last executing test programs: 5.955217156s ago: executing program 0 (id=3437): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c000000000061139b0000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x42340, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230006) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={&(0x7f0000000380), 0x3}, 0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r6}, 0x18) close(r4) 5.236276537s ago: executing program 0 (id=3452): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x50420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x2000000, 0x3, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syz_tun\x00', @remote}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000006000000020000000900000002080100", @ANYRES32=0x1, @ANYBLOB="ffff00"/20, @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="c1fa87c91ec92b2e33f6b9bd2be4e10981aa1c2817f333101073a3b6edb6cc205a549c120d04de6c42578d45a2fd19742bd41283c4c7f8e054bc461b824fa518e5fc2d7aa0b858877535d12010a3aef4fee6e217d70810811f422eaea33fd68f185092f6c84988a3d90faaa8c712413980dcd7e6e8f76a070b7c20ab4c612b80244539453584ba055304a0ba9488d32ce9ce19b640c01a2fe3362b722cea25c12db15b0cd30b8396"], 0x50) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.188690636s ago: executing program 0 (id=3474): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/27, 0x1b, 0x0, &(0x7f0000000280)=""/203, 0xcb}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x93}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x93}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61}, {0x25, 0x2, 0x0, 0x8}, {0xfa28}, {0x6, 0xda, 0xcb}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61}, {0x25, 0x2, 0x0, 0x8}, {0xfa28}, {0x6, 0xda, 0xcb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x100c}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x100c}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0x0, 0x0}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000000), &(0x7f0000000180)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000000), &(0x7f0000000180)=r9}, 0x20) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x5be0}, 0x0, 0x8, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r13, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x5c, 0x1, 0x0, 0xfffff024}, {0x6, 0x7d, 0x9}]}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r14) 2.124522667s ago: executing program 4 (id=3475): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.822876902s ago: executing program 0 (id=3479): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b88ca1aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x20, 0x0, 0x0, 0x0, 0x4, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0xc}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.353700209s ago: executing program 1 (id=3484): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x103, [{0x0, 0x2, 0x7}, {0x0, 0x3, 0x5}]}]}}, &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1}, 0x28) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.351855869s ago: executing program 3 (id=3485): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000e00000000000000", @ANYRES32=0x1, @ANYBLOB="01000100"/17, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)={0xfe3}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1000000000000009}, 0x6a4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0xa18d, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.350523629s ago: executing program 1 (id=3486): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0, 0xfff}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xb16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x70, 0x0, &(0x7f00000002c0)="ec4f78651a65c1a96cebdaf5539254afe11d4be0a9ab0d2900ef4d24a02c37bc0cd2672298b5bf26624d7db5d245c4ff08f6146e45191b87efd4cf86fdbc3b1ba4f080c07a9d18f882593ea142b10c803040ff7ea97bf6051228f0b506680b36587d81c05bf27becadb304e920842f7d"}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @enum]}}, &(0x7f0000000080)=""/159, 0x3e, 0x9f, 0x1}, 0x28) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1d, 0x8, 0x2, 0xfe, 0x0, 0x87a, 0x20445, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp, 0x9400, 0x9, 0x2, 0x1, 0x0, 0x78, 0xf000, 0x0, 0x7, 0x0, 0x58}, 0x0, 0x1, r0, 0x0) 1.195437961s ago: executing program 1 (id=3487): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r2, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x4, 0xa3ef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0xd}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0x1, &(0x7f0000000000)="89aa85045091b6d9c61788e16f7faa9b3f0ac6d17d4e32df72c709fb683fd3b8062d1673ccf7ffc160c22d271e7e263f280bc312613dc75b7ebf28c0bb58816059abeed8e148c0d40541734c1a6941ee345ec7f80f4fc89197506f", &(0x7f0000000080)=""/154}, 0x20) 1.194802791s ago: executing program 3 (id=3488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x5a, 0x0, 0x0, 0xfffffffffffffffd, 0x1f}, 0x40010000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x49, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500000000000000f7cd857ac5737aa46e86ed34f2bb8e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r6, r1, 0x1, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="07010000000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="8c00000000000000b70800007b8af8ff00000000bfa200000000000007020000f80500ffb703000008000000b70400000000000085000000019f17009500000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 1.169026912s ago: executing program 1 (id=3489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x0, 0x6}]}) (async) socketpair(0x1a, 0x800, 0xb05, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) (async) sendmsg$unix(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x2402c0c4}, 0x240000d0) (async) recvmsg$unix(r3, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x40000020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)=0x1) 1.168400812s ago: executing program 3 (id=3490): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r0, 0x20, &(0x7f0000001140)={&(0x7f0000000040)=""/4096, 0x1000, 0x0, &(0x7f0000001040)=""/233, 0xe9}}, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000001280)={0x5, 0x80, 0x4, 0x8d, 0x3, 0x0, 0x0, 0x3, 0x11, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8e, 0x4, @perf_bp={&(0x7f0000001240), 0xc}, 0x2574, 0x1, 0xfffffff7, 0x5, 0x1ff, 0x200, 0x9, 0x0, 0x3, 0x0, 0x10}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000011c0)={0x5, 0x80, 0x1, 0x2, 0x2b, 0x81, 0x0, 0xfc98, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x100}, 0x0, 0xb7, 0x1, 0x5, 0xdd4, 0x10001, 0x7ff, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xb) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000001300)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair(0x2a, 0x80000, 0x80, &(0x7f0000001380)={0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r2, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0], 0x0, 0xef, &(0x7f0000001480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={r4}, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001700)={0x3}, 0x8) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001740)='syz0\x00', 0x200002, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)=r6}, 0x20) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x5, &(0x7f0000001880)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x101}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f00000018c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000001900)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x2, 0x6, 0x0, 0x7fffffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001980)=[0x1], &(0x7f00000019c0)=[{0x5, 0x2, 0xc, 0x9}, {0x5, 0x2, 0xa, 0x7}, {0x1, 0x5, 0xd, 0x5}, {0x0, 0x2, 0xa, 0x2}, {0x4, 0x5, 0x0, 0xa}, {0x3, 0x3, 0x4, 0x6}, {0x0, 0x5, 0x6, 0x1}, {0x1, 0x5, 0x8, 0xc}, {0x5, 0x1, 0x3, 0x7}], 0x10, 0x64}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r7, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001b40)=r8}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000001bc0), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)={0x1b, 0x0, 0x0, 0xbb9, 0x0, r10, 0xcaf8, '\x00', 0x0, r3, 0x4, 0x2, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e40)={@ifindex=r5, 0x2e, 0x1, 0x2e, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001e80)={@map=r11, r8, 0x37, 0x2000, 0x0, @value, @void, @void, @void, r12}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001ec0)=0x400, 0x12) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)) socketpair(0x7, 0x800, 0x1, &(0x7f0000001f40)) (async) r13 = openat$cgroup_ro(r9, &(0x7f0000001f80)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001fc0)={r13, r2, 0x0, r8}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000002000), 0x4) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002240)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002280)={&(0x7f0000002040)="d06365f1039946b98884770845ced339500d55da49d24e0ba99050d8a47a85efa3f01de11cbf5c2bb8a0fe0cf67eb1332bafd07c31d9061a5528fcb2216a7d5a8896b3bf1cfc4309d20951d05cef63f29a5d01", &(0x7f00000020c0)=""/116, &(0x7f0000002140)="9c70b0232562afd412dccc7cacc15b85deb951584833f5df17dbc09e966c43186c85829afa4f2788859da924", &(0x7f0000002180)="fa8971c76b62db9ff83cf62a4aff3517d47b8ced9dbebed29614793851f5c8eec72e455d0bd63348856ff6aaf5a689f0778e22016c28c8063973fbe4df68bd2fabcb3c9acc6f537304117e0b00ec9460c5dd3bd82bda92882b6311e7f155045615b590ddb1eabcbabb853d1d6069ff213f406ff073ad174eaebd93b5664e9154f9680fc1e4", 0x0, r14}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002500)={&(0x7f00000022c0)="7df1c997cfe23b7b0523be31b443f00d", &(0x7f0000002300)=""/232, &(0x7f0000002400)="333842894ccc05c5c07cb943792503eeaacf4acc418a04", &(0x7f0000002440)="0bd1f93c6a10fd9b799f3a7817e8032d69acce5c2884400d6288a8ef7b3530f8cdf45318ac522a7342b4b941aeae9594d491d4099eabecf7b09db2d3640f0c2c45a2f43d3d8762fbf0f36f1be072f570af19007008977925241c167bc113a91c41a071d5cb7f34ef8af7e791c0449ba3b9c642d1f3fe05a524ba32db805296cd88dc279eb5e7ea8c21e1db12a245d3b5b794a6a82d89812cb6d526ed5ff24f7ee2108031cd4735a3faa05d286feb70749c54c400766a98f26f6a", 0x100, r14, 0x4}, 0x38) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002580)=@o_path={&(0x7f0000002540)='./file0\x00', r13, 0x4000, r10}, 0x18) 1.149806932s ago: executing program 4 (id=3491): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000200)="b9ff03076044238cb89e14f0080047e0ffff00004000632f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x30}, {0x40, 0x40}, {0x6}]}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7daec2ee2b878b06}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000580)='\xc6\xaa&\xb7\xadI&U\xf7\xe3\xd5!\x11Fe9J\xbc\xc5v[\xf6M\x89\xbc?A\x01\xf7\xab\xa2\xfc.\x92\xedv8r[\xbd\xf0\x7fd]\xdf\xa8)q\x85iJg\r-\x06\xe5H\xd3\x99\x18 \xd0\xc6\x99\xbe\x00\x1atY\x05\x01j\xdf\xb0\xeb\x03M\xd5\xb1\xe2\x83},\xa7K\xc5\xd5NP\xd8\x98\xd9\x82\xe8\xa2E\xddj\xf9\xac\x1fO{EX\xbdz\x80\xb5\tN\x13\xb0\x8f\xe8?\x8a\x1a\xbf\xb3\x9a\xf1\x99\xad\xc9/\xa7\xc1\xdd\xd9\x9f\x99&Z\fqu\xb43[+\xfb\xc2\xa5\xbd\xb4Q\xe0UR_\x8b\x84\xe8\xeb>\xfc.\x1c<0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f00000007c0)=r2, 0x47) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x52, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xffc0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) recvmsg$unix(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/82, 0x52}, {&(0x7f0000001480)=""/54, 0x36}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/233, 0xe9}, {&(0x7f00000025c0)=""/12, 0xc}, {&(0x7f0000002600)=""/217, 0xd9}, {&(0x7f0000002700)=""/101, 0x65}, {&(0x7f0000002780)=""/249, 0xf9}], 0x9, &(0x7f0000002940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x10000) 768.277828ms ago: executing program 2 (id=3496): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfbe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair(0x2b, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x8800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aa, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r5, @ANYBLOB="be0800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000d00000000000100"/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1800}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ldst={0x0, 0x3, 0x6, 0x4, 0x4, 0xfffffffffffffff4}, @map_idx={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@u}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x6, 0xef, &(0x7f0000000740)=""/239, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xa, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r7, 0xffffffffffffffff, r8], &(0x7f0000000900)=[{0x0, 0x1, 0x1, 0x8}, {0x1, 0x2, 0x5, 0x3}, {0x3, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x10}], 0x10, 0x4}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 724.380659ms ago: executing program 0 (id=3497): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 723.856599ms ago: executing program 4 (id=3498): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x810, 0x0, 0x6, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x8, [@struct={0xf, 0x2, 0x0, 0x4, 0x0, 0x7ff, [{0x9, 0x1, 0x40}, {0x8, 0x5, 0x1}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x3, 0x9}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x5, 0x3}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x5}]}, @struct={0x3, 0x4, 0x0, 0x4, 0x0, 0xe, [{0x8, 0x1, 0x31e}, {0xe, 0x4, 0x9}, {0x5, 0x0, 0xffff0001}, {0x3, 0x4, 0xffffffff}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xa}]}, {0x0, [0x5f, 0x5f, 0x30, 0x30, 0x0, 0x30]}}, &(0x7f00000008c0)=""/4096, 0xd0, 0x1000, 0x1, 0xf}, 0x28) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x1c}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000980), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000960000009600000007000000070000000008030000000a00000001000005c70f00000600000003000000ff0300000d0000000600000f0200000001000000b00f0000630000000300000009000000000000000200000001002100f9ffffff0500000003000000240b0000010000000d0900000000000000000000ff07000004000000122e0c0000000000001103000000030000feff000061615f5f00"/182], &(0x7f0000000340)=""/33, 0xb7, 0x21, 0x1, 0x7fffffff, 0x4a7bbf71fc553994}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="4b5c5c9300"/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="02000000029df2da7b0001000000000000cea92ca60807ddaf4f5d00"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0xff, 0x393, 0x20000, r7, 0x2, '\x00', r8, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x2}, 0x50) ioctl$TUNSETOFFLOAD(r6, 0x80087601, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) 712.627839ms ago: executing program 4 (id=3499): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x8, 0x20000000, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff, 0x0, 0x4000000000000002}, r0, 0x2, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x7c2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) getpid() (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x8, 0x20000000, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff, 0x0, 0x4000000000000002}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x7c2}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (async) 650.891909ms ago: executing program 2 (id=3500): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x7}, 0x114028, 0x36a161b7, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xdc, 0x40, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x6, 0x0, 0x4003}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40014) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x28, 0x80000, 0xfffffffe, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x6834, 0x100, 0x7fff, 0x0, 0x0, 0xffffffff, 0xc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003000), 0x201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xda, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2510a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2001) 650.491309ms ago: executing program 4 (id=3501): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000200)=""/144, 0x2b, 0x90, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7f, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 649.4461ms ago: executing program 0 (id=3502): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x69) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000025fcff0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000160000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000900)="51013b07", 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r3, &(0x7f0000000900)}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x10}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x6b, 0x9b, &(0x7f0000000180)="44fd5fdb3b060ce5659fb2d7cf248f599a7d8f9756840797268416672bdc5fdfec9133b495980f0e4fa3bb4bb51dc67629c0d0ef63eb134a07e16471e0f1b9559c389a281ab793908919a8fec8b9cfad5b6691c4b8bbcb3243029fcf38e424715c1ecd0c9fcd54357524c2", &(0x7f00000002c0)=""/155, 0x2, 0x0, 0x89, 0xaa, &(0x7f0000000380)="1c86a188983447301c46763c17b5a67d15c2437da5b9f583640e11427a766c57423752cd0caace16ca6a6af8b97fa3b902029c481b2a2f249008c916917e841b6fc4e71dc9a9ef61d56d2f75b86ab0f6dbc98607395a6a51e050b06e8b1f7c317e69c260545262b73f7c87d1b9511a950b2db248db7077392d41850ae15bf30be47e5e55e61e357903", &(0x7f0000000440)="b22dedb9701ddbd06c225a560e3969c939688e3074e2793ce2335dbbb03f2dbec3aac7a0c542a29ef9d4e5855d64a304be2b4e8819c706c0d3d33c1789b2155ececbc38e1bda823bd87de52d6dfb7b29edcb00c5e3db94892ee9581647efc3a24d2fbfc81593d1033a8567d43018987ae4d59c0fb311ef6835aa853f6080fef83687144649f1e91e483e76d9bd8300f9d6e7a77d91cb42e98f8754f6537220c340735278e4888cd4a437", 0x7, 0x0, 0x2}, 0x50) 648.777889ms ago: executing program 4 (id=3503): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10100000, r2, 0x4}, 