last executing test programs: 5m33.779870907s ago: executing program 4 (id=159): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/user\x00') write$cgroup_pid(r0, &(0x7f0000000180), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffff0e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="6d15d7cce9f8a1b466bbce667aec1e917e76abdf0beeca119e8ba50391a3fa10a122ec31acc12452af481733c5177dd04e799f689c348a169240e26a57676d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m15.960218321s ago: executing program 3 (id=142): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x70, &(0x7f0000000140)=""/112, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0x7fff}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080e74000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275d, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x5, 0x4, r8, 0xe, '\x00', r3, r7, 0x2, 0x5, 0x2, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) 1m43.227323218s ago: executing program 3 (id=183): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00'}, 0x90) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wg1\x00'}) (rerun: 32) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000006d, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES32=r4, @ANYRES8, @ANYRES16=r4, @ANYRESOCT=r1, @ANYBLOB="4156420afe581d18b12b43e9625909413803ea542cd2edde8fc6e17f2d905332225a66b2d50cba2ca8b762fe439058d82e30e71ebe1773b7e56a637aa5a78ae7b07644d8846ebfdc5b23f1819b2490f1080111c23587244ab1a67ab1a442f856931b563545aa68666a1da1c6bdc5e2a5740e05a539ff437925f5f4e21ec187bfeb4432216ecfbcf6e53b060120c43727"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, 0x0, &(0x7f00000008c0)}, 0x20) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xc3300, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000011100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.952120205s ago: executing program 3 (id=193): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x81}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRESOCT=r4], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 10.968138096s ago: executing program 3 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000605222327b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x800, 0x7, 0xffff0000, 0x200, r3, 0xfff, '\x00', 0x0, r3, 0x3, 0x2, 0x3, 0xc}, 0x7048e4e025db87f0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="b7fbd5980000000000040005ca4eb600e7fe000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x2, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000011100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r12}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r12, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r13}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.115333193s ago: executing program 3 (id=208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@initr0]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r1) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'syz_tun\x00', @random='\x00\x00\x00 \x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.941686918s ago: executing program 0 (id=212): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000001040)='net_dev_start_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 4.288403511s ago: executing program 0 (id=216): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.189947349s ago: executing program 0 (id=218): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 4.04782784s ago: executing program 2 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 4.04739924s ago: executing program 0 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 3.798006701s ago: executing program 4 (id=168): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe86) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x502, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.467530768s ago: executing program 1 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.461689168s ago: executing program 4 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) 3.356101387s ago: executing program 1 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst]}, &(0x7f0000000400)='GPL\x00', 0x0, 0xbc, &(0x7f000000cf3d)=""/188}, 0x32) 3.350549437s ago: executing program 1 (id=231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 3.302244791s ago: executing program 1 (id=232): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x94) 2.416161523s ago: executing program 1 (id=233): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.415892754s ago: executing program 1 (id=234): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000000)="b9e403c6631e39", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0xfd69ba1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x10, 0x9}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000700)}, 0x10) 1.326451432s ago: executing program 0 (id=235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee0050000000000e0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.290244315s ago: executing program 0 (id=236): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00'}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xd}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa4000000", @ANYBLOB="0000000000000000b7040000080000008500000049000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x3, 0x300, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8], 0x12) 1.124157869s ago: executing program 4 (id=237): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.032218036s ago: executing program 4 (id=238): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0xc8, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'net'}, {0x2d, 'cpuset'}, {0x6, 'io'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}]}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0xde, &(0x7f0000000340)=""/222}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000002a00000095000000000000009500a505000000005202ab5abe8a5dfcde2339c1166fa468aeba2ba50319fe44b089e53500bbf7f4ab4e5993ac6ae4b58b72bc1b98c33800b98ea69612f5d59bfeb22e79eec927c858639700fe238a2c3f36f1dce8d910feb42e7e5ef6cdbac92eb5d28d225e690e2637d190577cd2b7e0bc4597"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 592.301062ms ago: executing program 2 (id=239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) 393.006328ms ago: executing program 3 (id=240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 184.251166ms ago: executing program 2 (id=241): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001b40)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 183.250416ms ago: executing program 4 (id=242): socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 132.19382ms ago: executing program 2 (id=243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 89.957064ms ago: executing program 2 (id=244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 0s ago: executing program 2 (id=245): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x70, &(0x7f0000000140)=""/112, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0x7fff}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080e74000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275d, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x5, 0x4, r7, 0xe, '\x00', r3, r6, 0x2, 0x5, 0x2, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) kernel console output (not intermixed with test programs): 390.275598][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1193 [ 390.282696][ C0] (detected by 0, t=10003 jiffies, g=6053, q=804 ncpus=2) [ 390.289749][ C0] task:syz.4.154 state:R running task stack:24920 pid:1193 ppid:1107 flags:0x00004000 [ 390.300446][ C0] Call Trace: [ 390.303552][ C0] [ 390.306334][ C0] ? irqentry_exit+0x30/0x40 [ 390.310754][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 390.316764][ C0] ? bpf_lwt_in_push_encap+0x9/0x20 [ 390.321796][ C0] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 390.327164][ C0] ? bpf_lwt_in_push_encap+0x9/0x20 [ 390.332199][ C0] ? bpf_prog_dd8e24e87e706974+0x53/0x57 [ 390.337661][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 390.342789][ C0] ? irqentry_exit+0x30/0x40 [ 390.347211][ C0] ? sysvec_apic_timer_interrupt+0x7a/0xc0 [ 390.352859][ C0] ? irqentry_exit+0x30/0x40 [ 390.357286][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 390.362662][ C0] ? sysvec_apic_timer_interrupt+0x7a/0xc0 [ 390.368309][ C0] ? bpf_test_timer_continue+0x44/0x460 [ 390.373692][ C0] ? bpf_test_run+0x6d2/0xa40 [ 390.378198][ C0] ? sched_clock+0x9/0x10 [ 390.382366][ C0] ? bpf_test_run+0x689/0xa40 [ 390.386894][ C0] ? convert___skb_to_skb+0x670/0x670 [ 390.392090][ C0] ? eth_type_trans+0x44a/0x710 [ 390.396781][ C0] ? eth_get_headlen+0x240/0x240 [ 390.401637][ C0] ? convert___skb_to_skb+0x44/0x670 [ 390.406753][ C0] ? build_skb+0xde/0x220 [ 390.410924][ C0] ? bpf_prog_test_run_skb+0xaf1/0x13a0 [ 390.416325][ C0] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 390.422042][ C0] ? __kasan_check_write+0x14/0x20 [ 390.426978][ C0] ? fput+0x15b/0x1b0 [ 390.430803][ C0] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 390.436533][ C0] ? bpf_prog_test_run+0x3b0/0x630 [ 390.441482][ C0] ? bpf_prog_query+0x260/0x260 [ 390.446162][ C0] ? selinux_bpf+0xd2/0x100 [ 390.450529][ C0] ? security_bpf+0x82/0xb0 [ 390.454847][ C0] ? __sys_bpf+0x59f/0x7f0 [ 390.459103][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 390.464315][ C0] ? __x64_sys_futex+0x100/0x100 [ 390.469080][ C0] ? fpregs_restore_userregs+0x130/0x290 [ 390.474553][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 390.478979][ C0] ? x64_sys_call+0x87f/0x9a0 [ 390.483484][ C0] ? do_syscall_64+0x3b/0xb0 [ 390.487923][ C0] ? clear_bhb_loop+0x55/0xb0 [ 390.492559][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.498444][ C0] [ 390.501401][ C0] rcu: rcu_preempt kthread starved for 9997 jiffies! g6053 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 390.512229][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 390.522043][ C0] rcu: RCU grace-period kthread stack dump: [ 390.527762][ C0] task:rcu_preempt state:R running task stack:27720 pid:14 ppid:2 flags:0x00004000 [ 390.538362][ C0] Call Trace: [ 390.541483][ C0] [ 390.544260][ C0] __schedule+0xca7/0x1550 [ 390.548535][ C0] ? release_firmware_map_entry+0x191/0x191 [ 390.554243][ C0] ? del_timer_sync+0x1bc/0x230 [ 390.558933][ C0] ? __kasan_check_write+0x14/0x20 [ 390.563880][ C0] schedule+0xc3/0x180 [ 390.567786][ C0] schedule_timeout+0x18c/0x380 [ 390.572465][ C0] ? __kasan_check_write+0x14/0x20 [ 390.577420][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 390.582716][ C0] ? console_conditional_schedule+0x10/0x10 [ 390.588443][ C0] ? update_process_times+0x1b0/0x1b0 [ 390.593648][ C0] ? prepare_to_swait_event+0x308/0x320 [ 390.599039][ C0] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 390.603726][ C0] ? dyntick_save_progress_counter+0x280/0x280 [ 390.609706][ C0] ? rcu_gp_init+0xfa0/0xfa0 [ 390.614131][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 390.619777][ C0] ? finish_swait+0x17d/0x1b0 [ 390.624293][ C0] rcu_gp_kthread+0xa3/0x3a0 [ 390.628716][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 390.634185][ C0] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 390.639223][ C0] ? __kasan_check_read+0x11/0x20 [ 390.644082][ C0] ? __kthread_parkme+0x12d/0x180 [ 390.648944][ C0] kthread+0x26d/0x300 [ 390.652845][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 390.658313][ C0] ? kthread_blkcg+0xd0/0xd0 [ 390.662744][ C0] ret_from_fork+0x1f/0x30 [ 390.667008][ C0] [ 390.669862][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 390.676045][ C0] CPU: 0 PID: 719 Comm: syz.4.75 Not tainted 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 390.685311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 390.695220][ C0] RIP: 0010:stack_trace_consume_entry+0x11b/0x290 [ 390.701468][ C0] Code: 89 d8 48 c1 e8 03 80 3c 10 00 74 1e 48 89 df 49 89 d6 49 89 f7 4d 89 c5 e8 e2 fb 56 00 4d 89 e8 4c 8b 55 c8 4c 89 fe 4c 89 f2 <48> 89 33 41 8b 1a 41 0f b6 04 14 84 c0 0f 85 37 01 00 00 41 3b 18 [ 390.720898][ C0] RSP: 0018:ffffc900000075e8 EFLAGS: 00000246 [ 390.726794][ C0] RAX: 1ffff92000000f00 RBX: ffffc90000007800 RCX: ffffffff877a1000 [ 390.734794][ C0] RDX: dffffc0000000000 RSI: ffffffff840cfd41 RDI: ffffc9000000772c [ 390.742681][ C0] RBP: ffffc90000007630 R08: ffffc90000007728 R09: 0000000000000000 [ 390.750495][ C0] R10: ffffc90000007730 R11: dffffc0000000001 R12: 1ffff92000000ee5 [ 390.758309][ C0] R13: 1ffff92000000ee5 R14: ffffc90000007800 R15: 1ffff92000000ee6 [ 390.766116][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 390.774888][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.781310][ C0] CR2: 00007ff6633b8d58 CR3: 0000000133a97000 CR4: 00000000003506b0 [ 390.789126][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.796935][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 390.804747][ C0] Call Trace: [ 390.807868][ C0] [ 390.810562][ C0] ? show_regs+0x58/0x60 [ 390.814636][ C0] ? dump_cpu_task+0x3c/0x70 [ 390.819162][ C0] ? rcu_check_gp_kthread_starvation+0x1d1/0x240 [ 390.825318][ C0] ? wq_watchdog_touch+0x72/0x110 [ 390.830184][ C0] ? print_other_cpu_stall+0x1140/0x1300 [ 390.835658][ C0] ? print_cpu_stall+0x590/0x590 [ 390.840420][ C0] ? bpf_trace_run1+0x10b/0x240 [ 390.845127][ C0] ? rcu_sched_clock_irq+0xb19/0x1350 [ 390.850326][ C0] ? rcu_boost_kthread_setaffinity+0x5a0/0x5a0 [ 390.856320][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 390.861343][ C0] ? tick_setup_sched_timer+0x490/0x490 [ 390.866740][ C0] ? update_process_times+0x149/0x1b0 [ 390.871933][ C0] ? tick_sched_timer+0x188/0x240 [ 390.876787][ C0] ? tick_setup_sched_timer+0x490/0x490 [ 390.882178][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 390.887390][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 390.892324][ C0] ? clockevents_program_event+0x236/0x300 [ 390.897976][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 390.903880][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 390.908846][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 390.914829][ C0] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 390.920460][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 390.926463][ C0] ? __init_begin+0x3a000/0x3a000 [ 390.931316][ C0] ? dst_init+0xe1/0x400 [ 390.935478][ C0] ? stack_trace_consume_entry+0x11b/0x290 [ 390.941125][ C0] ? __init_begin+0x3a000/0x3a000 [ 390.945985][ C0] ? no_hash_pointers_enable+0x9b/0xd5 [ 390.951277][ C0] ? dst_init+0xe1/0x400 [ 390.955446][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 390.960304][ C0] arch_stack_walk+0x101/0x140 [ 390.964907][ C0] ? dst_init+0xe1/0x400 [ 390.968990][ C0] stack_trace_save+0x113/0x1c0 [ 390.973674][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 390.978616][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 390.983734][ C0] ? __kasan_kmalloc+0x9c/0xb0 [ 390.988337][ C0] ? kmalloc_trace+0x44/0xa0 [ 390.992766][ C0] ref_tracker_alloc+0x175/0x450 [ 390.997551][ C0] ? ref_tracker_dir_print+0x160/0x160 [ 391.002856][ C0] ? dst_alloc+0x164/0x1e0 [ 391.007094][ C0] dst_init+0xe1/0x400 [ 391.010994][ C0] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 391.016643][ C0] dst_alloc+0x18a/0x1e0 [ 391.020727][ C0] icmp6_dst_alloc+0xf8/0x510 [ 391.025235][ C0] ? icmpv6_flow_init+0xce/0x130 [ 391.030010][ C0] ndisc_send_skb+0x28b/0xdc0 [ 391.034601][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.040604][ C0] ? ndisc_mc_map+0x920/0x920 [ 391.045126][ C0] ? __kasan_check_write+0x14/0x20 [ 391.050058][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 391.054833][ C0] ? skb_put+0x11e/0x210 [ 391.058915][ C0] ndisc_send_rs+0x47d/0x5f0 [ 391.063344][ C0] addrconf_rs_timer+0x2d1/0x600 [ 391.068113][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 391.074012][ C0] ? _find_next_bit+0x88/0x130 [ 391.078635][ C0] ? __next_timer_interrupt+0x1eb/0x250 [ 391.083996][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 391.090078][ C0] call_timer_fn+0x3b/0x2d0 [ 391.094413][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 391.100313][ C0] __run_timers+0x72a/0xa10 [ 391.104766][ C0] ? calc_index+0x270/0x270 [ 391.109110][ C0] run_timer_softirq+0x69/0xf0 [ 391.113700][ C0] __do_softirq+0x1d8/0x661 [ 391.118038][ C0] ? irqtime_account_irq+0xdc/0x260 [ 391.123075][ C0] __irq_exit_rcu+0x50/0xf0 [ 391.127412][ C0] irq_exit_rcu+0x9/0x10 [ 391.131492][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 391.136955][ C0] [ 391.139730][ C0] [ 391.142514][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.148331][ C0] RIP: 0010:__schedule+0xcb4/0x1550 [ 391.153365][ C0] Code: b6 04 28 84 c0 0f 85 83 02 00 00 41 80 24 24 fc 4c 89 f7 48 8b 74 24 20 e8 a9 d4 e2 fb 48 89 c7 e8 81 e7 32 fc 48 8b 44 24 70 <48> c7 84 24 80 00 00 00 0e 36 e0 45 49 c7 44 05 00 00 00 00 00 65 [ 391.172809][ C0] RSP: 0018:ffffc90001c87040 EFLAGS: 00000282 [ 391.178710][ C0] RAX: 1ffff92000390e18 RBX: ffff88810f4a8568 RCX: 0000000000000002 [ 391.186518][ C0] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 391.194334][ C0] RBP: ffffc90001c87150 R08: ffffffff819b5460 R09: fffffbfff0ee5107 [ 391.202248][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7038748 [ 391.210061][ C0] R13: dffffc0000000000 R14: ffff88810f4a8000 R15: 1ffff11021e950ad [ 391.217903][ C0] ? __perf_event_task_sched_in+0x180/0x1f0 [ 391.223741][ C0] ? release_firmware_map_entry+0x191/0x191 [ 391.229444][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 391.235171][ C0] preempt_schedule_irq+0xc7/0x140 [ 391.240122][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 