last executing test programs: 2m9.068398706s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0xfff, 0x7, 0x6a3, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0185879, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x64d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r8}, 0x10) close(r6) sendmsg$unix(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 2m8.19649835s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 2m7.073039793s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 1m47.252138837s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 1m22.918105934s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 1m4.19830482s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 1m3.688754088s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x2, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="170100"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000)=0x4000, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffffe7120800100000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000580)=""/166}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x7a05, 0x1700) 54.312133788s ago: executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) 50.756581945s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x2, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="170100"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000)=0x4000, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffffe7120800100000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000580)=""/166}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x7a05, 0x1700) 49.764074297s ago: executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) close(r3) 41.890814696s ago: executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 40.632054369s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) 39.320605961s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x204, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000043030000000000000000850000005300000095"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5452, 0x20001439) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092b000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffdfc}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 38.924125472s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='track_foreign_dirty\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='track_foreign_dirty\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000240)='THAWED\x00', 0x7) 38.818697028s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.6699638s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207bfff8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='ext4_drop_inode\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='ext4_drop_inode\x00', r0}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 38.650297343s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2]}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) 38.493279048s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_activate_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 38.491488508s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000540)={'\x00', @dev}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) 38.489868078s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) 38.395987683s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 38.370361026s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x90) 38.195698443s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000c00)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40001) 38.193025164s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 38.132122863s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x20001439) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000001a000007020000f8ffffffb703000008000000b7040000000000008500000019001600950000000000000070226d75f4fa40716581999e4bc8a95baf26c677dfd5624f6a497cdf0add87f16542d4a9a9151319d4a8e9c7c0e3715d89c7831016fcb77196e81f9772e9a53ba7fc0e10a416486f2b2fcf7ab8efaa318e0d2bbd3ba5ed6c27bedf11438fb0441221f6a5b9b721717cf8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'netdevsim0\x00', @random="7e2c598274d5"}) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x34100) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)) 38.08853781s ago: executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.076125892s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.966890089s ago: executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdir(0x0, 0x0) 37.965753889s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207bfff8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='ext4_drop_inode\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='ext4_drop_inode\x00', r0}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 0s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x6, 0x94, &(0x7f0000000600)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000dc0)=[{0x0, 0x2, 0x10, 0xc}, {0x0, 0x0, 0x8}]}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, 0x0) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/17, 0x11}, {0x0}, {&(0x7f0000002fc0)=""/151, 0x97}, {&(0x7f0000003080)=""/253, 0xfd}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000), 0x400000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003300)=@bpf_ext={0x1c, 0x6, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000900)='GPL\x00', 0x7ff, 0x9c, &(0x7f0000003180)=""/156, 0x40f00, 0x47, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x1, 0x2, 0xc293, 0x95}, 0x10, 0x222ac, 0xffffffffffffffff, 0x0, &(0x7f0000003240)=[r1], 0x0, 0x10, 0x9}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. 2024/06/16 14:43:38 fuzzer started 2024/06/16 14:43:38 dialing manager at 10.128.0.163:30014 [ 29.718225][ T28] audit: type=1400 audit(1718549018.948:66): avc: denied { node_bind } for pid=287 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.739071][ T28] audit: type=1400 audit(1718549018.948:67): avc: denied { name_bind } for pid=287 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.825546][ T28] audit: type=1400 audit(1718549019.058:68): avc: denied { mounton } for pid=296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.828229][ T296] cgroup: Unknown subsys name 'net' [ 29.881436][ T28] audit: type=1400 audit(1718549019.058:69): avc: denied { mount } for pid=296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.905674][ T296] cgroup: Unknown subsys name 'devices' [ 29.917984][ T28] audit: type=1400 audit(1718549019.088:70): avc: denied { mounton } for pid=297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.943232][ T28] audit: type=1400 audit(1718549019.088:71): avc: denied { mount } for pid=297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.967478][ T307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.967484][ T28] audit: type=1400 audit(1718549019.118:72): avc: denied { setattr } for pid=303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.998939][ T28] audit: type=1400 audit(1718549019.148:73): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.018721][ T28] audit: type=1400 audit(1718549019.218:74): avc: denied { relabelto } for pid=307 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.044987][ T28] audit: type=1400 audit(1718549019.218:75): avc: denied { write } for pid=307 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.075575][ T298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.096511][ T296] cgroup: Unknown subsys name 'hugetlb' [ 30.102258][ T296] cgroup: Unknown subsys name 'rlimit' 2024/06/16 14:43:39 starting 5 executor processes [ 31.299037][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.306131][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.314232][ T315] device bridge_slave_0 entered promiscuous mode [ 31.340741][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.347879][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.356431][ T315] device bridge_slave_1 entered promiscuous mode [ 31.373820][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.380731][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.388820][ T318] device bridge_slave_0 entered promiscuous mode [ 31.430030][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.436996][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.444961][ T318] device bridge_slave_1 entered promiscuous mode [ 31.465809][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.472926][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.481177][ T316] device bridge_slave_0 entered promiscuous mode [ 31.498087][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.505169][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.513254][ T314] device bridge_slave_0 entered promiscuous mode [ 31.529832][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.536904][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.545064][ T316] device bridge_slave_1 entered promiscuous mode [ 31.562734][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.569913][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.578069][ T314] device bridge_slave_1 entered promiscuous mode [ 31.821131][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.828133][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.836242][ T317] device bridge_slave_0 entered promiscuous mode [ 31.877873][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.884857][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.892974][ T317] device bridge_slave_1 entered promiscuous mode [ 32.258735][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.265669][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.272896][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.279802][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.298438][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.306299][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.560022][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.568713][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.608078][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.617108][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.625979][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.632881][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.640784][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.648578][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.656283][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.665076][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.673446][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.680373][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.687891][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.695805][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.704626][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.724372][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.732687][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.740483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.749650][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.758256][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.765364][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.773078][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.781682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.789952][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.797515][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.805323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.813468][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.840636][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.849560][