last executing test programs: 7.732434518s ago: executing program 0 (id=62): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x108040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x400100000001}, 0x10, 0xea5c, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x2, 0x504, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 7.443862802s ago: executing program 2 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x81, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000240)) 7.356595765s ago: executing program 2 (id=64): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700"], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC], 0x10) 7.245640103s ago: executing program 0 (id=66): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$TUNGETVNETHDRSZ(r0, 0xb701, 0x0) 7.148095558s ago: executing program 2 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, &(0x7f00000003c0)=""/112}, 0x20) 7.035778085s ago: executing program 2 (id=69): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x2, 0xc}, 0x12) bpf$PROG_LOAD(0xb, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.976129884s ago: executing program 0 (id=70): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.83831102s ago: executing program 2 (id=75): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(r2, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, 0x0) 5.818496863s ago: executing program 0 (id=76): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x108040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x400100000001}, 0x10, 0xea5c, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x2, 0x504, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 5.7086504s ago: executing program 3 (id=77): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.611929494s ago: executing program 4 (id=80): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791090000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c7"], 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.531625247s ago: executing program 4 (id=82): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0x7000000, &(0x7f0000000040)) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) 5.524183668s ago: executing program 3 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.362957563s ago: executing program 0 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) 5.362775953s ago: executing program 3 (id=85): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000980)=ANY=[], 0x7) close(r1) 5.212173207s ago: executing program 4 (id=86): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 5.212045036s ago: executing program 3 (id=87): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.180619671s ago: executing program 1 (id=88): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f00000006c0)=@framed={{0x62, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}}, 0x0}, 0x90) 5.135456898s ago: executing program 0 (id=89): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x80000001, 0x80, 0x1, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x7fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 5.05614161s ago: executing program 3 (id=90): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x7, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 5.05598495s ago: executing program 4 (id=91): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) 5.05587073s ago: executing program 1 (id=92): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5d}, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 4.934579149s ago: executing program 1 (id=93): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.934366559s ago: executing program 3 (id=94): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x108040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x400100000001}, 0x10, 0xea5c, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x2, 0x504, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) 1.567037939s ago: executing program 4 (id=95): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r1}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_track_range\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_track_range\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.541317852s ago: executing program 1 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) 1.388160706s ago: executing program 4 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000940)=r1) 1.387820476s ago: executing program 1 (id=98): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000038ba9a7e7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 1.282785492s ago: executing program 2 (id=99): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000540)={'\x00', @dev}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f0000000380)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000b00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0xd, 0x6154, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[r5, r5, r6, r6, r5, r5], 0x0, 0x10, 0x7f}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) 0s ago: executing program 1 (id=100): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_clone(0x19021080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 28.381376][ T23] audit: type=1400 audit(1719603706.430:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.385822][ T342] cgroup1: Unknown subsys name 'net' [ 28.403952][ T23] audit: type=1400 audit(1719603706.430:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.409543][ T342] cgroup1: Unknown subsys name 'net_prio' [ 28.437187][ T342] cgroup1: Unknown subsys name 'devices' [ 28.444893][ T23] audit: type=1400 audit(1719603706.500:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.650817][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 28.656758][ T342] cgroup1: Unknown