0x38) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000004c0)='blkio.bfq.sectors_recursive\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb}, [@exit]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r4}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x6) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f13815da3cbc479df45e1acd7454a155dd43645345f9a4cddab3d6d9d40e13de56bf656d77b7451f09e02bcb6cf96a4c0fce8ff74fe80460b51e50b4d8105ae605917a45734dbd377e5f99ad246b7485"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 584.444041ms ago: executing program 3 (id=3504): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) (async) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x8810) sendmsg$unix(r0, 0x0, 0x0) (async) sendmsg$unix(r0, 0x0, 0x0) close(r2) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x800, 0xfffffffffffffffa}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 521.801402ms ago: executing program 2 (id=3505): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x5, 0xb}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, 0x0, &(0x7f0000000080)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r2, &(0x7f00000001c0), &(0x7f00000001c0)=""/22, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a3, &(0x7f0000000080)) 116.966248ms ago: executing program 3 (id=3506): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xe4, 0x2, 0x8, 0x0, 0x0, 0x100, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x80000001, 0x3}, 0x70, 0x0, 0x0, 0x0, 0x6a4f, 0x7fffffff, 0x6, 0x0, 0x9, 0x0, 0x8000000000000000}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xe4, 0x2, 0x8, 0x0, 0x0, 0x100, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x80000001, 0x3}, 0x70, 0x0, 0x0, 0x0, 0x6a4f, 0x7fffffff, 0x6, 0x0, 0x9, 0x0, 0x8000000000000000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 19.6266ms ago: executing program 2 (id=3507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000200000000008000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 18.39848ms ago: executing program 2 (id=3508): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r9}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={r12, 0x2, 0x8}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000be91000000000000b7020000000000088500d00070000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x85, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x4c) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x8, 0x8}, 0x50) (async, rerun: 32) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40305829, &(0x7f0000000040)=0x1000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000001000f0000190000000066ef0000000000", @ANYRES32=r13, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x20, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r15}, 0xc) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) 0s ago: executing program 2 (id=3509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) socketpair(0x1, 0x3, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'}) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) (async) socketpair(0x1, 0x3, 0x0, 0x0) (async) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'}) (async) close(0x3) (async) kernel console output (not intermixed with test programs): 147.821279][ T5817] ? __alloc_pages_nodemask+0x29a/0x640 [ 147.826798][ T5817] ? put_page+0xd0/0xd0 [ 147.830929][ T5817] ? workingset_activation+0x250/0x250 [ 147.836369][ T5817] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 147.841911][ T5817] ? page_cache_prev_miss+0x250/0x290 [ 147.847272][ T5817] add_to_page_cache_lru+0xa7/0x210 [ 147.852454][ T5817] pagecache_get_page+0x700/0x930 [ 147.857460][ T5817] filemap_fault+0x1a89/0x2020 [ 147.862203][ T5817] ? next_uptodate_page+0xa42/0xa60 [ 147.867377][ T5817] ? generic_file_read_iter+0x580/0x580 [ 147.872899][ T5817] ? filemap_allow_speculation+0x10/0x10 [ 147.878507][ T5817] ? shmem_getpage_gfp+0x1ecd/0x20f0 [ 147.883769][ T5817] ? __kasan_check_write+0x14/0x20 [ 147.888856][ T5817] ext4_filemap_fault+0x8a/0xa0 [ 147.893683][ T5817] handle_pte_fault+0x2466/0x3910 [ 147.898685][ T5817] handle_mm_fault+0xf86/0x1720 [ 147.903516][ T5817] ? can_reuse_spf_vma+0xe0/0xe0 [ 147.908438][ T5817] ? follow_page_mask+0x7ac/0x1150 [ 147.913523][ T5817] __get_user_pages+0xbf8/0x1400 [ 147.918435][ T5817] ? populate_vma_page_range+0xf0/0xf0 [ 147.923870][ T5817] ? __kasan_check_write+0x14/0x20 [ 147.928958][ T5817] get_dump_page+0x153/0x5c0 [ 147.933521][ T5817] ? __mm_populate+0x420/0x420 [ 147.938260][ T5817] ? wait_for_dump_helpers+0x380/0x380 [ 147.943694][ T5817] dump_user_range+0x3c/0x1a0 [ 147.948347][ T5817] elf_core_dump+0x27af/0x2c20 [ 147.953104][ T5817] ? load_elf_binary+0x2910/0x2910 [ 147.958192][ T5817] ? __fsnotify_parent+0x6db/0x7c0 [ 147.963288][ T5817] ? do_truncate+0x1c6/0x240 [ 147.967936][ T5817] ? putname+0xfe/0x150 [ 147.972085][ T5817] ? __kasan_check_read+0x11/0x20 [ 147.977099][ T5817] ? __ia32_sys_unshare+0x40/0x40 [ 147.982106][ T5817] do_coredump+0x1be6/0x2910 [ 147.986674][ T5817] ? simple_acl_create+0x1c0/0x1c0 [ 147.991769][ T5817] ? debug_smp_processor_id+0x17/0x20 [ 147.997121][ T5817] ? kmem_cache_free+0x100/0x2d0 [ 148.002036][ T5817] ? ____kasan_slab_free+0x130/0x160 [ 148.007302][ T5817] ? get_signal+0xbdb/0x1300 [ 148.011870][ T5817] ? kmem_cache_free+0x100/0x2d0 [ 148.016783][ T5817] get_signal+0xf4c/0x1300 [ 148.021180][ T5817] arch_do_signal_or_restart+0xe7/0x11b0 [ 148.026795][ T5817] ? __send_signal+0x929/0xc10 [ 148.031541][ T5817] ? send_signal+0x3a5/0x580 [ 148.036124][ T5817] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 148.041740][ T5817] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 148.047532][ T5817] ? force_sig+0xca/0x120 [ 148.051843][ T5817] ? send_sig+0x70/0x70 [ 148.055978][ T5817] exit_to_user_mode_loop+0xa2/0xe0 [ 148.061156][ T5817] exit_to_user_mode_prepare+0x76/0xa0 [ 148.066592][ T5817] irqentry_exit_to_user_mode+0x9/0x10 [ 148.072024][ T5817] irqentry_exit+0x12/0x60 [ 148.076417][ T5817] exc_general_protection+0x1ca/0x250 [ 148.081763][ T5817] ? debug_smp_processor_id+0x17/0x20 [ 148.087110][ T5817] ? asm_exc_general_protection+0x8/0x30 [ 148.092716][ T5817] asm_exc_general_protection+0x1e/0x30 [ 148.098240][ T5817] RIP: 0033:0x7fdcf744a161 [ 148.102634][ T5817] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 148.122215][ T5817] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 148.128270][ T5817] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 148.136228][ T5817] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 148.144184][ T5817] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 148.152135][ T5817] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 148.160085][ T5817] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 148.384745][ T6120] ?0: renamed from bond_slave_1 [ 148.467366][ T5817] memory: usage 307200kB, limit 307200kB, failcnt 16964 [ 148.481862][ T5817] memory+swap: usage 430304kB, limit 9007199254740988kB, failcnt 0 [ 148.528394][ T5817] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 149.357434][ T5817] Memory cgroup stats for /syz1: [ 149.357553][ T5817] anon 270336 [ 149.357553][ T5817] file 312373248 [ 149.357553][ T5817] kernel_stack 0 [ 149.357553][ T5817] percpu 0 [ 149.357553][ T5817] sock 0 [ 149.357553][ T5817] shmem 312373248 [ 149.357553][ T5817] file_mapped 135168 [ 149.357553][ T5817] file_dirty 0 [ 149.357553][ T5817] file_writeback 0 [ 149.357553][ T5817] anon_thp 0 [ 149.357553][ T5817] inactive_anon 292761600 [ 149.357553][ T5817] active_anon 21815296 [ 149.357553][ T5817] inactive_file 65536 [ 149.357553][ T5817] active_file 94208 [ 149.357553][ T5817] unevictable 0 [ 149.357553][ T5817] slab_reclaimable 0 [ 149.357553][ T5817] slab_unreclaimable 0 [ 149.357553][ T5817] slab 0 [ 149.357553][ T5817] workingset_refault_anon 0 [ 149.357553][ T5817] workingset_refault_file 10791 [ 149.357553][ T5817] workingset_activate_anon 0 [ 149.357553][ T5817] workingset_activate_file 4356 [ 149.357553][ T5817] workingset_restore_anon 0 [ 149.357553][ T5817] workingset_restore_file 3630 [ 149.477344][ T5817] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5792,uid=0 [ 149.492475][ T5817] Memory cgroup out of memory: Killed process 5792 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:30172kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 150.347970][ T5803] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 150.743156][ T5803] CPU: 1 PID: 5803 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 150.751941][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.761994][ T5803] Call Trace: [ 150.765285][ T5803] __dump_stack+0x21/0x24 [ 150.769615][ T5803] dump_stack_lvl+0x1a7/0x208 [ 150.774288][ T5803] ? show_regs_print_info+0x18/0x18 [ 150.779486][ T5803] ? ___ratelimit+0x421/0x5a0 [ 150.784271][ T5803] ? _raw_spin_lock+0x94/0xf0 [ 150.788957][ T5803] dump_stack+0x15/0x1c [ 150.793110][ T5803] dump_header+0xd9/0x650 [ 150.797435][ T5803] oom_kill_process+0x1fa/0x2c0 [ 150.802290][ T5803] out_of_memory+0x879/0xce0 [ 150.806886][ T5803] ? unregister_oom_notifier+0x20/0x20 [ 150.812362][ T5803] ? mutex_lock_killable+0x92/0xf0 [ 150.817560][ T5803] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 150.824067][ T5803] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 150.829623][ T5803] ? mem_cgroup_oom_trylock+0x340/0x340 [ 150.835168][ T5803] ? _raw_spin_trylock_bh+0x150/0x150 [ 150.840536][ T5803] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 150.846076][ T5803] try_charge+0xfa9/0x1580 [ 150.850751][ T5803] ? kvm_sched_clock_read+0x18/0x40 [ 150.855947][ T5803] ? __memcg_kmem_charge+0x150/0x150 [ 150.861225][ T5803] ? __irq_exit_rcu+0x40/0x150 [ 150.865997][ T5803] ? irqentry_exit+0x56/0x60 [ 150.870624][ T5803] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 150.876426][ T5803] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 150.882577][ T5803] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 150.888121][ T5803] __mem_cgroup_charge+0x148/0x6d0 [ 150.893229][ T5803] shmem_add_to_page_cache+0x569/0xe10 [ 150.898683][ T5803] ? shmem_alloc_page+0x380/0x380 [ 150.903707][ T5803] ? _raw_spin_lock_irqsave+0x130/0x130 [ 150.909248][ T5803] ? find_lock_entry+0x4b/0x200 [ 150.914100][ T5803] shmem_getpage_gfp+0x907/0x20f0 [ 150.919127][ T5803] shmem_write_begin+0xce/0x1b0 [ 150.923979][ T5803] generic_perform_write+0x2ce/0x540 [ 150.929267][ T5803] ? atime_needs_update+0x5b0/0x5b0 [ 150.934472][ T5803] ? grab_cache_page_write_begin+0xb0/0xb0 [ 150.940277][ T5803] ? file_remove_privs+0x590/0x590 [ 150.945381][ T5803] ? __kasan_check_write+0x14/0x20 [ 150.950480][ T5803] ? down_write+0xb2/0x120 [ 150.954898][ T5803] __generic_file_write_iter+0x24b/0x480 [ 150.960510][ T5803] ? generic_write_checks+0x3df/0x480 [ 150.965858][ T5803] generic_file_write_iter+0xa9/0x1d0 [ 150.971208][ T5803] __kernel_write+0x5a5/0x9d0 [ 150.975862][ T5803] ? vfs_read+0xa50/0xa50 [ 150.980243][ T5803] ? populate_vma_page_range+0xf0/0xf0 [ 150.985920][ T5803] ? __kasan_check_write+0x14/0x20 [ 150.991019][ T5803] dump_emit+0x255/0x380 [ 150.995240][ T5803] ? wait_for_dump_helpers+0x380/0x380 [ 151.000677][ T5803] ? dump_user_range+0x13b/0x1a0 [ 151.005591][ T5803] dump_user_range+0x6a/0x1a0 [ 151.010252][ T5803] elf_core_dump+0x27af/0x2c20 [ 151.015004][ T5803] ? load_elf_binary+0x2910/0x2910 [ 151.020094][ T5803] ? __fsnotify_parent+0x6db/0x7c0 [ 151.025194][ T5803] ? do_truncate+0x1c6/0x240 [ 151.029762][ T5803] ? putname+0xfe/0x150 [ 151.034070][ T5803] ? __kasan_check_read+0x11/0x20 [ 151.039073][ T5803] ? __ia32_sys_unshare+0x40/0x40 [ 151.044082][ T5803] do_coredump+0x1be6/0x2910 [ 151.049006][ T5803] ? simple_acl_create+0x1c0/0x1c0 [ 151.054100][ T5803] ? debug_smp_processor_id+0x17/0x20 [ 151.059451][ T5803] ? kmem_cache_free+0x100/0x2d0 [ 151.064363][ T5803] ? ____kasan_slab_free+0x130/0x160 [ 151.069628][ T5803] ? get_signal+0xbdb/0x1300 [ 151.074221][ T5803] ? kmem_cache_free+0x100/0x2d0 [ 151.079143][ T5803] get_signal+0xf4c/0x1300 [ 151.083549][ T5803] arch_do_signal_or_restart+0xe7/0x11b0 [ 151.089227][ T5803] ? __send_signal+0x929/0xc10 [ 151.093976][ T5803] ? send_signal+0x3a5/0x580 [ 151.098547][ T5803] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 151.104167][ T5803] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 151.109961][ T5803] ? force_sig+0xca/0x120 [ 151.114272][ T5803] ? send_sig+0x70/0x70 [ 151.118475][ T5803] exit_to_user_mode_loop+0xa2/0xe0 [ 151.123683][ T5803] exit_to_user_mode_prepare+0x76/0xa0 [ 151.129140][ T5803] irqentry_exit_to_user_mode+0x9/0x10 [ 151.134600][ T5803] irqentry_exit+0x12/0x60 [ 151.139005][ T5803] exc_general_protection+0x1ca/0x250 [ 151.144363][ T5803] ? debug_smp_processor_id+0x17/0x20 [ 151.149729][ T5803] ? asm_exc_general_protection+0x8/0x30 [ 151.155340][ T5803] asm_exc_general_protection+0x1e/0x30 [ 151.160861][ T5803] RIP: 0033:0x7fdcf744a161 [ 151.165255][ T5803] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 151.184839][ T5803] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 151.190890][ T5803] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 151.198838][ T5803] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 151.206817][ T5803] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 151.214770][ T5803] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 151.222719][ T5803] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 151.230807][ T5803] memory: usage 307200kB, limit 307200kB, failcnt 22620 [ 151.237830][ T5803] memory+swap: usage 429872kB, limit 9007199254740988kB, failcnt 0 [ 151.245872][ T5803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 151.252738][ T5803] Memory cgroup stats for /syz1: [ 151.252844][ T5803] anon 270336 [ 151.252844][ T5803] file 311967744 [ 151.252844][ T5803] kernel_stack 0 [ 151.252844][ T5803] percpu 0 [ 151.252844][ T5803] sock 0 [ 151.252844][ T5803] shmem 311967744 [ 151.252844][ T5803] file_mapped 0 [ 151.252844][ T5803] file_dirty 0 [ 151.252844][ T5803] file_writeback 0 [ 151.252844][ T5803] anon_thp 0 [ 151.252844][ T5803] inactive_anon 293793792 [ 151.252844][ T5803] active_anon 20598784 [ 151.252844][ T5803] inactive_file 0 [ 151.252844][ T5803] active_file 0 [ 151.252844][ T5803] unevictable 0 [ 151.252844][ T5803] slab_reclaimable 0 [ 151.252844][ T5803] slab_unreclaimable 0 [ 151.252844][ T5803] slab 0 [ 151.252844][ T5803] workingset_refault_anon 0 [ 151.252844][ T5803] workingset_refault_file 14058 [ 151.252844][ T5803] workingset_activate_anon 0 [ 151.252844][ T5803] workingset_activate_file 5445 [ 151.252844][ T5803] workingset_restore_anon 0 [ 151.252844][ T5803] workingset_restore_file 4422 [ 151.346323][ T5803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5789,uid=0 [ 151.361305][ T5803] Memory cgroup out of memory: Killed process 5789 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:33688kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 151.378908][ T27] oom_reaper: reaped process 5789 (syz.1.1304), now anon-rss:0kB, file-rss:35096kB, shmem-rss:0kB [ 151.433751][ T5790] syz.1.1304 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 151.454982][ T5790] CPU: 1 PID: 5790 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 151.463752][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.473868][ T5790] Call Trace: [ 151.477160][ T5790] __dump_stack+0x21/0x24 [ 151.481477][ T5790] dump_stack_lvl+0x1a7/0x208 [ 151.486146][ T5790] ? show_regs_print_info+0x18/0x18 [ 151.491331][ T5790] ? ___ratelimit+0x421/0x5a0 [ 151.495997][ T5790] ? _raw_spin_lock+0x94/0xf0 [ 151.500661][ T5790] dump_stack+0x15/0x1c [ 151.504811][ T5790] dump_header+0xd9/0x650 [ 151.509137][ T5790] oom_kill_process+0x1fa/0x2c0 [ 151.513979][ T5790] out_of_memory+0x879/0xce0 [ 151.518558][ T5790] ? unregister_oom_notifier+0x20/0x20 [ 151.524002][ T5790] ? mutex_lock_killable+0xdf/0xf0 [ 151.529101][ T5790] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 151.535594][ T5790] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 151.541132][ T5790] ? mem_cgroup_oom_trylock+0x340/0x340 [ 151.546658][ T5790] ? _raw_spin_trylock_bh+0x150/0x150 [ 151.552013][ T5790] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 151.557537][ T5790] try_charge+0xfa9/0x1580 [ 151.561939][ T5790] ? __set_page_owner+0x289/0x2a0 [ 151.566957][ T5790] ? __memcg_kmem_charge+0x150/0x150 [ 151.572224][ T5790] ? get_page_from_freelist+0x225f/0x23f0 [ 151.577924][ T5790] ? __add_to_page_cache_locked+0x81d/0x9b0 [ 151.583799][ T5790] ? read_pages+0x9b0/0xb50 [ 151.588283][ T5790] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 151.593814][ T5790] __mem_cgroup_charge+0x148/0x6d0 [ 151.598911][ T5790] __add_to_page_cache_locked+0x208/0x9b0 [ 151.604616][ T5790] ? __alloc_pages_nodemask+0x29a/0x640 [ 151.610153][ T5790] ? put_page+0xd0/0xd0 [ 151.614308][ T5790] ? workingset_activation+0x250/0x250 [ 151.619747][ T5790] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 151.625278][ T5790] ? page_cache_prev_miss+0x250/0x290 [ 151.630639][ T5790] add_to_page_cache_lru+0xa7/0x210 [ 151.635827][ T5790] pagecache_get_page+0x700/0x930 [ 151.640837][ T5790] filemap_fault+0x1a89/0x2020 [ 151.645581][ T5790] ? next_uptodate_page+0xa42/0xa60 [ 151.650775][ T5790] ? generic_file_read_iter+0x580/0x580 [ 151.656311][ T5790] ? filemap_allow_speculation+0x10/0x10 [ 151.661927][ T5790] ? __schedule+0xc0b/0x13e0 [ 151.666503][ T5790] ? __kasan_check_write+0x14/0x20 [ 151.671601][ T5790] ext4_filemap_fault+0x8a/0xa0 [ 151.676437][ T5790] handle_pte_fault+0x2466/0x3910 [ 151.681448][ T5790] handle_mm_fault+0xf86/0x1720 [ 151.686287][ T5790] ? can_reuse_spf_vma+0xe0/0xe0 [ 151.691212][ T5790] ? follow_page_mask+0x7ac/0x1150 [ 151.696308][ T5790] __get_user_pages+0xbf8/0x1400 [ 151.701238][ T5790] ? populate_vma_page_range+0xf0/0xf0 [ 151.706682][ T5790] ? __kasan_check_write+0x14/0x20 [ 151.711777][ T5790] get_dump_page+0x153/0x5c0 [ 151.716348][ T5790] ? __mm_populate+0x420/0x420 [ 151.721091][ T5790] ? wait_for_dump_helpers+0x380/0x380 [ 151.726543][ T5790] dump_user_range+0x3c/0x1a0 [ 151.731200][ T5790] elf_core_dump+0x27af/0x2c20 [ 151.735952][ T5790] ? load_elf_binary+0x2910/0x2910 [ 151.741044][ T5790] ? __fsnotify_parent+0x6db/0x7c0 [ 151.746144][ T5790] ? do_truncate+0x1c6/0x240 [ 151.750717][ T5790] ? putname+0xfe/0x150 [ 151.754854][ T5790] ? __kasan_check_read+0x11/0x20 [ 151.759862][ T5790] ? __ia32_sys_unshare+0x40/0x40 [ 151.764869][ T5790] do_coredump+0x1be6/0x2910 [ 151.769444][ T5790] ? simple_acl_create+0x1c0/0x1c0 [ 151.774538][ T5790] ? debug_smp_processor_id+0x17/0x20 [ 151.779896][ T5790] ? kmem_cache_free+0x100/0x2d0 [ 151.784812][ T5790] ? ____kasan_slab_free+0x130/0x160 [ 151.790080][ T5790] ? get_signal+0xbdb/0x1300 [ 151.794654][ T5790] ? kmem_cache_free+0x2a9/0x2d0 [ 151.799573][ T5790] get_signal+0xf4c/0x1300 [ 151.803976][ T5790] arch_do_signal_or_restart+0xe7/0x11b0 [ 151.809602][ T5790] ? __send_signal+0x929/0xc10 [ 151.814356][ T5790] ? send_signal+0x3a5/0x580 [ 151.818936][ T5790] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 151.824561][ T5790] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 151.830364][ T5790] ? force_sig+0xca/0x120 [ 151.834683][ T5790] ? send_sig+0x70/0x70 [ 151.838827][ T5790] exit_to_user_mode_loop+0xa2/0xe0 [ 151.844012][ T5790] exit_to_user_mode_prepare+0x76/0xa0 [ 151.849457][ T5790] irqentry_exit_to_user_mode+0x9/0x10 [ 151.854897][ T5790] irqentry_exit+0x12/0x60 [ 151.859297][ T5790] exc_general_protection+0x1ca/0x250 [ 151.864654][ T5790] ? debug_smp_processor_id+0x17/0x20 [ 151.870015][ T5790] ? asm_exc_general_protection+0x8/0x30 [ 151.875631][ T5790] asm_exc_general_protection+0x1e/0x30 [ 151.881169][ T5790] RIP: 0033:0x7fdcf744a161 [ 151.885572][ T5790] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 151.905162][ T5790] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 151.911212][ T5790] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 151.919166][ T5790] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 151.927124][ T5790] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 151.935082][ T5790] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 151.943041][ T5790] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 151.952622][ T5790] memory: usage 285372kB, limit 307200kB, failcnt 23273 [ 151.959611][ T5790] memory+swap: usage 400740kB, limit 9007199254740988kB, failcnt 0 [ 151.967533][ T5790] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 151.974393][ T5790] Memory cgroup stats for /syz1: [ 151.974528][ T5790] anon 270336 [ 151.974528][ T5790] file 290746368 [ 151.974528][ T5790] kernel_stack 0 [ 151.974528][ T5790] percpu 0 [ 151.974528][ T5790] sock 0 [ 151.974528][ T5790] shmem 290611200 [ 151.974528][ T5790] file_mapped 135168 [ 151.974528][ T5790] file_dirty 0 [ 151.974528][ T5790] file_writeback 0 [ 151.974528][ T5790] anon_thp 0 [ 151.974528][ T5790] inactive_anon 272769024 [ 151.974528][ T5790] active_anon 19652608 [ 151.974528][ T5790] inactive_file 81920 [ 151.974528][ T5790] active_file 176128 [ 151.974528][ T5790] unevictable 0 [ 151.974528][ T5790] slab_reclaimable 0 [ 151.974528][ T5790] slab_unreclaimable 0 [ 151.974528][ T5790] slab 0 [ 151.974528][ T5790] workingset_refault_anon 0 [ 151.974528][ T5790] workingset_refault_file 14520 [ 151.974528][ T5790] workingset_activate_anon 0 [ 151.974528][ T5790] workingset_activate_file 5775 [ 151.974528][ T5790] workingset_restore_anon 0 [ 151.974528][ T5790] workingset_restore_file 4686 [ 152.004763][ T6174] device syzkaller0 entered promiscuous mode [ 152.074780][ T5790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5766,uid=0 [ 152.086480][ T6178] device syzkaller0 entered promiscuous mode [ 152.099033][ T5790] Memory cgroup out of memory: Killed process 5766 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:37244kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 152.116872][ T27] oom_reaper: reaped process 5766 (syz.1.1304), now anon-rss:0kB, file-rss:37180kB, shmem-rss:0kB [ 152.342880][ T5818] syz.1.1304 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 152.444640][ T5818] CPU: 1 PID: 5818 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 152.453422][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.463474][ T5818] Call Trace: [ 152.466768][ T5818] __dump_stack+0x21/0x24 [ 152.471099][ T5818] dump_stack_lvl+0x1a7/0x208 [ 152.475773][ T5818] ? show_regs_print_info+0x18/0x18 [ 152.480968][ T5818] ? ___ratelimit+0x421/0x5a0 [ 152.485665][ T5818] ? _raw_spin_lock+0x94/0xf0 [ 152.490338][ T5818] dump_stack+0x15/0x1c [ 152.494495][ T5818] dump_header+0xd9/0x650 [ 152.498824][ T5818] oom_kill_process+0x1fa/0x2c0 [ 152.503705][ T5818] out_of_memory+0x879/0xce0 [ 152.508300][ T5818] ? unregister_oom_notifier+0x20/0x20 [ 152.513757][ T5818] ? mutex_lock_killable+0xdf/0xf0 [ 152.518866][ T5818] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 152.525366][ T5818] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 152.530909][ T5818] ? mem_cgroup_oom_trylock+0x340/0x340 [ 152.536454][ T5818] ? _raw_spin_trylock_bh+0x150/0x150 [ 152.541859][ T5818] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 152.547405][ T5818] try_charge+0xfa9/0x1580 [ 152.551821][ T5818] ? __set_page_owner+0x289/0x2a0 [ 152.556842][ T5818] ? __memcg_kmem_charge+0x150/0x150 [ 152.562122][ T5818] ? get_page_from_freelist+0x225f/0x23f0 [ 152.567848][ T5818] ? __add_to_page_cache_locked+0x81d/0x9b0 [ 152.573736][ T5818] ? read_pages+0x9b0/0xb50 [ 152.578234][ T5818] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 152.583776][ T5818] __mem_cgroup_charge+0x148/0x6d0 [ 152.588885][ T5818] __add_to_page_cache_locked+0x208/0x9b0 [ 152.594691][ T5818] ? __alloc_pages_nodemask+0x29a/0x640 [ 152.600232][ T5818] ? put_page+0xd0/0xd0 [ 152.604393][ T5818] ? workingset_activation+0x250/0x250 [ 152.609844][ T5818] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 152.615388][ T5818] ? page_cache_prev_miss+0x250/0x290 [ 152.620759][ T5818] add_to_page_cache_lru+0xa7/0x210 [ 152.625950][ T5818] pagecache_get_page+0x700/0x930 [ 152.630969][ T5818] filemap_fault+0x1a89/0x2020 [ 152.635737][ T5818] ? next_uptodate_page+0xa3b/0xa60 [ 152.640933][ T5818] ? generic_file_read_iter+0x580/0x580 [ 152.646479][ T5818] ? filemap_allow_speculation+0x10/0x10 [ 152.652107][ T5818] ? shmem_getpage_gfp+0x1ecd/0x20f0 [ 152.657399][ T5818] ? __kasan_check_write+0x14/0x20 [ 152.662503][ T5818] ext4_filemap_fault+0x8a/0xa0 [ 152.667347][ T5818] handle_pte_fault+0x2466/0x3910 [ 152.672373][ T5818] handle_mm_fault+0xf86/0x1720 [ 152.677223][ T5818] ? can_reuse_spf_vma+0xe0/0xe0 [ 152.682158][ T5818] ? follow_page_mask+0x7ac/0x1150 [ 152.687263][ T5818] __get_user_pages+0xbf8/0x1400 [ 152.692202][ T5818] ? populate_vma_page_range+0xf0/0xf0 [ 152.697654][ T5818] ? __kasan_check_write+0x14/0x20 [ 152.702759][ T5818] get_dump_page+0x153/0x5c0 [ 152.707342][ T5818] ? __mm_populate+0x420/0x420 [ 152.712099][ T5818] ? wait_for_dump_helpers+0x380/0x380 [ 152.717550][ T5818] dump_user_range+0x3c/0x1a0 [ 152.722220][ T5818] elf_core_dump+0x27af/0x2c20 [ 152.726981][ T5818] ? load_elf_binary+0x2910/0x2910 [ 152.732086][ T5818] ? __fsnotify_parent+0x6db/0x7c0 [ 152.737196][ T5818] ? do_truncate+0x1c6/0x240 [ 152.741778][ T5818] ? putname+0xfe/0x150 [ 152.745924][ T5818] ? __kasan_check_read+0x11/0x20 [ 152.750942][ T5818] ? __ia32_sys_unshare+0x40/0x40 [ 152.755961][ T5818] do_coredump+0x1be6/0x2910 [ 152.760550][ T5818] ? simple_acl_create+0x1c0/0x1c0 [ 152.765647][ T5818] ? debug_smp_processor_id+0x17/0x20 [ 152.771001][ T5818] ? kmem_cache_free+0x100/0x2d0 [ 152.775912][ T5818] ? ____kasan_slab_free+0x130/0x160 [ 152.781175][ T5818] ? get_signal+0xbdb/0x1300 [ 152.785736][ T5818] ? kmem_cache_free+0x100/0x2d0 [ 152.790647][ T5818] get_signal+0xf4c/0x1300 [ 152.795040][ T5818] arch_do_signal_or_restart+0xe7/0x11b0 [ 152.800652][ T5818] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 152.806327][ T5818] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 152.812126][ T5818] ? force_sig+0xca/0x120 [ 152.816432][ T5818] ? send_sig+0x70/0x70 [ 152.820568][ T5818] exit_to_user_mode_loop+0xa2/0xe0 [ 152.825745][ T5818] exit_to_user_mode_prepare+0x76/0xa0 [ 152.831183][ T5818] irqentry_exit_to_user_mode+0x9/0x10 [ 152.836626][ T5818] irqentry_exit+0x12/0x60 [ 152.841040][ T5818] exc_general_protection+0x1ca/0x250 [ 152.846422][ T5818] ? debug_smp_processor_id+0x17/0x20 [ 152.851772][ T5818] ? asm_exc_general_protection+0x8/0x30 [ 152.857379][ T5818] asm_exc_general_protection+0x1e/0x30 [ 152.862904][ T5818] RIP: 0033:0x7fdcf744a161 [ 152.867304][ T5818] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 152.886887][ T5818] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 152.892934][ T5818] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 152.900884][ T5818] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 152.908835][ T5818] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 152.916787][ T5818] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 152.924738][ T5818] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 152.935596][ T5818] memory: usage 307200kB, limit 307200kB, failcnt 26089 [ 152.942615][ T5818] memory+swap: usage 421468kB, limit 9007199254740988kB, failcnt 0 [ 152.950975][ T5818] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 152.957907][ T5818] Memory cgroup stats for /syz1: [ 152.958046][ T5818] anon 270336 [ 152.958046][ T5818] file 303316992 [ 152.958046][ T5818] kernel_stack 0 [ 152.958046][ T5818] percpu 0 [ 152.958046][ T5818] sock 0 [ 152.958046][ T5818] shmem 303181824 [ 152.958046][ T5818] file_mapped 0 [ 152.958046][ T5818] file_dirty 0 [ 152.958046][ T5818] file_writeback 0 [ 152.958046][ T5818] anon_thp 0 [ 152.958046][ T5818] inactive_anon 291155968 [ 152.958046][ T5818] active_anon 23437312 [ 152.958046][ T5818] inactive_file 0 [ 152.958046][ T5818] active_file 172032 [ 152.958046][ T5818] unevictable 0 [ 152.958046][ T5818] slab_reclaimable 0 [ 152.958046][ T5818] slab_unreclaimable 0 [ 152.958046][ T5818] slab 0 [ 152.958046][ T5818] workingset_refault_anon 0 [ 152.958046][ T5818] workingset_refault_file 17127 [ 152.958046][ T5818] workingset_activate_anon 0 [ 152.958046][ T5818] workingset_activate_file 7821 [ 152.958046][ T5818] workingset_restore_anon 0 [ 152.958046][ T5818] workingset_restore_file 6105 [ 153.052143][ T5818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5790,uid=0 [ 153.067282][ T5818] Memory cgroup out of memory: Killed process 5790 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:40092kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 153.085654][ T27] oom_reaper: reaped process 5790 (syz.1.1304), now anon-rss:0kB, file-rss:40028kB, shmem-rss:0kB [ 153.267455][ T5799] syz.1.1304 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 153.288836][ T5799] CPU: 0 PID: 5799 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 153.297617][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.307674][ T5799] Call Trace: [ 153.310972][ T5799] __dump_stack+0x21/0x24 [ 153.315306][ T5799] dump_stack_lvl+0x1a7/0x208 [ 153.319990][ T5799] ? show_regs_print_info+0x18/0x18 [ 153.325199][ T5799] ? ___ratelimit+0x421/0x5a0 [ 153.329882][ T5799] ? _raw_spin_lock+0x94/0xf0 [ 153.334562][ T5799] dump_stack+0x15/0x1c [ 153.338717][ T5799] dump_header+0xd9/0x650 [ 153.343045][ T5799] oom_kill_process+0x1fa/0x2c0 [ 153.347976][ T5799] out_of_memory+0x879/0xce0 [ 153.352552][ T5799] ? unregister_oom_notifier+0x20/0x20 [ 153.357990][ T5799] ? mutex_lock_killable+0xdf/0xf0 [ 153.363083][ T5799] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 153.369565][ T5799] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 153.375090][ T5799] ? mem_cgroup_oom_trylock+0x340/0x340 [ 153.380614][ T5799] ? _raw_spin_trylock_bh+0x150/0x150 [ 153.385963][ T5799] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 153.391486][ T5799] try_charge+0xfa9/0x1580 [ 153.395883][ T5799] ? __set_page_owner+0x289/0x2a0 [ 153.400886][ T5799] ? __memcg_kmem_charge+0x150/0x150 [ 153.406163][ T5799] ? get_page_from_freelist+0x225f/0x23f0 [ 153.411875][ T5799] ? __add_to_page_cache_locked+0x81d/0x9b0 [ 153.417755][ T5799] ? read_pages+0x9b0/0xb50 [ 153.422250][ T5799] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 153.427781][ T5799] __mem_cgroup_charge+0x148/0x6d0 [ 153.432879][ T5799] __add_to_page_cache_locked+0x208/0x9b0 [ 153.438582][ T5799] ? __alloc_pages_nodemask+0x29a/0x640 [ 153.444106][ T5799] ? put_page+0xd0/0xd0 [ 153.448240][ T5799] ? workingset_activation+0x250/0x250 [ 153.453675][ T5799] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 153.459227][ T5799] ? page_cache_prev_miss+0x250/0x290 [ 153.464576][ T5799] add_to_page_cache_lru+0xa7/0x210 [ 153.469752][ T5799] pagecache_get_page+0x700/0x930 [ 153.474752][ T5799] filemap_fault+0x1a89/0x2020 [ 153.479493][ T5799] ? next_uptodate_page+0xa42/0xa60 [ 153.484671][ T5799] ? generic_file_read_iter+0x580/0x580 [ 153.490195][ T5799] ? filemap_allow_speculation+0x10/0x10 [ 153.495803][ T5799] ? shmem_getpage_gfp+0x1ecd/0x20f0 [ 153.501078][ T5799] ? __kasan_check_write+0x14/0x20 [ 153.506177][ T5799] ext4_filemap_fault+0x8a/0xa0 [ 153.511010][ T5799] handle_pte_fault+0x2466/0x3910 [ 153.516014][ T5799] handle_mm_fault+0xf86/0x1720 [ 153.520843][ T5799] ? can_reuse_spf_vma+0xe0/0xe0 [ 153.525762][ T5799] ? follow_page_mask+0x7ac/0x1150 [ 153.530851][ T5799] __get_user_pages+0xbf8/0x1400 [ 153.535767][ T5799] ? populate_vma_page_range+0xf0/0xf0 [ 153.541220][ T5799] ? __kasan_check_write+0x14/0x20 [ 153.546311][ T5799] get_dump_page+0x153/0x5c0 [ 153.550882][ T5799] ? __mm_populate+0x420/0x420 [ 153.555627][ T5799] ? wait_for_dump_helpers+0x380/0x380 [ 153.561063][ T5799] dump_user_range+0x3c/0x1a0 [ 153.565717][ T5799] elf_core_dump+0x27af/0x2c20 [ 153.570459][ T5799] ? load_elf_binary+0x2910/0x2910 [ 153.575568][ T5799] ? __fsnotify_parent+0x6db/0x7c0 [ 153.580664][ T5799] ? do_truncate+0x1c6/0x240 [ 153.585236][ T5799] ? putname+0xfe/0x150 [ 153.589368][ T5799] ? __kasan_check_read+0x11/0x20 [ 153.594374][ T5799] ? __ia32_sys_unshare+0x40/0x40 [ 153.599376][ T5799] do_coredump+0x1be6/0x2910 [ 153.603946][ T5799] ? simple_acl_create+0x1c0/0x1c0 [ 153.609036][ T5799] ? debug_smp_processor_id+0x17/0x20 [ 153.614385][ T5799] ? kmem_cache_free+0x100/0x2d0 [ 153.619294][ T5799] ? ____kasan_slab_free+0x130/0x160 [ 153.624556][ T5799] ? get_signal+0xbdb/0x1300 [ 153.629124][ T5799] ? kmem_cache_free+0x2a9/0x2d0 [ 153.634040][ T5799] get_signal+0xf4c/0x1300 [ 153.638433][ T5799] arch_do_signal_or_restart+0xe7/0x11b0 [ 153.644039][ T5799] ? __send_signal+0x929/0xc10 [ 153.648918][ T5799] ? send_signal+0x3a5/0x580 [ 153.653502][ T5799] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 153.659117][ T5799] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 153.664917][ T5799] ? force_sig+0xca/0x120 [ 153.669234][ T5799] ? send_sig+0x70/0x70 [ 153.673387][ T5799] exit_to_user_mode_loop+0xa2/0xe0 [ 153.678570][ T5799] exit_to_user_mode_prepare+0x76/0xa0 [ 153.684020][ T5799] irqentry_exit_to_user_mode+0x9/0x10 [ 153.689465][ T5799] irqentry_exit+0x12/0x60 [ 153.693859][ T5799] exc_general_protection+0x1ca/0x250 [ 153.699212][ T5799] ? debug_smp_processor_id+0x17/0x20 [ 153.704570][ T5799] ? asm_exc_general_protection+0x8/0x30 [ 153.710181][ T5799] asm_exc_general_protection+0x1e/0x30 [ 153.715700][ T5799] RIP: 0033:0x7fdcf744a161 [ 153.720091][ T5799] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 153.739674][ T5799] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 153.745727][ T5799] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 153.753676][ T5799] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 153.761622][ T5799] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 153.769575][ T5799] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 153.777523][ T5799] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 153.811770][ T5799] memory: usage 307184kB, limit 307200kB, failcnt 27597 [ 153.842551][ T5799] memory+swap: usage 429880kB, limit 9007199254740988kB, failcnt 0 [ 153.945688][ T5799] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.970724][ T5799] Memory cgroup stats for /syz1: [ 153.970834][ T5799] anon 135168 [ 153.970834][ T5799] file 312508416 [ 153.970834][ T5799] kernel_stack 0 [ 153.970834][ T5799] percpu 0 [ 153.970834][ T5799] sock 0 [ 153.970834][ T5799] shmem 312238080 [ 153.970834][ T5799] file_mapped 135168 [ 153.970834][ T5799] file_dirty 0 [ 153.970834][ T5799] file_writeback 0 [ 153.970834][ T5799] anon_thp 0 [ 153.970834][ T5799] inactive_anon 290697216 [ 153.970834][ T5799] active_anon 23166976 [ 153.970834][ T5799] inactive_file 110592 [ 153.970834][ T5799] active_file 32768 [ 153.970834][ T5799] unevictable 0 [ 153.970834][ T5799] slab_reclaimable 0 [ 153.970834][ T5799] slab_unreclaimable 0 [ 153.970834][ T5799] slab 0 [ 153.970834][ T5799] workingset_refault_anon 0 [ 153.970834][ T5799] workingset_refault_file 19272 [ 153.970834][ T5799] workingset_activate_anon 0 [ 153.970834][ T5799] workingset_activate_file 9306 [ 153.970834][ T5799] workingset_restore_anon 0 [ 153.970834][ T5799] workingset_restore_file 7326 [ 154.064915][ T5799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5771,uid=0 [ 154.080035][ T5799] Memory cgroup out of memory: Killed process 5771 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:36532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 154.649842][ T6217] device syzkaller0 entered promiscuous mode [ 154.691840][ T5806] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 154.783069][ T5806] CPU: 1 PID: 5806 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 154.791846][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.801893][ T5806] Call Trace: [ 154.805181][ T5806] __dump_stack+0x21/0x24 [ 154.809496][ T5806] dump_stack_lvl+0x1a7/0x208 [ 154.814153][ T5806] ? show_regs_print_info+0x18/0x18 [ 154.819327][ T5806] ? ___ratelimit+0x421/0x5a0 [ 154.823978][ T5806] ? _raw_spin_lock+0x94/0xf0 [ 154.828628][ T5806] dump_stack+0x15/0x1c [ 154.832760][ T5806] dump_header+0xd9/0x650 [ 154.837067][ T5806] oom_kill_process+0x1fa/0x2c0 [ 154.841909][ T5806] out_of_memory+0x879/0xce0 [ 154.846474][ T5806] ? unregister_oom_notifier+0x20/0x20 [ 154.851904][ T5806] ? mutex_lock_killable+0x92/0xf0 [ 154.856993][ T5806] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 154.863477][ T5806] ? __alloc_pages_nodemask+0x29a/0x640 [ 154.869000][ T5806] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 154.874519][ T5806] ? mem_cgroup_oom_trylock+0x340/0x340 [ 154.880036][ T5806] ? _raw_spin_trylock_bh+0x150/0x150 [ 154.885387][ T5806] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 154.890926][ T5806] try_charge+0xfa9/0x1580 [ 154.895324][ T5806] ? __memcg_kmem_charge+0x150/0x150 [ 154.900587][ T5806] ? __kasan_check_write+0x14/0x20 [ 154.905672][ T5806] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 154.911453][ T5806] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 154.916971][ T5806] __mem_cgroup_charge+0x148/0x6d0 [ 154.922058][ T5806] shmem_add_to_page_cache+0x569/0xe10 [ 154.927494][ T5806] ? shmem_alloc_page+0x380/0x380 [ 154.932493][ T5806] ? _raw_spin_lock_irqsave+0x130/0x130 [ 154.938015][ T5806] ? find_lock_entry+0x4b/0x200 [ 154.942837][ T5806] shmem_getpage_gfp+0x907/0x20f0 [ 154.947840][ T5806] shmem_write_begin+0xce/0x1b0 [ 154.952668][ T5806] generic_perform_write+0x2ce/0x540 [ 154.957932][ T5806] ? grab_cache_page_write_begin+0xb0/0xb0 [ 154.963711][ T5806] ? file_remove_privs+0x590/0x590 [ 154.968797][ T5806] ? __kasan_check_write+0x14/0x20 [ 154.973881][ T5806] ? down_write+0xb2/0x120 [ 154.978273][ T5806] __generic_file_write_iter+0x24b/0x480 [ 154.983883][ T5806] ? generic_write_checks+0x3df/0x480 [ 154.989234][ T5806] generic_file_write_iter+0xa9/0x1d0 [ 154.994600][ T5806] __kernel_write+0x5a5/0x9d0 [ 154.999255][ T5806] ? vfs_read+0xa50/0xa50 [ 155.003564][ T5806] ? populate_vma_page_range+0xf0/0xf0 [ 155.009017][ T5806] ? __kasan_check_write+0x14/0x20 [ 155.014115][ T5806] dump_emit+0x255/0x380 [ 155.018338][ T5806] ? wait_for_dump_helpers+0x380/0x380 [ 155.023774][ T5806] dump_user_range+0x6a/0x1a0 [ 155.028431][ T5806] elf_core_dump+0x27af/0x2c20 [ 155.033175][ T5806] ? load_elf_binary+0x2910/0x2910 [ 155.038259][ T5806] ? __fsnotify_parent+0x6db/0x7c0 [ 155.043355][ T5806] ? do_truncate+0x1c6/0x240 [ 155.047921][ T5806] ? putname+0xfe/0x150 [ 155.052054][ T5806] ? __kasan_check_read+0x11/0x20 [ 155.057051][ T5806] ? __ia32_sys_unshare+0x40/0x40 [ 155.062051][ T5806] do_coredump+0x1be6/0x2910 [ 155.066618][ T5806] ? simple_acl_create+0x1c0/0x1c0 [ 155.071707][ T5806] ? debug_smp_processor_id+0x17/0x20 [ 155.077055][ T5806] ? kmem_cache_free+0x100/0x2d0 [ 155.081969][ T5806] ? ____kasan_slab_free+0x130/0x160 [ 155.087229][ T5806] ? get_signal+0xbdb/0x1300 [ 155.091792][ T5806] ? kmem_cache_free+0x100/0x2d0 [ 155.096704][ T5806] get_signal+0xf4c/0x1300 [ 155.101101][ T5806] arch_do_signal_or_restart+0xe7/0x11b0 [ 155.106708][ T5806] ? __send_signal+0x929/0xc10 [ 155.111446][ T5806] ? send_signal+0x3a5/0x580 [ 155.116011][ T5806] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 155.121616][ T5806] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 155.127398][ T5806] ? force_sig+0xca/0x120 [ 155.131700][ T5806] ? send_sig+0x70/0x70 [ 155.135833][ T5806] exit_to_user_mode_loop+0xa2/0xe0 [ 155.141002][ T5806] exit_to_user_mode_prepare+0x76/0xa0 [ 155.146433][ T5806] irqentry_exit_to_user_mode+0x9/0x10 [ 155.151871][ T5806] irqentry_exit+0x12/0x60 [ 155.156263][ T5806] exc_general_protection+0x1ca/0x250 [ 155.161607][ T5806] ? debug_smp_processor_id+0x17/0x20 [ 155.166954][ T5806] ? asm_exc_general_protection+0x8/0x30 [ 155.172562][ T5806] asm_exc_general_protection+0x1e/0x30 [ 155.178083][ T5806] RIP: 0033:0x7fdcf744a161 [ 155.182475][ T5806] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 155.202053][ T5806] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 155.208096][ T5806] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 155.216044][ T5806] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 155.223990][ T5806] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 155.231946][ T5806] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 155.239891][ T5806] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 155.261617][ T5806] memory: usage 307200kB, limit 307200kB, failcnt 31071 [ 155.269398][ T5806] memory+swap: usage 430892kB, limit 9007199254740988kB, failcnt 0 [ 155.277702][ T5806] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 155.288720][ T5806] Memory cgroup stats for /syz1: [ 155.291576][ T5806] anon 135168 [ 155.291576][ T5806] file 313049088 [ 155.291576][ T5806] kernel_stack 0 [ 155.291576][ T5806] percpu 0 [ 155.291576][ T5806] sock 0 [ 155.291576][ T5806] shmem 312913920 [ 155.291576][ T5806] file_mapped 135168 [ 155.291576][ T5806] file_dirty 0 [ 155.291576][ T5806] file_writeback 0 [ 155.291576][ T5806] anon_thp 0 [ 155.291576][ T5806] inactive_anon 286257152 [ 155.291576][ T5806] active_anon 28168192 [ 155.291576][ T5806] inactive_file 118784 [ 155.291576][ T5806] active_file 159744 [ 155.291576][ T5806] unevictable 0 [ 155.291576][ T5806] slab_reclaimable 0 [ 155.291576][ T5806] slab_unreclaimable 0 [ 155.291576][ T5806] slab 0 [ 155.291576][ T5806] workingset_refault_anon 0 [ 155.291576][ T5806] workingset_refault_file 22143 [ 155.291576][ T5806] workingset_activate_anon 0 [ 155.291576][ T5806] workingset_activate_file 10758 [ 155.291576][ T5806] workingset_restore_anon 0 [ 155.291576][ T5806] workingset_restore_file 8250 [ 155.430485][ T5806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5770,uid=0 [ 155.476170][ T5806] Memory cgroup out of memory: Killed process 5770 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:38092kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 156.191384][ T5767] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 156.312524][ T5767] CPU: 1 PID: 5767 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 156.321309][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.331362][ T5767] Call Trace: [ 156.334651][ T5767] __dump_stack+0x21/0x24 [ 156.338980][ T5767] dump_stack_lvl+0x1a7/0x208 [ 156.343646][ T5767] ? show_regs_print_info+0x18/0x18 [ 156.348844][ T5767] ? ___ratelimit+0x421/0x5a0 [ 156.353521][ T5767] ? _raw_spin_lock+0x94/0xf0 [ 156.358193][ T5767] dump_stack+0x15/0x1c [ 156.362343][ T5767] dump_header+0xd9/0x650 [ 156.366665][ T5767] oom_kill_process+0x1fa/0x2c0 [ 156.371508][ T5767] out_of_memory+0x879/0xce0 [ 156.376090][ T5767] ? unregister_oom_notifier+0x20/0x20 [ 156.381538][ T5767] ? mutex_lock_killable+0x92/0xf0 [ 156.386642][ T5767] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 156.393266][ T5767] ? __alloc_pages_nodemask+0x29a/0x640 [ 156.398818][ T5767] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 156.404358][ T5767] ? mem_cgroup_oom_trylock+0x340/0x340 [ 156.410003][ T5767] ? _raw_spin_trylock_bh+0x150/0x150 [ 156.415374][ T5767] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 156.420917][ T5767] try_charge+0xfa9/0x1580 [ 156.425336][ T5767] ? __memcg_kmem_charge+0x150/0x150 [ 156.430622][ T5767] ? __kasan_check_write+0x14/0x20 [ 156.435733][ T5767] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 156.441537][ T5767] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 156.447068][ T5767] __mem_cgroup_charge+0x148/0x6d0 [ 156.452175][ T5767] shmem_add_to_page_cache+0x569/0xe10 [ 156.457627][ T5767] ? shmem_alloc_page+0x380/0x380 [ 156.462650][ T5767] ? _raw_spin_lock_irqsave+0x130/0x130 [ 156.468187][ T5767] ? find_lock_entry+0x4b/0x200 [ 156.473034][ T5767] shmem_getpage_gfp+0x907/0x20f0 [ 156.478058][ T5767] shmem_write_begin+0xce/0x1b0 [ 156.482902][ T5767] generic_perform_write+0x2ce/0x540 [ 156.488183][ T5767] ? atime_needs_update+0x5b0/0x5b0 [ 156.493381][ T5767] ? grab_cache_page_write_begin+0xb0/0xb0 [ 156.499179][ T5767] ? file_remove_privs+0x590/0x590 [ 156.504284][ T5767] ? __kasan_check_write+0x14/0x20 [ 156.509384][ T5767] ? down_write+0xb2/0x120 [ 156.513803][ T5767] __generic_file_write_iter+0x24b/0x480 [ 156.519430][ T5767] ? generic_write_checks+0x3df/0x480 [ 156.524823][ T5767] generic_file_write_iter+0xa9/0x1d0 [ 156.530190][ T5767] __kernel_write+0x5a5/0x9d0 [ 156.534846][ T5767] ? vfs_read+0xa50/0xa50 [ 156.539157][ T5767] ? populate_vma_page_range+0xf0/0xf0 [ 156.544591][ T5767] ? __kasan_check_write+0x14/0x20 [ 156.549684][ T5767] dump_emit+0x255/0x380 [ 156.553910][ T5767] ? wait_for_dump_helpers+0x380/0x380 [ 156.559349][ T5767] dump_user_range+0x6a/0x1a0 [ 156.564003][ T5767] elf_core_dump+0x27af/0x2c20 [ 156.568761][ T5767] ? load_elf_binary+0x2910/0x2910 [ 156.574022][ T5767] ? __fsnotify_parent+0x6db/0x7c0 [ 156.579117][ T5767] ? do_truncate+0x1c6/0x240 [ 156.583681][ T5767] ? putname+0xfe/0x150 [ 156.587815][ T5767] ? __kasan_check_read+0x11/0x20 [ 156.592818][ T5767] ? __ia32_sys_unshare+0x40/0x40 [ 156.597821][ T5767] do_coredump+0x1be6/0x2910 [ 156.602388][ T5767] ? simple_acl_create+0x1c0/0x1c0 [ 156.607476][ T5767] ? debug_smp_processor_id+0x17/0x20 [ 156.612824][ T5767] ? kmem_cache_free+0x100/0x2d0 [ 156.617734][ T5767] ? ____kasan_slab_free+0x130/0x160 [ 156.622994][ T5767] ? get_signal+0xbdb/0x1300 [ 156.627559][ T5767] ? kmem_cache_free+0x100/0x2d0 [ 156.632471][ T5767] get_signal+0xf4c/0x1300 [ 156.636867][ T5767] arch_do_signal_or_restart+0xe7/0x11b0 [ 156.642474][ T5767] ? __send_signal+0x929/0xc10 [ 156.647213][ T5767] ? send_signal+0x3a5/0x580 [ 156.651785][ T5767] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 156.657391][ T5767] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 156.663180][ T5767] ? force_sig+0xca/0x120 [ 156.667489][ T5767] ? send_sig+0x70/0x70 [ 156.671624][ T5767] exit_to_user_mode_loop+0xa2/0xe0 [ 156.676805][ T5767] exit_to_user_mode_prepare+0x76/0xa0 [ 156.682239][ T5767] irqentry_exit_to_user_mode+0x9/0x10 [ 156.687673][ T5767] irqentry_exit+0x12/0x60 [ 156.692064][ T5767] exc_general_protection+0x1ca/0x250 [ 156.697411][ T5767] ? debug_smp_processor_id+0x17/0x20 [ 156.702759][ T5767] ? asm_exc_general_protection+0x8/0x30 [ 156.708366][ T5767] asm_exc_general_protection+0x1e/0x30 [ 156.713885][ T5767] RIP: 0033:0x7fdcf744a161 [ 156.718282][ T5767] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 156.737862][ T5767] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 156.743909][ T5767] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 156.752120][ T5767] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 156.760069][ T5767] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 156.768072][ T5767] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 156.776028][ T5767] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 156.971930][ T5767] memory: usage 307200kB, limit 307200kB, failcnt 33568 [ 156.978909][ T5767] memory+swap: usage 431300kB, limit 9007199254740988kB, failcnt 0 [ 157.108020][ T5767] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 157.115122][ T5767] Memory cgroup stats for /syz1: [ 157.115233][ T5767] anon 135168 [ 157.115233][ T5767] file 313454592 [ 157.115233][ T5767] kernel_stack 0 [ 157.115233][ T5767] percpu 0 [ 157.115233][ T5767] sock 0 [ 157.115233][ T5767] shmem 313454592 [ 157.115233][ T5767] file_mapped 0 [ 157.115233][ T5767] file_dirty 0 [ 157.115233][ T5767] file_writeback 0 [ 157.115233][ T5767] anon_thp 0 [ 157.115233][ T5767] inactive_anon 285175808 [ 157.115233][ T5767] active_anon 29249536 [ 157.115233][ T5767] inactive_file 45056 [ 157.115233][ T5767] active_file 143360 [ 157.115233][ T5767] unevictable 0 [ 157.115233][ T5767] slab_reclaimable 0 [ 157.115233][ T5767] slab_unreclaimable 0 [ 157.115233][ T5767] slab 0 [ 157.115233][ T5767] workingset_refault_anon 0 [ 157.115233][ T5767] workingset_refault_file 23661 [ 157.115233][ T5767] workingset_activate_anon 0 [ 157.115233][ T5767] workingset_activate_file 12210 [ 157.115233][ T5767] workingset_restore_anon 0 [ 157.115233][ T5767] workingset_restore_file 9306 [ 157.211137][ T5767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5796,uid=0 [ 157.226249][ T5767] Memory cgroup out of memory: Killed process 5796 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:39776kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 158.226718][ T5801] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 158.476570][ T6291] device syzkaller0 entered promiscuous mode [ 158.529607][ T5801] CPU: 0 PID: 5801 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 158.538393][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.548445][ T5801] Call Trace: [ 158.551743][ T5801] __dump_stack+0x21/0x24 [ 158.556070][ T5801] dump_stack_lvl+0x1a7/0x208 [ 158.560746][ T5801] ? show_regs_print_info+0x18/0x18 [ 158.565940][ T5801] ? ___ratelimit+0x421/0x5a0 [ 158.570612][ T5801] ? _raw_spin_lock+0x94/0xf0 [ 158.575298][ T5801] dump_stack+0x15/0x1c [ 158.579451][ T5801] dump_header+0xd9/0x650 [ 158.583777][ T5801] oom_kill_process+0x1fa/0x2c0 [ 158.588615][ T5801] out_of_memory+0x879/0xce0 [ 158.593193][ T5801] ? unregister_oom_notifier+0x20/0x20 [ 158.598634][ T5801] ? mutex_lock_killable+0x92/0xf0 [ 158.603723][ T5801] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 158.610199][ T5801] ? __alloc_pages_nodemask+0x29a/0x640 [ 158.615724][ T5801] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 158.621244][ T5801] ? mem_cgroup_oom_trylock+0x340/0x340 [ 158.626767][ T5801] ? _raw_spin_trylock_bh+0x150/0x150 [ 158.632115][ T5801] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 158.637641][ T5801] try_charge+0xfa9/0x1580 [ 158.642036][ T5801] ? __memcg_kmem_charge+0x150/0x150 [ 158.647299][ T5801] ? __kasan_check_write+0x14/0x20 [ 158.652387][ T5801] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 158.658168][ T5801] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 158.663688][ T5801] __mem_cgroup_charge+0x148/0x6d0 [ 158.668774][ T5801] shmem_add_to_page_cache+0x569/0xe10 [ 158.674208][ T5801] ? shmem_alloc_page+0x380/0x380 [ 158.679208][ T5801] ? _raw_spin_lock_irqsave+0x130/0x130 [ 158.684732][ T5801] ? find_lock_entry+0x4b/0x200 [ 158.689555][ T5801] shmem_getpage_gfp+0x907/0x20f0 [ 158.694562][ T5801] shmem_write_begin+0xce/0x1b0 [ 158.699388][ T5801] generic_perform_write+0x2ce/0x540 [ 158.704653][ T5801] ? atime_needs_update+0x5b0/0x5b0 [ 158.709831][ T5801] ? grab_cache_page_write_begin+0xb0/0xb0 [ 158.715613][ T5801] ? file_remove_privs+0x590/0x590 [ 158.720703][ T5801] ? __kasan_check_write+0x14/0x20 [ 158.725793][ T5801] ? down_write+0xb2/0x120 [ 158.730192][ T5801] __generic_file_write_iter+0x24b/0x480 [ 158.735803][ T5801] ? generic_write_checks+0x3df/0x480 [ 158.741153][ T5801] generic_file_write_iter+0xa9/0x1d0 [ 158.746499][ T5801] __kernel_write+0x5a5/0x9d0 [ 158.751155][ T5801] ? vfs_read+0xa50/0xa50 [ 158.755460][ T5801] ? populate_vma_page_range+0xf0/0xf0 [ 158.760895][ T5801] ? preempt_schedule_irq+0xca/0x120 [ 158.766156][ T5801] ? __kasan_check_write+0x14/0x20 [ 158.771243][ T5801] dump_emit+0x255/0x380 [ 158.775465][ T5801] ? wait_for_dump_helpers+0x380/0x380 [ 158.780905][ T5801] dump_user_range+0x6a/0x1a0 [ 158.785561][ T5801] elf_core_dump+0x27af/0x2c20 [ 158.790302][ T5801] ? load_elf_binary+0x2910/0x2910 [ 158.795386][ T5801] ? __fsnotify_parent+0x6db/0x7c0 [ 158.800479][ T5801] ? do_truncate+0x1c6/0x240 [ 158.805044][ T5801] ? putname+0xfe/0x150 [ 158.809178][ T5801] ? __kasan_check_read+0x11/0x20 [ 158.814179][ T5801] ? __ia32_sys_unshare+0x40/0x40 [ 158.819182][ T5801] do_coredump+0x1be6/0x2910 [ 158.823758][ T5801] ? simple_acl_create+0x1c0/0x1c0 [ 158.828852][ T5801] ? debug_smp_processor_id+0x17/0x20 [ 158.834202][ T5801] ? kmem_cache_free+0x100/0x2d0 [ 158.839143][ T5801] ? ____kasan_slab_free+0x130/0x160 [ 158.844406][ T5801] ? get_signal+0xbdb/0x1300 [ 158.848971][ T5801] ? kmem_cache_free+0x2a9/0x2d0 [ 158.853971][ T5801] get_signal+0xf4c/0x1300 [ 158.858366][ T5801] arch_do_signal_or_restart+0xe7/0x11b0 [ 158.863976][ T5801] ? __send_signal+0x929/0xc10 [ 158.868714][ T5801] ? send_signal+0x3a5/0x580 [ 158.873280][ T5801] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 158.878885][ T5801] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 158.884670][ T5801] ? force_sig+0xca/0x120 [ 158.888974][ T5801] ? send_sig+0x70/0x70 [ 158.893108][ T5801] exit_to_user_mode_loop+0xa2/0xe0 [ 158.898282][ T5801] exit_to_user_mode_prepare+0x76/0xa0 [ 158.903716][ T5801] irqentry_exit_to_user_mode+0x9/0x10 [ 158.909148][ T5801] irqentry_exit+0x12/0x60 [ 158.913559][ T5801] exc_general_protection+0x1ca/0x250 [ 158.918928][ T5801] ? debug_smp_processor_id+0x17/0x20 [ 158.924284][ T5801] ? asm_exc_general_protection+0x8/0x30 [ 158.929895][ T5801] asm_exc_general_protection+0x1e/0x30 [ 158.935417][ T5801] RIP: 0033:0x7fdcf744a161 [ 158.939820][ T5801] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 158.959437][ T5801] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 158.965490][ T5801] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 158.973441][ T5801] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 158.981564][ T5801] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 158.989524][ T5801] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 158.997483][ T5801] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 159.235259][ T6301] device syzkaller0 entered promiscuous mode [ 159.241481][ T5801] memory: usage 307200kB, limit 307200kB, failcnt 35722 [ 159.248495][ T5801] memory+swap: usage 431216kB, limit 