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.858072][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.865131][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.873128][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.880767][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.907104][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.915984][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.924664][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.931770][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.939190][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.948033][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.956456][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.963665][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.972085][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.980406][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.990039][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.998508][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.005452][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.021561][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.030387][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.039234][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.046166][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.053627][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.062767][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.071555][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.078438][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.086420][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.112585][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.121101][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.130129][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.139145][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.147794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.183060][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.192680][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.200776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.209676][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.218024][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.226437][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.234750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.243177][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.270364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.279155][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.314334][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.346467][ T317] device veth0_vlan entered promiscuous mode [ 33.359215][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.368342][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.378114][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.387149][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.422629][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.430517][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.438980][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.447865][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.457616][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.466259][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.486512][ T315] device veth0_vlan entered promiscuous mode [ 33.495427][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.504365][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.513702][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.522136][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.530867][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.539639][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.556379][ T314] device veth0_vlan entered promiscuous mode [ 33.564736][ T316] device veth0_vlan entered promiscuous mode [ 33.574487][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.582645][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.591051][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.598988][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.606701][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.615691][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.625288][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.633457][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.648643][ T317] device veth1_macvtap entered promiscuous mode [ 33.662495][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.671075][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.680077][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.701491][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.709889][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.722388][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.730215][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.739091][ T318] device veth0_vlan entered promiscuous mode [ 33.749003][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.757699][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.784697][ T316] device veth1_macvtap entered promiscuous mode [ 33.792691][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.800630][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.810180][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.818893][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.827393][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.841455][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.850125][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.859204][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.867862][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.882838][ T315] device veth1_macvtap entered promiscuous mode [ 33.895313][ T314] device veth1_macvtap entered promiscuous mode [ 33.928117][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.937452][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.945476][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.954055][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.963627][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.972170][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.980688][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.989581][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.998296][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.006810][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.026674][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.035411][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.073848][ T318] device veth1_macvtap entered promiscuous mode [ 34.091232][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.100240][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.109042][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.117459][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.126048][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.175958][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.193387][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.241859][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.250620][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.415948][ C0] hrtimer: interrupt took 56657 ns [ 34.612015][ T370] Illegal XDP return value 4294967274 on prog (id 13) dev N/A, expect packet loss! [ 36.189956][ T416] device syzkaller0 entered promiscuous mode [ 36.214437][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 36.214470][ T28] audit: type=1400 audit(1718549025.448:106): avc: denied { relabelfrom } for pid=415 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 36.244216][ T28] audit: type=1400 audit(1718549025.448:107): avc: denied { relabelto } for pid=415 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 36.610331][ T28] audit: type=1400 audit(1718549025.838:108): avc: denied { create } for pid=452 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.492828][ T28] audit: type=1400 audit(1718549026.728:109): avc: denied { write } for pid=496 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.705782][ T508] device syzkaller0 entered promiscuous mode [ 37.959354][ T528] device syzkaller0 entered promiscuous mode [ 39.013682][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.021021][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.054464][ T560] device bridge_slave_1 left promiscuous mode [ 39.060584][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.217493][ T560] device bridge_slave_0 left promiscuous mode [ 39.241808][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.482581][ T571] device syzkaller0 entered promiscuous mode [ 40.496290][ T28] audit: type=1400 audit(1718549029.728:110): avc: denied { read } for pid=598 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.583090][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.590634][ T606] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.644516][ T606] device bridge_slave_1 left promiscuous mode [ 40.657417][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.682746][ T606] device bridge_slave_0 left promiscuous mode [ 40.691602][ T606] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.890959][ T621] device syzkaller0 entered promiscuous mode [ 41.420406][ T610] syz-executor.2 (610) used greatest stack depth: 21408 bytes left [ 41.477898][ T28] audit: type=1400 audit(1718549030.708:111): avc: denied { setopt } for pid=634 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.592169][ T639] device sit0 entered promiscuous mode [ 42.631705][ T682] syz-executor.0[682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.631860][ T682] syz-executor.0[682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.112649][ T710] syz-executor.0[710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.135644][ T710] syz-executor.0[710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.790259][ T28] audit: type=1400 audit(1718549033.018:112): avc: denied { create } for pid=732 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.602786][ T752] device syzkaller0 entered promiscuous mode [ 144.641413][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 144.647995][ C1] rcu: 1-...!: (1 GPs behind) idle=bd74/1/0x4000000000000000 softirq=3585/3593 fqs=4 [ 144.657455][ C1] (t=10000 jiffies g=3257 q=280 ncpus=2) [ 144.663003][ C1] rcu: rcu_preempt kthread starved for 9989 jiffies! g3257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 144.673849][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 144.683651][ C1] rcu: RCU grace-period kthread stack dump: [ 144.689399][ C1] task:rcu_preempt state:R running task stack:28040 pid:14 ppid:2 flags:0x00004000 [ 144.700098][ C1] Call Trace: [ 144.703222][ C1] [ 144.705987][ C1] __schedule+0xca7/0x1550 [ 144.710289][ C1] ? __sched_text_start+0x8/0x8 [ 144.714929][ C1] ? del_timer_sync+0x1bc/0x230 [ 144.719617][ C1] ? __kasan_check_write+0x14/0x20 [ 144.724562][ C1] schedule+0xc3/0x180 [ 144.728466][ C1] schedule_timeout+0x18c/0x380 [ 144.733159][ C1] ? __kasan_check_write+0x14/0x20 [ 144.738104][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 144.743394][ C1] ? console_conditional_schedule+0x10/0x10 [ 144.749127][ C1] ? update_process_times+0x1b0/0x1b0 [ 144.754492][ C1] ? prepare_to_swait_event+0x308/0x320 [ 144.759876][ C1] rcu_gp_fqs_loop+0x2ed/0x1060 [ 144.764560][ C1] ? dyntick_save_progress_counter+0x280/0x280 [ 144.770549][ C1] ? rcu_gp_init+0xf80/0xf80 [ 144.774976][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 144.780616][ C1] ? finish_swait+0x17d/0x1b0 [ 144.785218][ C1] rcu_gp_kthread+0xa3/0x390 [ 144.789650][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 