subsys name 'rlimit' [ 28.851748][ T23] audit: type=1400 audit(1719603706.900:69): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.875590][ T23] audit: type=1400 audit(1719603706.900:70): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.901285][ T23] audit: type=1400 audit(1719603706.900:71): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.902823][ T345] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.933588][ T23] audit: type=1400 audit(1719603706.980:72): avc: denied { relabelto } for pid=345 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.959139][ T23] audit: type=1400 audit(1719603706.980:73): avc: denied { write } for pid=345 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.984889][ T23] audit: type=1400 audit(1719603707.010:74): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.007160][ T23] audit: type=1400 audit(1719603707.040:75): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.083230][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.878628][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.885554][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.893499][ T352] device bridge_slave_0 entered promiscuous mode [ 29.910879][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.917836][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.925966][ T352] device bridge_slave_1 entered promiscuous mode [ 29.967876][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.974851][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.982859][ T353] device bridge_slave_0 entered promiscuous mode [ 29.998998][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.005933][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.014225][ T354] device bridge_slave_0 entered promiscuous mode [ 30.031717][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.038824][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.047071][ T353] device bridge_slave_1 entered promiscuous mode [ 30.062326][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.069300][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.077551][ T354] device bridge_slave_1 entered promiscuous mode [ 30.128781][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.135955][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.144554][ T355] device bridge_slave_0 entered promiscuous mode [ 30.189295][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.196403][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.204662][ T355] device bridge_slave_1 entered promiscuous mode [ 30.388314][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.395248][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.403400][ T356] device bridge_slave_0 entered promiscuous mode [ 30.437426][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.444546][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.452413][ T356] device bridge_slave_1 entered promiscuous mode [ 30.807206][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.814099][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.821357][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.828274][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.839057][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.846917][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.077794][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.085727][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.117589][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.126252][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.156222][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.164379][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.172224][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.182206][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.191360][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.198344][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.206431][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.215766][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.224289][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.231250][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.238756][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.248199][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.257159][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.264046][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.271600][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.280659][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.289131][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.296241][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.303514][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.311689][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.321013][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.329005][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.358148][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.367642][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.377071][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.384187][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.391732][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.401302][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.410135][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.417205][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.427054][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.456757][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.466372][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.475541][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.487081][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.494201][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.501762][