9007199254740988kB, failcnt 0 [ 159.272249][ T5801] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 159.282135][ T5801] Memory cgroup stats for /syz1: [ 159.282251][ T5801] anon 270336 [ 159.282251][ T5801] file 313184256 [ 159.282251][ T5801] kernel_stack 0 [ 159.282251][ T5801] percpu 0 [ 159.282251][ T5801] sock 0 [ 159.282251][ T5801] shmem 313184256 [ 159.282251][ T5801] file_mapped 135168 [ 159.282251][ T5801] file_dirty 0 [ 159.282251][ T5801] file_writeback 0 [ 159.282251][ T5801] anon_thp 0 [ 159.282251][ T5801] inactive_anon 289320960 [ 159.282251][ T5801] active_anon 25194496 [ 159.282251][ T5801] inactive_file 0 [ 159.282251][ T5801] active_file 69632 [ 159.282251][ T5801] unevictable 0 [ 159.282251][ T5801] slab_reclaimable 0 [ 159.282251][ T5801] slab_unreclaimable 0 [ 159.282251][ T5801] slab 0 [ 159.282251][ T5801] workingset_refault_anon 0 [ 159.282251][ T5801] workingset_refault_file 25212 [ 159.282251][ T5801] workingset_activate_anon 0 [ 159.282251][ T5801] workingset_activate_file 13695 [ 159.282251][ T5801] workingset_restore_anon 0 [ 159.282251][ T5801] workingset_restore_file 10593 [ 159.433760][ T5801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5818,uid=0 [ 159.489918][ T5801] Memory cgroup out of memory: Killed process 5818 (syz.1.1304) total-vm:90468kB, anon-rss:1248kB, file-rss:42328kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 159.655649][ T5801] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.769890][ T5801] CPU: 0 PID: 5801 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 159.778680][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.789277][ T5801] Call Trace: [ 159.792576][ T5801] __dump_stack+0x21/0x24 [ 159.796916][ T5801] dump_stack_lvl+0x1a7/0x208 [ 159.801606][ T5801] ? show_regs_print_info+0x18/0x18 [ 159.806815][ T5801] ? ___ratelimit+0x421/0x5a0 [ 159.811656][ T5801] ? _raw_spin_lock+0x94/0xf0 [ 159.816340][ T5801] dump_stack+0x15/0x1c [ 159.820688][ T5801] dump_header+0xd9/0x650 [ 159.825035][ T5801] oom_kill_process+0x1fa/0x2c0 [ 159.830012][ T5801] out_of_memory+0x879/0xce0 [ 159.834700][ T5801] ? unregister_oom_notifier+0x20/0x20 [ 159.840165][ T5801] ? mutex_lock_killable+0xdf/0xf0 [ 159.845282][ T5801] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 159.851785][ T5801] ? __alloc_pages_nodemask+0x29a/0x640 [ 159.857341][ T5801] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 159.862892][ T5801] ? mem_cgroup_oom_trylock+0x340/0x340 [ 159.868453][ T5801] ? _raw_spin_trylock_bh+0x150/0x150 [ 159.873832][ T5801] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 159.879391][ T5801] try_charge+0xfa9/0x1580 [ 159.883900][ T5801] ? __memcg_kmem_charge+0x150/0x150 [ 159.889199][ T5801] ? __kasan_check_write+0x14/0x20 [ 159.894310][ T5801] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 159.900125][ T5801] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 159.905672][ T5801] __mem_cgroup_charge+0x148/0x6d0 [ 159.910790][ T5801] shmem_add_to_page_cache+0x569/0xe10 [ 159.916263][ T5801] ? shmem_alloc_page+0x380/0x380 [ 159.921365][ T5801] ? _raw_spin_lock_irqsave+0x130/0x130 [ 159.926919][ T5801] ? find_lock_entry+0x4b/0x200 [ 159.931768][ T5801] shmem_getpage_gfp+0x907/0x20f0 [ 159.936811][ T5801] shmem_write_begin+0xce/0x1b0 [ 159.941676][ T5801] generic_perform_write+0x2ce/0x540 [ 159.946978][ T5801] ? atime_needs_update+0x5b0/0x5b0 [ 159.952358][ T5801] ? grab_cache_page_write_begin+0xb0/0xb0 [ 159.958290][ T5801] ? file_remove_privs+0x590/0x590 [ 159.963413][ T5801] ? __kasan_check_write+0x14/0x20 [ 159.968528][ T5801] ? down_write+0xb2/0x120 [ 159.972952][ T5801] __generic_file_write_iter+0x24b/0x480 [ 159.978591][ T5801] ? generic_write_checks+0x3df/0x480 [ 159.983972][ T5801] generic_file_write_iter+0xa9/0x1d0 [ 159.989350][ T5801] __kernel_write+0x5a5/0x9d0 [ 159.994152][ T5801] ? vfs_read+0xa50/0xa50 [ 159.998754][ T5801] ? populate_vma_page_range+0xf0/0xf0 [ 160.004568][ T5801] ? preempt_schedule_irq+0xca/0x120 [ 160.009854][ T5801] ? __kasan_check_write+0x14/0x20 [ 160.014965][ T5801] dump_emit+0x255/0x380 [ 160.019213][ T5801] ? wait_for_dump_helpers+0x380/0x380 [ 160.024765][ T5801] dump_user_range+0x6a/0x1a0 [ 160.029446][ T5801] elf_core_dump+0x27af/0x2c20 [ 160.034216][ T5801] ? load_elf_binary+0x2910/0x2910 [ 160.039325][ T5801] ? __fsnotify_parent+0x6db/0x7c0 [ 160.044444][ T5801] ? do_truncate+0x1c6/0x240 [ 160.049032][ T5801] ? putname+0xfe/0x150 [ 160.053193][ T5801] ? __kasan_check_read+0x11/0x20 [ 160.058217][ T5801] ? __ia32_sys_unshare+0x40/0x40 [ 160.063242][ T5801] do_coredump+0x1be6/0x2910 [ 160.067831][ T5801] ? simple_acl_create+0x1c0/0x1c0 [ 160.072936][ T5801] ? debug_smp_processor_id+0x17/0x20 [ 160.078302][ T5801] ? kmem_cache_free+0x100/0x2d0 [ 160.083226][ T5801] ? ____kasan_slab_free+0x130/0x160 [ 160.088491][ T5801] ? get_signal+0xbdb/0x1300 [ 160.093066][ T5801] ? kmem_cache_free+0x2a9/0x2d0 [ 160.097984][ T5801] get_signal+0xf4c/0x1300 [ 160.102394][ T5801] arch_do_signal_or_restart+0xe7/0x11b0 [ 160.108038][ T5801] ? __send_signal+0x929/0xc10 [ 160.112792][ T5801] ? send_signal+0x3a5/0x580 [ 160.117367][ T5801] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 160.122974][ T5801] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 160.128758][ T5801] ? force_sig+0xca/0x120 [ 160.133062][ T5801] ? send_sig+0x70/0x70 [ 160.137200][ T5801] exit_to_user_mode_loop+0xa2/0xe0 [ 160.142378][ T5801] exit_to_user_mode_prepare+0x76/0xa0 [ 160.147818][ T5801] irqentry_exit_to_user_mode+0x9/0x10 [ 160.153255][ T5801] irqentry_exit+0x12/0x60 [ 160.157652][ T5801] exc_general_protection+0x1ca/0x250 [ 160.163011][ T5801] ? debug_smp_processor_id+0x17/0x20 [ 160.168365][ T5801] ? asm_exc_general_protection+0x8/0x30 [ 160.173974][ T5801] asm_exc_general_protection+0x1e/0x30 [ 160.179494][ T5801] RIP: 0033:0x7fdcf744a161 [ 160.183899][ T5801] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 160.203482][ T5801] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 160.209530][ T5801] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 160.217479][ T5801] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 160.225434][ T5801] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 160.233386][ T5801] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 160.241336][ T5801] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 160.517762][ T5801] memory: usage 281424kB, limit 307200kB, failcnt 35811 [ 160.549824][ T5801] memory+swap: usage 399704kB, limit 9007199254740988kB, failcnt 0 [ 160.565177][ T6331] device syzkaller0 entered promiscuous mode [ 160.679595][ T5801] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 160.686634][ T5801] Memory cgroup stats for /syz1: [ 160.687027][ T5801] anon 270336 [ 160.687027][ T5801] file 286556160 [ 160.687027][ T5801] kernel_stack 0 [ 160.687027][ T5801] percpu 0 [ 160.687027][ T5801] sock 0 [ 160.687027][ T5801] shmem 286420992 [ 160.687027][ T5801] file_mapped 135168 [ 160.687027][ T5801] file_dirty 0 [ 160.687027][ T5801] file_writeback 0 [ 160.687027][ T5801] anon_thp 0 [ 160.687027][ T5801] inactive_anon 263544832 [ 160.687027][ T5801] active_anon 24653824 [ 160.687027][ T5801] inactive_file 0 [ 160.687027][ T5801] active_file 69632 [ 160.687027][ T5801] unevictable 0 [ 160.687027][ T5801] slab_reclaimable 0 [ 160.687027][ T5801] slab_unreclaimable 0 [ 160.687027][ T5801] slab 0 [ 160.687027][ T5801] workingset_refault_anon 0 [ 160.687027][ T5801] workingset_refault_file 25212 [ 160.687027][ T5801] workingset_activate_anon 0 [ 160.687027][ T5801] workingset_activate_file 13695 [ 160.687027][ T5801] workingset_restore_anon 0 [ 160.687027][ T5801] workingset_restore_file 10593 [ 161.509334][ T24] audit: type=1400 audit(1790250399.680:152): avc: denied { create } for pid=6392 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.529950][ T5801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5768,uid=0 [ 161.554578][ T5801] Memory cgroup out of memory: Killed process 5768 (syz.1.1304) total-vm:90468kB, anon-rss:1248kB, file-rss:40264kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 162.654609][ T6465] device syzkaller0 entered promiscuous mode [ 162.722539][ T6470] device syzkaller0 entered promiscuous mode [ 162.767940][ T5853] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 162.792196][ T5853] CPU: 1 PID: 5853 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 162.800972][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.811196][ T5853] Call Trace: [ 162.814477][ T5853] __dump_stack+0x21/0x24 [ 162.818928][ T5853] dump_stack_lvl+0x1a7/0x208 [ 162.823610][ T5853] ? show_regs_print_info+0x18/0x18 [ 162.828807][ T5853] ? ___ratelimit+0x421/0x5a0 [ 162.833479][ T5853] ? _raw_spin_lock+0x94/0xf0 [ 162.838151][ T5853] dump_stack+0x15/0x1c [ 162.842300][ T5853] dump_header+0xd9/0x650 [ 162.846623][ T5853] oom_kill_process+0x1fa/0x2c0 [ 162.851604][ T5853] out_of_memory+0x879/0xce0 [ 162.856200][ T5853] ? unregister_oom_notifier+0x20/0x20 [ 162.861661][ T5853] ? mutex_lock_killable+0x92/0xf0 [ 162.866771][ T5853] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 162.873274][ T5853] ? __alloc_pages_nodemask+0x29a/0x640 [ 162.878829][ T5853] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 162.884498][ T5853] ? mem_cgroup_oom_trylock+0x340/0x340 [ 162.890051][ T5853] ? _raw_spin_trylock_bh+0x150/0x150 [ 162.895428][ T5853] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 162.900973][ T5853] try_charge+0xfa9/0x1580 [ 162.905394][ T5853] ? __memcg_kmem_charge+0x150/0x150 [ 162.910708][ T5853] ? __kasan_check_write+0x14/0x20 [ 162.915824][ T5853] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 162.921621][ T5853] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 162.927164][ T5853] __mem_cgroup_charge+0x148/0x6d0 [ 162.932271][ T5853] shmem_add_to_page_cache+0x569/0xe10 [ 162.937726][ T5853] ? shmem_alloc_page+0x380/0x380 [ 162.942746][ T5853] ? _raw_spin_lock_irqsave+0x130/0x130 [ 162.948334][ T5853] ? find_lock_entry+0x4b/0x200 [ 162.953216][ T5853] shmem_getpage_gfp+0x907/0x20f0 [ 162.958244][ T5853] shmem_write_begin+0xce/0x1b0 [ 162.963096][ T5853] generic_perform_write+0x2ce/0x540 [ 162.968378][ T5853] ? atime_needs_update+0x5b0/0x5b0 [ 162.973579][ T5853] ? grab_cache_page_write_begin+0xb0/0xb0 [ 162.979398][ T5853] ? file_remove_privs+0x590/0x590 [ 162.984509][ T5853] ? __kasan_check_write+0x14/0x20 [ 162.989624][ T5853] ? down_write+0xb2/0x120 [ 162.994036][ T5853] __generic_file_write_iter+0x24b/0x480 [ 162.999672][ T5853] ? generic_write_checks+0x3df/0x480 [ 163.005045][ T5853] generic_file_write_iter+0xa9/0x1d0 [ 163.010417][ T5853] __kernel_write+0x5a5/0x9d0 [ 163.015088][ T5853] ? vfs_read+0xa50/0xa50 [ 163.019412][ T5853] ? populate_vma_page_range+0xf0/0xf0 [ 163.024869][ T5853] ? kasan_check_range+0x11/0x2a0 [ 163.029893][ T5853] ? __kasan_check_write+0x14/0x20 [ 163.035005][ T5853] dump_emit+0x255/0x380 [ 163.039251][ T5853] ? wait_for_dump_helpers+0x380/0x380 [ 163.044708][ T5853] dump_user_range+0x6a/0x1a0 [ 163.049383][ T5853] elf_core_dump+0x27af/0x2c20 [ 163.054147][ T5853] ? load_elf_binary+0x2910/0x2910 [ 163.059245][ T5853] ? __fsnotify_parent+0x6db/0x7c0 [ 163.064356][ T5853] ? do_truncate+0x1c6/0x240 [ 163.068943][ T5853] ? putname+0xfe/0x150 [ 163.073700][ T5853] ? __kasan_check_read+0x11/0x20 [ 163.078724][ T5853] ? __ia32_sys_unshare+0x40/0x40 [ 163.083743][ T5853] do_coredump+0x1be6/0x2910 [ 163.088329][ T5853] ? simple_acl_create+0x1c0/0x1c0 [ 163.093437][ T5853] ? debug_smp_processor_id+0x17/0x20 [ 163.098805][ T5853] ? kmem_cache_free+0x100/0x2d0 [ 163.103740][ T5853] ? ____kasan_slab_free+0x130/0x160 [ 163.109025][ T5853] ? get_signal+0xbdb/0x1300 [ 163.113606][ T5853] ? kmem_cache_free+0x100/0x2d0 [ 163.118539][ T5853] get_signal+0xf4c/0x1300 [ 163.122954][ T5853] arch_do_signal_or_restart+0xe7/0x11b0 [ 163.128585][ T5853] ? __send_signal+0x929/0xc10 [ 163.133345][ T5853] ? send_signal+0x3a5/0x580 [ 163.137935][ T5853] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 163.143566][ T5853] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 163.149375][ T5853] ? force_sig+0xca/0x120 [ 163.153703][ T5853] ? send_sig+0x70/0x70 [ 163.157859][ T5853] exit_to_user_mode_loop+0xa2/0xe0 [ 163.163061][ T5853] exit_to_user_mode_prepare+0x76/0xa0 [ 163.168525][ T5853] irqentry_exit_to_user_mode+0x9/0x10 [ 163.173981][ T5853] irqentry_exit+0x12/0x60 [ 163.178394][ T5853] exc_general_protection+0x1ca/0x250 [ 163.183760][ T5853] ? __kasan_check_read+0x11/0x20 [ 163.188779][ T5853] ? asm_exc_general_protection+0x8/0x30 [ 163.194408][ T5853] asm_exc_general_protection+0x1e/0x30 [ 163.199942][ T5853] RIP: 0033:0x7fdcf744a161 [ 163.204353][ T5853] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 163.223954][ T5853] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 163.230028][ T5853] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 163.237998][ T5853] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 163.245966][ T5853] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 163.253937][ T5853] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 163.261902][ T5853] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 163.297012][ T5853] memory: usage 307200kB, limit 307200kB, failcnt 38482 [ 163.305539][ T5853] memory+swap: usage 431388kB, limit 9007199254740988kB, failcnt 0 [ 163.313738][ T5853] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 163.321047][ T5853] Memory cgroup stats for /syz1: [ 163.321152][ T5853] anon 270336 [ 163.321152][ T5853] file 313454592 [ 163.321152][ T5853] kernel_stack 0 [ 163.321152][ T5853] percpu 0 [ 163.321152][ T5853] sock 0 [ 163.321152][ T5853] shmem 313589760 [ 163.321152][ T5853] file_mapped 135168 [ 163.321152][ T5853] file_dirty 0 [ 163.321152][ T5853] file_writeback 0 [ 163.321152][ T5853] anon_thp 0 [ 163.321152][ T5853] inactive_anon 292474880 [ 163.321152][ T5853] active_anon 21950464 [ 163.321152][ T5853] inactive_file 0 [ 163.321152][ T5853] active_file 131072 [ 163.321152][ T5853] unevictable 0 [ 163.321152][ T5853] slab_reclaimable 0 [ 163.321152][ T5853] slab_unreclaimable 0 [ 163.321152][ T5853] slab 0 [ 163.321152][ T5853] workingset_refault_anon 0 [ 163.321152][ T5853] workingset_refault_file 26565 [ 163.321152][ T5853] workingset_activate_anon 0 [ 163.321152][ T5853] workingset_activate_file 14751 [ 163.321152][ T5853] workingset_restore_anon 0 [ 163.321152][ T5853] workingset_restore_file 11550 [ 163.415449][ T5853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5817,uid=0 [ 163.431742][ T5853] Memory cgroup out of memory: Killed process 5817 (syz.1.1304) total-vm:90468kB, anon-rss:1248kB, file-rss:45592kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 163.449304][ T27] oom_reaper: reaped process 5817 (syz.1.1304), now anon-rss:0kB, file-rss:45528kB, shmem-rss:0kB [ 163.466086][ T5801] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 163.480022][ T5801] CPU: 0 PID: 5801 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 163.488798][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.498847][ T5801] Call Trace: [ 163.502175][ T5801] __dump_stack+0x21/0x24 [ 163.506499][ T5801] dump_stack_lvl+0x1a7/0x208 [ 163.511163][ T5801] ? show_regs_print_info+0x18/0x18 [ 163.516342][ T5801] ? ___ratelimit+0x421/0x5a0 [ 163.520997][ T5801] ? _raw_spin_lock+0x94/0xf0 [ 163.525654][ T5801] dump_stack+0x15/0x1c [ 163.529791][ T5801] dump_header+0xd9/0x650 [ 163.534102][ T5801] oom_kill_process+0x1fa/0x2c0 [ 163.538960][ T5801] out_of_memory+0x879/0xce0 [ 163.543530][ T5801] ? unregister_oom_notifier+0x20/0x20 [ 163.548969][ T5801] ? mutex_lock_killable+0xdf/0xf0 [ 163.554075][ T5801] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 163.560553][ T5801] ? __alloc_pages_nodemask+0x29a/0x640 [ 163.566082][ T5801] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 163.571611][ T5801] ? mem_cgroup_oom_trylock+0x340/0x340 [ 163.577137][ T5801] ? _raw_spin_trylock_bh+0x150/0x150 [ 163.582510][ T5801] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 163.588033][ T5801] try_charge+0xfa9/0x1580 [ 163.592430][ T5801] ? __memcg_kmem_charge+0x150/0x150 [ 163.597696][ T5801] ? __kasan_check_write+0x14/0x20 [ 163.602789][ T5801] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 163.608574][ T5801] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 163.614122][ T5801] __mem_cgroup_charge+0x148/0x6d0 [ 163.619226][ T5801] shmem_add_to_page_cache+0x569/0xe10 [ 163.624674][ T5801] ? shmem_alloc_page+0x380/0x380 [ 163.629686][ T5801] ? _raw_spin_lock_irqsave+0x130/0x130 [ 163.635231][ T5801] ? preempt_schedule_irq+0xca/0x120 [ 163.640528][ T5801] ? find_lock_entry+0x4b/0x200 [ 163.645385][ T5801] shmem_getpage_gfp+0x907/0x20f0 [ 163.650397][ T5801] shmem_write_begin+0xce/0x1b0 [ 163.655270][ T5801] generic_perform_write+0x2ce/0x540 [ 163.660556][ T5801] ? atime_needs_update+0x5b0/0x5b0 [ 163.665746][ T5801] ? grab_cache_page_write_begin+0xb0/0xb0 [ 163.671538][ T5801] ? file_remove_privs+0x590/0x590 [ 163.676626][ T5801] ? __kasan_check_write+0x14/0x20 [ 163.681720][ T5801] ? down_write+0xb2/0x120 [ 163.686119][ T5801] __generic_file_write_iter+0x24b/0x480 [ 163.691755][ T5801] ? generic_write_checks+0x3df/0x480 [ 163.697117][ T5801] generic_file_write_iter+0xa9/0x1d0 [ 163.702473][ T5801] __kernel_write+0x5a5/0x9d0 [ 163.707137][ T5801] ? vfs_read+0xa50/0xa50 [ 163.711450][ T5801] ? populate_vma_page_range+0xf0/0xf0 [ 163.716891][ T5801] ? __kasan_check_write+0x14/0x20 [ 163.722260][ T5801] dump_emit+0x255/0x380 [ 163.726501][ T5801] ? wait_for_dump_helpers+0x380/0x380 [ 163.731957][ T5801] dump_user_range+0x6a/0x1a0 [ 163.736617][ T5801] elf_core_dump+0x27af/0x2c20 [ 163.741365][ T5801] ? load_elf_binary+0x2910/0x2910 [ 163.746461][ T5801] ? __fsnotify_parent+0x6db/0x7c0 [ 163.751566][ T5801] ? do_truncate+0x1c6/0x240 [ 163.756153][ T5801] ? putname+0xfe/0x150 [ 163.760300][ T5801] ? __kasan_check_read+0x11/0x20 [ 163.765303][ T5801] ? __ia32_sys_unshare+0x40/0x40 [ 163.770305][ T5801] do_coredump+0x1be6/0x2910 [ 163.774895][ T5801] ? simple_acl_create+0x1c0/0x1c0 [ 163.780123][ T5801] ? debug_smp_processor_id+0x17/0x20 [ 163.785484][ T5801] ? kmem_cache_free+0x100/0x2d0 [ 163.790406][ T5801] ? ____kasan_slab_free+0x130/0x160 [ 163.795678][ T5801] ? get_signal+0xbdb/0x1300 [ 163.800249][ T5801] ? kmem_cache_free+0x2a9/0x2d0 [ 163.805168][ T5801] get_signal+0xf4c/0x1300 [ 163.809570][ T5801] arch_do_signal_or_restart+0xe7/0x11b0 [ 163.815199][ T5801] ? __send_signal+0x929/0xc10 [ 163.819972][ T5801] ? send_signal+0x3a5/0x580 [ 163.824541][ T5801] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 163.830159][ T5801] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 163.836819][ T5801] ? force_sig+0xca/0x120 [ 163.841144][ T5801] ? send_sig+0x70/0x70 [ 163.845292][ T5801] exit_to_user_mode_loop+0xa2/0xe0 [ 163.851551][ T5801] exit_to_user_mode_prepare+0x76/0xa0 [ 163.856994][ T5801] irqentry_exit_to_user_mode+0x9/0x10 [ 163.862437][ T5801] irqentry_exit+0x12/0x60 [ 163.866835][ T5801] exc_general_protection+0x1ca/0x250 [ 163.872210][ T5801] ? debug_smp_processor_id+0x17/0x20 [ 163.877563][ T5801] ? asm_exc_general_protection+0x8/0x30 [ 163.883179][ T5801] asm_exc_general_protection+0x1e/0x30 [ 163.888719][ T5801] RIP: 0033:0x7fdcf744a161 [ 163.893231][ T5801] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 163.912972][ T5801] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 163.919024][ T5801] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 163.926985][ T5801] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 163.934938][ T5801] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 163.942893][ T5801] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 163.950845][ T5801] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 163.967999][ T5801] memory: usage 307200kB, limit 307200kB, failcnt 38627 [ 163.985772][ T5801] memory+swap: usage 423676kB, limit 9007199254740988kB, failcnt 0 [ 164.029723][ T5801] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 164.059629][ T5801] Memory cgroup stats for /syz1: [ 164.059746][ T5801] anon 270336 [ 164.059746][ T5801] file 307777536 [ 164.059746][ T5801] kernel_stack 0 [ 164.059746][ T5801] percpu 0 [ 164.059746][ T5801] sock 0 [ 164.059746][ T5801] shmem 307777536 [ 164.059746][ T5801] file_mapped 135168 [ 164.059746][ T5801] file_dirty 0 [ 164.059746][ T5801] file_writeback 0 [ 164.059746][ T5801] anon_thp 0 [ 164.059746][ T5801] inactive_anon 288419840 [ 164.059746][ T5801] active_anon 20328448 [ 164.059746][ T5801] inactive_file 0 [ 164.059746][ T5801] active_file 131072 [ 164.059746][ T5801] unevictable 0 [ 164.059746][ T5801] slab_reclaimable 0 [ 164.059746][ T5801] slab_unreclaimable 0 [ 164.059746][ T5801] slab 0 [ 164.059746][ T5801] workingset_refault_anon 0 [ 164.059746][ T5801] workingset_refault_file 26598 [ 164.059746][ T5801] workingset_activate_anon 0 [ 164.059746][ T5801] workingset_activate_file 14751 [ 164.059746][ T5801] workingset_restore_anon 0 [ 164.059746][ T5801] workingset_restore_file 11550 [ 164.246744][ T5801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5806,uid=0 [ 164.411205][ T5801] Memory cgroup out of memory: Killed process 5806 (syz.1.1304) total-vm:90468kB, anon-rss:1252kB, file-rss:45456kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 164.679436][ T6518] device syzkaller0 entered promiscuous mode [ 164.861226][ T6525] device sit0 left promiscuous mode [ 164.936605][ T6529] device sit0 entered promiscuous mode [ 166.000448][ T5791] syz.1.1304 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 166.038900][ T5791] CPU: 1 PID: 5791 Comm: syz.1.1304 Tainted: G W syzkaller #0 [ 166.047685][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.057911][ T5791] Call Trace: [ 166.061199][ T5791] __dump_stack+0x21/0x24 [ 166.065524][ T5791] dump_stack_lvl+0x1a7/0x208 [ 166.070199][ T5791] ? show_regs_print_info+0x18/0x18 [ 166.075392][ T5791] ? ___ratelimit+0x421/0x5a0 [ 166.080195][ T5791] ? _raw_spin_lock+0x94/0xf0 [ 166.084880][ T5791] dump_stack+0x15/0x1c [ 166.089038][ T5791] dump_header+0xd9/0x650 [ 166.093375][ T5791] oom_kill_process+0x1fa/0x2c0 [ 166.098237][ T5791] out_of_memory+0x879/0xce0 [ 166.102830][ T5791] ? unregister_oom_notifier+0x20/0x20 [ 166.108285][ T5791] ? mutex_lock_killable+0x92/0xf0 [ 166.113390][ T5791] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 166.119886][ T5791] ? __alloc_pages_nodemask+0x29a/0x640 [ 166.125439][ T5791] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 166.130983][ T5791] ? mem_cgroup_oom_trylock+0x340/0x340 [ 166.136526][ T5791] ? _raw_spin_trylock_bh+0x150/0x150 [ 166.141901][ T5791] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 166.147448][ T5791] try_charge+0xfa9/0x1580 [ 166.151867][ T5791] ? __memcg_kmem_charge+0x150/0x150 [ 166.157150][ T5791] ? __kasan_check_write+0x14/0x20 [ 166.162255][ T5791] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 166.168056][ T5791] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 166.173597][ T5791] __mem_cgroup_charge+0x148/0x6d0 [ 166.178705][ T5791] shmem_add_to_page_cache+0x569/0xe10 [ 166.184161][ T5791] ? shmem_alloc_page+0x380/0x380 [ 166.189177][ T5791] ? _raw_spin_lock_irqsave+0x130/0x130 [ 166.194723][ T5791] ? find_lock_entry+0x4b/0x200 [ 166.199571][ T5791] shmem_getpage_gfp+0x907/0x20f0 [ 166.204597][ T5791] shmem_write_begin+0xce/0x1b0 [ 166.209441][ T5791] generic_perform_write+0x2ce/0x540 [ 166.214720][ T5791] ? atime_needs_update+0x5b0/0x5b0 [ 166.219923][ T5791] ? grab_cache_page_write_begin+0xb0/0xb0 [ 166.225724][ T5791] ? file_remove_privs+0x590/0x590 [ 166.230834][ T5791] ? __kasan_check_write+0x14/0x20 [ 166.235940][ T5791] ? down_write+0xb2/0x120 [ 166.240353][ T5791] __generic_file_write_iter+0x24b/0x480 [ 166.245978][ T5791] ? generic_write_checks+0x3df/0x480 [ 166.251371][ T5791] generic_file_write_iter+0xa9/0x1d0 [ 166.256742][ T5791] __kernel_write+0x5a5/0x9d0 [ 166.261420][ T5791] ? vfs_read+0xa50/0xa50 [ 166.265752][ T5791] ? populate_vma_page_range+0xf0/0xf0 [ 166.271213][ T5791] ? __kasan_check_write+0x14/0x20 [ 166.276329][ T5791] dump_emit+0x255/0x380 [ 166.280569][ T5791] ? wait_for_dump_helpers+0x380/0x380 [ 166.286025][ T5791] dump_user_range+0x6a/0x1a0 [ 166.290698][ T5791] elf_core_dump+0x27af/0x2c20 [ 166.295466][ T5791] ? load_elf_binary+0x2910/0x2910 [ 166.300575][ T5791] ? __fsnotify_parent+0x6db/0x7c0 [ 166.305692][ T5791] ? do_truncate+0x1c6/0x240 [ 166.310285][ T5791] ? putname+0xfe/0x150 [ 166.314802][ T5791] ? __kasan_check_read+0x11/0x20 [ 166.319831][ T5791] ? __ia32_sys_unshare+0x40/0x40 [ 166.324861][ T5791] do_coredump+0x1be6/0x2910 [ 166.329455][ T5791] ? simple_acl_create+0x1c0/0x1c0 [ 166.334579][ T5791] ? debug_smp_processor_id+0x17/0x20 [ 166.339971][ T5791] ? kmem_cache_free+0x100/0x2d0 [ 166.344913][ T5791] ? ____kasan_slab_free+0x130/0x160 [ 166.350213][ T5791] ? get_signal+0xbdb/0x1300 [ 166.354804][ T5791] ? kmem_cache_free+0x2a9/0x2d0 [ 166.359746][ T5791] get_signal+0xf4c/0x1300 [ 166.364179][ T5791] arch_do_signal_or_restart+0xe7/0x11b0 [ 166.369819][ T5791] ? __send_signal+0x929/0xc10 [ 166.374583][ T5791] ? send_signal+0x3a5/0x580 [ 166.379199][ T5791] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 166.384840][ T5791] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 166.390651][ T5791] ? force_sig+0xca/0x120 [ 166.394985][ T5791] ? send_sig+0x70/0x70 [ 166.399142][ T5791] exit_to_user_mode_loop+0xa2/0xe0 [ 166.404348][ T5791] exit_to_user_mode_prepare+0x76/0xa0 [ 166.409812][ T5791] irqentry_exit_to_user_mode+0x9/0x10 [ 166.415281][ T5791] irqentry_exit+0x12/0x60 [ 166.419704][ T5791] exc_general_protection+0x1ca/0x250 [ 166.425246][ T5791] ? debug_smp_processor_id+0x17/0x20 [ 166.430620][ T5791] ? asm_exc_general_protection+0x8/0x30 [ 166.436252][ T5791] asm_exc_general_protection+0x1e/0x30 [ 166.441795][ T5791] RIP: 0033:0x7fdcf744a161 [ 166.446209][ T5791] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 166.466075][ T5791] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 166.472150][ T5791] RAX: 0000000000000000 RBX: 00007fdcf76d2090 RCX: 00007fdcf744a159 [ 166.480128][ T5791] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000002000 [ 166.488108][ T5791] RBP: 00007fdcf74e106b R08: 0000200000000140 R09: 0000200000000140 [ 166.496079][ T5791] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 166.504046][ T5791] R13: 00007fdcf76d2128 R14: 00007fdcf76d2090 R15: 00007ffc3854c078 [ 166.519122][ T5791] memory: usage 307200kB, limit 307200kB, failcnt 40464 [ 166.547747][ T5791] memory+swap: usage 430004kB, limit 9007199254740988kB, failcnt 0 [ 166.556866][ T5791] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 166.563946][ T5791] Memory cgroup stats for /syz1: [ 166.564059][ T5791] anon 405504 [ 166.564059][ T5791] file 311967744 [ 166.564059][ T5791] kernel_stack 0 [ 166.564059][ T5791] percpu 0 [ 166.564059][ T5791] sock 0 [ 166.564059][ T5791] shmem 311832576 [ 166.564059][ T5791] file_mapped 135168 [ 166.564059][ T5791] file_dirty 0 [ 166.564059][ T5791] file_writeback 0 [ 166.564059][ T5791] anon_thp 0 [ 166.564059][ T5791] inactive_anon 295157760 [ 166.564059][ T5791] active_anon 19247104 [ 166.564059][ T5791] inactive_file 0 [ 166.564059][ T5791] active_file 200704 [ 166.564059][ T5791] unevictable 0 [ 166.564059][ T5791] slab_reclaimable 0 [ 166.564059][ T5791] slab_unreclaimable 0 [ 166.564059][ T5791] slab 0 [ 166.564059][ T5791] workingset_refault_anon 0 [ 166.564059][ T5791] workingset_refault_file 27621 [ 166.564059][ T5791] workingset_activate_anon 0 [ 166.564059][ T5791] workingset_activate_file 15774 [ 166.564059][ T5791] workingset_restore_anon 0 [ 166.564059][ T5791] workingset_restore_file 12408 [ 166.659182][ T5791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5853,uid=0 [ 166.674689][ T5791] Memory cgroup out of memory: Killed process 5853 (syz.1.1304) total-vm:90468kB, anon-rss:1244kB, file-rss:44820kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 166.692196][ T27] oom_reaper: reaped process 5853 (syz.1.1304), now anon-rss:0kB, file-rss:45908kB, shmem-rss:0kB [ 166.758345][ T6608] : port 1(veth0) entered blocking state [ 166.783543][ T6560] syz.1.1491 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 166.794942][ T6608] : port 1(veth0) entered disabled state [ 166.873807][ T6608] device veth0 entered promiscuous mode [ 166.988745][ T6560] CPU: 1 PID: 6560 Comm: syz.1.1491 Tainted: G W syzkaller #0 [ 166.997522][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.007575][ T6560] Call Trace: [ 167.010868][ T6560] __dump_stack+0x21/0x24 [ 167.015205][ T6560] dump_stack_lvl+0x1a7/0x208 [ 167.019882][ T6560] ? show_regs_print_info+0x18/0x18 [ 167.025080][ T6560] ? ___ratelimit+0x421/0x5a0 [ 167.029753][ T6560] ? _raw_spin_lock+0x94/0xf0 [ 167.034419][ T6560] dump_stack+0x15/0x1c [ 167.038554][ T6560] dump_header+0xd9/0x650 [ 167.042865][ T6560] oom_kill_process+0x1fa/0x2c0 [ 167.047693][ T6560] out_of_memory+0x879/0xce0 [ 167.052263][ T6560] ? unregister_oom_notifier+0x20/0x20 [ 167.057700][ T6560] ? mutex_lock_killable+0x92/0xf0 [ 167.062787][ T6560] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 167.069269][ T6560] mem_cgroup_out_of_memory+0x2d5/0x3b0 [ 167.074795][ T6560] ? mem_cgroup_oom_trylock+0x340/0x340 [ 167.080320][ T6560] ? _raw_spin_trylock_bh+0x150/0x150 [ 167.085671][ T6560] ? mem_cgroup_oom_trylock+0x1f9/0x340 [ 167.091193][ T6560] try_charge+0xfa9/0x1580 [ 167.095589][ T6560] ? __set_page_owner+0x289/0x2a0 [ 167.100593][ T6560] ? __memcg_kmem_charge+0x150/0x150 [ 167.105856][ T6560] ? get_page_from_freelist+0x225f/0x23f0 [ 167.111556][ T6560] ? __add_to_page_cache_locked+0x81d/0x9b0 [ 167.117424][ T6560] ? read_pages+0x9b0/0xb50 [ 167.121904][ T6560] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 167.127428][ T6560] __mem_cgroup_charge+0x148/0x6d0 [ 167.132521][ T6560] __add_to_page_cache_locked+0x208/0x9b0 [ 167.138221][ T6560] ? __alloc_pages_nodemask+0x29a/0x640 [ 167.143741][ T6560] ? put_page+0xd0/0xd0 [ 167.147874][ T6560] ? workingset_activation+0x250/0x250 [ 167.153309][ T6560] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 167.158833][ T6560] ? page_cache_prev_miss+0x250/0x290 [ 167.164185][ T6560] add_to_page_cache_lru+0xa7/0x210 [ 167.169363][ T6560] pagecache_get_page+0x700/0x930 [ 167.174366][ T6560] filemap_fault+0x1a89/0x2020 [ 167.179106][ T6560] ? generic_file_read_iter+0x580/0x580 [ 167.184630][ T6560] ? __this_cpu_preempt_check+0x13/0x20 [ 167.190155][ T6560] ? perf_sched_cb_inc+0x260/0x260 [ 167.195245][ T6560] ? _raw_spin_unlock_irq+0x4e/0x70 [ 167.200419][ T6560] ? switch_mm_irqs_off+0x752/0x990 [ 167.205852][ T6560] ? __switch_to_asm+0x3a/0x60 [ 167.210592][ T6560] ? __kasan_check_write+0x14/0x20 [ 167.215681][ T6560] ext4_filemap_fault+0x8a/0xa0 [ 167.220510][ T6560] handle_pte_fault+0x1683/0x3910 [ 167.225513][ T6560] handle_mm_fault+0xf86/0x1720 [ 167.230342][ T6560] ? can_reuse_spf_vma+0xe0/0xe0 [ 167.235280][ T6560] ? __kasan_check_write+0x14/0x20 [ 167.240375][ T6560] ? down_read_trylock+0x106/0x160 [ 167.245470][ T6560] ? __kasan_check_write+0x14/0x20 [ 167.250565][ T6560] ? can_reuse_spf_vma+0xc8/0xe0 [ 167.255482][ T6560] do_user_addr_fault+0x576/0xe20 [ 167.260487][ T6560] ? do_kern_addr_fault+0x80/0x80 [ 167.265491][ T6560] ? __kasan_check_read+0x11/0x20 [ 167.270495][ T6560] exc_page_fault+0x5a/0xc0 [ 167.274976][ T6560] ? asm_exc_page_fault+0x8/0x30 [ 167.279893][ T6560] asm_exc_page_fault+0x1e/0x30 [ 167.284729][ T6560] RIP: 0033:0x7fdcf7312871 [ 167.289129][ T6560] Code: 00 48 89 ef e8 c0 51 ff ff 48 8b 05 09 ef ee 00 83 05 f2 ee ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 ef ee ee 00 <44> 88 78 ff 44 8b 3d d4 ee ee 00 e8 8f 51 ff ff 48 8b 05 e0 ee ee [ 167.308724][ T6560] RSP: 002b:00007ffc3854c170 EFLAGS: 00010202 [ 167.314783][ T6560] RAX: 0000001b2df63f00 RBX: 0000000000000026 RCX: 0000000000000026 [ 167.322736][ T6560] RDX: 0000001b2df63eff RSI: 0000000000000008 RDI: 00007fdcf8201720 [ 167.330687][ T6560] RBP: 00007fdcf8201720 R08: 0000000000000000 R09: 00007fdcf76d2128 [ 167.338637][ T6560] R10: 0000000000000001 R11: 000000000000733c R12: 0000000000000000 [ 167.346588][ T6560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 167.357219][ T6560] memory: usage 301600kB, limit 307200kB, failcnt 41088 [ 167.379870][ T6560] memory+swap: usage 418852kB, limit 9007199254740988kB, failcnt 0 [ 167.410461][ T6560] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 167.473582][ T6560] Memory cgroup stats for /syz1: [ 167.473701][ T6560] anon 405504 [ 167.473701][ T6560] file 295206912 [ 167.473701][ T6560] kernel_stack 0 [ 167.473701][ T6560] percpu 0 [ 167.473701][ T6560] sock 0 [ 167.473701][ T6560] shmem 295206912 [ 167.473701][ T6560] file_mapped 135168 [ 167.473701][ T6560] file_dirty 0 [ 167.473701][ T6560] file_writeback 0 [ 167.473701][ T6560] anon_thp 0 [ 167.473701][ T6560] inactive_anon 278929408 [ 167.473701][ T6560] active_anon 18436096 [ 167.473701][ T6560] inactive_file 0 [ 167.473701][ T6560] active_file 200704 [ 167.473701][ T6560] unevictable 0 [ 167.473701][ T6560] slab_reclaimable 0 [ 167.473701][ T6560] slab_unreclaimable 0 [ 167.473701][ T6560] slab 0 [ 167.473701][ T6560] workingset_refault_anon 0 [ 167.473701][ T6560] workingset_refault_file 27621 [ 167.473701][ T6560] workingset_activate_anon 0 [ 167.473701][ T6560] workingset_activate_file 15774 [ 167.473701][ T6560] workingset_restore_anon 0 [ 167.473701][ T6560] workingset_restore_file 12408 [ 167.579375][ T6560] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1304,pid=5807,uid=0 [ 167.594992][ T6560] Memory cgroup out of memory: Killed process 5807 (syz.1.1304) total-vm:90468kB, anon-rss:1244kB, file-rss:43780kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 167.885021][ T6631] nr0: port 1(macsec0) entered blocking state [ 167.904262][ T6631] nr0: port 1(macsec0) entered disabled state [ 167.938437][ T6636] nr0: port 1(macsec0) entered blocking state [ 167.944585][ T6636] nr0: port 1(macsec0) entered forwarding state [ 169.162682][ T6705] device syzkaller0 entered promiscuous mode [ 169.541582][ T6716] device syzkaller0 entered promiscuous mode [ 170.031856][ T24] audit: type=1400 audit(1790250408.210:153): avc: denied { create } for pid=6753 comm="syz.0.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 170.885698][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.892867][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.069288][ T6815] device syzkaller0 entered promiscuous mode [ 172.770067][ T24] audit: type=1400 audit(1790250410.950:154): avc: denied { create } for pid=6945 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.063816][ T6958] device syzkaller0 entered promiscuous mode [ 173.661261][ T6982] cgroup: fork rejected by pids controller in /syz4 [ 173.670296][ T6993] device syzkaller0 entered promiscuous mode [ 173.694770][ T6986] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 174.029686][ T24] audit: type=1400 audit(1790250412.210:155): avc: denied { create } for pid=7060 comm="syz.3.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.165261][ T24] audit: type=1400 audit(1790250412.340:156): avc: denied { create } for pid=7078 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 175.938703][ T7140] device syzkaller0 entered promiscuous mode [ 176.052447][ T7151] ref_ctr_offset mismatch. inode: 0x7dc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 176.522216][ T24] audit: type=1400 audit(1790250414.690:157): avc: denied { read } for pid=7167 comm="syz.1.1625" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.640720][ T24] audit: type=1400 audit(1790250414.700:158): avc: denied { open } for pid=7167 comm="syz.1.1625" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.693464][ T7181] device syzkaller0 entered promiscuous mode [ 178.815557][ T24] audit: type=1400 audit(1790250416.990:159): avc: denied { create } for pid=7256 comm="syz.4.