30877] workingset_restore_file 2607 [ 673.641152][T30877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30885,uid=0 [ 673.657027][T30877] Memory cgroup out of memory: Killed process 30885 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:52124kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 673.708569][T30886] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 673.731009][T30886] CPU: 0 PID: 30886 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 673.739875][T30886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.749925][T30886] Call Trace: [ 673.753215][T30886] __dump_stack+0x21/0x24 [ 673.757543][T30886] dump_stack_lvl+0x1a7/0x208 [ 673.762218][T30886] ? show_regs_print_info+0x18/0x18 [ 673.767410][T30886] ? ___ratelimit+0x3de/0x560 [ 673.772092][T30886] ? __kasan_check_write+0x14/0x20 [ 673.777193][T30886] ? _raw_spin_lock+0x94/0xf0 [ 673.781862][T30886] dump_stack+0x15/0x1c [ 673.786013][T30886] dump_header+0xdd/0x650 [ 673.790332][T30886] oom_kill_process+0x1fa/0x2c0 [ 673.795162][T30886] out_of_memory+0x93f/0xd20 [ 673.799731][T30886] ? unregister_oom_notifier+0x20/0x20 [ 673.805167][T30886] ? mutex_lock_killable+0xdf/0xf0 [ 673.810256][T30886] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 673.816737][T30886] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 673.822259][T30886] ? mem_cgroup_oom_trylock+0x350/0x350 [ 673.827783][T30886] ? _raw_spin_trylock_bh+0x150/0x150 [ 673.833129][T30886] ? _raw_spin_unlock+0x4d/0x70 [ 673.837953][T30886] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 673.843475][T30886] try_charge+0xf69/0x1500 [ 673.847870][T30886] ? __memcg_kmem_charge+0x150/0x150 [ 673.853128][T30886] ? percpu_counter_add_batch+0x13c/0x160 [ 673.858826][T30886] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 673.864350][T30886] __mem_cgroup_charge+0x14c/0x6d0 [ 673.869440][T30886] shmem_add_to_page_cache+0x574/0xe30 [ 673.874874][T30886] ? shmem_alloc_page+0x380/0x380 [ 673.879876][T30886] ? _raw_spin_lock_irqsave+0x130/0x130 [ 673.885399][T30886] ? find_lock_entry+0x4b/0x200 [ 673.890230][T30886] shmem_getpage_gfp+0x8eb/0x2120 [ 673.895233][T30886] shmem_write_begin+0xce/0x1b0 [ 673.900069][T30886] generic_perform_write+0x2ce/0x540 [ 673.905331][T30886] ? atime_needs_update+0x5b0/0x5b0 [ 673.910510][T30886] ? grab_cache_page_write_begin+0xb0/0xb0 [ 673.916288][T30886] ? file_remove_privs+0x5b0/0x5b0 [ 673.921373][T30886] ? __kasan_check_write+0x14/0x20 [ 673.926458][T30886] ? down_write+0xb2/0x120 [ 673.930856][T30886] __generic_file_write_iter+0x24b/0x480 [ 673.936464][T30886] ? generic_write_checks+0x3d4/0x480 [ 673.941817][T30886] generic_file_write_iter+0xa9/0x1d0 [ 673.947165][T30886] __kernel_write+0x535/0x910 [ 673.951817][T30886] ? vfs_read+0xa60/0xa60 [ 673.956123][T30886] ? populate_vma_page_range+0xf0/0xf0 [ 673.961555][T30886] ? kasan_check_range+0x49/0x2a0 [ 673.966555][T30886] ? cgroup_freezing+0x86/0xb0 [ 673.971296][T30886] ? freezing_slow_path+0x10a/0x150 [ 673.976470][T30886] dump_emit+0x246/0x370 [ 673.980692][T30886] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 673.986126][T30886] ? dump_user_range+0xa0/0x1a0 [ 673.991040][T30886] dump_user_range+0x6a/0x1a0 [ 673.995697][T30886] elf_core_dump+0x2866/0x2cc0 [ 674.000436][T30886] ? load_elf_binary+0x28e0/0x28e0 [ 674.005521][T30886] ? __fsnotify_parent+0x6db/0x7c0 [ 674.010617][T30886] ? do_truncate+0x1c6/0x240 [ 674.015185][T30886] ? putname+0xfe/0x150 [ 674.019316][T30886] ? __kasan_check_read+0x11/0x20 [ 674.024325][T30886] ? cgroup_freezing+0x86/0xb0 [ 674.029079][T30886] ? freezing_slow_path+0x10a/0x150 [ 674.034273][T30886] do_coredump+0x1ba3/0x28e0 [ 674.038854][T30886] ? simple_acl_create+0x1c0/0x1c0 [ 674.043953][T30886] ? debug_smp_processor_id+0x17/0x20 [ 674.049311][T30886] ? kmem_cache_free+0x100/0x2d0 [ 674.054227][T30886] ? ____kasan_slab_free+0x130/0x160 [ 674.059491][T30886] ? get_signal+0xb98/0x12e0 [ 674.064058][T30886] ? kmem_cache_free+0x100/0x2d0 [ 674.068975][T30886] get_signal+0xf23/0x12e0 [ 674.073372][T30886] arch_do_signal_or_restart+0xe2/0x11d0 [ 674.078987][T30886] ? down_read_trylock+0x106/0x160 [ 674.084078][T30886] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 674.089703][T30886] ? bad_area+0x6a/0x80 [ 674.093846][T30886] ? do_user_addr_fault+0xd75/0xde0 [ 674.099039][T30886] ? switch_fpu_return+0x19c/0x330 [ 674.104137][T30886] exit_to_user_mode_loop+0xa2/0xe0 [ 674.109317][T30886] exit_to_user_mode_prepare+0x76/0xa0 [ 674.114757][T30886] irqentry_exit_to_user_mode+0x9/0x10 [ 674.120194][T30886] irqentry_exit+0x12/0x60 [ 674.124586][T30886] exc_page_fault+0x67/0xc0 [ 674.129066][T30886] ? asm_exc_page_fault+0x8/0x30 [ 674.133978][T30886] asm_exc_page_fault+0x1e/0x30 [ 674.138801][T30886] RIP: 0033:0xe8 [ 674.142331][T30886] Code: Unable to access opcode bytes at RIP 0xbe. [ 674.148804][T30886] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 674.154847][T30886] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 674.162796][T30886] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 674.170745][T30886] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 674.178693][T30886] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 674.186641][T30886] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 674.196556][T30886] memory: usage 304972kB, limit 307200kB, failcnt 44148 [ 674.215617][T31337] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 674.250615][T31337] device syzkaller0 entered promiscuous mode [ 674.310984][T30886] memory+swap: usage 421860kB, limit 9007199254740988kB, failcnt 0 [ 674.385877][T30886] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 674.443237][T30886] Memory cgroup stats for /syz4: [ 674.443357][T30886] anon 270336 [ 674.443357][T30886] file 306696192 [ 674.443357][T30886] kernel_stack 0 [ 674.443357][T30886] percpu 0 [ 674.443357][T30886] sock 0 [ 674.443357][T30886] shmem 303857664 [ 674.443357][T30886] file_mapped 2568192 [ 674.443357][T30886] file_dirty 0 [ 674.443357][T30886] file_writeback 0 [ 674.443357][T30886] anon_thp 0 [ 674.443357][T30886] inactive_anon 306216960 [ 674.443357][T30886] active_anon 3649536 [ 674.443357][T30886] inactive_file 2433024 [ 674.443357][T30886] active_file 278528 [ 674.443357][T30886] unevictable 0 [ 674.443357][T30886] slab_reclaimable 0 [ 674.443357][T30886] slab_unreclaimable 0 [ 674.443357][T30886] slab 0 [ 674.443357][T30886] workingset_refault_anon 858 [ 674.443357][T30886] workingset_refault_file 9471 [ 674.443357][T30886] workingset_activate_anon 0 [ 674.443357][T30886] workingset_activate_file 3630 [ 674.443357][T30886] workingset_restore_anon 0 [ 674.443357][T30886] workingset_restore_file 2607 [ 674.576875][T30886] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30868,uid=0 [ 674.634686][T30886] Memory cgroup out of memory: Killed process 30868 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:52996kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 674.815639][ T24] audit: type=1400 audit(1781264222.960:191): avc: denied { create } for pid=31350 comm="syz.1.8638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 674.977953][T30895] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 675.040967][T30895] CPU: 0 PID: 30895 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 675.049846][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.059897][T30895] Call Trace: [ 675.063185][T30895] __dump_stack+0x21/0x24 [ 675.067511][T30895] dump_stack_lvl+0x1a7/0x208 [ 675.072184][T30895] ? show_regs_print_info+0x18/0x18 [ 675.077382][T30895] ? ___ratelimit+0x3de/0x560 [ 675.082053][T30895] ? __kasan_check_write+0x14/0x20 [ 675.087155][T30895] ? _raw_spin_lock+0x94/0xf0 [ 675.091826][T30895] dump_stack+0x15/0x1c [ 675.095969][T30895] dump_header+0xdd/0x650 [ 675.100275][T30895] oom_kill_process+0x1fa/0x2c0 [ 675.105101][T30895] out_of_memory+0x93f/0xd20 [ 675.109669][T30895] ? unregister_oom_notifier+0x20/0x20 [ 675.115113][T30895] ? mutex_lock_killable+0xdf/0xf0 [ 675.120210][T30895] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 675.126695][T30895] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 675.132225][T30895] ? mem_cgroup_oom_trylock+0x350/0x350 [ 675.137751][T30895] ? _raw_spin_trylock_bh+0x150/0x150 [ 675.143104][T30895] ? _raw_spin_unlock+0x4d/0x70 [ 675.147931][T30895] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 675.153455][T30895] try_charge+0xf69/0x1500 [ 675.157860][T30895] ? __memcg_kmem_charge+0x150/0x150 [ 675.163118][T30895] ? percpu_counter_add_batch+0x13c/0x160 [ 675.168814][T30895] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 675.174337][T30895] __mem_cgroup_charge+0x14c/0x6d0 [ 675.179427][T30895] shmem_add_to_page_cache+0x574/0xe30 [ 675.184865][T30895] ? shmem_alloc_page+0x380/0x380 [ 675.189864][T30895] ? _raw_spin_lock_irqsave+0x130/0x130 [ 675.195384][T30895] ? find_lock_entry+0x4b/0x200 [ 675.200209][T30895] shmem_getpage_gfp+0x8eb/0x2120 [ 675.205213][T30895] shmem_write_begin+0xce/0x1b0 [ 675.210041][T30895] generic_perform_write+0x2ce/0x540 [ 675.215300][T30895] ? atime_needs_update+0x5b0/0x5b0 [ 675.220474][T30895] ? grab_cache_page_write_begin+0xb0/0xb0 [ 675.226260][T30895] ? file_remove_privs+0x5b0/0x5b0 [ 675.231347][T30895] ? __kasan_check_write+0x14/0x20 [ 675.236431][T30895] ? down_write+0xb2/0x120 [ 675.240842][T30895] __generic_file_write_iter+0x24b/0x480 [ 675.246477][T30895] ? generic_write_checks+0x3d4/0x480 [ 675.251838][T30895] generic_file_write_iter+0xa9/0x1d0 [ 675.257191][T30895] __kernel_write+0x535/0x910 [ 675.261847][T30895] ? vfs_read+0xa60/0xa60 [ 675.266153][T30895] ? populate_vma_page_range+0xf0/0xf0 [ 675.271588][T30895] ? cgroup_freezing+0x86/0xb0 [ 675.276329][T30895] ? freezing_slow_path+0x10a/0x150 [ 675.281509][T30895] dump_emit+0x246/0x370 [ 675.285731][T30895] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 675.291163][T30895] ? freezing_slow_path+0x10a/0x150 [ 675.296335][T30895] dump_user_range+0x6a/0x1a0 [ 675.300993][T30895] elf_core_dump+0x2866/0x2cc0 [ 675.305736][T30895] ? load_elf_binary+0x28e0/0x28e0 [ 675.310827][T30895] ? __fsnotify_parent+0x6db/0x7c0 [ 675.315923][T30895] ? do_truncate+0x1c6/0x240 [ 675.320490][T30895] ? putname+0xfe/0x150 [ 675.324627][T30895] ? __kasan_check_read+0x11/0x20 [ 675.329633][T30895] ? cgroup_freezing+0x86/0xb0 [ 675.334374][T30895] ? freezing_slow_path+0x10a/0x150 [ 675.339548][T30895] do_coredump+0x1ba3/0x28e0 [ 675.344117][T30895] ? simple_acl_create+0x1c0/0x1c0 [ 675.349207][T30895] ? debug_smp_processor_id+0x17/0x20 [ 675.354553][T30895] ? kmem_cache_free+0x100/0x2d0 [ 675.359464][T30895] ? ____kasan_slab_free+0x130/0x160 [ 675.364729][T30895] ? get_signal+0xb98/0x12e0 [ 675.369293][T30895] ? kmem_cache_free+0x100/0x2d0 [ 675.374204][T30895] get_signal+0xf23/0x12e0 [ 675.378602][T30895] arch_do_signal_or_restart+0xe2/0x11d0 [ 675.384211][T30895] ? down_read_trylock+0x106/0x160 [ 675.389298][T30895] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 675.394908][T30895] ? bad_area+0x6a/0x80 [ 675.399040][T30895] ? do_user_addr_fault+0xd75/0xde0 [ 675.404213][T30895] ? switch_fpu_return+0x19c/0x330 [ 675.409303][T30895] exit_to_user_mode_loop+0xa2/0xe0 [ 675.414480][T30895] exit_to_user_mode_prepare+0x76/0xa0 [ 675.419916][T30895] irqentry_exit_to_user_mode+0x9/0x10 [ 675.425348][T30895] irqentry_exit+0x12/0x60 [ 675.429739][T30895] exc_page_fault+0x67/0xc0 [ 675.434249][T30895] ? asm_exc_page_fault+0x8/0x30 [ 675.439166][T30895] asm_exc_page_fault+0x1e/0x30 [ 675.443995][T30895] RIP: 0033:0xe8 [ 675.447527][T30895] Code: Unable to access opcode bytes at RIP 0xbe. [ 675.454025][T30895] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 675.460074][T30895] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 675.468047][T30895] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 675.475998][T30895] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 675.483948][T30895] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 675.491918][T30895] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 675.571449][T30895] memory: usage 304188kB, limit 307200kB, failcnt 45092 [ 675.586921][T30895] memory+swap: usage 408676kB, limit 9007199254740988kB, failcnt 0 [ 675.595119][T30895] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 675.608011][T31378] device wg0 entered promiscuous mode [ 675.616798][T30895] Memory cgroup stats for /syz4: [ 675.616910][T30895] anon 270336 [ 675.616910][T30895] file 308723712 [ 675.616910][T30895] kernel_stack 0 [ 675.616910][T30895] percpu 0 [ 675.616910][T30895] sock 0 [ 675.616910][T30895] shmem 308858880 [ 675.616910][T30895] file_mapped 135168 [ 675.616910][T30895] file_dirty 0 [ 675.616910][T30895] file_writeback 0 [ 675.616910][T30895] anon_thp 0 [ 675.616910][T30895] inactive_anon 310947840 [ 675.616910][T30895] active_anon 3514368 [ 675.616910][T30895] inactive_file 208896 [ 675.616910][T30895] active_file 159744 [ 675.616910][T30895] unevictable 0 [ 675.616910][T30895] slab_reclaimable 0 [ 675.616910][T30895] slab_unreclaimable 0 [ 675.616910][T30895] slab 0 [ 675.616910][T30895] workingset_refault_anon 1452 [ 675.616910][T30895] workingset_refault_file 9900 [ 675.616910][T30895] workingset_activate_anon 0 [ 675.616910][T30895] workingset_activate_file 3729 [ 675.616910][T30895] workingset_restore_anon 0 [ 675.616910][T30895] workingset_restore_file 2607 [ 675.713726][T30895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30849,uid=0 [ 675.729415][T30895] Memory cgroup out of memory: OOM victim 30849 (syz.4.8517) is already exiting. Skip killing the task [ 675.777589][T31335] swapoff invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 675.803079][T31335] CPU: 1 PID: 31335 Comm: swapoff Tainted: G W syzkaller #0 [ 675.811681][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.821734][T31335] Call Trace: [ 675.825015][T31335] __dump_stack+0x21/0x24 [ 675.829333][T31335] dump_stack_lvl+0x1a7/0x208 [ 675.833990][T31335] ? show_regs_print_info+0x18/0x18 [ 675.839164][T31335] ? ___ratelimit+0x3de/0x560 [ 675.843816][T31335] ? __kasan_check_write+0x14/0x20 [ 675.848909][T31335] ? _raw_spin_lock+0x94/0xf0 [ 675.853560][T31335] dump_stack+0x15/0x1c [ 675.857690][T31335] dump_header+0xdd/0x650 [ 675.861994][T31335] oom_kill_process+0x1fa/0x2c0 [ 675.866821][T31335] out_of_memory+0x93f/0xd20 [ 675.871392][T31335] ? unregister_oom_notifier+0x20/0x20 [ 675.876827][T31335] ? mutex_lock_killable+0x92/0xf0 [ 675.881913][T31335] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 675.888391][T31335] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 675.893910][T31335] ? mem_cgroup_oom_trylock+0x350/0x350 [ 675.899433][T31335] ? _raw_spin_trylock_bh+0x150/0x150 [ 675.904788][T31335] ? _raw_spin_unlock+0x4d/0x70 [ 675.909645][T31335] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 675.915167][T31335] try_charge+0xf69/0x1500 [ 675.919571][T31335] ? xas_nomem+0x6b/0x1d0 [ 675.923962][T31335] ? __memcg_kmem_charge+0x150/0x150 [ 675.929226][T31335] ? add_to_swap_cache+0x97c/0xaa0 [ 675.934313][T31335] ? radix_tree_lookup+0x183/0x1d0 [ 675.939403][T31335] __mem_cgroup_charge+0x14c/0x6d0 [ 675.944490][T31335] __read_swap_cache_async+0x422/0x5d0 [ 675.950042][T31335] swap_cluster_readahead+0x39e/0x5f0 [ 675.955478][T31335] ? read_swap_cache_async+0x80/0x80 [ 675.960742][T31335] shmem_swapin_page+0x414/0x16f0 [ 675.965744][T31335] ? reclaim_shmem_address_space+0x590/0x590 [ 675.971696][T31335] ? __kasan_check_write+0x14/0x20 [ 675.976785][T31335] ? __kasan_check_write+0x14/0x20 [ 675.981883][T31335] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 675.987668][T31335] ? xas_find+0x8b4/0x980 [ 675.991979][T31335] shmem_unuse+0x916/0xe80 [ 675.996374][T31335] ? shmem_undo_range+0x1810/0x1810 [ 676.001653][T31335] ? do_filp_open+0x410/0x410 [ 676.006304][T31335] ? __kasan_slab_alloc+0xcf/0xf0 [ 676.011305][T31335] ? slab_post_alloc_hook+0x5d/0x2f0 [ 676.016566][T31335] ? kmem_cache_alloc+0x162/0x2d0 [ 676.021569][T31335] ? getname_flags+0xb9/0x500 [ 676.026218][T31335] ? getname+0x19/0x20 [ 676.030262][T31335] try_to_unuse+0x20e/0x1e50 [ 676.034829][T31335] ? do_filp_open+0x2c1/0x410 [ 676.039490][T31335] ? vfs_tmpfile+0x2c0/0x2c0 [ 676.044059][T31335] ? memcpy+0x56/0x70 [ 676.048021][T31335] ? __try_to_reclaim_swap+0x2e0/0x2e0 [ 676.053456][T31335] ? __kasan_check_write+0x14/0x20 [ 676.058550][T31335] ? _raw_spin_lock_irq+0x95/0xf0 [ 676.063554][T31335] ? _raw_spin_lock_irqsave+0x130/0x130 [ 676.069079][T31335] ? swapcache_free_entries+0x6d/0x620 [ 676.074512][T31335] ? _raw_spin_unlock_irq+0x4e/0x70 [ 676.079686][T31335] ? cpumask_next+0x12/0x30 [ 676.084241][T31335] ? cpus_read_unlock+0x59/0x90 [ 676.089072][T31335] __se_sys_swapoff+0x60e/0xdf0 [ 676.093902][T31335] __x64_sys_swapoff+0x38/0x40 [ 676.098645][T31335] do_syscall_64+0x31/0x40 [ 676.103042][T31335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 676.108909][T31335] RIP: 0033:0x7f704159ced7 [ 676.113302][T31335] Code: 00 66 90 48 83 fe 01 48 8b 15 1d 1f 0d 00 19 c0 83 e0 f0 83 c0 26 64 89 02 b8 ff ff ff ff c3 0f 1f 40 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f1 1e 0d 00 f7 d8 64 89 01 48 [ 676.132889][T31335] RSP: 002b:00007ffed5bac2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 676.141279][T31335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f704159ced7 [ 676.149230][T31335] RDX: 0000556e36aa0a10 RSI: 00007f70417224e8 RDI: 0000556e36aa09c0 [ 676.157176][T31335] RBP: 0000556e36aa09c0 R08: 0000000000000100 R09: 00007f704166fac0 [ 676.165124][T31335] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffed5bac518 [ 676.173075][T31335] R13: 0000556e36aa02c0 R14: 00007f7041777000 R15: 0000556e1256ed98 [ 676.551834][T31335] memory: usage 305280kB, limit 307200kB, failcnt 45772 [ 676.558890][T31335] memory+swap: usage 379352kB, limit 9007199254740988kB, failcnt 0 [ 676.572885][T31335] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.579833][T31335] Memory cgroup stats for /syz4: [ 676.579947][T31335] anon 270336 [ 676.579947][T31335] file 299802624 [ 676.579947][T31335] kernel_stack 0 [ 676.579947][T31335] percpu 0 [ 676.579947][T31335] sock 0 [ 676.579947][T31335] shmem 297369600 [ 676.579947][T31335] file_mapped 135168 [ 676.579947][T31335] file_dirty 0 [ 676.579947][T31335] file_writeback 0 [ 676.579947][T31335] anon_thp 0 [ 676.579947][T31335] inactive_anon 298782720 [ 676.579947][T31335] active_anon 3244032 [ 676.579947][T31335] inactive_file 2592768 [ 676.579947][T31335] active_file 159744 [ 676.579947][T31335] unevictable 0 [ 676.579947][T31335] slab_reclaimable 0 [ 676.579947][T31335] slab_unreclaimable 0 [ 676.579947][T31335] slab 0 [ 676.579947][T31335] workingset_refault_anon 1485 [ 676.579947][T31335] workingset_refault_file 10923 [ 676.579947][T31335] workingset_activate_anon 0 [ 676.579947][T31335] workingset_activate_file 3762 [ 676.579947][T31335] workingset_restore_anon 0 [ 676.579947][T31335] workingset_restore_file 2640 [ 676.814942][T31335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30859,uid=0 [ 676.841076][T31335] Memory cgroup out of memory: Killed process 30859 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:52100kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 677.366698][T31442] device wg2 entered promiscuous mode [ 677.845931][T31468] device syzkaller0 entered promiscuous mode [ 677.905744][T31335] swapoff invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 677.920076][T31335] CPU: 1 PID: 31335 Comm: swapoff Tainted: G W syzkaller #0 [ 677.928682][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.938762][T31335] Call Trace: [ 677.942047][T31335] __dump_stack+0x21/0x24 [ 677.946367][T31335] dump_stack_lvl+0x1a7/0x208 [ 677.951034][T31335] ? show_regs_print_info+0x18/0x18 [ 677.956222][T31335] ? ___ratelimit+0x3de/0x560 [ 677.960886][T31335] ? __kasan_check_write+0x14/0x20 [ 677.965984][T31335] ? _raw_spin_lock+0x94/0xf0 [ 677.970647][T31335] dump_stack+0x15/0x1c [ 677.974786][T31335] dump_header+0xdd/0x650 [ 677.979105][T31335] oom_kill_process+0x1fa/0x2c0 [ 677.983941][T31335] out_of_memory+0x93f/0xd20 [ 677.988521][T31335] ? unregister_oom_notifier+0x20/0x20 [ 677.993962][T31335] ? mutex_lock_killable+0x92/0xf0 [ 677.999059][T31335] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 678.005574][T31335] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 678.011109][T31335] ? mem_cgroup_oom_trylock+0x350/0x350 [ 678.016646][T31335] ? _raw_spin_trylock_bh+0x150/0x150 [ 678.022006][T31335] ? _raw_spin_unlock+0x4d/0x70 [ 678.026845][T31335] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 678.032381][T31335] try_charge+0xf69/0x1500 [ 678.036787][T31335] ? xas_nomem+0x6b/0x1d0 [ 678.041104][T31335] ? __memcg_kmem_charge+0x150/0x150 [ 678.046384][T31335] ? add_to_swap_cache+0x97c/0xaa0 [ 678.051487][T31335] ? radix_tree_lookup+0x183/0x1d0 [ 678.056582][T31335] __mem_cgroup_charge+0x14c/0x6d0 [ 678.061705][T31335] __read_swap_cache_async+0x422/0x5d0 [ 678.067159][T31335] swap_cluster_readahead+0x39e/0x5f0 [ 678.072528][T31335] ? read_swap_cache_async+0x80/0x80 [ 678.077814][T31335] shmem_swapin_page+0x414/0x16f0 [ 678.082833][T31335] ? __schedule+0xb5b/0x1320 [ 678.087414][T31335] ? reclaim_shmem_address_space+0x590/0x590 [ 678.093464][T31335] ? sched_clock_cpu+0x1b/0x3d0 [ 678.098314][T31335] ? xas_find+0x8b4/0x980 [ 678.102633][T31335] shmem_unuse+0x916/0xe80 [ 678.107041][T31335] ? shmem_undo_range+0x1810/0x1810 [ 678.112252][T31335] ? do_filp_open+0x410/0x410 [ 678.116914][T31335] ? __kasan_slab_alloc+0xcf/0xf0 [ 678.121923][T31335] ? slab_post_alloc_hook+0x5d/0x2f0 [ 678.127196][T31335] ? kmem_cache_alloc+0x162/0x2d0 [ 678.132206][T31335] ? getname_flags+0xb9/0x500 [ 678.136870][T31335] ? getname+0x19/0x20 [ 678.140926][T31335] try_to_unuse+0x20e/0x1e50 [ 678.145506][T31335] ? do_filp_open+0x2c1/0x410 [ 678.150171][T31335] ? vfs_tmpfile+0x2c0/0x2c0 [ 678.154748][T31335] ? memcpy+0x56/0x70 [ 678.158721][T31335] ? __try_to_reclaim_swap+0x2e0/0x2e0 [ 678.164165][T31335] ? __kasan_check_write+0x14/0x20 [ 678.169263][T31335] ? _raw_spin_lock_irq+0x95/0xf0 [ 678.174276][T31335] ? _raw_spin_lock_irqsave+0x130/0x130 [ 678.179812][T31335] ? swapcache_free_entries+0x6d/0x620 [ 678.185307][T31335] ? _raw_spin_unlock_irq+0x4e/0x70 [ 678.190517][T31335] ? cpumask_next+0x12/0x30 [ 678.195013][T31335] ? cpus_read_unlock+0x59/0x90 [ 678.199866][T31335] __se_sys_swapoff+0x60e/0xdf0 [ 678.204712][T31335] __x64_sys_swapoff+0x38/0x40 [ 678.209460][T31335] do_syscall_64+0x31/0x40 [ 678.213872][T31335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 678.219762][T31335] RIP: 0033:0x7f704159ced7 [ 678.224169][T31335] Code: 00 66 90 48 83 fe 01 48 8b 15 1d 1f 0d 00 19 c0 83 e0 f0 83 c0 26 64 89 02 b8 ff ff ff ff c3 0f 1f 40 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f1 1e 0d 00 f7 d8 64 89 01 48 [ 678.244110][T31335] RSP: 002b:00007ffed5bac2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 678.252515][T31335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f704159ced7 [ 678.260473][T31335] RDX: 0000556e36aa0a10 RSI: 00007f70417224e8 RDI: 0000556e36aa09c0 [ 678.268430][T31335] RBP: 0000556e36aa09c0 R08: 0000000000000100 R09: 00007f704166fac0 [ 678.276398][T31335] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffed5bac518 [ 678.284356][T31335] R13: 0000556e36aa02c0 R14: 00007f7041777000 R15: 0000556e1256ed98 [ 678.729161][T31335] memory: usage 307200kB, limit 307200kB, failcnt 47240 [ 678.743618][T31335] memory+swap: usage 361484kB, limit 9007199254740988kB, failcnt 0 [ 678.756563][T31335] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.768517][T31335] Memory cgroup stats for /syz4: [ 678.768641][T31335] anon 135168 [ 678.768641][T31335] file 309399552 [ 678.768641][T31335] kernel_stack 0 [ 678.768641][T31335] percpu 0 [ 678.768641][T31335] sock 0 [ 678.768641][T31335] shmem 309399552 [ 678.768641][T31335] file_mapped 0 [ 678.768641][T31335] file_dirty 0 [ 678.768641][T31335] file_writeback 0 [ 678.768641][T31335] anon_thp 0 [ 678.768641][T31335] inactive_anon 311623680 [ 678.768641][T31335] active_anon 2973696 [ 678.768641][T31335] inactive_file 0 [ 678.768641][T31335] active_file 0 [ 678.768641][T31335] unevictable 0 [ 678.768641][T31335] slab_reclaimable 0 [ 678.768641][T31335] slab_unreclaimable 0 [ 678.768641][T31335] slab 0 [ 678.768641][T31335] workingset_refault_anon 4455 [ 678.768641][T31335] workingset_refault_file 12870 [ 678.768641][T31335] workingset_activate_anon 0 [ 678.768641][T31335] workingset_activate_file 3927 [ 678.768641][T31335] workingset_restore_anon 0 [ 678.768641][T31335] workingset_restore_file 2640 [ 678.924623][T31335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30848,uid=0 [ 678.949706][T31335] Memory cgroup out of memory: Killed process 30848 (syz.4.8517) total-vm:90316kB, anon-rss:1244kB, file-rss:52996kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 679.267331][T30877] syz.4.8517 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 679.368614][T30877] CPU: 0 PID: 30877 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 679.377487][T30877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.387541][T30877] Call Trace: [ 679.390839][T30877] __dump_stack+0x21/0x24 [ 679.395163][T30877] dump_stack_lvl+0x1a7/0x208 [ 679.399834][T30877] ? show_regs_print_info+0x18/0x18 [ 679.405038][T30877] ? ___ratelimit+0x3de/0x560 [ 679.409721][T30877] ? _raw_spin_lock+0x94/0xf0 [ 679.414397][T30877] dump_stack+0x15/0x1c [ 679.418543][T30877] dump_header+0xdd/0x650 [ 679.422866][T30877] oom_kill_process+0x1fa/0x2c0 [ 679.427722][T30877] out_of_memory+0x93f/0xd20 [ 679.432307][T30877] ? unregister_oom_notifier+0x20/0x20 [ 679.437746][T30877] ? mutex_lock_killable+0xdf/0xf0 [ 679.442830][T30877] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 679.449307][T30877] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 679.454830][T30877] ? mem_cgroup_oom_trylock+0x350/0x350 [ 679.460354][T30877] ? _raw_spin_trylock_bh+0x150/0x150 [ 679.465701][T30877] ? _raw_spin_unlock+0x4d/0x70 [ 679.470524][T30877] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 679.476041][T30877] try_charge+0xf69/0x1500 [ 679.480439][T30877] ? __memcg_kmem_charge+0x150/0x150 [ 679.485695][T30877] ? get_page_from_freelist+0x223b/0x23d0 [ 679.491393][T30877] ? _raw_spin_trylock+0xb7/0x150 [ 679.496392][T30877] ? read_pages+0x643/0xb60 [ 679.500877][T30877] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 679.506398][T30877] __mem_cgroup_charge+0x14c/0x6d0 [ 679.511487][T30877] __add_to_page_cache_locked+0x1fe/0x9a0 [ 679.517181][T30877] ? __alloc_pages_nodemask+0x290/0x620 [ 679.522699][T30877] ? put_page+0xd0/0xd0 [ 679.526840][T30877] ? workingset_activation+0x250/0x250 [ 679.532272][T30877] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 679.537792][T30877] ? find_get_entry+0x37b/0x3e0 [ 679.542617][T30877] ? page_cache_prev_miss+0x1a0/0x290 [ 679.547964][T30877] add_to_page_cache_lru+0xa7/0x210 [ 679.553138][T30877] pagecache_get_page+0x700/0x930 [ 679.558140][T30877] filemap_fault+0x1b51/0x20d0 [ 679.562881][T30877] ? generic_file_read_iter+0x5c0/0x5c0 [ 679.568407][T30877] ? filemap_allow_speculation+0x10/0x10 [ 679.574042][T30877] ? __kasan_check_write+0x14/0x20 [ 679.579164][T30877] ext4_filemap_fault+0x8a/0xa0 [ 679.584105][T30877] handle_pte_fault+0x2424/0x37d0 [ 679.589109][T30877] handle_mm_fault+0xf81/0x1710 [ 679.593942][T30877] ? can_reuse_spf_vma+0xe0/0xe0 [ 679.598862][T30877] ? follow_page_mask+0x7ad/0x1150 [ 679.603949][T30877] __get_user_pages+0xbf8/0x1400 [ 679.608864][T30877] ? populate_vma_page_range+0xf0/0xf0 [ 679.614303][T30877] ? __kasan_check_write+0x14/0x20 [ 679.619387][T30877] get_dump_page+0x160/0x5a0 [ 679.623956][T30877] ? freezing_slow_path+0x10a/0x150 [ 679.629147][T30877] ? __mm_populate+0x440/0x440 [ 679.633897][T30877] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 679.639336][T30877] dump_user_range+0x3c/0x1a0 [ 679.643988][T30877] elf_core_dump+0x2866/0x2cc0 [ 679.648734][T30877] ? load_elf_binary+0x28e0/0x28e0 [ 679.653819][T30877] ? __fsnotify_parent+0x6db/0x7c0 [ 679.658912][T30877] ? do_truncate+0x1c6/0x240 [ 