144.795110][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 144.800154][ C1] ? __kasan_check_read+0x11/0x20 [ 144.805007][ C1] ? __kthread_parkme+0x12d/0x180 [ 144.809995][ C1] kthread+0x26d/0x300 [ 144.813859][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 144.819336][ C1] ? kthread_blkcg+0xd0/0xd0 [ 144.823848][ C1] ret_from_fork+0x1f/0x30 [ 144.828107][ C1] [ 144.831073][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 144.837238][ C1] Sending NMI from CPU 1 to CPUs 0: [ 144.842271][ C0] NMI backtrace for cpu 0 [ 144.842301][ C0] CPU: 0 PID: 760 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 144.842352][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 144.842377][ C0] RIP: 0010:sched_clock_cpu+0x21/0x2b0 [ 144.842434][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 00 65 48 8b 04 25 28 00 00 00 <48> 89 84 24 80 00 00 00 49 bd 00 00 00 00 00 fc ff df 4c 8d 64 24 [ 144.842479][ C0] RSP: 0000:ffffc90000007420 EFLAGS: 00000082 [ 144.842517][ C0] RAX: 209d181730988e00 RBX: ffffffff8650d870 RCX: ffff88810fb15100 [ 144.842554][ C0] RDX: 0000000000010101 RSI: ffffffff85c9d400 RDI: 0000000000000000 [ 144.842587][ C0] RBP: ffffc90000007500 R08: ffffffff8183e469 R09: ffffed10226d1c84 [ 144.842626][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 144.842660][ C0] R13: 0000000000000000 R14: ffff8881f7027308 R15: dffffc0000000000 [ 144.842696][ C0] FS: 00007f8ae13896c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 144.842743][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.842779][ C0] CR2: 000000002035e000 CR3: 0000000136fe9000 CR4: 00000000003506b0 [ 144.842818][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.842846][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 144.842876][ C0] Call Trace: [ 144.842889][ C0] [ 144.842904][ C0] ? show_regs+0x58/0x60 [ 144.842951][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 144.843017][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 144.843087][ C0] ? sched_clock_cpu+0x21/0x2b0 [ 144.843135][ C0] ? sched_clock_cpu+0x21/0x2b0 [ 144.843191][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 144.843247][ C0] ? nmi_handle+0xa7/0x280 [ 144.843299][ C0] ? sched_clock_cpu+0x21/0x2b0 [ 144.843348][ C0] ? default_do_nmi+0x69/0x160 [ 144.843405][ C0] ? exc_nmi+0xaf/0x120 [ 144.843459][ C0] ? end_repeat_nmi+0x16/0x31 [ 144.843512][ C0] ? irq_work_run_list+0xc9/0x2f0 [ 144.843589][ C0] ? sched_clock_cpu+0x21/0x2b0 [ 144.843639][ C0] ? sched_clock_cpu+0x21/0x2b0 [ 144.843689][ C0] ? sched_clock_cpu+0x21/0x2b0 [ 144.843739][ C0] [ 144.843752][ C0] [ 144.843765][ C0] ? perf_pending_irq+0x558/0x7a0 [ 144.843824][ C0] ? sched_clock+0x9/0x10 [ 144.843896][ C0] ? __kasan_check_write+0x14/0x20 [ 144.843940][ C0] ? irq_work_run_list+0x29c/0x2f0 [ 144.844016][ C0] ? irq_work_run+0xf0/0xf0 [ 144.844092][ C0] irqtime_account_irq+0x79/0x260 [ 144.844174][ C0] __irq_exit_rcu+0x18/0xf0 [ 144.844229][ C0] irq_exit_rcu+0x9/0x10 [ 144.844282][ C0] sysvec_irq_work+0x46/0xb0 [ 144.844337][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 144.844384][ C0] RIP: 0010:__stack_depot_save+0x166/0x480 [ 144.844457][ C0] Code: 41 31 f4 c1 c6 18 41 29 f4 eb 03 45 89 f0 48 8b 05 c7 cb f9 04 8b 0d bd cb f9 04 44 21 e1 48 89 45 a8 48 89 4d b0 4c 8b 2c c8 <45> 89 d6 eb 04 4d 8b 6d 00 4d 85 ed 74 2a 45 39 65 08 75 f1 45 39 [ 144.844495][ C0] RSP: 0000:ffffc90000007650 EFLAGS: 00000206 [ 144.844531][ C0] RAX: ffff8881f5c00000 RBX: 0000000000000000 RCX: 0000000000045dd7 [ 144.844563][ C0] RDX: ffffc90000007720 RSI: 00000000d50f8596 RDI: 0000000000000001 [ 144.844595][ C0] RBP: ffffc900000076b0 R08: 0000000000000a20 R09: 0000000000000000 [ 144.844626][ C0] R10: 000000000000000d R11: dffffc0000000001 R12: 000000004f445dd7 [ 144.844658][ C0] R13: ffff88812fb60530 R14: 0000000000000a20 R15: ffffc900000076c0 [ 144.844709][ C0] ? dst_cow_metrics_generic+0x55/0x1c0 [ 144.844774][ C0] ? dst_cow_metrics_generic+0x55/0x1c0 [ 144.844838][ C0] kasan_set_track+0x60/0x70 [ 144.844898][ C0] ? kasan_set_track+0x4b/0x70 [ 144.844958][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 144.845030][ C0] ? __kasan_kmalloc+0x9c/0xb0 [ 144.845092][ C0] ? kmalloc_trace+0x44/0xa0 [ 144.845156][ C0] ? dst_cow_metrics_generic+0x55/0x1c0 [ 144.845218][ C0] ? icmp6_dst_alloc+0x363/0x510 [ 144.845281][ C0] ? ndisc_send_skb+0x28b/0xdc0 [ 144.845326][ C0] ? ndisc_send_rs+0x47d/0x5f0 [ 144.845372][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 144.845419][ C0] ? call_timer_fn+0x3b/0x2d0 [ 144.845484][ C0] ? __run_timers+0x72a/0xa10 [ 144.845549][ C0] ? run_timer_softirq+0x69/0xf0 [ 144.845613][ C0] ? __do_softirq+0x1d8/0x661 [ 144.845662][ C0] ? __irq_exit_rcu+0x50/0xf0 [ 144.845716][ C0] ? irq_exit_rcu+0x9/0x10 [ 144.845767][ C0] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 144.845826][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 144.845877][ C0] ? preempt_schedule_irq+0xc2/0x140 [ 144.845931][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 144.845991][ C0] ? irqentry_exit+0x30/0x40 [ 144.846047][ C0] ? sysvec_irq_work+0x52/0xb0 [ 144.846100][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 144.846154][ C0] ? exit_to_user_mode_loop+0x47/0xa0 [ 144.846211][ C0] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 144.846269][ C0] ? irqentry_exit_to_user_mode+0x9/0x20 [ 144.846329][ C0] ? irqentry_exit+0x12/0x40 [ 144.846385][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 144.846444][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 144.846522][ C0] kasan_save_alloc_info+0x1f/0x30 [ 144.846594][ C0] __kasan_kmalloc+0x9c/0xb0 [ 144.846659][ C0] kmalloc_trace+0x44/0xa0 [ 144.846720][ C0] dst_cow_metrics_generic+0x55/0x1c0 [ 144.846786][ C0] icmp6_dst_alloc+0x363/0x510 [ 144.846850][ C0] ndisc_send_skb+0x28b/0xdc0 [ 144.846907][ C0] ? ndisc_mc_map+0x920/0x920 [ 144.846967][ C0] ? __kasan_check_write+0x14/0x20 [ 144.847016][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 144.847090][ C0] ? skb_put+0x11e/0x210 [ 144.847155][ C0] ndisc_send_rs+0x47d/0x5f0 [ 144.847207][ C0] addrconf_rs_timer+0x2d1/0x600 [ 144.847261][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 144.847314][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 144.847371][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 144.847423][ C0] call_timer_fn+0x3b/0x2d0 [ 144.847490][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 144.847543][ C0] __run_timers+0x72a/0xa10 [ 144.847621][ C0] ? calc_index+0x270/0x270 [ 144.847701][ C0] run_timer_softirq+0x69/0xf0 [ 144.847766][ C0] __do_softirq+0x1d8/0x661 [ 144.847821][ C0] ? irqtime_account_irq+0xdc/0x260 [ 144.847896][ C0] __irq_exit_rcu+0x50/0xf0 [ 144.847955][ C0] irq_exit_rcu+0x9/0x10 [ 144.848008][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 144.848068][ C0] [ 144.848082][ C0] [ 144.848096][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 144.848154][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 144.848226][ C0] Code: 4c 89 e7 e8 d0 e0 bd fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 c4 50 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 be c5 50 fc 65 48 8b 1d f6 dc [ 144.848264][ C0] RSP: 0000:ffffc90009cc7d40 EFLAGS: 00000246 [ 144.848301][ C0] RAX: 1ffff11021f62b79 RBX: 1ffff92001398fac RCX: ffffffff85007800 [ 144.848337][ C0] RDX: 1ffffffff0f25c00 RSI: 0000000000000000 RDI: 0000000000000001 [ 144.848368][ C0] RBP: ffffc90009cc7dd8 R08: ffffffff8792e000 R09: ffffffff8792e008 [ 144.848404][ C0] R10: ffffffff8792e018 R11: ffffffff8792e010 R12: ffffc90009cc7d60 [ 144.848440][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001398fa8 [ 144.848481][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 144.848564][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 144.848621][ C0] ? clockevents_program_event+0x22f/0x300 [ 144.848675][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 144.848736][ C0] irqentry_exit+0x30/0x40 [ 144.848792][ C0] sysvec_irq_work+0x52/0xb0 [ 144.848848][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 144.848894][ C0] RIP: 0010:exit_to_user_mode_loop+0x47/0xa0 [ 144.848956][ C0] Code: 0c 00 00 e8 8b 07 5d 00 e8 16 18 02 01 fa e8 d0 8a 96 03 65 48 8b 05 68 ee 9e 7e 48 8b 18 f7 c3 0e 30 02 00 74 53 fb f6 c3 08 <74> 05 e8 42 0b 9b 03 f7 c3 00 10 00 00 74 08 4c 89 f7 e8 82 ed 3c [ 144.848993][ C0] RSP: 0000:ffffc90009cc7ed0 EFLAGS: 00000202 [ 144.849029][ C0] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000010000 [ 144.849059][ C0] RDX: 1ffffffff0f25c00 RSI: 0000000000000008 RDI: ffffc90009cc7f58 [ 144.849093][ C0] RBP: ffffc90009cc7ee0 R08: ffffffff8792e000 R09: ffffffff8792e008 [ 144.849129][ C0] R10: ffffffff8792e018 R11: ffffffff8792e010 R12: 0000000000000000 [ 144.849181][ C0] R13: 0000000000000000 R14: ffffc90009cc7f58 R15: ffff88810fb15100 [ 144.849230][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 144.849290][ C0] irqentry_exit_to_user_mode+0x9/0x20 [ 144.849352][ C0] irqentry_exit+0x12/0x40 [ 144.849409][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 144.849469][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 144.849519][ C0] RIP: 0033:0x7f8ae067cea9 [ 144.849562][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 144.849600][ C0] RSP: 002b:00007f8ae13890c8 EFLAGS: 00000246 [ 144.849635][ C0] RAX: 0000000000000000 RBX: 00007f8ae07b4050 RCX: 00007f8ae067cea9 [ 144.849668][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000007 [ 144.849698][ C0] RBP: 00007f8ae06ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 144.849728][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.849780][ C0] R13: 000000000000006e R14: 00007f8ae07b4050 R15: 00007ffe6a284eb8 [ 144.849827][ C0] [ 144.850281][ C1] CPU: 1 PID: 757 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 145.753858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 145.763758][ C1] RIP: 0010:dev_hard_start_xmit+0x212/0x630 [ 145.769658][ C1] Code: 6c fd 45 85 ed 74 0a e8 7c de 6c fd e9 9c 00 00 00 48 8b 5d 80 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 27 01 00 00 8b 1b bf ff ff ff ff 89 de e8 f8 e1 6c fd [ 145.789273][ C1] RSP: 0018:ffffc900001b0380 EFLAGS: 00000a07 [ 145.795176][ C1] RAX: 0000000000000000 RBX: ffff8881236068c4 RCX: dffffc0000000000 [ 145.803154][ C1] RDX: ffff88810fb16540 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.811142][ C1] RBP: ffffc900001b0410 R08: ffffffff8408957a R09: ffff888100b98180 [ 145.819047][ C1] R10: 0000000000000015 R11: dffffc0000000001 R12: ffff888111078000 [ 145.826850][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff1102220f000 [ 145.834675][ C1] FS: 00007f8ae13aa6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 145.843427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.849868][ C1] CR2: 00007f8ae1368d58 CR3: 0000000136fe9000 CR4: 00000000003506a0 [ 145.858125][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.865912][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.873724][ C1] Call Trace: [ 145.876853][ C1] [ 145.879545][ C1] ? show_regs+0x58/0x60 [ 145.883622][ C1] ? dump_cpu_task+0x3c/0x70 [ 145.888046][ C1] ? rcu_dump_cpu_stacks+0x1db/0x370 [ 145.893183][ C1] ? print_cpu_stall+0x2f8/0x590 [ 145.897955][ C1] ? rcu_sched_clock_irq+0x987/0x1330 [ 145.903153][ C1] ? rcu_boost_kthread_setaffinity+0x5a0/0x5a0 [ 145.909143][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 145.914175][ C1] ? update_wall_time+0x25/0x30 [ 145.918870][ C1] ? update_process_times+0x149/0x1b0 [ 145.924076][ C1] ? tick_sched_timer+0x188/0x240 [ 145.928927][ C1] ? tick_setup_sched_timer+0x490/0x490 [ 