last executing test programs: 17m15.247733287s ago: executing program 4 (id=339): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xae}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x306) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1, 0x0, 0x0, @void, @value}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r13}, 0x10) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 15m43.961707097s ago: executing program 4 (id=345): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', r2, 0x4000, r1}, 0x18) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000500)=@tipc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/163, 0xa3}], 0x1, &(0x7f0000000700)=""/125, 0x7d}, 0x10000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000081b477071c53ae72654d5790d65f56c2a85a66ca5c3103c0f6b0c9d0a037646a2d9f3812cf9b99a3ba7dd2fd38138a4b73f542aa635fd90b4232a05853e3728d4360f2eaae3e9072b92dd67f916b34e6bd69aaa07dc6a78934b30bc4462dd5d3220cf4c7c3493242c817b277afddcf32fb372fecca4dfae827df3d03868131a5606da915643be4a29570a09e31214a7674fda1d03cb9b354e11f631c8cfb26ac91fd161d10840517ddeaa7c1d9d681a0bd911c0a3fde9518721051784dad60269c4d0e75f1e9bfea0fb01cb6b9de8ea77e7b2e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r11) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r13, 0x8982, 0x20000000) 15m43.06320793s ago: executing program 4 (id=350): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000900), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb010018000000000000008b0000008b00000004000000060000000200000f030000000400000007000000ff7f0000020000000000000006000000c2f013020000000000000205000000010000000000eca012f1f52bceb4b0000b04000000050000"], 0x0, 0xa8, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1421}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m37.127470866s ago: executing program 2 (id=363): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{r0}, &(0x7f0000001c00), &(0x7f00000020c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m20.740242806s ago: executing program 4 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffff00000000000600004000100a00000012f9e0f7007e89fdda72e2ac2e265f2e876216266f624c85b8206b2265bbc3fe33d048e263708bfb94d4d8d73c4923d052969f4f0302cd693f5a8b89f21758325995eff70d2a20e147be633c11ac314eeb0ba461a081dc9e0f55e1d3e88a0ed1eea24917d1f11f5cad0d69f6e3cfed18233798e8b537691f2ff64baf3ddbe434a947bdabce0000ace0b3f69f2045783d32311e268bed0f6c282b612a19709b46c49eee14833d2aa3d1569baeae61dab39dd3a913e099c027cba5851b0b6f71348d9e89d708f653f277864b6d2ce50f2f"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e700"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000c0de28852e7743224902f2a8023a070f0000010001000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 9m45.84714417s ago: executing program 1 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000600000005004f53ab8e0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) syz_clone(0x2108000, &(0x7f0000000540)="03a179a24b19c1812a68c127ba20979d022216d5018d5bb01d50836e22f7edee636cf98562e5afc9fa049152978569756af3b7a01aca19e76f09ebafb4ab2867801e311c2f6b8ff3db74def31991e4fe96303e2394cfc5fbd4b8f8283ff5939315edcdd9ed501c1c3e08cb235e84caaf64170b2e981d0fd08d6d12fb38fe1b03b929034a02da79f9ebea78e99994cbf87ab1a484667e7751201e085f185563bcb40f08867fbc5ed82ef53e76c48ba73361d60dec36f60bdcb5664668aacc5c9d8e5b", 0xc2, 0x0, &(0x7f0000000380), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9m39.903957487s ago: executing program 3 (id=381): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/251, 0x120, 0xfb, 0x0, 0x8000, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0xfffffffd, 0xfffffffffffffeeb, 0x0, 0x40f00, 0x1, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe66cdf24ed5bcdf4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.throttle.io_service_bytes_recursive\x00', 0x100002, 0x0) write$cgroup_type(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3ff, 0x1, 0x0, 0x18002, r4, 0xc, '\x00', r0, r4, 0x1, 0x0, 0x3, 0xe, @value=r4, @void, @value=r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001078000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x30010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000400)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x1}}, 0x10, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e142a5287ace14cff11575ac8d7bbeb565508ec3a6f5409dead1378b21c3081ed6d72ae0c95d78fae2f36f3c9d1e0d018028ba6074a60b7dca8b4c45f4ca49ac2a906e35fe0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000005bc0)={&(0x7f00000057c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC], &(0x7f0000000000)=""/144, 0x4e, 0x90, 0x1, 0x0, 0x0, @void, @value}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={0xffffffffffffffff, 0x0, 0x9, 0x95, &(0x7f0000000e00)="ec0bc31c5e56abed7d", &(0x7f0000000e40)=""/149, 0x81, 0x0, 0xfffffd3a, 0x28, &(0x7f0000000f00)="6216d3530579dc1bcce536952cae1e278b0c7ca42abca28f63cdc8d9c1a611e23e14810a77578e2446b6badb8273a61af87bb7a99c718a9a7399643d023671cd59ad7bf0d7f692d3f1a890f68be67b4e360b42371b4e382678f7a943dd89f4ca1df10bdc20b3726abd57b3bf7a413368c2bbf437b7a444b176247bed31af07613340812903ef517498f5a0e5a6d84b7f8be5e1cdc3fac423b72e37b94bd4", &(0x7f0000000980)="abea4978226dd2a9228e189c9b51472267a3ea8139d801bfa4119204f8e7ef3cb92122ee03bc3a42", 0x3, 0x0, 0x200}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 9m0.495894127s ago: executing program 0 (id=386): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x21, 0x3, 0x3, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000000000000000000000000000ab5e350b9ca3937f37722617c387dda0e5b8aed051bad01d43aeb52a6fe8dc1d5329db6a49cb87eac2bbc847c057601a0f4a77f32d0972e4664f9ca2e9520681b9f3d4a34dc6b3f0a8ae903537caedcb1a7e344910ae229b0a3549a9dafd3f110db78dbc61c5fedc6c5ba50463", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001140)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x729e0ac7eef6d214, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 9m0.297029516s ago: executing program 0 (id=387): perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x541b, 0x2000fcc6) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x214303, 0x0) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000531e5420000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000004100000000ec000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000187e0700010000000100000066500000", @ANYRES32=r3, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000889500008783f0ffe1ffffff5801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7080000040000008500000006000000850000001b00000018490000faffffff000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800000008000000000000000800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x101, 0xb4, &(0x7f00000007c0)=""/180, 0x41000, 0x34, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x6, 0x6}, 0x10, 0x1858, r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x2, 0x6, 0x7}, {0x1, 0x3, 0xa}], 0x10, 0x85, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000340)='syz1\x00', 0x1ff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000000000000000000000000000000000000000400"], 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 9m0.084296245s ago: executing program 0 (id=388): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x61, 0x0]}}, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x66) sendmsg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT=r10, @ANYRES64=r0, @ANYRESDEC=r10], 0x2008}, 0x40841) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f677969c599f24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) 5m16.451309496s ago: executing program 0 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x22ac, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff95, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x41500, 0x0, 0xd, 0xfffffffffffffffd, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) perf_event_open(0x0, r1, 0xe, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x8d4c67e0bffa2942]}}, 0x0, 0x1c, 0x0, 0x0, 0x5, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 5m11.002529417s ago: executing program 0 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r2}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x5, 0x7fffffff, 0x240f, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0xe, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1600a3e82f264f2077d75893370000000408000001000000e8ffffff000000d87bd03211", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000400000000000000093a7c224ad749803735713a5a5d942fedc64b4212f0a9e0e25f1d936b0470cae8f66b6f7c23dcbe84700d80c91fa3151b36e9762986fc30c6943dd031f34485ceb1ba7c6e6dd060f00646f7b27325c2bafa1a7ffa759b9c75f84271715945746689209d3f7d53c07c7d15e20305d163e671a50e916528644bf5cbe3633087624202ba8f4b8890730773fea304213b9f9361c6d20907a9060419a940f72016f03e53e9f85529b20bd82bbb031c2f34fe2052a7beab12b17616e441d6015f5c1ca98069130d7082ac"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x27492c7b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) 4m24.994876086s ago: executing program 1 (id=382): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='ext4_fc_replay\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xae, 0xae, 0x3, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @struct={0x7, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x9, 0x4, 0x8115}, {0x3, 0x4, 0x7}]}, @datasec={0xa, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x80000000}, {0x1, 0x1, 0x8001}, {0x3, 0x9, 0x65}, {0x4, 0x4, 0x473c49e3}], "1a"}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}, @datasec={0x10, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x5, 0x58a}, {0x4, 0x2, 0x2}], "e0"}, @func={0x6, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/76, 0xcb, 0x4c, 0x0, 0x7ff, 0x10000, @value=r6}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) 4m21.614550477s ago: executing program 1 (id=392): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000b2f8f8000000007f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={r4, 0x0, 0x10}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)='-Y', 0x2}], 0x1}, 0x800) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xbe]}}, &(0x7f00000005c0)=""/139, 0x3e, 0x8b, 0x1, 0x0, 0x0, @void, @value}, 0x28) 4m19.422050469s ago: executing program 4 (id=378): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x5}, 0x9808, 0x14a, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000001a40)) syz_open_procfs$namespace(r2, &(0x7f0000001540)='ns/net\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001ac0)=r2, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980), 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x128, 0x28008000}, 0x800) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r2, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3z\xd2\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2\x8aV\x18q\x9e\'\x8f0\x04\xa8\xa9#\x8e\xd0\f^\xca\x88+\x80\x82DG\x96\xe10\xac\xf3zE\x11g\xa0\xc4.