679.663475][T30877] ? putname+0xfe/0x150 [ 679.667603][T30877] ? __kasan_check_read+0x11/0x20 [ 679.672604][T30877] ? cgroup_freezing+0x86/0xb0 [ 679.677347][T30877] ? freezing_slow_path+0x10a/0x150 [ 679.682521][T30877] do_coredump+0x1ba3/0x28e0 [ 679.687093][T30877] ? simple_acl_create+0x1c0/0x1c0 [ 679.692179][T30877] ? debug_smp_processor_id+0x17/0x20 [ 679.698152][T30877] ? kmem_cache_free+0x100/0x2d0 [ 679.703074][T30877] ? ____kasan_slab_free+0x130/0x160 [ 679.708337][T30877] ? get_signal+0xb98/0x12e0 [ 679.712903][T30877] ? kmem_cache_free+0x100/0x2d0 [ 679.717822][T30877] get_signal+0xf23/0x12e0 [ 679.722220][T30877] arch_do_signal_or_restart+0xe2/0x11d0 [ 679.727915][T30877] ? down_read_trylock+0x106/0x160 [ 679.733001][T30877] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 679.738610][T30877] ? bad_area+0x6a/0x80 [ 679.742759][T30877] ? do_user_addr_fault+0xd75/0xde0 [ 679.747953][T30877] ? switch_fpu_return+0x19c/0x330 [ 679.753055][T30877] exit_to_user_mode_loop+0xa2/0xe0 [ 679.758230][T30877] exit_to_user_mode_prepare+0x76/0xa0 [ 679.763668][T30877] irqentry_exit_to_user_mode+0x9/0x10 [ 679.769107][T30877] irqentry_exit+0x12/0x60 [ 679.773500][T30877] exc_page_fault+0x67/0xc0 [ 679.777978][T30877] ? asm_exc_page_fault+0x8/0x30 [ 679.782890][T30877] asm_exc_page_fault+0x1e/0x30 [ 679.787719][T30877] RIP: 0033:0xe8 [ 679.791248][T30877] Code: Unable to access opcode bytes at RIP 0xbe. [ 679.797722][T30877] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 679.803767][T30877] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 679.811717][T30877] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 679.819670][T30877] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 679.827618][T30877] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 679.835566][T30877] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 679.909433][T30877] memory: usage 307200kB, limit 307200kB, failcnt 47986 [ 679.948622][T30877] memory+swap: usage 347364kB, limit 9007199254740988kB, failcnt 0 [ 680.095544][T30877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 680.122527][T30877] Memory cgroup stats for /syz4: [ 680.122647][T30877] anon 135168 [ 680.122647][T30877] file 296017920 [ 680.122647][T30877] kernel_stack 0 [ 680.122647][T30877] percpu 0 [ 680.122647][T30877] sock 0 [ 680.122647][T30877] shmem 295882752 [ 680.122647][T30877] file_mapped 135168 [ 680.122647][T30877] file_dirty 0 [ 680.122647][T30877] file_writeback 0 [ 680.122647][T30877] anon_thp 0 [ 680.122647][T30877] inactive_anon 297701376 [ 680.122647][T30877] active_anon 2568192 [ 680.122647][T30877] inactive_file 86016 [ 680.122647][T30877] active_file 0 [ 680.122647][T30877] unevictable 0 [ 680.122647][T30877] slab_reclaimable 0 [ 680.122647][T30877] slab_unreclaimable 0 [ 680.122647][T30877] slab 0 [ 680.122647][T30877] workingset_refault_anon 4851 [ 680.122647][T30877] workingset_refault_file 13596 [ 680.122647][T30877] workingset_activate_anon 0 [ 680.122647][T30877] workingset_activate_file 3927 [ 680.122647][T30877] workingset_restore_anon 0 [ 680.122647][T30877] workingset_restore_file 2640 [ 680.221750][T30877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30877,uid=0 [ 680.238021][T30877] Memory cgroup out of memory: Killed process 30877 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:53116kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 680.256434][ T27] oom_reaper: reaped process 30877 (syz.4.8517), now anon-rss:0kB, file-rss:53052kB, shmem-rss:0kB [ 680.560688][T30879] syz.4.8517 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 680.717388][T30879] CPU: 1 PID: 30879 Comm: syz.4.8517 Tainted: G W syzkaller #0 [ 680.726254][T30879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.736304][T30879] Call Trace: [ 680.739593][T30879] __dump_stack+0x21/0x24 [ 680.743920][T30879] dump_stack_lvl+0x1a7/0x208 [ 680.748577][T30879] ? show_regs_print_info+0x18/0x18 [ 680.753751][T30879] ? ___ratelimit+0x3de/0x560 [ 680.758403][T30879] ? __kasan_check_write+0x14/0x20 [ 680.763493][T30879] ? _raw_spin_lock+0x94/0xf0 [ 680.768151][T30879] dump_stack+0x15/0x1c [ 680.772286][T30879] dump_header+0xdd/0x650 [ 680.776591][T30879] oom_kill_process+0x1fa/0x2c0 [ 680.781414][T30879] out_of_memory+0x93f/0xd20 [ 680.785981][T30879] ? unregister_oom_notifier+0x20/0x20 [ 680.791420][T30879] ? mutex_lock_killable+0x92/0xf0 [ 680.796507][T30879] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 680.802988][T30879] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 680.808510][T30879] ? mem_cgroup_oom_trylock+0x350/0x350 [ 680.814034][T30879] ? _raw_spin_trylock_bh+0x150/0x150 [ 680.819384][T30879] ? _raw_spin_unlock+0x4d/0x70 [ 680.824210][T30879] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 680.829735][T30879] try_charge+0xf69/0x1500 [ 680.834135][T30879] ? __memcg_kmem_charge+0x150/0x150 [ 680.839484][T30879] ? percpu_counter_add_batch+0x13c/0x160 [ 680.845182][T30879] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 680.850704][T30879] __mem_cgroup_charge+0x14c/0x6d0 [ 680.855801][T30879] shmem_add_to_page_cache+0x574/0xe30 [ 680.861237][T30879] ? shmem_alloc_page+0x380/0x380 [ 680.866242][T30879] ? _raw_spin_lock_irqsave+0x130/0x130 [ 680.871765][T30879] ? find_lock_entry+0x4b/0x200 [ 680.876595][T30879] shmem_getpage_gfp+0x8eb/0x2120 [ 680.881606][T30879] shmem_write_begin+0xce/0x1b0 [ 680.886436][T30879] generic_perform_write+0x2ce/0x540 [ 680.891703][T30879] ? atime_needs_update+0x5b0/0x5b0 [ 680.896881][T30879] ? grab_cache_page_write_begin+0xb0/0xb0 [ 680.902663][T30879] ? file_remove_privs+0x5b0/0x5b0 [ 680.907749][T30879] ? __kasan_check_write+0x14/0x20 [ 680.912836][T30879] ? down_write+0xb2/0x120 [ 680.917235][T30879] __generic_file_write_iter+0x24b/0x480 [ 680.922845][T30879] ? generic_write_checks+0x3d4/0x480 [ 680.928194][T30879] generic_file_write_iter+0xa9/0x1d0 [ 680.933541][T30879] __kernel_write+0x535/0x910 [ 680.938193][T30879] ? vfs_read+0xa60/0xa60 [ 680.942501][T30879] ? populate_vma_page_range+0xf0/0xf0 [ 680.947971][T30879] ? cgroup_freezing+0x86/0xb0 [ 680.952713][T30879] ? freezing_slow_path+0x10a/0x150 [ 680.957888][T30879] dump_emit+0x246/0x370 [ 680.962109][T30879] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 680.967551][T30879] dump_user_range+0x6a/0x1a0 [ 680.972205][T30879] elf_core_dump+0x2866/0x2cc0 [ 680.976946][T30879] ? load_elf_binary+0x28e0/0x28e0 [ 680.982036][T30879] ? __fsnotify_parent+0x6db/0x7c0 [ 680.987129][T30879] ? do_truncate+0x1c6/0x240 [ 680.991694][T30879] ? putname+0xfe/0x150 [ 680.995827][T30879] ? __kasan_check_read+0x11/0x20 [ 681.000833][T30879] ? cgroup_freezing+0x86/0xb0 [ 681.005573][T30879] ? freezing_slow_path+0x10a/0x150 [ 681.010749][T30879] do_coredump+0x1ba3/0x28e0 [ 681.015320][T30879] ? simple_acl_create+0x1c0/0x1c0 [ 681.020409][T30879] ? debug_smp_processor_id+0x17/0x20 [ 681.025757][T30879] ? kmem_cache_free+0x100/0x2d0 [ 681.030671][T30879] ? ____kasan_slab_free+0x130/0x160 [ 681.035934][T30879] ? get_signal+0xb98/0x12e0 [ 