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 179.104045][ T7270] device syzkaller0 entered promiscuous mode [ 179.963616][ T7296] device wg2 left promiscuous mode [ 180.562577][ T7300] device lo entered promiscuous mode [ 181.849802][ T7387] device syzkaller0 entered promiscuous mode [ 183.700141][ T7704] : renamed from vlan1 [ 184.182864][ T24] audit: type=1400 audit(1790250422.360:160): avc: denied { ioctl } for pid=7746 comm="syz.4.1720" path="pid:[4026532449]" dev="nsfs" ino=4026532449 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 185.028617][ T7777] device syzkaller0 entered promiscuous mode [ 185.130461][ T7782] device syzkaller0 entered promiscuous mode [ 185.542517][ T7812] device wg2 left promiscuous mode [ 185.556749][ T7814] device wg2 entered promiscuous mode [ 185.563101][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 185.623580][ T7816] device syzkaller0 entered promiscuous mode [ 188.199831][ T7962] device sit0 left promiscuous mode [ 188.323696][ T7964] device sit0 entered promiscuous mode [ 188.645067][ T7988] device sit0 left promiscuous mode [ 188.874951][ T7983] device sit0 entered promiscuous mode [ 189.329595][ T24] audit: type=1400 audit(1790250427.500:161): avc: denied { create } for pid=8008 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.594964][ T8035] device syzkaller0 entered promiscuous mode [ 190.143513][ T8052] device sit0 entered promiscuous mode [ 190.798151][ T8080] device syzkaller0 entered promiscuous mode [ 191.225487][ T8102] tap0: tun_chr_ioctl cmd 1074025677 [ 191.230983][ T8102] tap0: linktype set to 769 [ 191.767913][ T8173] device sit0 left promiscuous mode [ 192.544904][ T8234] device veth1_macvtap left promiscuous mode [ 193.531184][ T8314] : renamed from bond_slave_0 [ 196.621325][ T8474] device syzkaller0 entered promiscuous mode [ 197.546660][ T8516] device syzkaller0 entered promiscuous mode [ 198.504417][ T8605] device syzkaller0 entered promiscuous mode [ 202.448766][ T8742] device syzkaller0 entered promiscuous mode [ 202.461691][ T8736] device syzkaller0 entered promiscuous mode [ 204.756263][ T8833] device syzkaller0 entered promiscuous mode [ 208.199603][ T8929] ref_ctr_offset mismatch. inode: 0x947 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 208.330107][ T8935] device macsec0 left promiscuous mode [ 208.390034][ T8930] device macsec0 entered promiscuous mode [ 208.405974][ T8930] device veth1_macvtap entered promiscuous mode [ 208.446412][ T8943] IPv6: macvtap0: Disabled Multicast RS [ 208.586161][ T8955] device syzkaller0 entered promiscuous mode [ 209.505277][ T8993] device veth1_macvtap left promiscuous mode [ 209.554329][ T8993] nr0: port 1(macsec0) entered disabled state [ 210.300974][ T9016] : port 2(ip6gretap0) entered blocking state [ 210.307173][ T9016] : port 2(ip6gretap0) entered disabled state [ 210.716513][ T9058] device syzkaller0 entered promiscuous mode [ 210.727658][ T9061] IPv6: pim6reg1: Disabled Multicast RS [ 210.817543][ T24] audit: type=1400 audit(1790250448.990:162): avc: denied { create } for pid=9066 comm="syz.3.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 211.045060][ T9078] ref_ctr_offset mismatch. inode: 0x888 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 211.130700][ T9087] device syz_tun left promiscuous mode [ 211.136410][ T9087] bridge0: port 3(syz_tun) entered disabled state [ 211.227839][ T9100] device sit0 left promiscuous mode [ 211.463382][ T9125] device syzkaller0 entered promiscuous mode [ 212.581608][ T9176] device veth0_vlan left promiscuous mode [ 212.587761][ T9176] device veth0_vlan entered promiscuous mode [ 212.608151][ T273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.618346][ T273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.626699][ T273] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 212.691342][ T9189] device sit0 entered promiscuous mode [ 213.696262][ T9241] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.723807][ T9241] device syzkaller0 entered promiscuous mode [ 214.990407][ T9401] ref_ctr_offset mismatch. inode: 0x9ea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 215.305738][ T9432] device syzkaller0 entered promiscuous mode [ 215.545559][ T9449] device syzkaller0 entered promiscuous mode [ 215.665111][ T9449] veth1_virt_wifi: mtu greater than device maximum [ 215.958105][ T9460] syz.0.2138[9460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.262223][ T24] audit: type=1400 audit(1790250454.440:163): avc: denied { create } for pid=9468 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.348963][ T24] audit: type=1400 audit(1790250454.520:164): avc: denied { create } for pid=9477 comm="syz.4.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 216.977339][ T9499] device syzkaller0 entered promiscuous mode [ 217.206491][ T9521] device syzkaller0 entered promiscuous mode [ 217.431293][ T9547] device syzkaller0 entered promiscuous mode [ 217.852980][ T9570] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 217.858814][ T9570] syzkaller0: linktype set to 825 [ 218.143521][ T9590] device syzkaller0 entered promiscuous mode [ 218.311618][ T9588] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.351086][ T9588] device syzkaller0 entered promiscuous mode [ 218.501704][ T9609] device sit0 left promiscuous mode [ 218.732064][ T9614] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.749678][ T9614] device syzkaller0 entered promiscuous mode [ 218.779846][ T9619] device sit0 entered promiscuous mode [ 221.375308][ T9705] ref_ctr_offset mismatch. inode: 0x831 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 223.957753][ T9808] device syzkaller0 entered promiscuous mode [ 224.786472][ T9871] device syzkaller0 entered promiscuous mode [ 224.848624][ T9873] device syzkaller0 entered promiscuous mode [ 224.898196][ T9879] device syzkaller0 entered promiscuous mode [ 227.970115][T10002] device syzkaller0 entered promiscuous mode [ 229.233093][T10048] device syzkaller0 entered promiscuous mode [ 229.258057][T10047] device syzkaller0 entered promiscuous mode [ 229.383477][T10061] device wg2 entered promiscuous mode [ 229.445262][T10063] device syzkaller0 entered promiscuous mode [ 229.800404][T10105] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 230.941927][T10185] : renamed from pimreg0 [ 231.779667][T10247] device sit0 left promiscuous mode [ 232.002061][T10252] device sit0 entered promiscuous mode [ 232.111083][T10257] device wg2 entered promiscuous mode [ 232.728935][T10299] device syzkaller0 entered promiscuous mode [ 233.767083][T10321] device syzkaller0 entered promiscuous mode [ 233.774429][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 234.276002][T10333] device dvmrp0 entered promiscuous mode [ 235.381626][T10374] device syzkaller0 entered promiscuous mode [ 236.706037][T10398] device syzkaller0 entered promiscuous mode [ 237.379279][T10411] gretap0: refused to change device tx_queue_len [ 238.223828][T10435] device syzkaller0 entered promiscuous mode [ 239.363196][T10469] device sit0 left promiscuous mode [ 239.490438][T10463] device sit0 entered promiscuous mode [ 240.966910][T10551] device syzkaller0 entered promiscuous mode [ 241.354884][T10590] device syzkaller0 entered promiscuous mode [ 242.100156][T10626] device ip6gretap0 left promiscuous mode [ 242.115704][T10626] bridge0: port 3(ip6gretap0) entered disabled state [ 247.490834][T10746] : renamed from team_slave_1 [ 248.663239][T10784] device syzkaller0 entered promiscuous mode [ 248.971188][T10807] device sit0 left promiscuous mode [ 249.161014][T10809] device sit0 entered promiscuous mode [ 249.572032][T10814] device syzkaller0 entered promiscuous mode [ 249.866567][T10825] device sit0 left promiscuous mode [ 250.194058][T10840] device sit0 left promiscuous mode [ 250.357571][T10882] : port 2(ip6gretap0) entered blocking state [ 250.374333][T10882] : port 2(ip6gretap0) entered disabled state [ 250.448567][T10882] device ip6gretap0 entered promiscuous mode [ 250.513451][T10896] device ip6gretap0 left promiscuous mode [ 250.522575][T10896] : port 2(ip6gretap0) entered disabled state [ 251.525880][T10938] syz.1.2524[10938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.525938][T10938] syz.1.2524[10938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.830310][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.146638][T11054] device syzkaller0 entered promiscuous mode [ 253.626451][T11094] -: renamed from syzkaller0 [ 253.869975][T11131] bY4`Ҙ: renamed from lo [ 254.309731][T11163] device syzkaller0 entered promiscuous mode [ 255.065749][T11179] device macsec0 entered promiscuous mode [ 255.171247][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.260555][T11189] device syzkaller0 entered promiscuous mode [ 255.654739][T11231] device veth1_macvtap left promiscuous mode [ 255.661019][T11231] device macsec0 left promiscuous mode [ 255.672710][T11231] device macsec0 entered promiscuous mode [ 255.678470][T11231] device veth1_macvtap entered promiscuous mode [ 256.357607][T11275] device syzkaller0 entered promiscuous mode [ 258.569425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.605425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.980025][T11401] syzkaller0: create flow: hash 939214554 index 1 [ 259.003709][T11400] syzkaller0: delete flow: hash 939214554 index 1 [ 259.426671][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.455265][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.484347][T11422] device bridge_slave_0 entered promiscuous mode [ 259.513604][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.521288][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.528738][T11422] device bridge_slave_1 entered promiscuous mode [ 259.830436][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.837832][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.850451][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.858962][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.867196][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.874251][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.881915][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.892628][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.901144][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.909244][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.916277][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.934248][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.951211][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.980331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.994218][T11422] device veth0_vlan entered promiscuous mode [ 260.001417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.009993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.017483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.029432][T11422] device veth1_macvtap entered promiscuous mode [ 260.041191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.090829][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.103837][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.566708][ T273] : port 2(ip6gretap0) entered disabled state [ 261.247235][T11573] device syzkaller0 entered promiscuous mode [ 261.332992][ T273] device veth0 left promiscuous mode [ 261.363141][ T273] : port 1(veth0) entered disabled state [ 262.783836][ T24] audit: type=1400 audit(1790250500.960:165): avc: denied { create } for pid=11668 comm="syz.2.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 263.122586][T11692] device wg2 left promiscuous mode [ 263.136222][T11692] device wg2 entered promiscuous mode [ 263.385821][T11728] device syzkaller0 entered promiscuous mode [ 263.947443][T11739] device syzkaller0 entered promiscuous mode [ 264.669784][T11790] device bridge_slave_1 left promiscuous mode [ 264.678047][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.685652][T11790] device bridge_slave_0 left promiscuous mode [ 264.692094][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.459463][T11853] device syzkaller0 entered promiscuous mode [ 267.181134][T11931] device syzkaller0 entered promiscuous mode [ 268.558784][T12033] device syzkaller0 entered promiscuous mode [ 268.768797][T12038] device syzkaller0 entered promiscuous mode [ 269.509823][T12065] device syzkaller0 entered promiscuous mode [ 270.067336][T12079] syz.0.2787[12079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.067443][T12079] syz.0.2787[12079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.548406][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.575983][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.930255][T12190] tap0: tun_chr_ioctl cmd 1074025677 [ 271.935738][T12190] tap0: linktype set to 778 [ 271.943882][T12191] tap0: tun_chr_ioctl cmd 1074025677 [ 271.949188][T12191] tap0: linktype set to 778 [ 272.016573][T12191] tap0: tun_chr_ioctl cmd 1074025681 [ 272.021991][T12192] tap0: tun_chr_ioctl cmd 1074025681 [ 272.235982][T12210] device sit0 entered promiscuous mode [ 272.669719][T12230] device syzkaller0 entered promiscuous mode [ 272.676616][T12227] ?0: renamed from bond_slave_1 [ 273.067162][T12236] device syzkaller0 entered promiscuous mode [ 276.010581][T12377] device syzkaller0 entered promiscuous mode [ 276.046673][ T24] audit: type=1400 audit(1790250514.220:166): avc: denied { create } for pid=12392 comm="syz.1.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 277.180691][T12444] device sit0 left promiscuous mode [ 277.730175][T12492] device syzkaller0 entered promiscuous mode [ 278.467805][T12522] : port 1(ip6gretap0) entered blocking state [ 278.490941][T12522] : port 1(ip6gretap0) entered disabled state [ 278.532022][T12522] device ip6gretap0 entered promiscuous mode [ 279.019689][T12559] IPv6: pim6reg1: Disabled Multicast RS [ 279.028223][T12559] device bridge_slave_0 entered promiscuous mode [ 279.383370][T12567] device syzkaller0 entered promiscuous mode [ 280.169985][T12597] : port 2(veth0_vlan) entered blocking state [ 280.180555][T12597] : port 2(veth0_vlan) entered disabled state [ 280.206095][T12594] device syzkaller0 entered promiscuous mode [ 280.585889][T12628] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 280.691704][T12644] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 280.706793][T12645] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 281.220722][T12705] device syzkaller0 entered promiscuous mode [ 282.198762][T12741] device syzkaller0 entered promiscuous mode [ 283.401255][T12779] device syzkaller0 entered promiscuous mode [ 284.199885][T12791] device syzkaller0 entered promiscuous mode [ 285.003931][T12862] device syzkaller0 entered promiscuous mode [ 285.105558][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.118885][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.125968][T12874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.168471][T12874] device syzkaller0 entered promiscuous mode [ 285.307873][T12891] device pim6reg1 entered promiscuous mode [ 286.187872][T12944] syz.2.2993[12944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.187969][T12944] syz.2.2993[12944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.925548][T12980] device syzkaller0 entered promiscuous mode [ 287.805751][T13018] device syzkaller0 entered promiscuous mode [ 288.818629][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.846189][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.859538][T13044] device bridge_slave_0 entered promiscuous mode [ 288.883502][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.909400][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.932019][T13044] device bridge_slave_1 entered promiscuous mode [ 289.082002][T13065] device syzkaller0 entered promiscuous mode [ 289.209190][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.216272][T13044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.223561][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.230599][T13044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.259176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.284189][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.293294][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.365567][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.384491][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.391580][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.429959][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.448429][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.455507][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.474050][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.495401][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.520946][ T273] device ip6gretap0 left promiscuous mode [ 289.536329][ T273] : port 1(ip6gretap0) entered disabled state [ 289.583011][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.601216][T13044] device veth0_vlan entered promiscuous mode [ 289.609034][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.618041][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.626732][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.645852][T13044] device veth1_macvtap entered promiscuous mode [ 289.658815][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.690847][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.700686][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.742322][T13114] tun0: tun_chr_ioctl cmd 2147767511 [ 289.747764][T13114] tun0: tun_chr_ioctl cmd 1074025684 [ 289.897487][T13126] : renamed from bond_slave_0 [ 290.104042][ T273] device macsec0 left promiscuous mode [ 290.110553][ T273] nr0: port 1(macsec0) entered disabled state [ 290.123035][ T273] device bridge_slave_1 left promiscuous mode [ 290.132435][ T273] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.144284][ T273] device bridge_slave_0 left promiscuous mode [ 290.153725][ T273] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.637297][ T24] audit: type=1400 audit(1790250528.810:167): avc: denied { create } for pid=13147 comm="syz.3.