391.245685][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 391.251405][ C0] irqentry_exit+0x30/0x40 [ 391.255654][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 391.261126][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.266939][ C0] RIP: 0010:preempt_schedule_notrace+0xa7/0x140 [ 391.273018][ C0] Code: f7 e8 fd 37 9f fc 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 42 80 3c 3b 00 74 08 4c 89 f7 e8 40 37 9f fc f6 44 24 21 02 75 36 <48> c7 04 24 0e 36 e0 45 4b c7 04 27 00 00 00 00 65 48 8b 04 25 28 [ 391.292459][ C0] RSP: 0018:ffffc90001c872e0 EFLAGS: 00000246 [ 391.298362][ C0] RAX: 1ffff11021e95000 RBX: 1ffff92000390e60 RCX: ffffffff851d896b [ 391.306174][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88810f4a8000 [ 391.313988][ C0] RBP: ffffc90001c87378 R08: dffffc0000000000 R09: ffffed1021e95001 [ 391.321803][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000390e5c [ 391.329609][ C0] R13: dffffc0000000000 R14: ffff88810f4a8000 R15: dffffc0000000000 [ 391.337427][ C0] ? preempt_schedule_notrace+0x11b/0x140 [ 391.342983][ C0] ? preempt_schedule_common+0xf0/0xf0 [ 391.348271][ C0] ? pvclock_clocksource_read+0xa5/0x6e0 [ 391.353748][ C0] preempt_schedule_notrace_thunk+0x16/0x18 [ 391.359473][ C0] kvm_sched_clock_read+0x2f/0x40 [ 391.364328][ C0] sched_clock+0x9/0x10 [ 391.368320][ C0] sched_clock_cpu+0x71/0x2b0 [ 391.372841][ C0] ? __sched_clock_gtod_offset+0x100/0x100 [ 391.378477][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 391.383428][ C0] __reset_page_owner+0x28/0x190 [ 391.388199][ C0] ? __reset_page_owner+0x1/0x190 [ 391.393064][ C0] free_unref_page_prepare+0x83d/0x850 [ 391.398366][ C0] free_unref_page+0xb2/0x5c0 [ 391.402864][ C0] ? sysvec_irq_work+0x52/0xb0 [ 391.407471][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 391.412415][ C0] ? mark_free_pages+0x3b0/0x3b0 [ 391.417206][ C0] __free_pages+0x61/0xf0 [ 391.421360][ C0] __vunmap+0x9f3/0xb60 [ 391.425353][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 391.430303][ C0] ? vunmap+0x60/0x60 [ 391.434113][ C0] ? _raw_spin_unlock_irqrestore+0x56/0x80 [ 391.439757][ C0] ? kcov_open+0x60/0x60 [ 391.443838][ C0] vfree+0x5c/0x80 [ 391.447410][ C0] kcov_close+0x2b/0x50 [ 391.451479][ C0] __fput+0x3ab/0x870 [ 391.455301][ C0] ____fput+0x15/0x20 [ 391.459111][ C0] task_work_run+0x24d/0x2e0 [ 391.463537][ C0] ? kmem_cache_free+0x291/0x510 [ 391.468322][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 391.473173][ C0] ? free_nsproxy+0x20d/0x260 [ 391.477690][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 391.482722][ C0] do_exit+0xbd5/0x2b80 [ 391.486716][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 391.491324][ C0] ? put_task_struct+0x80/0x80 [ 391.495913][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 391.500603][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 391.506422][ C0] ? __kasan_check_write+0x14/0x20 [ 391.511367][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 391.516322][ C0] do_group_exit+0x21a/0x2d0 [ 391.520741][ C0] ? __kasan_check_write+0x14/0x20 [ 391.525699][ C0] get_signal+0x169d/0x1820 [ 391.530037][ C0] ? finish_task_switch+0x207/0x7b0 [ 391.535072][ C0] ? ptrace_notify+0x350/0x350 [ 391.539673][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 391.545137][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 391.550860][ C0] ? __kasan_check_read+0x11/0x20 [ 391.555722][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 391.560849][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 391.566400][ C0] ? get_sigframe_size+0x10/0x10 [ 391.571185][ C0] ? schedule+0xda/0x180 [ 391.575255][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 391.580287][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 391.585583][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 391.590884][ C0] irqentry_exit+0x12/0x40 [ 391.595131][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 391.600602][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.606414][ C0] RIP: 0033:0x7f5c71638e03 [ 391.610673][ C0] Code: Unable to access opcode bytes at 0x7f5c71638dd9. [ 391.617527][ C0] RSP: 002b:00007f5c72535f80 EFLAGS: 00000202 [ 391.623425][ C0] RAX: 0000000000000000 RBX: 00007f5c717e5a33 RCX: 00007f5c717ddab8 [ 391.631386][ C0] RDX: 000000000000c363 RSI: 0000000000000000 RDI: 00007f5c717e5a33 [ 391.639138][ C0] RBP: 00007f5c717ddab8 R08: 0000000000000000 R09: 00007ffe42dcf0b0 [ 391.646946][ C0] R10: 00000000000044f2 R11: 0000000000000060 R12: 0000000000000000 [ 391.654764][ C0] R13: 000000000000000b R14: 00007f5c71905f80 R15: 00007ffe42d81f08 [ 391.662594][ C0] [ 397.292068][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P1193 } 10704 jiffies s: 6761 root: 0x0/T [ 397.304017][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 400.705704][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.712851][ T1210] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.721111][ T1210] device bridge_slave_0 entered promiscuous mode [ 400.753350][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.760572][ T1210] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.769165][ T1210] device bridge_slave_1 entered promiscuous mode [ 400.887572][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.905571][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.916533][ T1212] device bridge_slave_0 entered promiscuous mode [ 400.940910][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.947827][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.957000][ T1213] device bridge_slave_0 entered promiscuous mode [ 400.981959][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.989239][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.997334][ T1212] device bridge_slave_1 entered promiscuous mode [ 401.017468][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.025626][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.034349][ T1213] device bridge_slave_1 entered promiscuous mode [ 401.071045][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.077967][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.087231][ T1209] device bridge_slave_0 entered promiscuous mode [ 401.171663][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.178629][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.187043][ T1209] device bridge_slave_1 entered promiscuous mode [ 401.800467][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.807379][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.816252][ T1211] device bridge_slave_0 entered promiscuous mode [ 401.975534][ T1212] device veth0_vlan entered promiscuous mode [ 401.999468][ T1212] device veth1_macvtap entered promiscuous mode [ 402.133045][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.140805][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.149383][ T1211] device bridge_slave_1 entered promiscuous mode [ 402.161354][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.170295][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.179882][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.188406][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.197500][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.206711][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.215704][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.223919][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.232121][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.241197][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.249246][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.256973][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.266164][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.274872][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.281827][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.289790][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.298452][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.307325][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.314257][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.322346][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.483966][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.500706][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.508566][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.517870][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.527062][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.534004][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.544139][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.552778][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.561551][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.568442][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.400271][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.120622][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.129815][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.138046][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.146908][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.293882][ T1210] device veth0_vlan entered promiscuous mode [ 405.321794][ T1210] device veth1_macvtap entered promiscuous mode [ 407.457721][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.466425][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.476034][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.484813][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.494224][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.503004][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.511785][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.520141][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.529168][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.537807][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.547013][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.558578][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.566877][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.149665][ T1213] device veth0_vlan entered promiscuous mode [ 409.174664][ T1213] device veth1_macvtap entered promiscuous mode [ 409.294615][ T1209] device veth0_vlan entered promiscuous mode [ 409.319537][ T1209] device veth1_macvtap entered promiscuous mode [ 409.388354][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.396219][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.403961][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.412685][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.421136][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.428115][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.435649][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.444348][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.453352][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.460391][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.467825][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.476368][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.484753][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.493258][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.501680][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.510472][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.519314][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.527553][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.539300][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.547782][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.557259][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.571169][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.579453][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.588199][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.597259][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.604188][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.612087][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.620783][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.629923][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.636819][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.646969][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.655581][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.664285][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.673493][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.682019][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.691248][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.700283][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.708620][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.718030][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.726916][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.735724][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.744689][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.753705][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.762619][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.778819][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.805360][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.824584][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.918275][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.926625][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.934748][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.988015][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.996601][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.006837][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.015354][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.182922][ T28] audit: type=1400 audit(1722445053.614:127): avc: denied { create } for pid=1249 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 410.570574][ T1252] device syzkaller0 entered promiscuous mode [ 414.529708][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.540937][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.557884][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.575481][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.587237][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.594197][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.602237][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.611011][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.619518][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.626434][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.633939][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.642438][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.651110][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.659694][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.609103][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.617073][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.649951][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.663292][ T1211] device veth0_vlan entered promiscuous mode [ 415.689339][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.696603][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.910746][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.917673][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.957212][ T1289] device bridge_slave_0 entered promiscuous mode [ 415.977438][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.007982][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.027457][ T1289] device bridge_slave_1 entered promiscuous mode [ 416.315707][ T28] audit: type=1400 audit(1722445059.714:128): avc: denied { create } for pid=1314 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 416.499138][ T1211] device veth1_macvtap entered promiscuous mode [ 417.139019][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.147197][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.156224][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.164821][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.173481][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.181435][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.191169][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.200281][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.209418][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.109431][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.117182][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.464386][ T28] audit: type=1400 audit(1722445062.884:129): avc: denied { create } for pid=1332 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 520.938694][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 520.945517][ C1] (detected by 1, t=10002 jiffies, g=6709, q=518 ncpus=2) [ 520.952544][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10001 (4294989315-4294979314), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 520.965736][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g6709 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 520.976678][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 520.986482][ C1] rcu: RCU grace-period kthread stack dump: [ 520.992205][ C1] task:rcu_preempt state:R running task stack:27720 pid:14 ppid:2 flags:0x00004000 [ 521.002800][ C1] Call Trace: [ 521.005921][ C1] [ 521.008703][ C1] __schedule+0xca7/0x1550 [ 521.012968][ C1] ? update_load_avg+0x513/0x1530 [ 521.017826][ C1] ? release_firmware_map_entry+0x191/0x191 [ 521.023540][ C1] ? del_timer_sync+0x1bc/0x230 [ 521.028238][ C1] ? __kasan_check_write+0x14/0x20 [ 521.033182][ C1] schedule+0xc3/0x180 [ 521.037086][ C1] schedule_timeout+0x18c/0x380 [ 521.041771][ C1] ? __kasan_check_write+0x14/0x20 [ 521.046716][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 