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.511064][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.519583][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.526718][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.552657][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.594811][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.603192][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.639478][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.649023][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.657421][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.666055][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.674709][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.683049][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.691873][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.700306][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.709199][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.716944][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.724870][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.733197][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.775325][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.784793][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.793350][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.800506][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.809563][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.818250][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.826625][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.833467][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.841213][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.889522][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.898426][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.907513][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.916455][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.946921][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.956606][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.965405][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.975400][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.984668][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.994240][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.002500][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.011569][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.041082][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.050024][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.058980][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.069155][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.114515][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.123366][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.132913][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.141491][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.153732][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.162350][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.187142][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.196081][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.237502][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.248777][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.258614][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.267900][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.276810][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.285744][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.319669][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.327968][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.336659][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.345838][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.354356][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.363018][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.372129][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.381185][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.414681][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.423600][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.433266][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.442159][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.481217][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.490467][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.565129][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.579003][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.633664][ C1] hrtimer: interrupt took 33981 ns [ 32.679647][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.702634][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.764227][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.787826][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.960957][ T396] device syzkaller0 entered promiscuous mode [ 33.013617][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.027292][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.057209][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.084512][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.105803][ T453] syz.4.30 (453) used greatest stack depth: 22968 bytes left [ 34.279110][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 34.279137][ T23] audit: type=1400 audit(1719603712.330:102): avc: denied { cpu } for pid=472 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.313311][ T23] audit: type=1400 audit(1719603712.360:103): avc: denied { read } for pid=472 comm="syz.4.43" name="ppp" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.358710][ T476] device syzkaller0 entered promiscuous mode [ 34.402398][ T23] audit: type=1400 audit(1719603712.360:104): avc: denied { open } for pid=472 comm="syz.4.43" path="/dev/ppp" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.460174][ T23] audit: type=1400 audit(1719603712.360:105): avc: denied { ioctl } for pid=472 comm="syz.4.43" path="/dev/ppp" dev="devtmpfs" ino=837 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.493340][ T23] audit: type=1400 audit(1719603712.360:106): avc: denied { write } for pid=468 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.406286][ T506] [ 35.408495][ T506] ********************************************************** [ 35.444120][ T506] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 35.461805][ T506] ** ** [ 35.487724][ T506] ** trace_printk() being used. Allocating extra memory. ** [ 35.503983][ T506] ** ** [ 35.504779][ T23] audit: type=1400 audit(1719603713.550:107): avc: denied { create } for pid=514 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.521456][ T506] ** This means that this is a DEBUG kernel and it is ** [ 35.540173][ T506] ** unsafe for production use. ** [ 35.548517][ T506] ** ** [ 35.557389][ T506] ** If you see this message and you are not debugging ** [ 35.565838][ T506] ** the kernel, report this immediately to your vendor! ** [ 35.573547][ T506] ** ** [ 35.581795][ T506] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 35.590006][ T506] ********************************************************** [ 36.429709][ T23] audit: type=1400 audit(1719603714.480:108): avc: denied { ioctl } for pid=541 comm="syz.0.66" path="uts:[4026532360]" dev="nsfs" ino=4026532360 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.637866][ T559] device syzkaller0 entered promiscuous mode [ 37.722494][ T551] syz.0.70 (551) used greatest stack depth: 22136 bytes left [ 38.218046][ T23] audit: type=1400 audit(1719603716.230:109): avc: denied { create } for pid=581 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.329893][ T23] audit: type=1400 audit(1719603716.380:110): avc: denied { relabelfrom } for pid=587 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 38.367939][ T23] audit: type=1400 audit(1719603716.380:111): avc: denied { relabelto } for pid=587 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 43.587571][ T23] audit: type=1400 audit(1719603721.640:112): avc: denied { sys_admin } for pid=634 comm="syz.1.100" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.013646][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 144.020405][ C0] rcu: 0-...!: (1 GPs behind) idle=742/1/0x4000000000000004 softirq=2558/2562 fqs=14 last_accelerate: 98c3/c24b, Nonlazy posted: ..D [ 144.034000][ C0] (t=10000 jiffies g=2545 q=968) [ 144.038874][ C0] rcu: rcu_preempt kthread starved for 9818 jiffies! g2545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 144.050011][ C0] rcu: RCU grace-period kthread stack dump: [ 144.055789][ C0] rcu_preempt R running task 28920 11 2 0x80004000 [ 144.063505][ C0] Call Trace: [ 144.066766][ C0] __schedule+0xb05/0x1320 [ 144.070998][ C0] ? is_mmconf_reserved+0x430/0x430 [ 144.076107][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 144.081399][ C0] ? _raw_spin_unlock_irq+0x4a/0x60 [ 144.086565][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 144.091233][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 144.096195][ C0] schedule+0x12c/0x1d0 [ 144.100747][ C0] schedule_timeout+0x188/0x3d0 [ 144.105679][ C0] ? prepare_to_swait_event+0x35c/0x3a0 [ 144.111239][ C0] ? console_conditional_schedule+0x10/0x10 [ 144.116992][ C0] ? run_local_timers+0x160/0x160 [ 144.122011][ C0] ? finish_swait+0xa5/0x1a0 [ 144.126882][ C0] ? find_next_bit+0xc3/0x100 [ 144.131552][ C0] rcu_gp_kthread+0xea0/0x1d10 [ 144.136149][ C0] ? _raw_spin_unlock_irq+0x4a/0x60 [ 144.141189][ C0] ? dyntick_save_progress_counter+0x1b0/0x1b0 [ 144.147186][ C0] ? rcu_barrier_callback+0x50/0x50 [ 144.152201][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 144.156909][ C0] ? is_mmconf_reserved+0x430/0x430 [ 144.161932][ C0] ? __wake_up_locked+0xb7/0x110 [ 144.166786][ C0] ? __kthread_parkme+0xb0/0x1b0 [ 144.171557][ C0] kthread+0x2da/0x360 [ 144.175464][ C0] ? rcu_barrier_callback+0x50/0x50 [ 144.180497][ C0] ? kthread_blkcg+0xd0/0xd0 [ 144.184933][ C0] ret_from_fork+0x1f/0x30 [ 144.189205][ C0] NMI backtrace for cpu 0 [ 144.193536][ C0] CPU: 0 PID: 602 Comm: syz.0.89 Not tainted 5.4.274-syzkaller-00003-g51e9abf68baf #0 [ 144.203131][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.213136][ C0] Call Trace: [ 144.216256][ C0] [ 144.218965][ C0] dump_stack+0x1d8/0x241 [ 144.223128][ C0] ? panic+0x89d/0x89d [ 144.227046][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 144.232599][ C0] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 144.238243][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 144.243101][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 144.249037][ C0] nmi_trigger_cpumask_backtrace+0x28c/0x2d0 [ 144.255137][ C0] rcu_dump_cpu_stacks+0x183/0x280 [ 144.260113][ C0] rcu_sched_clock_irq+0xc5e/0x13f0 [ 144.265243][ C0] update_process_times+0x147/0x1b0 [ 144.270551][ C0] tick_sched_timer+0x22d/0x3c0 [ 144.275661][ C0] ? tick_setup_sched_timer+0x460/0x460 [ 144.281397][ C0] __hrtimer_run_queues+0x3e9/0xb90 [ 144.286852][ C0] ? _raw_read_lock+0x40/0x40 [ 144.292136][ C0] ? hrtimer_interrupt+0x890/0x890 [ 144.297327][ C0] ? kill_fasync+0x1f9/0x230 [ 144.301942][ C0] hrtimer_interrupt+0x38a/0x890 [ 144.306918][ C0] smp_apic_timer_interrupt+0x110/0x460 [ 144.312797][ C0] apic_timer_interrupt+0xf/0x20 [ 144.318196][ C0] RIP: 0010:unwind_next_frame+0x779/0x1ea0 [ 144.323836][ C0] Code: c1 e8 03 42 0f b6 04 38 84 c0 74 6f 89 d9 80 e1 07 38 c1 7c 66 be 02 00 00 00 48 89 df 48 89 d3 e8 2c 5c 64 00 e9 57 15 00 00 <48> 8b 44 24 60 42 80 3c 38 00 74 0e 4c 89 f7 48 89 d3 e8 50 5b 64 [ 144.343256][ C0] RSP: 0018:ffff8881f6e09560 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 144.351758][ C0] RAX: 0000000000000003 RBX: ffff8881f6e09898 RCX: ffffffff8675fc24 [ 144.359907][ C0] RDX: ffffffff86b3470c RSI: ffffffff86b34708 RDI: 0000000000000001 [ 144.367816][ C0] RBP: ffff8881f6e09850 R08: 0000000000000007 R09: ffff8881f6e098b0 [ 144.375793][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff0d668e1 [ 144.383609][ C0] R13: ffffffff86b34708 R14: ffff8881f6e09898 R15: dffffc0000000000 [ 144.391434][ C0] ? apic_timer_interrupt+0xa/0x20 [ 144.396567][ C0] ? smp_apic_timer_interrupt+0x11a/0x460 [ 144.402200][ C0] ? debug_smp_processor_id+0x20/0x20 [ 144.408027][ C0] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 144.413947][ C0] ? perf_pending_event+0x36d/0x520 [ 144.420844][ C0] ? check_preemption_disabled+0x9f/0x320 [ 144.426886][ C0] ? check_preemption_disabled+0x9f/0x320 [ 144.432973][ C0] ? debug_smp_processor_id+0x20/0x20 [ 144.438360][ C0] ? check_preemption_disabled+0x9f/0x320 [ 144.444343][ C0] ? debug_smp_processor_id+0x20/0x20 [ 144.449610][ C0] ? sched_clock_cpu+0x18/0x3a0 [ 144.454237][ C0] ? debug_smp_processor_id+0x20/0x20 [ 144.459537][ C0] ? irqtime_account_irq+0xb9/0x1b0 [ 144.464951][ C0] ? rcu_irq_exit+0x104/0x250 [ 144.469707][ C0] ? irq_work_interrupt+0xf/0x20 [ 144.474649][ C0] ? irq_work_interrupt+0xa/0x20 [ 144.479680][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 144.484810][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 144.489764][ C0] arch_stack_walk+0x111/0x140 [ 144.494416][ C0] ? smp_apic_timer_interrupt+0x11a/0x460 [ 144.500955][ C0] stack_trace_save+0x118/0x1c0 [ 144.505896][ C0] ? _raw_read_unlock_irqrestore+0x2f/0x50 [ 144.511808][ C0] ? stack_trace_snprint+0x170/0x170 [ 144.517053][ C0] ? perf_pending_event+0x36d/0x520 [ 144.522147][ C0] __kasan_kmalloc+0x171/0x210 [ 144.527001][ C0] ? __kasan_kmalloc+0x171/0x210 [ 144.533879][ C0] ? kmem_cache_alloc+0xd9/0x250 [ 144.539031][ C0] ? __alloc_skb+0x7a/0x4d0 [ 144.543374][ C0] ? wg_packet_send_keepalive+0x5d/0x1c0 [ 144.548840][ C0] ? call_timer_fn+0x36/0x390 [ 144.553340][ C0] ? __run_timers+0x879/0xbe0 [ 144.558058][ C0] ? run_timer_softirq+0x63/0xf0 [ 144.563179][ C0] ? __do_softirq+0x23b/0x6b7 [ 144.567804][ C0] ? irq_exit+0x195/0x1c0 [ 144.571934][ C0] ? smp_apic_timer_interrupt+0x11a/0x460 [ 144.577612][ C0] ? __alloc_skb+0x7a/0x4d0 [ 144.582116][ C0] kmem_cache_alloc+0xd9/0x250 [ 144.586890][ C0] __alloc_skb+0x7a/0x4d0 [ 144.591233][ C0] wg_packet_send_keepalive+0x5d/0x1c0 [ 144.597072][ C0] ? wg_expired_send_persistent_keepalive+0x3f/0x80 [ 144.604008][ C0] ? wg_expired_zero_key_material+0x170/0x170 [ 144.610512][ C0] call_timer_fn+0x36/0x390 [ 144.615116][ C0] ? wg_expired_zero_key_material+0x170/0x170 [ 144.621439][ C0] __run_timers+0x879/0xbe0 [ 144.626185][ C0] ? enqueue_timer+0x300/0x300 [ 144.630788][ C0] ? rcu_irq_exit+0x104/0x250 [ 144.635579][ C0] ? check_preemption_disabled+0x9f/0x320 [ 144.641665][ C0] ? debug_smp_processor_id+0x20/0x20 [ 144.647259][ C0] ? check_preemption_disabled+0x91/0x320 [ 144.652802][ C0] run_timer_softirq+0x63/0xf0 [ 144.657494][ C0] __do_softirq+0x23b/0x6b7 [ 144.661839][ C0] irq_exit+0x195/0x1c0 [ 144.665817][ C0] smp_apic_timer_interrupt+0x11a/0x460 [ 144.671210][ C0] apic_timer_interrupt+0xf/0x20 [ 144.675960][ C0] [ 144.678751][ C0] RIP: 0010:futex_wake+0x622/0x840 [ 144.683707][ C0] Code: c0 00 00 00 e8 5f d4 eb ff 48 8b 44 24 30 42 80 3c 30 00 74 0d 48 8d bc 24 80 00 00 00 e8 56 5f 3b 00 48 8b 9c 24 80 00 00 00 <31> ff 48 89 de e8 94 7d 0b 00 48 85 db 0f 84 8b 00 00 00 48 8b 5c [ 144.703537][ C0] RSP: 0018:ffff8881e2697a40 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 144.711837][ C0] RAX: 1ffff1103c4d2f58 RBX: ffff8881e829e600 RCX: ffffffff814496c8 [ 144.719646][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881e7909fa0 [ 144.727557][ C0] RBP: ffff8881e2697b70 R08: dffffc0000000000 R09: ffffed103cf213f5 [ 144.735449][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000f4240 [ 144.743756][ C0] R13: 00000000ffffffff R14: dffffc0000000000 R15: 0000000000000001 [ 144.751960][ C0] ? wake_up_q+0xa8/0xf0 [ 144.756226][ C0] ? futex_wait+0x890/0x890 [ 144.760554][ C0] do_futex+0x13fe/0x19f0 [ 144.764699][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 144.769917][ C0] ? _raw_spin_unlock+0x49/0x60 [ 144.774643][ C0] ? fasync_insert_entry+0x214/0x2d0 [ 144.779742][ C0] ? perf_fasync+0x89/0xa0 [ 144.784817][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 144.790224][ C0] ? do_vfs_ioctl+0xbaf/0x1720 [ 144.794860][ C0] ? selinux_file_ioctl+0x372/0x970 [ 144.799894][ C0] ? __fd_install+0x119/0x230 [ 144.804772][ C0] ? ioctl_preallocate+0x250/0x250 [ 144.809789][ C0] ? __se_sys_perf_event_open+0x3503/0x37c0 [ 144.815536][ C0] __se_sys_futex+0x355/0x470 [ 144.820415][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 144.825043][ C0] ? fput_many+0x15e/0x1b0 [ 144.829397][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 144.834289][ C0] do_syscall_64+0xca/0x1c0 [ 144.838623][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 144.844528][ C0] RIP: 0033:0x7f03de26cb99 [ 144.848768][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.868470][ C0] RSP: 002b:00007f03dd4ee0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 144.876902][ C0] RAX: ffffffffffffffda RBX: 00007f03de3fafa8 RCX: 00007f03de26cb99 [ 144.884704][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03de3fafac [ 144.892775][ C0] RBP: 00007f03de3fafa0 R08: 00007fff0edf70b0 R09: 00007f03dd4ee6c0 [ 144.900589][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03de3fafac [ 144.908496][ C0] R13: 000000000000000b R14: 00007fff0edce910 R15: 00007fff0edce9f8 [ 178.157825][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.3.94:611] [ 