last executing test programs: 27.204619681s ago: executing program 4 (id=213): perf_event_open(&(0x7f0000000180)={0x1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x4, 0x0, 0x88}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 24.705928557s ago: executing program 4 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'geneve1\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) 23.834016191s ago: executing program 3 (id=234): perf_event_open(&(0x7f0000000180)={0x1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x4, 0x0, 0x88}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23.71551316s ago: executing program 4 (id=236): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 23.522363209s ago: executing program 2 (id=238): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000fc0)='ext4_ext_convert_to_initialized_fastpath\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x7f, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r1, 0x0, 0x0}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080c0000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22.342943202s ago: executing program 2 (id=240): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22.339580002s ago: executing program 2 (id=242): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)="7ea3294552834d921b65a31477906ceb410c983943fcac", &(0x7f00000000c0), 0x87}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) 22.337895772s ago: executing program 1 (id=244): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000001c0), &(0x7f0000000ac0)}, 0x7e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000000), 0x400000) 22.136500743s ago: executing program 1 (id=246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000000c0), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22.108367797s ago: executing program 1 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 22.076206292s ago: executing program 1 (id=248): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 22.054036086s ago: executing program 2 (id=249): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 21.915037667s ago: executing program 2 (id=250): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000fc0)='ext4_ext_convert_to_initialized_fastpath\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x7f, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r1, 0x0, 0x0}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080c0000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 21.798922725s ago: executing program 3 (id=252): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) 21.798771335s ago: executing program 3 (id=253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 21.76889256s ago: executing program 3 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x210001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 21.724598417s ago: executing program 3 (id=255): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x0, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000280)=""/266, 0x2b, 0x10a, 0x6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0xf7, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xae, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000017c0)=@generic={0x0}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3}, [@ldst, @ldst]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x80) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x0, 0x5, &(0x7f0000001500)) 21.69899573s ago: executing program 1 (id=256): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 21.619195653s ago: executing program 2 (id=257): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0xfe5f}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) 21.553987793s ago: executing program 1 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0x4) 21.466899027s ago: executing program 0 (id=259): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)="7ea3294552834d921b65a31477906ceb410c983943fcac", &(0x7f00000000c0), 0x87}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) 17.445680937s ago: executing program 3 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 920.606567ms ago: executing program 0 (id=261): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000081000000000000000000085"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 615.160415ms ago: executing program 0 (id=266): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r1}, 0x10) unlink(&(0x7f0000000280)='./cgroup\x00') 543.666056ms ago: executing program 0 (id=267): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 413.971786ms ago: executing program 0 (id=268): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x2, 0x4, 0x400, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 287.028805ms ago: executing program 0 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000240)={'gre0\x00'}) 286.863895ms ago: executing program 4 (id=265): perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(r1, &(0x7f0000000380), 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_ext_remove_space_done\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000340)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 222.782785ms ago: executing program 4 (id=270): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}], {0x95, 0x0, 0x2c}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 0s ago: executing program 4 (id=271): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)="7ea3294552834d921b65a31477906ceb410c983943fcac", &(0x7f00000000c0), 0x87}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 26.907847][ T23] audit: type=1400 audit(1719275707.830:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.912271][ T341] cgroup1: Unknown subsys name 'net' [ 26.930455][ T23] audit: type=1400 audit(1719275707.830:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.960197][ T341] cgroup1: Unknown subsys name 'net_prio' [ 26.966503][ T341] cgroup1: Unknown subsys name 'devices' [ 26.974218][ T23] audit: type=1400 audit(1719275707.900:68): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.148874][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 27.154996][ T341] cgroup1: Unknown subsys name 'rlimit' [ 27.162679][ T23] audit: type=1400 audit(1719275708.090:69): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.338504][ T23] audit: type=1400 audit(1719275708.260:70): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.362763][ T23] audit: type=1400 audit(1719275708.260:71): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.388111][ T23] audit: type=1400 audit(1719275708.260:72): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.395559][ T345] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.420099][ T23] audit: type=1400 audit(1719275708.350:73): avc: denied { relabelto } for pid=345 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.445671][ T23] audit: type=1400 audit(1719275708.350:74): avc: denied { write } for pid=345 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 27.525256][ T23] audit: type=1400 audit(1719275708.450:75): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.610437][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.454073][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.460951][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.470061][ T355] device bridge_slave_0 entered promiscuous mode [ 28.482519][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.489396][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.497794][ T352] device bridge_slave_0 entered promiscuous mode [ 28.514838][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.521752][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.529722][ T355] device bridge_slave_1 entered promiscuous mode [ 28.556151][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.563146][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.571198][ T352] device bridge_slave_1 entered promiscuous mode [ 28.578532][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.585466][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.593739][ T356] device bridge_slave_0 entered promiscuous mode [ 28.642835][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.649801][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.657968][ T356] device bridge_slave_1 entered promiscuous mode [ 28.680326][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.687225][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.695324][ T353] device bridge_slave_0 entered promiscuous mode [ 28.737284][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.744331][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.752477][ T353] device bridge_slave_1 entered promiscuous mode [ 28.833245][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.840123][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.848751][ T354] device bridge_slave_0 entered promiscuous mode [ 28.903790][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.910678][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.918886][ T354] device bridge_slave_1 entered promiscuous mode [ 29.343173][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.350148][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.357813][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.364817][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.393138][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.400698][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.562711][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.570671][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.629522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.639064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.647995][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.654966][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.672184][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.680296][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.708674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.718748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.727348][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.734213][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.742341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.749963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.773245][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.782770][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.791004][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.797901][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.807379][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.846844][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.856394][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.864984][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.872145][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.880461][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.889688][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.898412][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.907623][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.916579][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.923619][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.930972][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.939927][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.948364][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.957027][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.965875][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.972755][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.980660][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.002499][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.010392][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.020226][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.029559][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.038104][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.045001][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.074584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.082713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.091454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.100699][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.107685][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.146426][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.154681][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.162919][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.171532][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.181575][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.188764][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.196292][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.204896][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.213168][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.220206][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.241778][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.249703][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.258570][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.266945][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.275868][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.303538][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.323737][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.346182][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.355052][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.364211][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.373324][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.405942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.414831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.434657][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.443934][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.499059][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.509094][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.518233][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.527534][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.541763][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.550371][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.581293][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.590825][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.599396][