521.052012][ C1] ? console_conditional_schedule+0x10/0x10 [ 521.057744][ C1] ? update_process_times+0x1b0/0x1b0 [ 521.062960][ C1] ? prepare_to_swait_event+0x308/0x320 [ 521.068342][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 521.073023][ C1] ? dump_blkd_tasks+0x7f0/0x7f0 [ 521.077794][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 521.082223][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 521.087873][ C1] ? finish_swait+0x17d/0x1b0 [ 521.092381][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 521.096809][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 521.102268][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 521.107310][ C1] ? __kasan_check_read+0x11/0x20 [ 521.112168][ C1] ? __kthread_parkme+0x12d/0x180 [ 521.117028][ C1] kthread+0x26d/0x300 [ 521.120930][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 521.126404][ C1] ? kthread_blkcg+0xd0/0xd0 [ 521.130845][ C1] ret_from_fork+0x1f/0x30 [ 521.135094][ C1] [ 521.137946][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 521.144127][ C1] Sending NMI from CPU 1 to CPUs 0: [ 521.149171][ C0] NMI backtrace for cpu 0 [ 521.149202][ C0] CPU: 0 PID: 719 Comm: syz.4.75 Not tainted 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 521.149252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 521.149279][ C0] RIP: 0010:__hrtimer_run_queues+0x240/0xad0 [ 521.149364][ C0] Code: 00 00 00 49 8d 44 1f 58 48 89 44 24 10 49 8d 44 1f 50 48 89 04 24 49 8d 44 1f 48 48 89 44 24 78 4c 8b 64 24 28 48 8b 44 24 38 <42> 80 3c 30 00 74 0d 48 8d bc 24 c0 00 00 00 e8 bc 91 55 00 4c 8b [ 521.149407][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00000046 [ 521.149448][ C0] RAX: 1ffff92000000f30 RBX: ffff8881f7029cd8 RCX: ffff88810f4a8000 [ 521.149486][ C0] RDX: 0000000000010103 RSI: 1ffff1103ee0539a RDI: ffff88812e06c610 [ 521.149522][ C0] RBP: ffffc900000079f8 R08: dffffc0000000000 R09: ffff88812e06c618 [ 521.149560][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7029cc0 [ 521.149595][ C0] R13: ffff88812e06c610 R14: dffffc0000000000 R15: ffff8881f7029c80 [ 521.149634][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 521.149677][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.149711][ C0] CR2: 0000000000000000 CR3: 0000000132f6d000 CR4: 00000000003506b0 [ 521.149748][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 521.149778][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 521.149810][ C0] Call Trace: [ 521.149822][ C0] [ 521.149837][ C0] ? show_regs+0x58/0x60 [ 521.149886][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 521.149945][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 521.150010][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 521.150084][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 521.150160][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 521.150223][ C0] ? nmi_handle+0xa7/0x280 [ 521.150277][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 521.150352][ C0] ? default_do_nmi+0x69/0x160 [ 521.150404][ C0] ? exc_nmi+0xad/0x100 [ 521.150451][ C0] ? end_repeat_nmi+0x16/0x31 [ 521.150513][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 521.150589][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 521.150667][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 521.150741][ C0] [ 521.150755][ C0] [ 521.150782][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 521.150856][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 521.150913][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 521.151006][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 521.151088][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 521.151145][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 521.151206][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 521.151263][ C0] Code: 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 04 e0 fc 05 48 89 de e8 c4 60 46 00 5b 5d c3 cc 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 00 cb 8c 7e 65 8b 15 01 cb 8c 7e [ 521.151305][ C0] RSP: 0018:ffffc90000007c28 EFLAGS: 00000246 [ 521.151341][ C0] RAX: 0000000000000000 RBX: 0000000000000641 RCX: ffff888126de2528 [ 521.151374][ C0] RDX: 0000000000000001 RSI: 0000000000057e40 RDI: 0000000000000641 [ 521.151405][ C0] RBP: ffffc90000007c50 R08: dffffc0000000000 R09: 0000000000000003 [ 521.151441][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff11024dbc4a5 [ 521.151479][ C0] R13: ffff888126de24f0 R14: 0000000000057e40 R15: dffffc0000000000 [ 521.151529][ C0] ? rfc3315_s14_backoff_update+0x13/0xc0 [ 521.151594][ C0] addrconf_rs_timer+0x322/0x600 [ 521.151657][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 521.151721][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 521.151797][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 521.151874][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 521.151938][ C0] call_timer_fn+0x3b/0x2d0 [ 521.152010][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 521.152078][ C0] __run_timers+0x72a/0xa10 [ 521.152165][ C0] ? calc_index+0x270/0x270 [ 521.152237][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 521.152298][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 521.152358][ C0] run_timer_softirq+0x69/0xf0 [ 521.152427][ C0] __do_softirq+0x1d8/0x661 [ 521.152486][ C0] ? irqtime_account_irq+0xdc/0x260 [ 521.152565][ C0] __irq_exit_rcu+0x50/0xf0 [ 521.152621][ C0] irq_exit_rcu+0x9/0x10 [ 521.152675][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 521.152728][ C0] [ 521.152742][ C0] [ 521.152757][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 521.152811][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 521.152872][ C0] Code: 4c 89 e7 e8 00 36 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 f5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 be f6 31 fc 65 48 8b 1d 56 e3 [ 521.152912][ C0] RSP: 0018:ffffc90001c87340 EFLAGS: 00000246 [ 521.152951][ C0] RAX: 1ffff11021e95159 RBX: 1ffff92000390e6c RCX: ffffffff851f8900 [ 521.152989][ C0] RDX: 1ffff11021e95005 RSI: 0000000000000000 RDI: 0000000000000001 [ 521.153022][ C0] RBP: ffffc90001c873d8 R08: ffffffff87969000 R09: ffffffff87969008 [ 521.153059][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90001c87360 [ 521.153097][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000390e68 [ 521.153139][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 521.153200][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 521.153260][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 521.153319][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 521.153379][ C0] ? irqentry_exit+0x30/0x40 [ 521.153435][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 521.153498][ C0] irqentry_exit+0x30/0x40 [ 521.153549][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 521.153603][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 521.153657][ C0] RIP: 0010:bcmp+0x16b/0x200 [ 521.153723][ C0] Code: 07 38 c1 0f 8c 3e ff ff ff 48 89 75 d0 be 08 00 00 00 e8 48 ee a8 fc 48 8b 75 d0 48 ba 00 00 00 00 00 fc ff df e9 1d ff ff ff <4d> 85 f6 74 71 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 0f b6 04 10 [ 521.153764][ C0] RSP: 0018:ffffc90001c874d8 EFLAGS: 00000293 [ 521.153802][ C0] RAX: 00000000ffffff4c RBX: dffffc0000000000 RCX: 00000000ffffff9f [ 521.153837][ C0] RDX: dffffc0000000000 RSI: ffffffff8566248a RDI: ffffffff8566248a [ 521.153875][ C0] RBP: ffffc90001c87510 R08: ffffffff87958b09 R09: ffffffff8517521e [ 521.153913][ C0] R10: 0000000000000002 R11: ffff88810f4a8000 R12: ffffffff8566248a [ 521.153948][ C0] R13: 1ffffffff0f2b161 R14: 0000000000000005 R15: ffffffff8566248a [ 521.153990][ C0] ? insn_get_displacement+0x35e/0x9e0 [ 521.154064][ C0] text_poke_loc_init+0x39d/0x680 [ 521.154136][ C0] ? insn_decode+0x3be/0x570 [ 521.154204][ C0] ? text_poke_finish+0x30/0x30 [ 521.154274][ C0] ? __jump_label_patch+0x256/0x440 [ 521.154345][ C0] ? __cgroup_bpf_run_filter_sysctl+0x608/0xa80 [ 521.154412][ C0] ? __cgroup_bpf_run_filter_sysctl+0x60d/0xa80 [ 521.154478][ C0] ? bit_wait_io_timeout+0x120/0x120 [ 521.154544][ C0] ? __cgroup_bpf_run_filter_sysctl+0x608/0xa80 [ 521.154611][ C0] text_poke_queue+0xe4/0x1a0 [ 521.154670][ C0] arch_jump_label_transform_queue+0x78/0xe0 [ 521.154738][ C0] __jump_label_update+0x181/0x380 [ 521.154796][ C0] jump_label_update+0x3af/0x450 [ 521.154848][ C0] ? bpf_perf_link_attach+0x541/0x560 [ 521.154893][ C0] __static_key_slow_dec_cpuslocked+0x112/0x170 [ 521.154951][ C0] ? bpf_perf_link_dealloc+0x20/0x20 [ 521.154995][ C0] static_key_slow_dec+0x52/0xa0 [ 521.155046][ C0] bpf_stats_release+0x21/0x40 [ 521.155089][ C0] __fput+0x3ab/0x870 [ 521.155143][ C0] ____fput+0x15/0x20 [ 521.155194][ C0] task_work_run+0x24d/0x2e0 [ 521.155272][ C0] ? kmem_cache_free+0x291/0x510 [ 521.155327][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 521.155402][ C0] ? free_nsproxy+0x20d/0x260 [ 521.155454][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 521.155508][ C0] do_exit+0xbd5/0x2b80 [ 521.155560][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 521.155636][ C0] ? put_task_struct+0x80/0x80 [ 521.155686][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 521.155760][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 521.155858][ C0] ? __kasan_check_write+0x14/0x20 [ 521.155904][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 521.155982][ C0] do_group_exit+0x21a/0x2d0 [ 521.156032][ C0] ? __kasan_check_write+0x14/0x20 [ 521.156081][ C0] get_signal+0x169d/0x1820 [ 521.156137][ C0] ? finish_task_switch+0x207/0x7b0 [ 521.156219][ C0] ? ptrace_notify+0x350/0x350 [ 521.156279][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 521.156354][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 521.156406][ C0] ? __kasan_check_read+0x11/0x20 [ 521.156451][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 521.156510][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 521.156577][ C0] ? get_sigframe_size+0x10/0x10 [ 521.156660][ C0] ? schedule+0xda/0x180 [ 521.156718][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 521.156780][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 521.156844][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 521.156898][ C0] irqentry_exit+0x12/0x40 [ 521.156950][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 521.157005][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 521.157059][ C0] RIP: 0033:0x7f5c71638e03 [ 521.157094][ C0] Code: Unable to access opcode bytes at 0x7f5c71638dd9. [ 521.157117][ C0] RSP: 002b:00007f5c72535f80 EFLAGS: 00000202 [ 521.157154][ C0] RAX: 0000000000000000 RBX: 00007f5c717e5a33 RCX: 00007f5c717ddab8 [ 521.157195][ C0] RDX: 000000000000c363 RSI: 0000000000000000 RDI: 00007f5c717e5a33 [ 521.157227][ C0] RBP: 00007f5c717ddab8 R08: 0000000000000000 R09: 00007ffe42dcf0b0 [ 521.157262][ C0] R10: 00000000000044f2 R11: 0000000000000060 R12: 0000000000000000 [ 521.157292][ C0] R13: 000000000000000b R14: 00007f5c71905f80 R15: 00007ffe42d81f08 [ 521.157340][ C0] [ 612.422366][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 9073 jiffies s: 8465 root: 0x1/. [ 612.434010][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 612.440926][ T16] Sending NMI from CPU 1 to CPUs 0: [ 612.445956][ C0] NMI backtrace for cpu 0 [ 612.445982][ C0] CPU: 0 PID: 719 Comm: syz.4.75 Not tainted 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 612.446040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 612.446067][ C0] RIP: 0010:pvclock_clocksource_read+0x60/0x6e0 [ 612.446133][ C0] Code: 8d 48 03 4c 89 c2 48 c1 ea 03 48 89 c8 48 89 4d 98 48 c1 e9 03 49 8d 59 07 4c 89 c8 48 c1 e8 03 48 89 85 60 ff ff ff 48 89 d8 <48> 89 9d 78 ff ff ff 48 c1 eb 03 48 89 9d 68 ff ff ff 49 8d 42 03 [ 612.446175][ C0] RSP: 0018:ffffc900000062e8 EFLAGS: 00000802 [ 612.446215][ C0] RAX: ffffffff8796900f RBX: ffffffff8796900f RCX: 1ffffffff0f2d200 [ 612.446252][ C0] RDX: 1ffffffff0f2d200 RSI: ffffffff8796901c RDI: ffffffff8796901d [ 612.446291][ C0] RBP: ffffc90000006390 R08: ffffffff87969000 R09: ffffffff87969008 [ 612.446329][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90000006420 [ 612.446368][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88812e06c610 [ 612.446406][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 612.446449][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.446484][ C0] CR2: 0000000000000000 CR3: 0000000132f6d000 CR4: 00000000003506b0 [ 612.446521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 612.446551][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 612.446583][ C0] Call Trace: [ 612.446596][ C0] [ 612.446612][ C0] ? show_regs+0x58/0x60 [ 612.446659][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 612.446719][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 612.446783][ C0] ? pvclock_clocksource_read+0x60/0x6e0 [ 612.446839][ C0] ? pvclock_clocksource_read+0x60/0x6e0 [ 612.446897][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 612.446954][ C0] ? nmi_handle+0xa7/0x280 [ 612.447007][ C0] ? pvclock_clocksource_read+0x60/0x6e0 [ 612.447071][ C0] ? __hrtimer_run_queues+0x240/0xad0 [ 612.447145][ C0] ? default_do_nmi+0x69/0x160 [ 612.447196][ C0] ? exc_nmi+0xad/0x100 [ 612.447242][ C0] ? end_repeat_nmi+0x16/0x31 [ 612.447303][ C0] ? pvclock_clocksource_read+0x60/0x6e0 [ 612.447361][ C0] ? pvclock_clocksource_read+0x60/0x6e0 [ 612.447420][ C0] ? pvclock_clocksource_read+0x60/0x6e0 [ 612.447478][ C0] [ 612.447491][ C0] [ 612.447504][ C0] ? __kasan_check_write+0x14/0x20 [ 612.447550][ C0] ? llist_add_batch+0x160/0x1d0 [ 612.447605][ C0] ? find_next_clump8+0x1c0/0x1c0 [ 612.447659][ C0] kvm_sched_clock_read+0x18/0x40 [ 612.447711][ C0] sched_clock+0x9/0x10 [ 612.447780][ C0] sched_clock_cpu+0x71/0x2b0 [ 612.447827][ C0] ? arch_irq_work_raise+0xc7/0xd0 [ 612.447888][ C0] ? __irq_work_queue_local+0x111/0x180 [ 612.447968][ C0] ? __sched_clock_gtod_offset+0x100/0x100 [ 612.448032][ C0] ? hrtimer_forward+0x1a6/0x2c0 [ 612.448106][ C0] cpu_clock_event_read+0x1b/0x50 [ 612.448174][ C0] perf_swevent_hrtimer+0x115/0x4f0 [ 612.448241][ C0] ? __raise_softirq_irqoff+0xe0/0xe0 [ 612.448306][ C0] ? cpu_clock_event_read+0x50/0x50 [ 612.448400][ C0] ? timerqueue_add+0x250/0x270 [ 612.448475][ C0] ? timerqueue_del+0xb4/0x100 [ 612.448541][ C0] ? cpu_clock_event_read+0x50/0x50 [ 612.448611][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 612.448696][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 612.448771][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 612.448828][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 612.448919][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 612.449001][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 612.449062][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 612.449115][ C0] RIP: 0010:eth_type_trans+0x2b4/0x710 [ 612.449175][ C0] Code: 9c fd 4c 8b 3b 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fb dd 9c fd 4d 8b 36 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 e2 dd 9c fd 49 8b 1f 4c 31 f3 49 bf ff ff ff ff [ 612.449217][ C0] RSP: 0018:ffffc90000006a80 EFLAGS: 00000246 [ 612.449255][ C0] RAX: 1ffff110266ff545 RBX: ffff88812252c300 RCX: ffff88810f4a8000 [ 612.449294][ C0] RDX: 0000000000000501 RSI: 0000000000000002 RDI: 000000000000ffff [ 612.449325][ C0] RBP: ffffc90000006b78 R08: ffffffff841fe1af R09: ffffffff84095cac [ 612.449362][ C0] R10: 0000000000000002 R11: ffff88810f4a8000 R12: ffff88812e423c02 [ 612.449397][ C0] R13: dffffc0000000000 R14: aaaa020000003333 R15: ffff8881337faa28 [ 612.449439][ C0] ? skb_network_protocol+0x1ac/0x7a0 [ 612.449512][ C0] ? eth_type_trans+0x21f/0x710 [ 612.449583][ C0] ? eth_get_headlen+0x240/0x240 [ 612.449640][ C0] ? skb_network_protocol+0x1ac/0x7a0 [ 612.449712][ C0] ? skb_scrub_packet+0x180/0x440 [ 612.449789][ C0] ? eth_type_trans+0x1/0x710 [ 612.449847][ C0] __dev_forward_skb2+0x2e5/0x820 [ 612.449915][ C0] ? skb_network_protocol+0x1ac/0x7a0 [ 612.449989][ C0] ? veth_xmit+0x2ef/0x940 [ 612.450065][ C0] __dev_forward_skb+0x22/0x30 [ 612.450134][ C0] veth_xmit+0x315/0x940 [ 612.450206][ C0] dev_hard_start_xmit+0x1de/0x630 [ 612.450291][ C0] __dev_queue_xmit+0x18a4/0x36e0 [ 612.450379][ C0] ? __dev_queue_xmit+0x2a6/0x36e0 [ 612.450454][ C0] ? netdev_core_pick_tx+0x350/0x350 [ 612.450529][ C0] ? debug_smp_processor_id+0x17/0x20 [ 612.450583][ C0] ? irqtime_account_irq+0xdc/0x260 [ 612.450659][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 612.450715][ C0] ? irqentry_exit+0x30/0x40 [ 612.450766][ C0] ? sysvec_irq_work+0x52/0xb0 [ 612.450813][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 612.450878][ C0] br_dev_queue_push_xmit+0x595/0x730 [ 612.450936][ C0] ? nla_nest_cancel+0x90/0x90 [ 612.450989][ C0] ? br_forward_finish+0xc6/0x360 [ 612.451050][ C0] ? br_forward_finish+0x124/0x360 [ 612.451109][ C0] ? nla_nest_cancel+0x90/0x90 [ 612.451164][ C0] ? br_forward_finish+0x136/0x360 [ 612.451219][ C0] ? do_group_exit+0x21a/0x2d0 [ 612.451273][ C0] br_forward_finish+0x136/0x360 [ 612.451331][ C0] ? br_dev_queue_push_xmit+0x730/0x730 [ 612.451389][ C0] ? __copy_skb_header+0x4b0/0x640 [ 612.451455][ C0] ? __br_forward+0x473/0x5b0 [ 612.451508][ C0] ? __copy_skb_header+0x4b0/0x640 [ 612.451574][ C0] __br_forward+0x473/0x5b0 [ 612.451627][ C0] ? __skb_clone+0x458/0x6c0 [ 612.451689][ C0] ? br_forward+0x360/0x360 [ 612.451745][ C0] ? skb_clone+0x22c/0x380 [ 612.451809][ C0] ? maybe_deliver+0x202/0x290 [ 612.451868][ C0] br_flood+0x3c2/0x420 [ 612.451928][ C0] br_dev_xmit+0xc48/0x11f0 [ 612.451982][ C0] ? br_net_exit_batch+0x220/0x220 [ 612.452040][ C0] ? netif_skb_features+0x7be/0xb60 [ 612.452126][ C0] dev_hard_start_xmit+0x1de/0x630 [ 612.452211][ C0] __dev_queue_xmit+0x18a4/0x36e0 [ 612.452304][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 612.452356][ C0] ? __dev_queue_xmit+0x2a6/0x36e0 [ 612.452431][ C0] ? netdev_core_pick_tx+0x350/0x350 [ 612.452510][ C0] ? __kasan_check_read+0x11/0x20 [ 612.452554][ C0] ? selinux_ip_postroute+0x2d5/0x13d0 [ 612.452624][ C0] ? selinux_nf_unregister+0x30/0x30 [ 612.452696][ C0] ? memcpy+0x56/0x70 [ 612.452739][ C0] ip6_finish_output2+0x11f1/0x1840 [ 612.452826][ C0] ? ip6_make_skb+0x7a0/0x7a0 [ 612.452897][ C0] ? ip6t_do_table+0x1643/0x1830 [ 612.452962][ C0] ? ip6table_mangle_hook+0x246/0x790 [ 612.453043][ C0] ip6_finish_output+0x50f/0xa60 [ 612.453124][ C0] ip6_output+0x1f7/0x4d0 [ 612.453197][ C0] ? ac6_seq_show+0xf0/0xf0 [ 612.453268][ C0] ? ip6_output+0x4d0/0x4d0 [ 612.453347][ C0] ndisc_send_skb+0x7cf/0xdc0 [ 612.453412][ C0] ? ndisc_mc_map+0x920/0x920 [ 612.453469][ C0] ? ndisc_send_skb+0xdc0/0xdc0 [ 612.453535][ C0] ? memcpy+0x56/0x70 [ 612.453577][ C0] ? __ndisc_fill_addr_option+0xdb/0x130 [ 612.453639][ C0] ndisc_send_rs+0x47d/0x5f0 [ 612.453699][ C0] addrconf_rs_timer+0x2d1/0x600 [ 612.453762][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 612.453826][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 612.453898][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 612.453975][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 612.454057][ C0] call_timer_fn+0x3b/0x2d0 [ 612.454125][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 612.454187][ C0] __run_timers+0x72a/0xa10 [ 612.454267][ C0] ? calc_index+0x270/0x270 [ 612.454331][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 612.454390][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 612.454450][ C0] run_timer_softirq+0x69/0xf0 [ 612.454517][ C0] __do_softirq+0x1d8/0x661 [ 612.454575][ C0] ? irqtime_account_irq+0xdc/0x260 [ 612.454652][ C0] __irq_exit_rcu+0x50/0xf0 [ 612.454707][ C0] irq_exit_rcu+0x9/0x10 [ 612.454760][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 612.454813][ C0] [ 612.454827][ C0] [ 612.454842][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 612.454895][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 612.454955][ C0] Code: 4c 89 e7 e8 00 36 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 f5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 be f6 31 fc 65 48 8b 1d 56 e3 [ 612.454995][ C0] RSP: 0018:ffffc90001c87340 EFLAGS: 00000246 [ 612.455039][ C0] RAX: 1ffff11021e95159 RBX: 1ffff92000390e6c RCX: ffffffff851f8900 [ 612.455076][ C0] RDX: 1ffff11021e95005 RSI: 0000000000000000 RDI: 0000000000000001 [ 612.455108][ C0] RBP: ffffc90001c873d8 R08: ffffffff87969000 R09: ffffffff87969008 [ 612.455145][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90001c87360 [ 612.455181][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000390e68 [ 612.455224][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 612.455277][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 612.455335][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 612.455393][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 612.455453][ C0] ? irqentry_exit+0x30/0x40 [ 612.455508][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 612.455570][ C0] irqentry_exit+0x30/0x40 [ 612.455619][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 612.455673][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 612.455725][ C0] RIP: 0010:bcmp+0x16b/0x200 [ 612.455793][ C0] Code: 07 38 c1 0f 8c 3e ff ff ff 48 89 75 d0 be 08 00 00 00 e8 48 ee a8 fc 48 8b 75 d0 48 ba 00 00 00 00 00 fc ff df e9 1d ff ff ff <4d> 85 f6 74 71 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 0f b6 04 10 [ 612.455832][ C0] RSP: 0018:ffffc90001c874d8 EFLAGS: 00000293 [ 612.455870][ C0] RAX: 00000000ffffff4c RBX: dffffc0000000000 RCX: 00000000ffffff9f [ 612.455919][ C0] RDX: dffffc0000000000 RSI: ffffffff8566248a RDI: ffffffff8566248a [ 612.455956][ C0] RBP: ffffc90001c87510 R08: ffffffff87958b09 R09: ffffffff8517521e [ 612.455993][ C0] R10: 0000000000000002 R11: ffff88810f4a8000 R12: ffffffff8566248a [ 612.456035][ C0] R13: 1ffffffff0f2b161 R14: 0000000000000005 R15: ffffffff8566248a [ 612.456075][ C0] ? insn_get_displacement+0x35e/0x9e0 [ 612.456149][ C0] text_poke_loc_init+0x39d/0x680 [ 612.456219][ C0] ? insn_decode+0x3be/0x570 [ 612.456281][ C0] ? text_poke_finish+0x30/0x30 [ 612.456349][ C0] ? __jump_label_patch+0x256/0x440 [ 612.456420][ C0] ? __cgroup_bpf_run_filter_sysctl+0x608/0xa80 [ 612.456486][ C0] ? __cgroup_bpf_run_filter_sysctl+0x60d/0xa80 [ 612.456550][ C0] ? bit_wait_io_timeout+0x120/0x120 [ 612.456615][ C0] ? __cgroup_bpf_run_filter_sysctl+0x608/0xa80 [ 612.456680][ C0] text_poke_queue+0xe4/0x1a0 [ 612.456739][ C0] arch_jump_label_transform_queue+0x78/0xe0 [ 612.456805][ C0] __jump_label_update+0x181/0x380 [ 612.456863][ C0] jump_label_update+0x3af/0x450 [ 612.456913][ C0] ? bpf_perf_link_attach+0x541/0x560 [ 612.456957][ C0] __static_key_slow_dec_cpuslocked+0x112/0x170 [ 612.457022][ C0] ? bpf_perf_link_dealloc+0x20/0x20 [ 612.457066][ C0] static_key_slow_dec+0x52/0xa0 [ 612.457115][ C0] bpf_stats_release+0x21/0x40 [ 612.457158][ C0] __fput+0x3ab/0x870 [ 612.457212][ C0] ____fput+0x15/0x20 [ 612.457255][ C0] task_work_run+0x24d/0x2e0 [ 612.457329][ C0] ? kmem_cache_free+0x291/0x510 [ 612.457384][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 612.457457][ C0] ? free_nsproxy+0x20d/0x260 [ 612.457507][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 612.457560][ C0] do_exit+0xbd5/0x2b80 [ 612.457610][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 612.457687][ C0] ? put_task_struct+0x80/0x80 [ 612.457737][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 612.457809][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 612.457892][ C0] ? __kasan_check_write+0x14/0x20 [ 612.457936][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 612.458021][ C0] do_group_exit+0x21a/0x2d0 [ 612.458069][ C0] ? __kasan_check_write+0x14/0x20 [ 612.458118][ C0] get_signal+0x169d/0x1820 [ 612.458172][ C0] ? finish_task_switch+0x207/0x7b0 [ 612.458246][ C0] ? ptrace_notify+0x350/0x350 [ 612.458305][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 612.458379][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 612.458430][ C0] ? __kasan_check_read+0x11/0x20 [ 612.458473][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 612.458531][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 612.458597][ C0] ? get_sigframe_size+0x10/0x10 [ 612.458679][ C0] ? schedule+0xda/0x180 [ 612.458735][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 612.458795][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 612.458857][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 612.458910][ C0] irqentry_exit+0x12/0x40 [ 612.458959][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 612.459021][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 612.459074][ C0] RIP: 0033:0x7f5c71638e03 [ 612.459106][ C0] Code: Unable to access opcode bytes at 0x7f5c71638dd9. [ 612.459129][ C0] RSP: 002b:00007f5c72535f80 EFLAGS: 00000202 [ 612.459165][ C0] RAX: 0000000000000000 RBX: 00007f5c717e5a33 RCX: 00007f5c717ddab8 [ 612.459198][ C0] RDX: 000000000000c363 RSI: 0000000000000000 RDI: 00007f5c717e5a33 [ 612.459229][ C0] RBP: 00007f5c717ddab8 R08: 0000000000000000 R09: 00007ffe42dcf0b0 [ 612.459263][ C0] R10: 00000000000044f2 R11: 0000000000000060 R12: 0000000000000000 [ 612.459292][ C0] R13: 000000000000000b R14: 00007f5c71905f80 R15: 00007ffe42d81f08 [ 612.459339][ C0] [ 616.458395][ T1378] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.465441][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.473836][ T1378] device bridge_slave_0 entered promiscuous mode [ 616.717805][ T1378] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.724882][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.733292][ T1378] device bridge_slave_1 entered promiscuous mode [ 616.766251][ T8] device bridge_slave_1 left promiscuous mode [ 616.772364][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.784005][ T8] device bridge_slave_0 left promiscuous mode [ 616.790123][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.800712][ T8] device bridge_slave_1 left promiscuous mode [ 616.806770][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.820810][ T8] device bridge_slave_0 left promiscuous mode [ 616.826867][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.837312][ T8] device bridge_slave_1 left promiscuous mode [ 616.844101][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.853435][ T8] device bridge_slave_0 left promiscuous mode [ 616.859690][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.873596][ T8] device bridge_slave_1 left promiscuous mode [ 616.879759][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.890698][ T8] device bridge_slave_0 left promiscuous mode [ 616.896788][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.907327][ T8] device bridge_slave_1 left promiscuous mode [ 616.913475][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.925230][ T8] device bridge_slave_0 left promiscuous mode [ 616.931347][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.941929][ T8] device bridge_slave_1 left promiscuous mode [ 616.947975][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.960408][ T8] device bridge_slave_0 left promiscuous mode [ 616.966506][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.981175][ T8] device bridge_slave_1 left promiscuous mode [ 616.987256][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.000395][ T8] device bridge_slave_0 left promiscuous mode [ 617.006551][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.022063][ T8] device bridge_slave_1 left promiscuous mode [ 617.028143][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.037379][ T8] device bridge_slave_0 left promiscuous mode [ 617.043481][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.056696][ T8] device bridge_slave_1 left promiscuous mode [ 617.062829][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.075413][ T8] device bridge_slave_0 left promiscuous mode [ 617.081803][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.092469][ T8] device bridge_slave_1 left promiscuous mode [ 617.098531][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.111034][ T8] device bridge_slave_0 left promiscuous mode [ 617.117110][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.137628][ T8] device veth1_macvtap left promiscuous mode [ 617.143684][ T8] device veth0_vlan left promiscuous mode [ 617.155004][ T8] device veth1_macvtap left promiscuous mode [ 617.161141][ T8] device veth0_vlan left promiscuous mode [ 617.168501][ T8] device veth1_macvtap left promiscuous mode [ 617.175096][ T8] device veth0_vlan left promiscuous mode [ 617.184793][ T8] device veth1_macvtap left promiscuous mode [ 617.190797][ T8] device veth0_vlan left promiscuous mode [ 617.200713][ T8] device veth1_macvtap left promiscuous mode [ 617.206690][ T8] device veth0_vlan left promiscuous mode [ 617.221480][ T8] device veth1_macvtap left promiscuous mode [ 617.227485][ T8] device veth0_vlan left promiscuous mode [ 617.238056][ T8] device veth1_macvtap left promiscuous mode [ 617.244574][ T8] device veth0_vlan left promiscuous mode [ 617.262643][ T8] device veth1_macvtap left promiscuous mode [ 617.268621][ T8] device veth0_vlan left promiscuous mode [ 619.649874][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.656780][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.665275][ T1375] device bridge_slave_0 entered promiscuous mode [ 619.673681][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.680864][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.689191][ T1375] device bridge_slave_1 entered promiscuous mode [ 621.520164][ T1376] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.527076][ T1376] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.535788][ T1376] device bridge_slave_0 entered promiscuous mode [ 621.543852][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.553824][ T1376] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.562836][ T1376] device bridge_slave_1 entered promiscuous mode [ 622.272763][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.279741][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.287863][ T1377] device bridge_slave_0 entered promiscuous mode [ 622.296299][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.303298][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.311447][ T1377] device bridge_slave_1 entered promiscuous mode [ 623.112489][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.119638][ T1374] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.127747][ T1374] device bridge_slave_0 entered promiscuous mode [ 623.221550][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.228473][ T1374] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.241496][ T1374] device bridge_slave_1 entered promiscuous mode [ 625.250546][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 625.258336][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 625.279232][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.287858][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.297361][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.304292][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.312573][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.321223][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.330100][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.336989][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.596348][ T1374] device veth0_vlan entered promiscuous mode [ 625.708063][ T1375] device veth0_vlan entered promiscuous mode [ 625.727122][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.745628][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.755094][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.763537][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.771727][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.780232][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.788325][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.797211][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.806402][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.815442][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.823449][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.831438][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 625.839502][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 625.847801][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.856876][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.865570][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.872499][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.880321][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.889252][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.897615][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.904643][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.912622][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 625.920400][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 625.928102][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.937303][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.946035][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.952965][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.960798][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.969475][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.977863][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.984793][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.992867][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.001317][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.010030][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.018433][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.026827][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.116654][ T1375] device veth1_macvtap entered promiscuous mode [ 626.202047][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.211165][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.220153][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.228155][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.237292][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.246568][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.256137][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.265273][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.274101][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.899024][ T1376] device veth0_vlan entered promiscuous mode [ 626.944127][ T1376] device veth1_macvtap entered promiscuous mode [ 629.086996][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.095543][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.103834][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.112435][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.120979][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.128904][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.136680][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 629.145403][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.153888][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.160810][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.172693][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 629.181467][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.190424][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.197350][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.205176][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 