145.934321][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 145.939710][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 145.944903][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 145.950810][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 145.955770][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 145.961846][ C1] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 145.967831][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 145.973824][ C1] ? dev_hard_start_xmit+0x1ea/0x630 [ 145.978953][ C1] ? dev_hard_start_xmit+0x212/0x630 [ 145.984078][ C1] __dev_queue_xmit+0x18a4/0x36e0 [ 145.988967][ C1] ? __dev_queue_xmit+0x2a6/0x36e0 [ 145.993981][ C1] ? netdev_core_pick_tx+0x350/0x350 [ 145.999107][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 146.004132][ C1] ? sched_clock+0x9/0x10 [ 146.008311][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 146.012987][ C1] ? perf_pending_irq+0x558/0x7a0 [ 146.017852][ C1] ? sched_clock+0x9/0x10 [ 146.022020][ C1] ? __kasan_check_read+0x11/0x20 [ 146.026875][ C1] ? selinux_ip_postroute+0x2d5/0x13d0 [ 146.032200][ C1] neigh_connected_output+0x41b/0x4b0 [ 146.037396][ C1] ip6_finish_output2+0x1047/0x1820 [ 146.042435][ C1] ? ip6_make_skb+0x7a0/0x7a0 [ 146.046927][ C1] ? ip6t_do_table+0x1643/0x1830 [ 146.051703][ C1] ? ip6table_mangle_hook+0x246/0x790 [ 146.056918][ C1] ip6_finish_output+0x50f/0xa60 [ 146.061696][ C1] ip6_output+0x1f7/0x4d0 [ 146.065852][ C1] ? ac6_seq_show+0xf0/0xf0 [ 146.070190][ C1] ? ip6_output+0x4d0/0x4d0 [ 146.074543][ C1] ndisc_send_skb+0x7cf/0xdc0 [ 146.079057][ C1] ? ndisc_mc_map+0x920/0x920 [ 146.083561][ C1] ? ndisc_send_skb+0xdc0/0xdc0 [ 146.088256][ C1] ? memset+0x35/0x40 [ 146.092065][ C1] ? __ndisc_fill_addr_option+0xd4/0x130 [ 146.097540][ C1] ndisc_send_rs+0x47d/0x5f0 [ 146.101968][ C1] addrconf_rs_timer+0x2d1/0x600 [ 146.106740][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 146.112633][ C1] ? _find_next_bit+0x88/0x130 [ 146.117236][ C1] ? __next_timer_interrupt+0x1eb/0x250 [ 146.122711][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 146.128612][ C1] call_timer_fn+0x3b/0x2d0 [ 146.132971][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 146.138841][ C1] __run_timers+0x72a/0xa10 [ 146.143205][ C1] ? calc_index+0x270/0x270 [ 146.147524][ C1] ? __irq_exit_rcu+0x5c/0xf0 [ 146.152042][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 146.156999][ C1] run_timer_softirq+0x69/0xf0 [ 146.161605][ C1] __do_softirq+0x1d8/0x661 [ 146.165958][ C1] ? irqtime_account_irq+0xdc/0x260 [ 146.170968][ C1] __irq_exit_rcu+0x50/0xf0 [ 146.175304][ C1] irq_exit_rcu+0x9/0x10 [ 146.179474][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 146.184963][ C1] [ 146.187713][ C1] [ 146.190495][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 146.196396][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 146.202647][ C1] Code: ef ed 86 e8 ec 2d bc fc 48 83 3d 24 ac ed 01 00 74 34 48 89 df e8 6e 0f 00 00 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 e5 12 4f fc 65 8b 05 26 2a 02 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 146.222091][ C1] RSP: 0018:ffffc90009ca7920 EFLAGS: 00000206 [ 146.227985][ C1] RAX: 0000000000000001 RBX: ffff8881007a4a74 RCX: dffffc0000000000 [ 146.235801][ C1] RDX: 0000000000000001 RSI: 0000000000000246 RDI: 0000000000000001 [ 146.243815][ C1] RBP: ffffc90009ca7930 R08: dffffc0000000000 R09: ffffed102256228e [ 146.251600][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 146.259495][ C1] R13: ffff8881007a4a74 R14: 0000000000000246 R15: ffff8881007a4a60 [ 146.267326][ C1] rwsem_wake+0x126/0x220 [ 146.271481][ C1] ? rwsem_spin_on_owner+0x4a0/0x4a0 [ 146.276607][ C1] ? kasan_check_range+0x82/0x2a0 [ 146.281478][ C1] up_write+0xb1/0x1f0 [ 146.285367][ C1] perf_fasync+0x8e/0xa0 [ 146.289459][ C1] do_vfs_ioctl+0x122a/0x29a0 [ 146.293966][ C1] ? perf_pmu_sched_task+0x190/0x190 [ 146.299076][ C1] ? __x64_compat_sys_ioctl+0x90/0x90 [ 146.304424][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 146.309813][ C1] ? perf_sched_cb_inc+0x260/0x260 [ 146.314750][ C1] ? irqentry_exit+0x30/0x40 [ 146.319170][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 146.324821][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 146.330825][ C1] ? file_has_perm+0x193/0x6c0 [ 146.335405][ C1] ? file_has_perm+0x27c/0x6c0 [ 146.340022][ C1] ? file_has_perm+0x3e3/0x6c0 [ 146.344606][ C1] ? file_has_perm+0x512/0x6c0 [ 146.349216][ C1] ? match_file+0x140/0x140 [ 146.353558][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 146.359103][ C1] ? irqentry_exit+0x30/0x40 [ 146.363543][ C1] ? selinux_file_ioctl+0x21a/0x540 [ 146.368572][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 146.374380][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 146.380024][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 146.386019][ C1] ? __se_sys_ioctl+0x38/0x190 [ 146.390619][ C1] ? security_file_ioctl+0x84/0xb0 [ 146.395560][ C1] __se_sys_ioctl+0x99/0x190 [ 146.399990][ C1] __x64_sys_ioctl+0x7b/0x90 [ 146.404415][ C1] do_syscall_64+0x3d/0xb0 [ 146.408666][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 146.414312][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.420120][ C1] RIP: 0033:0x7f8ae067cea9 [ 146.424378][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 146.444132][ C1] RSP: 002b:00007f8ae13aa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.452372][ C1] RAX: ffffffffffffffda RBX: 00007f8ae07b3f80 RCX: 00007f8ae067cea9 [ 146.460270][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 146.468170][ C1] RBP: 00007f8ae06ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 146.476175][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.483993][ C1] R13: 000000000000000b R14: 00007f8ae07b3f80 R15: 00007ffe6a284eb8 [ 146.491854][ C1] [ 206.625447][ T318] syz-executor.0 (318) used greatest stack depth: 21040 bytes left [ 207.933499][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.940518][ T769] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.949579][ T769] device bridge_slave_0 entered promiscuous mode [ 207.957701][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.965894][ T769] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.974546][ T769] device bridge_slave_1 entered promiscuous mode [ 208.015621][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.023559][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.033256][ T770] device bridge_slave_0 entered promiscuous mode [ 208.042011][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.049450][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.057933][ T770] device bridge_slave_1 entered promiscuous mode [ 208.323084][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.332409][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.343149][ T773] device bridge_slave_0 entered promiscuous mode [ 208.416168][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.424678][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.433567][ T773] device bridge_slave_1 entered promiscuous mode [ 208.553487][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.560689][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.569602][ T780] device bridge_slave_0 entered promiscuous mode [ 208.578909][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.588583][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.598113][ T780] device bridge_slave_1 entered promiscuous mode [ 210.002061][ T373] device bridge_slave_1 left promiscuous mode [ 210.008194][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.019525][ T373] device bridge_slave_0 left promiscuous mode [ 210.026839][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.037932][ T373] device veth1_macvtap left promiscuous mode [ 210.044008][ T373] device veth0_vlan left promiscuous mode [ 210.505730][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.513595][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.521356][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.530202][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.538912][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.546199][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.553656][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.562495][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.571049][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.578931][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.651670][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.660151][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.669940][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.678701][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.688675][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.821901][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.830680][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.892162][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.900699][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.945059][ T770] device veth0_vlan entered promiscuous mode [ 210.958425][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.968458][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.024081][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.034503][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.042600][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.051298][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.060473][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.067632][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.112716][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.120960][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.132141][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.140740][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.147788][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.187923][ T770] device veth1_macvtap entered promiscuous mode [ 211.332533][ T773] device veth0_vlan entered promiscuous mode [ 211.359178][ T773] device veth1_macvtap entered promiscuous mode [ 211.471258][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.480763][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.488827][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.497000][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.505924][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.514438][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.521809][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.529608][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.538927][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.547585][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.554608][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.562065][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.570600][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.579152][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.587341][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.596112][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.605645][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.614711][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.623647][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.631531][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.639478][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.648469][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.657068][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.664089][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.671901][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.681614][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.690512][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.697636][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.705634][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.715021][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.723781][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.732789][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.741271][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.750414][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.759387][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.768384][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.777790][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.787189][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.796214][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.805932][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.816194][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.826234][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.835270][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.844696][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.937733][ T780] device veth0_vlan entered promiscuous mode [ 211.962144][ T780] device veth1_macvtap entered promiscuous mode [ 212.072704][ T769] device veth0_vlan entered promiscuous mode [ 212.098660][ T769] device veth1_macvtap entered promiscuous mode [ 212.412739][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.421738][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.474856][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.483984][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.492936][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.502482][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.511210][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.520083][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.529977][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.539644][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.558103][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.576764][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.594266][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.606194][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.615379][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.624734][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.633704][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.642594][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.652108][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.661044][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.671500][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.684121][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.693955][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.706057][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.717320][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.728090][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.737185][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.747742][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.758229][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.767246][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.142015][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.152603][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.162729][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.193544][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.475556][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.483151][ T790] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.491620][ T790] device bridge_slave_0 entered promiscuous mode [ 214.499972][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.507201][ T790] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.515500][ T790] device bridge_slave_1 entered promiscuous mode [ 216.153763][ T28] audit: type=1400 audit(1718549205.388:113): avc: denied { attach_queue } for pid=817 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 236.359908][ T930] syz-executor.3 (930) used greatest stack depth: 20824 bytes left [ 237.152835][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.161061][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.169470][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.178634][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.187522][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.194649][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.202287][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.213174][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.227888][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.235020][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.304690][ T972] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 237.315432][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.392324][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.427444][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.789510][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.806207][ T849] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.834870][ T849] device bridge_slave_0 entered promiscuous mode [ 237.868827][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.887509][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.902509][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.911702][ T849] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.928954][ T849] device bridge_slave_1 entered promiscuous mode [ 240.561721][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.578451][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.678218][ T994] device syzkaller0 entered promiscuous mode [ 241.283243][ T790] device veth0_vlan entered promiscuous mode [ 241.517782][ T790] device veth1_macvtap entered promiscuous mode [ 241.872536][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.884480][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.894245][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.903989][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.913713][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.536687][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.287965][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.296960][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.306126][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.315344][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.324585][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.609320][ T1063] device syzkaller0 entered promiscuous mode [ 243.617442][ T1061] device pim6reg1 entered promiscuous mode [ 250.399610][ T1136] device syzkaller0 entered promiscuous mode [ 250.447648][ T1137] device syzkaller0 entered promiscuous mode [ 250.732622][ T849] device veth0_vlan entered promiscuous mode [ 250.767127][ T849] device veth1_macvtap entered promiscuous mode [ 251.599224][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.607450][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.616092][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.625316][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.634384][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.641441][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.650295][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.659183][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.668251][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.675298][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.683512][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.692279][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.700833][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.709919][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.718885][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.728339][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.737399][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.746680][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.756219][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.765220][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.774647][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.783805][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.792781][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.802252][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.812153][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.646343][ T1156] device syzkaller0 entered promiscuous mode [ 253.850877][ T373] device bridge_slave_1 left promiscuous mode [ 253.857286][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.868993][ T373] device bridge_slave_0 left promiscuous mode [ 253.875764][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.451928][ T373] device veth1_macvtap left promiscuous mode [ 254.462330][ T373] device veth0_vlan left promiscuous mode [ 254.909139][ T373] device veth1_macvtap left promiscuous mode [ 254.915755][ T373] device veth0_vlan left promiscuous mode [ 254.923719][ T373] device veth1_macvtap left promiscuous mode [ 254.929878][ T373] device veth0_vlan left promiscuous mode [ 255.288662][ T1180] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1029 (only 8 groups) [ 259.476531][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.484611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.494463][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.106844][ T1200] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 264.769755][ T1285] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1029 (only 8 groups) [ 267.717827][ T1320] device syzkaller0 entered promiscuous mode [ 268.466978][ T1351] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1029 (only 8 groups) [ 268.824917][ T1352] device syzkaller0 entered promiscuous mode [ 268.967213][ T28] audit: type=1400 audit(1718549258.188:114): avc: denied { create } for pid=1360 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 271.335935][ T1388] device syzkaller0 entered promiscuous mode [ 271.675558][ T1405] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 274.389359][ T1434] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 277.900096][ T1481] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 280.081381][ C1] sched: RT throttling activated [ 280.775273][ T28] audit: type=1400 audit(1718549270.008:115): avc: denied { write } for pid=1513 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.165533][ T28] audit: type=1400 audit(1718549270.398:116): avc: denied { create } for pid=1530 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.223870][ T1532] device sit0 entered promiscuous mode [ 292.275557][ T1604] device syzkaller0 entered promiscuous mode [ 295.282029][ T28] audit: type=1400 audit(1718549284.498:117): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.441519][ T28] audit: type=1400 audit(1718549284.498:118): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 300.343429][ T473] device bridge_slave_1 left promiscuous mode [ 300.349686][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.693367][ T473] device bridge_slave_0 left promiscuous mode [ 300.711669][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.781592][ T473] device veth1_macvtap left promiscuous mode [ 300.809958][ T473] device veth0_vlan left promiscuous mode [ 304.961341][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.968665][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.985550][ T1684] device bridge_slave_1 left promiscuous mode [ 305.013263][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.085842][ T1684] device bridge_slave_0 left promiscuous mode [ 305.100184][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.688319][ T1706] device syzkaller0 entered promiscuous mode [ 312.753340][ T1838] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.760831][ T1838] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.830816][ T1837] device bridge_slave_1 left promiscuous mode [ 312.856929][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.008172][ T1837] device bridge_slave_0 left promiscuous mode [ 313.027416][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.000861][ T1979] GPL: port 1(team_slave_1) entered blocking state [ 321.071508][ T1979] GPL: port 1(team_slave_1) entered disabled state [ 321.132142][ T1979] device team_slave_1 entered promiscuous mode [ 331.033128][ T2061] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.040035][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.057135][ T2061] device bridge_slave_0 entered promiscuous mode [ 331.065486][ T2061] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.072842][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.081081][ T2061] device bridge_slave_1 entered promiscuous mode [ 337.015177][ T2160] device pim6reg1 entered promiscuous mode [ 337.853381][ T2177] device wg2 entered promiscuous mode [ 340.896327][ T2211] device wg2 left promiscuous mode [ 341.557208][ T2213] device wg2 entered promiscuous mode [ 343.098926][ T2246] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 49 (only 8 groups) [ 343.472411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.480158][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.488834][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.497653][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.506338][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.513288][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.541739][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.549797][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.560780][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.569654][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.576618][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.616033][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.625090][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.851537][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.859916][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.920383][ T2219] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.930295][ T2219] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.939295][ T2219] device bridge_slave_0 entered promiscuous mode [ 343.956760][ T2219] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.964414][ T2219] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.974372][ T2219] device bridge_slave_1 entered promiscuous mode [ 343.996287][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.005750][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.032470][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.041060][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.053682][ T2061] device veth0_vlan entered promiscuous mode [ 344.374364][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.393502][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.513771][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.526661][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.539259][ T2287] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 49 (only 8 groups) [ 345.638594][ T2061] device veth1_macvtap entered promiscuous mode [ 345.731986][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.683898][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.694066][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.703137][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.711949][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.844160][ T2329] device macsec0 entered promiscuous mode [ 354.185699][ T473] device bridge_slave_1 left promiscuous mode [ 354.204021][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.805638][ T473] device bridge_slave_0 left promiscuous mode [ 354.811906][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.834654][ T473] device veth1_macvtap left promiscuous mode [ 354.840750][ T473] device veth0_vlan left promiscuous mode [ 355.809093][ T2219] device veth0_vlan entered promiscuous mode [ 355.834261][ T2219] device veth1_macvtap entered promiscuous mode [ 356.100522][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.109367][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.117730][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.126009][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.135177][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.143967][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.150917][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.159056][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.167751][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.176794][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.183732][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.191694][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.200115][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.209071][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.217794][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.226583][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.235875][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.244911][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.254062][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.263410][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.272419][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.281353][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.290441][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.304517][ T2369] device pim6reg1 entered promiscuous mode [ 356.543989][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.552623][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.560297][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.024777][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.038976][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.048152][ T2431] device bridge_slave_0 entered promiscuous mode [ 360.056893][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.064302][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.073025][ T2431] device bridge_slave_1 entered promiscuous mode [ 361.693041][ T2479] device syzkaller0 entered promiscuous mode [ 363.442127][ T2521] syz-executor.1[2521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.442287][ T2521] syz-executor.1[2521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.654724][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.675201][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.694570][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.703498][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.713612][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.721498][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.729787][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.760698][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.799615][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.806771][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.865230][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.881720][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.951329][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.961576][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.063591][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.171681][ T28] audit: type=1400 audit(1718549366.368:119): avc: denied { create } for pid=2606 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 377.423905][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.436146][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.542571][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.606214][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.732320][ T2431] device veth0_vlan entered promiscuous mode [ 378.991652][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.999820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.098460][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.108848][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.120915][ T2431] device veth1_macvtap entered promiscuous mode [ 379.180890][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.192154][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.256633][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.573516][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.587468][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.078543][ T2664] device syzkaller0 entered promiscuous mode [ 386.112672][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.119715][ T2707] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.128157][ T2707] device bridge_slave_0 entered promiscuous mode [ 386.137103][ T2707] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.144242][ T2707] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.152710][ T2707] device bridge_slave_1 entered promiscuous mode [ 391.681148][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.692566][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.751766][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.760429][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.800572][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.807603][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.828935][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.846248][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.856711][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.863672][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.888198][ T473] device bridge_slave_1 left promiscuous mode [ 391.942256][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.274285][ T473] device bridge_slave_0 left promiscuous mode [ 392.304555][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.580497][ T473] device bridge_slave_1 left promiscuous mode [ 392.586846][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.602625][ T473] device bridge_slave_0 left promiscuous mode [ 392.615427][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.717558][ T473] device veth1_macvtap left promiscuous mode [ 392.723784][ T473] device veth0_vlan left promiscuous mode [ 392.824906][ T473] device veth1_macvtap left promiscuous mode [ 392.831181][ T473] device veth0_vlan left promiscuous mode [ 400.692884][ T2810] device wg2 left promiscuous mode [ 400.703418][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 400.721043][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 400.742003][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.769061][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 400.778066][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.998547][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.015115][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.080201][ T2707] device veth0_vlan entered promiscuous mode [ 401.101582][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.110687][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.270446][ T2866] syz-executor.1[2866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.270606][ T2866] syz-executor.1[2866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.404430][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.423943][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.438226][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.447591][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.459674][ T2707] device veth1_macvtap entered promiscuous mode [ 401.479224][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 401.488225][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.497759][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.517693][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.526989][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.654634][ T2864] device pim6reg1 entered promiscuous mode [ 403.790145][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.991801][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.163155][ T2893] device bridge_slave_0 entered promiscuous mode [ 406.087653][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.099392][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.452633][ T2893] device bridge_slave_1 entered promiscuous mode [ 406.964789][ T28] audit: type=1400 audit(1718549396.188:120): avc: denied { write } for pid=2928 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 414.054401][ T2943] device bridge_slave_1 entered promiscuous mode [ 416.347076][ T2970] syz-executor.4 (2970) used greatest stack depth: 19672 bytes left [ 424.146455][ T2973] device wg2 entered promiscuous mode [ 425.482285][ T3003] device syzkaller0 entered promiscuous mode [ 428.120130][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.133795][ T805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.320131][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P757 } 8212 jiffies s: 11937 root: 0x0/T [ 510.331708][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 528.151379][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 528.158214][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P757 [ 528.165223][ C0] (detected by 0, t=10003 jiffies, g=7629, q=399 ncpus=2) [ 528.172269][ C0] task:syz-executor.2 state:R running task stack:25456 pid:757 ppid:315 flags:0x0000400e [ 528.182997][ C0] Call Trace: [ 528.186454][ C0] [ 528.189245][ C0] __schedule+0xcaf/0x1550 [ 528.193645][ C0] ? __sched_text_start+0x8/0x8 [ 528.198330][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 528.204055][ C0] preempt_schedule_irq+0xc7/0x140 [ 528.209160][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 528.214715][ C0] ? ctx_flexible_sched_in+0xa8/0x100 [ 528.219935][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 528.225650][ C0] irqentry_exit+0x30/0x40 [ 528.230006][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 528.235488][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 528.241306][ C0] RIP: 0010:update_stack_state+0x289/0x460 [ 528.246973][ C0] Code: 00 74 08 4c 89 f7 e8 96 bd 84 00 49 83 3e 00 48 8b 45 a8 4c 8b ad 78 ff ff ff 74 22 44 3b 7d a4 75 1c 48 3b 45 98 73 16 31 db <89> d8 48 81 c4 90 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4d 85 [ 528.266467][ C0] RSP: 0018:ffffc90009ca70d8 EFLAGS: 00000246 [ 528.272467][ C0] RAX: ffffc90009ca7210 RBX: ffffc90009ca7201 RCX: 1ffff92001394e4f [ 528.280512][ C0] RDX: 1ffff92001394e46 RSI: ffffc90009ca7210 RDI: ffffc90009ca7278 [ 528.288473][ C0] RBP: ffffc90009ca7190 R08: dffffc0000000001 R09: ffffc90009ca7220 [ 528.296362][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001394e4c [ 528.304256][ C0] R13: 0000000000000000 R14: ffffc90009ca7260 R15: dffffc0000000000 [ 528.312188][ C0] __unwind_start+0x1f4/0x3a0 [ 528.316797][ C0] ? save_stack+0xbd/0x1e0 [ 528.321173][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 528.326022][ C0] arch_stack_walk+0xdb/0x140 [ 528.330632][ C0] ? arch_stack_walk+0xdb/0x140 [ 528.335404][ C0] stack_trace_save+0x113/0x1c0 [ 528.340267][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 528.345209][ C0] ? kasan_check_range+0x82/0x2a0 [ 528.350090][ C0] save_stack+0xf6/0x1e0 [ 528.354159][ C0] ? __reset_page_owner+0x190/0x190 [ 528.359284][ C0] ? page_ext_get+0x95/0x140 [ 528.363787][ C0] __reset_page_owner+0x54/0x190 [ 528.368563][ C0] free_unref_page_prepare+0x83d/0x850 [ 528.373858][ C0] ? __kasan_check_read+0x11/0x20 [ 528.378710][ C0] ? free_unref_page_commit+0x1f5/0x510 [ 528.384190][ C0] free_unref_page+0xb2/0x5c0 [ 528.388709][ C0] ? mark_free_pages+0x3b0/0x3b0 [ 528.393673][ C0] __free_pages+0x61/0xf0 [ 528.397826][ C0] __vunmap+0x9f3/0xb60 [ 528.401829][ C0] ? vunmap+0x60/0x60 [ 528.405642][ C0] ? __kasan_slab_free+0x11/0x20 [ 528.410599][ C0] ? kcov_open+0x60/0x60 [ 528.414663][ C0] vfree+0x5c/0x80 [ 528.418227][ C0] kcov_close+0x2b/0x50 [ 528.422215][ C0] __fput+0x3ab/0x870 [ 528.426047][ C0] ____fput+0x15/0x20 [ 528.429860][ C0] task_work_run+0x24d/0x2e0 [ 528.434287][ C0] ? kmem_cache_free+0x291/0x510 [ 528.439072][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 528.443915][ C0] ? free_nsproxy+0x20d/0x260 [ 528.448439][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 528.453470][ C0] do_exit+0xbd5/0x2b80 [ 528.457456][ C0] ? __kasan_check_read+0x11/0x20 [ 528.462332][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 528.467449][ C0] ? put_task_struct+0x80/0x80 [ 528.472330][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 528.478292][ C0] ? irqentry_exit+0x30/0x40 [ 528.483090][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 528.488722][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 528.494708][ C0] ? __kasan_check_write+0x14/0x20 [ 528.499737][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 528.504679][ C0] do_group_exit+0x21a/0x2d0 [ 528.509308][ C0] ? __kasan_check_write+0x14/0x20 [ 528.514267][ C0] get_signal+0x169d/0x1820 [ 528.518713][ C0] ? ptrace_notify+0x350/0x350 [ 528.523392][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 528.528847][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 528.534577][ C0] ? __kasan_check_read+0x11/0x20 [ 528.539530][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 528.544652][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 528.550200][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 528.555933][ C0] ? get_sigframe_size+0x10/0x10 [ 528.560707][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 528.566614][ C0] ? irqentry_exit+0x30/0x40 [ 528.571110][ C0] ? fput+0x46/0x1b0 [ 528.574877][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 528.579962][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 528.585327][ C0] syscall_exit_to_user_mode+0x26/0x140 [ 528.590794][ C0] do_syscall_64+0x49/0xb0 [ 528.595141][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 528.600779][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 528.606592][ C0] RIP: 0033:0x7f8ae067cea9 [ 528.610846][ C0] RSP: 002b:00007f8ae13aa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.619187][ C0] RAX: 0000000000000000 RBX: 00007f8ae07b3f80 RCX: 00007f8ae067cea9 [ 528.627008][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 528.634813][ C0] RBP: 00007f8ae06ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 528.642806][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.650695][ C0] R13: 000000000000000b R14: 00007f8ae07b3f80 R15: 00007ffe6a284eb8 [ 528.658525][ C0] [ 551.126134][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 120s! [syz-executor.2:757] [ 551.134521][ C1] Modules linked in: [ 551.138273][ C1] CPU: 1 PID: 757 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 551.148063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 551.157956][ C1] RIP: 0010:update_stack_state+0x3c9/0x460 [ 551.163593][ C1] Code: ca 7e 49 39 06 74 0d 48 89 df e8 42 fc ff ff 49 89 c6 eb 19 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 37 bc 84 00 <4c> 8b 33 48 8b 5d d0 48 83 c3 48 48 89 d8 48 c1 e8 03 42 80 3c 38 [ 551.183562][ C1] RSP: 0018:ffffc900001aff30 EFLAGS: 00000246 [ 551.189552][ C1] RAX: 1ffff920000361fe RBX: ffffc900001b0ff0 RCX: 1ffff9200003601b [ 551.197366][ C1] RDX: 1ffff92000036012 RSI: ffffc900001b0fe8 RDI: ffffc900001b00d8 [ 551.205174][ C1] RBP: ffffc900001affe8 R08: ffffc900001b0168 R09: 0000000000000012 [ 551.212985][ C1] R10: ffffc900001b0170 R11: dffffc0000000001 R12: 1ffff92000036018 [ 551.220792][ C1] R13: 0000000000000000 R14: ffffc900001b00a8 R15: dffffc0000000000 [ 551.228658][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 551.237374][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.243797][ C1] CR2: 00007f907cb01704 CR3: 000000010e763000 CR4: 00000000003506a0 [ 551.251755][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.259832][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.268165][ C1] Call Trace: [ 551.271288][ C1] [ 551.273999][ C1] ? show_regs+0x58/0x60 [ 551.278060][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 551.283090][ C1] ? proc_watchdog_cpumask+0xf0/0xf0 [ 551.288227][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 551.293438][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 551.298452][ C1] ? clockevents_program_event+0x236/0x300 [ 551.304107][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 551.310009][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 551.315007][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 551.320981][ C1] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 551.326624][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 551.332621][ C1] ? update_stack_state+0x3c9/0x460 [ 551.337906][ C1] unwind_next_frame+0x3cb/0x700 [ 551.342644][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 551.347582][ C1] arch_stack_walk+0x10d/0x140 [ 551.352188][ C1] ? irq_exit_rcu+0x9/0x10 [ 551.356533][ C1] stack_trace_save+0x113/0x1c0 [ 551.361211][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 551.366518][ C1] ? kasan_check_range+0x17a/0x2a0 [ 551.371939][ C1] ? ref_tracker_alloc+0x138/0x450 [ 551.376876][ C1] ? ref_tracker_alloc+0x138/0x450 [ 551.381921][ C1] kasan_set_track+0x4b/0x70 [ 551.386421][ C1] ? kasan_set_track+0x4b/0x70 [ 551.391018][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 551.396159][ C1] ? __kasan_kmalloc+0x9c/0xb0 [ 551.400742][ C1] ? kmalloc_trace+0x44/0xa0 [ 551.405170][ C1] ? ref_tracker_alloc+0x138/0x450 [ 551.410124][ C1] ? ___neigh_create+0xb6e/0x1db0 [ 551.414989][ C1] ? __neigh_create+0x32/0x40 [ 551.419488][ C1] ? ip6_finish_output2+0x9ca/0x1820 [ 551.424783][ C1] ? ip6_finish_output+0x50f/0xa60 [ 551.429727][ C1] ? ip6_output+0x1f7/0x4d0 [ 551.434075][ C1] ? ndisc_send_skb+0x7cf/0xdc0 [ 551.438850][ C1] ? ndisc_send_rs+0x47d/0x5f0 [ 551.443449][ C1] ? addrconf_rs_timer+0x2d1/0x600 [ 551.448407][ C1] ? call_timer_fn+0x3b/0x2d0 [ 551.452913][ C1] ? __run_timers+0x72a/0xa10 [ 551.457427][ C1] ? run_timer_softirq+0x69/0xf0 [ 551.462207][ C1] ? __do_softirq+0x1d8/0x661 [ 551.466721][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 551.471350][ C1] ? irq_exit_rcu+0x9/0x10 [ 551.475626][ C1] kasan_save_alloc_info+0x1f/0x30 [ 551.480654][ C1] __kasan_kmalloc+0x9c/0xb0 [ 551.485236][ C1] kmalloc_trace+0x44/0xa0 [ 551.489653][ C1] ref_tracker_alloc+0x138/0x450 [ 551.494424][ C1] ? exit_to_user_mode_loop+0x74/0xa0 [ 551.499631][ C1] ? do_syscall_64+0x49/0xb0 [ 551.504053][ C1] ? ref_tracker_dir_print+0x160/0x160 [ 551.509368][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 551.514478][ C1] ? __kasan_kmalloc+0x9c/0xb0 [ 551.519169][ C1] ___neigh_create+0xb6e/0x1db0 [ 551.523841][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 551.529141][ C1] ? sched_clock+0x9/0x10 [ 551.533309][ C1] ? __kasan_check_write+0x14/0x20 [ 551.538255][ C1] ? __sched_clock_gtod_offset+0x100/0x100 [ 551.543894][ C1] __neigh_create+0x32/0x40 [ 551.548423][ C1] ip6_finish_output2+0x9ca/0x1820 [ 551.553479][ C1] ? ip6_make_skb+0x7a0/0x7a0 [ 551.557974][ C1] ? nf_hook_slow+0xd1/0x200 [ 551.562395][ C1] ? ip6_finish_output+0x42c/0xa60 [ 551.567353][ C1] ip6_finish_output+0x50f/0xa60 [ 551.572132][ C1] ip6_output+0x1f7/0x4d0 [ 551.576289][ C1] ? ac6_seq_show+0xf0/0xf0 [ 551.580626][ C1] ? ip6_output+0x4d0/0x4d0 [ 551.585083][ C1] ndisc_send_skb+0x7cf/0xdc0 [ 551.589768][ C1] ? ndisc_mc_map+0x920/0x920 [ 551.594269][ C1] ? ndisc_send_skb+0xdc0/0xdc0 [ 551.598967][ C1] ? memset+0x35/0x40 [ 551.602778][ C1] ? __ndisc_fill_addr_option+0xd4/0x130 [ 551.608337][ C1] ndisc_send_rs+0x47d/0x5f0 [ 551.612766][ C1] addrconf_rs_timer+0x2d1/0x600 [ 551.617620][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 551.623527][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 551.628467][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 551.633956][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 551.639837][ C1] call_timer_fn+0x3b/0x2d0 [ 551.644179][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 551.650080][ C1] __run_timers+0x72a/0xa10 [ 551.654432][ C1] ? calc_index+0x270/0x270 [ 551.658756][ C1] ? __irq_exit_rcu+0x5c/0xf0 [ 551.663364][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 551.668408][ C1] run_timer_softirq+0x69/0xf0 [ 551.673001][ C1] __do_softirq+0x1d8/0x661 [ 551.677346][ C1] ? irqtime_account_irq+0xdc/0x260 [ 551.682403][ C1] __irq_exit_rcu+0x50/0xf0 [ 551.686718][ C1] irq_exit_rcu+0x9/0x10 [ 551.690790][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 551.696259][ C1] [ 551.699042][ C1] [ 551.701811][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 551.707626][ C1] RIP: 0010:finish_task_switch+0x16f/0x7b0 [ 551.713279][ C1] Code: 74 08 4c 89 ff e8 81 37 6c 00 49 8b 1f 48 85 db 4c 8b 6d c0 0f 85 ce 00 00 00 4c 89 e7 e8 d9 08 b0 03 fb 49 8d 9d 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 [ 551.732803][ C1] RSP: 0018:ffffc90009ca6dc0 EFLAGS: 00000282 [ 551.738704][ C1] RAX: 0000000080000001 RBX: ffff88810fb17088 RCX: 0000000000000002 [ 551.747310][ C1] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 551.755139][ C1] RBP: ffffc90009ca6e10 R08: ffffffff819b1f60 R09: fffffbfff0ede2ff [ 551.763123][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7137080 [ 551.770933][ C1] R13: ffff88810fb16540 R14: 1ffff1103ee26f7c R15: ffff8881f7137be0 [ 551.778761][ C1] ? __perf_event_task_sched_in+0x180/0x1f0 [ 551.784497][ C1] __schedule+0xcaf/0x1550 [ 551.788747][ C1] ? __sched_text_start+0x8/0x8 [ 551.793425][ C1] ? queued_write_lock_slowpath+0x460/0x547 [ 551.799161][ C1] preempt_schedule_irq+0xc7/0x140 [ 551.804187][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 551.809741][ C1] ? ctx_flexible_sched_in+0xa8/0x100 [ 551.814953][ C1] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 551.820675][ C1] irqentry_exit+0x30/0x40 [ 551.824929][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 551.830395][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 551.836212][ C1] RIP: 0010:update_stack_state+0x289/0x460 [ 551.841882][ C1] Code: 00 74 08 4c 89 f7 e8 96 bd 84 00 49 83 3e 00 48 8b 45 a8 4c 8b ad 78 ff ff ff 74 22 44 3b 7d a4 75 1c 48 3b 45 98 73 16 31 db <89> d8 48 81 c4 90 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4d 85 [ 551.861296][ C1] RSP: 0018:ffffc90009ca70d8 EFLAGS: 00000246 [ 551.867610][ C1] RAX: ffffc90009ca7210 RBX: ffffc90009ca7201 RCX: 1ffff92001394e4f [ 551.875420][ C1] RDX: 1ffff92001394e46 RSI: ffffc90009ca7210 RDI: ffffc90009ca7278 [ 551.883228][ C1] RBP: ffffc90009ca7190 R08: dffffc0000000001 R09: ffffc90009ca7220 [ 551.891054][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001394e4c [ 551.898854][ C1] R13: 0000000000000000 R14: ffffc90009ca7260 R15: dffffc0000000000 [ 551.906833][ C1] __unwind_start+0x1f4/0x3a0 [ 551.911416][ C1] ? save_stack+0xbd/0x1e0 [ 551.915675][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 551.920520][ C1] arch_stack_walk+0xdb/0x140 [ 551.925048][ C1] ? arch_stack_walk+0xdb/0x140 [ 551.929814][ C1] stack_trace_save+0x113/0x1c0 [ 551.934500][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 551.939443][ C1] ? kasan_check_range+0x82/0x2a0 [ 551.944312][ C1] save_stack+0xf6/0x1e0 [ 551.948390][ C1] ? __reset_page_owner+0x190/0x190 [ 551.953609][ C1] ? page_ext_get+0x95/0x140 [ 551.958112][ C1] __reset_page_owner+0x54/0x190 [ 551.962896][ C1] free_unref_page_prepare+0x83d/0x850 [ 551.968190][ C1] ? __kasan_check_read+0x11/0x20 [ 551.973577][ C1] ? free_unref_page_commit+0x1f5/0x510 [ 551.978963][ C1] free_unref_page+0xb2/0x5c0 [ 551.983474][ C1] ? mark_free_pages+0x3b0/0x3b0 [ 551.988340][ C1] __free_pages+0x61/0xf0 [ 551.992508][ C1] __vunmap+0x9f3/0xb60 [ 551.996486][ C1] ? vunmap+0x60/0x60 [ 552.000306][ C1] ? __kasan_slab_free+0x11/0x20 [ 552.005084][ C1] ? kcov_open+0x60/0x60 [ 552.009157][ C1] vfree+0x5c/0x80 [ 552.012716][ C1] kcov_close+0x2b/0x50 [ 552.016719][ C1] __fput+0x3ab/0x870 [ 552.020625][ C1] ____fput+0x15/0x20 [ 552.024435][ C1] task_work_run+0x24d/0x2e0 [ 552.028858][ C1] ? kmem_cache_free+0x291/0x510 [ 552.033635][ C1] ? task_work_cancel+0x2b0/0x2b0 [ 552.038579][ C1] ? free_nsproxy+0x20d/0x260 [ 552.043268][ C1] ? exit_task_namespaces+0xb4/0xd0 [ 552.048409][ C1] do_exit+0xbd5/0x2b80 [ 552.052397][ C1] ? __kasan_check_read+0x11/0x20 [ 552.057268][ C1] ? preempt_schedule_irq+0xe7/0x140 [ 552.062389][ C1] ? put_task_struct+0x80/0x80 [ 552.067085][ C1] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 552.072990][ C1] ? irqentry_exit+0x30/0x40 [ 552.077403][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 552.083082][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 552.089031][ C1] ? __kasan_check_write+0x14/0x20 [ 552.093973][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 552.098929][ C1] do_group_exit+0x21a/0x2d0 [ 552.103360][ C1] ? __kasan_check_write+0x14/0x20 [ 552.108307][ C1] get_signal+0x169d/0x1820 [ 552.112653][ C1] ? ptrace_notify+0x350/0x350 [ 552.117246][ C1] arch_do_signal_or_restart+0xb0/0x16f0 [ 552.122712][ C1] ? queued_write_lock_slowpath+0x460/0x547 [ 552.128446][ C1] ? __kasan_check_read+0x11/0x20 [ 552.133306][ C1] ? preempt_schedule_irq+0xe7/0x140 [ 552.138417][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 552.143983][ C1] ? queued_write_lock_slowpath+0x460/0x547 [ 552.149704][ C1] ? get_sigframe_size+0x10/0x10 [ 552.154477][ C1] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 552.160382][ C1] ? irqentry_exit+0x30/0x40 [ 552.164825][ C1] ? fput+0x46/0x1b0 [ 552.168551][ C1] exit_to_user_mode_loop+0x74/0xa0 [ 552.173673][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 552.178965][ C1] syscall_exit_to_user_mode+0x26/0x140 [ 552.184432][ C1] do_syscall_64+0x49/0xb0 [ 552.188686][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 552.194330][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 552.200066][ C1] RIP: 0033:0x7f8ae067cea9 [ 552.204310][ C1] Code: Unable to access opcode bytes at 0x7f8ae067ce7f. [ 552.211171][ C1] RSP: 002b:00007f8ae13aa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.219415][ C1] RAX: 0000000000000000 RBX: 00007f8ae07b3f80 RCX: 00007f8ae067cea9 [ 552.227234][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 552.235045][ C1] RBP: 00007f8ae06ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 552.242944][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.250762][ C1] R13: 000000000000000b R14: 00007f8ae07b3f80 R15: 00007ffe6a284eb8 [ 552.259190][ C1] [ 552.262128][ C1] Sending NMI from CPU 1 to CPUs 0: [ 552.267156][ C0] NMI backtrace for cpu 0 [ 552.267179][ C0] CPU: 0 PID: 904 Comm: kworker/u4:6 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 552.267231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 552.267259][ C0] Workqueue: events_unbound toggle_allocation_gate [ 552.267315][ C0] RIP: 0010:smp_call_function_many_cond+0x856/0x930 [ 552.267400][ C0] Code: e6 01 31 ff e8 4b 9f 09 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0a e8 86 9b 09 00 e9 2f ff ff ff f3 90 42 0f b6 04 3b <84> c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff e8 64 9b 09 00 [ 552.267442][ C0] RSP: 0018:ffffc9000452f840 EFLAGS: 00000293 [ 552.267478][ C0] RAX: 0000000000000000 RBX: 1ffff1103ee27705 RCX: ffff88810eac3cc0 [ 552.267514][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 552.267542][ C0] RBP: ffffc9000452f958 R08: ffffffff816bd865 R09: ffffed103ee0707b [ 552.267579][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 552.267611][ C0] R13: 0000000800000000 R14: ffff8881f713b828 R15: dffffc0000000000 [ 552.267647][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 552.267690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.267725][ C0] CR2: 00007ffd75b74f40 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 552.267761][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 552.267791][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 552.267822][ C0] Call Trace: [ 552.267835][ C0] [ 552.267850][ C0] ? show_regs+0x58/0x60 [ 552.267898][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 552.267964][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 552.268037][ C0] ? smp_call_function_many_cond+0x856/0x930 [ 552.268109][ C0] ? smp_call_function_many_cond+0x856/0x930 [ 552.268194][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 552.268250][ C0] ? nmi_handle+0xa7/0x280 [ 552.268303][ C0] ? smp_call_function_many_cond+0x856/0x930 [ 552.268383][ C0] ? default_do_nmi+0x69/0x160 [ 552.268442][ C0] ? exc_nmi+0xaf/0x120 [ 552.268495][ C0] ? end_repeat_nmi+0x16/0x31 [ 552.268550][ C0] ? smp_call_function_many_cond+0x835/0x930 [ 552.268624][ C0] ? smp_call_function_many_cond+0x856/0x930 [ 552.268699][ C0] ? smp_call_function_many_cond+0x856/0x930 [ 552.268776][ C0] ? smp_call_function_many_cond+0x856/0x930 [ 552.268849][ C0] [ 552.268863][ C0] [ 552.268883][ C0] ? text_poke_sync+0x30/0x30 [ 552.268954][ C0] ? smp_call_function_many+0x40/0x40 [ 552.269031][ C0] ? text_poke_sync+0x30/0x30 [ 552.269102][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 552.269174][ C0] ? kmem_cache_alloc_bulk+0x105/0x3d0 [ 552.269224][ C0] text_poke_bp_batch+0x1e9/0x730 [ 552.269304][ C0] ? text_poke_loc_init+0x680/0x680 [ 552.269383][ C0] ? __kasan_check_write+0x14/0x20 [ 552.269426][ C0] ? mutex_lock+0xb1/0x1e0 [ 552.269482][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 552.269543][ C0] ? bit_wait_io_timeout+0x120/0x120 [ 552.269601][ C0] ? text_poke_queue+0xe4/0x1a0 [ 552.269669][ C0] text_poke_finish+0x1a/0x30 [ 552.269747][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 552.269817][ C0] __jump_label_update+0x36a/0x380 [ 552.269875][ C0] jump_label_update+0x3af/0x450 [ 552.269927][ C0] static_key_enable_cpuslocked+0x12f/0x250 [ 552.269981][ C0] static_key_enable+0x1a/0x30 [ 552.270027][ C0] toggle_allocation_gate+0xbf/0x450 [ 552.270079][ C0] ? show_object+0xa0/0xa0 [ 552.270123][ C0] ? try_to_wake_up+0x670/0x1220 [ 552.270200][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 552.270276][ C0] ? cpu_curr_snapshot+0x90/0x90 [ 552.270349][ C0] ? __kasan_check_read+0x11/0x20 [ 552.270393][ C0] ? read_word_at_a_time+0x12/0x20 [ 552.270473][ C0] ? strscpy+0x9c/0x260 [ 552.270547][ C0] process_one_work+0x73d/0xcb0 2024/06/16 14:52:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: read tcp 10.128.1.117:53840->10.128.0.163:30014: read: connection reset by peer [ 552.270626][ C0] worker_thread+0xa60/0x1260 [ 552.270706][ C0] ? __kasan_check_read+0x11/0x20 [ 552.270755][ C0] kthread+0x26d/0x300 [ 552.270805][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 552.270872][ C0] ? kthread_blkcg+0xd0/0xd0 [ 552.270926][ C0] ret_from_fork+0x1f/0x30 [ 552.270991][ C0]