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.609102][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.641781][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.650284][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.659098][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.668144][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.677582][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.686390][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.710061][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.718499][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.750059][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.759471][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.768053][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.776722][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.785921][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.794909][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.825620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.834644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.860793][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.869250][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.890622][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.900157][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.909250][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.918225][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.947096][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.956616][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.011187][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.022393][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.031394][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.041096][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.046538][ C0] hrtimer: interrupt took 23927 ns [ 31.050454][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.063550][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.107010][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.119265][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.129047][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.138691][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.148828][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.158043][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.009482][ T23] kauditd_printk_skb: 25 callbacks suppressed [ 32.009511][ T23] audit: type=1400 audit(1719275712.930:101): avc: denied { create } for pid=398 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.746679][ T23] audit: type=1400 audit(1719275713.670:102): avc: denied { cpu } for pid=420 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.786270][ T402] device syzkaller0 entered promiscuous mode [ 33.034141][ T23] audit: type=1400 audit(1719275713.960:103): avc: denied { relabelfrom } for pid=401 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.105689][ T23] audit: type=1400 audit(1719275713.960:104): avc: denied { relabelto } for pid=401 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.326410][ T436] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 4294967295 (only 8 groups) [ 33.610813][ T23] audit: type=1400 audit(1719275714.530:105): avc: denied { read } for pid=439 comm="syz.3.17" name="ppp" dev="devtmpfs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.719693][ T23] audit: type=1400 audit(1719275714.530:106): avc: denied { open } for pid=439 comm="syz.3.17" path="/dev/ppp" dev="devtmpfs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.731426][ T480] cgroup: syz.2.29 (480) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 34.749705][ T480] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 36.112781][ T23] audit: type=1400 audit(1719275717.040:107): avc: denied { create } for pid=551 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 36.543945][ T23] audit: type=1400 audit(1719275717.470:108): avc: denied { read } for pid=575 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.631888][ T23] audit: type=1400 audit(1719275717.520:109): avc: denied { write } for pid=575 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.024967][ T642] device sit0 entered promiscuous mode [ 39.751946][ T661] syz.2.102[661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.752059][ T661] syz.2.102[661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.163205][ T714] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 45.670413][ T778] [ 45.691157][ T778] ********************************************************** [ 45.751827][ T778] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 45.765957][ T778] ** ** [ 45.776671][ T778] ** trace_printk() being used. Allocating extra memory. ** [ 45.794074][ T778] ** ** [ 45.805769][ T778] ** This means that this is a DEBUG kernel and it is ** [ 45.816591][ T778] ** unsafe for production use. ** [ 45.892478][ T778] ** ** [ 45.916295][ T778] ** If you see this message and you are not debugging ** [ 45.934290][ T778] ** the kernel, report this immediately to your vendor! ** [ 46.004112][ T778] ** ** [ 46.019031][ T778] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 46.040224][ T778] ********************************************************** [ 48.619603][ T448] syz.3.17 (448) used greatest stack depth: 21592 bytes left [ 48.831854][ T23] audit: type=1400 audit(1719275729.730:110): avc: denied { create } for pid=861 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 49.112370][ T857] device syzkaller0 entered promiscuous mode [ 50.596800][ T919] device syzkaller0 entered promiscuous mode [ 53.975403][ T972] device syzkaller0 entered promiscuous mode [ 55.040207][ T997] device syzkaller0 entered promiscuous mode [ 56.919446][ T1033] device syzkaller0 entered promiscuous mode [ 57.721093][ T944] syz.4.203 (944) used greatest stack depth: 21464 bytes left [ 58.214707][ T1059] syz.1.244 (1059) used greatest stack depth: 21112 bytes left [ 58.810773][ T23] audit: type=1400 audit(1719275739.730:111): avc: denied { create } for pid=1085 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.782875][ T13] cfg80211: failed to load regulatory.db [ 75.022983][ T355] syz-executor (355) used greatest stack depth: 20760 bytes left [ 75.156694][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.165972][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.175146][ T1105] device bridge_slave_0 entered promiscuous mode [ 75.223037][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.230008][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.244666][ T1105] device bridge_slave_1 entered promiscuous mode [ 75.274236][ T352] syz-executor (352) used greatest stack depth: 19160 bytes left [ 75.612213][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.619478][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.629546][ T1109] device bridge_slave_0 entered promiscuous mode [ 75.647895][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.656015][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.666611][ T1107] device bridge_slave_0 entered promiscuous mode [ 