last executing test programs: 7.210288287s ago: executing program 2 (id=1268): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000080040000", @ANYRESDEC], 0xffdd) 6.889789756s ago: executing program 2 (id=1278): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37, 0x8000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 6.843948057s ago: executing program 2 (id=1281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x94) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/mnt\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f00000001c0)="e9525b9456e785"}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5dbf4ad17b1cb319828918461b78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd1511aa72a95f7d86ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234765be0f4f51bc55f56baab870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfaecf390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b4000000000000ffff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a74c500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a54d9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a8e72eb71bb9ecf31fd16d1b0a63edfa0eaf452cba1d66b20659af0c9ff8d6e90bc48b1f25d7a7e838eaff2207c3b95ae7b2ccc96f2b1e0def13982b0a8a77a886abf3959ba0c53b0f985e71a7db2e20515c6f7eae7ee1d76243248653ead6e2a9cb1e293f69a237563963dda7037d3d2bef301339343207408d57bb1e37f4bf7147f7c417a2a7c6363667ccc398f1b8cb524d2df30f3162cf6632fcc2b5fc69a8346d4aa21cd812c95cbbf14518829b6c1360300cad57e74361928059940146f1163c1ca2f80dfc7056bce17512e9ac949d2c4f4d283f79d3312a75393faafc5393d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x94) (async) gettid() (async) syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/mnt\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f00000001c0)="e9525b9456e785"}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) 6.777357858s ago: executing program 2 (id=1285): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700d0ffffffffffffff000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 6.723691529s ago: executing program 2 (id=1286): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC=r5], 0xffdd) 6.564762714s ago: executing program 2 (id=1290): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100001800000000", @ANYRES32, @ANYBLOB="fbffffffff"], 0x48) 2.564905105s ago: executing program 4 (id=1340): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000070000b0000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 2.564489035s ago: executing program 1 (id=1341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$sock(r0, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000002b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="68a7fb1a445d94a6d4f8", @ANYRES64=0x0], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$sock(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003", @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r10}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r11, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xfc, 0x8, 0xfffffffffffffd86, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 2.455574008s ago: executing program 1 (id=1343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18006000000000ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000002f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.36173204s ago: executing program 1 (id=1344): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0xbd, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0x17, &(0x7f0000000cc0)=ANY=[@ANYRESHEX, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100004b938209f681d812dcaa5fec71abe3f31999b9", @ANYRES16, @ANYRESOCT, @ANYBLOB="0000000000000000b7020000000000008500000007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r3, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000e7793187c871646b5d4f2026ea220000000000000010000041463bb3f0ceb32be920610467969828da2e00"/56], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000009000000183d000002000000000000000000000089841000fffffffff8a600000200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000d2e9d3940f19a08a54385fe811d1f77dc0eff869c99a2c3b0aaa000bdb3ab83b0245d9a019ca03da9b39f15e050f084b0b78f15290dec5ff2640c954004ae8534603008fc338bb4ea1af2f27874d1c9c4abe9f09a7ed979c56808078ffae7ae803829e512530"], &(0x7f0000000540)='GPL\x00', 0x7, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0xff53, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r2, r2, 0x1], 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x32}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0xffd3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="050000000b000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003a713f2f3091284d9df5a807ef7f09b4051ae042509d40bdb4b5a1bdc44c8041e9579057f498c4b7c84f85bc1961dc6f4df342c39a7220eb3a1e"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r7}, 0x38) write$cgroup_subtree(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="2b63707561636374202b706572665f6576656e74202b6d656d6f7279202d6e65745f7072696f202d72646d61875cafde9a71046f3aa6202b6e65745f7072694d202d6370756163637420006d656d6f727920"], 0x48) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xa525, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x1fffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) close(r8) 2.117353087s ago: executing program 0 (id=1349): socketpair(0x11, 0x80000, 0x4, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x69, 0x1, 0x1, 0x7e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.028839189s ago: executing program 0 (id=1350): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x52) r3 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19c, 0x19c, 0x6, [@union={0xe, 0x9, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x1, 0xc}, {0x7, 0x3, 0x10000}, {0x3, 0x1, 0x75}, {0x0, 0x0, 0x6}, {0xf, 0x5, 0x8001}, {0xa, 0x2, 0x9}, {0xf, 0x1, 0x8}, {0x2, 0x4, 0x2}, {0x1, 0x5, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xa, 0x3}, {0x4}, {0x8, 0x1}, {0x3, 0x2}, {0xa}, {0x8, 0x4}, {0x0, 0x4}, {0x9, 0x3}]}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0x3, [{0xc, 0x5, 0x6}, {0x1, 0x5, 0x9}, {0xf, 0x2, 0xffffffff}, {0xa, 0x0, 0xfffffff9}, {0x9, 0x0, 0x2}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @union={0xa, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xf, 0x1, 0x4}, {0xf, 0x4, 0x10001}, {0x1, 0x2, 0x5}, {0x6, 0x0, 0x9}]}, @fwd={0x5}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x30, 0x0, 0x61]}}, &(0x7f0000000700)=""/82, 0x1ba, 0x52, 0x1, 0xfffffff9}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/net\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4}, &(0x7f00000002c0), &(0x7f0000000400)='%pB \x00'}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) 1.729413036s ago: executing program 1 (id=1354): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000120000", @ANYRESDEC], 0xffdd) 1.689354517s ago: executing program 4 (id=1355): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x2}]}, @volatile={0x0, 0x700}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000600)=""/4096, 0x3f, 0x1000, 0x1}, 0x28) 1.649373038s ago: executing program 0 (id=1356): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000940)=ANY=[@ANYBLOB='1-6', @ANYRESDEC], 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180100002020642500000000000200007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff7f0000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70201002cfe14000000b70300000000000085009423b83d0fe7288400000000000055090110006d220095000000000000008510000004000000d5950c00f0ffffffd19100e822be5a7ffd7ad00000000000b7020000020000008500000085000000b70000000000"], &(0x7f0000000340)='GPL\x00', 0x65, 0xf1, &(0x7f00000004c0)=""/241, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x10, 0x0, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r4], &(0x7f0000000b00)=[{0x0, 0x2, 0x1, 0x649a00ca7b2c05fd}, {0x2, 0x5, 0x6, 0x3}, {0x2, 0x4, 0x8, 0xb}, {0x4, 0x5, 0x2, 0x4}, {0x5, 0x1, 0x10, 0x1}, {0x0, 0x1, 0x3, 0xc}, {0x0, 0x1, 0xb, 0xc}, {0x2, 0x1, 0xd}, {0x5, 0x4, 0xe, 0xa}, {0x5, 0x4, 0x7, 0x2}], 0x10, 0x9}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair(0x11, 0x2, 0x6, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f00000005c0)=0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a21200600"], 0x8) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.648888178s ago: executing program 3 (id=1357): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000940)=ANY=[@ANYBLOB='1-6', @ANYRESDEC], 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180100002020642500000000000200007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff7f0000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70201002cfe14000000b70300000000000085009423b83d0fe7288400000000000055090110006d220095000000000000008510000004000000d5950c00f0ffffffd19100e822be5a7ffd7ad00000000000b7020000020000008500000085000000b70000000000"], &(0x7f0000000340)='GPL\x00', 0x65, 0xf1, &(0x7f00000004c0)=""/241, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x10, 0x0, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r4], &(0x7f0000000b00)=[{0x0, 0x2, 0x1, 0x649a00ca7b2c05fd}, {0x2, 0x5, 0x6, 0x3}, {0x2, 0x4, 0x8, 0xb}, {0x4, 0x5, 0x2, 0x4}, {0x5, 0x1, 0x10, 0x1}, {0x0, 0x1, 0x3, 0xc}, {0x0, 0x1, 0xb, 0xc}, {0x2, 0x1, 0xd}, {0x5, 0x4, 0xe, 0xa}, {0x5, 0x4, 0x7, 0x2}], 0x10, 0x9}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair(0x11, 0x2, 0x6, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f00000005c0)=0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a21200600"], 0x8) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.634274299s ago: executing program 4 (id=1358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002340)=@base={0x5, 0x16, 0x8, 0x9, 0x89}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000000000000000006640000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"/288], &(0x7f0000000300)='GPL\x00', 0x5, 0xed, &(0x7f00000014c0)=""/4086, 0x0, 0x1}, 0x3d) 1.633879629s ago: executing program 4 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.58149115s ago: executing program 4 (id=1360): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 1.141433861s ago: executing program 0 (id=1361): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 1.093630722s ago: executing program 3 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80001200000000", @ANYRESDEC], 0xffdd) 1.021808034s ago: executing program 0 (id=1363): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$sock(r0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003", @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xa00}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 907.041837ms ago: executing program 0 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="000000000000000000010000e13bbf004000007c8eed9e5f2adad000"], 0x48) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000200)=0x1) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000001c0)=0xffffff01) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000180)=r8) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 843.768429ms ago: executing program 1 (id=1365): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'wg2\x00', 0x400}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xab76}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x4, 0x2, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0xa, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x59, &(0x7f0000000a00)=""/89, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xc, 0x3}, 0x10, 0x744, r2, 0x5, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x8, 0xb}, {0x4, 0x3, 0x8, 0x3}, {0x1, 0x5, 0x10, 0x7}, {0x4, 0x5, 0x10, 0x8}, {0x4, 0x3, 0xc, 0x8}], 0x10, 0x9}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfc4, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000000000005509010000"], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r9], 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x2be, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r12}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r13}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r12}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r5, 0x4, r0}, 0x10) 757.835051ms ago: executing program 3 (id=1366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000200000", @ANYRESDEC], 0xffdd) 516.142147ms ago: executing program 3 (id=1367): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x5}, @restrict={0x8}, @var={0xe, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @volatile={0xd}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000500)=""/107, 0x80, 0x6b, 0x1, 0x6}, 0x28) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], &(0x7f0000000000)='GPL\x00', 0x803, 0xf8, &(0x7f00000001c0)=""/248, 0x41100, 0x60, '\x00', r0, 0x19, r1, 0x8, &(0x7f00000005c0)={0xc, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xf, 0x6, 0x3fed}, 0x10, 0xa4a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 388.35024ms ago: executing program 3 (id=1368): sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003", @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xb0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 101.813758ms ago: executing program 3 (id=1369): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x300, 0x9}, 0x80) 42.351799ms ago: executing program 1 (id=1370): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000280)="1879aced4480bb956eeff2183848db15d80f8c4f9a02a8f9a6b280393439cf7e6f7998c05164796e718fb2f4c7f289a063eab779ddd07e0289114ff309e796", 0x3f}], 0x1, &(0x7f00000004c0)=[@rights={{0x10}}], 0x63, 0x40000c0}, 0x4008000) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000080000009500000000000000", @ANYRES16, @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x45}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x80000200}, [@generic={0x6b, 0x1, 0x1, 0x30}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8, 0x1b, 0x0, 0xffffffffffffffff, 0x400}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x1}, 0x50) 0s ago: executing program 4 (id=1371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x20, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000050000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a02000000000018010ec69757000020207825db38c6bf34829aff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000002060000009500"/131], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) kernel console output (not intermixed with test programs): 3.095773][ T1547] RSP: 002b:00007faea13a1028 EFLAGS: 00000246 [ 53.100629][ T1561] RIP: 0033:0x7f860fd2f019 [ 53.100645][ T1561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.100660][ T1561] RSP: 002b:00007f860e787fd8 EFLAGS: 00000206 [ 53.106598][ T1547] ORIG_RAX: 0000000000000141 [ 53.109920][ T1561] ORIG_RAX: 0000000000000038 [ 53.109930][ T1561] RAX: ffffffffffffffda RBX: 00007f860ffb6fa0 RCX: 00007f860fd2f019 [ 53.109946][ T1561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 53.114767][ T1547] RAX: ffffffffffffffda RBX: 00007faea2bcffa0 RCX: 00007faea2948019 [ 53.119825][ T1561] RBP: 00007f860e788090 R08: 0000000000000000 R09: 0000000000000000 [ 53.119840][ T1561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 53.119852][ T1561] R13: 00007f860ffb7038 R14: 00007f860ffb6fa0 R15: 00007ffe85661848 [ 53.119873][ T1561] [ 53.126033][ T1547] RDX: 000000000000003d RSI: 0000200000000400 RDI: 0000000000000005 [ 53.382255][ T1547] RBP: 00007faea29df00c R08: 0000000000000000 R09: 0000000000000000 [ 53.391220][ T1547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.444963][ T1547] R13: 00007faea2bd0038 R14: 00007faea2bcffa0 R15: 00007fffd8940ec8 [ 53.489640][ T1547] [ 53.498776][ T1547] ---[ end trace 82054134c60d135e ]--- [ 53.812780][ T1594] device syzkaller0 entered promiscuous mode [ 55.857425][ T30] audit: type=1400 audit(1785803171.639:128): avc: denied { create } for pid=1711 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.025671][ T1768] device syzkaller0 entered promiscuous mode [ 57.062515][ T1772] device syzkaller0 entered promiscuous mode [ 59.130609][ T1868] device syzkaller0 entered promiscuous mode [ 59.515349][ T30] audit: type=1400 audit(1785803175.289:129): avc: denied { create } for pid=1891 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 59.603366][ T1897] FAULT_INJECTION: forcing a failure. [ 59.603366][ T1897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.679941][ T1897] CPU: 0 PID: 1897 Comm: syz.4.486 Tainted: G W syzkaller #0 [ 59.688710][ T1897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.698790][ T1897] Call Trace: [ 59.702090][ T1897] [ 59.705045][ T1897] __dump_stack+0x21/0x30 [ 59.709424][ T1897] dump_stack_lvl+0x110/0x170 [ 59.714147][ T1897] ? show_regs_print_info+0x20/0x20 [ 59.719387][ T1897] dump_stack+0x15/0x20 [ 59.723565][ T1897] should_fail+0x3ab/0x500 [ 59.728020][ T1897] should_fail_usercopy+0x1a/0x20 [ 59.733062][ T1897] _copy_from_user+0x20/0xd0 [ 59.737660][ T1897] __sys_bpf+0x258/0x7d0 [ 59.741911][ T1897] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.747303][ T1897] __x64_sys_bpf+0x7c/0x90 [ 59.751744][ T1897] x64_sys_call+0x4b9/0x9a0 [ 59.756284][ T1897] do_syscall_64+0x4c/0xa0 [ 59.760728][ T1897] ? clear_bhb_loop+0x50/0xa0 [ 59.765413][ T1897] ? clear_bhb_loop+0x50/0xa0 [ 59.770101][ T1897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.776027][ T1897] RIP: 0033:0x7f11fbe1f019 [ 59.780451][ T1897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.800082][ T1897] RSP: 002b:00007f11fa878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.808648][ T1897] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 59.816646][ T1897] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 59.824634][ T1897] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 59.832612][ T1897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.840610][ T1897] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 59.848627][ T1897] [ 59.879640][ T1902] ref_ctr_offset mismatch. inode: 0x246 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 59.996397][ T1904] ref_ctr_offset mismatch. inode: 0x234 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 60.096760][ T1897] ref_ctr_offset mismatch. inode: 0xdd offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 60.631619][ T1942] device syzkaller0 entered promiscuous mode [ 62.156767][ T2005] FAULT_INJECTION: forcing a failure. [ 62.156767][ T2005] name failslab, interval 1, probability 0, space 0, times 0 [ 62.191357][ T2005] CPU: 0 PID: 2005 Comm: syz.4.522 Tainted: G W syzkaller #0 [ 62.200078][ T2005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.210155][ T2005] Call Trace: [ 62.213449][ T2005] [ 62.216385][ T2005] __dump_stack+0x21/0x30 [ 62.220735][ T2005] dump_stack_lvl+0x110/0x170 [ 62.225412][ T2005] ? show_regs_print_info+0x20/0x20 [ 62.230629][ T2005] ? avc_denied+0x1b0/0x1b0 [ 62.235153][ T2005] dump_stack+0x15/0x20 [ 62.239309][ T2005] should_fail+0x3ab/0x500 [ 62.243753][ T2005] __should_failslab+0xa4/0xe0 [ 62.248552][ T2005] should_failslab+0x9/0x20 [ 62.253092][ T2005] slab_pre_alloc_hook+0x39/0xd0 [ 62.258074][ T2005] ? vm_area_dup+0x26/0x210 [ 62.262623][ T2005] kmem_cache_alloc+0x44/0x260 [ 62.267423][ T2005] vm_area_dup+0x26/0x210 [ 62.271765][ T2005] copy_mm+0x963/0x13a0 [ 62.275928][ T2005] ? copy_signal+0x5f0/0x5f0 [ 62.280522][ T2005] ? __init_rwsem+0xfc/0x1d0 [ 62.285129][ T2005] ? copy_signal+0x4cc/0x5f0 [ 62.289731][ T2005] copy_process+0x1184/0x3280 [ 62.294423][ T2005] ? __kasan_check_write+0x14/0x20 [ 62.299545][ T2005] ? __pidfd_prepare+0x150/0x150 [ 62.304503][ T2005] kernel_clone+0x233/0x960 [ 62.309021][ T2005] ? create_io_thread+0x170/0x170 [ 62.314151][ T2005] ? __kasan_check_write+0x14/0x20 [ 62.319271][ T2005] ? mutex_unlock+0x8f/0x230 [ 62.323869][ T2005] __x64_sys_clone+0x198/0x210 [ 62.328634][ T2005] ? __kasan_check_write+0x14/0x20 [ 62.333753][ T2005] ? __ia32_sys_vfork+0x130/0x130 [ 62.338783][ T2005] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 62.344862][ T2005] x64_sys_call+0x41f/0x9a0 [ 62.349399][ T2005] do_syscall_64+0x4c/0xa0 [ 62.353827][ T2005] ? clear_bhb_loop+0x50/0xa0 [ 62.358507][ T2005] ? clear_bhb_loop+0x50/0xa0 [ 62.363213][ T2005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.369115][ T2005] RIP: 0033:0x7f11fbe1f019 [ 62.373544][ T2005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.393159][ T2005] RSP: 002b:00007f11fa877fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 62.401579][ T2005] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 62.409554][ T2005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 62.417531][ T2005] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 62.425506][ T2005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 62.433478][ T2005] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 62.441457][ T2005] [ 63.054508][ T30] audit: type=1400 audit(1785803178.829:130): avc: denied { create } for pid=2042 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.072768][ T2045] device syzkaller0 entered promiscuous mode [ 63.565275][ T30] audit: type=1400 audit(1785803179.339:131): avc: denied { create } for pid=2086 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.882189][ T30] audit: type=1400 audit(1785803180.659:132): avc: denied { create } for pid=2162 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.450029][ T2192] device syzkaller0 entered promiscuous mode [ 65.746201][ T2199] device syzkaller0 entered promiscuous mode [ 67.326225][ T2279] device syzkaller0 entered promiscuous mode [ 68.180947][ T2303] device sit0 entered promiscuous mode [ 68.488823][ T2320] ref_ctr_offset mismatch. inode: 0x18f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 69.202409][ T2344] FAULT_INJECTION: forcing a failure. [ 69.202409][ T2344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.628356][ T2362] device syzkaller0 entered promiscuous mode [ 69.750093][ T2344] CPU: 1 PID: 2344 Comm: syz.2.623 Tainted: G W syzkaller #0 [ 69.758830][ T2344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.768918][ T2344] Call Trace: [ 69.772211][ T2344] [ 69.775154][ T2344] __dump_stack+0x21/0x30 [ 69.779503][ T2344] dump_stack_lvl+0x110/0x170 [ 69.784228][ T2344] ? show_regs_print_info+0x20/0x20 [ 69.789441][ T2344] dump_stack+0x15/0x20 [ 69.793619][ T2344] should_fail+0x3ab/0x500 [ 69.798060][ T2344] should_fail_usercopy+0x1a/0x20 [ 69.803100][ T2344] strncpy_from_user+0x24/0x2d0 [ 69.807970][ T2344] bpf_prog_load+0x1ee/0x1620 [ 69.812660][ T2344] ? __kasan_check_write+0x14/0x20 [ 69.817784][ T2344] ? proc_fail_nth_write+0x180/0x200 [ 69.823087][ T2344] ? map_freeze+0x370/0x370 [ 69.827606][ T2344] ? selinux_bpf+0xc7/0xf0 [ 69.832033][ T2344] ? security_bpf+0x82/0xa0 [ 69.836567][ T2344] __sys_bpf+0x51d/0x7d0 [ 69.840819][ T2344] ? bpf_link_show_fdinfo+0x330/0x330 [ 69.846219][ T2344] ? debug_smp_processor_id+0x17/0x20 [ 69.851603][ T2344] __x64_sys_bpf+0x7c/0x90 [ 69.856022][ T2344] x64_sys_call+0x4b9/0x9a0 [ 69.860554][ T2344] do_syscall_64+0x4c/0xa0 [ 69.865010][ T2344] ? clear_bhb_loop+0x50/0xa0 [ 69.869704][ T2344] ? clear_bhb_loop+0x50/0xa0 [ 69.874408][ T2344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.880323][ T2344] RIP: 0033:0x7f860fd2f019 [ 69.884757][ T2344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.904382][ T2344] RSP: 002b:00007f860e767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.912805][ T2344] RAX: ffffffffffffffda RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 69.920786][ T2344] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 69.928774][ T2344] RBP: 00007f860e767090 R08: 0000000000000000 R09: 0000000000000000 [ 69.936772][ T2344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.944754][ T2344] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 69.952757][ T2344] [ 71.584374][ T2430] FAULT_INJECTION: forcing a failure. [ 71.584374][ T2430] name failslab, interval 1, probability 0, space 0, times 0 [ 71.648038][ T2430] CPU: 0 PID: 2430 Comm: syz.4.654 Tainted: G W syzkaller #0 [ 71.656759][ T2430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.666829][ T2430] Call Trace: [ 71.670123][ T2430] [ 71.673100][ T2430] __dump_stack+0x21/0x30 [ 71.677457][ T2430] dump_stack_lvl+0x110/0x170 [ 71.682163][ T2430] ? show_regs_print_info+0x20/0x20 [ 71.687383][ T2430] dump_stack+0x15/0x20 [ 71.691546][ T2430] should_fail+0x3ab/0x500 [ 71.695971][ T2430] __should_failslab+0xa4/0xe0 [ 71.700748][ T2430] should_failslab+0x9/0x20 [ 71.705262][ T2430] slab_pre_alloc_hook+0x39/0xd0 [ 71.710219][ T2430] ? anon_vma_clone+0xb7/0x4c0 [ 71.715002][ T2430] kmem_cache_alloc+0x44/0x260 [ 71.719789][ T2430] anon_vma_clone+0xb7/0x4c0 [ 71.724390][ T2430] anon_vma_fork+0x8f/0x520 [ 71.728925][ T2430] ? anon_vma_name+0x4c/0x70 [ 71.733526][ T2430] copy_mm+0x9f9/0x13a0 [ 71.737693][ T2430] ? copy_signal+0x5f0/0x5f0 [ 71.742347][ T2430] ? __init_rwsem+0xfc/0x1d0 [ 71.746957][ T2430] ? copy_signal+0x4cc/0x5f0 [ 71.751553][ T2430] copy_process+0x1184/0x3280 [ 71.756243][ T2430] ? __kasan_check_write+0x14/0x20 [ 71.761389][ T2430] ? __pidfd_prepare+0x150/0x150 [ 71.766347][ T2430] kernel_clone+0x233/0x960 [ 71.770862][ T2430] ? create_io_thread+0x170/0x170 [ 71.775898][ T2430] ? __kasan_check_write+0x14/0x20 [ 71.781014][ T2430] ? mutex_unlock+0x8f/0x230 [ 71.785618][ T2430] __x64_sys_clone+0x198/0x210 [ 71.790392][ T2430] ? __kasan_check_write+0x14/0x20 [ 71.795541][ T2430] ? __ia32_sys_vfork+0x130/0x130 [ 71.800616][ T2430] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 71.806734][ T2430] x64_sys_call+0x41f/0x9a0 [ 71.811252][ T2430] do_syscall_64+0x4c/0xa0 [ 71.815678][ T2430] ? clear_bhb_loop+0x50/0xa0 [ 71.820367][ T2430] ? clear_bhb_loop+0x50/0xa0 [ 71.825064][ T2430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.830964][ T2430] RIP: 0033:0x7f11fbe1f019 [ 71.835391][ T2430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.855006][ T2430] RSP: 002b:00007f11fa877fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 71.863429][ T2430] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 71.871419][ T2430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 71.879422][ T2430] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 71.887414][ T2430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 71.895410][ T2430] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 71.903397][ T2430] [ 72.827261][ T2472] device syzkaller0 entered promiscuous mode [ 73.475770][ T2501] FAULT_INJECTION: forcing a failure. [ 73.475770][ T2501] name failslab, interval 1, probability 0, space 0, times 0 [ 73.518868][ T2501] CPU: 1 PID: 2501 Comm: syz.1.679 Tainted: G W syzkaller #0 [ 73.527580][ T2501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.537660][ T2501] Call Trace: [ 73.540941][ T2501] [ 73.543886][ T2501] __dump_stack+0x21/0x30 [ 73.548236][ T2501] dump_stack_lvl+0x110/0x170 [ 73.552917][ T2501] ? show_regs_print_info+0x20/0x20 [ 73.558120][ T2501] ? stack_trace_save+0xa6/0xf0 [ 73.562986][ T2501] dump_stack+0x15/0x20 [ 73.567151][ T2501] should_fail+0x3ab/0x500 [ 73.571585][ T2501] __should_failslab+0xa4/0xe0 [ 73.576370][ T2501] should_failslab+0x9/0x20 [ 73.580888][ T2501] slab_pre_alloc_hook+0x39/0xd0 [ 73.585848][ T2501] ? dup_task_struct+0x57/0xc50 [ 73.590710][ T2501] kmem_cache_alloc+0x44/0x260 [ 73.595506][ T2501] dup_task_struct+0x57/0xc50 [ 73.600282][ T2501] ? __kasan_check_write+0x14/0x20 [ 73.605413][ T2501] copy_process+0x5e0/0x3280 [ 73.610030][ T2501] ? __kasan_check_write+0x14/0x20 [ 73.615158][ T2501] ? proc_fail_nth_write+0x180/0x200 [ 73.620458][ T2501] ? __pidfd_prepare+0x150/0x150 [ 73.625450][ T2501] kernel_clone+0x233/0x960 [ 73.629968][ T2501] ? create_io_thread+0x170/0x170 [ 73.635017][ T2501] ? __kasan_check_write+0x14/0x20 [ 73.640260][ T2501] ? mutex_unlock+0x8f/0x230 [ 73.644874][ T2501] __x64_sys_clone+0x198/0x210 [ 73.649652][ T2501] ? __kasan_check_write+0x14/0x20 [ 73.654790][ T2501] ? __ia32_sys_vfork+0x130/0x130 [ 73.659849][ T2501] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 73.665941][ T2501] x64_sys_call+0x41f/0x9a0 [ 73.670459][ T2501] do_syscall_64+0x4c/0xa0 [ 73.674892][ T2501] ? clear_bhb_loop+0x50/0xa0 [ 73.679572][ T2501] ? clear_bhb_loop+0x50/0xa0 [ 73.684258][ T2501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.690151][ T2501] RIP: 0033:0x7f4261f15019 [ 73.694572][ T2501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.714286][ T2501] RSP: 002b:00007f426096dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 73.722708][ T2501] RAX: ffffffffffffffda RBX: 00007f426219cfa0 RCX: 00007f4261f15019 [ 73.730683][ T2501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 73.738648][ T2501] RBP: 00007f426096e090 R08: 0000000000000000 R09: 0000000000000000 [ 73.746617][ T2501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 73.754584][ T2501] R13: 00007f426219d038 R14: 00007f426219cfa0 R15: 00007ffd4416c888 [ 73.762585][ T2501] [ 76.401106][ T2618] device syzkaller0 entered promiscuous mode [ 76.804335][ T2634] device syzkaller0 entered promiscuous mode [ 77.176568][ T30] audit: type=1400 audit(1785803192.959:133): avc: denied { attach_queue } for pid=2648 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.055643][ T2424] syz.2.643 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 78.155946][ T2424] CPU: 1 PID: 2424 Comm: syz.2.643 Tainted: G W syzkaller #0 [ 78.164676][ T2424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.174747][ T2424] Call Trace: [ 78.178037][ T2424] [ 78.180982][ T2424] __dump_stack+0x21/0x30 [ 78.185336][ T2424] dump_stack_lvl+0x110/0x170 [ 78.190367][ T2424] ? show_regs_print_info+0x20/0x20 [ 78.195585][ T2424] ? ___ratelimit+0x40a/0x590 [ 78.200286][ T2424] dump_stack+0x15/0x20 [ 78.204462][ T2424] dump_header+0xd9/0x650 [ 78.208810][ T2424] oom_kill_process+0x1fa/0x2c0 [ 78.214111][ T2424] out_of_memory+0x5b0/0x9c0 [ 78.218719][ T2424] ? unregister_oom_notifier+0x20/0x20 [ 78.224194][ T2424] ? mutex_lock_killable+0x9b/0x1c0 [ 78.229418][ T2424] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 78.235945][ T2424] ? psi_group_change+0xa8c/0x1110 [ 78.241433][ T2424] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 78.247002][ T2424] ? mem_cgroup_oom_trylock+0x340/0x340 [ 78.252566][ T2424] ? mem_cgroup_iter+0x4bf/0x6c0 [ 78.257532][ T2424] try_charge_memcg+0xef6/0x14e0 [ 78.262875][ T2424] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 78.268701][ T2424] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 78.274524][ T2424] charge_memcg+0x6d/0x1a0 [ 78.278959][ T2424] __mem_cgroup_charge+0x93/0x280 [ 78.284002][ T2424] ? mem_cgroup_calculate_protection+0x520/0x520 [ 78.290337][ T2424] shmem_add_to_page_cache+0x64b/0xc50 [ 78.295815][ T2424] ? put_page+0xb0/0xb0 [ 78.299980][ T2424] ? _raw_spin_lock_irqsave+0x130/0x130 [ 78.305530][ T2424] ? filemap_map_pages+0xc64/0x1630 [ 78.310732][ T2424] shmem_getpage_gfp+0x1404/0x2250 [ 78.315853][ T2424] shmem_write_begin+0xce/0x1b0 [ 78.320759][ T2424] generic_perform_write+0x2b7/0x690 [ 78.326053][ T2424] ? grab_cache_page_write_begin+0xb0/0xb0 [ 78.331860][ T2424] ? file_remove_privs+0x5c0/0x5c0 [ 78.336970][ T2424] ? rwsem_write_trylock+0x136/0x300 [ 78.342354][ T2424] ? __kasan_check_write+0x14/0x20 [ 78.347470][ T2424] ? clear_nonspinnable+0x60/0x60 [ 78.352511][ T2424] __generic_file_write_iter+0x268/0x490 [ 78.358205][ T2424] ? generic_write_checks+0x3df/0x480 [ 78.363588][ T2424] generic_file_write_iter+0xa9/0x1d0 [ 78.368957][ T2424] __kernel_write+0x521/0x970 [ 78.373668][ T2424] ? vfs_read+0xc20/0xc20 [ 78.378002][ T2424] ? __get_user_pages+0xf85/0x10c0 [ 78.383116][ T2424] ? populate_vma_page_range+0xf0/0xf0 [ 78.388577][ T2424] __dump_emit+0x255/0x380 [ 78.392993][ T2424] ? wait_for_dump_helpers+0x380/0x380 [ 78.398449][ T2424] ? fault_in_readable+0x160/0x160 [ 78.403559][ T2424] dump_emit+0x36a/0x3d0 [ 78.407814][ T2424] dump_user_range+0x86/0x1c0 [ 78.412491][ T2424] elf_core_dump+0x2aa4/0x2ff0 [ 78.417269][ T2424] ? load_elf_binary+0x2910/0x2910 [ 78.422390][ T2424] ? __kmalloc+0x13d/0x2c0 [ 78.426812][ T2424] ? kvmalloc_node+0x23c/0x320 [ 78.431701][ T2424] do_coredump+0x13c2/0x27d0 [ 78.436308][ T2424] ? simple_acl_create+0x1c0/0x1c0 [ 78.441427][ T2424] ? debug_smp_processor_id+0x17/0x20 [ 78.446803][ T2424] ? ____kasan_slab_free+0x130/0x160 [ 78.452091][ T2424] ? get_signal+0xb17/0x1430 [ 78.456684][ T2424] ? kmem_cache_free+0x100/0x320 [ 78.461630][ T2424] get_signal+0x387/0x1430 [ 78.466052][ T2424] arch_do_signal_or_restart+0xe2/0x1100 [ 78.471710][ T2424] ? force_sig_fault+0xd9/0x130 [ 78.476564][ T2424] ? get_sigframe_size+0x10/0x10 [ 78.481503][ T2424] ? page_fault_oops+0x8b0/0x8b0 [ 78.486462][ T2424] ? __bad_area_nosemaphore+0x2f9/0x470 [ 78.492016][ T2424] exit_to_user_mode_loop+0xa7/0xe0 [ 78.497215][ T2424] exit_to_user_mode_prepare+0x87/0xd0 [ 78.502672][ T2424] irqentry_exit_to_user_mode+0x9/0x10 [ 78.508137][ T2424] irqentry_exit+0x12/0x40 [ 78.512553][ T2424] exc_page_fault+0x5e/0xb0 [ 78.517063][ T2424] asm_exc_page_fault+0x27/0x30 [ 78.521925][ T2424] RIP: 0033:0x7f860fbe4bd7 [ 78.526345][ T2424] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 ab 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 78.545950][ T2424] RSP: 002b:00007f860e748120 EFLAGS: 00010202 [ 78.552034][ T2424] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f860fd2f019 [ 78.560009][ T2424] RDX: 00007f860e748140 RSI: 00007f860e748270 RDI: 000000000000000b [ 78.567982][ T2424] RBP: 00007f860fdc600c R08: 0000000000000000 R09: 0000000000000000 [ 78.575961][ T2424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 78.583942][ T2424] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 78.591931][ T2424] [ 78.749831][ T2704] device syzkaller0 entered promiscuous mode [ 78.886006][ T2424] memory: usage 307200kB, limit 307200kB, failcnt 12654 [ 78.928784][ T2424] memory+swap: usage 428392kB, limit 9007199254740988kB, failcnt 0 [ 78.946066][ T2424] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 78.964941][ T2424] Memory cgroup stats for /syz2: [ 78.965128][ T2424] anon 589824 [ 78.965128][ T2424] file 310087680 [ 78.965128][ T2424] kernel_stack 0 [ 78.965128][ T2424] pagetables 0 [ 78.965128][ T2424] percpu 0 [ 78.965128][ T2424] sock 0 [ 78.965128][ T2424] shmem 310075392 [ 78.965128][ T2424] file_mapped 8192 [ 78.965128][ T2424] file_dirty 