629.213647][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.222466][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.231273][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.240250][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.249335][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.258205][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.266938][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.276175][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.284950][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.293935][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 629.302150][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.311157][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.320827][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.329745][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.370248][ T1378] device veth0_vlan entered promiscuous mode [ 629.394853][ T1378] device veth1_macvtap entered promiscuous mode [ 629.567952][ T1374] device veth1_macvtap entered promiscuous mode [ 632.096021][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.106864][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.115411][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 632.123562][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.132651][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.141575][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.150090][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.159393][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 632.167823][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.176878][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.185255][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.194246][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.203229][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.212264][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.337824][ T1377] device veth0_vlan entered promiscuous mode [ 632.362206][ T1377] device veth1_macvtap entered promiscuous mode [ 632.650376][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.658087][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 632.673363][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.681471][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.689585][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.698141][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.707076][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.713998][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.723744][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.732439][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.741318][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.748248][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.756858][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.765295][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.774092][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.782845][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.791445][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.800363][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.812925][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.821586][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.830591][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 632.839480][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.847978][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.856522][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.869483][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.878183][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.887291][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.896294][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.905196][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.914300][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.923538][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.934079][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.943462][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.951626][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 715.972117][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 8253 jiffies s: 9605 root: 0x1/. [ 715.983793][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 715.990714][ T16] Sending NMI from CPU 1 to CPUs 0: [ 715.995734][ C0] NMI backtrace for cpu 0 [ 715.995868][ C0] ------------[ cut here ]------------ [ 715.995991][ C0] WARNING: CPU: 0 PID: 1347 at include/trace/events/printk.h:33 printk_sprint+0x416/0x430 [ 715.996160][ C0] Modules linked in: [ 715.996359][ C0] CPU: 0 PID: 1347 Comm: syz.3.142 Not tainted 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 715.996502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 715.996618][ C0] RIP: 0010:printk_sprint+0x416/0x430 [ 715.996763][ C0] Code: c3 bf 02 00 00 00 89 de e8 67 ae 1a 00 31 ff 89 de e8 5e ae 1a 00 45 84 ff 75 16 e8 c4 ab 1a 00 e9 61 fe ff ff e8 ba ab 1a 00 <0f> 0b e9 3e ff ff ff e8 ae ab 1a 00 e8 a5 92 a5 ff e9 46 fe ff ff [ 715.996892][ C0] RSP: 0018:fffffe0000011900 EFLAGS: 00010046 [ 715.997106][ C0] RAX: ffffffff815af6f6 RBX: 0000000000100000 RCX: ffff88811e5f9440 [ 715.997231][ C0] RDX: 0000000000120103 RSI: 0000000000100000 RDI: 0000000000000000 [ 715.997353][ C0] RBP: fffffe0000011930 R08: ffffffff815af62a R09: fffffbfff0ee500e [ 715.997485][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 715.997609][ C0] R13: 0000000000000002 R14: 0000000000000017 R15: ffffffff87980b40 [ 715.997731][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 715.997863][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.997987][ C0] CR2: 0000000000000000 CR3: 000000010fe26000 CR4: 00000000003506b0 [ 715.998113][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 715.998232][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 715.998354][ C0] Call Trace: [ 715.998462][ C0] [ 715.998568][ C0] ? show_regs+0x58/0x60 [ 715.998705][ C0] ? __warn+0x160/0x3d0 [ 715.998863][ C0] ? printk_sprint+0x416/0x430 [ 715.999008][ C0] ? report_bug+0x4d5/0x7d0 [ 715.999154][ C0] ? printk_sprint+0x416/0x430 [ 715.999297][ C0] ? handle_bug+0x41/0x70 [ 715.999437][ C0] ? exc_invalid_op+0x1b/0x50 [ 715.999571][ C0] ? asm_exc_invalid_op+0x1b/0x20 [ 715.999714][ C0] ? printk_sprint+0x34a/0x430 [ 715.999854][ C0] ? printk_sprint+0x416/0x430 [ 715.999998][ C0] ? printk_sprint+0x416/0x430 [ 716.000148][ C0] vprintk_store+0x8b8/0xff0 [ 716.000300][ C0] ? printk_parse_prefix+0x2f0/0x2f0 [ 716.000450][ C0] ? __kasan_check_write+0x14/0x20 [ 716.000586][ C0] ? irq_work_queue+0xd4/0x160 [ 716.000751][ C0] ? __wake_up_klogd+0xde/0x110 [ 716.000931][ C0] ? _printk+0xd1/0x111 [ 716.001091][ C0] ? vprintk_deferred+0x26/0x30 [ 716.001241][ C0] vprintk_emit+0x103/0x450 [ 716.001384][ C0] ? printk_sprint+0x430/0x430 [ 716.001539][ C0] ? panic+0x667/0x667 [ 716.001691][ C0] vprintk_deferred+0x26/0x30 [ 716.001834][ C0] vprintk+0x5d/0x80 [ 716.001980][ C0] _printk+0xd1/0x111 [ 716.002131][ C0] ? show_trace_log_lvl+0x269/0x380 [ 716.002271][ C0] ? nmi_cpu_backtrace+0x1e5/0x2f0 [ 716.002414][ C0] ? panic+0x667/0x667 [ 716.002583][ C0] nmi_cpu_backtrace+0x26e/0x2f0 [ 716.002732][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 716.002886][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.003051][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.003217][ C0] nmi_cpu_backtrace_handler+0xc/0x20 [ 716.003366][ C0] nmi_handle+0xa7/0x280 [ 716.003515][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.003681][ C0] default_do_nmi+0x69/0x160 [ 716.003821][ C0] exc_nmi+0xad/0x100 [ 716.003957][ C0] end_repeat_nmi+0x16/0x31 [ 716.004099][ C0] RIP: 0010:__hrtimer_next_event_base+0x2d/0x270 [ 716.004267][ C0] Code: e5 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 cf 41 89 d4 48 89 75 c0 48 89 fb e8 3d 87 0e 00 31 ff 44 89 e6 e8 e3 8a 0e 00 <45> 85 e4 0f 84 0f 02 00 00 48 8d 43 38 48 89 45 b0 48 8d 43 28 48 [ 716.004397][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000046 [ 716.004620][ C0] RAX: 0000000000010103 RBX: ffff8881f7029c80 RCX: ffff88811e5f9440 [ 716.004746][ C0] RDX: ffff88811e5f9440 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.004868][ C0] RBP: ffffc90000007938 R08: ffffffff81671b7d R09: ffff888112e034f8 [ 716.004994][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 716.005114][ C0] R13: 0000000000000002 R14: ffff8881f7029cb0 R15: 7fffffffffffffff [ 716.005248][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.005419][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.005591][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.005755][ C0] [ 716.005857][ C0] [ 716.005961][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 716.006109][ C0] hrtimer_interrupt+0x4b3/0xaa0 [ 716.006290][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 716.006468][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 716.006612][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.006754][ C0] RIP: 0010:queue_work_on+0x13b/0x170 [ 716.006899][ C0] Code: e8 3a aa 2a 00 49 81 e7 00 02 00 00 49 bf 00 00 00 00 00 fc ff df 75 07 e8 e2 a5 2a 00 eb 06 e8 db a5 2a 00 fb 84 db 0f 94 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 37 00 00 00 00 65 48 8b 0c 25 [ 716.007027][ C0] RSP: 0018:ffffc90000007b60 EFLAGS: 00000246 [ 716.007244][ C0] RAX: ffffffff814afc01 RBX: 0000000000000000 RCX: ffff88811e5f9440 [ 716.007369][ C0] RDX: 0000000000000102 RSI: 0000000000000200 RDI: 0000000000000000 [ 716.007495][ C0] RBP: ffffc90000007c18 R08: ffffffff814afcb6 R09: ffffed1023a3c9f9 [ 716.007621][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811d1e4fc0 [ 716.007745][ C0] R13: dffffc0000000001 R14: 1ffff92000000f70 R15: dffffc0000000000 [ 716.007878][ C0] ? queue_work_on+0x116/0x170 [ 716.008023][ C0] ? queue_work_on+0x61/0x170 [ 716.008177][ C0] ? wq_worker_last_func+0x50/0x50 [ 716.008326][ C0] ? br_multicast_del_pg+0x512/0xb50 [ 716.008481][ C0] ? br_multicast_del_pg+0x57c/0xb50 [ 716.008629][ C0] ? br_multicast_del_pg+0x857/0xb50 [ 716.008778][ C0] ? br_multicast_star_g_handle_mode+0x4/0xa90 [ 716.008936][ C0] br_multicast_del_pg+0x986/0xb50 [ 716.009094][ C0] br_multicast_port_group_expired+0x716/0x870 [ 716.009258][ C0] ? br_multicast_destroy_port_group+0xc0/0xc0 [ 716.009410][ C0] call_timer_fn+0x3b/0x2d0 [ 716.009577][ C0] ? br_multicast_destroy_port_group+0xc0/0xc0 [ 716.009731][ C0] __run_timers+0x72a/0xa10 [ 716.009901][ C0] ? calc_index+0x270/0x270 [ 716.010065][ C0] ? __run_timers+0x11/0xa10 [ 716.010229][ C0] run_timer_softirq+0x69/0xf0 [ 716.010388][ C0] __do_softirq+0x1d8/0x661 [ 716.010544][ C0] ? irqtime_account_irq+0xdc/0x260 [ 716.010714][ C0] __irq_exit_rcu+0x50/0xf0 [ 716.010862][ C0] irq_exit_rcu+0x9/0x10 [ 716.011006][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 716.011148][ C0] [ 716.011251][ C0] [ 716.011355][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.011513][ C0] RIP: 0010:__schedule+0xce0/0x1550 [ 716.011659][ C0] Code: 84 24 80 00 00 00 0e 36 e0 45 49 c7 44 05 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 80 05 00 00 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4c 89 f7 e8 c9 1b 34 [ 716.011787][ C0] RSP: 0018:ffffc90000cd7260 EFLAGS: 00000246 [ 716.012007][ C0] RAX: d4b05d4d43f51000 RBX: ffff88811e5f99a8 RCX: 0000000000000002 [ 716.012131][ C0] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 716.012302][ C0] RBP: ffffc90000cd7370 R08: ffffffff819b5460 R09: fffffbfff0ee5107 [ 716.012448][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7038748 [ 716.012569][ C0] R13: dffffc0000000000 R14: ffff88811e5f9440 R15: 1ffff11023cbf335 [ 716.012704][ C0] ? __perf_event_task_sched_in+0x180/0x1f0 [ 716.012893][ C0] ? release_firmware_map_entry+0x191/0x191 [ 716.013045][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 716.013186][ C0] preempt_schedule_irq+0xc7/0x140 [ 716.013338][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 716.013498][ C0] ? irqentry_exit+0x30/0x40 [ 716.013637][ C0] ? sysvec_irq_work+0x52/0xb0 [ 716.013779][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 716.013930][ C0] irqentry_exit+0x30/0x40 [ 716.014069][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 716.014238][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.014380][ C0] RIP: 0010:memset_erms+0x9/0x10 [ 716.014539][ C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 716.014669][ C0] RSP: 0018:ffffc90000cd7510 EFLAGS: 00010207 [ 716.014885][ C0] RAX: 00000000000002ff RBX: 0000000000000000 RCX: 0000000000000180 [ 716.015002][ C0] RDX: 0000000000000200 RSI: 00000000000000ff RDI: ffffed1026279e80 [ 716.015124][ C0] RBP: ffffc90000cd7518 R08: dffffc0000000000 R09: ffffed1026279e00 [ 716.015248][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 716.015373][ C0] R13: ffffea0004c4f3c0 R14: 00000000001313cf R15: 0000000000000000 [ 716.015514][ C0] ? kasan_poison+0x5d/0x70 [ 716.015655][ C0] __kasan_poison_pages+0x2d/0x30 [ 716.015811][ C0] free_unref_page_prepare+0x145/0x850 [ 716.015949][ C0] ? __kasan_check_read+0x11/0x20 [ 716.016097][ C0] ? free_unref_page_commit+0x1f5/0x510 [ 716.016242][ C0] free_unref_page+0xb2/0x5c0 [ 716.016380][ C0] ? irqentry_exit+0x30/0x40 [ 716.016528][ C0] ? sysvec_irq_work+0x52/0xb0 [ 716.016663][ C0] ? mark_free_pages+0x3b0/0x3b0 [ 716.016807][ C0] __free_pages+0x61/0xf0 [ 716.016939][ C0] __vunmap+0x9f3/0xb60 [ 716.017106][ C0] ? vunmap+0x60/0x60 [ 716.017262][ C0] ? __kasan_slab_free+0x11/0x20 [ 716.017431][ C0] ? kcov_open+0x60/0x60 [ 716.017570][ C0] vfree+0x5c/0x80 [ 716.017724][ C0] kcov_close+0x2b/0x50 [ 716.017865][ C0] __fput+0x3ab/0x870 [ 716.018007][ C0] ____fput+0x15/0x20 [ 716.018141][ C0] task_work_run+0x24d/0x2e0 [ 716.018308][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 716.018480][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 716.018623][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 716.018762][ C0] do_exit+0xbd5/0x2b80 [ 716.018903][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 716.019071][ C0] ? put_task_struct+0x80/0x80 [ 716.019211][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 716.019373][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 716.019553][ C0] ? __kasan_check_write+0x14/0x20 [ 716.019686][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 716.019853][ C0] do_group_exit+0x21a/0x2d0 [ 716.019990][ C0] ? __kasan_check_write+0x14/0x20 [ 716.020127][ C0] get_signal+0x169d/0x1820 [ 716.020272][ C0] ? finish_task_switch+0x207/0x7b0 [ 716.020439][ C0] ? ptrace_notify+0x350/0x350 [ 716.020590][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 716.020752][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 716.020895][ C0] ? __kasan_check_read+0x11/0x20 [ 716.021031][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 716.021177][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 716.021333][ C0] ? get_sigframe_size+0x10/0x10 [ 716.021498][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 716.021649][ C0] ? irqentry_exit+0x30/0x40 [ 716.021787][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 716.021938][ C0] ? schedule+0xda/0x180 [ 716.022088][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 716.022236][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 716.022388][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 716.022537][ C0] irqentry_exit+0x12/0x40 [ 716.022676][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 716.022817][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.022963][ C0] RIP: 0033:0x7f18209773b9 [ 716.023088][ C0] Code: Unable to access opcode bytes at 0x7f182097738f. [ 716.023199][ C0] RSP: 002b:00007f1821797048 EFLAGS: 00000246 [ 716.023431][ C0] RAX: 0000000000000000 RBX: 00007f1820b05f80 RCX: 00007f18209773b9 [ 716.023554][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 716.023675][ C0] RBP: 00007f18209e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 716.023822][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.023969][ C0] R13: 000000000000000b R14: 00007f1820b05f80 R15: 00007ffc58279c08 [ 716.024107][ C0] [ 716.024208][ C0] ---[ end trace 0000000000000000 ]--- [ 716.024329][ C0] CPU: 0 PID: 1347 Comm: syz.3.142 Tainted: G W 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 716.024479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 716.024595][ C0] RIP: 0010:__hrtimer_next_event_base+0x2d/0x270 [ 716.024765][ C0] Code: e5 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 cf 41 89 d4 48 89 75 c0 48 89 fb e8 3d 87 0e 00 31 ff 44 89 e6 e8 e3 8a 0e 00 <45> 85 e4 0f 84 0f 02 00 00 48 8d 43 38 48 89 45 b0 48 8d 43 28 48 [ 716.024896][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000046 [ 716.025110][ C0] RAX: 0000000000010103 RBX: ffff8881f7029c80 RCX: ffff88811e5f9440 [ 716.025235][ C0] RDX: ffff88811e5f9440 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.025357][ C0] RBP: ffffc90000007938 R08: ffffffff81671b7d R09: ffff888112e034f8 [ 716.025491][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 716.025614][ C0] R13: 0000000000000002 R14: ffff8881f7029cb0 R15: 7fffffffffffffff [ 716.025737][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 716.025876][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.026001][ C0] CR2: 0000000000000000 CR3: 000000010fe26000 CR4: 00000000003506b0 [ 716.026125][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.026242][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 