681.040505][T30879] ? kmem_cache_free+0x100/0x2d0 [ 681.045421][T30879] get_signal+0xf23/0x12e0 [ 681.049820][T30879] arch_do_signal_or_restart+0xe2/0x11d0 [ 681.055432][T30879] ? down_read_trylock+0x106/0x160 [ 681.060520][T30879] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 681.066148][T30879] ? bad_area+0x6a/0x80 [ 681.070289][T30879] ? do_user_addr_fault+0xd75/0xde0 [ 681.075484][T30879] ? switch_fpu_return+0x19c/0x330 [ 681.080587][T30879] exit_to_user_mode_loop+0xa2/0xe0 [ 681.085767][T30879] exit_to_user_mode_prepare+0x76/0xa0 [ 681.091235][T30879] irqentry_exit_to_user_mode+0x9/0x10 [ 681.096674][T30879] irqentry_exit+0x12/0x60 [ 681.101068][T30879] exc_page_fault+0x67/0xc0 [ 681.105550][T30879] ? asm_exc_page_fault+0x8/0x30 [ 681.110466][T30879] asm_exc_page_fault+0x1e/0x30 [ 681.115294][T30879] RIP: 0033:0xe8 [ 681.118826][T30879] Code: Unable to access opcode bytes at RIP 0xbe. [ 681.125305][T30879] RSP: 002b:0000200000000548 EFLAGS: 00010217 [ 681.131357][T30879] RAX: 0000000000000000 RBX: 00007f3950b41fa0 RCX: 00007f39508c8e59 [ 681.139307][T30879] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000002000 [ 681.147256][T30879] RBP: 00007f395095ed6f R08: 0000200000000600 R09: 0000200000000600 [ 681.155208][T30879] R10: 00002000000005c0 R11: 0000000000000206 R12: 0000000000000000 [ 681.163158][T30879] R13: 00007f3950b42038 R14: 00007f3950b41fa0 R15: 00007ffd1b12a188 [ 681.194383][T31579] device pim6reg1 entered promiscuous mode [ 681.203779][T30879] memory: usage 307172kB, limit 307200kB, failcnt 49226 [ 681.221191][T30879] memory+swap: usage 339872kB, limit 9007199254740988kB, failcnt 0 [ 681.278574][T30879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 681.384971][T30879] Memory cgroup stats for /syz4: [ 681.385091][T30879] anon 270336 [ 681.385091][T30879] file 303452160 [ 681.385091][T30879] kernel_stack 0 [ 681.385091][T30879] percpu 0 [ 681.385091][T30879] sock 0 [ 681.385091][T30879] shmem 302100480 [ 681.385091][T30879] file_mapped 1081344 [ 681.385091][T30879] file_dirty 0 [ 681.385091][T30879] file_writeback 0 [ 681.385091][T30879] anon_thp 0 [ 681.385091][T30879] inactive_anon 303513600 [ 681.385091][T30879] active_anon 2297856 [ 681.385091][T30879] inactive_file 1146880 [ 681.385091][T30879] active_file 0 [ 681.385091][T30879] unevictable 0 [ 681.385091][T30879] slab_reclaimable 0 [ 681.385091][T30879] slab_unreclaimable 0 [ 681.385091][T30879] slab 0 [ 681.385091][T30879] workingset_refault_anon 5445 [ 681.385091][T30879] workingset_refault_file 14751 [ 681.385091][T30879] workingset_activate_anon 0 [ 681.385091][T30879] workingset_activate_file 3927 [ 681.385091][T30879] workingset_restore_anon 0 [ 681.385091][T30879] workingset_restore_file 2640 [ 681.565032][T31601] device veth0_vlan left promiscuous mode [ 681.642235][T31601] device veth0_vlan entered promiscuous mode [ 681.777629][T30879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30892,uid=0 [ 681.880180][T30879] Memory cgroup out of memory: Killed process 30892 (syz.4.8517) total-vm:90448kB, anon-rss:1288kB, file-rss:55232kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 681.936851][T31335] swapoff invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 681.956721][T31335] CPU: 1 PID: 31335 Comm: swapoff Tainted: G W syzkaller #0 [ 681.965578][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.975633][T31335] Call Trace: [ 681.978926][T31335] __dump_stack+0x21/0x24 [ 681.983259][T31335] dump_stack_lvl+0x1a7/0x208 [ 681.987937][T31335] ? show_regs_print_info+0x18/0x18 [ 681.993134][T31335] ? ___ratelimit+0x3de/0x560 [ 681.997811][T31335] ? __kasan_check_write+0x14/0x20 [ 682.002916][T31335] ? _raw_spin_lock+0x94/0xf0 [ 682.007586][T31335] dump_stack+0x15/0x1c [ 682.011734][T31335] dump_header+0xdd/0x650 [ 682.016042][T31335] oom_kill_process+0x1fa/0x2c0 [ 682.020881][T31335] out_of_memory+0x93f/0xd20 [ 682.025471][T31335] ? unregister_oom_notifier+0x20/0x20 [ 682.030933][T31335] ? mutex_lock_killable+0x92/0xf0 [ 682.036039][T31335] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 682.042535][T31335] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 682.048073][T31335] ? mem_cgroup_oom_trylock+0x350/0x350 [ 682.053615][T31335] ? _raw_spin_trylock_bh+0x150/0x150 [ 682.058982][T31335] ? _raw_spin_unlock+0x4d/0x70 [ 682.063827][T31335] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 682.069364][T31335] try_charge+0xf69/0x1500 [ 682.073782][T31335] ? xas_nomem+0x6b/0x1d0 [ 682.078103][T31335] ? __memcg_kmem_charge+0x150/0x150 [ 682.083386][T31335] ? add_to_swap_cache+0x97c/0xaa0 [ 682.088504][T31335] ? radix_tree_lookup+0x183/0x1d0 [ 682.093609][T31335] __mem_cgroup_charge+0x14c/0x6d0 [ 682.098703][T31335] __read_swap_cache_async+0x422/0x5d0 [ 682.104139][T31335] swap_cluster_readahead+0x39e/0x5f0 [ 682.109487][T31335] ? read_swap_cache_async+0x80/0x80 [ 682.114752][T31335] shmem_swapin_page+0x414/0x16f0 [ 682.119757][T31335] ? __schedule+0xb5b/0x1320 [ 682.124322][T31335] ? reclaim_shmem_address_space+0x590/0x590 [ 682.130284][T31335] ? sched_clock_cpu+0x1b/0x3d0 [ 682.135120][T31335] ? xas_find+0x8b4/0x980 [ 682.139427][T31335] shmem_unuse+0x916/0xe80 [ 682.143823][T31335] ? shmem_undo_range+0x1810/0x1810 [ 682.149006][T31335] ? do_filp_open+0x410/0x410 [ 682.153661][T31335] ? __kasan_slab_alloc+0xcf/0xf0 [ 682.158666][T31335] ? slab_post_alloc_hook+0x5d/0x2f0 [ 682.163926][T31335] ? kmem_cache_alloc+0x162/0x2d0 [ 682.168928][T31335] ? getname_flags+0xb9/0x500 [ 682.173580][T31335] ? getname+0x19/0x20 [ 682.177627][T31335] try_to_unuse+0x20e/0x1e50 [ 682.182198][T31335] ? do_filp_open+0x2c1/0x410 [ 682.186855][T31335] ? vfs_tmpfile+0x2c0/0x2c0 [ 682.191423][T31335] ? memcpy+0x56/0x70 [ 682.195383][T31335] ? __try_to_reclaim_swap+0x2e0/0x2e0 [ 682.200818][T31335] ? __kasan_check_write+0x14/0x20 [ 682.205908][T31335] ? _raw_spin_lock_irq+0x95/0xf0 [ 682.210908][T31335] ? _raw_spin_lock_irqsave+0x130/0x130 [ 682.216436][T31335] ? swapcache_free_entries+0x6d/0x620 [ 682.221872][T31335] ? _raw_spin_unlock_irq+0x4e/0x70 [ 682.227049][T31335] ? cpumask_next+0x12/0x30 [ 682.231527][T31335] ? cpus_read_unlock+0x59/0x90 [ 682.236353][T31335] __se_sys_swapoff+0x60e/0xdf0 [ 682.241183][T31335] __x64_sys_swapoff+0x38/0x40 [ 682.245924][T31335] do_syscall_64+0x31/0x40 [ 682.250316][T31335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 682.256182][T31335] RIP: 0033:0x7f704159ced7 [ 682.260579][T31335] Code: 00 66 90 48 83 fe 01 48 8b 15 1d 1f 0d 00 19 c0 83 e0 f0 83 c0 26 64 89 02 b8 ff ff ff ff c3 0f 1f 40 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f1 1e 0d 00 f7 d8 64 89 01 48 [ 682.280160][T31335] RSP: 002b:00007ffed5bac2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 682.288560][T31335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f704159ced7 [ 682.296523][T31335] RDX: 0000556e36aa0a10 RSI: 00007f70417224e8 RDI: 0000556e36aa09c0 [ 682.304480][T31335] RBP: 0000556e36aa09c0 R08: 0000000000000100 R09: 00007f704166fac0 [ 682.312432][T31335] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffed5bac518 [ 682.320382][T31335] R13: 0000556e36aa02c0 R14: 00007f7041777000 R15: 0000556e1256ed98 [ 682.408530][T31335] memory: usage 257336kB, limit 307200kB, failcnt 50208 [ 682.416682][T31335] memory+swap: usage 287776kB, limit 9007199254740988kB, failcnt 0 [ 682.425662][T31335] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 682.447155][T31335] Memory cgroup stats for /syz4: [ 682.447276][T31335] anon 270336 [ 682.447276][T31335] file 258306048 [ 682.447276][T31335] kernel_stack 0 [ 682.447276][T31335] percpu 0 [ 682.447276][T31335] sock 0 [ 682.447276][T31335] shmem 258441216 [ 682.447276][T31335] file_mapped 135168 [ 682.447276][T31335] file_dirty 0 [ 682.447276][T31335] file_writeback 0 [ 682.447276][T31335] anon_thp 0 [ 682.447276][T31335] inactive_anon 259719168 [ 682.447276][T31335] active_anon 2297856 [ 682.447276][T31335] inactive_file 180224 [ 682.447276][T31335] active_file 0 [ 682.447276][T31335] unevictable 0 [ 682.447276][T31335] slab_reclaimable 0 [ 682.447276][T31335] slab_unreclaimable 0 [ 682.447276][T31335] slab 0 [ 682.447276][T31335] workingset_refault_anon 5610 [ 682.447276][T31335] workingset_refault_file 15510 [ 682.447276][T31335] workingset_activate_anon 0 [ 682.447276][T31335] workingset_activate_file 3927 [ 682.447276][T31335] workingset_restore_anon 0 [ 682.447276][T31335] workingset_restore_file 2640 [ 682.784441][ T24] audit: type=1400 audit(1781264230.940:192): avc: denied { create } for pid=31659 comm="syz.1.8725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 683.044745][T31335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30884,uid=0 [ 683.082251][T31335] Memory cgroup out of memory: Killed process 30884 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:53056kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 683.805673][T31693] ref_ctr_offset mismatch. inode: 0x596 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 684.435311][T31335] swapoff invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 684.462826][T31335] CPU: 0 PID: 31335 Comm: swapoff Tainted: G W syzkaller #0 [ 684.471437][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.481487][T31335] Call Trace: [ 684.484802][T31335] __dump_stack+0x21/0x24 [ 684.489124][T31335] dump_stack_lvl+0x1a7/0x208 [ 684.493792][T31335] ? show_regs_print_info+0x18/0x18 [ 684.498978][T31335] ? ___ratelimit+0x3de/0x560 [ 684.503647][T31335] ? _raw_spin_lock+0x94/0xf0 [ 684.508312][T31335] dump_stack+0x15/0x1c [ 684.512457][T31335] dump_header+0xdd/0x650 [ 684.516781][T31335] oom_kill_process+0x1fa/0x2c0 [ 684.521623][T31335] out_of_memory+0x93f/0xd20 [ 684.526206][T31335] ? unregister_oom_notifier+0x20/0x20 [ 684.531655][T31335] ? mutex_lock_killable+0x92/0xf0 [ 684.536750][T31335] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 684.543232][T31335] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 684.548764][T31335] ? mem_cgroup_oom_trylock+0x350/0x350 [ 684.554304][T31335] ? _raw_spin_trylock_bh+0x150/0x150 [ 684.559676][T31335] ? _raw_spin_unlock+0x4d/0x70 [ 684.564522][T31335] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 684.570066][T31335] try_charge+0xf69/0x1500 [ 684.574484][T31335] ? xas_nomem+0x6b/0x1d0 [ 684.578833][T31335] ? __memcg_kmem_charge+0x150/0x150 [ 684.584112][T31335] ? add_to_swap_cache+0x97c/0xaa0 [ 684.589226][T31335] ? radix_tree_lookup+0x183/0x1d0 [ 684.594338][T31335] __mem_cgroup_charge+0x14c/0x6d0 [ 684.599454][T31335] __read_swap_cache_async+0x422/0x5d0 [ 684.604911][T31335] swap_cluster_readahead+0x39e/0x5f0 [ 684.610275][T31335] ? read_swap_cache_async+0x80/0x80 [ 684.615558][T31335] shmem_swapin_page+0x414/0x16f0 [ 684.620643][T31335] ? ttwu_do_activate+0x1e2/0x2b0 [ 684.625667][T31335] ? try_to_wake_up+0x616/0xd70 [ 684.630525][T31335] ? reclaim_shmem_address_space+0x590/0x590 [ 684.636502][T31335] ? sched_clock_cpu+0x1b/0x3d0 [ 684.641359][T31335] ? xas_find+0x447/0x980 [ 684.645687][T31335] shmem_unuse+0x916/0xe80 [ 684.650107][T31335] ? shmem_undo_range+0x1810/0x1810 [ 684.655307][T31335] ? do_filp_open+0x410/0x410 [ 684.659975][T31335] ? __kasan_slab_alloc+0xcf/0xf0 [ 684.664994][T31335] ? slab_post_alloc_hook+0x5d/0x2f0 [ 684.670269][T31335] ? kmem_cache_alloc+0x162/0x2d0 [ 684.675285][T31335] ? getname_flags+0xb9/0x500 [ 684.679953][T31335] ? getname+0x19/0x20 [ 684.684012][T31335] try_to_unuse+0x20e/0x1e50 [ 684.688599][T31335] ? do_filp_open+0x2c1/0x410 [ 684.693269][T31335] ? vfs_tmpfile+0x2c0/0x2c0 [ 684.697854][T31335] ? memcpy+0x56/0x70 [ 684.701836][T31335] ? __try_to_reclaim_swap+0x2e0/0x2e0 [ 684.707294][T31335] ? __kasan_check_write+0x14/0x20 [ 684.712401][T31335] ? _raw_spin_lock_irq+0x95/0xf0 [ 684.717422][T31335] ? _raw_spin_lock_irqsave+0x130/0x130 [ 684.722966][T31335] ? swapcache_free_entries+0x6d/0x620 [ 684.728423][T31335] ? _raw_spin_unlock_irq+0x4e/0x70 [ 684.733615][T31335] ? cpumask_next+0x12/0x30 [ 684.738112][T31335] ? cpus_read_unlock+0x59/0x90 [ 684.742958][T31335] __se_sys_swapoff+0x60e/0xdf0 [ 684.747820][T31335] __x64_sys_swapoff+0x38/0x40 [ 684.752581][T31335] do_syscall_64+0x31/0x40 [ 684.756997][T31335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 684.762884][T31335] RIP: 0033:0x7f704159ced7 [ 684.767291][T31335] Code: 00 66 90 48 83 fe 01 48 8b 15 1d 1f 0d 00 19 c0 83 e0 f0 83 c0 26 64 89 02 b8 ff ff ff ff c3 0f 1f 40 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f1 1e 0d 00 f7 d8 64 89 01 48 [ 684.786884][T31335] RSP: 002b:00007ffed5bac2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 684.795282][T31335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f704159ced7 [ 684.803234][T31335] RDX: 0000556e36aa0a10 RSI: 00007f70417224e8 RDI: 0000556e36aa09c0 [ 684.811187][T31335] RBP: 0000556e36aa09c0 R08: 0000000000000100 R09: 00007f704166fac0 [ 684.819149][T31335] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffed5bac518 [ 684.827098][T31335] R13: 0000556e36aa02c0 R14: 00007f7041777000 R15: 0000556e1256ed98 [ 684.845807][T31335] memory: usage 307200kB, limit 307200kB, failcnt 51620 [ 684.859145][T31335] memory+swap: usage 320500kB, limit 9007199254740988kB, failcnt 0 [ 684.867052][T31335] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 684.873978][T31335] Memory cgroup stats for /syz4: [ 684.874096][T31335] anon 270336 [ 684.874096][T31335] file 312102912 [ 684.874096][T31335] kernel_stack 0 [ 684.874096][T31335] percpu 0 [ 684.874096][T31335] sock 0 [ 684.874096][T31335] shmem 312238080 [ 684.874096][T31335] file_mapped 135168 [ 684.874096][T31335] file_dirty 0 [ 684.874096][T31335] file_writeback 0 [ 684.874096][T31335] anon_thp 0 [ 684.874096][T31335] inactive_anon 312705024 [ 684.874096][T31335] active_anon 1892352 [ 684.874096][T31335] inactive_file 122880 [ 684.874096][T31335] active_file 118784 [ 684.874096][T31335] unevictable 0 [ 684.874096][T31335] slab_reclaimable 0 [ 684.874096][T31335] slab_unreclaimable 0 [ 684.874096][T31335] slab 0 [ 684.874096][T31335] workingset_refault_anon 8580 [ 684.874096][T31335] workingset_refault_file 