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 291.673606][T13208] bridge0: port 3(veth1_macvtap) entered blocking state [ 291.700763][T13208] bridge0: port 3(veth1_macvtap) entered disabled state [ 291.871860][ T24] audit: type=1400 audit(1790250530.050:168): avc: denied { create } for pid=13223 comm="syz.3.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.757108][T13298] tap0: tun_chr_ioctl cmd 1074025677 [ 293.798889][T13298] tap0: linktype set to 256 [ 293.876639][T13302] tap0: tun_chr_ioctl cmd 1074025673 [ 293.935342][T13303] tap0: tun_chr_ioctl cmd 1074025677 [ 293.959695][T13303] tap0: linktype set to 256 [ 294.495037][T13339] device syzkaller0 entered promiscuous mode [ 294.875860][T13351] device syzkaller0 entered promiscuous mode [ 294.899345][ T24] audit: type=1400 audit(1790250533.070:169): avc: denied { mounton } for pid=13352 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 295.095856][T13352] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.129114][T13352] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.144475][T13352] device bridge_slave_0 entered promiscuous mode [ 295.158094][T13352] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.172815][T13352] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.187832][T13352] device bridge_slave_1 entered promiscuous mode [ 295.840058][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.860852][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.933166][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.984648][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.991720][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.009615][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.017918][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.024973][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.040329][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.049960][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.066890][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.101169][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.116307][T13352] device veth0_vlan entered promiscuous mode [ 296.137297][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.150288][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.162775][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.175851][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.496822][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.511034][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.562299][T13352] device veth1_macvtap entered promiscuous mode [ 296.733089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.740866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.754266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.764501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.775871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.803649][ T24] audit: type=1400 audit(1790250534.980:170): avc: denied { unmount } for pid=13352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 298.254415][T13499] : port 3(veth0) entered blocking state [ 298.277356][T13499] : port 3(veth0) entered disabled state [ 298.398351][T13499] device veth0 entered promiscuous mode [ 300.004623][T13646] ref_ctr_offset mismatch. inode: 0x21b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 300.117819][T13648] syz.2.3158[13648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.117871][T13648] syz.2.3158[13648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.233299][T13654] device syzkaller0 entered promiscuous mode [ 300.358720][T13657] device syzkaller0 entered promiscuous mode [ 302.138535][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.146006][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.154010][T13815] device bridge_slave_0 entered promiscuous mode [ 302.161336][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.168421][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.176080][T13815] device bridge_slave_1 entered promiscuous mode [ 302.285598][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.292695][T13815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.299998][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.307019][T13815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.371211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.384118][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.393120][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.423266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.450453][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.457526][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.475564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.485854][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.492909][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.526267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.552835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.668460][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.743522][T13815] device veth0_vlan entered promiscuous mode [ 302.805339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.846411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.076994][T13815] device veth1_macvtap entered promiscuous mode [ 303.084127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.092323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.112656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.122715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.139936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.193275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.219848][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.228316][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.241626][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.892705][T13905] syz.0.3199[13905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.892757][T13905] syz.0.3199[13905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.145837][ T5] syzkaller0: tun_net_xmit 76 [ 304.163536][T13934] syzkaller0: create flow: hash 96123494 index 1 [ 304.170010][ C0] syzkaller0: tun_net_xmit 76 [ 304.175388][ T5] syzkaller0: tun_net_xmit 48 [ 304.187833][T13933] syzkaller0: delete flow: hash 96123494 index 1 [ 304.510197][T13974] device syzkaller0 entered promiscuous mode [ 304.521104][ T273] device bridge_slave_1 left promiscuous mode [ 304.527742][ T273] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.536496][ T273] device bridge_slave_0 left promiscuous mode [ 304.569095][ T273] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.588834][ T273] device veth1_macvtap left promiscuous mode [ 304.596142][ T273] device veth0_vlan left promiscuous mode [ 306.302745][T14015] device syzkaller0 entered promiscuous mode [ 306.470737][T14018] device syzkaller0 entered promiscuous mode [ 309.844047][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.851275][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.858697][T14155] device bridge_slave_0 entered promiscuous mode [ 309.866741][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.874380][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.882150][T14155] device bridge_slave_1 entered promiscuous mode [ 309.968408][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.975697][T14155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.983003][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.990042][T14155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.017679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.029410][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.039535][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.244008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.252463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.261361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.268824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.276455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.284676][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.291714][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.299081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.319924][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.326964][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.334782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.347697][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.362895][T14155] device veth0_vlan entered promiscuous mode [ 310.425245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.455172][T14155] device veth1_macvtap entered promiscuous mode [ 310.466577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.489800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.478415][ T24] audit: type=1400 audit(1790250549.640:171): avc: denied { create } for pid=14256 comm="syz.3.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 313.506520][ T9] device veth1_macvtap left promiscuous mode [ 314.399490][ T24] audit: type=1400 audit(1790250552.570:172): avc: denied { create } for pid=14324 comm="syz.4.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 315.515648][T14403] device syzkaller0 entered promiscuous mode [ 316.373786][T14443] device veth1_macvtap entered promiscuous mode [ 316.391929][T14443] device macsec0 entered promiscuous mode [ 316.405308][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.054828][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.062040][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.071045][T14510] ref_ctr_offset mismatch. inode: 0x15e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 317.085358][T14507] device bridge_slave_1 left promiscuous mode [ 317.099168][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.171482][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.272213][T14571] device syzkaller0 entered promiscuous mode [ 320.180804][T14679] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 320.236890][T14679] device syzkaller0 entered promiscuous mode [ 320.655625][T14709] tun0: tun_chr_ioctl cmd 1074025677 [ 320.674413][T14709] tun0: linktype set to 1 [ 320.989290][T14726] syz.2.3408[14726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.989345][T14726] syz.2.3408[14726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.827874][T14808] cgroup: fork rejected by pids controller in /syz2 [ 322.411570][T14923] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.418628][T14923] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.509871][T14923] device bridge_slave_0 entered promiscuous mode [ 322.535283][T14923] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.542483][T14923] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.550208][T14923] device bridge_slave_1 entered promiscuous mode [ 322.614699][T14923] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.621777][T14923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.629052][T14923] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.636128][T14923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.656142][T14952] device syzkaller0 entered promiscuous mode [ 322.724755][T14953] device syzkaller0 entered promiscuous mode [ 322.813759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.827843][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.855950][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.885671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.910745][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.917818][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.937550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.949175][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.956249][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.997718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.026387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.045809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.081532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.092261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.120668][T14923] device veth0_vlan entered promiscuous mode [ 323.142754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.249842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.289413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.296950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.321620][T14923] device veth1_macvtap entered promiscuous mode [ 323.365595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.406219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.469831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.545106][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.593303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.693039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.750354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.450267][T15025] device syzkaller0 entered promiscuous mode [ 325.525425][ T9] device bridge_slave_1 left promiscuous mode [ 325.536169][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.543653][ T9] device bridge_slave_0 left promiscuous mode [ 325.549895][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.557559][ T9] device veth1_macvtap left promiscuous mode [ 325.563648][ T9] device veth0_vlan left promiscuous mode [ 328.171808][T15159] ref_ctr_offset mismatch. inode: 0x36e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 328.350139][T15165] bridge0: port 3(ip6gretap0) entered blocking state [ 328.376196][T15165] bridge0: port 3(ip6gretap0) entered disabled state [ 328.383530][T15165] device ip6gretap0 entered promiscuous mode [ 328.389984][T15165] bridge0: port 3(ip6gretap0) entered blocking state [ 328.396685][T15165] bridge0: port 3(ip6gretap0) entered forwarding state [ 328.411504][T15167] device ip6gretap0 left promiscuous mode [ 328.417385][T15167] bridge0: port 3(ip6gretap0) entered disabled state [ 328.584015][ T5950] ------------[ cut here ]------------ [ 328.589630][ T5950] kernel BUG at kernel/bpf/arraymap.c:993! [ 328.603033][ T5950] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 328.609117][ T5950] CPU: 1 PID: 5950 Comm: kworker/1:57 Tainted: G W syzkaller #0 [ 328.618025][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.628069][ T5950] Workqueue: events prog_array_map_clear_deferred [ 328.634464][ T5950] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 328.640686][ T5950] Code: 59 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 48 59 e9 ff 0f 0b e9 78 f9 ff ff e8 3c 59 e9 ff 0f 0b e8 35 59 e9 ff <0f> 0b e8 2e 59 e9 ff 0f 0b e8 27 59 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 328.660269][ T5950] RSP: 0018:ffffc9000149fc20 EFLAGS: 00010293 [ 328.666313][ T5950] RAX: ffffffff817b5b7b RBX: ffff888117928810 RCX: ffff888114b92800 [ 328.674260][ T5950] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 328.682209][ T5950] RBP: ffffc9000149fc98 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 328.690157][ T5950] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 328.698105][ T5950] R13: ffff8881184fd100 R14: 0000000000000001 R15: ffffffffa00c2a00 [ 328.706052][ T5950] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 328.714967][ T5950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.721526][ T5950] CR2: 00007ff1b2ff8060 CR3: 0000000117e41000 CR4: 00000000003506a0 [ 328.729484][ T5950] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 328.737429][ T5950] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 328.745373][ T5950] Call Trace: [ 328.748645][ T5950] ? bpf_prog_9d24bc9d07bfc85b+0xb/0xc10 [ 328.754253][ T5950] fd_array_map_delete_elem+0x142/0x240 [ 328.759786][ T5950] prog_array_map_clear_deferred+0x9e/0x140 [ 328.765656][ T5950] process_one_work+0x6fd/0xbc0 [ 328.770489][ T5950] worker_thread+0xa8e/0x13c0 [ 328.775152][ T5950] kthread+0x324/0x3b0 [ 328.779197][ T5950] ? worker_clr_flags+0x190/0x190 [ 328.784202][ T5950] ? kthread_blkcg+0xd0/0xd0 [ 328.788770][ T5950] ret_from_fork+0x1f/0x30 [ 328.793167][ T5950] Modules linked in: [ 328.809750][ T5950] ---[ end trace b0e43a87a16bd4bf ]--- [ 328.815329][ T5950] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 328.822135][ T5950] Code: 59 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 48 59 e9 ff 0f 0b e9 78 f9 ff ff e8 3c 59 e9 ff 0f 0b e8 35 59 e9 ff <0f> 0b e8 2e 59 e9 ff 0f 0b e8 27 59 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 328.841959][ T5950] RSP: 0018:ffffc9000149fc20 EFLAGS: 00010293 [ 328.848018][ T5950] RAX: ffffffff817b5b7b RBX: ffff888117928810 RCX: ffff888114b92800 [ 328.856029][ T5950] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 328.864019][ T5950] RBP: ffffc9000149fc98 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 328.872141][ T5950] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 328.880165][ T5950] R13: ffff8881184fd100 R14: 0000000000000001 R15: ffffffffa00c2a00 [ 328.888128][ T5950] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 328.897201][ T5950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.903782][ T5950] CR2: 00007ff1b0c96ff8 CR3: 0000000117e41000 CR4: 00000000003506a0 [ 328.911767][ T5950] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 328.919821][ T5950] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 328.927784][ T5950] Kernel panic - not syncing: Fatal exception [ 328.933895][ T5950] Kernel Offset: disabled [ 328.938204][ T5950] Rebooting in 86400 seconds..