178.165758][ C1] Modules linked in: [ 178.169504][ C1] CPU: 1 PID: 611 Comm: syz.3.94 Not tainted 5.4.274-syzkaller-00003-g51e9abf68baf #0 [ 178.178871][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.188870][ C1] RIP: 0010:unwind_next_frame+0x779/0x1ea0 [ 178.194688][ C1] Code: c1 e8 03 42 0f b6 04 38 84 c0 74 6f 89 d9 80 e1 07 38 c1 7c 66 be 02 00 00 00 48 89 df 48 89 d3 e8 2c 5c 64 00 e9 57 15 00 00 <48> 8b 44 24 60 42 80 3c 38 00 74 0e 4c 89 f7 48 89 d3 e8 50 5b 64 [ 178.214730][ C1] RSP: 0018:ffff8881f6f08fe0 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 178.222984][ C1] RAX: 0000000000000003 RBX: ffff8881f6f09318 RCX: ffffffff8652e1d4 [ 178.230878][ C1] RDX: ffffffff867e9f8e RSI: ffffffff867e9f8a RDI: 0000000000000001 [ 178.238697][ C1] RBP: ffff8881f6f092d0 R08: 000000000000000b R09: ffff8881f6f09330 [ 178.246632][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff0cfd3f1 [ 178.254446][ C1] R13: ffffffff867e9f8a R14: ffff8881f6f09318 R15: dffffc0000000000 [ 178.262452][ C1] FS: 00007f3acc1096c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 178.271198][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.277706][ C1] CR2: 000000110c29a3ff CR3: 00000001e825c000 CR4: 00000000003406a0 [ 178.285521][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.293420][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.301311][ C1] Call Trace: [ 178.304434][ C1] [ 178.307152][ C1] ? watchdog_timer_fn+0x53d/0x600 [ 178.312121][ C1] ? proc_watchdog_cpumask+0xc0/0xc0 [ 178.317211][ C1] ? __hrtimer_run_queues+0x3e9/0xb90 [ 178.322504][ C1] ? _raw_read_lock+0x40/0x40 [ 178.327052][ C1] ? hrtimer_interrupt+0x890/0x890 [ 178.331976][ C1] ? kill_fasync+0x1f9/0x230 [ 178.336482][ C1] ? hrtimer_interrupt+0x38a/0x890 [ 178.341531][ C1] ? smp_apic_timer_interrupt+0x110/0x460 [ 178.347090][ C1] ? apic_timer_interrupt+0xf/0x20 [ 178.352012][ C1] ? apic_timer_interrupt+0xa/0x20 [ 178.356977][ C1] ? unwind_next_frame+0x779/0x1ea0 [ 178.362004][ C1] ? run_timer_softirq+0x63/0xf0 [ 178.366773][ C1] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 178.372586][ C1] ? perf_prepare_sample+0x1500/0x1500 [ 178.377893][ C1] ? check_preemption_disabled+0x9f/0x320 [ 178.383435][ C1] ? debug_smp_processor_id+0x20/0x20 [ 178.388642][ C1] ? run_timer_softirq+0x63/0xf0 [ 178.393423][ C1] ? irq_work_queue+0xe0/0x140 [ 178.398024][ C1] ? __unwind_start+0x708/0x890 [ 178.402807][ C1] ? deref_stack_reg+0x1f0/0x1f0 [ 178.407574][ C1] ? cpu_clock_event_read+0x50/0x50 [ 178.412709][ C1] ? run_timer_softirq+0x63/0xf0 [ 178.417468][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 178.422324][ C1] arch_stack_walk+0x111/0x140 [ 178.426942][ C1] ? run_timer_softirq+0x63/0xf0 [ 178.431706][ C1] stack_trace_save+0x118/0x1c0 [ 178.436474][ C1] ? stack_trace_snprint+0x170/0x170 [ 178.441596][ C1] ? timerqueue_add+0x258/0x280 [ 178.446283][ C1] __kasan_kmalloc+0x171/0x210 [ 178.450878][ C1] ? __kasan_kmalloc+0x171/0x210 [ 178.455744][ C1] ? __kmalloc+0x105/0x2e0 [ 178.460008][ C1] ? ___neigh_create+0x6d2/0x1ae0 [ 178.464946][ C1] ? ip6_finish_output2+0x965/0x18e0 [ 178.470089][ C1] ? ip6_output+0x1b3/0x430 [ 178.474414][ C1] ? ndisc_send_skb+0x702/0xc30 [ 178.479091][ C1] ? addrconf_rs_timer+0x2d1/0x600 [ 178.484038][ C1] ? call_timer_fn+0x36/0x390 [ 178.488548][ C1] ? __run_timers+0x879/0xbe0 [ 178.493064][ C1] ? run_timer_softirq+0x63/0xf0 [ 178.497884][ C1] __kmalloc+0x105/0x2e0 [ 178.501926][ C1] ? ___neigh_create+0x6d2/0x1ae0 [ 178.506785][ C1] ___neigh_create+0x6d2/0x1ae0 [ 178.511558][ C1] ? irq_work_interrupt+0xa/0x20 [ 178.516336][ C1] ? nf_hook_slow+0xc0/0x1e0 [ 178.520754][ C1] ? __ip6_finish_output+0x358/0x790 [ 178.525990][ C1] ip6_finish_output2+0x965/0x18e0 [ 178.531015][ C1] ? __ip6_finish_output+0x790/0x790 [ 178.536126][ C1] ? ip6_mtu+0xe2/0x130 [ 178.540118][ C1] ? __ip6_finish_output+0x5e4/0x790 [ 178.545336][ C1] ip6_output+0x1b3/0x430 [ 178.549629][ C1] ? asan.module_dtor+0x20/0x20 [ 178.554283][ C1] ? ip6_output+0x430/0x430 [ 178.558705][ C1] ? nf_hook_slow+0x196/0x1e0 [ 178.563223][ C1] ndisc_send_skb+0x702/0xc30 [ 178.568268][ C1] ? ndisc_alloc_skb+0x2c0/0x2c0 [ 178.573055][ C1] ? ndisc_error_report+0xc0/0xc0 [ 178.577993][ C1] ? ndisc_send_rs+0x2ff/0x6a0 [ 178.582578][ C1] ? ipv6_get_lladdr+0x1ae/0x1e0 [ 178.587434][ C1] addrconf_rs_timer+0x2d1/0x600 [ 178.592207][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 178.598103][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 178.603066][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 178.608438][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 178.614336][ C1] call_timer_fn+0x36/0x390 [ 178.618681][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 178.624577][ C1] __run_timers+0x879/0xbe0 [ 178.629013][ C1] ? enqueue_timer+0x300/0x300 [ 178.633608][ C1] ? irq_work_interrupt+0xf/0x20 [ 178.638382][ C1] ? run_timer_softirq+0x1e/0xf0 [ 178.643333][ C1] run_timer_softirq+0x63/0xf0 [ 178.648149][ C1] __do_softirq+0x23b/0x6b7 [ 178.652545][ C1] ? sched_clock_cpu+0x18/0x3a0 [ 178.657327][ C1] irq_exit+0x195/0x1c0 [ 178.661428][ C1] smp_apic_timer_interrupt+0x11a/0x460 [ 178.666807][ C1] apic_timer_interrupt+0xf/0x20 [ 178.671569][ C1] [ 178.674359][ C1] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 178.680107][ C1] Code: 4c 89 e7 e8 c0 e1 43 fd f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 a2 f4 fc fb bf 01 00 00 00 b9 e6 ff ff fa bf 01 00 00 00 e8 9e a3 f4 fc 65 48 8b 1d d6 4d [ 178.699937][ C1] RSP: 0018:ffff8881e824f8c0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.708270][ C1] RAX: 1ffff1103cf73ef7 RBX: 1ffff1103d049f1c RCX: ffffffff84511b00 [ 178.716082][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 178.723896][ C1] RBP: ffff8881e824f948 R08: ffffffff82316d59 R09: ffffed103edeb135 [ 178.731793][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e824f8e0 [ 178.739605][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff1103d049f18 [ 178.747764][ C1] ? check_preemption_disabled+0x149/0x320 [ 178.753395][ C1] ? _raw_write_unlock_irqrestore+0x30/0x70 [ 178.759126][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 178.764669][ C1] ? debug_smp_processor_id+0x20/0x20 [ 178.769873][ C1] ? process_notifier+0x599/0x650 [ 178.774739][ C1] retint_kernel+0x1b/0x1b [ 178.779002][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 [ 178.784979][ C1] Code: 00 00 00 0f 1f 00 be 0c 00 00 00 48 c7 c7 a0 a7 f1 85 e8 3f de 2f 00 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 04 24 <65> 48 8b 0d 54 51 9e 7e 65 8b 15 59 51 9e 7e f7 c2 00 01 1f 00 74 [ 178.804424][ C1] RSP: 0018:ffff8881e824fa00 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.812846][ C1] RAX: ffffffff818a755d RBX: 1ffff1103cf73e65 RCX: 0000000000000000 [ 178.820656][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.828566][ C1] RBP: 0000000000000000 R08: ffffffff818a751a R09: ffffed103d053db4 [ 178.836452][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 178.844266][ C1] R13: ffff8881e7b9f328 R14: ffff8881e829eac0 R15: ffff8881e7b9ee40 [ 178.852088][ C1] ? sync_mm_rss+0x18a/0x380 [ 178.856499][ C1] ? sync_mm_rss+0x1cd/0x380 [ 178.861030][ C1] sync_mm_rss+0x1cd/0x380 [ 178.865366][ C1] do_exit+0x301/0x2bc0 [ 178.869360][ C1] ? put_task_struct+0x80/0x80 [ 178.873952][ C1] ? do_futex+0x168/0x19f0 [ 178.878304][ C1] ? futex_wake+0x6/0x840 [ 178.882480][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 178.887942][ C1] do_group_exit+0x138/0x300 [ 178.892369][ C1] get_signal+0xdb1/0x1440 [ 178.896629][ C1] do_signal+0xb0/0x11f0 [ 178.900811][ C1] ? is_mmconf_reserved+0x430/0x430 [ 178.905832][ C1] ? _raw_write_unlock_irqrestore+0x30/0x70 [ 178.911555][ C1] ? signal_fault+0x1e0/0x1e0 [ 178.916077][ C1] ? __se_sys_futex+0x355/0x470 [ 178.920769][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 178.925369][ C1] exit_to_usermode_loop+0xc0/0x1a0 [ 178.930404][ C1] prepare_exit_to_usermode+0x199/0x200 [ 178.935780][ C1] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 178.941591][ C1] RIP: 0033:0x7f3acce87b99 [ 178.945844][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.965280][ C1] RSP: 002b:00007f3acc1090f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.973639][ C1] RAX: 0000000000000000 RBX: 00007f3acd015fa8 RCX: 00007f3acce87b99 [ 178.981442][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3acd015fac [ 178.989255][ C1] RBP: 00007f3acd015fa0 R08: 00007fff8e7cb0b0 R09: 00007f3acc1096c0 [ 178.997076][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3acd015fac [ 179.004879][ C1] R13: 000000000000000b R14: 00007fff8e765c40 R15: 00007fff8e765d28 [ 179.012700][ C1] Sending NMI from CPU 1 to CPUs 0: [ 179.020510][ C0] NMI backtrace for cpu 0 [ 179.020524][ C0] CPU: 0 PID: 602 Comm: syz.0.89 Not tainted 5.4.274-syzkaller-00003-g51e9abf68baf #0 [ 179.020537][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.020546][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 [ 179.020571][ C0] Code: 00 00 00 0f 1f 00 be 0c 00 00 00 48 c7 c7 a0 a7 f1 85 e8 3f de 2f 00 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 04 24 <65> 48 8b 0d 54 51 9e 7e 65 8b 15 59 51 9e 7e f7 c2 00 01 1f 00 74 [ 179.020579][ C0] RSP: 0018:ffff8881f6e08e78 EFLAGS: 00000006 [ 179.020594][ C0] RAX: ffffffff82316caf RBX: 1ffff1103edc51c0 RCX: 0000000000000500 [ 179.020605][ C0] RDX: 0000000000000500 RSI: 0000000000000500 RDI: 0000000000000000 [ 179.020615][ C0] RBP: ffff8881f6e08f40 R08: ffffffff82316ca1 R09: ffffffff86e92018 [ 179.020626][ C0] R10: ffffffff86e92003 R11: 1ffffffff0dd2400 R12: ffffffff84fa46a0 [ 179.020637][ C0] R13: 1ffff1103edc11d4 R14: 0000000000000500 R15: ffffffff84fa46e0 [ 179.020649][ C0] FS: 00007f03dd4ee6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 179.020658][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.020668][ C0] CR2: 0000001b31f1effc CR3: 00000001ea9e9000 CR4: 00000000003406b0 [ 179.020679][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.020690][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 179.020695][ C0] Call Trace: [ 179.020699][ C0] [ 179.020706][ C0] ? nmi_cpu_backtrace+0x112/0x130 [ 179.020714][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 179.020720][ C0] ? nmi_handle+0xad/0x2f0 [ 179.020729][ C0] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 179.020735][ C0] ? do_nmi+0x251/0x610 [ 179.020743][ C0] ? end_repeat_nmi+0x16/0x2c [ 179.020752][ C0] ? check_preemption_disabled+0x91/0x320 [ 179.020760][ C0] ? check_preemption_disabled+0x9f/0x320 [ 179.020769][ C0] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 179.020777][ C0] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 179.020786][ C0] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 179.020791][ C0] [ 179.020796][ C0] [ 179.020804][ C0] check_preemption_disabled+0x9f/0x320 [ 179.020813][ C0] ? debug_smp_processor_id+0x20/0x20 [ 179.020822][ C0] ? check_preemption_disabled+0x9f/0x320 [ 179.020830][ C0] ? debug_smp_processor_id+0x20/0x20 [ 179.020838][ C0] ? sched_clock_cpu+0x18/0x3a0 [ 179.020846][ C0] ? debug_smp_processor_id+0x20/0x20 [ 179.020854][ C0] ? irqtime_account_irq+0xb9/0x1b0 [ 179.020861][ C0] rcu_irq_exit+0xf/0x250 [ 179.020870][ C0] smp_apic_timer_interrupt+0x11a/0x460 [ 179.020877][ C0] apic_timer_interrupt+0xf/0x20 [ 179.020887][ C0] RIP: 0010:ipv6_chk_addr_and_flags+0xef/0x3d0 [ 179.020923][ C0] Code: 48 0f 45 c8 48 89 4c 24 08 48 8d 1c dd 00 76 75 87 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 d4 9a c0 fd 4c 8b 33 <31> db 31 ff 4c 89 f6 e8 15 b9 90 fd 4d 85 f6 0f 84 6e 