716.026361][ C0] Call Trace: [ 716.026470][ C0] [ 716.026571][ C0] ? show_regs+0x58/0x60 [ 716.026708][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 716.026855][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 716.027009][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.027174][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.027340][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 716.027492][ C0] ? nmi_handle+0xa7/0x280 [ 716.027635][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.027799][ C0] ? default_do_nmi+0x69/0x160 [ 716.027938][ C0] ? exc_nmi+0xad/0x100 [ 716.028074][ C0] ? end_repeat_nmi+0x16/0x31 [ 716.028221][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.028389][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.028561][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.028723][ C0] ? __hrtimer_next_event_base+0x2d/0x270 [ 716.028888][ C0] [ 716.028992][ C0] [ 716.029095][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 716.029240][ C0] hrtimer_interrupt+0x4b3/0xaa0 [ 716.029428][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 716.029597][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 716.029740][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.029883][ C0] RIP: 0010:queue_work_on+0x13b/0x170 [ 716.030029][ C0] Code: e8 3a aa 2a 00 49 81 e7 00 02 00 00 49 bf 00 00 00 00 00 fc ff df 75 07 e8 e2 a5 2a 00 eb 06 e8 db a5 2a 00 fb 84 db 0f 94 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 37 00 00 00 00 65 48 8b 0c 25 [ 716.030160][ C0] RSP: 0018:ffffc90000007b60 EFLAGS: 00000246 [ 716.030379][ C0] RAX: ffffffff814afc01 RBX: 0000000000000000 RCX: ffff88811e5f9440 [ 716.030507][ C0] RDX: 0000000000000102 RSI: 0000000000000200 RDI: 0000000000000000 [ 716.030627][ C0] RBP: ffffc90000007c18 R08: ffffffff814afcb6 R09: ffffed1023a3c9f9 [ 716.030754][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811d1e4fc0 [ 716.030879][ C0] R13: dffffc0000000001 R14: 1ffff92000000f70 R15: dffffc0000000000 [ 716.031010][ C0] ? queue_work_on+0x116/0x170 [ 716.031154][ C0] ? queue_work_on+0x61/0x170 [ 716.031309][ C0] ? wq_worker_last_func+0x50/0x50 [ 716.031461][ C0] ? br_multicast_del_pg+0x512/0xb50 [ 716.031609][ C0] ? br_multicast_del_pg+0x57c/0xb50 [ 716.031757][ C0] ? br_multicast_del_pg+0x857/0xb50 [ 716.031908][ C0] ? br_multicast_star_g_handle_mode+0x4/0xa90 [ 716.032060][ C0] br_multicast_del_pg+0x986/0xb50 [ 716.032215][ C0] br_multicast_port_group_expired+0x716/0x870 [ 716.032380][ C0] ? br_multicast_destroy_port_group+0xc0/0xc0 [ 716.032542][ C0] call_timer_fn+0x3b/0x2d0 [ 716.032700][ C0] ? br_multicast_destroy_port_group+0xc0/0xc0 [ 716.032852][ C0] __run_timers+0x72a/0xa10 [ 716.033029][ C0] ? calc_index+0x270/0x270 [ 716.033191][ C0] ? __run_timers+0x11/0xa10 [ 716.033357][ C0] run_timer_softirq+0x69/0xf0 [ 716.033521][ C0] __do_softirq+0x1d8/0x661 [ 716.033672][ C0] ? irqtime_account_irq+0xdc/0x260 [ 716.033837][ C0] __irq_exit_rcu+0x50/0xf0 [ 716.033983][ C0] irq_exit_rcu+0x9/0x10 [ 716.034126][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 716.034269][ C0] [ 716.034369][ C0] [ 716.034482][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.034627][ C0] RIP: 0010:__schedule+0xce0/0x1550 [ 716.034774][ C0] Code: 84 24 80 00 00 00 0e 36 e0 45 49 c7 44 05 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 80 05 00 00 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4c 89 f7 e8 c9 1b 34 [ 716.034903][ C0] RSP: 0018:ffffc90000cd7260 EFLAGS: 00000246 [ 716.035118][ C0] RAX: d4b05d4d43f51000 RBX: ffff88811e5f99a8 RCX: 0000000000000002 [ 716.035240][ C0] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 716.035369][ C0] RBP: ffffc90000cd7370 R08: ffffffff819b5460 R09: fffffbfff0ee5107 [ 716.035508][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7038748 [ 716.035632][ C0] R13: dffffc0000000000 R14: ffff88811e5f9440 R15: 1ffff11023cbf335 [ 716.035771][ C0] ? __perf_event_task_sched_in+0x180/0x1f0 [ 716.035958][ C0] ? release_firmware_map_entry+0x191/0x191 [ 716.036134][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 716.036276][ C0] preempt_schedule_irq+0xc7/0x140 [ 716.036455][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 716.036664][ C0] ? irqentry_exit+0x30/0x40 [ 716.036837][ C0] ? sysvec_irq_work+0x52/0xb0 [ 716.037001][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 716.037155][ C0] irqentry_exit+0x30/0x40 [ 716.037368][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 716.037523][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.037668][ C0] RIP: 0010:memset_erms+0x9/0x10 [ 716.037817][ C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 716.037945][ C0] RSP: 0018:ffffc90000cd7510 EFLAGS: 00010207 [ 716.038161][ C0] RAX: 00000000000002ff RBX: 0000000000000000 RCX: 0000000000000180 [ 716.038279][ C0] RDX: 0000000000000200 RSI: 00000000000000ff RDI: ffffed1026279e80 [ 716.038404][ C0] RBP: ffffc90000cd7518 R08: dffffc0000000000 R09: ffffed1026279e00 [ 716.038536][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 716.038658][ C0] R13: ffffea0004c4f3c0 R14: 00000000001313cf R15: 0000000000000000 [ 716.038786][ C0] ? kasan_poison+0x5d/0x70 [ 716.038922][ C0] __kasan_poison_pages+0x2d/0x30 [ 716.039078][ C0] free_unref_page_prepare+0x145/0x850 [ 716.039217][ C0] ? __kasan_check_read+0x11/0x20 [ 716.039350][ C0] ? free_unref_page_commit+0x1f5/0x510 [ 716.039504][ C0] free_unref_page+0xb2/0x5c0 [ 716.039641][ C0] ? irqentry_exit+0x30/0x40 [ 716.039781][ C0] ? sysvec_irq_work+0x52/0xb0 [ 716.039919][ C0] ? mark_free_pages+0x3b0/0x3b0 [ 716.040062][ C0] __free_pages+0x61/0xf0 [ 716.040196][ C0] __vunmap+0x9f3/0xb60 [ 716.040361][ C0] ? vunmap+0x60/0x60 [ 716.040524][ C0] ? __kasan_slab_free+0x11/0x20 [ 716.040688][ C0] ? kcov_open+0x60/0x60 [ 716.040828][ C0] vfree+0x5c/0x80 [ 716.040985][ C0] kcov_close+0x2b/0x50 [ 716.041128][ C0] __fput+0x3ab/0x870 [ 716.041271][ C0] ____fput+0x15/0x20 [ 716.041406][ C0] task_work_run+0x24d/0x2e0 [ 716.041584][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 716.041749][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 716.041891][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 716.042034][ C0] do_exit+0xbd5/0x2b80 [ 716.042175][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 716.042342][ C0] ? put_task_struct+0x80/0x80 [ 716.042487][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 716.042649][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 716.042821][ C0] ? __kasan_check_write+0x14/0x20 [ 716.042957][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 716.043124][ C0] do_group_exit+0x21a/0x2d0 [ 716.043262][ C0] ? __kasan_check_write+0x14/0x20 [ 716.043400][ C0] get_signal+0x169d/0x1820 [ 716.043549][ C0] ? finish_task_switch+0x207/0x7b0 [ 716.043715][ C0] ? ptrace_notify+0x350/0x350 [ 716.043862][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 716.044029][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 716.044169][ C0] ? __kasan_check_read+0x11/0x20 [ 716.044304][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 716.044452][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 716.044614][ C0] ? get_sigframe_size+0x10/0x10 [ 716.044773][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 716.044923][ C0] ? irqentry_exit+0x30/0x40 [ 716.045063][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 716.045214][ C0] ? schedule+0xda/0x180 [ 716.045361][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 716.045519][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 716.045671][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 716.045815][ C0] irqentry_exit+0x12/0x40 [ 716.045955][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 716.046096][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 716.046239][ C0] RIP: 0033:0x7f18209773b9 [ 716.046360][ C0] Code: Unable to access opcode bytes at 0x7f182097738f. [ 716.046476][ C0] RSP: 002b:00007f1821797048 EFLAGS: 00000246 [ 716.046696][ C0] RAX: 0000000000000000 RBX: 00007f1820b05f80 RCX: 00007f18209773b9 [ 716.046819][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 716.046938][ C0] RBP: 00007f18209e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 716.047059][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.047179][ C0] R13: 000000000000000b R14: 00007f1820b05f80 R15: 00007ffc58279c08 [ 716.047320][ C0] [ 718.204909][ T28] audit: type=1400 audit(1722445361.594:130): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 719.463090][ T1445] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.470335][ T1445] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.426289][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.433247][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.440505][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.447408][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.458421][ T1453] device bridge0 entered promiscuous mode [ 721.705157][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.712444][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.721227][ T1474] device bridge_slave_0 entered promiscuous mode [ 721.745564][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.753460][ T1472] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.762378][ T1472] device bridge_slave_0 entered promiscuous mode [ 721.775351][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.782511][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.791135][ T1474] device bridge_slave_1 entered promiscuous mode [ 721.801209][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.808119][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.817205][ T1476] device bridge_slave_0 entered promiscuous mode [ 721.824754][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.832633][ T1472] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.841080][ T1472] device bridge_slave_1 entered promiscuous mode [ 721.923645][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.931565][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.941119][ T1476] device bridge_slave_1 entered promiscuous mode [ 721.982754][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.989955][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.998125][ T1473] device bridge_slave_0 entered promiscuous mode [ 722.053659][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.061451][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.070105][ T1473] device bridge_slave_1 entered promiscuous mode [ 722.540664][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.547576][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.556797][ T1477] device bridge_slave_0 entered promiscuous mode [ 722.643692][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.650657][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.659443][ T1477] device bridge_slave_1 entered promiscuous mode [ 724.027730][ T1473] device veth0_vlan entered promiscuous mode [ 724.052966][ T1473] device veth1_macvtap entered promiscuous mode [ 724.195961][ T1474] device veth0_vlan entered promiscuous mode [ 724.221378][ T1474] device veth1_macvtap entered promiscuous mode [ 724.384865][ T1476] device veth0_vlan entered promiscuous mode [ 724.410875][ T1476] device veth1_macvtap entered promiscuous mode [ 724.696827][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.705762][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.717809][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.725710][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.734118][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.743838][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.752539][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.759485][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.767344][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.776007][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.784929][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.791868][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.799794][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.808243][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.817196][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.825932][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.834760][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 724.844042][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.854011][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 724.862617][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.871943][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.881048][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.890084][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.899279][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.908674][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.916618][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.926147][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.935365][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.944126][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.951083][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.958901][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.967676][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.976880][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.984185][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.992177][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.001919][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.010844][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.019788][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.028205][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 725.037771][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.046995][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.055735][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.065056][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 725.074114][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.083813][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 725.092325][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 725.101545][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.110880][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.119940][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.129149][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 725.137104][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.145652][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 725.154919][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.164719][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.171678][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.179698][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.188518][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.197606][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.204566][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.212538][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.221103][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.230114][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.238671][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.248566][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 725.257668][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.267041][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 725.275381][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.284679][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.293464][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.302862][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 725.311867][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.321602][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.330724][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.498976][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.507092][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.516230][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.524603][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.532903][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.540864][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.548605][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.561651][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.569580][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.577407][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 725.598100][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.606973][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.613914][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.633613][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.648428][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.721709][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.728759][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.743856][ T1472] device veth0_vlan entered promiscuous mode [ 729.768131][ T1472] device veth1_macvtap entered promiscuous mode [ 729.936342][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.945218][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 729.959690][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 729.973529][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 729.984299][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.993360][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 730.002581][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.011823][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.020562][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.030131][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.039090][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.048099][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 