75.692426][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.699414][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.709793][ T1109] device bridge_slave_1 entered promiscuous mode [ 75.725892][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.733625][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.742735][ T1107] device bridge_slave_1 entered promiscuous mode [ 75.760465][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.768417][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.777462][ T1108] device bridge_slave_0 entered promiscuous mode [ 75.828711][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.835925][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.846110][ T1108] device bridge_slave_1 entered promiscuous mode [ 75.875834][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.884379][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.893546][ T1110] device bridge_slave_0 entered promiscuous mode [ 75.948157][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.955333][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.964379][ T1110] device bridge_slave_1 entered promiscuous mode [ 76.300866][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.308264][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.315601][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.323187][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.609908][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.617112][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.624672][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.631642][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.718720][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.762326][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.803629][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.254446][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.340115][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.351084][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.360096][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.369097][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.378766][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.385683][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.396518][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.405626][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.414681][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.421555][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.563644][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.574139][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.582724][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.591610][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.652195][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.660166][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.717217][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.727792][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.738312][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.745605][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.757901][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.766737][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.776424][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.783336][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.792648][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.800625][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.809366][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.818639][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.828099][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.835280][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.894971][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.904337][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.912813][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.920809][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.937430][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.947127][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.954042][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.017682][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.027771][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.037207][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.050324][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.059915][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.066957][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.075853][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.084714][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.093781][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.100830][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.109152][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.118683][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.128706][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.138045][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.207933][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.217143][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.226717][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.239773][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.249583][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.323834][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.333380][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.350145][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.358986][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.371615][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.381256][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.491036][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.511601][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.524056][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.532541][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.540297][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.550114][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.559560][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.569021][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.578365][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.588272][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.046932][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.055779][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.066002][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.074953][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.086246][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.099303][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.109027][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.117470][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.127239][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.137422][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.148781][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.158280][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.167908][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.177207][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.186512][