02 00 00 49 [ 179.020932][ C0] RSP: 0018:ffff8881f6e09070 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 179.020952][ C0] RAX: 1ffffffff0eeaf01 RBX: ffffffff87757808 RCX: ffff8881db218000 [ 179.020963][ C0] RDX: 0000000000000500 RSI: ffff8881edb2dc28 RDI: ffff8881dd664800 [ 179.020975][ C0] RBP: 000000000128efa7 R08: 0000000000000000 R09: 0000000000000040 [ 179.020987][ C0] R10: ffff8881e7dfaf40 R11: 0000000000000003 R12: dffffc0000000000 [ 179.020999][ C0] R13: ffff8881edb2dc28 R14: ffff8881da1f74e8 R15: ffff8881dd664800 [ 179.021008][ C0] ? apic_timer_interrupt+0xa/0x20 [ 179.021015][ C0] ? __ipv6_addr_type+0xa7/0x2e0 [ 179.021023][ C0] icmp6_send+0x31d/0x1d70 [ 179.021032][ C0] ? icmpv6_push_pending_frames+0x450/0x450 [ 179.021040][ C0] ? check_preemption_disabled+0x9f/0x320 [ 179.021048][ C0] ? __unwind_start+0x708/0x890 [ 179.021057][ C0] ? debug_smp_processor_id+0x20/0x20 [ 179.021065][ C0] ? __xfrm_decode_session+0x106f/0x25e0 [ 179.021073][ C0] ip6_link_failure+0x31/0x1a0 [ 179.021081][ C0] ? ip6_negative_advice+0x680/0x680 [ 179.021088][ C0] xfrmi_xmit+0x94f/0x1130 [ 179.021096][ C0] ? xfrmi_dev_uninit+0x140/0x140 [ 179.021104][ C0] ? debug_smp_processor_id+0x20/0x20 [ 179.021112][ C0] ? ___neigh_create+0x6d2/0x1ae0 [ 179.021120][ C0] ? ip6_finish_output2+0x965/0x18e0 [ 179.021128][ C0] ? validate_xmit_skb+0x645/0xc50 [ 179.021135][ C0] ? irq_exit+0x195/0x1c0 [ 179.021143][ C0] dev_hard_start_xmit+0x1b7/0x6b0 [ 179.021151][ C0] __dev_queue_xmit+0x14da/0x27e0 [ 179.021158][ C0] ? dev_queue_xmit+0x20/0x20 [ 179.021165][ C0] ? ndisc_hash+0x22/0x230 [ 179.021173][ C0] ? __local_bh_enable_ip+0x4f/0x70 [ 179.021181][ C0] ? ___neigh_create+0x15b5/0x1ae0 [ 179.021189][ C0] ip6_finish_output2+0xf9e/0x18e0 [ 179.021198][ C0] ? __ip6_finish_output+0x790/0x790 [ 179.021204][ C0] ? ip6_mtu+0xe2/0x130 [ 179.021213][ C0] ? __ip6_finish_output+0x5e4/0x790 [ 179.021219][ C0] ip6_output+0x1b3/0x430 [ 179.021227][ C0] ? asan.module_dtor+0x20/0x20 [ 179.021234][ C0] ? ip6_output+0x430/0x430 [ 179.021242][ C0] ? nf_hook_slow+0x196/0x1e0 [ 179.021249][ C0] ndisc_send_skb+0x702/0xc30 [ 179.021257][ C0] ? irq_work_interrupt+0xf/0x20 [ 179.021264][ C0] ? ndisc_alloc_skb+0x2c0/0x2c0 [ 179.021272][ C0] ? ndisc_error_report+0xc0/0xc0 [ 179.021280][ C0] ? ndisc_send_rs+0x2ff/0x6a0 [ 179.021288][ C0] ? ipv6_get_lladdr+0x1ae/0x1e0 [ 179.021295][ C0] addrconf_rs_timer+0x2d1/0x600 [ 179.021305][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 179.021313][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 179.021321][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 179.021330][ C0] ? wg_packet_send_keepalive+0x141/0x1c0 [ 179.021339][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 179.021347][ C0] call_timer_fn+0x36/0x390 [ 179.021356][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 179.021363][ C0] __run_timers+0x879/0xbe0 [ 179.021371][ C0] ? enqueue_timer+0x300/0x300 [ 179.021378][ C0] ? rcu_irq_exit+0x104/0x250 [ 179.021387][ C0] ? check_preemption_disabled+0x9f/0x320 [ 179.021395][ C0] ? debug_smp_processor_id+0x20/0x20 [ 179.021403][ C0] ? check_preemption_disabled+0x91/0x320 [ 179.021411][ C0] run_timer_softirq+0x63/0xf0 [ 179.021418][ C0] __do_softirq+0x23b/0x6b7 [ 179.021424][ C0] irq_exit+0x195/0x1c0 [ 179.021431][ C0] smp_apic_timer_interrupt+0x11a/0x460 [ 179.021438][ C0] apic_timer_interrupt+0xf/0x20 [ 179.021442][ C0] [ 179.021448][ C0] RIP: 0010:futex_wake+0x622/0x840 [ 179.021468][ C0] Code: c0 00 00 00 e8 5f d4 eb ff 48 8b 44 24 30 42 80 3c 30 00 74 0d 48 8d bc 24 80 00 00 00 e8 56 5f 3b 00 48 8b 9c 24 80 00 00 00 <31> ff 48 89 de e8 94 7d 0b 00 48 85 db 0f 84 8b 00 00 00 48 8b 5c [ 179.021474][ C0] RSP: 0018:ffff8881e2697a40 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 179.021489][ C0] RAX: 1ffff1103c4d2f58 RBX: ffff8881e829e600 RCX: ffffffff814496c8 [ 179.021498][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881e7909fa0 [ 179.021507][ C0] RBP: ffff8881e2697b70 R08: dffffc0000000000 R09: ffffed103cf213f5 [ 179.021515][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000f4240 [ 179.021524][ C0] R13: 00000000ffffffff R14: dffffc0000000000 R15: 0000000000000001 [ 179.021529][ C0] ? wake_up_q+0xa8/0xf0 [ 179.021534][ C0] ? futex_wait+0x890/0x890 [ 179.021539][ C0] do_futex+0x13fe/0x19f0 [ 179.021545][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 179.021551][ C0] ? _raw_spin_unlock+0x49/0x60 [ 179.021557][ C0] ? fasync_insert_entry+0x214/0x2d0 [ 179.021562][ C0] ? perf_fasync+0x89/0xa0 [ 179.021568][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 179.021574][ C0] ? do_vfs_ioctl+0xbaf/0x1720 [ 179.021580][ C0] ? selinux_file_ioctl+0x372/0x970 [ 179.021585][ C0] ? __fd_install+0x119/0x230 [ 179.021591][ C0] ? ioctl_preallocate+0x250/0x250 [ 179.021598][ C0] ? __se_sys_perf_event_open+0x3503/0x37c0 [ 179.021603][ C0] __se_sys_futex+0x355/0x470 [ 179.021609][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 179.021614][ C0] ? fput_many+0x15e/0x1b0 [ 179.021619][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 179.021624][ C0] do_syscall_64+0xca/0x1c0 [ 179.021631][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 179.021636][ C0] RIP: 0033:0x7f03de26cb99 [ 179.021657][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.021663][ C0] RSP: 002b:00007f03dd4ee0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.021678][ C0] RAX: ffffffffffffffda RBX: 00007f03de3fafa8 RCX: 00007f03de26cb99 [ 179.021687][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03de3fafac [ 179.021695][ C0] RBP: 00007f03de3fafa0 R08: 00007fff0edf70b0 R09: 00007f03dd4ee6c0 [ 179.021704][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03de3fafac [ 179.021713][ C0] R13: 000000000000000b R14: 00007fff0edce910 R15: 00007fff0edce9f8