0 [ 78.965128][ T2424] file_writeback 0 [ 78.965128][ T2424] swapcached 127995904 [ 78.965128][ T2424] anon_thp 0 [ 78.965128][ T2424] file_thp 0 [ 78.965128][ T2424] shmem_thp 0 [ 78.965128][ T2424] inactive_anon 314089472 [ 78.965128][ T2424] active_anon 471040 [ 78.965128][ T2424] inactive_file 12288 [ 78.965128][ T2424] active_file 0 [ 78.965128][ T2424] unevictable 0 [ 78.965128][ T2424] slab_reclaimable 0 [ 78.965128][ T2424] slab_unreclaimable 0 [ 78.965128][ T2424] slab 0 [ 78.965128][ T2424] workingset_refault_anon 0 [ 78.965128][ T2424] workingset_refault_file 1613 [ 78.965128][ T2424] workingset_activate_anon 0 [ 79.187448][ T2424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2171,uid=0 [ 79.229625][ T2424] Memory cgroup out of memory: Killed process 2171 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:25636kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 79.385115][ T2156] syz.2.567 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 79.424416][ T2156] CPU: 1 PID: 2156 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 79.433271][ T2156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.443331][ T2156] Call Trace: [ 79.446615][ T2156] [ 79.449552][ T2156] __dump_stack+0x21/0x30 [ 79.453917][ T2156] dump_stack_lvl+0x110/0x170 [ 79.458626][ T2156] ? show_regs_print_info+0x20/0x20 [ 79.463832][ T2156] ? ___ratelimit+0x40a/0x590 [ 79.468522][ T2156] dump_stack+0x15/0x20 [ 79.472677][ T2156] dump_header+0xd9/0x650 [ 79.477006][ T2156] oom_kill_process+0x1fa/0x2c0 [ 79.481863][ T2156] out_of_memory+0x5b0/0x9c0 [ 79.486503][ T2156] ? unregister_oom_notifier+0x20/0x20 [ 79.491961][ T2156] ? mutex_lock_killable+0x9b/0x1c0 [ 79.497171][ T2156] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 79.503671][ T2156] ? psi_group_change+0xa8c/0x1110 [ 79.508783][ T2156] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 79.514341][ T2156] ? mem_cgroup_oom_trylock+0x340/0x340 [ 79.519891][ T2156] ? mem_cgroup_iter+0x4bf/0x6c0 [ 79.524867][ T2156] try_charge_memcg+0xef6/0x14e0 [ 79.529819][ T2156] ? page_ext_put+0x1c/0x30 [ 79.534440][ T2156] ? post_alloc_hook+0x192/0x1b0 [ 79.539411][ T2156] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 79.545318][ T2156] ? get_page_from_freelist+0x2c3a/0x2cd0 [ 79.551048][ T2156] ? __kasan_check_write+0x14/0x20 [ 79.556169][ T2156] ? free_unref_page_commit+0x187/0x3f0 [ 79.561726][ T2156] charge_memcg+0x6d/0x1a0 [ 79.566143][ T2156] __mem_cgroup_charge+0x93/0x280 [ 79.571165][ T2156] ? mem_cgroup_calculate_protection+0x520/0x520 [ 79.577495][ T2156] __add_to_page_cache_locked+0x1dd/0x880 [ 79.583212][ T2156] ? __alloc_pages_bulk+0xab0/0xab0 [ 79.588412][ T2156] ? put_page+0xb0/0xb0 [ 79.592579][ T2156] ? workingset_activation+0x400/0x400 [ 79.598047][ T2156] ? prep_new_page+0x110/0x110 [ 79.602814][ T2156] add_to_page_cache_lru+0xa7/0x210 [ 79.608008][ T2156] pagecache_get_page+0xb80/0xdd0 [ 79.613046][ T2156] ? page_cache_prev_miss+0x290/0x290 [ 79.618422][ T2156] ? __down_common+0x360/0x360 [ 79.623217][ T2156] ? trace_android_vh_page_cache_miss+0x29/0x150 [ 79.629550][ T2156] ? filemap_fault+0x736/0x1cc0 [ 79.634411][ T2156] filemap_fault+0xec3/0x1cc0 [ 79.639091][ T2156] ? mapping_seek_hole_data+0xb50/0xb50 [ 79.644633][ T2156] ? filemap_read_page+0x330/0x330 [ 79.649750][ T2156] ? copy_page_from_iter_atomic+0x75d/0x1350 [ 79.658387][ T2156] __do_fault+0x25f/0x2f0 [ 79.662730][ T2156] handle_pte_fault+0x1bc0/0x2770 [ 79.667763][ T2156] ? fault_around_bytes_set+0xc0/0xc0 [ 79.673143][ T2156] do_handle_mm_fault+0x1b3b/0x1e30 [ 79.678363][ T2156] ? _raw_spin_unlock+0x4d/0x70 [ 79.683214][ T2156] ? follow_page_pte+0x3ae/0x980 [ 79.688154][ T2156] ? numa_migrate_prep+0xd0/0xd0 [ 79.693095][ T2156] ? follow_page_mask+0x7aa/0xf30 [ 79.698121][ T2156] __get_user_pages+0x80e/0x10c0 [ 79.703070][ T2156] ? populate_vma_page_range+0xf0/0xf0 [ 79.708543][ T2156] ? __dump_emit+0x277/0x380 [ 79.713139][ T2156] get_dump_page+0x169/0x640 [ 79.717734][ T2156] ? fault_in_readable+0x160/0x160 [ 79.722863][ T2156] ? dump_emit+0x36a/0x3d0 [ 79.727283][ T2156] dump_user_range+0x59/0x1c0 [ 79.731967][ T2156] elf_core_dump+0x2aa4/0x2ff0 [ 79.736728][ T2156] ? load_elf_binary+0x2910/0x2910 [ 79.741839][ T2156] ? __kmalloc+0x13d/0x2c0 [ 79.746256][ T2156] ? kvmalloc_node+0x23c/0x320 [ 79.751031][ T2156] do_coredump+0x13c2/0x27d0 [ 79.755627][ T2156] ? simple_acl_create+0x1c0/0x1c0 [ 79.760737][ T2156] ? debug_smp_processor_id+0x17/0x20 [ 79.766117][ T2156] ? ____kasan_slab_free+0x130/0x160 [ 79.771404][ T2156] ? get_signal+0xb17/0x1430 [ 79.775998][ T2156] ? kmem_cache_free+0x100/0x320 [ 79.780942][ T2156] get_signal+0x387/0x1430 [ 79.785365][ T2156] arch_do_signal_or_restart+0xe2/0x1100 [ 79.791010][ T2156] ? get_sigframe_size+0x10/0x10 [ 79.795943][ T2156] ? force_sig_info_to_task+0x306/0x3b0 [ 79.801494][ T2156] ? force_sig+0xcc/0x120 [ 79.805826][ T2156] ? send_sig+0x70/0x70 [ 79.809982][ T2156] exit_to_user_mode_loop+0xa7/0xe0 [ 79.815189][ T2156] exit_to_user_mode_prepare+0x87/0xd0 [ 79.820650][ T2156] irqentry_exit_to_user_mode+0x9/0x10 [ 79.826112][ T2156] irqentry_exit+0x12/0x40 [ 79.830547][ T2156] exc_general_protection+0x1e4/0x270 [ 79.835937][ T2156] ? debug_smp_processor_id+0x17/0x20 [ 79.841330][ T2156] asm_exc_general_protection+0x27/0x30 [ 79.846903][ T2156] RIP: 0033:0x7f860fd2f021 [ 79.851333][ T2156] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 79.870938][ T2156] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 79.877030][ T2156] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 79.885010][ T2156] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 79.892992][ T2156] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 79.900975][ T2156] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 79.908958][ T2156] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 79.916952][ T2156] [ 79.927171][ T2156] memory: usage 307200kB, limit 307200kB, failcnt 13273 [ 79.974078][ T2156] memory+swap: usage 428464kB, limit 9007199254740988kB, failcnt 0 [ 80.063256][ T2156] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 80.176603][ T2156] Memory cgroup stats for /syz2: [ 80.176872][ T2156] anon 593920 [ 80.176872][ T2156] file 309702656 [ 80.176872][ T2156] kernel_stack 0 [ 80.176872][ T2156] pagetables 0 [ 80.176872][ T2156] percpu 0 [ 80.176872][ T2156] sock 0 [ 80.176872][ T2156] shmem 309698560 [ 80.176872][ T2156] file_mapped 0 [ 80.176872][ T2156] file_dirty 0 [ 80.176872][ T2156] file_writeback 491520 [ 80.176872][ T2156] swapcached 130744320 [ 80.176872][ T2156] anon_thp 0 [ 80.176872][ T2156] file_thp 0 [ 80.176872][ T2156] shmem_thp 0 [ 80.176872][ T2156] inactive_anon 312668160 [ 80.176872][ T2156] active_anon 1622016 [ 80.176872][ T2156] inactive_file 4096 [ 80.176872][ T2156] active_file 0 [ 80.176872][ T2156] unevictable 0 [ 80.176872][ T2156] slab_reclaimable 0 [ 80.176872][ T2156] slab_unreclaimable 0 [ 80.176872][ T2156] slab 0 [ 80.176872][ T2156] workingset_refault_anon 0 [ 80.176872][ T2156] workingset_refault_file 1613 [ 80.176872][ T2156] workingset_activate_anon 0 [ 80.353346][ T2156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.643,pid=2424,uid=0 [ 80.368215][ T2156] Memory cgroup out of memory: Killed process 2424 (syz.2.643) total-vm:94104kB, anon-rss:1520kB, file-rss:25140kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 80.463637][ T2722] ref_ctr_offset mismatch. inode: 0x393 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 80.617926][ T2735] nr0: port 1(macsec0) entered blocking state [ 80.634901][ T2735] nr0: port 1(macsec0) entered disabled state [ 80.652444][ T2735] device macsec0 entered promiscuous mode [ 80.832070][ T2171] syz.2.567 (2171) used greatest stack depth: 16936 bytes left [ 80.909554][ T2756] device syzkaller0 entered promiscuous mode [ 81.238835][ T2147] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 81.465512][ T2424] syz.2.643 (2424) used greatest stack depth: 15496 bytes left [ 81.536760][ T2147] CPU: 1 PID: 2147 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 81.545481][ T2147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.555542][ T2147] Call Trace: [ 81.558840][ T2147] [ 81.561793][ T2147] __dump_stack+0x21/0x30 [ 81.566139][ T2147] dump_stack_lvl+0x110/0x170 [ 81.570837][ T2147] ? show_regs_print_info+0x20/0x20 [ 81.576047][ T2147] ? ___ratelimit+0x40a/0x590 [ 81.580741][ T2147] dump_stack+0x15/0x20 [ 81.584910][ T2147] dump_header+0xd9/0x650 [ 81.589257][ T2147] oom_kill_process+0x1fa/0x2c0 [ 81.594126][ T2147] out_of_memory+0x5b0/0x9c0 [ 81.598744][ T2147] ? unregister_oom_notifier+0x20/0x20 [ 81.604221][ T2147] ? mutex_lock_killable+0x9b/0x1c0 [ 81.609440][ T2147] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 81.615965][ T2147] ? psi_group_change+0xa8c/0x1110 [ 81.621092][ T2147] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 81.626647][ T2147] ? mem_cgroup_oom_trylock+0x340/0x340 [ 81.632203][ T2147] ? mem_cgroup_iter+0x4bf/0x6c0 [ 81.637154][ T2147] try_charge_memcg+0xef6/0x14e0 [ 81.642142][ T2147] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 81.647972][ T2147] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 81.653798][ T2147] charge_memcg+0x6d/0x1a0 [ 81.658233][ T2147] __mem_cgroup_charge+0x93/0x280 [ 81.663274][ T2147] ? mem_cgroup_calculate_protection+0x520/0x520 [ 81.669620][ T2147] shmem_add_to_page_cache+0x64b/0xc50 [ 81.675105][ T2147] ? put_page+0xb0/0xb0 [ 81.679271][ T2147] ? _raw_spin_lock_irqsave+0x130/0x130 [ 81.684838][ T2147] ? filemap_map_pages+0xc64/0x1630 [ 81.690069][ T2147] shmem_getpage_gfp+0x1404/0x2250 [ 81.695210][ T2147] shmem_write_begin+0xce/0x1b0 [ 81.700080][ T2147] generic_perform_write+0x2b7/0x690 [ 81.705394][ T2147] ? grab_cache_page_write_begin+0xb0/0xb0 [ 81.711214][ T2147] ? file_remove_privs+0x5c0/0x5c0 [ 81.716343][ T2147] ? rwsem_write_trylock+0x136/0x300 [ 81.721645][ T2147] ? __kasan_check_write+0x14/0x20 [ 81.726791][ T2147] ? clear_nonspinnable+0x60/0x60 [ 81.731823][ T2147] __generic_file_write_iter+0x268/0x490 [ 81.737467][ T2147] ? generic_write_checks+0x3df/0x480 [ 81.742852][ T2147] generic_file_write_iter+0xa9/0x1d0 [ 81.748248][ T2147] __kernel_write+0x521/0x970 [ 81.752964][ T2147] ? vfs_read+0xc20/0xc20 [ 81.757302][ T2147] ? __get_user_pages+0xf85/0x10c0 [ 81.762431][ T2147] ? down_read_killable+0x80/0x110 [ 81.767557][ T2147] ? populate_vma_page_range+0xf0/0xf0 [ 81.773030][ T2147] __dump_emit+0x255/0x380 [ 81.777467][ T2147] ? wait_for_dump_helpers+0x380/0x380 [ 81.782942][ T2147] ? fault_in_readable+0x160/0x160 [ 81.788068][ T2147] dump_emit+0x36a/0x3d0 [ 81.792327][ T2147] dump_user_range+0x86/0x1c0 [ 81.797025][ T2147] elf_core_dump+0x2aa4/0x2ff0 [ 81.801809][ T2147] ? load_elf_binary+0x2910/0x2910 [ 81.806939][ T2147] ? __kmalloc+0x13d/0x2c0 [ 81.811369][ T2147] ? kvmalloc_node+0x23c/0x320 [ 81.816163][ T2147] do_coredump+0x13c2/0x27d0 [ 81.820770][ T2147] ? simple_acl_create+0x1c0/0x1c0 [ 81.825897][ T2147] ? debug_smp_processor_id+0x17/0x20 [ 81.831305][ T2147] ? ____kasan_slab_free+0x130/0x160 [ 81.836607][ T2147] ? get_signal+0xb17/0x1430 [ 81.841208][ T2147] ? kmem_cache_free+0x100/0x320 [ 81.846165][ T2147] get_signal+0x387/0x1430 [ 81.850613][ T2147] arch_do_signal_or_restart+0xe2/0x1100 [ 81.856272][ T2147] ? get_sigframe_size+0x10/0x10 [ 81.861229][ T2147] ? force_sig_info_to_task+0x306/0x3b0 [ 81.866804][ T2147] ? force_sig+0xcc/0x120 [ 81.871156][ T2147] ? send_sig+0x70/0x70 [ 81.875329][ T2147] exit_to_user_mode_loop+0xa7/0xe0 [ 81.880571][ T2147] exit_to_user_mode_prepare+0x87/0xd0 [ 81.886077][ T2147] irqentry_exit_to_user_mode+0x9/0x10 [ 81.891558][ T2147] irqentry_exit+0x12/0x40 [ 81.895991][ T2147] exc_general_protection+0x1e4/0x270 [ 81.901378][ T2147] ? debug_smp_processor_id+0x17/0x20 [ 81.906786][ T2147] asm_exc_general_protection+0x27/0x30 [ 81.912350][ T2147] RIP: 0033:0x7f860fd2f021 [ 81.916774][ T2147] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 81.936389][ T2147] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 81.942466][ T2147] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 81.950449][ T2147] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 81.958455][ T2147] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 81.966437][ T2147] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 81.974424][ T2147] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 81.982412][ T2147] [ 82.175898][ T2147] memory: usage 305040kB, limit 307200kB, failcnt 15846 [ 82.197322][ T2147] memory+swap: usage 427596kB, limit 9007199254740988kB, failcnt 0 [ 82.224594][ T2147] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 82.255228][ T2147] Memory cgroup stats for /syz2: [ 82.255363][ T2147] anon 311296 [ 82.255363][ T2147] file 310673408 [ 82.255363][ T2147] kernel_stack 0 [ 82.255363][ T2147] pagetables 0 [ 82.255363][ T2147] percpu 0 [ 82.255363][ T2147] sock 0 [ 82.255363][ T2147] shmem 310669312 [ 82.255363][ T2147] file_mapped 0 [ 82.255363][ T2147] file_dirty 0 [ 82.255363][ T2147] file_writeback 0 [ 82.255363][ T2147] swapcached 143998976 [ 82.255363][ T2147] anon_thp 0 [ 82.255363][ T2147] file_thp 0 [ 82.255363][ T2147] shmem_thp 0 [ 82.255363][ T2147] inactive_anon 197586944 [ 82.255363][ T2147] active_anon 116482048 [ 82.255363][ T2147] inactive_file 4096 [ 82.255363][ T2147] active_file 0 [ 82.255363][ T2147] unevictable 0 [ 82.255363][ T2147] slab_reclaimable 0 [ 82.255363][ T2147] slab_unreclaimable 0 [ 82.255363][ T2147] slab 0 [ 82.255363][ T2147] workingset_refault_anon 0 [ 82.255363][ T2147] workingset_refault_file 1725 [ 82.255363][ T2147] workingset_activate_anon 0 [ 82.541366][ T2147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2156,uid=0 [ 82.614096][ T2823] FAULT_INJECTION: forcing a failure. [ 82.614096][ T2823] name failslab, interval 1, probability 0, space 0, times 0 [ 82.653033][ T2823] CPU: 0 PID: 2823 Comm: syz.1.787 Tainted: G W syzkaller #0 [ 82.661857][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.671919][ T2823] Call Trace: [ 82.675198][ T2823] [ 82.678137][ T2823] __dump_stack+0x21/0x30 [ 82.682468][ T2823] dump_stack_lvl+0x110/0x170 [ 82.687140][ T2823] ? show_regs_print_info+0x20/0x20 [ 82.692335][ T2823] dump_stack+0x15/0x20 [ 82.696493][ T2823] should_fail+0x3ab/0x500 [ 82.700910][ T2823] __should_failslab+0xa4/0xe0 [ 82.705693][ T2823] should_failslab+0x9/0x20 [ 82.710205][ T2823] slab_pre_alloc_hook+0x39/0xd0 [ 82.715158][ T2823] ? anon_vma_clone+0xb7/0x4c0 [ 82.719926][ T2823] kmem_cache_alloc+0x44/0x260 [ 82.724701][ T2823] anon_vma_clone+0xb7/0x4c0 [ 82.729294][ T2823] anon_vma_fork+0x8f/0x520 [ 82.733818][ T2823] ? anon_vma_name+0x43/0x70 [ 82.738411][ T2823] copy_mm+0x9f9/0x13a0 [ 82.742574][ T2823] ? copy_signal+0x5f0/0x5f0 [ 82.747164][ T2823] ? __init_rwsem+0xfc/0x1d0 [ 82.751755][ T2823] ? copy_signal+0x4cc/0x5f0 [ 82.756349][ T2823] copy_process+0x1184/0x3280 [ 82.761029][ T2823] ? __kasan_check_write+0x14/0x20 [ 82.766147][ T2823] ? __pidfd_prepare+0x150/0x150 [ 82.771089][ T2823] kernel_clone+0x233/0x960 [ 82.775595][ T2823] ? create_io_thread+0x170/0x170 [ 82.780622][ T2823] ? __kasan_check_write+0x14/0x20 [ 82.785755][ T2823] ? mutex_unlock+0x8f/0x230 [ 82.790350][ T2823] __x64_sys_clone+0x198/0x210 [ 82.795121][ T2823] ? __kasan_check_write+0x14/0x20 [ 82.800235][ T2823] ? __ia32_sys_vfork+0x130/0x130 [ 82.805271][ T2823] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 82.811403][ T2823] x64_sys_call+0x41f/0x9a0 [ 82.815915][ T2823] do_syscall_64+0x4c/0xa0 [ 82.820337][ T2823] ? clear_bhb_loop+0x50/0xa0 [ 82.825023][ T2823] ? clear_bhb_loop+0x50/0xa0 [ 82.829746][ T2823] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.835648][ T2823] RIP: 0033:0x7f4261f15019 [ 82.840067][ T2823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.859686][ T2823] RSP: 002b:00007f426096dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 82.868110][ T2823] RAX: ffffffffffffffda RBX: 00007f426219cfa0 RCX: 00007f4261f15019 [ 82.876082][ T2823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 82.884056][ T2823] RBP: 00007f426096e090 R08: 0000000000000000 R09: 0000000000000000 [ 82.892039][ T2823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 82.900012][ T2823] R13: 00007f426219d038 R14: 00007f426219cfa0 R15: 00007ffd4416c888 [ 82.907998][ T2823] [ 82.925882][ T2147] Memory cgroup out of memory: Killed process 2156 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:25864kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 83.013599][ T2181] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 83.074197][ T2181] CPU: 0 PID: 2181 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 83.082928][ T2181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.092987][ T2181] Call Trace: [ 83.096265][ T2181] [ 83.099215][ T2181] __dump_stack+0x21/0x30 [ 83.103550][ T2181] dump_stack_lvl+0x110/0x170 [ 83.108227][ T2181] ? show_regs_print_info+0x20/0x20 [ 83.113431][ T2181] ? ___ratelimit+0x40a/0x590 [ 83.118116][ T2181] dump_stack+0x15/0x20 [ 83.122268][ T2181] dump_header+0xd9/0x650 [ 83.126595][ T2181] oom_kill_process+0x1fa/0x2c0 [ 83.131445][ T2181] out_of_memory+0x5b0/0x9c0 [ 83.136034][ T2181] ? unregister_oom_notifier+0x20/0x20 [ 83.141496][ T2181] ? mutex_lock_killable+0x114/0x1c0 [ 83.146791][ T2181] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 83.153294][ T2181] ? psi_group_change+0xa8c/0x1110 [ 83.158408][ T2181] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 83.163972][ T2181] ? mem_cgroup_oom_trylock+0x340/0x340 [ 83.169527][ T2181] ? mem_cgroup_iter+0x4bf/0x6c0 [ 83.174490][ T2181] try_charge_memcg+0xef6/0x14e0 [ 83.179451][ T2181] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 83.185270][ T2181] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 83.191088][ T2181] charge_memcg+0x6d/0x1a0 [ 83.195510][ T2181] __mem_cgroup_charge+0x93/0x280 [ 83.200537][ T2181] ? mem_cgroup_calculate_protection+0x520/0x520 [ 83.206889][ T2181] shmem_add_to_page_cache+0x64b/0xc50 [ 83.212372][ T2181] ? put_page+0xb0/0xb0 [ 83.216528][ T2181] ? _raw_spin_lock_irqsave+0x130/0x130 [ 83.222072][ T2181] ? filemap_map_pages+0xc64/0x1630 [ 83.227269][ T2181] shmem_getpage_gfp+0x1404/0x2250 [ 83.232390][ T2181] shmem_write_begin+0xce/0x1b0 [ 83.237249][ T2181] generic_perform_write+0x2b7/0x690 [ 83.242534][ T2181] ? grab_cache_page_write_begin+0xb0/0xb0 [ 83.248338][ T2181] ? file_remove_privs+0x5c0/0x5c0 [ 83.253463][ T2181] ? rwsem_write_trylock+0x136/0x300 [ 83.258751][ T2181] ? __kasan_check_write+0x14/0x20 [ 83.263858][ T2181] ? clear_nonspinnable+0x60/0x60 [ 83.268884][ T2181] __generic_file_write_iter+0x268/0x490 [ 83.274517][ T2181] ? generic_write_checks+0x3df/0x480 [ 83.279891][ T2181] generic_file_write_iter+0xa9/0x1d0 [ 83.285268][ T2181] __kernel_write+0x521/0x970 [ 83.289951][ T2181] ? vfs_read+0xc20/0xc20 [ 83.294285][ T2181] ? __get_user_pages+0xf85/0x10c0 [ 83.299405][ T2181] ? populate_vma_page_range+0xf0/0xf0 [ 83.304869][ T2181] __dump_emit+0x255/0x380 [ 83.309286][ T2181] ? wait_for_dump_helpers+0x380/0x380 [ 83.314745][ T2181] ? fault_in_readable+0x160/0x160 [ 83.319867][ T2181] dump_emit+0x36a/0x3d0 [ 83.324116][ T2181] dump_user_range+0x86/0x1c0 [ 83.328815][ T2181] elf_core_dump+0x2aa4/0x2ff0 [ 83.333584][ T2181] ? load_elf_binary+0x2910/0x2910 [ 83.338694][ T2181] ? __kmalloc+0x13d/0x2c0 [ 83.343114][ T2181] ? kvmalloc_node+0x23c/0x320 [ 83.347889][ T2181] do_coredump+0x13c2/0x27d0 [ 83.352483][ T2181] ? simple_acl_create+0x1c0/0x1c0 [ 83.357597][ T2181] ? debug_smp_processor_id+0x17/0x20 [ 83.362970][ T2181] ? ____kasan_slab_free+0x130/0x160 [ 83.368260][ T2181] ? get_signal+0xb17/0x1430 [ 83.372845][ T2181] ? kmem_cache_free+0x100/0x320 [ 83.377786][ T2181] get_signal+0x387/0x1430 [ 83.382212][ T2181] arch_do_signal_or_restart+0xe2/0x1100 [ 83.387844][ T2181] ? get_sigframe_size+0x10/0x10 [ 83.392775][ T2181] ? force_sig_info_to_task+0x306/0x3b0 [ 83.398319][ T2181] ? force_sig+0xcc/0x120 [ 83.402648][ T2181] ? send_sig+0x70/0x70 [ 83.406798][ T2181] exit_to_user_mode_loop+0xa7/0xe0 [ 83.412006][ T2181] exit_to_user_mode_prepare+0x87/0xd0 [ 83.417457][ T2181] irqentry_exit_to_user_mode+0x9/0x10 [ 83.422922][ T2181] irqentry_exit+0x12/0x40 [ 83.427333][ T2181] exc_general_protection+0x1e4/0x270 [ 83.432700][ T2181] ? debug_smp_processor_id+0x17/0x20 [ 83.438075][ T2181] asm_exc_general_protection+0x27/0x30 [ 83.443623][ T2181] RIP: 0033:0x7f860fd2f021 [ 83.448044][ T2181] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 83.467651][ T2181] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 83.473744][ T2181] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 83.481719][ T2181] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 83.489698][ T2181] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 83.497679][ T2181] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 83.505657][ T2181] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 83.513642][ T2181] [ 83.978003][ T2181] memory: usage 300040kB, limit 307200kB, failcnt 16234 [ 84.016059][ T2181] memory+swap: usage 414516kB, limit 9007199254740988kB, failcnt 0 [ 84.062585][ T2181] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 84.099107][ T2181] Memory cgroup stats for /syz2: [ 84.099268][ T2181] anon 196608 [ 84.099268][ T2181] file 295133184 [ 84.099268][ T2181] kernel_stack 0 [ 84.099268][ T2181] pagetables 0 [ 84.099268][ T2181] percpu 0 [ 84.099268][ T2181] sock 0 [ 84.099268][ T2181] shmem 291061760 [ 84.099268][ T2181] file_mapped 3932160 [ 84.099268][ T2181] file_dirty 0 [ 84.099268][ T2181] file_writeback 0 [ 84.099268][ T2181] swapcached 145199104 [ 84.099268][ T2181] anon_thp 0 [ 84.099268][ T2181] file_thp 0 [ 84.099268][ T2181] shmem_thp 0 [ 84.099268][ T2181] inactive_anon 183689216 [ 84.099268][ T2181] active_anon 110116864 [ 84.099268][ T2181] inactive_file 28672 [ 84.099268][ T2181] active_file 4042752 [ 84.099268][ T2181] unevictable 0 [ 84.099268][ T2181] slab_reclaimable 0 [ 84.099268][ T2181] slab_unreclaimable 0 [ 84.099268][ T2181] slab 0 [ 84.099268][ T2181] workingset_refault_anon 14 [ 84.099268][ T2181] workingset_refault_file 2718 [ 84.099268][ T2181] workingset_activate_anon 0 [ 84.244382][ T2867] device syzkaller0 entered promiscuous mode [ 84.393865][ T2181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2147,uid=0 [ 84.447367][ T2181] Memory cgroup out of memory: Killed process 2147 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:29800kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 84.577078][ T2879] FAULT_INJECTION: forcing a failure. [ 84.577078][ T2879] name failslab, interval 1, probability 0, space 0, times 0 [ 84.652215][ T2879] CPU: 1 PID: 2879 Comm: syz.3.804 Tainted: G W syzkaller #0 [ 84.660951][ T2879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.671026][ T2879] Call Trace: [ 84.674322][ T2879] [ 84.677267][ T2879] __dump_stack+0x21/0x30 [ 84.681618][ T2879] dump_stack_lvl+0x110/0x170 [ 84.686313][ T2879] ? show_regs_print_info+0x20/0x20 [ 84.691525][ T2879] ? __kasan_slab_alloc+0xc9/0xe0 [ 84.696576][ T2879] ? slab_post_alloc_hook+0x4f/0x2b0 [ 84.701881][ T2879] ? kmem_cache_alloc+0xf7/0x260 [ 84.706952][ T2879] ? dup_task_struct+0x57/0xc50 [ 84.711819][ T2879] ? kernel_clone+0x233/0x960 [ 84.716545][ T2879] ? __x64_sys_clone+0x198/0x210 [ 84.721498][ T2879] ? x64_sys_call+0x41f/0x9a0 [ 84.726203][ T2879] ? do_syscall_64+0x4c/0xa0 [ 84.730808][ T2879] dump_stack+0x15/0x20 [ 84.734999][ T2879] should_fail+0x3ab/0x500 [ 84.739452][ T2879] __should_failslab+0xa4/0xe0 [ 84.744242][ T2879] should_failslab+0x9/0x20 [ 84.748765][ T2879] slab_pre_alloc_hook+0x39/0xd0 [ 84.753719][ T2879] kmem_cache_alloc_trace+0x48/0x270 [ 84.759027][ T2879] ? __get_vm_area_node+0x11d/0x350 [ 84.764266][ T2879] __get_vm_area_node+0x11d/0x350 [ 84.769330][ T2879] __vmalloc_node_range+0xe8/0xad0 [ 84.774507][ T2879] ? copy_process+0x5e0/0x3280 [ 84.779289][ T2879] ? slab_post_alloc_hook+0x6d/0x2b0 [ 84.784635][ T2879] ? should_failslab+0x9/0x20 [ 84.789335][ T2879] ? kmem_cache_alloc+0xf7/0x260 [ 84.794340][ T2879] dup_task_struct+0x41e/0xc50 [ 84.799135][ T2879] ? copy_process+0x5e0/0x3280 [ 84.803919][ T2879] copy_process+0x5e0/0x3280 [ 84.808549][ T2879] ? __kasan_check_write+0x14/0x20 [ 84.813680][ T2879] ? proc_fail_nth_write+0x180/0x200 [ 84.818998][ T2879] ? __pidfd_prepare+0x150/0x150 [ 84.823991][ T2879] kernel_clone+0x233/0x960 [ 84.828514][ T2879] ? create_io_thread+0x170/0x170 [ 84.833554][ T2879] ? __kasan_check_write+0x14/0x20 [ 84.838686][ T2879] ? mutex_unlock+0x8f/0x230 [ 84.843297][ T2879] __x64_sys_clone+0x198/0x210 [ 84.848107][ T2879] ? __kasan_check_write+0x14/0x20 [ 84.853242][ T2879] ? __ia32_sys_vfork+0x130/0x130 [ 84.858286][ T2879] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 84.864377][ T2879] x64_sys_call+0x41f/0x9a0 [ 84.868898][ T2879] do_syscall_64+0x4c/0xa0 [ 84.873329][ T2879] ? clear_bhb_loop+0x50/0xa0 [ 84.878014][ T2879] ? clear_bhb_loop+0x50/0xa0 [ 84.882702][ T2879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.888612][ T2879] RIP: 0033:0x7fa5a3325019 [ 84.893040][ T2879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.912656][ T2879] RSP: 002b:00007fa5a1d7dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 84.921080][ T2879] RAX: ffffffffffffffda RBX: 00007fa5a35acfa0 RCX: 00007fa5a3325019 [ 84.929068][ T2879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 84.937047][ T2879] RBP: 00007fa5a1d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 84.945030][ T2879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 84.953035][ T2879] R13: 00007fa5a35ad038 R14: 00007fa5a35acfa0 R15: 00007ffe61430c98 [ 84.961027][ T2879] [ 85.766004][ T2879] syz.3.804: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 85.785711][ T2879] CPU: 0 PID: 2879 Comm: syz.3.804 Tainted: G W syzkaller #0 [ 85.794432][ T2879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.804509][ T2879] Call Trace: [ 85.807803][ T2879] [ 85.810745][ T2879] __dump_stack+0x21/0x30 [ 85.815089][ T2879] dump_stack_lvl+0x110/0x170 [ 85.819798][ T2879] ? show_regs_print_info+0x20/0x20 [ 85.825028][ T2879] ? pr_cont_kernfs_name+0xe3/0xf0 [ 85.830166][ T2879] dump_stack+0x15/0x20 [ 85.834348][ T2879] warn_alloc+0x1dc/0x200 [ 85.838714][ T2879] ? __should_failslab+0xa4/0xe0 [ 85.843681][ T2879] ? zone_watermark_ok_safe+0x270/0x270 [ 85.849251][ T2879] ? __get_vm_area_node+0x33e/0x350 [ 85.854492][ T2879] __vmalloc_node_range+0x15e/0xad0 [ 85.859814][ T2879] ? slab_post_alloc_hook+0x6d/0x2b0 [ 85.865128][ T2879] ? should_failslab+0x9/0x20 [ 85.869835][ T2879] ? kmem_cache_alloc+0xf7/0x260 [ 85.874798][ T2879] dup_task_struct+0x41e/0xc50 [ 85.879587][ T2879] ? copy_process+0x5e0/0x3280 [ 85.884376][ T2879] copy_process+0x5e0/0x3280 [ 85.888989][ T2879] ? __kasan_check_write+0x14/0x20 [ 85.894121][ T2879] ? proc_fail_nth_write+0x180/0x200 [ 85.899433][ T2879] ? __pidfd_prepare+0x150/0x150 [ 85.904410][ T2879] kernel_clone+0x233/0x960 [ 85.908928][ T2879] ? create_io_thread+0x170/0x170 [ 85.913964][ T2879] ? __kasan_check_write+0x14/0x20 [ 85.919086][ T2879] ? mutex_unlock+0x8f/0x230 [ 85.923695][ T2879] __x64_sys_clone+0x198/0x210 [ 85.928501][ T2879] ? __kasan_check_write+0x14/0x20 [ 85.933632][ T2879] ? __ia32_sys_vfork+0x130/0x130 [ 85.938676][ T2879] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 85.944758][ T2879] x64_sys_call+0x41f/0x9a0 [ 85.949273][ T2879] do_syscall_64+0x4c/0xa0 [ 85.953706][ T2879] ? clear_bhb_loop+0x50/0xa0 [ 85.958394][ T2879] ? clear_bhb_loop+0x50/0xa0 [ 85.963085][ T2879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.968986][ T2879] RIP: 0033:0x7fa5a3325019 [ 85.973417][ T2879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.993048][ T2879] RSP: 002b:00007fa5a1d7dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 86.001474][ T2879] RAX: ffffffffffffffda RBX: 00007fa5a35acfa0 RCX: 00007fa5a3325019 [ 86.009464][ T2879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 86.017453][ T2879] RBP: 00007fa5a1d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 86.025466][ T2879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 86.033463][ T2879] R13: 00007fa5a35ad038 R14: 00007fa5a35acfa0 R15: 00007ffe61430c98 [ 86.041466][ T2879] [ 86.535468][ T2879] Mem-Info: [ 86.545904][ T2879] active_anon:25017 inactive_anon:76421 isolated_anon:5 [ 86.545904][ T2879] active_file:21606 inactive_file:3271 isolated_file:56 [ 86.545904][ T2879] unevictable:0 dirty:326 writeback:1 [ 86.545904][ T2879] slab_reclaimable:8466 slab_unreclaimable:77607 [ 86.545904][ T2879] mapped:39889 shmem:95120 pagetables:1221 bounce:0 [ 86.545904][ T2879] kernel_misc_reclaimable:0 [ 86.545904][ T2879] free:1444352 free_pcp:21708 free_cma:0 [ 86.614042][ T2173] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.635943][ T2879] Node 0 active_anon:100068kB inactive_anon:311684kB active_file:86140kB inactive_file:12420kB unevictable:0kB isolated(anon):20kB isolated(file):324kB mapped:158756kB dirty:1304kB writeback:4kB shmem:386880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4800kB pagetables:4884kB all_unreclaimable? no [ 86.730916][ T2879] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982756kB mlocked:0kB bounce:0kB free_pcp:3984kB local_pcp:56kB free_cma:0kB [ 86.827487][ T2879] lowmem_reserve[]: 0 3941 3941 [ 86.832404][ T2879] Normal free:2816576kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:100068kB inactive_anon:301484kB active_file:86140kB inactive_file:12520kB unevictable:0kB writepending:32kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:71092kB local_pcp:18328kB free_cma:0kB [ 86.908119][ T2879] lowmem_reserve[]: 0 0 0 [ 86.918207][ T2879] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 86.970802][ T2879] Normal: 2228*4kB (UME) 1049*8kB (UME) 384*16kB (UME) 365*32kB (UME) 861*64kB (UME) 760*128kB (UM) 590*256kB (UME) 441*512kB (UM) 299*1024kB (UM) 150*2048kB (UME) 403*4096kB (UM) = 2828408kB [ 87.029921][ T2879] 119504 total pagecache pages [ 87.034732][ T2879] 592 pages in swap cache [ 87.056374][ T2879] Swap cache stats: add 39580, delete 38988, find 8/17 [ 87.086152][ T2879] Free swap = 0kB [ 87.096007][ T2879] Total swap = 124996kB [ 87.100363][ T2963] device syzkaller0 entered promiscuous mode [ 87.106653][ T2879] 2097051 pages RAM [ 87.116651][ T2879] 0 pages HighMem/MovableOnly [ 87.121414][ T2879] 342338 pages reserved [ 87.125586][ T2879] 0 pages cma reserved [ 87.137130][ T2173] CPU: 1 PID: 2173 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 87.145838][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.155912][ T2173] Call Trace: [ 87.159205][ T2173] [ 87.162147][ T2173] __dump_stack+0x21/0x30 [ 87.166509][ T2173] dump_stack_lvl+0x110/0x170 [ 87.171221][ T2173] ? show_regs_print_info+0x20/0x20 [ 87.176431][ T2173] ? ___ratelimit+0x40a/0x590 [ 87.181146][ T2173] dump_stack+0x15/0x20 [ 87.185319][ T2173] dump_header+0xd9/0x650 [ 87.189666][ T2173] oom_kill_process+0x1fa/0x2c0 [ 87.194543][ T2173] out_of_memory+0x5b0/0x9c0 [ 87.199151][ T2173] ? unregister_oom_notifier+0x20/0x20 [ 87.204643][ T2173] ? mutex_lock_killable+0x9b/0x1c0 [ 87.209864][ T2173] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 87.216406][ T2173] ? psi_group_change+0xa8c/0x1110 [ 87.221540][ T2173] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 87.227121][ T2173] ? mem_cgroup_oom_trylock+0x340/0x340 [ 87.232677][ T2173] ? mem_cgroup_iter+0x4bf/0x6c0 [ 87.237630][ T2173] try_charge_memcg+0xef6/0x14e0 [ 87.242587][ T2173] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 87.248416][ T2173] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 87.254358][ T2173] charge_memcg+0x6d/0x1a0 [ 87.258790][ T2173] __mem_cgroup_charge+0x93/0x280 [ 87.263827][ T2173] ? mem_cgroup_calculate_protection+0x520/0x520 [ 87.270163][ T2173] shmem_add_to_page_cache+0x64b/0xc50 [ 87.275630][ T2173] ? put_page+0xb0/0xb0 [ 87.279788][ T2173] ? _raw_spin_lock_irqsave+0x130/0x130 [ 87.285342][ T2173] ? filemap_map_pages+0xc64/0x1630 [ 87.290554][ T2173] shmem_getpage_gfp+0x1404/0x2250 [ 87.295696][ T2173] shmem_write_begin+0xce/0x1b0 [ 87.300576][ T2173] generic_perform_write+0x2b7/0x690 [ 87.305877][ T2173] ? grab_cache_page_write_begin+0xb0/0xb0 [ 87.311687][ T2173] ? file_remove_privs+0x5c0/0x5c0 [ 87.316817][ T2173] ? rwsem_write_trylock+0x136/0x300 [ 87.322100][ T2173] ? __kasan_check_write+0x14/0x20 [ 87.327208][ T2173] ? clear_nonspinnable+0x60/0x60 [ 87.332231][ T2173] __generic_file_write_iter+0x268/0x490 [ 87.337862][ T2173] ? generic_write_checks+0x3df/0x480 [ 87.343231][ T2173] generic_file_write_iter+0xa9/0x1d0 [ 87.348607][ T2173] __kernel_write+0x521/0x970 [ 87.353290][ T2173] ? vfs_read+0xc20/0xc20 [ 87.357631][ T2173] ? __get_user_pages+0xf85/0x10c0 [ 87.362743][ T2173] ? populate_vma_page_range+0xf0/0xf0 [ 87.368201][ T2173] __dump_emit+0x255/0x380 [ 87.372647][ T2173] ? wait_for_dump_helpers+0x380/0x380 [ 87.378120][ T2173] ? fault_in_readable+0x160/0x160 [ 87.383233][ T2173] dump_emit+0x36a/0x3d0 [ 87.387480][ T2173] ? dump_user_range+0x71/0x1c0 [ 87.392336][ T2173] ? dump_user_range+0xe4/0x1c0 [ 87.397194][ T2173] dump_user_range+0x86/0x1c0 [ 87.401876][ T2173] elf_core_dump+0x2aa4/0x2ff0 [ 87.406639][ T2173] ? load_elf_binary+0x2910/0x2910 [ 87.411750][ T2173] ? __kmalloc+0x13d/0x2c0 [ 87.416164][ T2173] ? kvmalloc_node+0x23c/0x320 [ 87.420937][ T2173] do_coredump+0x13c2/0x27d0 [ 87.425539][ T2173] ? simple_acl_create+0x1c0/0x1c0 [ 87.430666][ T2173] ? debug_smp_processor_id+0x17/0x20 [ 87.436061][ T2173] ? ____kasan_slab_free+0x130/0x160 [ 87.441347][ T2173] ? get_signal+0xb17/0x1430 [ 87.445934][ T2173] ? kmem_cache_free+0x100/0x320 [ 87.451058][ T2173] get_signal+0x387/0x1430 [ 87.455483][ T2173] arch_do_signal_or_restart+0xe2/0x1100 [ 87.461119][ T2173] ? get_sigframe_size+0x10/0x10 [ 87.466058][ T2173] ? force_sig_info_to_task+0x306/0x3b0 [ 87.471608][ T2173] ? force_sig+0xcc/0x120 [ 87.475938][ T2173] ? send_sig+0x70/0x70 [ 87.480098][ T2173] exit_to_user_mode_loop+0xa7/0xe0 [ 87.485302][ T2173] exit_to_user_mode_prepare+0x87/0xd0 [ 87.490760][ T2173] irqentry_exit_to_user_mode+0x9/0x10 [ 87.496222][ T2173] irqentry_exit+0x12/0x40 [ 87.500665][ T2173] exc_general_protection+0x1e4/0x270 [ 87.506032][ T2173] ? debug_smp_processor_id+0x17/0x20 [ 87.511406][ T2173] asm_exc_general_protection+0x27/0x30 [ 87.516949][ T2173] RIP: 0033:0x7f860fd2f021 [ 87.521366][ T2173] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 87.540970][ T2173] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 87.547044][ T2173] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 87.555018][ T2173] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 87.563000][ T2173] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 87.570979][ T2173] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 87.578958][ T2173] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 87.586957][ T2173] [ 87.853412][ T2173] memory: usage 307200kB, limit 307200kB, failcnt 20135 [ 87.890668][ T2173] memory+swap: usage 429828kB, limit 9007199254740988kB, failcnt 0 [ 87.905923][ T2173] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 87.935966][ T2173] Memory cgroup stats for /syz2: [ 87.936094][ T2173] anon 344064 [ 87.936094][ T2173] file 311824384 [ 87.936094][ T2173] kernel_stack 0 [ 87.936094][ T2173] pagetables 0 [ 87.936094][ T2173] percpu 0 [ 87.936094][ T2173] sock 0 [ 87.936094][ T2173] shmem 311783424 [ 87.936094][ T2173] file_mapped 0 [ 87.936094][ T2173] file_dirty 0 [ 87.936094][ T2173] file_writeback 0 [ 87.936094][ T2173] swapcached 161415168 [ 87.936094][ T2173] anon_thp 0 [ 87.936094][ T2173] file_thp 0 [ 87.936094][ T2173] shmem_thp 0 [ 87.936094][ T2173] inactive_anon 212086784 [ 87.936094][ T2173] active_anon 102445056 [ 87.936094][ T2173] inactive_file 40960 [ 87.936094][ T2173] active_file 0 [ 87.936094][ T2173] unevictable 0 [ 87.936094][ T2173] slab_reclaimable 0 [ 87.936094][ T2173] slab_unreclaimable 0 [ 87.936094][ T2173] slab 0 [ 87.936094][ T2173] workingset_refault_anon 21 [ 87.936094][ T2173] workingset_refault_file 5473 [ 87.936094][ T2173] workingset_activate_anon 0 [ 88.200546][ T2173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2172,uid=0 [ 88.244848][ T2173] Memory cgroup out of memory: Killed process 2172 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:28116kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 89.080016][ T3012] device syzkaller0 entered promiscuous mode [ 89.165620][ T2141] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.905948][ T2141] CPU: 1 PID: 2141 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 89.914708][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.924779][ T2141] Call Trace: [ 89.928062][ T2141] [ 89.931031][ T2141] __dump_stack+0x21/0x30 [ 89.935373][ T2141] dump_stack_lvl+0x110/0x170 [ 89.940069][ T2141] ? show_regs_print_info+0x20/0x20 [ 89.945291][ T2141] ? ___ratelimit+0x40a/0x590 [ 89.949988][ T2141] dump_stack+0x15/0x20 [ 89.954162][ T2141] dump_header+0xd9/0x650 [ 89.958509][ T2141] oom_kill_process+0x1fa/0x2c0 [ 89.963374][ T2141] out_of_memory+0x5b0/0x9c0 [ 89.967985][ T2141] ? unregister_oom_notifier+0x20/0x20 [ 89.973460][ T2141] ? mutex_lock_killable+0x9b/0x1c0 [ 89.978664][ T2141] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 89.985168][ T2141] ? psi_group_change+0xa8c/0x1110 [ 89.990294][ T2141] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 89.995857][ T2141] ? mem_cgroup_oom_trylock+0x340/0x340 [ 90.001461][ T2141] ? mem_cgroup_iter+0x4bf/0x6c0 [ 90.006414][ T2141] try_charge_memcg+0xef6/0x14e0 [ 90.011362][ T2141] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 90.017179][ T2141] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 90.022993][ T2141] charge_memcg+0x6d/0x1a0 [ 90.027415][ T2141] __mem_cgroup_charge+0x93/0x280 [ 90.032453][ T2141] ? mem_cgroup_calculate_protection+0x520/0x520 [ 90.038796][ T2141] shmem_add_to_page_cache+0x64b/0xc50 [ 90.044263][ T2141] ? put_page+0xb0/0xb0 [ 90.048416][ T2141] ? _raw_spin_lock_irqsave+0x130/0x130 [ 90.053969][ T2141] ? filemap_map_pages+0xc64/0x1630 [ 90.059186][ T2141] shmem_getpage_gfp+0x1404/0x2250 [ 90.064308][ T2141] shmem_write_begin+0xce/0x1b0 [ 90.069246][ T2141] generic_perform_write+0x2b7/0x690 [ 90.074547][ T2141] ? grab_cache_page_write_begin+0xb0/0xb0 [ 90.080386][ T2141] ? file_remove_privs+0x5c0/0x5c0 [ 90.085523][ T2141] ? rwsem_write_trylock+0x136/0x300 [ 90.090818][ T2141] ? __kasan_check_write+0x14/0x20 [ 90.095944][ T2141] ? clear_nonspinnable+0x60/0x60 [ 90.100972][ T2141] __generic_file_write_iter+0x268/0x490 [ 90.106626][ T2141] ? generic_write_checks+0x3df/0x480 [ 90.112016][ T2141] generic_file_write_iter+0xa9/0x1d0 [ 90.117391][ T2141] __kernel_write+0x521/0x970 [ 90.122074][ T2141] ? vfs_read+0xc20/0xc20 [ 90.126401][ T2141] ? __get_user_pages+0xf85/0x10c0 [ 90.131529][ T2141] ? populate_vma_page_range+0xf0/0xf0 [ 90.137002][ T2141] __dump_emit+0x255/0x380 [ 90.141431][ T2141] ? wait_for_dump_helpers+0x380/0x380 [ 90.146903][ T2141] ? fault_in_readable+0x160/0x160 [ 90.152036][ T2141] dump_emit+0x36a/0x3d0 [ 90.156314][ T2141] dump_user_range+0x86/0x1c0 [ 90.161001][ T2141] elf_core_dump+0x2aa4/0x2ff0 [ 90.165782][ T2141] ? load_elf_binary+0x2910/0x2910 [ 90.170889][ T2141] ? __kmalloc+0x13d/0x2c0 [ 90.175305][ T2141] ? kvmalloc_node+0x23c/0x320 [ 90.180082][ T2141] do_coredump+0x13c2/0x27d0 [ 90.184682][ T2141] ? simple_acl_create+0x1c0/0x1c0 [ 90.189801][ T2141] ? debug_smp_processor_id+0x17/0x20 [ 90.195187][ T2141] ? ____kasan_slab_free+0x130/0x160 [ 90.200485][ T2141] ? get_signal+0xb17/0x1430 [ 90.205089][ T2141] ? kmem_cache_free+0x100/0x320 [ 90.210036][ T2141] get_signal+0x387/0x1430 [ 90.214463][ T2141] arch_do_signal_or_restart+0xe2/0x1100 [ 90.220101][ T2141] ? get_sigframe_size+0x10/0x10 [ 90.225053][ T2141] ? force_sig_info_to_task+0x306/0x3b0 [ 90.230622][ T2141] ? force_sig+0xcc/0x120 [ 90.234950][ T2141] ? send_sig+0x70/0x70 [ 90.239109][ T2141] exit_to_user_mode_loop+0xa7/0xe0 [ 90.244331][ T2141] exit_to_user_mode_prepare+0x87/0xd0 [ 90.249796][ T2141] irqentry_exit_to_user_mode+0x9/0x10 [ 90.255260][ T2141] irqentry_exit+0x12/0x40 [ 90.259684][ T2141] exc_general_protection+0x1e4/0x270 [ 90.265060][ T2141] ? debug_smp_processor_id+0x17/0x20 [ 90.270445][ T2141] asm_exc_general_protection+0x27/0x30 [ 90.275995][ T2141] RIP: 0033:0x7f860fd2f021 [ 90.280415][ T2141] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 90.300027][ T2141] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 90.306097][ T2141] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 90.314158][ T2141] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 90.322129][ T2141] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 90.330109][ T2141] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 90.338089][ T2141] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 90.346069][ T2141] [ 90.507992][ T2141] memory: usage 303496kB, limit 307200kB, failcnt 22637 [ 90.515070][ T2141] memory+swap: usage 421736kB, limit 9007199254740988kB, failcnt 0 [ 90.523318][ T2141] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 90.565951][ T2141] Memory cgroup stats for /syz2: [ 90.566089][ T2141] anon 225280 [ 90.566089][ T2141] file 305541120 [ 90.566089][ T2141] kernel_stack 0 [ 90.566089][ T2141] pagetables 0 [ 90.566089][ T2141] percpu 0 [ 90.566089][ T2141] sock 0 [ 90.566089][ T2141] shmem 305541120 [ 90.566089][ T2141] file_mapped 0 [ 90.566089][ T2141] file_dirty 0 [ 90.566089][ T2141] file_writeback 0 [ 90.566089][ T2141] swapcached 164130816 [ 90.566089][ T2141] anon_thp 0 [ 90.566089][ T2141] file_thp 0 [ 90.566089][ T2141] shmem_thp 0 [ 90.566089][ T2141] inactive_anon 206729216 [ 90.566089][ T2141] active_anon 104050688 [ 90.566089][ T2141] inactive_file 0 [ 90.566089][ T2141] active_file 0 [ 90.566089][ T2141] unevictable 0 [ 90.566089][ T2141] slab_reclaimable 0 [ 90.566089][ T2141] slab_unreclaimable 0 [ 90.566089][ T2141] slab 0 [ 90.566089][ T2141] workingset_refault_anon 21 [ 90.566089][ T2141] workingset_refault_file 5473 [ 90.566089][ T2141] workingset_activate_anon 0 [ 90.983942][ T2141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2168,uid=0 [ 91.011142][ T2141] Memory cgroup out of memory: Killed process 2168 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:28820kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 91.080856][ T3052] ref_ctr_offset mismatch. inode: 0x2d4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 91.240209][ T3060] ref_ctr_offset mismatch. inode: 0x2da offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 91.878447][ T3066] device veth0_vlan left promiscuous mode [ 91.915103][ T2142] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.970758][ T3066] device veth0_vlan entered promiscuous mode [ 91.983181][ T2142] CPU: 0 PID: 2142 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 91.991880][ T2142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.001964][ T2142] Call Trace: [ 92.005250][ T2142] [ 92.008188][ T2142] __dump_stack+0x21/0x30 [ 92.012550][ T2142] dump_stack_lvl+0x110/0x170 [ 92.017241][ T2142] ? show_regs_print_info+0x20/0x20 [ 92.022468][ T2142] ? ___ratelimit+0x40a/0x590 [ 92.027171][ T2142] dump_stack+0x15/0x20 [ 92.031346][ T2142] dump_header+0xd9/0x650 [ 92.035693][ T2142] oom_kill_process+0x1fa/0x2c0 [ 92.040567][ T2142] out_of_memory+0x5b0/0x9c0 [ 92.045201][ T2142] ? unregister_oom_notifier+0x20/0x20 [ 92.050676][ T2142] ? mutex_lock_killable+0x9b/0x1c0 [ 92.055897][ T2142] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 92.062420][ T2142] ? psi_group_change+0xa8c/0x1110 [ 92.067559][ T2142] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 92.073140][ T2142] ? mem_cgroup_oom_trylock+0x340/0x340 [ 92.078711][ T2142] ? mem_cgroup_iter+0x4bf/0x6c0 [ 92.083672][ T2142] try_charge_memcg+0xef6/0x14e0 [ 92.088656][ T2142] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 92.094498][ T2142] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 92.100344][ T2142] charge_memcg+0x6d/0x1a0 [ 92.104803][ T2142] __mem_cgroup_charge+0x93/0x280 [ 92.109856][ T2142] ? mem_cgroup_calculate_protection+0x520/0x520 [ 92.116210][ T2142] shmem_add_to_page_cache+0x64b/0xc50 [ 92.121691][ T2142] ? put_page+0xb0/0xb0 [ 92.125881][ T2142] ? _raw_spin_lock_irqsave+0x130/0x130 [ 92.131463][ T2142] ? filemap_map_pages+0xc64/0x1630 [ 92.136677][ T2142] shmem_getpage_gfp+0x1404/0x2250 [ 92.141808][ T2142] shmem_write_begin+0xce/0x1b0 [ 92.146704][ T2142] generic_perform_write+0x2b7/0x690 [ 92.152031][ T2142] ? grab_cache_page_write_begin+0xb0/0xb0 [ 92.157872][ T2142] ? file_remove_privs+0x5c0/0x5c0 [ 92.163010][ T2142] ? rwsem_write_trylock+0x136/0x300 [ 92.168323][ T2142] ? __kasan_check_write+0x14/0x20 [ 92.173464][ T2142] ? clear_nonspinnable+0x60/0x60 [ 92.178511][ T2142] __generic_file_write_iter+0x268/0x490 [ 92.184164][ T2142] ? generic_write_checks+0x3df/0x480 [ 92.189562][ T2142] generic_file_write_iter+0xa9/0x1d0 [ 92.194955][ T2142] __kernel_write+0x521/0x970 [ 92.199653][ T2142] ? vfs_read+0xc20/0xc20 [ 92.204002][ T2142] ? __get_user_pages+0xf85/0x10c0 [ 92.209162][ T2142] ? populate_vma_page_range+0xf0/0xf0 [ 92.214639][ T2142] __dump_emit+0x255/0x380 [ 92.219066][ T2142] ? wait_for_dump_helpers+0x380/0x380 [ 92.224544][ T2142] ? fault_in_readable+0x160/0x160 [ 92.229685][ T2142] dump_emit+0x36a/0x3d0 [ 92.233958][ T2142] dump_user_range+0x86/0x1c0 [ 92.238644][ T2142] elf_core_dump+0x2aa4/0x2ff0 [ 92.243425][ T2142] ? load_elf_binary+0x2910/0x2910 [ 92.248550][ T2142] ? __kmalloc+0x13d/0x2c0 [ 92.252981][ T2142] ? kvmalloc_node+0x23c/0x320 [ 92.257772][ T2142] do_coredump+0x13c2/0x27d0 [ 92.262377][ T2142] ? simple_acl_create+0x1c0/0x1c0 [ 92.267495][ T2142] ? debug_smp_processor_id+0x17/0x20 [ 92.272879][ T2142] ? ____kasan_slab_free+0x130/0x160 [ 92.278173][ T2142] ? get_signal+0xb17/0x1430 [ 92.282778][ T2142] ? kmem_cache_free+0x100/0x320 [ 92.287724][ T2142] get_signal+0x387/0x1430 [ 92.292163][ T2142] arch_do_signal_or_restart+0xe2/0x1100 [ 92.297809][ T2142] ? get_sigframe_size+0x10/0x10 [ 92.302776][ T2142] ? force_sig_info_to_task+0x306/0x3b0 [ 92.308333][ T2142] ? force_sig+0xcc/0x120 [ 92.312671][ T2142] ? send_sig+0x70/0x70 [ 92.316830][ T2142] exit_to_user_mode_loop+0xa7/0xe0 [ 92.322033][ T2142] exit_to_user_mode_prepare+0x87/0xd0 [ 92.327499][ T2142] irqentry_exit_to_user_mode+0x9/0x10 [ 92.332997][ T2142] irqentry_exit+0x12/0x40 [ 92.337424][ T2142] exc_general_protection+0x1e4/0x270 [ 92.342810][ T2142] ? debug_smp_processor_id+0x17/0x20 [ 92.348195][ T2142] asm_exc_general_protection+0x27/0x30 [ 92.353758][ T2142] RIP: 0033:0x7f860fd2f021 [ 92.358189][ T2142] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 92.377807][ T2142] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 92.383905][ T2142] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 92.391890][ T2142] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 92.399881][ T2142] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 92.407872][ T2142] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 92.415870][ T2142] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 92.423884][ T2142] [ 92.429060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.437429][ T2142] memory: usage 305248kB, limit 307200kB, failcnt 24039 [ 92.456651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.465502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.637473][ T2142] memory+swap: usage 428372kB, limit 9007199254740988kB, failcnt 0 [ 92.946389][ T3109] ref_ctr_offset mismatch. inode: 0x3c2 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 92.958834][ T2142] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 93.193695][ T3111] ref_ctr_offset mismatch. inode: 0x2ec offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 93.340358][ T2142] Memory cgroup stats for /syz2: [ 93.340509][ T2142] anon 270336 [ 93.340509][ T2142] file 308518912 [ 93.340509][ T2142] kernel_stack 0 [ 93.340509][ T2142] pagetables 0 [ 93.340509][ T2142] percpu 0 [ 93.340509][ T2142] sock 0 [ 93.340509][ T2142] shmem 307863552 [ 93.340509][ T2142] file_mapped 393216 [ 93.340509][ T2142] file_dirty 0 [ 93.340509][ T2142] file_writeback 512000 [ 93.340509][ T2142] swapcached 176394240 [ 93.340509][ T2142] anon_thp 0 [ 93.340509][ T2142] file_thp 0 [ 93.340509][ T2142] shmem_thp 0 [ 93.340509][ T2142] inactive_anon 218898432 [ 93.340509][ T2142] active_anon 91582464 [ 93.340509][ T2142] inactive_file 73728 [ 93.340509][ T2142] active_file 581632 [ 93.340509][ T2142] unevictable 0 [ 93.340509][ T2142] slab_reclaimable 0 [ 93.340509][ T2142] slab_unreclaimable 0 [ 93.340509][ T2142] slab 0 [ 93.340509][ T2142] workingset_refault_anon 33 [ 93.340509][ T2142] workingset_refault_file 8310 [ 93.340509][ T2142] workingset_activate_anon 2 [ 93.715142][ T3094] device syzkaller0 entered promiscuous mode [ 94.340998][ T2142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2170,uid=0 [ 94.425383][ T2142] Memory cgroup out of memory: Killed process 2170 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:31596kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 95.485275][ T2173] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.675942][ T2173] CPU: 1 PID: 2173 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 95.684668][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.694734][ T2173] Call Trace: [ 95.698018][ T2173] [ 95.700958][ T2173] __dump_stack+0x21/0x30 [ 95.705298][ T2173] dump_stack_lvl+0x110/0x170 [ 95.709988][ T2173] ? show_regs_print_info+0x20/0x20 [ 95.715232][ T2173] ? ___ratelimit+0x40a/0x590 [ 95.719934][ T2173] dump_stack+0x15/0x20 [ 95.724112][ T2173] dump_header+0xd9/0x650 [ 95.728455][ T2173] oom_kill_process+0x1fa/0x2c0 [ 95.733323][ T2173] out_of_memory+0x5b0/0x9c0 [ 95.737918][ T2173] ? unregister_oom_notifier+0x20/0x20 [ 95.743409][ T2173] ? mutex_lock_killable+0x9b/0x1c0 [ 95.748631][ T2173] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 95.755151][ T2173] ? psi_group_change+0xa8c/0x1110 [ 95.760283][ T2173] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 95.765859][ T2173] ? mem_cgroup_oom_trylock+0x340/0x340 [ 95.771416][ T2173] ? mem_cgroup_iter+0x4bf/0x6c0 [ 95.776363][ T2173] try_charge_memcg+0xef6/0x14e0 [ 95.781305][ T2173] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 95.787127][ T2173] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 95.792946][ T2173] charge_memcg+0x6d/0x1a0 [ 95.797364][ T2173] __mem_cgroup_charge+0x93/0x280 [ 95.802386][ T2173] ? mem_cgroup_calculate_protection+0x520/0x520 [ 95.808719][ T2173] shmem_add_to_page_cache+0x64b/0xc50 [ 95.814184][ T2173] ? put_page+0xb0/0xb0 [ 95.818346][ T2173] ? _raw_spin_unlock+0x4d/0x70 [ 95.823191][ T2173] ? filemap_map_pages+0xc64/0x1630 [ 95.828388][ T2173] shmem_getpage_gfp+0x1404/0x2250 [ 95.833507][ T2173] shmem_write_begin+0xce/0x1b0 [ 95.838361][ T2173] generic_perform_write+0x2b7/0x690 [ 95.843656][ T2173] ? grab_cache_page_write_begin+0xb0/0xb0 [ 95.849476][ T2173] ? file_remove_privs+0x5c0/0x5c0 [ 95.854613][ T2173] ? rwsem_write_trylock+0x136/0x300 [ 95.859902][ T2173] ? __kasan_check_write+0x14/0x20 [ 95.865026][ T2173] ? clear_nonspinnable+0x60/0x60 [ 95.870057][ T2173] __generic_file_write_iter+0x268/0x490 [ 95.875696][ T2173] ? generic_write_checks+0x3df/0x480 [ 95.881080][ T2173] generic_file_write_iter+0xa9/0x1d0 [ 95.886456][ T2173] __kernel_write+0x521/0x970 [ 95.891133][ T2173] ? vfs_read+0xc20/0xc20 [ 95.895456][ T2173] ? __get_user_pages+0xf85/0x10c0 [ 95.900578][ T2173] ? populate_vma_page_range+0xf0/0xf0 [ 95.906064][ T2173] __dump_emit+0x255/0x380 [ 95.910487][ T2173] ? wait_for_dump_helpers+0x380/0x380 [ 95.915963][ T2173] ? fault_in_readable+0x160/0x160 [ 95.921076][ T2173] dump_emit+0x36a/0x3d0 [ 95.925322][ T2173] ? dump_user_range+0x71/0x1c0 [ 95.930176][ T2173] ? dump_user_range+0xe4/0x1c0 [ 95.935034][ T2173] dump_user_range+0x86/0x1c0 [ 95.939722][ T2173] elf_core_dump+0x2aa4/0x2ff0 [ 95.944498][ T2173] ? load_elf_binary+0x2910/0x2910 [ 95.949611][ T2173] ? __kmalloc+0x13d/0x2c0 [ 95.954037][ T2173] ? kvmalloc_node+0x23c/0x320 [ 95.958825][ T2173] do_coredump+0x13c2/0x27d0 [ 95.963457][ T2173] ? simple_acl_create+0x1c0/0x1c0 [ 95.968673][ T2173] ? debug_smp_processor_id+0x17/0x20 [ 95.974054][ T2173] ? ____kasan_slab_free+0x130/0x160 [ 95.979337][ T2173] ? get_signal+0xb17/0x1430 [ 95.983961][ T2173] ? kmem_cache_free+0x100/0x320 [ 95.988900][ T2173] get_signal+0x387/0x1430 [ 95.993327][ T2173] arch_do_signal_or_restart+0xe2/0x1100 [ 95.998980][ T2173] ? get_sigframe_size+0x10/0x10 [ 96.003922][ T2173] ? force_sig_info_to_task+0x306/0x3b0 [ 96.009483][ T2173] ? force_sig+0xcc/0x120 [ 96.013822][ T2173] ? send_sig+0x70/0x70 [ 96.017983][ T2173] exit_to_user_mode_loop+0xa7/0xe0 [ 96.023183][ T2173] exit_to_user_mode_prepare+0x87/0xd0 [ 96.028643][ T2173] irqentry_exit_to_user_mode+0x9/0x10 [ 96.034103][ T2173] irqentry_exit+0x12/0x40 [ 96.038519][ T2173] exc_general_protection+0x1e4/0x270 [ 96.043928][ T2173] ? debug_smp_processor_id+0x17/0x20 [ 96.049318][ T2173] asm_exc_general_protection+0x27/0x30 [ 96.054897][ T2173] RIP: 0033:0x7f860fd2f021 [ 96.059444][ T2173] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 96.079057][ T2173] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 96.085124][ T2173] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 96.093100][ T2173] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 96.101100][ T2173] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 96.109077][ T2173] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 96.117172][ T2173] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 96.125151][ T2173] [ 96.244248][ T2173] memory: usage 307200kB, limit 307200kB, failcnt 29003 [ 96.253088][ T2173] memory+swap: usage 430484kB, limit 9007199254740988kB, failcnt 0 [ 96.266170][ T2173] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 96.273042][ T2173] Memory cgroup stats for /syz2: [ 96.273170][ T2173] anon 196608 [ 96.273170][ T2173] file 312635392 [ 96.273170][ T2173] kernel_stack 0 [ 96.273170][ T2173] pagetables 0 [ 96.273170][ T2173] percpu 0 [ 96.273170][ T2173] sock 0 [ 96.273170][ T2173] shmem 312623104 [ 96.273170][ T2173] file_mapped 0 [ 96.273170][ T2173] file_dirty 0 [ 96.273170][ T2173] file_writeback 118784 [ 96.273170][ T2173] swapcached 186916864 [ 96.273170][ T2173] anon_thp 0 [ 96.273170][ T2173] file_thp 0 [ 96.273170][ T2173] shmem_thp 0 [ 96.273170][ T2173] inactive_anon 228950016 [ 96.273170][ T2173] active_anon 85348352 [ 96.273170][ T2173] inactive_file 12288 [ 96.273170][ T2173] active_file 0 [ 96.273170][ T2173] unevictable 0 [ 96.273170][ T2173] slab_reclaimable 0 [ 96.273170][ T2173] slab_unreclaimable 0 [ 96.273170][ T2173] slab 0 [ 96.273170][ T2173] workingset_refault_anon 48 [ 96.273170][ T2173] workingset_refault_file 11008 [ 96.273170][ T2173] workingset_activate_anon 4 [ 96.372635][ T2173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2173,uid=0 [ 96.387769][ T2173] Memory cgroup out of memory: Killed process 2173 (syz.2.567) total-vm:90264kB, anon-rss:1248kB, file-rss:30228kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 97.699828][ T3214] ref_ctr_offset mismatch. inode: 0x2e9 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 97.714414][ T3230] device syzkaller0 entered promiscuous mode [ 98.530643][ T2181] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 98.632929][ T2181] CPU: 1 PID: 2181 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 98.641675][ T2181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.651752][ T2181] Call Trace: [ 98.655075][ T2181] [ 98.658021][ T2181] __dump_stack+0x21/0x30 [ 98.662391][ T2181] dump_stack_lvl+0x110/0x170 [ 98.667083][ T2181] ? show_regs_print_info+0x20/0x20 [ 98.672294][ T2181] ? ___ratelimit+0x40a/0x590 [ 98.676986][ T2181] dump_stack+0x15/0x20 [ 98.681154][ T2181] dump_header+0xd9/0x650 [ 98.685497][ T2181] oom_kill_process+0x1fa/0x2c0 [ 98.690379][ T2181] out_of_memory+0x5b0/0x9c0 [ 98.695019][ T2181] ? unregister_oom_notifier+0x20/0x20 [ 98.700496][ T2181] ? mutex_lock_killable+0x9b/0x1c0 [ 98.705717][ T2181] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 98.712234][ T2181] ? psi_group_change+0xa8c/0x1110 [ 98.717362][ T2181] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 98.722925][ T2181] ? mem_cgroup_oom_trylock+0x340/0x340 [ 98.728495][ T2181] ? mem_cgroup_iter+0x4bf/0x6c0 [ 98.733448][ T2181] try_charge_memcg+0xef6/0x14e0 [ 98.738423][ T2181] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 98.744246][ T2181] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 98.750076][ T2181] charge_memcg+0x6d/0x1a0 [ 98.754513][ T2181] __mem_cgroup_charge+0x93/0x280 [ 98.759551][ T2181] ? mem_cgroup_calculate_protection+0x520/0x520 [ 98.765916][ T2181] shmem_add_to_page_cache+0x64b/0xc50 [ 98.771393][ T2181] ? put_page+0xb0/0xb0 [ 98.775594][ T2181] ? _raw_spin_lock_irqsave+0x130/0x130 [ 98.781153][ T2181] ? preempt_schedule+0xbc/0xd0 [ 98.786012][ T2181] ? schedule_preempt_disabled+0x20/0x20 [ 98.791660][ T2181] shmem_getpage_gfp+0x1404/0x2250 [ 98.796825][ T2181] shmem_write_begin+0xce/0x1b0 [ 98.801704][ T2181] generic_perform_write+0x2b7/0x690 [ 98.807014][ T2181] ? grab_cache_page_write_begin+0xb0/0xb0 [ 98.812832][ T2181] ? file_remove_privs+0x5c0/0x5c0 [ 98.817960][ T2181] ? rwsem_write_trylock+0x136/0x300 [ 98.823252][ T2181] ? __kasan_check_write+0x14/0x20 [ 98.828379][ T2181] ? clear_nonspinnable+0x60/0x60 [ 98.833431][ T2181] __generic_file_write_iter+0x268/0x490 [ 98.839106][ T2181] ? generic_write_checks+0x3df/0x480 [ 98.844490][ T2181] generic_file_write_iter+0xa9/0x1d0 [ 98.849878][ T2181] __kernel_write+0x521/0x970 [ 98.854584][ T2181] ? vfs_read+0xc20/0xc20 [ 98.858927][ T2181] ? __get_user_pages+0xf85/0x10c0 [ 98.864059][ T2181] ? populate_vma_page_range+0xf0/0xf0 [ 98.869534][ T2181] __dump_emit+0x255/0x380 [ 98.873979][ T2181] ? wait_for_dump_helpers+0x380/0x380 [ 98.879480][ T2181] ? fault_in_readable+0x160/0x160 [ 98.884625][ T2181] dump_emit+0x36a/0x3d0 [ 98.888888][ T2181] dump_user_range+0x86/0x1c0 [ 98.893586][ T2181] elf_core_dump+0x2aa4/0x2ff0 [ 98.898382][ T2181] ? load_elf_binary+0x2910/0x2910 [ 98.903512][ T2181] ? __kmalloc+0x13d/0x2c0 [ 98.907943][ T2181] ? kvmalloc_node+0x23c/0x320 [ 98.912726][ T2181] do_coredump+0x13c2/0x27d0 [ 98.917371][ T2181] ? simple_acl_create+0x1c0/0x1c0 [ 98.922507][ T2181] ? debug_smp_processor_id+0x17/0x20 [ 98.927899][ T2181] ? ____kasan_slab_free+0x130/0x160 [ 98.933212][ T2181] ? get_signal+0xb17/0x1430 [ 98.937816][ T2181] ? kmem_cache_free+0x100/0x320 [ 98.942778][ T2181] get_signal+0x387/0x1430 [ 98.947231][ T2181] arch_do_signal_or_restart+0xe2/0x1100 [ 98.952876][ T2181] ? get_sigframe_size+0x10/0x10 [ 98.957824][ T2181] ? force_sig_info_to_task+0x306/0x3b0 [ 98.963378][ T2181] ? force_sig+0xcc/0x120 [ 98.967718][ T2181] ? send_sig+0x70/0x70 [ 98.971880][ T2181] exit_to_user_mode_loop+0xa7/0xe0 [ 98.977084][ T2181] exit_to_user_mode_prepare+0x87/0xd0 [ 98.982553][ T2181] irqentry_exit_to_user_mode+0x9/0x10 [ 98.988020][ T2181] irqentry_exit+0x12/0x40 [ 98.992444][ T2181] exc_general_protection+0x1e4/0x270 [ 98.997827][ T2181] ? debug_smp_processor_id+0x17/0x20 [ 99.003213][ T2181] asm_exc_general_protection+0x27/0x30 [ 99.008772][ T2181] RIP: 0033:0x7f860fd2f021 [ 99.013197][ T2181] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 99.032813][ T2181] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 99.038889][ T2181] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 99.046870][ T2181] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 99.054846][ T2181] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 99.062830][ T2181] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 99.070807][ T2181] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 99.078814][ T2181] [ 99.238781][ T2181] memory: usage 307200kB, limit 307200kB, failcnt 30869 [ 99.245800][ T2181] memory+swap: usage 430744kB, limit 9007199254740988kB, failcnt 0 [ 99.254004][ T2181] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 99.271173][ T2181] Memory cgroup stats for /syz2: [ 99.271314][ T2181] anon 208896 [ 99.271314][ T2181] file 312893440 [ 99.271314][ T2181] kernel_stack 0 [ 99.271314][ T2181] pagetables 0 [ 99.271314][ T2181] percpu 0 [ 99.271314][ T2181] sock 0 [ 99.271314][ T2181] shmem 312889344 [ 99.271314][ T2181] file_mapped 0 [ 99.271314][ T2181] file_dirty 0 [ 99.271314][ T2181] file_writeback 0 [ 99.271314][ T2181] swapcached 197820416 [ 99.271314][ T2181] anon_thp 0 [ 99.271314][ T2181] file_thp 0 [ 99.271314][ T2181] shmem_thp 0 [ 99.271314][ T2181] inactive_anon 236867584 [ 99.271314][ T2181] active_anon 77701120 [ 99.271314][ T2181] inactive_file 4096 [ 99.271314][ T2181] active_file 0 [ 99.271314][ T2181] unevictable 0 [ 99.271314][ T2181] slab_reclaimable 0 [ 99.271314][ T2181] slab_unreclaimable 0 [ 99.271314][ T2181] slab 0 [ 99.271314][ T2181] workingset_refault_anon 48 [ 99.271314][ T2181] workingset_refault_file 12020 [ 99.271314][ T2181] workingset_activate_anon 4 [ 99.406389][ T3277] ref_ctr_offset mismatch. inode: 0x49a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 99.425915][ T2181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2142,uid=0 [ 99.474900][ T2181] Memory cgroup out of memory: Killed process 2142 (syz.2.567) total-vm:90264kB, anon-rss:1252kB, file-rss:29360kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 99.544792][ T2149] syz.2.567 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.605334][ T2149] CPU: 1 PID: 2149 Comm: syz.2.567 Tainted: G W syzkaller #0 [ 99.614072][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.624147][ T2149] Call Trace: [ 99.627446][ T2149] [ 99.630388][ T2149] __dump_stack+0x21/0x30 [ 99.634741][ T2149] dump_stack_lvl+0x110/0x170 [ 99.639435][ T2149] ? show_regs_print_info+0x20/0x20 [ 99.644655][ T2149] ? ___ratelimit+0x40a/0x590 [ 99.649352][ T2149] dump_stack+0x15/0x20 [ 99.653574][ T2149] dump_header+0xd9/0x650 [ 99.657915][ T2149] oom_kill_process+0x1fa/0x2c0 [ 99.662776][ T2149] out_of_memory+0x5b0/0x9c0 [ 99.667396][ T2149] ? unregister_oom_notifier+0x20/0x20 [ 99.672856][ T2149] ? mutex_lock_killable+0x114/0x1c0 [ 99.678149][ T2149] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 99.684661][ T2149] ? psi_group_change+0xa8c/0x1110 [ 99.689792][ T2149] mem_cgroup_out_of_memory+0x2b7/0x3b0 [ 99.695359][ T2149] ? mem_cgroup_oom_trylock+0x340/0x340 [ 99.700926][ T2149] ? mem_cgroup_iter+0x4bf/0x6c0 [ 99.705872][ T2149] try_charge_memcg+0xef6/0x14e0 [ 99.710834][ T2149] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 99.716655][ T2149] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 99.722464][ T2149] charge_memcg+0x6d/0x1a0 [ 99.726894][ T2149] __mem_cgroup_charge+0x93/0x280 [ 99.731924][ T2149] ? mem_cgroup_calculate_protection+0x520/0x520 [ 99.738258][ T2149] shmem_add_to_page_cache+0x64b/0xc50 [ 99.743731][ T2149] ? put_page+0xb0/0xb0 [ 99.747887][ T2149] ? _raw_spin_lock_irqsave+0x130/0x130 [ 99.753439][ T2149] shmem_getpage_gfp+0x1404/0x2250 [ 99.758590][ T2149] shmem_write_begin+0xce/0x1b0 [ 99.763474][ T2149] generic_perform_write+0x2b7/0x690 [ 99.768870][ T2149] ? grab_cache_page_write_begin+0xb0/0xb0 [ 99.774781][ T2149] ? file_remove_privs+0x5c0/0x5c0 [ 99.779900][ T2149] ? rwsem_write_trylock+0x136/0x300 [ 99.785214][ T2149] ? __kasan_check_write+0x14/0x20 [ 99.790338][ T2149] ? clear_nonspinnable+0x60/0x60 [ 99.795396][ T2149] __generic_file_write_iter+0x268/0x490 [ 99.801026][ T2149] ? generic_write_checks+0x3df/0x480 [ 99.806402][ T2149] generic_file_write_iter+0xa9/0x1d0 [ 99.811781][ T2149] __kernel_write+0x521/0x970 [ 99.816468][ T2149] ? vfs_read+0xc20/0xc20 [ 99.820816][ T2149] ? __get_user_pages+0xf85/0x10c0 [ 99.826023][ T2149] ? populate_vma_page_range+0xf0/0xf0 [ 99.831484][ T2149] __dump_emit+0x255/0x380 [ 99.835904][ T2149] ? wait_for_dump_helpers+0x380/0x380 [ 99.841369][ T2149] ? fault_in_readable+0x160/0x160 [ 99.846495][ T2149] dump_emit+0x36a/0x3d0 [ 99.850759][ T2149] dump_user_range+0x86/0x1c0 [ 99.855438][ T2149] elf_core_dump+0x2aa4/0x2ff0 [ 99.860214][ T2149] ? load_elf_binary+0x2910/0x2910 [ 99.865336][ T2149] ? __kmalloc+0x13d/0x2c0 [ 99.869794][ T2149] ? kvmalloc_node+0x23c/0x320 [ 99.874583][ T2149] do_coredump+0x13c2/0x27d0 [ 99.879197][ T2149] ? simple_acl_create+0x1c0/0x1c0 [ 99.884320][ T2149] ? debug_smp_processor_id+0x17/0x20 [ 99.889703][ T2149] ? ____kasan_slab_free+0x130/0x160 [ 99.894998][ T2149] ? get_signal+0xb17/0x1430 [ 99.899606][ T2149] ? kmem_cache_free+0x100/0x320 [ 99.904648][ T2149] get_signal+0x387/0x1430 [ 99.909078][ T2149] arch_do_signal_or_restart+0xe2/0x1100 [ 99.914714][ T2149] ? get_sigframe_size+0x10/0x10 [ 99.919652][ T2149] ? force_sig_info_to_task+0x306/0x3b0 [ 99.925208][ T2149] ? force_sig+0xcc/0x120 [ 99.929571][ T2149] ? send_sig+0x70/0x70 [ 99.933742][ T2149] exit_to_user_mode_loop+0xa7/0xe0 [ 99.938940][ T2149] exit_to_user_mode_prepare+0x87/0xd0 [ 99.944399][ T2149] irqentry_exit_to_user_mode+0x9/0x10 [ 99.949861][ T2149] irqentry_exit+0x12/0x40 [ 99.954295][ T2149] exc_general_protection+0x1e4/0x270 [ 99.959687][ T2149] ? debug_smp_processor_id+0x17/0x20 [ 99.965069][ T2149] asm_exc_general_protection+0x27/0x30 [ 99.970625][ T2149] RIP: 0033:0x7f860fd2f021 [ 99.975040][ T2149] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 99.994645][ T2149] RSP: 002b:0000200000000070 EFLAGS: 00010217 [ 100.000715][ T2149] RAX: 0000000000000000 RBX: 00007f860ffb7090 RCX: 00007f860fd2f019 [ 100.008696][ T2149] RDX: 0000200000000080 RSI: 0000200000000070 RDI: 0000000020000000 [ 100.016668][ T2149] RBP: 00007f860fdc600c R08: 0000200000000100 R09: 0000200000000100 [ 100.024643][ T2149] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 100.032620][ T2149] R13: 00007f860ffb7128 R14: 00007f860ffb7090 R15: 00007ffe85661848 [ 100.040635][ T2149] [ 100.366898][ T2149] memory: usage 306116kB, limit 307200kB, failcnt 30967 [ 100.373888][ T2149] memory+swap: usage 419992kB, limit 9007199254740988kB, failcnt 0 [ 100.382046][ T2149] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 100.395824][ T2149] Memory cgroup stats for /syz2: [ 100.395998][ T2149] anon 208896 [ 100.395998][ T2149] file 311459840 [ 100.395998][ T2149] kernel_stack 0 [ 100.395998][ T2149] pagetables 0 [ 100.395998][ T2149] percpu 0 [ 100.395998][ T2149] sock 0 [ 100.395998][ T2149] shmem 311459840 [ 100.395998][ T2149] file_mapped 0 [ 100.395998][ T2149] file_dirty 0 [ 100.395998][ T2149] file_writeback 0 [ 100.395998][ T2149] swapcached 198389760 [ 100.395998][ T2149] anon_thp 0 [ 100.395998][ T2149] file_thp 0 [ 100.395998][ T2149] shmem_thp 0 [ 100.395998][ T2149] inactive_anon 236519424 [ 100.395998][ T2149] active_anon 76943360 [ 100.395998][ T2149] inactive_file 0 [ 100.395998][ T2149] active_file 0 [ 100.395998][ T2149] unevictable 0 [ 100.395998][ T2149] slab_reclaimable 0 [ 100.395998][ T2149] slab_unreclaimable 0 [ 100.395998][ T2149] slab 0 [ 100.395998][ T2149] workingset_refault_anon 48 [ 100.395998][ T2149] workingset_refault_file 12020 [ 100.395998][ T2149] workingset_activate_anon 4 [ 100.504687][ T2149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.567,pid=2140,uid=0 [ 100.532211][ T2149] Memory cgroup out of memory: Killed process 2140 (syz.2.567) total-vm:90264kB, anon-rss:1264kB, file-rss:29248kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 100.582501][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.589754][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.764870][ T3303] device bridge_slave_1 left promiscuous mode [ 100.789442][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.849038][ T3303] device bridge_slave_0 left promiscuous mode [ 100.891868][ T3314] ref_ctr_offset mismatch. inode: 0x4af offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 100.916758][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.991998][ T30] audit: type=1400 audit(1785803216.769:134): avc: denied { create } for pid=3316 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.543237][ T3335] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 101.570200][ T3335] syzkaller0: owner set to 0 [ 101.610046][ T3334] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 104.125561][ T3386] device syzkaller0 entered promiscuous mode [ 105.618388][ T3416] device syzkaller0 entered promiscuous mode [ 105.744409][ T3418] device syzkaller0 entered promiscuous mode [ 107.182049][ T3463] FAULT_INJECTION: forcing a failure. [ 107.182049][ T3463] name failslab, interval 1, probability 0, space 0, times 0 [ 107.295511][ T3463] CPU: 1 PID: 3463 Comm: syz.2.989 Tainted: G W syzkaller #0 [ 107.304253][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.314331][ T3463] Call Trace: [ 107.317618][ T3463] [ 107.320571][ T3463] __dump_stack+0x21/0x30 [ 107.324927][ T3463] dump_stack_lvl+0x110/0x170 [ 107.329632][ T3463] ? show_regs_print_info+0x20/0x20 [ 107.334851][ T3463] ? avc_has_perm_noaudit+0x30a/0x490 [ 107.340239][ T3463] dump_stack+0x15/0x20 [ 107.344413][ T3463] should_fail+0x3ab/0x500 [ 107.348869][ T3463] __should_failslab+0xa4/0xe0 [ 107.353655][ T3463] should_failslab+0x9/0x20 [ 107.358172][ T3463] slab_pre_alloc_hook+0x39/0xd0 [ 107.363148][ T3463] ? dup_fd+0x55/0xad0 [ 107.367243][ T3463] kmem_cache_alloc+0x44/0x260 [ 107.372022][ T3463] dup_fd+0x55/0xad0 [ 107.375939][ T3463] ? put_ctx+0xa2/0x190 [ 107.380110][ T3463] ? perf_event_init_task+0x47c/0x4c0 [ 107.385505][ T3463] copy_files+0x76/0xe0 [ 107.389672][ T3463] copy_process+0x10d4/0x3280 [ 107.394381][ T3463] ? __kasan_check_write+0x14/0x20 [ 107.399514][ T3463] ? __pidfd_prepare+0x150/0x150 [ 107.404480][ T3463] kernel_clone+0x233/0x960 [ 107.408999][ T3463] ? create_io_thread+0x170/0x170 [ 107.414037][ T3463] ? __kasan_check_write+0x14/0x20 [ 107.419159][ T3463] ? mutex_unlock+0x8f/0x230 [ 107.423794][ T3463] __x64_sys_clone+0x198/0x210 [ 107.428578][ T3463] ? __kasan_check_write+0x14/0x20 [ 107.433702][ T3463] ? __ia32_sys_vfork+0x130/0x130 [ 107.438755][ T3463] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 107.444861][ T3463] x64_sys_call+0x41f/0x9a0 [ 107.449407][ T3463] do_syscall_64+0x4c/0xa0 [ 107.453878][ T3463] ? clear_bhb_loop+0x50/0xa0 [ 107.458568][ T3463] ? clear_bhb_loop+0x50/0xa0 [ 107.463256][ T3463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.469189][ T3463] RIP: 0033:0x7f860fd2f019 [ 107.473646][ T3463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.493274][ T3463] RSP: 002b:00007f860e787fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 107.501701][ T3463] RAX: ffffffffffffffda RBX: 00007f860ffb6fa0 RCX: 00007f860fd2f019 [ 107.509687][ T3463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0126080 [ 107.517679][ T3463] RBP: 00007f860e788090 R08: 0000000000000000 R09: 0000000000000000 [ 107.525671][ T3463] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 107.533651][ T3463] R13: 00007f860ffb7038 R14: 00007f860ffb6fa0 R15: 00007ffe85661848 [ 107.541635][ T3463] [ 107.614410][ T3471] device syzkaller0 entered promiscuous mode [ 107.892908][ T3494] device syzkaller0 entered promiscuous mode [ 108.153677][ T3503] FAULT_INJECTION: forcing a failure. [ 108.153677][ T3503] name failslab, interval 1, probability 0, space 0, times 0 [ 108.210897][ T3503] CPU: 1 PID: 3503 Comm: syz.3.1003 Tainted: G W syzkaller #0 [ 108.219702][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.229776][ T3503] Call Trace: [ 108.233068][ T3503] [ 108.236012][ T3503] __dump_stack+0x21/0x30 [ 108.240364][ T3503] dump_stack_lvl+0x110/0x170 [ 108.245064][ T3503] ? show_regs_print_info+0x20/0x20 [ 108.250281][ T3503] ? avc_denied+0x1b0/0x1b0 [ 108.254811][ T3503] dump_stack+0x15/0x20 [ 108.258975][ T3503] should_fail+0x3ab/0x500 [ 108.263409][ T3503] __should_failslab+0xa4/0xe0 [ 108.268188][ T3503] should_failslab+0x9/0x20 [ 108.272712][ T3503] slab_pre_alloc_hook+0x39/0xd0 [ 108.277668][ T3503] ? vm_area_dup+0x26/0x210 [ 108.282189][ T3503] kmem_cache_alloc+0x44/0x260 [ 108.286970][ T3503] vm_area_dup+0x26/0x210 [ 108.291312][ T3503] copy_mm+0x963/0x13a0 [ 108.295478][ T3503] ? copy_signal+0x5f0/0x5f0 [ 108.300086][ T3503] ? __init_rwsem+0xfc/0x1d0 [ 108.304691][ T3503] ? copy_signal+0x4cc/0x5f0 [ 108.309291][ T3503] copy_process+0x1184/0x3280 [ 108.313989][ T3503] ? __kasan_check_write+0x14/0x20 [ 108.319117][ T3503] ? __pidfd_prepare+0x150/0x150 [ 108.324083][ T3503] kernel_clone+0x233/0x960 [ 108.328603][ T3503] ? create_io_thread+0x170/0x170 [ 108.333640][ T3503] ? __kasan_check_write+0x14/0x20 [ 108.338767][ T3503] ? mutex_unlock+0x8f/0x230 [ 108.343376][ T3503] __x64_sys_clone+0x198/0x210 [ 108.348147][ T3503] ? __kasan_check_write+0x14/0x20 [ 108.353267][ T3503] ? __ia32_sys_vfork+0x130/0x130 [ 108.358303][ T3503] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 108.364377][ T3503] x64_sys_call+0x41f/0x9a0 [ 108.368891][ T3503] do_syscall_64+0x4c/0xa0 [ 108.373334][ T3503] ? clear_bhb_loop+0x50/0xa0 [ 108.378027][ T3503] ? clear_bhb_loop+0x50/0xa0 [ 108.382717][ T3503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.388631][ T3503] RIP: 0033:0x7fa5a3325019 [ 108.393050][ T3503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.412779][ T3503] RSP: 002b:00007fa5a1d7dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 108.421203][ T3503] RAX: ffffffffffffffda RBX: 00007fa5a35acfa0 RCX: 00007fa5a3325019 [ 108.429191][ T3503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 108.437173][ T3503] RBP: 00007fa5a1d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 108.445151][ T3503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 108.453131][ T3503] R13: 00007fa5a35ad038 R14: 00007fa5a35acfa0 R15: 00007ffe61430c98 [ 108.461114][ T3503] [ 108.740105][ T3512] device syzkaller0 entered promiscuous mode [ 108.799157][ T3515] device syzkaller0 entered promiscuous mode [ 108.856897][ T3513] device syzkaller0 entered promiscuous mode [ 109.288681][ T3559] FAULT_INJECTION: forcing a failure. [ 109.288681][ T3559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.344059][ T3559] CPU: 0 PID: 3559 Comm: syz.2.1018 Tainted: G W syzkaller #0 [ 109.352865][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.362957][ T3559] Call Trace: [ 109.366254][ T3559] [ 109.369202][ T3559] __dump_stack+0x21/0x30 [ 109.373560][ T3559] dump_stack_lvl+0x110/0x170 [ 109.378252][ T3559] ? show_regs_print_info+0x20/0x20 [ 109.383505][ T3559] dump_stack+0x15/0x20 [ 109.387685][ T3559] should_fail+0x3ab/0x500 [ 109.392126][ T3559] should_fail_usercopy+0x1a/0x20 [ 109.397168][ T3559] _copy_to_user+0x20/0x90 [ 109.401598][ T3559] simple_read_from_buffer+0xe9/0x160 [ 109.406993][ T3559] proc_fail_nth_read+0x1a6/0x220 [ 109.412084][ T3559] ? proc_fault_inject_write+0x310/0x310 [ 109.417744][ T3559] ? security_file_permission+0x8f/0xa0 [ 109.423327][ T3559] ? proc_fault_inject_write+0x310/0x310 [ 109.428988][ T3559] vfs_read+0x28c/0xc20 [ 109.433180][ T3559] ? kernel_read+0x1f0/0x1f0 [ 109.437784][ T3559] ? irqentry_exit+0x37/0x40 [ 109.442375][ T3559] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 109.448178][ T3559] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 109.454341][ T3559] ? vfs_read+0x6/0xc20 [ 109.458498][ T3559] ksys_read+0x14a/0x260 [ 109.462762][ T3559] ? vfs_write+0xfd0/0xfd0 [ 109.467196][ T3559] ? debug_smp_processor_id+0x17/0x20 [ 109.472571][ T3559] __x64_sys_read+0x7b/0x90 [ 109.477091][ T3559] x64_sys_call+0x96d/0x9a0 [ 109.481609][ T3559] do_syscall_64+0x4c/0xa0 [ 109.486044][ T3559] ? clear_bhb_loop+0x50/0xa0 [ 109.490729][ T3559] ? clear_bhb_loop+0x50/0xa0 [ 109.495417][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.501317][ T3559] RIP: 0033:0x7f860fcef84e [ 109.505741][ T3559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.525355][ T3559] RSP: 002b:00007f860e787fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.533776][ T3559] RAX: ffffffffffffffda RBX: 00007f860e7886c0 RCX: 00007f860fcef84e [ 109.541787][ T3559] RDX: 000000000000000f RSI: 00007f860e7880a0 RDI: 0000000000000005 [ 109.549760][ T3559] RBP: 00007f860e788090 R08: 0000000000000000 R09: 0000000000000000 [ 109.557743][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.565720][ T3559] R13: 00007f860ffb7038 R14: 00007f860ffb6fa0 R15: 00007ffe85661848 [ 109.573707][ T3559] [ 110.732257][ T3623] ref_ctr_offset mismatch. inode: 0x375 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 111.211548][ T3646] device syzkaller0 entered promiscuous mode [ 111.511499][ T3660] device syzkaller0 entered promiscuous mode [ 112.759592][ T3716] ref_ctr_offset mismatch. inode: 0x538 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 112.942928][ T3733] device syzkaller0 entered promiscuous mode [ 113.290885][ T30] audit: type=1400 audit(1785803229.069:135): avc: denied { ioctl } for pid=3740 comm="syz.2.1080" path="pid:[4026532285]" dev="nsfs" ino=4026532285 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.471991][ T3818] ref_ctr_offset mismatch. inode: 0x4c8 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 114.501234][ T3820] FAULT_INJECTION: forcing a failure. [ 114.501234][ T3820] name failslab, interval 1, probability 0, space 0, times 0 [ 114.550083][ T3820] CPU: 1 PID: 3820 Comm: syz.4.1108 Tainted: G W syzkaller #0 [ 114.558897][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.568964][ T3820] Call Trace: [ 114.572242][ T3820] [ 114.575170][ T3820] __dump_stack+0x21/0x30 [ 114.579516][ T3820] dump_stack_lvl+0x110/0x170 [ 114.584201][ T3820] ? show_regs_print_info+0x20/0x20 [ 114.589411][ T3820] dump_stack+0x15/0x20 [ 114.593570][ T3820] should_fail+0x3ab/0x500 [ 114.597992][ T3820] __should_failslab+0xa4/0xe0 [ 114.602757][ T3820] should_failslab+0x9/0x20 [ 114.607259][ T3820] slab_pre_alloc_hook+0x39/0xd0 [ 114.612197][ T3820] ? anon_vma_clone+0xb7/0x4c0 [ 114.616965][ T3820] kmem_cache_alloc+0x44/0x260 [ 114.621783][ T3820] anon_vma_clone+0xb7/0x4c0 [ 114.626394][ T3820] anon_vma_fork+0x8f/0x520 [ 114.630903][ T3820] ? anon_vma_name+0x43/0x70 [ 114.635488][ T3820] copy_mm+0x9f9/0x13a0 [ 114.639659][ T3820] ? copy_signal+0x5f0/0x5f0 [ 114.644253][ T3820] ? __init_rwsem+0xfc/0x1d0 [ 114.648846][ T3820] ? copy_signal+0x4cc/0x5f0 [ 114.653442][ T3820] copy_process+0x1184/0x3280 [ 114.658125][ T3820] ? __kasan_check_write+0x14/0x20 [ 114.663245][ T3820] ? __pidfd_prepare+0x150/0x150 [ 114.668200][ T3820] kernel_clone+0x233/0x960 [ 114.672707][ T3820] ? create_io_thread+0x170/0x170 [ 114.677731][ T3820] ? __kasan_check_write+0x14/0x20 [ 114.682843][ T3820] ? mutex_unlock+0x8f/0x230 [ 114.687434][ T3820] __x64_sys_clone+0x198/0x210 [ 114.692202][ T3820] ? __kasan_check_write+0x14/0x20 [ 114.697343][ T3820] ? __ia32_sys_vfork+0x130/0x130 [ 114.702374][ T3820] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 114.708441][ T3820] x64_sys_call+0x41f/0x9a0 [ 114.712942][ T3820] do_syscall_64+0x4c/0xa0 [ 114.717364][ T3820] ? clear_bhb_loop+0x50/0xa0 [ 114.722046][ T3820] ? clear_bhb_loop+0x50/0xa0 [ 114.726769][ T3820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.732687][ T3820] RIP: 0033:0x7f11fbe1f019 [ 114.737145][ T3820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.756754][ T3820] RSP: 002b:00007f11fa877fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 114.765181][ T3820] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 114.773159][ T3820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 114.781162][ T3820] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 114.789139][ T3820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 114.797113][ T3820] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 114.805091][ T3820] [ 114.900799][ T3837] device syzkaller0 entered promiscuous mode [ 115.149173][ T3843] device syzkaller0 entered promiscuous mode [ 115.921894][ T3886] device syzkaller0 entered promiscuous mode [ 115.948322][ T3894] device macsec0 entered promiscuous mode [ 115.993301][ T3888] device veth1_macvtap left promiscuous mode [ 116.013631][ T3888] device macsec0 left promiscuous mode [ 116.366352][ T3918] ref_ctr_offset mismatch. inode: 0x58c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 116.450283][ T3921] ref_ctr_offset mismatch. inode: 0x4e6 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 116.693196][ T3934] device syzkaller0 entered promiscuous mode [ 116.754528][ T3936] device syzkaller0 entered promiscuous mode [ 116.942527][ T3946] device syzkaller0 entered promiscuous mode [ 117.605743][ T30] audit: type=1400 audit(1785803233.379:137): avc: denied { create } for pid=3992 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.655896][ T30] audit: type=1400 audit(1785803233.379:136): avc: denied { create } for pid=3992 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.834180][ T4007] device syzkaller0 entered promiscuous mode [ 118.076861][ T4032] device syzkaller0 entered promiscuous mode [ 118.130886][ T4030] device syzkaller0 entered promiscuous mode [ 118.369972][ T30] audit: type=1400 audit(1785803234.149:138): avc: denied { create } for pid=4051 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.003427][ T4064] ref_ctr_offset mismatch. inode: 0x406 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 119.434464][ T4093] FAULT_INJECTION: forcing a failure. [ 119.434464][ T4093] name failslab, interval 1, probability 0, space 0, times 0 [ 119.491143][ T4093] CPU: 1 PID: 4093 Comm: syz.1.1200 Tainted: G W syzkaller #0 [ 119.499965][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.510050][ T4093] Call Trace: [ 119.513346][ T4093] [ 119.516283][ T4093] __dump_stack+0x21/0x30 [ 119.520626][ T4093] dump_stack_lvl+0x110/0x170 [ 119.525336][ T4093] ? show_regs_print_info+0x20/0x20 [ 119.530568][ T4093] dump_stack+0x15/0x20 [ 119.534749][ T4093] should_fail+0x3ab/0x500 [ 119.539177][ T4093] __should_failslab+0xa4/0xe0 [ 119.543966][ T4093] should_failslab+0x9/0x20 [ 119.548485][ T4093] slab_pre_alloc_hook+0x39/0xd0 [ 119.553445][ T4093] ? anon_vma_fork+0x1ff/0x520 [ 119.558217][ T4093] kmem_cache_alloc+0x44/0x260 [ 119.563006][ T4093] anon_vma_fork+0x1ff/0x520 [ 119.567611][ T4093] copy_mm+0x9f9/0x13a0 [ 119.571782][ T4093] ? copy_signal+0x5f0/0x5f0 [ 119.576385][ T4093] ? __init_rwsem+0xfc/0x1d0 [ 119.580992][ T4093] ? copy_signal+0x4cc/0x5f0 [ 119.585597][ T4093] copy_process+0x1184/0x3280 [ 119.590298][ T4093] ? __kasan_check_write+0x14/0x20 [ 119.595430][ T4093] ? __pidfd_prepare+0x150/0x150 [ 119.600396][ T4093] kernel_clone+0x233/0x960 [ 119.604923][ T4093] ? create_io_thread+0x170/0x170 [ 119.609977][ T4093] ? __kasan_check_write+0x14/0x20 [ 119.615109][ T4093] ? mutex_unlock+0x8f/0x230 [ 119.619727][ T4093] __x64_sys_clone+0x198/0x210 [ 119.624517][ T4093] ? __kasan_check_write+0x14/0x20 [ 119.629646][ T4093] ? __ia32_sys_vfork+0x130/0x130 [ 119.634699][ T4093] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 119.640781][ T4093] x64_sys_call+0x41f/0x9a0 [ 119.645294][ T4093] do_syscall_64+0x4c/0xa0 [ 119.649736][ T4093] ? clear_bhb_loop+0x50/0xa0 [ 119.654440][ T4093] ? clear_bhb_loop+0x50/0xa0 [ 119.659175][ T4093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.665082][ T4093] RIP: 0033:0x7f4261f15019 [ 119.669512][ T4093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.689141][ T4093] RSP: 002b:00007f426096dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 119.697572][ T4093] RAX: ffffffffffffffda RBX: 00007f426219cfa0 RCX: 00007f4261f15019 [ 119.705562][ T4093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 119.713556][ T4093] RBP: 00007f426096e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.721578][ T4093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 119.729659][ T4093] R13: 00007f426219d038 R14: 00007f426219cfa0 R15: 00007ffd4416c888 [ 119.737665][ T4093] [ 120.051015][ T4134] device syzkaller0 entered promiscuous mode [ 120.153570][ T4144] device syzkaller0 entered promiscuous mode [ 120.462490][ T4155] device syzkaller0 entered promiscuous mode [ 120.715024][ T4171] device syzkaller0 entered promiscuous mode [ 120.750807][ T4176] device syzkaller0 entered promiscuous mode [ 121.456570][ T4204] device syzkaller0 entered promiscuous mode [ 121.552886][ T4208] device syzkaller0 entered promiscuous mode [ 121.677317][ T4223] device syzkaller0 entered promiscuous mode [ 122.147522][ T4250] device syzkaller0 entered promiscuous mode [ 122.685708][ T4274] device syzkaller0 entered promiscuous mode [ 123.095532][ T4315] device syzkaller0 entered promiscuous mode [ 123.167700][ T4324] device syzkaller0 entered promiscuous mode [ 123.652247][ T4349] FAULT_INJECTION: forcing a failure. [ 123.652247][ T4349] name failslab, interval 1, probability 0, space 0, times 0 [ 123.785370][ T4349] CPU: 0 PID: 4349 Comm: syz.0.1297 Tainted: G W syzkaller #0 [ 123.794187][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.804260][ T4349] Call Trace: [ 123.807547][ T4349] [ 123.810494][ T4349] __dump_stack+0x21/0x30 [ 123.814851][ T4349] dump_stack_lvl+0x110/0x170 [ 123.819548][ T4349] ? show_regs_print_info+0x20/0x20 [ 123.824770][ T4349] dump_stack+0x15/0x20 [ 123.828932][ T4349] should_fail+0x3ab/0x500 [ 123.833357][ T4349] __should_failslab+0xa4/0xe0 [ 123.838134][ T4349] should_failslab+0x9/0x20 [ 123.842655][ T4349] slab_pre_alloc_hook+0x39/0xd0 [ 123.847614][ T4349] ? anon_vma_clone+0xb7/0x4c0 [ 123.852392][ T4349] kmem_cache_alloc+0x44/0x260 [ 123.857176][ T4349] anon_vma_clone+0xb7/0x4c0 [ 123.861784][ T4349] anon_vma_fork+0x8f/0x520 [ 123.866295][ T4349] ? anon_vma_name+0x4c/0x70 [ 123.870893][ T4349] copy_mm+0x9f9/0x13a0 [ 123.875081][ T4349] ? copy_signal+0x5f0/0x5f0 [ 123.879681][ T4349] ? __init_rwsem+0xfc/0x1d0 [ 123.884297][ T4349] ? copy_signal+0x4cc/0x5f0 [ 123.888914][ T4349] copy_process+0x1184/0x3280 [ 123.893613][ T4349] ? __kasan_check_write+0x14/0x20 [ 123.898735][ T4349] ? __pidfd_prepare+0x150/0x150 [ 123.903698][ T4349] kernel_clone+0x233/0x960 [ 123.908219][ T4349] ? create_io_thread+0x170/0x170 [ 123.913254][ T4349] ? __kasan_check_write+0x14/0x20 [ 123.918393][ T4349] ? mutex_unlock+0x8f/0x230 [ 123.923010][ T4349] __x64_sys_clone+0x198/0x210 [ 123.927813][ T4349] ? __kasan_check_write+0x14/0x20 [ 123.932937][ T4349] ? __ia32_sys_vfork+0x130/0x130 [ 123.938104][ T4349] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 123.944199][ T4349] x64_sys_call+0x41f/0x9a0 [ 123.948723][ T4349] do_syscall_64+0x4c/0xa0 [ 123.953153][ T4349] ? clear_bhb_loop+0x50/0xa0 [ 123.957841][ T4349] ? clear_bhb_loop+0x50/0xa0 [ 123.962536][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.968456][ T4349] RIP: 0033:0x7faea2948019 [ 123.972886][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.992511][ T4349] RSP: 002b:00007faea13a0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 124.000956][ T4349] RAX: ffffffffffffffda RBX: 00007faea2bcffa0 RCX: 00007faea2948019 [ 124.008939][ T4349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 124.017040][ T4349] RBP: 00007faea13a1090 R08: 0000000000000000 R09: 0000000000000000 [ 124.025026][ T4349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 124.033011][ T4349] R13: 00007faea2bd0038 R14: 00007faea2bcffa0 R15: 00007fffd8940ec8 [ 124.040996][ T4349] [ 124.109566][ T4347] device sit0 entered promiscuous mode [ 124.669553][ T4372] device syzkaller0 entered promiscuous mode [ 124.895059][ T4388] device syzkaller0 entered promiscuous mode [ 125.511405][ T4408] device syzkaller0 entered promiscuous mode [ 126.199233][ T4426] device syzkaller0 entered promiscuous mode [ 126.208218][ T4429] FAULT_INJECTION: forcing a failure. [ 126.208218][ T4429] name failslab, interval 1, probability 0, space 0, times 0 [ 126.271395][ T4429] CPU: 1 PID: 4429 Comm: syz.4.1327 Tainted: G W syzkaller #0 [ 126.280199][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.290283][ T4429] Call Trace: [ 126.293573][ T4429] [ 126.296509][ T4429] __dump_stack+0x21/0x30 [ 126.300855][ T4429] dump_stack_lvl+0x110/0x170 [ 126.305543][ T4429] ? show_regs_print_info+0x20/0x20 [ 126.310762][ T4429] dump_stack+0x15/0x20 [ 126.314924][ T4429] should_fail+0x3ab/0x500 [ 126.319356][ T4429] __should_failslab+0xa4/0xe0 [ 126.324179][ T4429] should_failslab+0x9/0x20 [ 126.328685][ T4429] slab_pre_alloc_hook+0x39/0xd0 [ 126.333637][ T4429] ? anon_vma_clone+0xb7/0x4c0 [ 126.338407][ T4429] kmem_cache_alloc+0x44/0x260 [ 126.343195][ T4429] anon_vma_clone+0xb7/0x4c0 [ 126.347796][ T4429] anon_vma_fork+0x8f/0x520 [ 126.352314][ T4429] ? anon_vma_name+0x4c/0x70 [ 126.356919][ T4429] copy_mm+0x9f9/0x13a0 [ 126.361091][ T4429] ? copy_signal+0x5f0/0x5f0 [ 126.365692][ T4429] ? __init_rwsem+0xfc/0x1d0 [ 126.370304][ T4429] ? copy_signal+0x4cc/0x5f0 [ 126.374916][ T4429] copy_process+0x1184/0x3280 [ 126.379613][ T4429] ? __kasan_check_write+0x14/0x20 [ 126.384747][ T4429] ? __pidfd_prepare+0x150/0x150 [ 126.389699][ T4429] kernel_clone+0x233/0x960 [ 126.394225][ T4429] ? create_io_thread+0x170/0x170 [ 126.399260][ T4429] ? __kasan_check_write+0x14/0x20 [ 126.404379][ T4429] ? mutex_unlock+0x8f/0x230 [ 126.408989][ T4429] __x64_sys_clone+0x198/0x210 [ 126.413776][ T4429] ? __kasan_check_write+0x14/0x20 [ 126.418907][ T4429] ? __ia32_sys_vfork+0x130/0x130 [ 126.423963][ T4429] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 126.430044][ T4429] x64_sys_call+0x41f/0x9a0 [ 126.434566][ T4429] do_syscall_64+0x4c/0xa0 [ 126.438992][ T4429] ? clear_bhb_loop+0x50/0xa0 [ 126.443678][ T4429] ? clear_bhb_loop+0x50/0xa0 [ 126.448365][ T4429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.454268][ T4429] RIP: 0033:0x7f11fbe1f019 [ 126.458690][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.478310][ T4429] RSP: 002b:00007f11fa877fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 126.486732][ T4429] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 126.494709][ T4429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 126.502694][ T4429] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 126.510683][ T4429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 126.518671][ T4429] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 126.526669][ T4429] [ 126.934086][ T4454] device syzkaller0 entered promiscuous mode [ 128.198571][ T4508] device syzkaller0 entered promiscuous mode [ 128.245002][ T4520] FAULT_INJECTION: forcing a failure. [ 128.245002][ T4520] name failslab, interval 1, probability 0, space 0, times 0 [ 128.262673][ T4520] CPU: 1 PID: 4520 Comm: syz.4.1360 Tainted: G W syzkaller #0 [ 128.271475][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.281537][ T4520] Call Trace: [ 128.284826][ T4520] [ 128.287775][ T4520] __dump_stack+0x21/0x30 [ 128.292131][ T4520] dump_stack_lvl+0x110/0x170 [ 128.296854][ T4520] ? show_regs_print_info+0x20/0x20 [ 128.302081][ T4520] dump_stack+0x15/0x20 [ 128.306280][ T4520] should_fail+0x3ab/0x500 [ 128.310722][ T4520] __should_failslab+0xa4/0xe0 [ 128.315512][ T4520] should_failslab+0x9/0x20 [ 128.320043][ T4520] slab_pre_alloc_hook+0x39/0xd0 [ 128.325004][ T4520] ? anon_vma_fork+0xf8/0x520 [ 128.329696][ T4520] kmem_cache_alloc+0x44/0x260 [ 128.334483][ T4520] anon_vma_fork+0xf8/0x520 [ 128.338995][ T4520] ? anon_vma_name+0x43/0x70 [ 128.343598][ T4520] copy_mm+0x9f9/0x13a0 [ 128.347766][ T4520] ? copy_signal+0x5f0/0x5f0 [ 128.352358][ T4520] ? __init_rwsem+0xfc/0x1d0 [ 128.356977][ T4520] ? copy_signal+0x4cc/0x5f0 [ 128.361570][ T4520] copy_process+0x1184/0x3280 [ 128.366264][ T4520] ? __kasan_check_write+0x14/0x20 [ 128.371376][ T4520] ? __pidfd_prepare+0x150/0x150 [ 128.376315][ T4520] kernel_clone+0x233/0x960 [ 128.380824][ T4520] ? create_io_thread+0x170/0x170 [ 128.385874][ T4520] ? __kasan_check_write+0x14/0x20 [ 128.390985][ T4520] ? mutex_unlock+0x8f/0x230 [ 128.395579][ T4520] __x64_sys_clone+0x198/0x210 [ 128.400351][ T4520] ? __kasan_check_write+0x14/0x20 [ 128.405476][ T4520] ? __ia32_sys_vfork+0x130/0x130 [ 128.410519][ T4520] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 128.416634][ T4520] x64_sys_call+0x41f/0x9a0 [ 128.421166][ T4520] do_syscall_64+0x4c/0xa0 [ 128.425630][ T4520] ? clear_bhb_loop+0x50/0xa0 [ 128.430314][ T4520] ? clear_bhb_loop+0x50/0xa0 [ 128.435010][ T4520] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.440913][ T4520] RIP: 0033:0x7f11fbe1f019 [ 128.445334][ T4520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.464946][ T4520] RSP: 002b:00007f11fa877fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 128.473361][ T4520] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 128.481339][ T4520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 128.489339][ T4520] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 128.497344][ T4520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 128.505319][ T4520] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 128.513298][ T4520] [ 128.542027][ T4520] ------------[ cut here ]------------ [ 128.547608][ T4520] refcount_t: underflow; use-after-free. [ 128.563487][ T4520] WARNING: CPU: 1 PID: 4520 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 128.576645][ T4520] Modules linked in: [ 128.582373][ T4520] CPU: 1 PID: 4520 Comm: syz.4.1360 Tainted: G W syzkaller #0 [ 128.595605][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.619873][ T4520] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 128.629387][ T4520] Code: 04 01 48 c7 c7 00 49 63 85 e8 ac 67 5a 02 0f 0b eb c3 e8 43 80 19 ff c6 05 00 f5 95 04 01 48 c7 c7 60 49 63 85 e8 90 67 5a 02 <0f> 0b eb a7 e8 27 80 19 ff c6 05 e1 f4 95 04 01 48 c7 c7 a0 48 63 [ 128.670039][ T4520] RSP: 0018:ffffc90000c6f948 EFLAGS: 00010246 [ 128.692963][ T4520] RAX: 22d30e0d8120c700 RBX: 0000000000000003 RCX: ffff88811b7d2780 [ 128.706571][ T4520] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 128.724418][ T4520] RBP: ffffc90000c6f958 R08: ffff8881f7132f3f R09: 1ffff1103ee265e7 [ 128.755903][ T4520] R10: dffffc0000000000 R11: ffffed103ee265e8 R12: 000000008866bd11 [ 128.778821][ T4520] R13: ffff88810deb10a0 R14: 0000000000000003 R15: ffff88812b971058 [ 128.805147][ T4520] FS: 00007f11fa8786c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 128.865703][ T4520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.883223][ T4520] CR2: 00007faea2bd1dac CR3: 00000001264be000 CR4: 00000000003506a0 [ 128.896146][ T4533] device syzkaller0 entered promiscuous mode [ 128.896200][ T4520] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 128.935868][ T4520] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 128.959718][ T4520] Call Trace: [ 128.963064][ T4520] [ 128.975096][ T4520] vm_area_free_no_check+0x132/0x140 [ 128.986129][ T4520] copy_mm+0xe8f/0x13a0 [ 129.005890][ T4520] ? copy_signal+0x5f0/0x5f0 [ 129.010545][ T4520] ? __init_rwsem+0xfc/0x1d0 [ 129.015356][ T4538] device syzkaller0 entered promiscuous mode [ 129.036114][ T4520] ? copy_signal+0x4cc/0x5f0 [ 129.045981][ T4520] copy_process+0x1184/0x3280 [ 129.050781][ T4520] ? __kasan_check_write+0x14/0x20 [ 129.063065][ T4520] ? __pidfd_prepare+0x150/0x150 [ 129.129636][ T4520] kernel_clone+0x233/0x960 [ 129.134215][ T4520] ? create_io_thread+0x170/0x170 [ 129.146489][ T4520] ? __kasan_check_write+0x14/0x20 [ 129.151675][ T4520] ? mutex_unlock+0x8f/0x230 [ 129.156520][ T4520] __x64_sys_clone+0x198/0x210 [ 129.161396][ T4542] device syzkaller0 entered promiscuous mode [ 129.203729][ T4520] ? __kasan_check_write+0x14/0x20 [ 129.237237][ T4520] ? __ia32_sys_vfork+0x130/0x130 [ 129.282169][ T4520] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 129.295893][ T4520] x64_sys_call+0x41f/0x9a0 [ 129.300489][ T4520] do_syscall_64+0x4c/0xa0 [ 129.314358][ T4520] ? clear_bhb_loop+0x50/0xa0 [ 129.328958][ T4520] ? clear_bhb_loop+0x50/0xa0 [ 129.344339][ T4520] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.365181][ T4520] RIP: 0033:0x7f11fbe1f019 [ 129.378540][ T4520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.442469][ T4520] RSP: 002b:00007f11fa877fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 129.495502][ T4520] RAX: ffffffffffffffda RBX: 00007f11fc0a6fa0 RCX: 00007f11fbe1f019 [ 129.540509][ T4520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 129.600727][ T4520] RBP: 00007f11fa878090 R08: 0000000000000000 R09: 0000000000000000 [ 129.631740][ T4520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 129.695964][ T4520] R13: 00007f11fc0a7038 R14: 00007f11fc0a6fa0 R15: 00007ffd57a1d128 [ 129.745275][ T4520] [ 129.760435][ T4520] ---[ end trace 82054134c60d135f ]--- [ 129.863476][ T1208] ================================================================== [ 129.871686][ T1208] BUG: KASAN: use-after-free in vma_interval_tree_augment_rotate+0xb1/0x1e0 [ 129.880390][ T1208] Read of size 8 at addr ffff8881bfffffb0 by task syz-executor/1208 [ 129.888386][ T1208] [ 129.890713][ T1208] CPU: 1 PID: 1208 Comm: syz-executor Tainted: G W syzkaller #0 [ 129.899658][ T1208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.909732][ T1208] Call Trace: [ 129.913023][ T1208] [ 129.915974][ T1208] __dump_stack+0x21/0x30 [ 129.920324][ T1208] dump_stack_lvl+0x110/0x170 [ 129.925023][ T1208] ? show_regs_print_info+0x20/0x20 [ 129.930244][ T1208] ? load_image+0x3f0/0x3f0 [ 129.934774][ T1208] print_address_description+0x7f/0x2c0 [ 129.940338][ T1208] ? vma_interval_tree_augment_rotate+0xb1/0x1e0 [ 129.946695][ T1208] kasan_report+0x10f/0x150 [ 129.951221][ T1208] ? vma_interval_tree_augment_rotate+0xb1/0x1e0 [ 129.957568][ T1208] __asan_report_load8_noabort+0x14/0x20 [ 129.963220][ T1208] vma_interval_tree_augment_rotate+0xb1/0x1e0 [ 129.969418][ T1208] __rb_insert_augmented+0x6ac/0x6f0 [ 129.974730][ T1208] ? anon_vma_interval_tree_iter_next+0x380/0x380 [ 129.981164][ T1208] vma_interval_tree_insert_after+0x2a6/0x2c0 [ 129.987253][ T1208] copy_mm+0xb34/0x13a0 [ 129.991430][ T1208] ? copy_signal+0x5f0/0x5f0 [ 129.996042][ T1208] ? __init_rwsem+0xfc/0x1d0 [ 130.000659][ T1208] ? copy_signal+0x4cc/0x5f0 [ 130.005262][ T1208] copy_process+0x1184/0x3280 [ 130.009964][ T1208] ? __pidfd_prepare+0x150/0x150 [ 130.014931][ T1208] ? vmacache_update+0xb7/0x120 [ 130.019806][ T1208] kernel_clone+0x233/0x960 [ 130.024339][ T1208] ? __kasan_check_write+0x14/0x20 [ 130.029469][ T1208] ? _raw_spin_lock_irq+0x95/0xf0 [ 130.034513][ T1208] ? create_io_thread+0x170/0x170 [ 130.039563][ T1208] ? recalc_sigpending+0x1ac/0x230 [ 130.044699][ T1208] __x64_sys_clone+0x198/0x210 [ 130.049495][ T1208] ? __ia32_sys_vfork+0x130/0x130 [ 130.054741][ T1208] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 130.060822][ T1208] x64_sys_call+0x41f/0x9a0 [ 130.065341][ T1208] do_syscall_64+0x4c/0xa0 [ 130.069794][ T1208] ? clear_bhb_loop+0x50/0xa0 [ 130.074489][ T1208] ? clear_bhb_loop+0x50/0xa0 [ 130.079180][ T1208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.085083][ T1208] RIP: 0033:0x7f11fbe47a92 [ 130.089521][ T1208] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 130.109145][ T1208] RSP: 002b:00007ffd57a1d340 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 130.117579][ T1208] RAX: ffffffffffffffda RBX: 00007ffd57a1d340 RCX: 00007f11fbe47a92 [ 130.125564][ T1208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 130.133543][ T1208] RBP: 00007ffd57a1d4cc R08: 0000000000000000 R09: 0000000000000001 [ 130.141522][ T1208] R10: 000055555917a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 130.149505][ T1208] R13: 00000000000927c0 R14: 000000000001fae7 R15: 00007ffd57a1d520 [ 130.157506][ T1208] [ 130.160549][ T1208] [ 130.162906][ T1208] The buggy address belongs to the page: [ 130.168550][ T1208] page:ffffea0006ffffc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x1bffff [ 130.178970][ T1208] flags: 0x4000000000000000(zone=1) [ 130.184191][ T1208] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 130.192782][ T1208] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 130.201369][ T1208] page dumped because: kasan: bad access detected [ 130.207789][ T1208] page_owner tracks the page as freed [ 130.213168][ T1208] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 3961, ts 118474568141, free_ts 120480526580 [ 130.227855][ T1208] post_alloc_hook+0x192/0x1b0 [ 130.232638][ T1208] prep_new_page+0x1c/0x110 [ 130.237138][ T1208] get_page_from_freelist+0x2c3a/0x2cd0 [ 130.242686][ T1208] __alloc_pages+0x1a2/0x460 [ 130.247273][ T1208] shmem_alloc_and_acct_page+0x4a2/0x8d0 [ 130.252906][ T1208] shmem_getpage_gfp+0x127d/0x2250 [ 130.258022][ T1208] shmem_write_begin+0xce/0x1b0 [ 130.262868][ T1208] generic_perform_write+0x2b7/0x690 [ 130.268150][ T1208] __generic_file_write_iter+0x268/0x490 [ 130.273783][ T1208] generic_file_write_iter+0xa9/0x1d0 [ 130.279152][ T1208] __kernel_write+0x521/0x970 [ 130.283835][ T1208] __dump_emit+0x255/0x380 [ 130.288250][ T1208] dump_emit+0x36a/0x3d0 [ 130.292488][ T1208] dump_user_range+0x86/0x1c0 [ 130.297159][ T1208] elf_core_dump+0x2aa4/0x2ff0 [ 130.301947][ T1208] do_coredump+0x13c2/0x27d0 [ 130.306531][ T1208] page last free stack trace: [ 130.311200][ T1208] free_unref_page_prepare+0x5fa/0x600 [ 130.316656][ T1208] free_unref_page_list+0x138/0x9e0 [ 130.321851][ T1208] release_pages+0x1264/0x12c0 [ 130.326613][ T1208] __pagevec_release+0x71/0xe0 [ 130.331377][ T1208] shmem_undo_range+0x564/0x13b0 [ 130.336411][ T1208] shmem_evict_inode+0x1dc/0x970 [ 130.341355][ T1208] evict+0x4b6/0x8b0 [ 130.345263][ T1208] iput+0x651/0x7e0 [ 130.349094][ T1208] dentry_unlink_inode+0x338/0x3e0 [ 130.354210][ T1208] __dentry_kill+0x45b/0x660 [ 130.358803][ T1208] dentry_kill+0xc0/0x2a0 [ 130.363134][ T1208] dput+0x47/0x90 [ 130.366770][ T1208] __fput+0x5c7/0x900 [ 130.370753][ T1208] ____fput+0x15/0x20 [ 130.374732][ T1208] task_work_run+0x127/0x190 [ 130.379328][ T1208] do_exit+0xb70/0x29a0 [ 130.383505][ T1208] [ 130.385830][ T1208] Memory state around the buggy address: [ 130.391451][ T1208] ffff8881bffffe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 130.399519][ T1208] ffff8881bfffff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 130.407591][ T1208] >ffff8881bfffff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 130.415668][ T1208] ^ [ 130.421295][ T1208] ffff8881c0000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.429385][ T1208] ffff8881c0000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.437448][ T1208] ================================================================== [ 130.445516][ T1208] Disabling lock debugging due to kernel taint [ 130.460378][ T30] audit: type=1400 audit(1785803246.239:139): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 130.516041][ T30] audit: type=1400 audit(1785803246.239:140): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.585522][ T30] audit: type=1400 audit(1785803246.239:141): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.635755][ T30] audit: type=1400 audit(1785803246.239:142): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.679455][ T30] audit: type=1400 audit(1785803246.239:143): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.720626][ T30] audit: type=1400 audit(1785803246.239:144): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.775919][ T30] audit: type=1400 audit(1785803246.239:145): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1