730.056936][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 730.066518][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 730.075772][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 730.084805][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 730.238889][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.246630][ T1371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 731.134606][ T1477] device veth0_vlan entered promiscuous mode [ 731.199754][ T1477] device veth1_macvtap entered promiscuous mode [ 731.749276][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.756999][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.765243][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 731.774203][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 731.782874][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.789797][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.797460][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 731.807037][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 731.815718][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.822659][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.831258][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 731.839702][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 731.848149][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 731.857168][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 731.866026][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 731.875281][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 731.884433][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 731.893204][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 731.902571][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 731.911438][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 731.920421][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 731.931530][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.940642][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 731.949687][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 732.061731][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 732.069757][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 732.077672][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 732.815215][ T1570] device syzkaller0 entered promiscuous mode [ 736.437971][ T1646] syz.4.238 (1646) used greatest stack depth: 20952 bytes left [ 835.388700][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 835.395519][ C1] (detected by 1, t=10002 jiffies, g=7869, q=1382 ncpus=2) [ 835.402638][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295020760-4295010757), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 835.415825][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g7869 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 835.426849][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 835.436654][ C1] rcu: RCU grace-period kthread stack dump: [ 835.442381][ C1] task:rcu_preempt state:R running task stack:27720 pid:14 ppid:2 flags:0x00004000 [ 835.452976][ C1] Call Trace: [ 835.456116][ C1] [ 835.458880][ C1] __schedule+0xca7/0x1550 [ 835.463156][ C1] ? release_firmware_map_entry+0x191/0x191 [ 835.468862][ C1] ? __kasan_check_write+0x14/0x20 [ 835.473813][ C1] schedule+0xc3/0x180 [ 835.477711][ C1] schedule_timeout+0x18c/0x380 [ 835.482396][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 835.487440][ C1] ? console_conditional_schedule+0x10/0x10 [ 835.493173][ C1] ? update_process_times+0x1b0/0x1b0 [ 835.498379][ C1] ? prepare_to_swait_event+0x308/0x320 [ 835.503757][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 835.508442][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 835.513480][ C1] ? rcu_gp_init+0xc7f/0xfa0 [ 835.517905][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 835.522340][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 835.526754][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 835.532222][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 835.537262][ C1] ? __kasan_check_read+0x11/0x20 [ 835.542114][ C1] ? __kthread_parkme+0x12d/0x180 [ 835.546981][ C1] kthread+0x26d/0x300 [ 835.550882][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 835.556353][ C1] ? kthread_blkcg+0xd0/0xd0 [ 835.560779][ C1] ret_from_fork+0x1f/0x30 [ 835.565050][ C1] [ 835.567892][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 835.574066][ C1] Sending NMI from CPU 1 to CPUs 0: [ 835.579103][ C0] NMI backtrace for cpu 0 [ 835.579129][ C0] CPU: 0 PID: 1347 Comm: syz.3.142 Tainted: G W 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 835.579182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 835.579217][ C0] RIP: 0010:kasan_check_range+0x1bf/0x2a0 [ 835.579296][ C0] Code: d5 49 8d 5d 07 4d 85 ed 49 0f 49 dd 48 83 e3 f8 49 29 dd 74 12 41 80 39 00 0f 85 a6 00 00 00 49 ff c1 49 ff cd 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 f6 75 61 41 f7 c6 00 ff 00 00 75 5d [ 835.579339][ C0] RSP: 0018:ffffc90000007168 EFLAGS: 00000056 [ 835.579378][ C0] RAX: 0000000000000001 RBX: 1ffff92000000e3c RCX: ffffffff851f4f4c [ 835.579414][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881f7029c80 [ 835.579447][ C0] RBP: ffffc90000007180 R08: dffffc0000000000 R09: ffffed103ee05391 [ 835.579486][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900000071e0 [ 835.579521][ C0] R13: 0000000000000001 R14: ffffed103ee05391 R15: dffffc0000000000 [ 835.579556][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 835.579600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.579636][ C0] CR2: 0000000000000000 CR3: 0000000133957000 CR4: 00000000003506b0 [ 835.579672][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.579703][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 835.579736][ C0] Call Trace: [ 835.579748][ C0] [ 835.579764][ C0] ? show_regs+0x58/0x60 [ 835.579813][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 835.579871][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 835.579937][ C0] ? kasan_check_range+0x1bf/0x2a0 [ 835.580006][ C0] ? kasan_check_range+0x1bf/0x2a0 [ 835.580078][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 835.580135][ C0] ? nmi_handle+0xa7/0x280 [ 835.580189][ C0] ? kasan_check_range+0x1bf/0x2a0 [ 835.580268][ C0] ? default_do_nmi+0x69/0x160 [ 835.580319][ C0] ? exc_nmi+0xad/0x100 [ 835.580365][ C0] ? end_repeat_nmi+0x16/0x31 [ 835.580423][ C0] ? _raw_spin_lock_irqsave+0xec/0x210 [ 835.580501][ C0] ? kasan_check_range+0x1bf/0x2a0 [ 835.580572][ C0] ? kasan_check_range+0x1bf/0x2a0 [ 835.580645][ C0] ? kasan_check_range+0x1bf/0x2a0 [ 835.580727][ C0] [ 835.580742][ C0] [ 835.580757][ C0] __kasan_check_write+0x14/0x20 [ 835.580803][ C0] _raw_spin_lock_irqsave+0xec/0x210 [ 835.580881][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 835.580966][ C0] hrtimer_interrupt+0x111/0xaa0 [ 835.581040][ C0] ? __kasan_check_write+0x14/0x20 [ 835.581086][ C0] ? irq_work_run_list+0x29c/0x2f0 [ 835.581130][ C0] ? __sched_clock_gtod_offset+0x100/0x100 [ 835.581185][ C0] ? irq_work_run+0xf0/0xf0 [ 835.581277][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 835.581361][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 835.581416][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 835.581470][ C0] RIP: 0010:queued_write_lock_slowpath+0x15c/0x547 [ 835.581523][ C0] Code: 00 00 bb ff 00 00 00 43 0f b6 44 3d 00 84 c0 74 38 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2b 4c 89 f7 e8 18 3a 9d fc eb 21 f3 90 <43> 0f b6 44 3d 00 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c [ 835.581564][ C0] RSP: 0018:ffffc900000074a0 EFLAGS: 00000206 [ 835.581601][ C0] RAX: 00000000000001ff RBX: 00000000000000ff RCX: ffffffff851f85cc [ 835.581635][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff875ff430 [ 835.581668][ C0] RBP: ffffc90000007550 R08: dffffc0000000000 R09: fffffbfff0ebfe87 [ 835.581706][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000000e9e [ 835.581741][ C0] R13: 1ffffffff0ebfe86 R14: ffffffff875ff430 R15: dffffc0000000000 [ 835.581791][ C0] ? queued_write_lock_slowpath+0x12c/0x547 [ 835.581848][ C0] ? queued_read_lock_slowpath+0x3f0/0x3f0 [ 835.581906][ C0] _raw_write_lock_bh+0x10a/0x170 [ 835.581950][ C0] ? _raw_write_lock_irq+0x170/0x170 [ 835.582027][ C0] ? __kasan_check_write+0x14/0x20 [ 835.582072][ C0] ? _raw_read_lock_irqsave+0xb5/0x110 [ 835.582151][ C0] ? ktime_get+0x12f/0x160 [ 835.582232][ C0] ___neigh_create+0x1f6/0x1db0 [ 835.582305][ C0] ? selinux_ip_postroute+0x2d5/0x13d0 [ 835.582386][ C0] __neigh_create+0x32/0x40 [ 835.582458][ C0] ip6_finish_output2+0x9d0/0x1840 [ 835.582547][ C0] ? ip6_make_skb+0x7a0/0x7a0 [ 835.582619][ C0] ? ip6t_do_table+0x1643/0x1830 [ 835.582685][ C0] ? ip6table_mangle_hook+0x246/0x790 [ 835.582761][ C0] ip6_finish_output+0x50f/0xa60 [ 835.582841][ C0] ip6_output+0x1f7/0x4d0 [ 835.582916][ C0] ? ac6_seq_show+0xf0/0xf0 [ 835.582986][ C0] ? ip6_output+0x4d0/0x4d0 [ 835.583065][ C0] ndisc_send_skb+0x7cf/0xdc0 [ 835.583131][ C0] ? ndisc_mc_map+0x920/0x920 [ 835.583188][ C0] ? ndisc_send_skb+0xdc0/0xdc0 [ 835.583264][ C0] ? memset+0x35/0x40 [ 835.583305][ C0] ? __ndisc_fill_addr_option+0xd4/0x130 [ 835.583368][ C0] ndisc_send_rs+0x47d/0x5f0 [ 835.583429][ C0] addrconf_rs_timer+0x2d1/0x600 [ 835.583487][ C0] ? __kasan_check_write+0x14/0x20 [ 835.583536][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 835.583596][ C0] ? _find_next_bit+0x88/0x130 [ 835.583648][ C0] ? __next_timer_interrupt+0x1eb/0x250 [ 835.583718][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 835.583780][ C0] call_timer_fn+0x3b/0x2d0 [ 835.583849][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 835.583912][ C0] __run_timers+0x72a/0xa10 [ 835.583992][ C0] ? calc_index+0x270/0x270 [ 835.584058][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 835.584120][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 835.584180][ C0] run_timer_softirq+0x69/0xf0 [ 835.584274][ C0] __do_softirq+0x1d8/0x661 [ 835.584331][ C0] ? irqtime_account_irq+0xdc/0x260 [ 835.584409][ C0] __irq_exit_rcu+0x50/0xf0 [ 835.584466][ C0] irq_exit_rcu+0x9/0x10 [ 835.584519][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 835.584574][ C0] [ 835.584587][ C0] [ 835.584603][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 835.584656][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 835.584718][ C0] Code: 4c 89 e7 e8 00 36 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 f5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 be f6 31 fc 65 48 8b 1d 56 e3 [ 835.584759][ C0] RSP: 0018:ffffc90000cd6f40 EFLAGS: 00000246 [ 835.584798][ C0] RAX: 1ffff11023cbf3e1 RBX: 1ffff9200019adec RCX: ffffffff851f8900 [ 835.584835][ C0] RDX: 1ffff11023cbf28d RSI: 0000000000000000 RDI: 0000000000000001 [ 835.584867][ C0] RBP: ffffc90000cd6fd8 R08: ffffffff87969000 R09: ffffffff87969008 [ 835.584905][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90000cd6f60 [ 835.584942][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200019ade8 [ 835.584984][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 835.585037][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 835.585105][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 835.585168][ C0] irqentry_exit+0x30/0x40 [ 835.585224][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 835.585280][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 835.585333][ C0] RIP: 0010:update_stack_state+0x17f/0x460 [ 835.585394][ C0] Code: ff ff ff e8 73 6a f7 ff 85 c0 0f 85 22 01 00 00 48 8b 85 48 ff ff ff 42 80 3c 30 00 74 08 4c 89 e7 e8 15 e7 84 00 4d 8b 24 24 <48> 8b 85 50 ff ff ff 42 80 3c 30 00 74 0c 48 8b bd 70 ff ff ff e8 [ 835.585435][ C0] RSP: 0018:ffffc90000cd70d0 EFLAGS: 00000246 [ 835.585473][ C0] RAX: 1ffff9200019ae45 RBX: ffffc90000cd7248 RCX: ffffc90000cd7ca0 [ 835.585511][ C0] RDX: 1ffff9200019ae46 RSI: ffffc90000cd7c90 RDI: ffffc90000cd7278 [ 835.585548][ C0] RBP: ffffc90000cd7188 R08: ffffc90000cd7308 R09: 000000000000000b [ 835.585583][ C0] R10: ffffc90000cd7310 R11: dffffc0000000001 R12: ffffc90000cd0000 [ 835.585620][ C0] R13: ffffc90000cd7270 R14: dffffc0000000000 R15: ffffc90000cd7220 [ 835.585686][ C0] unwind_next_frame+0x3cb/0x700 [ 835.585752][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 835.585802][ C0] arch_stack_walk+0x10d/0x140 [ 835.585871][ C0] ? get_signal+0x169d/0x1820 [ 835.585928][ C0] stack_trace_save+0x113/0x1c0 [ 835.585978][ C0] ? rt_mutex_futex_unlock+0x1/0x1f0 [ 835.586047][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 835.586098][ C0] ? __stack_depot_save+0x36/0x480 [ 835.586170][ C0] save_stack+0xf6/0x1e0 [ 835.586244][ C0] ? __reset_page_owner+0x190/0x190 [ 835.586311][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 835.586362][ C0] ? free_unref_page_prepare+0x83d/0x850 [ 835.586410][ C0] ? free_unref_page+0xb2/0x5c0 [ 835.586456][ C0] ? __free_pages+0x61/0xf0 [ 835.586499][ C0] ? __vunmap+0x9f3/0xb60 [ 835.586566][ C0] ? vfree+0x5c/0x80 [ 835.586630][ C0] ? kcov_close+0x2b/0x50 [ 835.586681][ C0] ? __fput+0x3ab/0x870 [ 835.586724][ C0] ? ____fput+0x15/0x20 [ 835.586766][ C0] ? task_work_run+0x24d/0x2e0 [ 835.586839][ C0] ? do_exit+0xbd5/0x2b80 [ 835.586884][ C0] ? do_group_exit+0x21a/0x2d0 [ 835.586932][ C0] ? get_signal+0x169d/0x1820 [ 835.586994][ C0] __reset_page_owner+0x54/0x190 [ 835.587067][ C0] free_unref_page_prepare+0x83d/0x850 [ 835.587116][ C0] ? __kasan_check_read+0x11/0x20 [ 835.587160][ C0] ? free_unref_page_commit+0x1f5/0x510 [ 835.587228][ C0] free_unref_page+0xb2/0x5c0 [ 835.587272][ C0] ? sysvec_irq_work+0x52/0xb0 [ 835.587325][ C0] ? mark_free_pages+0x3b0/0x3b0 [ 835.587380][ C0] __free_pages+0x61/0xf0 [ 835.587425][ C0] __vunmap+0x9f3/0xb60 [ 835.587501][ C0] ? vunmap+0x60/0x60 [ 835.587568][ C0] ? __kasan_slab_free+0x11/0x20 [ 835.587640][ C0] ? kcov_open+0x60/0x60 [ 835.587690][ C0] vfree+0x5c/0x80 [ 835.587756][ C0] kcov_close+0x2b/0x50 [ 835.587808][ C0] __fput+0x3ab/0x870 [ 835.587861][ C0] ____fput+0x15/0x20 [ 835.587906][ C0] task_work_run+0x24d/0x2e0 [ 835.587984][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 835.588061][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 835.588114][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 835.588167][ C0] do_exit+0xbd5/0x2b80 [ 835.588225][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 835.588301][ C0] ? put_task_struct+0x80/0x80 [ 835.588352][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 835.588424][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 835.588508][ C0] ? __kasan_check_write+0x14/0x20 [ 835.588552][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 835.588630][ C0] do_group_exit+0x21a/0x2d0 [ 835.588680][ C0] ? __kasan_check_write+0x14/0x20 [ 835.588728][ C0] get_signal+0x169d/0x1820 [ 835.588783][ C0] ? finish_task_switch+0x207/0x7b0 [ 835.588859][ C0] ? ptrace_notify+0x350/0x350 [ 835.588918][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 835.588993][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 835.589044][ C0] ? __kasan_check_read+0x11/0x20 [ 835.589088][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 835.589147][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 835.589221][ C0] ? get_sigframe_size+0x10/0x10 [ 835.589290][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 835.589352][ C0] ? irqentry_exit+0x30/0x40 [ 835.589401][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 835.589464][ C0] ? schedule+0xda/0x180 [ 835.589524][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 835.589586][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 835.589649][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 835.589702][ C0] irqentry_exit+0x12/0x40 [ 835.589753][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 835.589807][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 835.589860][ C0] RIP: 0033:0x7f18209773b9 [ 835.589895][ C0] Code: Unable to access opcode bytes at 0x7f182097738f. [ 835.589916][ C0] RSP: 002b:00007f1821797048 EFLAGS: 00000246 [ 835.589954][ C0] RAX: 0000000000000000 RBX: 00007f1820b05f80 RCX: 00007f18209773b9 [ 835.589987][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 835.590019][ C0] RBP: 00007f18209e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 835.590050][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.590080][ C0] R13: 000000000000000b R14: 00007f1820b05f80 R15: 00007ffc58279c08 [ 835.590128][ C0] [ 969.051598][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 223s! [syz.3.142:1347] [ 969.059649][ C0] Modules linked in: [ 969.063381][ C0] CPU: 0 PID: 1347 Comm: syz.3.142 Tainted: G W 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 969.074320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 969.084211][ C0] RIP: 0010:ipv6_get_lladdr+0x0/0x1f0 [ 969.089418][ C0] Code: 46 00 fd eb 05 e8 b0 46 00 fd 8b 45 c4 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 99 46 00 fd eb e7 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 89 55 d4 49 89 [ 969.109382][ C0] RSP: 0018:ffffc90000007c58 EFLAGS: 00000202 [ 969.115284][ C0] RAX: 0000000000000101 RBX: 00000000ffffffff RCX: 0000000000000102 [ 969.123093][ C0] RDX: 0000000000000040 RSI: ffffc90000007cc0 RDI: ffff88811389e000 [ 969.130905][ C0] RBP: ffffc90000007d30 R08: ffffffff84780a7a R09: 0000000000000003 [ 969.138717][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000005 [ 969.146533][ C0] R13: ffff888136c294f0 R14: 