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.195255][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.203965][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.212959][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.223414][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.233360][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.242531][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.251411][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.302511][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.310656][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.321109][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.330338][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.340237][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.349408][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.358258][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.367113][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.375828][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.385594][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.394408][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.151928][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.168534][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.189424][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.201212][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.210913][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.220535][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.229876][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.239112][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.248379][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.258161][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.381740][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 180.388556][ C0] (detected by 0, t=10002 jiffies, g=4629, q=294) [ 180.394890][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 9997 (4294955132-4294945135), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 180.408020][ C0] syz.0.259 R running task 24376 1094 356 0x8000400c [ 180.415714][ C0] Call Trace: [ 180.418834][ C0] [ 180.421563][ C0] sched_show_task+0x3fd/0x680 [ 180.426144][ C0] ? __ia32_sys_sched_rr_get_interval_time32+0x100/0x100 [ 180.433106][ C0] ? check_preemption_disabled+0x9f/0x320 [ 180.438677][ C0] print_other_cpu_stall+0x81d/0x9f0 [ 180.443771][ C0] ? __raise_softirq_irqoff+0x110/0x110 [ 180.449317][ C0] rcu_sched_clock_irq+0x71a/0x13f0 [ 180.454358][ C0] update_process_times+0x147/0x1b0 [ 180.459381][ C0] tick_sched_timer+0x22d/0x3c0 [ 180.464065][ C0] ? tick_setup_sched_timer+0x460/0x460 [ 180.469454][ C0] __hrtimer_run_queues+0x3e9/0xb90 [ 180.474665][ C0] ? _raw_read_lock+0x40/0x40 [ 180.479269][ C0] ? hrtimer_interrupt+0x890/0x890 [ 180.484205][ C0] ? kill_fasync+0x1f9/0x230 [ 180.488647][ C0] ? ktime_get_update_offsets_now+0x26c/0x280 [ 180.494544][ C0] hrtimer_interrupt+0x38a/0x890 [ 180.499340][ C0] smp_apic_timer_interrupt+0x110/0x460 [ 180.504695][ C0] apic_timer_interrupt+0xf/0x20 [ 180.509486][ C0] RIP: 0010:deref_stack_reg+0x1/0x1f0 [ 180.514692][ C0] Code: 5d c3 89 d9 80 e1 07 38 c1 0f 8c ba fe ff ff 48 89 df 89 74 24 14 e8 fe 41 64 00 8b 74 24 14 e9 a5 fe ff ff e8 60 12 0b 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 [ 180.534289][ C0] RSP: 0018:ffff8881f6e08e50 EFLAGS: 00000283 ORIG_RAX: ffffffffffffff13 [ 180.542618][ C0] RAX: fffffffffffffff0 RBX: ffff8881f6e09160 RCX: 0000000000000000 [ 180.550431][ C0] RDX: ffff8881f6e091a0 RSI: ffff8881f6e09d10 RDI: ffff8881f6e09160 [ 180.558240][ C0] RBP: ffff8881f6e09150 R08: dffffc0000000000 R09: ffff8881f6e091b0 [ 180.566140][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff0d57e83 [ 180.574041][ C0] R13: ffffffff86abf41d R14: ffffffff86abf41c R15: dffffc0000000000 [ 180.581952][ C0] ? apic_timer_interrupt+0xa/0x20 [ 180.586913][ C0] unwind_next_frame+0x1681/0x1ea0 [ 180.591949][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 180.596970][ C0] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 180.602772][ C0] ? check_preemption_disabled+0x9f/0x320 [ 180.608338][ C0] ? cpu_clock_event_read+0x50/0x50 [ 180.613464][ C0] ? check_preemption_disabled+0x9f/0x320 [ 180.619035][ C0] ? debug_smp_processor_id+0x20/0x20 [ 180.624575][ C0] ? call_timer_fn+0x36/0x390 [ 180.629105][ C0] ? __unwind_start+0x708/0x890 [ 180.633831][ C0] ? deref_stack_reg+0x1f0/0x1f0 [ 180.638655][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 180.643581][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 180.648442][ C0] arch_stack_walk+0x111/0x140 [ 180.653070][ C0] ? call_timer_fn+0x36/0x390 [ 180.657564][ C0] stack_trace_save+0x118/0x1c0 [ 180.662254][ C0] ? stack_trace_snprint+0x170/0x170 [ 180.667376][ C0] ? _raw_read_lock_irqsave+0xb5/0x110 [ 180.672670][ C0] ? check_preemption_disabled+0x9f/0x320 [ 180.678218][ C0] ? debug_smp_processor_id+0x20/0x20 [ 180.683429][ C0] __kasan_slab_free+0x1b5/0x270 [ 180.688205][ C0] ? __kasan_slab_free+0x1b5/0x270 [ 180.693235][ C0] ? kmem_cache_free+0x10b/0x2c0 [ 180.698007][ C0] ? netlink_broadcast_filtered+0x115f/0x1280 [ 180.703997][ C0] ? nlmsg_notify+0xf7/0x1b0 [ 180.708420][ C0] ? neigh_cleanup_and_release+0x2b/0x210 [ 180.713984][ C0] ? neigh_remove_one+0x350/0x3b0 [ 180.718958][ C0] ? ___neigh_create+0x3b3/0x1ae0 [ 180.723812][ C0] ? ip6_finish_output2+0x965/0x18e0 [ 180.729019][ C0] ? ip6_output+0x1b3/0x430 [ 180.733360][ C0] ? ndisc_send_skb+0x702/0xc30 [ 180.738046][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 180.743042][ C0] kmem_cache_free+0x10b/0x2c0 [ 180.747602][ C0] ? netlink_broadcast_filtered+0x115f/0x1280 [ 180.753599][ C0] netlink_broadcast_filtered+0x115f/0x1280 [ 180.759411][ C0] ? __alloc_skb+0x29e/0x4d0 [ 180.764194][ C0] nlmsg_notify+0xf7/0x1b0 [ 180.768445][ C0] neigh_cleanup_and_release+0x2b/0x210 [ 180.773825][ C0] neigh_remove_one+0x350/0x3b0 [ 180.778514][ C0] ___neigh_create+0x3b3/0x1ae0 [ 180.783217][ C0] ip6_finish_output2+0x965/0x18e0 [ 180.788148][ C0] ? __ip6_finish_output+0x790/0x790 [ 180.793267][ C0] ? ip6_mtu+0xe2/0x130 [ 180.797265][ C0] ? __ip6_finish_output+0x5e4/0x790 [ 180.802382][ C0] ip6_output+0x1b3/0x430 [ 180.806562][ C0] ? asan.module_dtor+0x20/0x20 [ 180.811435][ C0] ? ip6_output+0x430/0x430 [ 180.815783][ C0] ? nf_hook_slow+0x196/0x1e0 [ 180.820292][ C0] ndisc_send_skb+0x702/0xc30 [ 180.824834][ C0] ? ndisc_alloc_skb+0x2c0/0x2c0 [ 180.829587][ C0] ? ndisc_error_report+0xc0/0xc0 [ 180.834441][ C0] ? ndisc_send_rs+0x517/0x6a0 [ 180.839136][ C0] addrconf_rs_timer+0x2d1/0x600 [ 180.843909][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 180.849809][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 180.854926][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 180.860322][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 180.866210][ C0] call_timer_fn+0x36/0x390 [ 180.870680][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 180.876840][ C0] __run_timers+0x879/0xbe0 [ 180.881265][ C0] ? enqueue_timer+0x300/0x300 [ 180.885948][ C0] ? rcu_irq_exit+0x104/0x250 [ 180.890455][ C0] ? check_preemption_disabled+0x9f/0x320 [ 180.896015][ C0] ? debug_smp_processor_id+0x20/0x20 [ 180.901216][ C0] ? check_preemption_disabled+0x91/0x320 [ 180.906781][ C0] run_timer_softirq+0x63/0xf0 [ 180.911378][ C0] __do_softirq+0x23b/0x6b7 [ 180.915731][ C0] irq_exit+0x195/0x1c0 [ 180.919723][ C0] smp_apic_timer_interrupt+0x11a/0x460 [ 180.925098][ C0] apic_timer_interrupt+0xf/0x20 [ 180.929851][ C0] [ 180.932739][ C0] RIP: 0010:free_unref_page_prepare+0x3a/0x380 [ 180.938811][ C0] Code: 49 bd 00 00 00 00 00 fc ff df 0f 1f 44 00 00 49 8d 6c 24 18 48 89 eb 48 c1 eb 03 42 80 3c 2b 00 74 08 48 89 ef e8 16 4d 04 00 45 00 03 74 17 42 80 3c 2b 00 74 08 48 89 ef e8 81 4d 04 00 48 [ 180.958245][ C0] RSP: 0018:ffff8881e779f2e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 180.966752][ C0] RAX: 000015fffffffff8 RBX: 1ffffd4000e93fc3 RCX: dffffc0000000000 [ 180.974649][ C0] RDX: 0000000000000200 RSI: 00000000001d27f8 RDI: ffffea000749fe00 [ 180.982480][ C0] RBP: ffffea000749fe18 R08: dffffc0000000000 R09: ffffed103d288000 [ 180.990365][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea000749fe00 [ 180.998275][ C0] R13: dffffc0000000000 R14: 00000000001d27f8 R15: ffff8881e779f4e0 [ 181.006269][ C0] free_unref_page_list+0x10a/0x590 [ 181.011279][ C0] ? mem_cgroup_uncharge_list+0x114/0x160 [ 181.016825][ C0] ? debug_smp_processor_id+0x20/0x20 [ 181.022033][ C0] ? uncharge_batch+0x5c0/0x5c0 [ 181.026731][ C0] ? free_unref_page_commit+0x2d0/0x2d0 [ 181.032116][ C0] ? check_preemption_disabled+0x149/0x320 [ 181.037756][ C0] release_pages+0xad8/0xb20 [ 181.042174][ C0] ? irq_work_interrupt+0xa/0x20 [ 181.046958][ C0] ? lru_add_drain_per_cpu+0x60/0x60 [ 181.052077][ C0] ? free_swap_cache+0x124/0x210 [ 181.056925][ C0] ? free_pages_and_swap_cache+0x73/0x90 [ 181.062602][ C0] tlb_flush_mmu+0xc8/0x170 [ 181.067421][ C0] unmap_page_range+0x1d29/0x2620 [ 181.073188][ C0] ? irq_work_interrupt+0xa/0x20 [ 181.078696][ C0] ? copy_page_range+0x26f0/0x26f0 [ 181.084155][ C0] ? uprobe_munmap+0x23/0x410 [ 181.088778][ C0] unmap_vmas+0x355/0x4b0 [ 181.093184][ C0] ? unmap_page_range+0x2620/0x2620 [ 181.098802][ C0] ? tlb_gather_mmu+0x273/0x340 [ 181.104368][ C0] exit_mmap+0x2bc/0x520 [ 181.108897][ C0] ? vm_brk+0x20/0x20 [ 181.112708][ C0] ? __mmput+0x77/0x2c0 [ 181.116683][ C0] __mmput+0x8e/0x2c0 [ 181.120698][ C0] do_exit+0xc08/0x2bc0 [ 181.125154][ C0] ? perf_log_throttle+0x450/0x450 [ 181.130069][ C0] ? put_task_struct+0x80/0x80 [ 181.134840][ C0] ? check_preemption_disabled+0x9f/0x320 [ 181.140694][ C0] ? debug_smp_processor_id+0x20/0x20 [ 181.147033][ C0] ? ctx_pinned_sched_in+0x109/0x160 [ 181.152149][ C0] ? irq_work_interrupt+0xa/0x20 [ 181.157006][ C0] do_group_exit+0x138/0x300 [ 181.161445][ C0] get_signal+0xdb1/0x1440 [ 181.165707][ C0] do_signal+0xb0/0x11f0 [ 181.169841][ C0] ? check_memory_region+0x6f/0x280 [ 181.174881][ C0] ? finish_task_switch+0x1bb/0x590 [ 181.180042][ C0] ? signal_fault+0x1e0/0x1e0 [ 181.184694][ C0] ? __schedule+0xb0d/0x1320 [ 181.189260][ C0] ? exit_to_usermode_loop+0xb8/0x1a0 [ 181.194435][ C0] exit_to_usermode_loop+0xc0/0x1a0 [ 181.199465][ C0] prepare_exit_to_usermode+0x199/0x200 [ 181.204932][ C0] ret_from_intr+0x1c/0x1c [ 181.209297][ C0] RIP: 0033:0x7f36fa7a7d39 [ 181.213551][ C0] Code: Bad RIP value. [ 181.217620][ C0] RSP: 002b:00007f36f9a29048 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 181.225978][ C0] RAX: 0000000000000000 RBX: 00007f36fa935fa0 RCX: 00007f36fa7a7d39 [ 181.233781][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000005 [ 181.241596][ C0] RBP: 00007f36fa828766 R08: 0000000000000000 R09: 0000000000000000 [ 181.249502][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.257307][ C0] R13: 000000000000000b R14: 00007f36fa935fa0 R15: 00007fff96f72028 [ 181.265177][ C0] rcu: rcu_preempt kthread starved for 9997 jiffies! g4629 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 181.275960][ C0] rcu: RCU grace-period kthread stack dump: [ 181.281703][ C0] rcu_preempt R running task 28472 11 2 0x80004000 [ 181.289415][ C0] Call Trace: [ 181.292565][ C0] __schedule+0xb05/0x1320 [ 181.296820][ C0] ? is_mmconf_reserved+0x430/0x430 [ 181.301935][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 181.307231][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 181.311914][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 181.316875][ C0] schedule+0x12c/0x1d0 [ 181.320872][ C0] schedule_timeout+0x188/0x3d0 [ 181.325550][ C0] ? prepare_to_swait_event+0x35c/0x3a0 [ 181.331045][ C0] ? console_conditional_schedule+0x10/0x10 [ 181.336747][ C0] ? run_local_timers+0x160/0x160 [ 181.341626][ C0] ? finish_swait+0xa5/0x1a0 [ 181.346023][ C0] ? find_next_bit+0xc3/0x100 [ 181.350648][ C0] rcu_gp_kthread+0xea0/0x1d10 [ 181.355237][ C0] ? _raw_spin_unlock_irq+0x4a/0x60 [ 181.360274][ C0] ? dyntick_save_progress_counter+0x1b0/0x1b0 [ 181.366438][ C0] ? rcu_barrier_callback+0x50/0x50 [ 181.371509][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 181.376250][ C0] ? is_mmconf_reserved+0x430/0x430 [ 181.381293][ C0] ? __wake_up_locked+0xb7/0x110 [ 181.386134][ C0] ? __kthread_parkme+0xb0/0x1b0 [ 181.390908][ C0] kthread+0x2da/0x360 [ 181.394816][ C0] ? rcu_barrier_callback+0x50/0x50 [ 181.399841][ C0] ? kthread_blkcg+0xd0/0xd0 [ 181.404273][ C0] ret_from_fork+0x1f/0x30 [ 222.212099][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 122s! [syz.4.271:1146] [ 222.220608][ C1] Modules linked in: [ 222.224469][ C1] CPU: 1 PID: 1146 Comm: syz.4.271 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 222.234172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 222.244568][ C1] RIP: 0010:arch_stack_walk+0x118/0x140 [ 222.249935][ C1] Code: 89 df e8 cb e6 05 00 48 85 c0 74 20 4c 89 f7 48 89 c6 31 d2 41 ff d5 84 c0 74 11 48 89 df e8 cf e7 05 00 83 bd 70 ff ff ff 00 <75> d3 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 0f 48 83 c4 68 5b [ 222.270635][ C1] RSP: 0018:ffff8881f6f09700 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 222.278988][ C1] RAX: 0000000000000101 RBX: ffff8881f6f09700 RCX: 2e5816437f94d800 [ 222.286791][ C1] RDX: ffff8881f6f09740 RSI: ffff8881f6f09380 RDI: 0000000000000001 [ 222.294605][ C1] RBP: ffff8881f6f09790 R08: dffffc0000000000 R09: ffff8881f6f09750 [ 222.302421][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e4a46e40 [ 222.310448][ C1] R13: ffffffff8153b310 R14: ffff8881f6f097e0 R15: 0000000000000000 [ 222.318507][ C1] FS: 00007f0181da06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 222.327358][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.333785][ C1] CR2: 0000001b3121aff8 CR3: 00000001dd8f6000 CR4: 00000000003406a0 [ 222.341767][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.349609][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.357475][ C1] Call Trace: [ 222.360801][ C1] [ 222.363596][ C1] ? watchdog_timer_fn+0x53d/0x600 [ 222.368628][ C1] ? proc_watchdog_cpumask+0xc0/0xc0 [ 222.373739][ C1] ? __hrtimer_run_queues+0x3e9/0xb90 [ 222.379201][ C1] ? _raw_read_lock+0x40/0x40 [ 222.383741][ C1] ? hrtimer_interrupt+0x890/0x890 [ 222.388673][ C1] ? ktime_get+0xf9/0x130 [ 222.392827][ C1] ? hrtimer_interrupt+0x38a/0x890 [ 222.397792][ C1] ? smp_apic_timer_interrupt+0x110/0x460 [ 222.403349][ C1] ? apic_timer_interrupt+0xf/0x20 [ 222.408276][ C1] ? apic_timer_interrupt+0xa/0x20 [ 222.413323][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 222.418192][ C1] ? arch_stack_walk+0x118/0x140 [ 222.422987][ C1] ? __kmalloc_track_caller+0x100/0x2b0 [ 222.428338][ C1] stack_trace_save+0x118/0x1c0 [ 222.433027][ C1] ? stack_trace_snprint+0x170/0x170 [ 222.438242][ C1] ? timerqueue_add+0x258/0x280 [ 222.442931][ C1] __kasan_kmalloc+0x171/0x210 [ 222.447610][ C1] ? __kasan_kmalloc+0x171/0x210 [ 222.452421][ C1] __kmalloc_track_caller+0x100/0x2b0 [ 222.457678][ C1] ? ndisc_alloc_skb+0xee/0x2c0 [ 222.462365][ C1] ? kmem_cache_alloc+0xd9/0x250 [ 222.467228][ C1] ? ndisc_alloc_skb+0xee/0x2c0 [ 222.472113][ C1] __alloc_skb+0xb4/0x4d0 [ 222.476433][ C1] ? mod_timer_pending+0x20/0x20 [ 222.481209][ C1] ndisc_alloc_skb+0xee/0x2c0 [ 222.485897][ C1] ndisc_send_rs+0x269/0x6a0 [ 222.490329][ C1] ? ipv6_get_lladdr+0x1ae/0x1e0 [ 222.495106][ C1] addrconf_rs_timer+0x2d1/0x600 [ 222.500249][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 222.506216][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 222.511164][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 222.516724][ C1] ? br_forward_delay_timer_expired+0x218/0x250 [ 222.522801][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 222.528697][ C1] call_timer_fn+0x36/0x390 [ 222.533050][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 222.539037][ C1] __run_timers+0x879/0xbe0 [ 222.543388][ C1] ? enqueue_timer+0x300/0x300 [ 222.548058][ C1] ? rcu_irq_exit+0x104/0x250 [ 222.552576][ C1] ? check_preemption_disabled+0x9f/0x320 [ 222.558142][ C1] ? debug_smp_processor_id+0x20/0x20 [ 222.563340][ C1] ? check_preemption_disabled+0x91/0x320 [ 222.568914][ C1] run_timer_softirq+0x63/0xf0 [ 222.573499][ C1] __do_softirq+0x23b/0x6b7 [ 222.578029][ C1] irq_exit+0x195/0x1c0 [ 222.582018][ C1] smp_apic_timer_interrupt+0x11a/0x460 [ 222.587626][ C1] apic_timer_interrupt+0xf/0x20 [ 222.592312][ C1] [ 222.595116][ C1] RIP: 0010:do_vfs_ioctl+0xba1/0x1720 [ 222.600416][ C1] Code: 88 f4 ff 48 8b 0b 48 85 c9 48 8b 54 24 08 0f 84 53 04 00 00 44 89 ef 4c 89 fe ff d1 41 89 c6 31 db 31 ff 89 c6 e8 3f a6 c4 ff <45> 85 f6 0f 88 52 04 00 00 e8 41 a3 c4 ff e9 31 06 00 00 49 8d 5f [ 222.620703][ C1] RSP: 0018:ffff8881e2dcfcc0 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 222.628951][ C1] RAX: ffff8881e4a46e40 RBX: 0000000000000000 RCX: 0000000000000002 [ 222.636848][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.644666][ C1] RBP: ffff8881e2dcfed8 R08: ffffffff819f98d1 R09: ffffed103e22270b [ 222.652735][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103c5b9fa4 [ 222.660895][ C1] R13: 0000000000000005 R14: 0000000000000000 R15: ffff8881e3bfc300 [ 222.668900][ C1] ? do_vfs_ioctl+0xba1/0x1720 [ 222.673502][ C1] ? selinux_file_ioctl+0x372/0x970 [ 222.678542][ C1] ? __fd_install+0x119/0x230 [ 222.683135][ C1] ? apic_timer_interrupt+0xa/0x20 [ 222.688069][ C1] ? ioctl_preallocate+0x250/0x250 [ 222.693020][ C1] ? preempt_schedule_irq+0xe7/0x140 [ 222.698147][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 222.703700][ C1] ? __fget+0x407/0x490 [ 222.707686][ C1] ? retint_kernel+0x1b/0x1b [ 222.712122][ C1] ? file_has_perm+0x3f3/0x6c0 [ 222.716721][ C1] ? asan.module_dtor+0x20/0x20 [ 222.721405][ C1] ? security_file_ioctl+0x7d/0xa0 [ 222.726352][ C1] __x64_sys_ioctl+0xd4/0x110 [ 222.730869][ C1] do_syscall_64+0xca/0x1c0 [ 222.735204][ C1] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 222.741033][ C1] RIP: 0033:0x7f0182b1ed39 [ 222.745359][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.765860][ C1] RSP: 002b:00007f0181da0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.774116][ C1] RAX: ffffffffffffffda RBX: 00007f0182cacfa0 RCX: 00007f0182b1ed39 [ 222.781916][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000005 [ 222.789906][ C1] RBP: 00007f0182b9f766 R08: 0000000000000000 R09: 0000000000000000 [ 222.797818][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.805888][ C1] R13: 000000000000000b R14: 00007f0182cacfa0 R15: 00007ffeb615c918 [ 222.813731][ C1] Sending NMI from CPU 1 to CPUs 0: [ 222.822366][ C0] NMI backtrace for cpu 0 [ 222.822390][ C0] CPU: 0 PID: 1094 Comm: syz.0.259 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 222.822403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 222.822411][ C0] RIP: 0010:sched_clock_cpu+0x0/0x3a0 [ 222.822436][ C0] Code: 05 05 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 80 eb ed 85 48 89 de e8 2e 2b 02 01 e9 43 ff ff ff 66 0f 1f 84 00 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 20 0f 1f 44 00 00 e8 08 19 [ 222.822444][ C0] RSP: 0018:ffff8881f6e092c0 EFLAGS: 00000046 [ 222.822459][ C0] RAX: 0000000000000000 RBX: ffffffff85631f10 RCX: ffff8881e8ec1f80 [ 222.822470][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 222.822481][ C0] RBP: ffff8881e8ec1f80 R08: ffffffff82316ca1 R09: ffffed103edcb135 [ 222.822492][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 222.822502][ C0] R13: dffffc0000000000 R14: ffff8881e8ec1f80 R15: ffff8881f6e29170 [ 222.822514][ C0] FS: 00007f36f9a296c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 222.822523][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.822534][ C0] CR2: 00007f36fa7a7d0f CR3: 00000001ee1d8000 CR4: 00000000003406b0 [ 222.822545][ C0] DR0: 0040000100000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.822556][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 222.822561][ C0] Call Trace: [ 222.822565][ C0] [ 222.822572][ C0] ? nmi_cpu_backtrace+0x112/0x130 [ 222.822580][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 222.822587][ C0] ? nmi_handle+0xad/0x2f0 [ 222.822594][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 222.822600][ C0] ? do_nmi+0x251/0x610 [ 222.822607][ C0] ? end_repeat_nmi+0x16/0x2c [ 222.822615][ C0] ? check_preemption_disabled+0x91/0x320 [ 222.822623][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 222.822631][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 222.822639][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 222.822643][ C0] [ 222.822648][ C0] [ 222.822655][ C0] irqtime_account_irq+0x6d/0x1b0 [ 222.822661][ C0] irq_enter+0x77/0xa0 [ 222.822675][ C0] smp_irq_work_interrupt+0xc/0x250 [ 222.822682][ C0] irq_work_interrupt+0xf/0x20 [ 222.822690][ C0] RIP: 0010:unwind_next_frame+0x1878/0x1ea0 [ 222.822715][ C0] Code: 0f 85 a0 01 00 00 41 c7 06 00 00 00 00 31 c0 48 c7 84 24 a0 00 00 00 0e 36 e0 45 48 c7 03 00 00 00 00 48 c7 43 09 00 00 00 00 <48> c7 43 11 00 00 00 00 48 c7 43 19 00 00 00 00 48 c7 43 21 00 00 [ 222.822723][ C0] RSP: 0018:ffff8881f6e09400 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff09 [ 222.822741][ C0] RAX: 0000000000000101 RBX: ffffed103edc1294 RCX: 0000000000000100 [ 222.822751][ C0] RDX: ffff8881f6e09740 RSI: ffff8881f6e09380 RDI: 0000000000000001 [ 222.822762][ C0] RBP: ffff8881f6e096f0 R08: dffffc0000000000 R09: ffff8881f6e09750 [ 222.822773][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff0cf8a3b [ 222.822784][ C0] R13: ffffffff867c51d7 R14: ffff8881e779fd00 R15: ffff8881e7798000 [ 222.822791][ C0] ? irq_work_interrupt+0xa/0x20 [ 222.822797][ C0] ? get_signal+0xdb1/0x1440 [ 222.822805][ C0] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 222.822812][ C0] ? perf_pending_event+0x36d/0x520 [ 222.822820][ C0] ? check_preemption_disabled+0x9f/0x320 [ 222.822829][ C0] ? check_preemption_disabled+0x9f/0x320 [ 222.822837][ C0] ? debug_smp_processor_id+0x20/0x20 [ 222.822846][ C0] ? check_preemption_disabled+0x9f/0x320 [ 222.822854][ C0] ? do_signal+0xb0/0x11f0 [ 222.822862][ C0] ? debug_smp_processor_id+0x20/0x20 [ 222.822870][ C0] ? sched_clock_cpu+0x18/0x3a0 [ 222.822878][ C0] ? debug_smp_processor_id+0x20/0x20 [ 222.822893][ C0] ? irqtime_account_irq+0xb9/0x1b0 [ 222.822900][ C0] ? rcu_irq_exit+0x104/0x250 [ 222.822908][ C0] ? irq_work_interrupt+0xf/0x20 [ 222.822916][ C0] ? irq_work_interrupt+0xa/0x20 [ 222.822924][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 222.822931][ C0] ? get_signal+0xdb1/0x1440 [ 222.822939][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 222.822947][ C0] arch_stack_walk+0x111/0x140 [ 222.822954][ C0] ? do_signal+0xb0/0x11f0 [ 222.822962][ C0] stack_trace_save+0x118/0x1c0 [ 222.822970][ C0] ? stack_trace_snprint+0x170/0x170 [ 222.822978][ C0] __kasan_kmalloc+0x171/0x210 [ 222.822986][ C0] ? __kasan_kmalloc+0x171/0x210 [ 222.822994][ C0] ? __kmalloc_track_caller+0x100/0x2b0 [ 222.823001][ C0] ? __alloc_skb+0xb4/0x4d0 [ 222.823009][ C0] ? ndisc_alloc_skb+0xee/0x2c0 [ 222.823016][ C0] ? ndisc_send_rs+0x269/0x6a0 [ 222.823024][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 222.823032][ C0] ? call_timer_fn+0x36/0x390 [ 222.823039][ C0] ? __run_timers+0x879/0xbe0 [ 222.823047][ C0] ? run_timer_softirq+0x63/0xf0 [ 222.823054][ C0] ? __do_softirq+0x23b/0x6b7 [ 222.823061][ C0] ? irq_exit+0x195/0x1c0 [ 222.823070][ C0] ? smp_apic_timer_interrupt+0x11a/0x460 [ 222.823078][ C0] ? apic_timer_interrupt+0xf/0x20 [ 222.823087][ C0] ? free_unref_page_prepare+0x3a/0x380 [ 222.823095][ C0] ? free_unref_page_list+0x10a/0x590 [ 222.823103][ C0] ? release_pages+0xad8/0xb20 [ 222.823111][ C0] ? tlb_flush_mmu+0xc8/0x170 [ 222.823119][ C0] ? unmap_page_range+0x1d29/0x2620 [ 222.823126][ C0] ? unmap_vmas+0x355/0x4b0 [ 222.823133][ C0] ? exit_mmap+0x2bc/0x520 [ 222.823140][ C0] ? __mmput+0x8e/0x2c0 [ 222.823147][ C0] ? do_exit+0xc08/0x2bc0 [ 222.823155][ C0] ? do_group_exit+0x138/0x300 [ 222.823162][ C0] ? get_signal+0xdb1/0x1440 [ 222.823171][ C0] __kmalloc_track_caller+0x100/0x2b0 [ 222.823178][ C0] ? ndisc_alloc_skb+0xee/0x2c0 [ 222.823186][ C0] ? kmem_cache_alloc+0xd9/0x250 [ 222.823194][ C0] ? ndisc_alloc_skb+0xee/0x2c0 [ 222.823201][ C0] __alloc_skb+0xb4/0x4d0 [ 222.823209][ C0] ? ipv6_get_ifaddr+0x2d8/0x380 [ 222.823216][ C0] ndisc_alloc_skb+0xee/0x2c0 [ 222.823224][ C0] ndisc_send_rs+0x269/0x6a0 [ 222.823232][ C0] ? ipv6_get_lladdr+0x1ae/0x1e0 [ 222.823240][ C0] addrconf_rs_timer+0x2d1/0x600 [ 222.823248][ C0] ? wq_worker_last_func+0x40/0x40 [ 222.823257][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 222.823266][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 222.823275][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 222.823284][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 222.823291][ C0] call_timer_fn+0x36/0x390 [ 222.823301][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 222.823308][ C0] __run_timers+0x879/0xbe0 [ 222.823316][ C0] ? enqueue_timer+0x300/0x300 [ 222.823323][ C0] ? rcu_irq_exit+0x104/0x250 [ 222.823332][ C0] ? check_preemption_disabled+0x9f/0x320 [ 222.823340][ C0] ? debug_smp_processor_id+0x20/0x20 [ 222.823349][ C0] ? check_preemption_disabled+0x91/0x320 [ 222.823357][ C0] run_timer_softirq+0x63/0xf0 [ 222.823364][ C0] __do_softirq+0x23b/0x6b7 [ 222.823371][ C0] irq_exit+0x195/0x1c0 [ 222.823379][ C0] smp_apic_timer_interrupt+0x11a/0x460 [ 222.823387][ C0] apic_timer_interrupt+0xf/0x20 [ 222.823392][ C0] [ 222.823402][ C0] RIP: 0010:free_unref_page_prepare+0x3a/0x380 [ 222.823430][ C0] Code: 49 bd 00 00 00 00 00 fc ff df 0f 1f 44 00 00 49 8d 6c 24 18 48 89 eb 48 c1 eb 03 42 80 3c 2b 00 74 08 48 89 ef e8 16 4d 04 00 45 00 03 74 17 42 80 3c 2b 00 74 08 48 89 ef e8 81 4d 04 00 48 [ 222.823439][ C0] RSP: 0018:ffff8881e779f2e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 222.823460][ C0] RAX: 000015fffffffff8 RBX: 1ffffd4000e93fc3 RCX: dffffc0000000000 [ 222.823472][ C0] RDX: 0000000000000200 RSI: 00000000001d27f8 RDI: ffffea000749fe00 [ 222.823484][ C0] RBP: ffffea000749fe18 R08: dffffc0000000000 R09: ffffed103d288000 [ 222.823495][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea000749fe00 [ 222.823506][ C0] R13: dffffc0000000000 R14: 00000000001d27f8 R15: ffff8881e779f4e0 [ 222.823512][ C0] free_unref_page_list+0x10a/0x590 [ 222.823519][ C0] ? mem_cgroup_uncharge_list+0x114/0x160 [ 222.823525][ C0] ? debug_smp_processor_id+0x20/0x20 [ 222.823530][ C0] ? uncharge_batch+0x5c0/0x5c0 [ 222.823537][ C0] ? free_unref_page_commit+0x2d0/0x2d0 [ 222.823543][ C0] ? check_preemption_disabled+0x149/0x320 [ 222.823549][ C0] release_pages+0xad8/0xb20 [ 222.823554][ C0] ? irq_work_interrupt+0xa/0x20 [ 222.823560][ C0] ? lru_add_drain_per_cpu+0x60/0x60 [ 222.823566][ C0] ? free_swap_cache+0x124/0x210 [ 222.823572][ C0] ? free_pages_and_swap_cache+0x73/0x90 [ 222.823578][ C0] tlb_flush_mmu+0xc8/0x170 [ 222.823584][ C0] unmap_page_range+0x1d29/0x2620 [ 222.823589][ C0] ? irq_work_interrupt+0xa/0x20 [ 222.823595][ C0] ? copy_page_range+0x26f0/0x26f0 [ 222.823600][ C0] ? uprobe_munmap+0x23/0x410 [ 222.823605][ C0] unmap_vmas+0x355/0x4b0 [ 222.823612][ C0] ? unmap_page_range+0x2620/0x2620 [ 222.823617][ C0] ? tlb_gather_mmu+0x273/0x340 [ 222.823622][ C0] exit_mmap+0x2bc/0x520 [ 222.823627][ C0] ? vm_brk+0x20/0x20 [ 222.823632][ C0] ? __mmput+0x77/0x2c0 [ 222.823638][ C0] __mmput+0x8e/0x2c0 [ 222.823643][ C0] do_exit+0xc08/0x2bc0 [ 222.823649][ C0] ? perf_log_throttle+0x450/0x450 [ 222.823654][ C0] ? put_task_struct+0x80/0x80 [ 222.823661][ C0] ? check_preemption_disabled+0x9f/0x320 [ 222.823667][ C0] ? debug_smp_processor_id+0x20/0x20 [ 222.823673][ C0] ? ctx_pinned_sched_in+0x109/0x160 [ 222.823678][ C0] ? irq_work_interrupt+0xa/0x20 [ 222.823684][ C0] do_group_exit+0x138/0x300 [ 222.823689][ C0] get_signal+0xdb1/0x1440 [ 222.823694][ C0] do_signal+0xb0/0x11f0 [ 222.823700][ C0] ? check_memory_region+0x6f/0x280 [ 222.823706][ C0] ? finish_task_switch+0x1bb/0x590 [ 222.823711][ C0] ? signal_fault+0x1e0/0x1e0 [ 222.823716][ C0] ? __schedule+0xb0d/0x1320 [ 222.823723][ C0] ? exit_to_usermode_loop+0xb8/0x1a0 [ 222.823729][ C0] exit_to_usermode_loop+0xc0/0x1a0 [ 222.823735][ C0] prepare_exit_to_usermode+0x199/0x200 [ 222.823740][ C0] ret_from_intr+0x1c/0x1c [ 222.823745][ C0] RIP: 0033:0x7f36fa7a7d39 [ 222.823750][ C0] Code: Bad RIP value. [ 222.823757][ C0] RSP: 002b:00007f36f9a29048 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 222.823771][ C0] RAX: 0000000000000000 RBX: 00007f36fa935fa0 RCX: 00007f36fa7a7d39 [ 222.823780][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000005 [ 222.823789][ C0] RBP: 00007f36fa828766 R08: 0000000000000000 R09: 0000000000000000 [ 222.823798][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.823806][ C0] R13: 000000000000000b R14: 00007f36fa935fa0 R15: 00007fff96f72028