16533 [ 684.874096][T31335] workingset_activate_anon 0 [ 684.874096][T31335] workingset_activate_file 3927 [ 684.874096][T31335] workingset_restore_anon 0 [ 684.874096][T31335] workingset_restore_file 2640 [ 684.968969][T31335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30893,uid=0 [ 684.983788][T31335] Memory cgroup out of memory: Killed process 30893 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:52932kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 685.088891][T31732] syz.4.8743 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 685.102007][T31732] CPU: 0 PID: 31732 Comm: syz.4.8743 Tainted: G W syzkaller #0 [ 685.110857][T31732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.120908][T31732] Call Trace: [ 685.124192][T31732] __dump_stack+0x21/0x24 [ 685.128517][T31732] dump_stack_lvl+0x1a7/0x208 [ 685.133186][T31732] ? show_regs_print_info+0x18/0x18 [ 685.138400][T31732] ? ___ratelimit+0x3de/0x560 [ 685.143108][T31732] ? __kasan_check_write+0x14/0x20 [ 685.148216][T31732] ? _raw_spin_lock+0x94/0xf0 [ 685.152888][T31732] dump_stack+0x15/0x1c [ 685.157039][T31732] dump_header+0xdd/0x650 [ 685.161368][T31732] oom_kill_process+0x1fa/0x2c0 [ 685.166209][T31732] out_of_memory+0x93f/0xd20 [ 685.170791][T31732] ? unregister_oom_notifier+0x20/0x20 [ 685.176246][T31732] ? mutex_lock_killable+0xdf/0xf0 [ 685.181359][T31732] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 685.187865][T31732] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 685.193405][T31732] ? mem_cgroup_oom_trylock+0x350/0x350 [ 685.198955][T31732] ? _raw_spin_trylock_bh+0x150/0x150 [ 685.204343][T31732] ? _raw_spin_unlock+0x4d/0x70 [ 685.209194][T31732] ? mem_cgroup_oom_trylock+0x1fc/0x350 [ 685.214734][T31732] try_charge+0xf69/0x1500 [ 685.219148][T31732] ? __memcg_kmem_charge+0x150/0x150 [ 685.224460][T31732] ? __alloc_pages_nodemask+0x290/0x620 [ 685.230010][T31732] ? get_mem_cgroup_from_mm+0x197/0x1b0 [ 685.235561][T31732] __mem_cgroup_charge+0x14c/0x6d0 [ 685.240675][T31732] handle_pte_fault+0x17e2/0x37d0 [ 685.245695][T31732] __handle_speculative_fault+0xe77/0x1390 [ 685.251501][T31732] ? finish_fault+0xa70/0xa70 [ 685.256175][T31732] ? debug_smp_processor_id+0x17/0x20 [ 685.261546][T31732] do_user_addr_fault+0x856/0xde0 [ 685.266565][T31732] ? __kasan_check_write+0x14/0x20 [ 685.271674][T31732] ? switch_fpu_return+0x19c/0x330 [ 685.276778][T31732] ? do_kern_addr_fault+0x80/0x80 [ 685.281795][T31732] ? __kasan_check_read+0x11/0x20 [ 685.286822][T31732] exc_page_fault+0x5a/0xc0 [ 685.291323][T31732] ? asm_exc_page_fault+0x8/0x30 [ 685.296255][T31732] asm_exc_page_fault+0x1e/0x30 [ 685.301095][T31732] RIP: 0033:0x7f395087739f [ 685.305593][T31732] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 685.325197][T31732] RSP: 002b:00007f394f322ff0 EFLAGS: 00010246 [ 685.331264][T31732] RAX: 00007f394f3230d0 RBX: 0000000000020000 RCX: 00007f394f322ff0 [ 685.339229][T31732] RDX: 00007f395097b156 RSI: 0000000000000023 RDI: 00007f394f3230d0 [ 685.347196][T31732] RBP: 00007f394f304000 R08: 0000000000000000 R09: 00007ffd1b12a187 [ 685.355191][T31732] R10: 0000000000000008 R11: 0000000000000202 R12: 00007f394f3230d0 [ 685.363169][T31732] R13: 000000000000000b R14: 00007ffd1b12a0a0 R15: 00007ffd1b12a188 [ 685.418574][T31732] memory: usage 266924kB, limit 307200kB, failcnt 51779 [ 685.428721][T31732] memory+swap: usage 279892kB, limit 9007199254740988kB, failcnt 0 [ 685.436701][T31732] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 685.444876][T31732] Memory cgroup stats for /syz4: [ 685.444992][T31732] anon 270336 [ 685.444992][T31732] file 271011840 [ 685.444992][T31732] kernel_stack 0 [ 685.444992][T31732] percpu 0 [ 685.444992][T31732] sock 0 [ 685.444992][T31732] shmem 271147008 [ 685.444992][T31732] file_mapped 135168 [ 685.444992][T31732] file_dirty 0 [ 685.444992][T31732] file_writeback 0 [ 685.444992][T31732] anon_thp 0 [ 685.444992][T31732] inactive_anon 271749120 [ 685.444992][T31732] active_anon 1757184 [ 685.444992][T31732] inactive_file 122880 [ 685.444992][T31732] active_file 118784 [ 685.444992][T31732] unevictable 0 [ 685.444992][T31732] slab_reclaimable 0 [ 685.444992][T31732] slab_unreclaimable 0 [ 685.444992][T31732] slab 0 [ 685.444992][T31732] workingset_refault_anon 8679 [ 685.444992][T31732] workingset_refault_file 16533 [ 685.444992][T31732] workingset_activate_anon 0 [ 685.444992][T31732] workingset_activate_file 3927 [ 685.444992][T31732] workingset_restore_anon 0 [ 685.444992][T31732] workingset_restore_file 2640 [ 685.555153][T31732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8517,pid=30871,uid=0 [ 685.583288][T31732] Memory cgroup out of memory: Killed process 30871 (syz.4.8517) total-vm:90448kB, anon-rss:1248kB, file-rss:52932kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 685.651632][ T24] audit: type=1400 audit(1781264233.810:193): avc: denied { create } for pid=31753 comm="syz.1.8749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 686.022126][T31811] -1: renamed from syzkaller0 [ 686.103833][ T24] audit: type=1400 audit(1781264234.260:194): avc: denied { read } for pid=31823 comm="syz.3.8767" name="cgroup.subtree_control" dev="cgroup2" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 686.612110][ T24] audit: type=1400 audit(1781264234.770:195): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[14388]" dev="pipefs" ino=14388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes Connection to 10.128.0.51 closed by remote host. [ 686.820892][T31883] bridge0: port 4(syz_tun) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 687.981096][ T9] device gretap0 left promiscuous mode [ 687.986559][ T9] bridge0: port 3(gretap0) entered disabled state [ 687.994648][ T9] device gretap0 left promiscuous mode [ 688.000250][ T9] bridge0: port 3(gretap0) entered disabled state [ 688.169422][ T9] device macsec0 left promiscuous mode [ 688.174971][ T9] nr0: port 1(macsec0) entered disabled state [ 688.181652][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.188975][ T9] device bridge_slave_0 left promiscuous mode [ 688.195049][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.202565][ T9] device veth0_to_team left promiscuous mode [ 688.208602][ T9] Ÿë: port 1(veth0_to_team) entered disabled state [ 688.215988][ T9] nr0: port 1(macsec0) entered disabled state [ 688.222573][ T9] device bridge_slave_1 left promiscuous mode [ 688.228725][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.235966][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.243849][ T9] device veth1_macvtap left promiscuous mode [ 688.249944][ T9] device veth0_vlan left promiscuous mode [ 688.255746][ T9] device veth1_macvtap left promiscuous mode [ 688.261890][ T9] device veth0_vlan left promiscuous mode [ 688.686597][T31889] kvm: exiting hardware virtualization [ 688.693321][T31889] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 688.700123][T31889] ACPI: Preparing to enter system sleep state S5 [ 688.707242][T31889] reboot: Power down serialport: VM disconnected.