1ffff92000000f94 R15: ffff888136c29370 [ 969.154349][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 969.163112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.169528][ C0] CR2: 0000000000000000 CR3: 0000000133957000 CR4: 00000000003506b0 [ 969.177353][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 969.185153][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 969.192970][ C0] Call Trace: [ 969.196096][ C0] [ 969.198789][ C0] ? show_regs+0x58/0x60 [ 969.202863][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 969.207819][ C0] ? proc_watchdog_cpumask+0xf0/0xf0 [ 969.212934][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 969.218157][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 969.223085][ C0] ? clockevents_program_event+0x236/0x300 [ 969.228733][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 969.234640][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 969.239599][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 969.245484][ C0] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 969.251122][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 969.257119][ C0] ? addrconf_rs_timer+0x24a/0x600 [ 969.262061][ C0] ? __ipv6_dev_get_saddr+0x430/0x430 [ 969.267270][ C0] ? addrconf_rs_timer+0x26b/0x600 [ 969.272220][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.278120][ C0] ? __run_timers+0x6ff/0xa10 [ 969.282628][ C0] ? call_timer_fn+0x2e/0x2d0 [ 969.287143][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.293055][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.298948][ C0] call_timer_fn+0x3b/0x2d0 [ 969.303299][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.309198][ C0] __run_timers+0x72a/0xa10 [ 969.313547][ C0] ? calc_index+0x270/0x270 [ 969.317875][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 969.322394][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 969.327348][ C0] run_timer_softirq+0x69/0xf0 [ 969.331935][ C0] __do_softirq+0x1d8/0x661 [ 969.336282][ C0] ? irqtime_account_irq+0xdc/0x260 [ 969.341313][ C0] __irq_exit_rcu+0x50/0xf0 [ 969.345647][ C0] irq_exit_rcu+0x9/0x10 [ 969.349726][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 969.355198][ C0] [ 969.357972][ C0] [ 969.360754][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 969.366565][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 969.372298][ C0] Code: 4c 89 e7 e8 00 36 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 f5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 be f6 31 fc 65 48 8b 1d 56 e3 [ 969.391740][ C0] RSP: 0018:ffffc90000cd6f40 EFLAGS: 00000246 [ 969.397640][ C0] RAX: 1ffff11023cbf3e1 RBX: 1ffff9200019adec RCX: ffffffff851f8900 [ 969.405452][ C0] RDX: 1ffff11023cbf28d RSI: 0000000000000000 RDI: 0000000000000001 [ 969.413268][ C0] RBP: ffffc90000cd6fd8 R08: ffffffff87969000 R09: ffffffff87969008 [ 969.421082][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90000cd6f60 [ 969.428890][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200019ade8 [ 969.436712][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 969.442445][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 969.448001][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 969.453717][ C0] irqentry_exit+0x30/0x40 [ 969.457968][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 969.463444][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 969.469251][ C0] RIP: 0010:update_stack_state+0x17f/0x460 [ 969.474895][ C0] Code: ff ff ff e8 73 6a f7 ff 85 c0 0f 85 22 01 00 00 48 8b 85 48 ff ff ff 42 80 3c 30 00 74 08 4c 89 e7 e8 15 e7 84 00 4d 8b 24 24 <48> 8b 85 50 ff ff ff 42 80 3c 30 00 74 0c 48 8b bd 70 ff ff ff e8 [ 969.494339][ C0] RSP: 0018:ffffc90000cd70d0 EFLAGS: 00000246 [ 969.500238][ C0] RAX: 1ffff9200019ae45 RBX: ffffc90000cd7248 RCX: ffffc90000cd7ca0 [ 969.508052][ C0] RDX: 1ffff9200019ae46 RSI: ffffc90000cd7c90 RDI: ffffc90000cd7278 [ 969.515865][ C0] RBP: ffffc90000cd7188 R08: ffffc90000cd7308 R09: 000000000000000b [ 969.523678][ C0] R10: ffffc90000cd7310 R11: dffffc0000000001 R12: ffffc90000cd0000 [ 969.531490][ C0] R13: ffffc90000cd7270 R14: dffffc0000000000 R15: ffffc90000cd7220 [ 969.539337][ C0] unwind_next_frame+0x3cb/0x700 [ 969.544083][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 969.548935][ C0] arch_stack_walk+0x10d/0x140 [ 969.553544][ C0] ? get_signal+0x169d/0x1820 [ 969.558052][ C0] stack_trace_save+0x113/0x1c0 [ 969.562740][ C0] ? rt_mutex_futex_unlock+0x1/0x1f0 [ 969.567859][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 969.572804][ C0] ? __stack_depot_save+0x36/0x480 [ 969.577765][ C0] save_stack+0xf6/0x1e0 [ 969.581834][ C0] ? __reset_page_owner+0x190/0x190 [ 969.586867][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 969.591900][ C0] ? free_unref_page_prepare+0x83d/0x850 [ 969.597375][ C0] ? free_unref_page+0xb2/0x5c0 [ 969.602058][ C0] ? __free_pages+0x61/0xf0 [ 969.606396][ C0] ? __vunmap+0x9f3/0xb60 [ 969.610565][ C0] ? vfree+0x5c/0x80 [ 969.614310][ C0] ? kcov_close+0x2b/0x50 [ 969.618462][ C0] ? __fput+0x3ab/0x870 [ 969.622452][ C0] ? ____fput+0x15/0x20 [ 969.626449][ C0] ? task_work_run+0x24d/0x2e0 [ 969.631045][ C0] ? do_exit+0xbd5/0x2b80 [ 969.635213][ C0] ? do_group_exit+0x21a/0x2d0 [ 969.639813][ C0] ? get_signal+0x169d/0x1820 [ 969.644338][ C0] __reset_page_owner+0x54/0x190 [ 969.649113][ C0] free_unref_page_prepare+0x83d/0x850 [ 969.654399][ C0] ? __kasan_check_read+0x11/0x20 [ 969.659267][ C0] ? free_unref_page_commit+0x1f5/0x510 [ 969.664648][ C0] free_unref_page+0xb2/0x5c0 [ 969.669158][ C0] ? sysvec_irq_work+0x52/0xb0 [ 969.673762][ C0] ? mark_free_pages+0x3b0/0x3b0 [ 969.678538][ C0] __free_pages+0x61/0xf0 [ 969.682696][ C0] __vunmap+0x9f3/0xb60 [ 969.686695][ C0] ? vunmap+0x60/0x60 [ 969.690505][ C0] ? __kasan_slab_free+0x11/0x20 [ 969.695283][ C0] ? kcov_open+0x60/0x60 [ 969.699366][ C0] vfree+0x5c/0x80 [ 969.702924][ C0] kcov_close+0x2b/0x50 [ 969.706913][ C0] __fput+0x3ab/0x870 [ 969.710741][ C0] ____fput+0x15/0x20 [ 969.714547][ C0] task_work_run+0x24d/0x2e0 [ 969.720025][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 969.724885][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 969.729915][ C0] ? exit_task_namespaces+0xb4/0xd0 [ 969.734951][ C0] do_exit+0xbd5/0x2b80 [ 969.738950][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 969.743552][ C0] ? put_task_struct+0x80/0x80 [ 969.748147][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 969.752833][ C0] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 969.758652][ C0] ? __kasan_check_write+0x14/0x20 [ 969.763594][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 969.768549][ C0] do_group_exit+0x21a/0x2d0 [ 969.772967][ C0] ? __kasan_check_write+0x14/0x20 [ 969.777920][ C0] get_signal+0x169d/0x1820 [ 969.782261][ C0] ? finish_task_switch+0x207/0x7b0 [ 969.787296][ C0] ? ptrace_notify+0x350/0x350 [ 969.791905][ C0] arch_do_signal_or_restart+0xb0/0x16f0 [ 969.797371][ C0] ? queued_write_lock_slowpath+0x460/0x547 [ 969.803090][ C0] ? __kasan_check_read+0x11/0x20 [ 969.807944][ C0] ? preempt_schedule_irq+0xe7/0x140 [ 969.813066][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 969.818628][ C0] ? get_sigframe_size+0x10/0x10 [ 969.823409][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 969.829301][ C0] ? irqentry_exit+0x30/0x40 [ 969.833731][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 969.839386][ C0] ? schedule+0xda/0x180 [ 969.843454][ C0] exit_to_user_mode_loop+0x74/0xa0 [ 969.848492][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 969.853781][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 969.859074][ C0] irqentry_exit+0x12/0x40 [ 969.863326][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 969.868791][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 969.874611][ C0] RIP: 0033:0x7f18209773b9 [ 969.878861][ C0] Code: Unable to access opcode bytes at 0x7f182097738f. [ 969.885715][ C0] RSP: 002b:00007f1821797048 EFLAGS: 00000246 [ 969.891618][ C0] RAX: 0000000000000000 RBX: 00007f1820b05f80 RCX: 00007f18209773b9 [ 969.899437][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 969.907337][ C0] RBP: 00007f18209e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 969.915148][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.922960][ C0] R13: 000000000000000b R14: 00007f1820b05f80 R15: 00007ffc58279c08 [ 969.930780][ C0] [ 969.933635][ C0] Sending NMI from CPU 0 to CPUs 1: [ 969.938684][ C1] NMI backtrace for cpu 1 [ 969.938711][ C1] CPU: 1 PID: 1662 Comm: syz.2.245 Tainted: G W 6.1.90-syzkaller-00122-g7fa70ede91bb #0 [ 969.938766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 969.938792][ C1] RIP: 0010:check_preemption_disabled+0x1/0x110 [ 969.938859][ C1] Code: ff ff 5d c3 cc cc cc cc cc 55 48 89 e5 48 c7 c7 e0 f9 c9 85 48 c7 c6 20 fa c9 85 e8 09 00 00 00 5d c3 0f 1f 80 00 00 00 00 55 <48> 89 e5 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 [ 969.938899][ C1] RSP: 0018:ffffc900001affe0 EFLAGS: 00000046 [ 969.938939][ C1] RAX: ffffffff8184149e RBX: ffffffff86541a30 RCX: ffff888121403cc0 [ 969.938977][ C1] RDX: 0000000000010302 RSI: ffffffff85c9fa20 RDI: ffffffff85c9f9e0 [ 969.939013][ C1] RBP: ffffc900001afff0 R08: ffffffff87969040 R09: ffffffff87969048 [ 969.939051][ C1] R10: ffffffff87969058 R11: ffffffff87969050 R12: 0000000000000000 [ 969.939086][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 969.939119][ C1] FS: 00007eff967b96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 969.939164][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.939199][ C1] CR2: 00007eff96798d58 CR3: 00000001338ea000 CR4: 00000000003506a0 [ 969.939237][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 969.939267][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 969.939297][ C1] Call Trace: [ 969.939309][ C1] [ 969.939324][ C1] ? show_regs+0x58/0x60 [ 969.939373][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 969.939432][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 969.939497][ C1] ? check_preemption_disabled+0x1/0x110 [ 969.939553][ C1] ? check_preemption_disabled+0x1/0x110 [ 969.939620][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 969.939677][ C1] ? nmi_handle+0xa7/0x280 [ 969.939731][ C1] ? check_preemption_disabled+0x1/0x110 [ 969.939789][ C1] ? default_do_nmi+0x69/0x160 [ 969.939840][ C1] ? exc_nmi+0xad/0x100 [ 969.939886][ C1] ? end_repeat_nmi+0x16/0x31 [ 969.939944][ C1] ? irq_work_run+0xe/0xf0 [ 969.940019][ C1] ? check_preemption_disabled+0x1/0x110 [ 969.940078][ C1] ? check_preemption_disabled+0x1/0x110 [ 969.940137][ C1] ? check_preemption_disabled+0x1/0x110 [ 969.940196][ C1] [ 969.940209][ C1] [ 969.940224][ C1] ? debug_smp_processor_id+0x17/0x20 [ 969.940279][ C1] irq_work_run+0x13/0xf0 [ 969.940355][ C1] __sysvec_irq_work+0x63/0x1b0 [ 969.940416][ C1] sysvec_irq_work+0x41/0xb0 [ 969.940465][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 969.940514][ C1] RIP: 0010:update_stack_state+0x19d/0x460 [ 969.940578][ C1] Code: 4c 89 e7 e8 15 e7 84 00 4d 8b 24 24 48 8b 85 50 ff ff ff 42 80 3c 30 00 74 0c 48 8b bd 70 ff ff ff e8 f7 e6 84 00 4d 8b 6f 10 <48> 8b 45 b0 42 0f b6 04 30 84 c0 75 7a 45 8b 3f 45 85 ff 48 8b 45 [ 969.940625][ C1] RSP: 0018:ffffc900001b0110 EFLAGS: 00000246 [ 969.940663][ C1] RAX: 1ffff9200003604e RBX: ffffc900001b0288 RCX: ffffc900001b0f10 [ 969.940701][ C1] RDX: 1ffff9200003604e RSI: ffffc900001b0f00 RDI: ffffc900001b02b8 [ 969.940739][ C1] RBP: ffffc900001b01c8 R08: ffffc900001b0348 R09: 000000000000000c [ 969.940774][ C1] R10: ffffc900001b0350 R11: dffffc0000000001 R12: ffffc900001a9000 [ 969.940811][ C1] R13: ffffc900001b1000 R14: dffffc0000000000 R15: ffffc900001b0260 [ 969.940878][ C1] unwind_next_frame+0x3cb/0x700 [ 969.940943][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 969.940994][ C1] arch_stack_walk+0x10d/0x140 [ 969.941063][ C1] ? __run_timers+0x72a/0xa10 [ 969.941135][ C1] stack_trace_save+0x113/0x1c0 [ 969.941185][ C1] ? __wake_up_bit+0x2b0/0x2b0 [ 969.941242][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 969.941294][ C1] ? kfree_skbmem+0x104/0x170 [ 969.941359][ C1] ref_tracker_free+0x101/0x7d0 [ 969.941425][ C1] ? refcount_inc+0x80/0x80 [ 969.941486][ C1] ? neigh_destroy+0x316/0x560 [ 969.941556][ C1] ? neigh_cleanup_and_release+0x73/0x1b0 [ 969.941602][ C1] ? neigh_remove_one+0x4d5/0x560 [ 969.941680][ C1] ? ___neigh_create+0x447/0x1db0 [ 969.941750][ C1] ? __neigh_create+0x32/0x40 [ 969.941820][ C1] ? ip6_finish_output2+0x9d0/0x1840 [ 969.941895][ C1] ? ip6_finish_output+0x50f/0xa60 [ 969.941966][ C1] ? ip6_output+0x1f7/0x4d0 [ 969.942034][ C1] ? ndisc_send_skb+0x7cf/0xdc0 [ 969.942089][ C1] ? ndisc_send_rs+0x47d/0x5f0 [ 969.942144][ C1] ? addrconf_rs_timer+0x2d1/0x600 [ 969.942200][ C1] ? call_timer_fn+0x3b/0x2d0 [ 969.942266][ C1] ? __run_timers+0x72a/0xa10 [ 969.942344][ C1] neigh_destroy+0x316/0x560 [ 969.942424][ C1] neigh_cleanup_and_release+0x73/0x1b0 [ 969.942473][ C1] neigh_remove_one+0x4d5/0x560 [ 969.942547][ C1] ___neigh_create+0x447/0x1db0 [ 969.942625][ C1] ? selinux_ip_postroute+0x2d5/0x13d0 [ 969.942706][ C1] __neigh_create+0x32/0x40 [ 969.942779][ C1] ip6_finish_output2+0x9d0/0x1840 [ 969.942865][ C1] ? ip6_make_skb+0x7a0/0x7a0 [ 969.942939][ C1] ? ip6t_do_table+0x1643/0x1830 [ 969.943005][ C1] ? ip6table_mangle_hook+0x246/0x790 [ 969.943081][ C1] ip6_finish_output+0x50f/0xa60 [ 969.943161][ C1] ip6_output+0x1f7/0x4d0 [ 969.943235][ C1] ? ac6_seq_show+0xf0/0xf0 [ 969.943307][ C1] ? ip6_output+0x4d0/0x4d0 [ 969.943386][ C1] ndisc_send_skb+0x7cf/0xdc0 [ 969.943453][ C1] ? ndisc_mc_map+0x920/0x920 [ 969.943510][ C1] ? ndisc_send_skb+0xdc0/0xdc0 [ 969.943575][ C1] ? __kasan_check_write+0x14/0x20 [ 969.943626][ C1] ? skb_set_owner_w+0x24b/0x3c0 [ 969.943675][ C1] ? skb_put+0x11e/0x210 [ 969.943738][ C1] ndisc_send_rs+0x47d/0x5f0 [ 969.943800][ C1] addrconf_rs_timer+0x2d1/0x600 [ 969.943863][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.943927][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 969.944000][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 969.944078][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.944141][ C1] call_timer_fn+0x3b/0x2d0 [ 969.944209][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 969.944272][ C1] __run_timers+0x72a/0xa10 [ 969.944352][ C1] ? calc_index+0x270/0x270 [ 969.944436][ C1] run_timer_softirq+0x69/0xf0 [ 969.944504][ C1] __do_softirq+0x1d8/0x661 [ 969.944563][ C1] ? irqtime_account_irq+0xdc/0x260 [ 969.944648][ C1] __irq_exit_rcu+0x50/0xf0 [ 969.944704][ C1] irq_exit_rcu+0x9/0x10 [ 969.944759][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 969.944811][ C1] [ 969.944825][ C1] [ 969.944840][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 969.944895][ C1] RIP: 0010:__schedule+0x0/0x1550 [ 969.944952][ C1] Code: 89 25 44 6d 2b 02 eb 05 e8 cd 33 58 fc 48 c7 c7 a0 24 a1 87 e8 e1 e4 01 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc cc <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 [ 969.944993][ C1] RSP: 0018:ffffc90000f17cd8 EFLAGS: 00000246 [ 969.945030][ C1] RAX: 1ffff110242808f1 RBX: 1ffff920001e2fa0 RCX: ffffffff851f8900 [ 969.945068][ C1] RDX: 1ffffffff0f2d208 RSI: 0000000000000000 RDI: 0000000000000001 [ 969.945100][ C1] RBP: ffffc90000f17d68 R08: ffffffff87969040 R09: ffffffff87969048 [ 969.945139][ C1] R10: ffffffff87969058 R11: ffffffff87969050 R12: ffffc90000f17d00 [ 969.945177][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001e2f9c [ 969.945219][ C1] ? queued_write_lock_slowpath+0x460/0x547 [ 969.945279][ C1] ? preempt_schedule_irq+0xc7/0x140 [ 969.945337][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 969.945407][ C1] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 969.945470][ C1] irqentry_exit+0x30/0x40 [ 969.945521][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 969.945574][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 969.945634][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x45/0x60 [ 969.945692][ C1] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 83 fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 <48> 8d 7e 01 8b 89 4c 0b 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 969.945732][ C1] RSP: 0018:ffffc90000f17e60 EFLAGS: 00000246 [ 969.945770][ C1] RAX: ffffffff81c63d85 RBX: 0000000000000000 RCX: ffff888121403cc0 [ 969.945805][ C1] RDX: ffffc90007c43000 RSI: 0000000000000032 RDI: ffff888113b62d80 [ 969.945840][ C1] RBP: ffffc90000f17e60 R08: ffffffff81cadcad R09: ffffed10200f5355 [ 969.945878][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000200006c0 [ 969.945912][ C1] R13: ffff888113b62d80 R14: ffff888113b62d81 R15: ffff888113b62d80 [ 969.945955][ C1] ? __se_sys_ioctl+0x15d/0x190 [ 969.946020][ C1] ? fput+0x15/0x1b0 [ 969.946068][ C1] fput+0x15/0x1b0 [ 969.946114][ C1] __se_sys_ioctl+0x177/0x190 [ 969.946183][ C1] __x64_sys_ioctl+0x7b/0x90 [ 969.946250][ C1] x64_sys_call+0x98/0x9a0 [ 969.946304][ C1] do_syscall_64+0x3b/0xb0 [ 969.946379][ C1] ? clear_bhb_loop+0x55/0xb0 [ 969.946432][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.946482][ C1] RIP: 0033:0x7eff959773b9 [ 969.946517][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.946559][ C1] RSP: 002b:00007eff967b9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.946604][ C1] RAX: ffffffffffffffda RBX: 00007eff95b05f80 RCX: 00007eff959773b9 [ 969.946648][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 969.946680][ C1] RBP: 00007eff959e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 969.946711][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.946741][ C1] R13: 000000000000000b R14: 00007eff95b05f80 R15: 00007ffcd19c13b8 [ 969.946789][ C1]