\xde8`\xa33\x85\xc9\x87-\x8c\x12\x96\xb9\'\x1c|\x1766\xb7\x04g\xc6\xc2\xa9\xa5\xdc\xd9\x89\b\x9b\xbd\xc9\xcd\a\xa7J\'\xc0\x8a1\x94\x17\xd8\xdc\xea\x1b/\x9c\x9d\x01\x87@\xe2+\xf1\'\xf8\aA%\xd9\x9a\x1a\xe5\xb2m$U\x9b\xa1') socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r5, 0x8982, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000001000000000000702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = perf_event_open(&(0x7f00000001c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000340)='syz1\x00', 0x1ff) 3m45.364664647s ago: executing program 1 (id=395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000008000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 3m45.282408325s ago: executing program 1 (id=396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000055faa994d2c266b8cf2591cfa2c3e1e528dbfc3a8e1d6779b04a5cd9db36f9568c6fd3c13aaf364542d337", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x9, 0xf5, &(0x7f0000000280)=""/245, 0x41000, 0x41, '\x00', 0x0, @sk_msg, r5, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000bc0)=[{0x0, 0x4, 0x6, 0x9}], 0x10, 0x80000001, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000780), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x369}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000400006db09d1a0aa2a72769b0dddb0ee9d17002679d2512eafeb2cc63f18fb27be700"/118], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m0.904319583s ago: executing program 2 (id=364): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x9}}, @fwd={0x5}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0xb}, {0x6, 0x2}, {0xf, 0x80000001}, {0x7, 0x5}]}, @struct={0x9, 0x9, 0x0, 0x4, 0x1, 0x54ac, [{0x1, 0x5, 0x6}, {0x3, 0x0, 0x80000001}, {0x6}, {0x5, 0x0, 0x4}, {0x4, 0x4, 0xfffffc00}, {0x2, 0x1, 0x6}, {0xd, 0x5, 0xf}, {0x6, 0x2, 0x7}, {0xe, 0x0, 0x10001}]}]}, {0x0, [0x61, 0x0, 0x30, 0x30, 0x5f]}}, &(0x7f00000007c0)=""/152, 0xef, 0x98, 0x1, 0x3, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x1a, &(0x7f00000004c0)=@raw=[@func, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @printk={@llu}], &(0x7f0000000000)='GPL\x00', 0x6, 0x3d, &(0x7f0000000040)=""/61, 0xe0968415b31883b5, 0x50, '\x00', r6, 0x1b, r9, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xa, 0x1ff, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[r1, r8, r7], 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb5d, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.296092151s ago: executing program 2 (id=399): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x40, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000060000000000000001000005000000000200000000000000000000000000612e2e0091bc5c1a340896d0b2fb6b902bb18a9a88963d0c37f1e75cfd8a75efcbf19deb066a4a"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc00000000ff0000000032f9000000020010000000"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2m10.237488068s ago: executing program 2 (id=400): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x773675eb0b6021f7, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8000, 0x4, 0x200, 0x0, 0x3000000000000, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="200000000000000000000000000000b542f2ecd6ad2ee4a4e1b813fd011d01834d21f7cbf46970515c9ae6d75fc9c6343a0e8499623ca7a7b959b5a9b6bb5d590f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000d7cc0c8098eee5e77978cabb630000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x6d9, 0x0, 0x0, 0x7cb75d418c92ec05, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000ff0f000003000000a0000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008000000004f556664fa28638100"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1m33.044959955s ago: executing program 2 (id=401): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002920207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20a200, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000003c0)=0x3) perf_event_open(&(0x7f00000001c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000a40)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x59, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1a, 0x29, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x6b, 0x55, &(0x7f0000001400)=""/85, 0x41000, 0x14, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x9, 0x6, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000001100), &(0x7f0000001280), 0x10, 0x2, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x1, &(0x7f0000000400)=@raw=[@generic={0x5, 0x2, 0x1, 0xfff8, 0x8}], &(0x7f0000000440)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x50, '\x00', r7, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xb, 0x2, 0xffff1d06}, 0x10, r8, r0, 0x3, 0x0, &(0x7f0000000600)=[{0x5, 0x4, 0xc, 0x5}, {0x3, 0x4, 0xf, 0xa}, {0x3, 0x1, 0xc, 0x6}], 0x10, 0x3f6c0, @void, @value}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000340)='syz1\x00', 0x1ff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r0) 1m31.9059885s ago: executing program 3 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r3, &(0x7f0000000980), &(0x7f00000009c0)=""/34}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4b) 15.216879266s ago: executing program 4 (id=394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() r5 = perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x8, 0xff, 0xc8, 0x95, 0x0, 0x2, 0x80000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x4002, 0x400, 0x9, 0x0, 0x515dee8d, 0x972, 0x3, 0x0, 0x5, 0x0, 0xc5084ce}, 0xffffffffffffffff, 0x5, r3, 0x4) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x80, 0x6, 0x81, 0x5, 0x0, 0x71, 0x40, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000200)}, 0x100, 0x4, 0x9, 0x9, 0x8, 0x401, 0xf187, 0x0, 0x10001, 0x0, 0xffffffffffff8000}, r4, 0x9, r5, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, r4, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[], 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 13.20321444s ago: executing program 3 (id=403): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfd85}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000), 0xfdef) 12.288847874s ago: executing program 3 (id=404): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x1, 0x80, 0x7f, 0x0, 0x2, 0xc, 0x0, 0xb, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x2, 0xfffffffffffffffd}, 0x2000, 0x3c94, 0x37, 0x2, 0x1, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x7fffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r5, r3, 0x1c, 0x12, r4, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x101, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close(r8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x6023}, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.570514892s ago: executing program 3 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 2.341221575s ago: executing program 0 (id=391): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9009, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x200200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120e00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)="2392a23e7e", 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) write$cgroup_subtree(r6, &(0x7f00000005c0)=ANY=[@ANYRESOCT], 0xfdef) 0s ago: executing program 2 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000000c0), 0x20000000}, 0x20) close(r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071100a0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000a300"/20, @ANYRES32=r2, @ANYBLOB="fcb4d6cb7d9f2e9271c1bfa56d303e0b38332541c6499e9055139dac437a9140be229fab1a0ab62accc2f1dd8e10e1feb0", @ANYRES32=r2, @ANYRES8=r4, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x0, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) getpid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xfffffd26) kernel console output (not intermixed with test programs): ecomes ready [ 1958.788939][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1958.798921][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1958.809153][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1958.818082][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1958.827374][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1958.836254][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1958.844597][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1958.853088][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1958.862388][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1958.870774][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1959.401166][ T3944] ªªªªªª: renamed from vlan0 [ 1959.539677][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.546578][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.555175][ T3952] device bridge_slave_0 entered promiscuous mode [ 1959.563438][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.570673][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.579223][ T3952] device bridge_slave_1 entered promiscuous mode [ 1967.881590][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.888622][ T3922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.896876][ T3922] device bridge_slave_0 entered promiscuous mode [ 1967.904715][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.911731][ T3922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.920091][ T3922] device bridge_slave_1 entered promiscuous mode [ 1968.044645][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.051586][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1968.058862][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.065744][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.154456][ T3907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.420949][ T3907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.428339][ T24] audit: type=1400 audit(1727293508.070:150): avc: denied { create } for pid=3988 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1971.586410][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.593440][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.602013][ T3957] device bridge_slave_0 entered promiscuous mode [ 1971.610326][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.617549][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.625981][ T3957] device bridge_slave_1 entered promiscuous mode [ 1971.905291][ T3922] device veth0_vlan entered promiscuous mode [ 1971.934746][ T3922] device veth1_macvtap entered promiscuous mode [ 1972.373945][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1972.381788][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1972.390016][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1972.398800][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1972.407853][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.414732][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1972.422760][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1972.431717][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1972.440505][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.447632][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1972.455361][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1972.464205][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1972.472897][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1972.481628][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1972.490363][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1972.500711][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1972.513020][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1972.521943][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1972.531361][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1972.540797][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1972.549541][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1972.557937][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1972.566670][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1972.575737][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1972.584560][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1972.594172][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1972.602169][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1972.610230][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1972.619186][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1972.627718][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.634677][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1972.642474][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1972.651073][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1972.659867][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.666743][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1972.675564][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1972.683939][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1972.692468][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1972.700991][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2072.446950][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2072.453455][ C1] rcu: 1-....: (1 GPs behind) idle=456/1/0x4000000000000000 softirq=34490/34491 fqs=4734 last_accelerate: 8ce2/b3fa dyntick_enabled: 1 [ 2072.467123][ C1] (t=10002 jiffies g=38773 q=1319) [ 2072.472151][ C1] NMI backtrace for cpu 1 [ 2072.476422][ C1] CPU: 1 PID: 3661 Comm: syz.2.352 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2072.487426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2072.497533][ C1] Call Trace: [ 2072.500621][ C1] [ 2072.503682][ C1] dump_stack_lvl+0x1e2/0x24b [ 2072.508206][ C1] ? panic+0x812/0x812 [ 2072.512208][ C1] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2072.517563][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2072.522848][ C1] ? vprintk_func+0x19d/0x1e0 [ 2072.527295][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2072.531976][ C1] ? printk+0xd1/0x111 [ 2072.536031][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2072.541868][ C1] dump_stack+0x15/0x17 [ 2072.545920][ C1] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 2072.551692][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2072.557594][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2072.563385][ C1] rcu_dump_cpu_stacks+0x199/0x2b0 [ 2072.568262][ C1] rcu_sched_clock_irq+0xf8a/0x1890 [ 2072.573386][ C1] ? rcutree_dead_cpu+0x340/0x340 [ 2072.578275][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 2072.583280][ C1] update_process_times+0x198/0x200 [ 2072.588357][ C1] tick_sched_timer+0x188/0x240 [ 2072.593285][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 2072.598779][ C1] __hrtimer_run_queues+0x3d7/0xa50 [ 2072.603803][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 2072.608760][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 2072.614658][ C1] hrtimer_interrupt+0x39a/0x8b0 [ 2072.619437][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2072.625200][ C1] sysvec_apic_timer_interrupt+0xba/0xe0 [ 2072.630664][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2072.636543][ C1] RIP: 0010:update_stack_state+0x3b3/0x460 [ 2072.642163][ C1] Code: 03 42 80 3c 38 00 74 08 4c 89 f7 e8 97 26 76 00 65 48 8b 05 2f 4d d0 7e 49 39 06 74 0d 48 89 df e8 42 fc ff ff 49 89 c6 eb 19 <48> 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 67 26 76 00 [ 2072.661726][ C1] RSP: 0018:ffffc90000170370 EFLAGS: 00000246 [ 2072.667586][ C1] RAX: ffff88810efd3b40 RBX: ffffc90000170c20 RCX: 1ffff9200002e0a3 [ 2072.675400][ C1] RDX: 1ffff9200002e09a RSI: ffffc90000170c18 RDI: ffffc90000170518 [ 2072.683826][ C1] RBP: ffffc90000170428 R08: ffffc900001705a8 R09: 0000000000000005 [ 2072.691634][ C1] R10: ffffc900001705b0 R11: dffffc0000000001 R12: 1ffff9200002e0a0 [ 2072.699670][ C1] R13: 0000000000000000 R14: ffffc900001704e8 R15: dffffc0000000000 [ 2072.707504][ C1] unwind_next_frame+0x3cb/0x700 [ 2072.712257][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2072.717305][ C1] arch_stack_walk+0x10d/0x140 [ 2072.721901][ C1] ? ndisc_send_skb+0x25a/0xc00 [ 2072.726489][ C1] stack_trace_save+0x113/0x1c0 [ 2072.731173][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2072.736118][ C1] ? sysvec_irq_work+0xc8/0xd0 [ 2072.740728][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 2072.745819][ C1] __kasan_slab_alloc+0xb1/0xe0 [ 2072.750596][ C1] ? __kasan_slab_alloc+0xb1/0xe0 [ 2072.755464][ C1] ? slab_post_alloc_hook+0x61/0x2f0 [ 2072.760590][ C1] ? kmem_cache_alloc+0x168/0x2e0 [ 2072.765594][ C1] ? dst_alloc+0x17d/0x590 [ 2072.769815][ C1] ? icmp6_dst_alloc+0xfc/0x560 [ 2072.774552][ C1] ? ndisc_send_skb+0x25a/0xc00 [ 2072.779275][ C1] slab_post_alloc_hook+0x61/0x2f0 [ 2072.784193][ C1] ? dst_alloc+0x17d/0x590 [ 2072.788618][ C1] kmem_cache_alloc+0x168/0x2e0 [ 2072.793315][ C1] ? irq_exit_rcu+0x9/0x10 [ 2072.797553][ C1] ? dst_alloc+0x17d/0x590 [ 2072.801827][ C1] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 2072.807282][ C1] dst_alloc+0x17d/0x590 [ 2072.811369][ C1] icmp6_dst_alloc+0xfc/0x560 [ 2072.815939][ C1] ? security_sk_classify_flow+0x7a/0x90 [ 2072.821353][ C1] ndisc_send_skb+0x25a/0xc00 [ 2072.826137][ C1] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 2072.830905][ C1] ? ndisc_alloc_skb+0xf3/0x2d0 [ 2072.835595][ C1] ? __kmalloc_track_caller+0x184/0x320 [ 2072.840980][ C1] ? __kasan_check_write+0x14/0x20 [ 2072.845997][ C1] ? skb_set_owner_w+0x1fa/0x350 [ 2072.850691][ C1] ? ndisc_send_rs+0x457/0x6a0 [ 2072.855298][ C1] ? memcpy+0x56/0x70 [ 2072.859152][ C1] ndisc_send_rs+0x532/0x6a0 [ 2072.863560][ C1] addrconf_rs_timer+0x2d1/0x600 [ 2072.868332][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2072.874222][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2072.879172][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2072.884552][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2072.890450][ C1] call_timer_fn+0x3b/0x2d0 [ 2072.894805][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2072.901091][ C1] __run_timers+0x72a/0xa10 [ 2072.905557][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2072.910778][ C1] ? calc_index+0x270/0x270 [ 2072.915207][ C1] ? run_timer_softirq+0x24/0xf0 [ 2072.919997][ C1] ? __sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 2072.926132][ C1] run_timer_softirq+0x69/0xf0 [ 2072.930731][ C1] __do_softirq+0x268/0x5bb [ 2072.935083][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2072.940000][ C1] [ 2072.942912][ C1] do_softirq_own_stack+0x60/0x80 [ 2072.947773][ C1] __irq_exit_rcu+0x128/0x150 [ 2072.952279][ C1] irq_exit_rcu+0x9/0x10 [ 2072.956359][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 2072.962002][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2072.967899][ C1] RIP: 0010:find_next_bit+0xe2/0x100 [ 2072.972936][ C1] Code: e8 33 1c 18 ff 4d 39 f4 72 bf e8 19 1a 18 ff eb 19 e8 12 1a 18 ff 48 89 5d d0 f3 48 0f bc 45 d0 4c 01 e0 4c 39 f0 4c 0f 42 f0 <4c> 89 f0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 19 18 [ 2072.992373][ C1] RSP: 0018:ffffc9000379f6d0 EFLAGS: 00000293 [ 2072.998271][ C1] RAX: ffffffff825292c7 RBX: 0000000000000000 RCX: ffff88810efd3b40 [ 2073.006084][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000040 [ 2073.013949][ C1] RBP: ffffc9000379f700 R08: ffffffff825292bd R09: 0000000000000003 [ 2073.021712][ C1] R10: fffff520006f3ee0 R11: dffffc0000000001 R12: 0000000000000040 [ 2073.029542][ C1] R13: dffffc0000000000 R14: 0000000000000008 R15: ffffffff86e3a980 [ 2073.037439][ C1] ? find_next_bit+0xbd/0x100 [ 2073.041959][ C1] ? find_next_bit+0xc7/0x100 [ 2073.046554][ C1] ? cpumask_next+0x11/0x30 [ 2073.051065][ C1] cpumask_next+0x23/0x30 [ 2073.055280][ C1] mnt_get_count+0x114/0x1e0 [ 2073.059698][ C1] mntput_no_expire+0x160/0x6a0 [ 2073.064333][ C1] ? vfs_submount+0xb0/0xb0 [ 2073.068675][ C1] ? namespace_unlock+0x371/0x4d0 [ 2073.073541][ C1] namespace_unlock+0x42e/0x4d0 [ 2073.078223][ C1] ? umount_tree+0xef0/0xef0 [ 2073.082645][ C1] ? __detach_mounts+0x5a0/0x5a0 [ 2073.087522][ C1] ? __kasan_check_write+0x14/0x20 [ 2073.092453][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 2073.097078][ C1] put_mnt_ns+0xaf/0x1e0 [ 2073.101204][ C1] free_nsproxy+0x4c/0x240 [ 2073.105393][ C1] exit_task_namespaces+0xb4/0xd0 [ 2073.110254][ C1] do_exit+0xc7e/0x2a50 [ 2073.114248][ C1] ? put_task_struct+0x80/0x80 [ 2073.118934][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2073.124065][ C1] ? __kasan_check_write+0x14/0x20 [ 2073.129032][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2073.134039][ C1] do_group_exit+0x141/0x310 [ 2073.138505][ C1] get_signal+0x10a0/0x1410 [ 2073.142946][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2073.148794][ C1] arch_do_signal_or_restart+0xbd/0x17c0 [ 2073.154313][ C1] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2073.160224][ C1] ? __kasan_check_write+0x14/0x20 [ 2073.165204][ C1] ? finish_task_switch+0x1bb/0x5a0 [ 2073.170195][ C1] ? __switch_to_asm+0x34/0x60 [ 2073.174796][ C1] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2073.180098][ C1] ? __kasan_check_read+0x11/0x20 [ 2073.185029][ C1] ? schedule+0x154/0x1d0 [ 2073.189207][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2073.195128][ C1] exit_to_user_mode_loop+0x9b/0xd0 [ 2073.200177][ C1] irqentry_exit_to_user_mode+0x4e/0x80 [ 2073.205525][ C1] irqentry_exit+0x12/0x60 [ 2073.209775][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2073.215454][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2073.221255][ C1] RIP: 0033:0x7f37d469bef9 [ 2073.225504][ C1] Code: Unable to access opcode bytes at RIP 0x7f37d469becf. [ 2073.232718][ C1] RSP: 002b:00007f37d3315038 EFLAGS: 00000246 [ 2073.238789][ C1] RAX: 0000000000000000 RBX: 00007f37d4853f80 RCX: 00007f37d469bef9 [ 2073.246591][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 000000000000000b [ 2073.254401][ C1] RBP: 00007f37d470eb76 R08: 0000000000000000 R09: 0000000000000000 [ 2073.262226][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2073.270038][ C1] R13: 0000000000000000 R14: 00007f37d4853f80 R15: 00007ffce2937698 [ 2077.629424][ T2638] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P3957 1-... } 10473 jiffies s: 29409 root: 0x2/T [ 2077.667010][ T2638] rcu: blocking rcu_node structures: [ 2077.672171][ T2638] Task dump for CPU 1: [ 2077.676087][ T2638] task:syz.2.352 state:R running task stack: 0 pid: 3661 ppid: 3503 flags:0x0000400e [ 2077.687274][ T2638] Call Trace: [ 2077.690359][ T2638] ? kvm_sched_clock_read+0x18/0x40 [ 2077.695457][ T2638] ? sched_clock+0x3a/0x40 [ 2077.699752][ T2638] ? sched_clock_cpu+0x1b/0x3b0 [ 2077.704396][ T2638] ? sched_clock+0x3a/0x40 [ 2077.708943][ T2638] ? __kasan_check_write+0x14/0x20 [ 2077.713962][ T2638] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2077.719267][ T2638] ? _raw_spin_lock+0x1b0/0x1b0 [ 2077.723913][ T2638] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2077.729581][ T2638] ? kasan_save_stack+0x4b/0x60 [ 2077.734225][ T2638] ? kasan_save_stack+0x3b/0x60 [ 2077.739030][ T2638] ? kvm_sched_clock_read+0x18/0x40 [ 2077.744038][ T2638] ? sched_clock+0x3a/0x40 [ 2077.748335][ T2638] ? sched_clock_cpu+0x1b/0x3b0 [ 2077.752990][ T2638] ? sched_clock+0x3a/0x40 [ 2077.757258][ T2638] ? __this_cpu_preempt_check+0x13/0x20 [ 2077.762610][ T2638] ? do_softirq_own_stack+0x60/0x80 [ 2077.767680][ T2638] ? __irq_exit_rcu+0x128/0x150 [ 2077.772338][ T2638] ? irq_exit_rcu+0x9/0x10 [ 2077.776786][ T2638] ? sysvec_apic_timer_interrupt+0xbf/0xe0 [ 2077.782477][ T2638] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2077.788527][ T2638] ? find_next_bit+0xbd/0x100 [ 2077.793611][ T2638] ? find_next_bit+0xc7/0x100 [ 2077.798339][ T2638] ? find_next_bit+0xe2/0x100 [ 2077.802807][ T2638] ? cpumask_next+0x11/0x30 [ 2077.807291][ T2638] ? cpumask_next+0x23/0x30 [ 2077.811577][ T2638] ? mnt_get_count+0x114/0x1e0 [ 2077.816181][ T2638] ? mntput_no_expire+0x160/0x6a0 [ 2077.821086][ T2638] ? vfs_submount+0xb0/0xb0 [ 2077.825380][ T2638] ? namespace_unlock+0x371/0x4d0 [ 2077.830269][ T2638] ? namespace_unlock+0x42e/0x4d0 [ 2077.835113][ T2638] ? umount_tree+0xef0/0xef0 [ 2077.839668][ T2638] ? __detach_mounts+0x5a0/0x5a0 [ 2077.844391][ T2638] ? __kasan_check_write+0x14/0x20 [ 2077.849370][ T2638] ? _raw_spin_lock+0xa4/0x1b0 [ 2077.853943][ T2638] ? put_mnt_ns+0xaf/0x1e0 [ 2077.858215][ T2638] ? free_nsproxy+0x4c/0x240 [ 2077.862617][ T2638] ? exit_task_namespaces+0xb4/0xd0 [ 2077.867725][ T2638] ? do_exit+0xc7e/0x2a50 [ 2077.871918][ T2638] ? put_task_struct+0x80/0x80 [ 2077.876537][ T2638] ? kvm_sched_clock_read+0x18/0x40 [ 2077.881619][ T2638] ? __kasan_check_write+0x14/0x20 [ 2077.886528][ T2638] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2077.891520][ T2638] ? do_group_exit+0x141/0x310 [ 2077.896096][ T2638] ? get_signal+0x10a0/0x1410 [ 2077.900658][ T2638] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2077.906504][ T2638] ? arch_do_signal_or_restart+0xbd/0x17c0 [ 2077.912178][ T2638] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2077.917888][ T2638] ? __kasan_check_write+0x14/0x20 [ 2077.922806][ T2638] ? finish_task_switch+0x1bb/0x5a0 [ 2077.927895][ T2638] ? __switch_to_asm+0x34/0x60 [ 2077.932444][ T2638] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2077.937850][ T2638] ? __kasan_check_read+0x11/0x20 [ 2077.942921][ T2638] ? schedule+0x154/0x1d0 [ 2077.947113][ T2638] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2077.952992][ T2638] ? exit_to_user_mode_loop+0x9b/0xd0 [ 2077.958248][ T2638] ? irqentry_exit_to_user_mode+0x4e/0x80 [ 2077.963784][ T2638] ? irqentry_exit+0x12/0x60 [ 2077.968202][ T2638] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2077.973819][ T2638] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2101.314778][ T26] INFO: task kworker/u4:1:9 blocked for more than 122 seconds. [ 2101.327003][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2101.335792][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2101.407024][ T26] task:kworker/u4:1 state:D stack: 0 pid: 9 ppid: 2 flags:0x00004000 [ 2101.416170][ T26] Workqueue: netns cleanup_net [ 2101.457029][ T26] Call Trace: [ 2101.460222][ T26] __schedule+0xbe6/0x1330 [ 2101.464467][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2101.507114][ T26] ? kthread_data+0x53/0xc0 [ 2101.511599][ T26] ? wq_worker_sleeping+0x63/0x200 [ 2101.516629][ T26] schedule+0x13d/0x1d0 [ 2101.557091][ T26] synchronize_rcu_expedited+0x503/0x660 [ 2101.562597][ T26] ? kasan_set_track+0x4b/0x70 [ 2101.597099][ T26] ? synchronize_rcu+0x120/0x120 [ 2101.602191][ T26] ? kobject_put+0x1e8/0x260 [ 2101.606716][ T26] ? netdev_run_todo+0xc26/0xdc0 [ 2101.657147][ T26] ? rtnl_unlock+0xe/0x10 [ 2101.661526][ T26] ? ip6gre_exit_batch_net+0x5b7/0x600 [ 2101.697044][ T26] ? cleanup_net+0x6e9/0xcb0 [ 2101.701524][ T26] ? process_one_work+0x6dc/0xbd0 [ 2101.706465][ T26] ? worker_thread+0xaea/0x1510 [ 2101.757043][ T26] ? kthread+0x34b/0x3d0 [ 2101.761162][ T26] ? ret_from_fork+0x1f/0x30 [ 2101.765605][ T26] ? rcu_exp_handler+0x360/0x360 [ 2101.817205][ T26] ? io_schedule+0x120/0x120 [ 2101.821683][ T26] synchronize_rcu+0x88/0x120 [ 2101.826186][ T26] ? kvfree_call_rcu+0x650/0x650 [ 2101.868316][ T26] ? __kasan_check_write+0x14/0x20 [ 2101.873404][ T26] ? _raw_spin_lock+0xa4/0x1b0 [ 2101.907008][ T26] ? _raw_spin_trylock_bh+0x190/0x190 [ 2101.912265][ T26] ? __kasan_check_read+0x11/0x20 [ 2101.957065][ T26] synchronize_net+0x34/0x40 [ 2101.961719][ T26] gro_cells_destroy+0x2da/0x350 [ 2101.966418][ T26] ? find_next_bit+0xc7/0x100 [ 2102.007043][ T26] ip6gre_dev_free+0x19/0x60 [ 2102.011597][ T26] ? ip6gre_fill_info+0x10d0/0x10d0 [ 2102.016633][ T26] netdev_run_todo+0xb7a/0xdc0 [ 2102.067050][ T26] ? alloc_netdev_mqs+0xcd0/0xcd0 [ 2102.072043][ T26] ? netdev_refcnt_read+0x1e0/0x1e0 [ 2102.107215][ T26] ? unregister_netdevice_queue+0x258/0x350 [ 2102.112980][ T26] ? list_netdevice+0x4c0/0x4c0 [ 2102.147006][ T26] ? __kasan_check_write+0x14/0x20 [ 2102.151991][ T26] rtnl_unlock+0xe/0x10 [ 2102.155983][ T26] ip6gre_exit_batch_net+0x5b7/0x600 [ 2102.207011][ T26] ? ip6gre_init_net+0x320/0x320 [ 2102.211831][ T26] ? __kasan_check_read+0x11/0x20 [ 2102.216695][ T26] ? ip6gre_init_net+0x320/0x320 [ 2102.267004][ T26] cleanup_net+0x6e9/0xcb0 [ 2102.271317][ T26] ? __kasan_check_write+0x14/0x20 [ 2102.276248][ T26] ? ops_init+0x4a0/0x4a0 [ 2102.327017][ T26] ? read_word_at_a_time+0x12/0x20 [ 2102.332095][ T26] ? strscpy+0x9c/0x260 [ 2102.336094][ T26] process_one_work+0x6dc/0xbd0 [ 2102.377202][ T26] worker_thread+0xaea/0x1510 [ 2102.381788][ T26] kthread+0x34b/0x3d0 [ 2102.385753][ T26] ? worker_clr_flags+0x180/0x180 [ 2102.427643][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2102.432125][ T26] ret_from_fork+0x1f/0x30 [ 2102.436515][ T26] INFO: task kworker/0:82:3585 blocked for more than 124 seconds. [ 2102.508574][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2102.547034][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2102.555576][ T26] task:kworker/0:82 state:D stack: 0 pid: 3585 ppid: 2 flags:0x00004000 [ 2102.607163][ T26] Workqueue: ipv6_addrconf addrconf_dad_work [ 2102.613024][ T26] Call Trace: [ 2102.616174][ T26] __schedule+0xbe6/0x1330 [ 2102.677075][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2102.682861][ T26] ? wq_worker_sleeping+0x19c/0x200 [ 2102.717042][ T26] schedule+0x13d/0x1d0 [ 2102.721088][ T26] schedule_preempt_disabled+0x13/0x20 [ 2102.726377][ T26] __mutex_lock+0x7b8/0xf20 [ 2102.767051][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2102.773709][ T26] __mutex_lock_slowpath+0xe/0x10 [ 2102.807004][ T26] mutex_lock+0xd6/0x110 [ 2102.811120][ T26] ? mutex_trylock+0xa0/0xa0 [ 2102.815546][ T26] ? kfree+0xc3/0x270 [ 2102.867001][ T26] ? ____kasan_slab_free+0x12c/0x160 [ 2102.872167][ T26] rtnl_lock+0x15/0x20 [ 2102.876070][ T26] addrconf_dad_work+0xdd/0x1700 [ 2102.917099][ T26] ? __vunmap+0x853/0x8f0 [ 2102.921397][ T26] ? ipv6_get_saddr_eval+0xf20/0xf20 [ 2102.926517][ T26] ? __kasan_check_write+0x14/0x20 [ 2102.977102][ T26] ? __kasan_check_read+0x11/0x20 [ 2102.982008][ T26] ? read_word_at_a_time+0x12/0x20 [ 2103.017050][ T26] ? strscpy+0x9c/0x260 [ 2103.021100][ T26] process_one_work+0x6dc/0xbd0 [ 2103.025796][ T26] worker_thread+0xaea/0x1510 [ 2103.077035][ T26] ? _raw_spin_lock+0x1b0/0x1b0 [ 2103.081783][ T26] ? __kasan_check_read+0x11/0x20 [ 2103.086739][ T26] kthread+0x34b/0x3d0 [ 2103.127019][ T26] ? worker_clr_flags+0x180/0x180 [ 2103.131919][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2103.136488][ T26] ret_from_fork+0x1f/0x30 [ 2103.177148][ T26] INFO: task kworker/u4:8:3907 blocked for more than 124 seconds. [ 2103.184820][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2103.273637][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2103.317001][ T26] task:kworker/u4:8 state:D stack: 0 pid: 3907 ppid: 2 flags:0x00004000 [ 2103.326313][ T26] Workqueue: events_unbound linkwatch_event [ 2103.367044][ T26] Call Trace: [ 2103.370249][ T26] __schedule+0xbe6/0x1330 [ 2103.374485][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2103.437014][ T26] ? __mutex_add_waiter+0xe4/0x310 [ 2103.442007][ T26] ? kthread_data+0x53/0xc0 [ 2103.446352][ T26] ? wq_worker_sleeping+0x63/0x200 [ 2103.487069][ T26] schedule+0x13d/0x1d0 [ 2103.491135][ T26] schedule_preempt_disabled+0x13/0x20 [ 2103.496410][ T26] __mutex_lock+0x7b8/0xf20 [ 2103.537062][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2103.543714][ T26] ? __rtnl_unlock+0x77/0x80 [ 2103.597063][ T26] ? netdev_run_todo+0xd5a/0xdc0 [ 2103.601889][ T26] ? linkwatch_urgent_event+0x65/0x4d0 [ 2103.637045][ T26] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2103.642123][ T26] __mutex_lock_slowpath+0xe/0x10 [ 2103.677009][ T26] mutex_lock+0xd6/0x110 [ 2103.681129][ T26] ? mutex_trylock+0xa0/0xa0 [ 2103.685564][ T26] ? __kasan_check_read+0x11/0x20 [ 2103.727053][ T26] ? read_word_at_a_time+0x12/0x20 [ 2103.732146][ T26] rtnl_lock+0x15/0x20 [ 2103.736032][ T26] linkwatch_event+0xe/0x60 [ 2103.777043][ T26] process_one_work+0x6dc/0xbd0 [ 2103.781780][ T26] worker_thread+0xe18/0x1510 [ 2103.786291][ T26] ? _raw_spin_lock+0x1b0/0x1b0 [ 2103.827065][ T26] ? __kasan_check_read+0x11/0x20 [ 2103.832065][ T26] kthread+0x34b/0x3d0 [ 2103.835962][ T26] ? worker_clr_flags+0x180/0x180 [ 2103.897067][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2103.901544][ T26] ret_from_fork+0x1f/0x30 [ 2103.905810][ T26] INFO: task syz-executor:3921 blocked for more than 125 seconds. [ 2103.967074][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2103.975873][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2104.030276][ T26] task:syz-executor state:D stack: 0 pid: 3921 ppid: 3918 flags:0x00004000 [ 2104.067182][ T26] Call Trace: [ 2104.070356][ T26] __schedule+0xbe6/0x1330 [ 2104.074704][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2104.127046][ T26] ? __mutex_add_waiter+0xe4/0x310 [ 2104.132219][ T26] ? atomic_dec_and_mutex_lock+0x1c0/0x1c0 [ 2104.167077][ T26] schedule+0x13d/0x1d0 [ 2104.171124][ T26] schedule_preempt_disabled+0x13/0x20 [ 2104.176411][ T26] __mutex_lock+0x7b8/0xf20 [ 2104.217023][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2104.224021][ T26] ? cap_capable+0x1ce/0x270 [ 2104.267110][ T26] __mutex_lock_slowpath+0xe/0x10 [ 2104.272018][ T26] mutex_lock+0xd6/0x110 [ 2104.276107][ T26] ? mutex_trylock+0xa0/0xa0 [ 2104.327072][ T26] ? ns_capable+0x89/0xe0 [ 2104.331494][ T26] ? netlink_net_capable+0x125/0x160 [ 2104.336639][ T26] rtnetlink_rcv_msg+0x50a/0xc50 [ 2104.377291][ T26] ? is_bpf_text_address+0x172/0x190 [ 2104.382463][ T26] ? rtnetlink_bind+0x80/0x80 [ 2104.417035][ T26] ? arch_stack_walk+0xf3/0x140 [ 2104.421767][ T26] ? stack_trace_save+0x113/0x1c0 [ 2104.426613][ T26] ? netlink_recvmsg+0x5ef/0x11b0 [ 2104.477046][ T26] ? __sys_recvfrom+0x432/0x5d0 [ 2104.481877][ T26] ? stack_trace_snprint+0xf0/0xf0 [ 2104.486913][ T26] ? __bpf_ringbuf_reserve+0x44e/0x4f0 [ 2104.537127][ T26] ? avc_has_perm+0x14d/0x400 [ 2104.541690][ T26] ? memcpy+0x56/0x70 [ 2104.545590][ T26] ? avc_has_perm+0x275/0x400 [ 2104.587102][ T26] ? __kasan_slab_alloc+0xb1/0xe0 [ 2104.592017][ T26] ? slab_post_alloc_hook+0x61/0x2f0 [ 2104.627229][ T26] ? kmem_cache_alloc+0x168/0x2e0 [ 2104.632166][ T26] ? avc_has_perm_noaudit+0x240/0x240 [ 2104.667066][ T26] ? iov_iter_advance+0x258/0xb20 [ 2104.672073][ T26] netlink_rcv_skb+0x1cf/0x410 [ 2104.676658][ T26] ? rtnetlink_bind+0x80/0x80 [ 2104.717046][ T26] ? netlink_ack+0xb30/0xb30 [ 2104.721606][ T26] ? __netlink_lookup+0x37b/0x3a0 [ 2104.726501][ T26] rtnetlink_rcv+0x1c/0x20 [ 2104.777048][ T26] netlink_unicast+0x8df/0xac0 [ 2104.781709][ T26] ? netlink_detachskb+0x90/0x90 [ 2104.786476][ T26] ? security_netlink_send+0x7b/0xa0 [ 2104.837041][ T26] netlink_sendmsg+0xa46/0xd00 [ 2104.841701][ T26] ? netlink_getsockopt+0x5c0/0x5c0 [ 2104.846734][ T26] ? security_socket_sendmsg+0x82/0xb0 [ 2104.897026][ T26] ? netlink_getsockopt+0x5c0/0x5c0 [ 2104.902114][ T26] __sys_sendto+0x545/0x700 [ 2104.906702][ T26] ? __ia32_sys_getpeername+0x90/0x90 [ 2104.957068][ T26] __x64_sys_sendto+0xe5/0x100 [ 2104.961715][ T26] do_syscall_64+0x34/0x70 [ 2104.965972][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2105.017026][ T26] RIP: 0033:0x7f28d9facd33 [ 2105.021302][ T26] RSP: 002b:00007ffc1b6a6228 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2105.067660][ T26] RAX: ffffffffffffffda RBX: 00007f28dac91620 RCX: 00007f28d9facd33 [ 2105.075512][ T26] RDX: 000000000000003c RSI: 00007f28dac91670 RDI: 0000000000000003 [ 2105.137016][ T26] RBP: 0000000000000001 R08: 00007ffc1b6a6244 R09: 000000000000000c [ 2105.144862][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 2105.197056][ T26] R13: 0000000000000000 R14: 00007f28dac91670 R15: 0000000000000000 [ 2105.204930][ T26] INFO: task syz-executor:3922 blocked for more than 126 seconds. [ 2105.277059][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2105.285859][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2105.326981][ T26] task:syz-executor state:D stack: 0 pid: 3922 ppid: 3919 flags:0x00004000 [ 2105.336055][ T26] Call Trace: [ 2105.397073][ T26] __schedule+0xbe6/0x1330 [ 2105.401366][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2105.437071][ T26] ? __mutex_add_waiter+0x1b5/0x310 [ 2105.442155][ T26] ? atomic_dec_and_mutex_lock+0x1c0/0x1c0 [ 2105.477086][ T26] ? udp_lib_get_port+0x156e/0x19d0 [ 2105.482163][ T26] schedule+0x13d/0x1d0 [ 2105.486165][ T26] schedule_preempt_disabled+0x13/0x20 [ 2105.527034][ T26] __mutex_lock+0x7b8/0xf20 [ 2105.531427][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2105.567014][ T26] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 2105.571937][ T26] ? __local_bh_enable_ip+0x53/0x80 [ 2105.607061][ T26] ? _raw_spin_unlock_bh+0x51/0x60 [ 2105.612133][ T26] ? release_sock+0x163/0x1b0 [ 2105.616572][ T26] __mutex_lock_slowpath+0xe/0x10 [ 2105.677077][ T26] mutex_lock+0xd6/0x110 [ 2105.681193][ T26] ? mutex_trylock+0xa0/0xa0 [ 2105.685634][ T26] ? __kasan_check_read+0x11/0x20 [ 2105.727047][ T26] synchronize_rcu_expedited+0x2ea/0x660 [ 2105.732551][ T26] ? inet6_bind+0xd0/0x110 [ 2105.736813][ T26] ? synchronize_rcu+0x120/0x120 [ 2105.793415][ T26] ? kernel_bind+0xfa/0x140 [ 2105.807010][ T26] ? socket_seq_show+0x50/0x50 [ 2105.811652][ T26] ? udp_sock_create6+0x30b/0x850 [ 2105.816507][ T26] ? memcpy+0x56/0x70 [ 2105.857072][ T26] ? __kasan_check_write+0x14/0x20 [ 2105.862055][ T26] ? mutex_lock+0xa5/0x110 [ 2105.866384][ T26] ? mutex_trylock+0xa0/0xa0 [ 2105.927010][ T26] ? __kasan_check_read+0x11/0x20 [ 2105.931917][ T26] synchronize_net+0x28/0x40 [ 2105.936464][ T26] wg_socket_reinit+0x146/0x210 [ 2105.977095][ T26] wg_socket_init+0x9c7/0xcd0 [ 2105.981663][ T26] ? wg_socket_clear_peer_endpoint_src+0x50/0x50 [ 2106.017054][ T26] ? wg_socket_init+0xcd0/0xcd0 [ 2106.021893][ T26] ? __kasan_check_write+0x14/0x20 [ 2106.026844][ T26] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2106.087185][ T26] ? vlan_device_event+0x49f/0x1d80 [ 2106.092269][ T26] ? mutex_trylock+0xa0/0xa0 [ 2106.096939][ T26] ? cgw_notifier+0xd1/0x3b0 [ 2106.131649][ T26] ? ip6_route_dev_notify+0x93/0x800 [ 2106.136760][ T26] wg_open+0x18b/0x300 [ 2106.177109][ T26] __dev_open+0x353/0x4e0 [ 2106.181584][ T26] ? dev_open+0x260/0x260 [ 2106.185754][ T26] ? _raw_spin_unlock_bh+0x51/0x60 [ 2106.227030][ T26] ? dev_set_rx_mode+0x245/0x2e0 [ 2106.231853][ T26] ? __kasan_check_read+0x11/0x20 [ 2106.236715][ T26] __dev_change_flags+0x1db/0x6e0 [ 2106.287045][ T26] ? dev_get_flags+0x1e0/0x1e0 [ 2106.291703][ T26] ? 0xffffffffa001a000 [ 2106.295691][ T26] ? is_bpf_text_address+0x172/0x190 [ 2106.347471][ T26] ? stack_trace_save+0x1c0/0x1c0 [ 2106.352591][ T26] ? __kernel_text_address+0x9b/0x110 [ 2106.387050][ T26] dev_change_flags+0x8c/0x1a0 [ 2106.391704][ T26] do_setlink+0xc5c/0x3c30 [ 2106.395973][ T26] ? stack_trace_save+0x113/0x1c0 [ 2106.457094][ T26] ? stack_trace_snprint+0xf0/0xf0 [ 2106.462249][ T26] ? rtnetlink_event+0x1b0/0x1b0 [ 2106.497055][ T26] ? rtnl_newlink+0x100/0x2000 [ 2106.501716][ T26] ? ____kasan_kmalloc+0xed/0x110 [ 2106.506677][ T26] ? ____kasan_kmalloc+0xdb/0x110 [ 2106.555093][ T26] ? __kasan_kmalloc+0x9/0x10 [ 2106.567038][ T26] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 2106.572572][ T26] ? rtnl_newlink+0x100/0x2000 [ 2106.617072][ T26] ? memset+0x35/0x40 [ 2106.621017][ T26] ? __nla_validate_parse+0x1e53/0x2700 [ 2106.626432][ T26] ? __nla_validate+0x50/0x50 [ 2106.667067][ T26] ? __kasan_check_read+0x11/0x20 [ 2106.672091][ T26] rtnl_newlink+0x15f0/0x2000 [ 2106.676590][ T26] ? addrconf_verify_rtnl+0xcdd/0xd20 [ 2106.727029][ T26] ? rtnl_newlink+0x551/0x2000 [ 2106.731676][ T26] ? rtnl_setlink+0x530/0x530 [ 2106.736202][ T26] ? 0xffffffffa001a000 [ 2106.787041][ T26] ? is_bpf_text_address+0x172/0x190 [ 2106.792301][ T26] ? memcpy+0x56/0x70 [ 2106.796243][ T26] ? cap_capable+0x1ce/0x270 [ 2106.837086][ T26] ? __mutex_lock_slowpath+0xe/0x10 [ 2106.842159][ T26] ? mutex_lock+0xd6/0x110 [ 2106.846415][ T26] ? mutex_trylock+0xa0/0xa0 [ 2106.887007][ T26] ? ns_capable+0x89/0xe0 [ 2106.891304][ T26] ? netlink_net_capable+0x125/0x160 [ 2106.896418][ T26] ? rtnl_setlink+0x530/0x530 [ 2106.947019][ T26] rtnetlink_rcv_msg+0x955/0xc50 [ 2106.951847][ T26] ? is_bpf_text_address+0x172/0x190 [ 2106.987522][ T26] ? rtnetlink_bind+0x80/0x80 [ 2106.992176][ T26] ? arch_stack_walk+0xf3/0x140 [ 2107.027056][ T26] ? stack_trace_save+0x113/0x1c0 [ 2107.031978][ T26] ? stack_trace_snprint+0xf0/0xf0 [ 2107.073441][ T26] ? avc_has_perm+0x14d/0x400 [ 2107.097046][ T26] ? memcpy+0x56/0x70 [ 2107.101004][ T26] ? avc_has_perm+0x275/0x400 [ 2107.105501][ T26] ? __kasan_slab_alloc+0xb1/0xe0 [ 2107.147048][ T26] ? slab_post_alloc_hook+0x61/0x2f0 [ 2107.152223][ T26] ? kmem_cache_alloc+0x168/0x2e0 [ 2107.187021][ T26] ? avc_has_perm_noaudit+0x240/0x240 [ 2107.192472][ T26] ? iov_iter_advance+0x258/0xb20 [ 2107.237088][ T26] netlink_rcv_skb+0x1cf/0x410 [ 2107.241829][ T26] ? rtnetlink_bind+0x80/0x80 [ 2107.246357][ T26] ? netlink_ack+0xb30/0xb30 [ 2107.287049][ T26] ? __netlink_lookup+0x37b/0x3a0 [ 2107.291970][ T26] rtnetlink_rcv+0x1c/0x20 [ 2107.296231][ T26] netlink_unicast+0x8df/0xac0 [ 2107.337063][ T26] ? netlink_detachskb+0x90/0x90 [ 2107.342440][ T26] ? security_netlink_send+0x7b/0xa0 [ 2107.377066][ T26] netlink_sendmsg+0xa46/0xd00 [ 2107.381709][ T26] ? netlink_getsockopt+0x5c0/0x5c0 [ 2107.386741][ T26] ? security_socket_sendmsg+0x82/0xb0 [ 2107.447026][ T26] ? netlink_getsockopt+0x5c0/0x5c0 [ 2107.452309][ T26] __sys_sendto+0x545/0x700 [ 2107.456651][ T26] ? __ia32_sys_getpeername+0x90/0x90 [ 2107.507137][ T26] ? unlock_page_memcg+0x130/0x130 [ 2107.512276][ T26] __x64_sys_sendto+0xe5/0x100 [ 2107.516871][ T26] do_syscall_64+0x34/0x70 [ 2107.567040][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2107.573011][ T26] RIP: 0033:0x7f46878add33 [ 2107.607008][ T26] RSP: 002b:00007ffe5a01ac78 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2107.615320][ T26] RAX: ffffffffffffffda RBX: 00007f4688592620 RCX: 00007f46878add33 [ 2107.666993][ T26] RDX: 0000000000000020 RSI: 00007f4688592670 RDI: 0000000000000003 [ 2107.674850][ T26] RBP: 0000000000000001 R08: 00007ffe5a01ac94 R09: 000000000000000c [ 2107.747018][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 2107.754940][ T26] R13: 0000000000000000 R14: 00007f4688592670 R15: 0000000000000000 [ 2107.797083][ T26] INFO: task syz-executor:3952 blocked for more than 129 seconds. [ 2107.804856][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2107.877013][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2107.885551][ T26] task:syz-executor state:D stack: 0 pid: 3952 ppid: 3949 flags:0x00004000 [ 2107.947008][ T26] Call Trace: [ 2107.950191][ T26] __schedule+0xbe6/0x1330 [ 2107.954518][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2107.997059][ T26] ? __mutex_add_waiter+0xe4/0x310 [ 2108.002060][ T26] ? atomic_dec_and_mutex_lock+0x1c0/0x1c0 [ 2108.037080][ T26] schedule+0x13d/0x1d0 [ 2108.041301][ T26] schedule_preempt_disabled+0x13/0x20 [ 2108.046587][ T26] __mutex_lock+0x7b8/0xf20 [ 2108.087020][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2108.093672][ T26] ? cap_capable+0x1ce/0x270 [ 2108.147013][ T26] __mutex_lock_slowpath+0xe/0x10 [ 2108.152014][ T26] mutex_lock+0xd6/0x110 [ 2108.156182][ T26] ? mutex_trylock+0xa0/0xa0 [ 2108.197077][ T26] ? ns_capable+0x89/0xe0 [ 2108.201556][ T26] ? netlink_net_capable+0x125/0x160 [ 2108.206772][ T26] rtnetlink_rcv_msg+0x50a/0xc50 [ 2108.247053][ T26] ? is_bpf_text_address+0x172/0x190 [ 2108.252224][ T26] ? rtnetlink_bind+0x80/0x80 [ 2108.256731][ T26] ? arch_stack_walk+0xf3/0x140 [ 2108.307054][ T26] ? stack_trace_save+0x113/0x1c0 [ 2108.311960][ T26] ? stack_trace_snprint+0xf0/0xf0 [ 2108.316899][ T26] ? avc_has_perm+0x14d/0x400 [ 2108.387005][ T26] ? memcpy+0x56/0x70 [ 2108.390876][ T26] ? avc_has_perm+0x275/0x400 [ 2108.395383][ T26] ? __kasan_slab_alloc+0xb1/0xe0 [ 2108.437080][ T26] ? slab_post_alloc_hook+0x61/0x2f0 [ 2108.442259][ T26] ? kmem_cache_alloc+0x168/0x2e0 [ 2108.477055][ T26] ? avc_has_perm_noaudit+0x240/0x240 [ 2108.482467][ T26] ? iov_iter_advance+0x258/0xb20 [ 2108.517100][ T26] netlink_rcv_skb+0x1cf/0x410 [ 2108.521771][ T26] ? rtnetlink_bind+0x80/0x80 [ 2108.526328][ T26] ? netlink_ack+0xb30/0xb30 [ 2108.577114][ T26] ? __netlink_lookup+0x37b/0x3a0 [ 2108.582020][ T26] rtnetlink_rcv+0x1c/0x20 [ 2108.586394][ T26] netlink_unicast+0x8df/0xac0 [ 2108.637082][ T26] ? netlink_detachskb+0x90/0x90 [ 2108.641911][ T26] ? security_netlink_send+0x7b/0xa0 [ 2108.677071][ T26] netlink_sendmsg+0xa46/0xd00 [ 2108.681804][ T26] ? netlink_getsockopt+0x5c0/0x5c0 [ 2108.717197][ T26] ? security_socket_sendmsg+0x82/0xb0 [ 2108.722536][ T26] ? netlink_getsockopt+0x5c0/0x5c0 [ 2108.757075][ T26] __sys_sendto+0x545/0x700 [ 2108.761459][ T26] ? __ia32_sys_getpeername+0x90/0x90 [ 2108.766692][ T26] ? unlock_page_memcg+0x130/0x130 [ 2108.807021][ T26] __x64_sys_sendto+0xe5/0x100 [ 2108.811667][ T26] do_syscall_64+0x34/0x70 [ 2108.815922][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2108.867004][ T26] RIP: 0033:0x7f1172652d33 [ 2108.871286][ T26] RSP: 002b:00007ffc26ab5a28 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2108.927019][ T26] RAX: ffffffffffffffda RBX: 00007f1173337620 RCX: 00007f1172652d33 [ 2108.934861][ T26] RDX: 0000000000000040 RSI: 00007f1173337670 RDI: 0000000000000003 [ 2108.977049][ T26] RBP: 0000000000000001 R08: 00007ffc26ab5a44 R09: 000000000000000c [ 2108.985326][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 2109.057060][ T26] R13: 0000000000000000 R14: 00007f1173337670 R15: 0000000000000000 [ 2109.064965][ T26] INFO: task syz.0.388:4000 blocked for more than 130 seconds. [ 2109.106989][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2109.115691][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2109.187007][ T26] task:syz.0.388 state:D stack: 0 pid: 4000 ppid: 3920 flags:0x00004006 [ 2109.196179][ T26] Call Trace: [ 2109.237079][ T26] __schedule+0xbe6/0x1330 [ 2109.241393][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2109.277202][ T26] ? rcu_segcblist_entrain+0x65/0x290 [ 2109.282450][ T26] ? __kasan_check_write+0x14/0x20 [ 2109.317045][ T26] schedule+0x13d/0x1d0 [ 2109.321100][ T26] schedule_timeout+0xa9/0x360 [ 2109.325701][ T26] ? console_conditional_schedule+0x10/0x10 [ 2109.377042][ T26] ? __prepare_to_swait+0xac/0x130 [ 2109.382047][ T26] wait_for_common+0x2a9/0x440 [ 2109.417100][ T26] ? wait_for_completion+0x20/0x20 [ 2109.422096][ T26] ? mutex_trylock+0xa0/0xa0 [ 2109.426528][ T26] ? find_next_bit+0xc7/0x100 [ 2109.477073][ T26] ? cpumask_next+0x11/0x30 [ 2109.481472][ T26] wait_for_completion+0x18/0x20 [ 2109.486245][ T26] rcu_barrier+0x376/0x400 [ 2109.527008][ T26] netdev_run_todo+0x157/0xdc0 [ 2109.531764][ T26] ? kvfree+0x35/0x40 [ 2109.535617][ T26] ? netdev_refcnt_read+0x1e0/0x1e0 [ 2109.577058][ T26] ? netdev_state_change+0xa3/0x250 [ 2109.582148][ T26] ? netdev_features_change+0x1b0/0x1b0 [ 2109.617068][ T26] ? __tun_detach+0x11d4/0x1510 [ 2109.621810][ T26] ? tun_chr_open+0x530/0x530 [ 2109.626326][ T26] rtnl_unlock+0xe/0x10 [ 2109.707016][ T26] tun_chr_close+0xc4/0x140 [ 2109.711602][ T26] __fput+0x33d/0x7b0 [ 2109.715469][ T26] ____fput+0x15/0x20 [ 2109.747011][ T26] task_work_run+0x129/0x190 [ 2109.751489][ T26] get_signal+0x138d/0x1410 [ 2109.755827][ T26] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2109.797056][ T26] arch_do_signal_or_restart+0xbd/0x17c0 [ 2109.802762][ T26] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2109.847066][ T26] ? kick_process+0xde/0x150 [ 2109.851547][ T26] ? fput+0x1a/0x20 [ 2109.855188][ T26] exit_to_user_mode_loop+0x9b/0xd0 [ 2109.907077][ T26] syscall_exit_to_user_mode+0xa2/0x1a0 [ 2109.912507][ T26] do_syscall_64+0x40/0x70 [ 2109.947031][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2109.952809][ T26] RIP: 0033:0x7f276f93fef9 [ 2109.986989][ T26] RSP: 002b:00007f276e598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2109.995280][ T26] RAX: 0000000000000000 RBX: 00007f276faf8058 RCX: 00007f276f93fef9 [ 2110.057088][ T26] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 000000000000000c [ 2110.065024][ T26] RBP: 00007f276f9b2b76 R08: 0000000000000000 R09: 0000000000000000 [ 2110.117088][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2110.124949][ T26] R13: 0000000000000000 R14: 00007f276faf8058 R15: 00007fffbc3c3bc8 [ 2110.177116][ T26] NMI backtrace for cpu 0 [ 2110.181538][ T26] CPU: 0 PID: 26 Comm: khungtaskd Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2110.192467][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2110.202426][ T26] Call Trace: [ 2110.205570][ T26] dump_stack_lvl+0x1e2/0x24b [ 2110.210091][ T26] ? panic+0x812/0x812 [ 2110.214098][ T26] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2110.219411][ T26] ? rcu_read_unlock_special+0xd8/0x4c0 [ 2110.224946][ T26] ? sched_show_task+0x363/0x540 [ 2110.230306][ T26] ? __rcu_read_unlock+0x90/0x90 [ 2110.235178][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2110.241168][ T26] dump_stack+0x15/0x17 [ 2110.245395][ T26] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 2110.251322][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2110.257215][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2110.262923][ T26] watchdog+0xe5d/0xfd0 [ 2110.267456][ T26] ? hungtask_pm_notify+0x50/0x50 [ 2110.272476][ T26] ? __kasan_check_read+0x11/0x20 [ 2110.277936][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 2110.282706][ T26] kthread+0x34b/0x3d0 [ 2110.287069][ T26] ? hungtask_pm_notify+0x50/0x50 [ 2110.291944][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2110.296382][ T26] ret_from_fork+0x1f/0x30 [ 2110.301025][ T26] Sending NMI from CPU 0 to CPUs 1: [ 2110.310238][ C1] NMI backtrace for cpu 1 [ 2110.310263][ C1] CPU: 1 PID: 3661 Comm: syz.2.352 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2110.310283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2110.310298][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2110.310335][ C1] Code: 00 0f 1f 40 00 55 48 89 e5 4c 8b 45 08 65 48 8b 15 e0 bc 97 7e 65 8b 05 e5 bc 97 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b <83> ba dc 0a 00 00 00 74 52 8b 82 b8 0a 00 00 83 f8 03 75 47 48 8b [ 2110.310349][ C1] RSP: 0018:ffffc900001702e0 EFLAGS: 00000006 [ 2110.310373][ C1] RAX: 0000000000010101 RBX: 0000000000000001 RCX: ffff88810efd3b40 [ 2110.310389][ C1] RDX: ffff88810efd3b40 RSI: 0000000000000002 RDI: 00000000ffffffff [ 2110.310407][ C1] RBP: ffffc900001702e0 R08: ffffffff818bff12 R09: ffffed10267be9f9 [ 2110.310424][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000002 [ 2110.310441][ C1] R13: ffff8881104c2324 R14: 1ffff11022098464 R15: dffffc0000000000 [ 2110.310459][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2110.310473][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2110.310490][ C1] CR2: 00007ffc26ab4ef8 CR3: 000000010e091000 CR4: 00000000003506a0 [ 2110.310506][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2110.310523][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2110.310531][ C1] Call Trace: [ 2110.310539][ C1] [ 2110.310549][ C1] ? show_regs+0x58/0x60 [ 2110.310561][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 2110.310575][ C1] ? __sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2110.310587][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2110.310599][ C1] ? nmi_handle+0xa8/0x280 [ 2110.310620][ C1] ? __sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2110.310632][ C1] ? default_do_nmi+0x69/0x160 [ 2110.310644][ C1] ? exc_nmi+0xad/0x100 [ 2110.310656][ C1] ? end_repeat_nmi+0x16/0x31 [ 2110.310669][ C1] ? perf_pending_event+0x352/0x520 [ 2110.310685][ C1] ? __sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2110.310700][ C1] ? __sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2110.310715][ C1] ? __sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2110.310724][ C1] [ 2110.310733][ C1] [ 2110.310746][ C1] perf_pending_event+0x352/0x520 [ 2110.310759][ C1] irq_work_run_list+0x1c4/0x2c0 [ 2110.310770][ C1] ? irq_work_run+0xf0/0xf0 [ 2110.310783][ C1] ? sched_clock_cpu+0x1b/0x3b0 [ 2110.310795][ C1] irq_work_run+0x69/0xf0 [ 2110.310808][ C1] __sysvec_irq_work+0x66/0x1b0 [ 2110.310819][ C1] sysvec_irq_work+0xb7/0xd0 [ 2110.310832][ C1] asm_sysvec_irq_work+0x12/0x20 [ 2110.310848][ C1] RIP: 0010:unwind_get_return_address+0x63/0x90 [ 2110.310896][ C1] Code: 37 00 74 08 48 89 df e8 2b 32 76 00 48 8b 3b e8 33 1c 14 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 10 32 76 00 48 8b 03 02 31 c0 5b 41 5e 41 5f 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 7c [ 2110.310910][ C1] RSP: 0018:ffffc90000170518 EFLAGS: 00000246 [ 2110.310936][ C1] RAX: ffffffff81a79aca RBX: ffffc90000170588 RCX: 0000000000170501 [ 2110.310955][ C1] RDX: 1ffff9200002e0aa RSI: ffffc900001708f8 RDI: ffffffff81a79aca [ 2110.310974][ C1] RBP: ffffc90000170530 R08: ffffc90000170628 R09: 0000000000000001 [ 2110.310992][ C1] R10: ffffc90000170630 R11: dffffc0000000001 R12: ffff88810efd3b40 [ 2110.311011][ C1] R13: ffffffff8159b780 R14: dffffc0000000000 R15: 1ffff9200002e0b1 [ 2110.311024][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2110.311037][ C1] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 2110.311052][ C1] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 2110.311066][ C1] ? unwind_get_return_address+0x4d/0x90 [ 2110.311078][ C1] arch_stack_walk+0xf3/0x140 [ 2110.311092][ C1] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 2110.311104][ C1] stack_trace_save+0x113/0x1c0 [ 2110.311117][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2110.311131][ C1] ? __kasan_slab_alloc+0x63/0xe0 [ 2110.311144][ C1] ? dst_cow_metrics_generic+0x55/0x1c0 [ 2110.311158][ C1] ? dst_cow_metrics_generic+0x55/0x1c0 [ 2110.311170][ C1] ____kasan_kmalloc+0xdb/0x110 [ 2110.311183][ C1] ? ____kasan_kmalloc+0xdb/0x110 [ 2110.311195][ C1] ? __kasan_kmalloc+0x9/0x10 [ 2110.311208][ C1] __kasan_kmalloc+0x9/0x10 [ 2110.311222][ C1] kmem_cache_alloc_trace+0x18a/0x2e0 [ 2110.311235][ C1] ? dst_cow_metrics_generic+0x55/0x1c0 [ 2110.311249][ C1] dst_cow_metrics_generic+0x55/0x1c0 [ 2110.311261][ C1] icmp6_dst_alloc+0x385/0x560 [ 2110.311272][ C1] ndisc_send_skb+0x25a/0xc00 [ 2110.311283][ C1] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 2110.311292][ C1] ? ndisc_alloc_skb+0xf3/0x2d0 [ 2110.311302][ C1] ? __kmalloc_track_caller+0x184/0x320 [ 2110.311312][ C1] ? __kasan_check_write+0x14/0x20 [ 2110.311321][ C1] ? skb_set_owner_w+0x1fa/0x350 [ 2110.311330][ C1] ? ndisc_send_rs+0x457/0x6a0 [ 2110.311338][ C1] ? memcpy+0x56/0x70 [ 2110.311347][ C1] ndisc_send_rs+0x532/0x6a0 [ 2110.311356][ C1] addrconf_rs_timer+0x2d1/0x600 [ 2110.311367][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2110.311377][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2110.311387][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2110.311398][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2110.311406][ C1] call_timer_fn+0x3b/0x2d0 [ 2110.311417][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2110.311426][ C1] __run_timers+0x72a/0xa10 [ 2110.311436][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2110.311445][ C1] ? calc_index+0x270/0x270 [ 2110.311455][ C1] ? run_timer_softirq+0x24/0xf0 [ 2110.311466][ C1] ? __sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 2110.311475][ C1] run_timer_softirq+0x69/0xf0 [ 2110.311484][ C1] __do_softirq+0x268/0x5bb [ 2110.311493][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2110.311500][ C1] [ 2110.311509][ C1] do_softirq_own_stack+0x60/0x80 [ 2110.311518][ C1] __irq_exit_rcu+0x128/0x150 [ 2110.311526][ C1] irq_exit_rcu+0x9/0x10 [ 2110.311537][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 2110.311548][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2110.311557][ C1] RIP: 0010:find_next_bit+0xe2/0x100 [ 2110.311587][ C1] Code: e8 33 1c 18 ff 4d 39 f4 72 bf e8 19 1a 18 ff eb 19 e8 12 1a 18 ff 48 89 5d d0 f3 48 0f bc 45 d0 4c 01 e0 4c 39 f0 4c 0f 42 f0 <4c> 89 f0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 19 18 [ 2110.311599][ C1] RSP: 0018:ffffc9000379f6d0 EFLAGS: 00000293 [ 2110.311618][ C1] RAX: ffffffff825292c7 RBX: 0000000000000000 RCX: ffff88810efd3b40 [ 2110.311632][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000040 [ 2110.311646][ C1] RBP: ffffc9000379f700 R08: ffffffff825292bd R09: 0000000000000003 [ 2110.311660][ C1] R10: fffff520006f3ee0 R11: dffffc0000000001 R12: 0000000000000040 [ 2110.311674][ C1] R13: dffffc0000000000 R14: 0000000000000008 R15: ffffffff86e3a980 [ 2110.311683][ C1] ? find_next_bit+0xbd/0x100 [ 2110.311692][ C1] ? find_next_bit+0xc7/0x100 [ 2110.311701][ C1] ? cpumask_next+0x11/0x30 [ 2110.311710][ C1] cpumask_next+0x23/0x30 [ 2110.311719][ C1] mnt_get_count+0x114/0x1e0 [ 2110.311729][ C1] mntput_no_expire+0x160/0x6a0 [ 2110.311737][ C1] ? vfs_submount+0xb0/0xb0 [ 2110.311747][ C1] ? namespace_unlock+0x371/0x4d0 [ 2110.311756][ C1] namespace_unlock+0x42e/0x4d0 [ 2110.311766][ C1] ? umount_tree+0xef0/0xef0 [ 2110.311775][ C1] ? __detach_mounts+0x5a0/0x5a0 [ 2110.311785][ C1] ? __kasan_check_write+0x14/0x20 [ 2110.311794][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 2110.311803][ C1] put_mnt_ns+0xaf/0x1e0 [ 2110.311812][ C1] free_nsproxy+0x4c/0x240 [ 2110.311822][ C1] exit_task_namespaces+0xb4/0xd0 [ 2110.311830][ C1] do_exit+0xc7e/0x2a50 [ 2110.311840][ C1] ? put_task_struct+0x80/0x80 [ 2110.311849][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2110.311859][ C1] ? __kasan_check_write+0x14/0x20 [ 2110.311874][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2110.311883][ C1] do_group_exit+0x141/0x310 [ 2110.311892][ C1] get_signal+0x10a0/0x1410 [ 2110.311903][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2110.311913][ C1] arch_do_signal_or_restart+0xbd/0x17c0 [ 2110.311924][ C1] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2110.311933][ C1] ? __kasan_check_write+0x14/0x20 [ 2110.311943][ C1] ? finish_task_switch+0x1bb/0x5a0 [ 2110.311952][ C1] ? __switch_to_asm+0x34/0x60 [ 2110.311962][ C1] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2110.311972][ C1] ? __kasan_check_read+0x11/0x20 [ 2110.311980][ C1] ? schedule+0x154/0x1d0 [ 2110.311991][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2110.312001][ C1] exit_to_user_mode_loop+0x9b/0xd0 [ 2110.312011][ C1] irqentry_exit_to_user_mode+0x4e/0x80 [ 2110.312020][ C1] irqentry_exit+0x12/0x60 [ 2110.312030][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2110.312041][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2110.312049][ C1] RIP: 0033:0x7f37d469bef9 [ 2110.312062][ C1] Code: Unable to access opcode bytes at RIP 0x7f37d469becf. [ 2110.312073][ C1] RSP: 002b:00007f37d3315038 EFLAGS: 00000246 [ 2110.312092][ C1] RAX: 0000000000000000 RBX: 00007f37d4853f80 RCX: 00007f37d469bef9 [ 2110.312106][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 000000000000000b [ 2110.312121][ C1] RBP: 00007f37d470eb76 R08: 0000000000000000 R09: 0000000000000000 [ 2110.312134][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2110.312148][ C1] R13: 0000000000000000 R14: 00007f37d4853f80 R15: 00007ffce2937698 [ 2131.393170][ T26] INFO: task kworker/u4:1:9 blocked for more than 152 seconds. [ 2131.417065][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2131.425777][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2131.487015][ T26] task:kworker/u4:1 state:D stack: 0 pid: 9 ppid: 2 flags:0x00004000 [ 2131.496819][ T26] Workqueue: netns cleanup_net [ 2131.537057][ T26] Call Trace: [ 2131.540257][ T26] __schedule+0xbe6/0x1330 [ 2131.544590][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2131.587041][ T26] ? kthread_data+0x53/0xc0 [ 2131.591426][ T26] ? wq_worker_sleeping+0x63/0x200 [ 2131.596366][ T26] schedule+0x13d/0x1d0 [ 2131.647017][ T26] synchronize_rcu_expedited+0x503/0x660 [ 2131.652529][ T26] ? kasan_set_track+0x4b/0x70 [ 2131.687033][ T26] ? synchronize_rcu+0x120/0x120 [ 2131.691849][ T26] ? kobject_put+0x1e8/0x260 [ 2131.696265][ T26] ? netdev_run_todo+0xc26/0xdc0 [ 2131.747042][ T26] ? rtnl_unlock+0xe/0x10 [ 2131.751429][ T26] ? ip6gre_exit_batch_net+0x5b7/0x600 [ 2131.756711][ T26] ? cleanup_net+0x6e9/0xcb0 [ 2131.797038][ T26] ? process_one_work+0x6dc/0xbd0 [ 2131.801948][ T26] ? worker_thread+0xaea/0x1510 [ 2131.806622][ T26] ? kthread+0x34b/0x3d0 [ 2131.847024][ T26] ? ret_from_fork+0x1f/0x30 [ 2131.851500][ T26] ? rcu_exp_handler+0x360/0x360 [ 2131.856277][ T26] ? io_schedule+0x120/0x120 [ 2131.917045][ T26] synchronize_rcu+0x88/0x120 [ 2131.921596][ T26] ? kvfree_call_rcu+0x650/0x650 [ 2131.926375][ T26] ? __kasan_check_write+0x14/0x20 [ 2131.967046][ T26] ? _raw_spin_lock+0xa4/0x1b0 [ 2131.971702][ T26] ? _raw_spin_trylock_bh+0x190/0x190 [ 2131.976909][ T26] ? __kasan_check_read+0x11/0x20 [ 2132.037038][ T26] synchronize_net+0x34/0x40 [ 2132.041611][ T26] gro_cells_destroy+0x2da/0x350 [ 2132.046485][ T26] ? find_next_bit+0xc7/0x100 [ 2132.087067][ T26] ip6gre_dev_free+0x19/0x60 [ 2132.091543][ T26] ? ip6gre_fill_info+0x10d0/0x10d0 [ 2132.096855][ T26] netdev_run_todo+0xb7a/0xdc0 [ 2132.137088][ T26] ? alloc_netdev_mqs+0xcd0/0xcd0 [ 2132.142202][ T26] ? netdev_refcnt_read+0x1e0/0x1e0 [ 2132.187020][ T26] ? unregister_netdevice_queue+0x258/0x350 [ 2132.192799][ T26] ? list_netdevice+0x4c0/0x4c0 [ 2132.237081][ T26] ? __kasan_check_write+0x14/0x20 [ 2132.242073][ T26] rtnl_unlock+0xe/0x10 [ 2132.246062][ T26] ip6gre_exit_batch_net+0x5b7/0x600 [ 2132.287046][ T26] ? ip6gre_init_net+0x320/0x320 [ 2132.291876][ T26] ? __kasan_check_read+0x11/0x20 [ 2132.296725][ T26] ? ip6gre_init_net+0x320/0x320 [ 2132.337044][ T26] cleanup_net+0x6e9/0xcb0 [ 2132.341343][ T26] ? __kasan_check_write+0x14/0x20 [ 2132.346387][ T26] ? ops_init+0x4a0/0x4a0 [ 2132.407045][ T26] ? read_word_at_a_time+0x12/0x20 [ 2132.412048][ T26] ? strscpy+0x9c/0x260 [ 2132.416034][ T26] process_one_work+0x6dc/0xbd0 [ 2132.457055][ T26] worker_thread+0xaea/0x1510 [ 2132.461636][ T26] kthread+0x34b/0x3d0 [ 2132.465516][ T26] ? worker_clr_flags+0x180/0x180 [ 2132.507057][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2132.511528][ T26] ret_from_fork+0x1f/0x30 [ 2132.515835][ T26] INFO: task jbd2/sda1-8:58 blocked for more than 133 seconds. [ 2132.587526][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2132.596331][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2132.637021][ T26] task:jbd2/sda1-8 state:D stack: 0 pid: 58 ppid: 2 flags:0x00004000 [ 2132.646112][ T26] Call Trace: [ 2132.707045][ T26] __schedule+0xbe6/0x1330 [ 2132.711357][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2132.747065][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2132.752833][ T26] ? prepare_to_wait+0x226/0x290 [ 2132.787009][ T26] schedule+0x13d/0x1d0 [ 2132.791045][ T26] io_schedule+0x8f/0x120 [ 2132.795208][ T26] bit_wait_io+0x14/0xd0 [ 2132.837077][ T26] __wait_on_bit+0xb0/0x180 [ 2132.841452][ T26] ? bit_wait+0xd0/0xd0 [ 2132.845456][ T26] out_of_line_wait_on_bit+0x1ab/0x230 [ 2132.887047][ T26] ? bit_wait+0xd0/0xd0 [ 2132.891083][ T26] ? __wait_on_bit+0x180/0x180 [ 2132.895687][ T26] ? bit_waitqueue+0x30/0x30 [ 2132.937051][ T26] ? _raw_write_trylock+0x1a0/0x1a0 [ 2132.942402][ T26] ? _raw_read_unlock+0x25/0x40 [ 2132.977152][ T26] __wait_on_buffer+0x77/0x80 [ 2132.981824][ T26] jbd2_journal_commit_transaction+0x3b34/0x6b50 [ 2133.027062][ T26] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 2133.033694][ T26] ? __perf_event_task_sched_in+0x219/0x2a0 [ 2133.077064][ T26] ? __kasan_check_write+0x14/0x20 [ 2133.082138][ T26] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2133.117062][ T26] ? perf_sched_cb_inc+0x260/0x260 [ 2133.122051][ T26] ? _raw_spin_lock+0x1b0/0x1b0 [ 2133.126749][ T26] ? __kasan_check_write+0x14/0x20 [ 2133.177076][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2133.182935][ T26] ? del_timer_sync+0x1bc/0x230 [ 2133.217058][ T26] ? __kasan_check_write+0x14/0x20 [ 2133.222044][ T26] ? try_to_del_timer_sync+0x150/0x150 [ 2133.267002][ T26] ? finish_wait+0x17f/0x190 [ 2133.271543][ T26] kjournald2+0x489/0x890 [ 2133.275632][ T26] ? __switch_to_asm+0x34/0x60 [ 2133.327024][ T26] ? jbd2_seq_info_show+0x620/0x620 [ 2133.332102][ T26] ? io_schedule+0x120/0x120 [ 2133.336794][ T26] ? __kasan_check_read+0x11/0x20 [ 2133.377060][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 2133.381876][ T26] kthread+0x34b/0x3d0 [ 2133.385777][ T26] ? jbd2_seq_info_show+0x620/0x620 [ 2133.437086][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2133.441572][ T26] ret_from_fork+0x1f/0x30 [ 2133.445930][ T26] INFO: task syz-executor:274 blocked for more than 134 seconds. [ 2133.507004][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2133.515904][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2133.577046][ T26] task:syz-executor state:D stack: 0 pid: 274 ppid: 272 flags:0x00004000 [ 2133.586426][ T26] Call Trace: [ 2133.627253][ T26] __schedule+0xbe6/0x1330 [ 2133.631566][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2133.667037][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2133.672719][ T26] ? prepare_to_wait+0x226/0x290 [ 2133.707078][ T26] schedule+0x13d/0x1d0 [ 2133.711112][ T26] io_schedule+0x8f/0x120 [ 2133.715280][ T26] bit_wait_io+0x14/0xd0 [ 2133.757086][ T26] __wait_on_bit+0xb0/0x180 [ 2133.761656][ T26] ? bit_wait+0xd0/0xd0 [ 2133.765652][ T26] out_of_line_wait_on_bit+0x1ab/0x230 [ 2133.817080][ T26] ? bit_wait+0xd0/0xd0 [ 2133.821131][ T26] ? __wait_on_bit+0x180/0x180 [ 2133.825817][ T26] ? bit_waitqueue+0x30/0x30 [ 2133.868602][ T26] do_get_write_access+0x124/0xda0 [ 2133.873623][ T26] jbd2_journal_get_write_access+0x195/0x2d0 [ 2133.917169][ T26] __ext4_journal_get_write_access+0x22f/0x490 [ 2133.923203][ T26] ? ext4_get_inode_loc+0x1d0/0x1d0 [ 2133.967044][ T26] ? __ext4_journal_ensure_credits+0x470/0x470 [ 2133.973098][ T26] ext4_reserve_inode_write+0x28d/0x380 [ 2134.017042][ T26] ? ext4_mark_iloc_dirty+0x3e60/0x3e60 [ 2134.022485][ T26] ? ext4_dirty_inode+0xdd/0x120 [ 2134.057092][ T26] __ext4_mark_inode_dirty+0x12e/0x7b0 [ 2134.062446][ T26] ? sb_end_intwrite+0x110/0x110 [ 2134.097080][ T26] ? kmem_cache_alloc+0x168/0x2e0 [ 2134.102065][ T26] ? jbd2__journal_start+0x150/0x710 [ 2134.137240][ T26] ext4_dirty_inode+0xdd/0x120 [ 2134.141899][ T26] ? __ext4_expand_extra_isize+0x3f0/0x3f0 [ 2134.177160][ T26] __mark_inode_dirty+0xd0/0x9d0 [ 2134.181973][ T26] ? memcpy+0x56/0x70 [ 2134.185980][ T26] generic_update_time+0x21f/0x240 [ 2134.237080][ T26] file_update_time+0x3eb/0x460 [ 2134.241810][ T26] ? file_remove_privs+0x570/0x570 [ 2134.246756][ T26] ? bpf_ringbuf_notify+0x30/0x30 [ 2134.287007][ T26] ext4_page_mkwrite+0x267/0x1340 [ 2134.291918][ T26] ? bpf_ringbuf_reserve+0x5c/0x70 [ 2134.296870][ T26] ? ext4_change_inode_journal_flag+0x600/0x600 [ 2134.367152][ T26] wp_page_shared+0x4c0/0x7e0 [ 2134.371718][ T26] do_wp_page+0xb08/0xca0 [ 2134.375904][ T26] handle_pte_fault+0xd59/0x3e30 [ 2134.417090][ T26] ? copy_fpstate_to_sigframe+0xbb0/0xbb0 [ 2134.422705][ T26] ? vmf_allows_speculation+0x6f0/0x6f0 [ 2134.457081][ T26] ? __this_cpu_preempt_check+0x13/0x20 [ 2134.462619][ T26] handle_mm_fault+0x11d6/0x1a10 [ 2134.497072][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 2134.501896][ T26] ? restore_altstack+0x274/0x400 [ 2134.506779][ T26] ? down_read_trylock+0x179/0x1d0 [ 2134.557130][ T26] ? __init_rwsem+0x1c0/0x1c0 [ 2134.561696][ T26] ? vmacache_find+0x21f/0x4d0 [ 2134.566292][ T26] ? find_vma+0x30/0x150 [ 2134.617052][ T26] exc_page_fault+0x2a6/0x5b0 [ 2134.621797][ T26] ? asm_exc_page_fault+0x8/0x30 [ 2134.626565][ T26] asm_exc_page_fault+0x1e/0x30 [ 2134.667040][ T26] RIP: 0033:0x7fc87908c2f5 [ 2134.671342][ T26] RSP: 002b:00007ffebb384030 EFLAGS: 00010202 [ 2134.707156][ T26] RAX: 00007fc876429f48 RBX: 00007ffebb384130 RCX: 0000000000000000 [ 2134.715615][ T26] RDX: 00007fc876429f44 RSI: 0000000000000008 RDI: 00007ffebb384130 [ 2134.787035][ T26] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 2134.794882][ T26] R10: 00007ffebb384110 R11: 0000000000000000 R12: 0000000000000000 [ 2134.837041][ T26] R13: 000000000000c0b8 R14: ffffffffffff3f48 R15: 000000000000c0b8 [ 2134.845043][ T26] NMI backtrace for cpu 0 [ 2134.849277][ T26] CPU: 0 PID: 26 Comm: khungtaskd Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2134.860326][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2134.870221][ T26] Call Trace: [ 2134.873455][ T26] dump_stack_lvl+0x1e2/0x24b [ 2134.877962][ T26] ? panic+0x812/0x812 [ 2134.882134][ T26] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2134.887431][ T26] ? rcu_read_unlock_special+0xd8/0x4c0 [ 2134.892820][ T26] ? sched_show_task+0x363/0x540 [ 2134.897578][ T26] ? __rcu_read_unlock+0x90/0x90 [ 2134.902375][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2134.908268][ T26] dump_stack+0x15/0x17 [ 2134.912252][ T26] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 2134.918067][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2134.923977][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2134.929690][ T26] watchdog+0xe5d/0xfd0 [ 2134.933699][ T26] ? hungtask_pm_notify+0x50/0x50 [ 2134.938555][ T26] ? __kasan_check_read+0x11/0x20 [ 2134.943411][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 2134.948186][ T26] kthread+0x34b/0x3d0 [ 2134.952094][ T26] ? hungtask_pm_notify+0x50/0x50 [ 2134.956957][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2134.961413][ T26] ret_from_fork+0x1f/0x30 [ 2134.965724][ T26] Sending NMI from CPU 0 to CPUs 1: [ 2134.974250][ C1] NMI backtrace for cpu 1 [ 2134.974273][ C1] CPU: 1 PID: 3661 Comm: syz.2.352 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2134.974293][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2134.974308][ C1] RIP: 0010:check_preemption_disabled+0x8/0x100 [ 2134.974344][ C1] Code: cc cc 55 48 89 e5 48 c7 c7 e0 23 60 85 48 c7 c6 20 24 60 85 e8 09 00 00 00 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 45 d8 65 8b [ 2134.974358][ C1] RSP: 0018:ffffc90000170480 EFLAGS: 00000086 [ 2134.974383][ C1] RAX: 1ffffffff0bb88d7 RBX: ffffffff85dc46b8 RCX: dffffc0000000000 [ 2134.974399][ C1] RDX: 0000000000000000 RSI: ffffffff85602420 RDI: ffffffff856023e0 [ 2134.974416][ C1] RBP: ffffc90000170490 R08: 0000000000000000 R09: 0000000000000000 [ 2134.974433][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2134.974450][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8881f71272c0 [ 2134.974468][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2134.974482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2134.974500][ C1] CR2: 00007ffc26ab4ef8 CR3: 000000010e091000 CR4: 00000000003506a0 [ 2134.974516][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2134.974533][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2134.974542][ C1] Call Trace: [ 2134.974550][ C1] [ 2134.974560][ C1] ? show_regs+0x58/0x60 [ 2134.974572][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 2134.974585][ C1] ? check_preemption_disabled+0x8/0x100 [ 2134.974598][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2134.974608][ C1] ? nmi_handle+0xa8/0x280 [ 2134.974621][ C1] ? check_preemption_disabled+0x8/0x100 [ 2134.974635][ C1] ? __sanitizer_cov_trace_const_cmp4+0x25/0x90 [ 2134.974647][ C1] ? default_do_nmi+0x69/0x160 [ 2134.974656][ C1] ? exc_nmi+0xad/0x100 [ 2134.974668][ C1] ? end_repeat_nmi+0x16/0x31 [ 2134.974681][ C1] ? check_preemption_disabled+0x8/0x100 [ 2134.974693][ C1] ? check_preemption_disabled+0x8/0x100 [ 2134.974706][ C1] ? check_preemption_disabled+0x8/0x100 [ 2134.974713][ C1] [ 2134.974722][ C1] [ 2134.974733][ C1] debug_smp_processor_id+0x17/0x20 [ 2134.974745][ C1] irqtime_account_irq+0x69/0x1d0 [ 2134.974756][ C1] irq_enter_rcu+0x76/0xa0 [ 2134.974767][ C1] sysvec_irq_work+0x19/0xd0 [ 2134.974779][ C1] asm_sysvec_irq_work+0x12/0x20 [ 2134.974793][ C1] RIP: 0010:___neigh_create+0xc91/0x1a10 [ 2134.974834][ C1] Code: 3c 20 00 74 08 48 89 df e8 ec c7 df fd 48 8b 1b 48 83 c3 68 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 65 0b 00 00 8b 03 <01> c0 48 98 49 29 c6 48 8b 45 d0 48 8d 58 18 48 89 d8 48 c1 e8 03 [ 2134.974850][ C1] RSP: 0018:ffffc900001705e8 EFLAGS: 00000246 [ 2134.974876][ C1] RAX: 0000000000000bb8 RBX: ffff888146b61b68 RCX: ffff88810efd3b40 [ 2134.974895][ C1] RDX: 0000000000000301 RSI: 0000000000000000 RDI: 0000000000000000 [ 2134.974914][ C1] RBP: ffffc900001706c0 R08: ffffffff83c87db0 R09: ffffed1026adf522 [ 2134.974933][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2134.974951][ C1] R13: ffffffff86d41d60 R14: 000000010002cc65 R15: ffff888116a5d950 [ 2134.974965][ C1] ? ___neigh_create+0xb30/0x1a10 [ 2134.974977][ C1] ? ___neigh_create+0xc32/0x1a10 [ 2134.974991][ C1] ? selinux_ipv6_output+0x10/0x10 [ 2134.975003][ C1] __neigh_create+0x32/0x40 [ 2134.975016][ C1] ip6_finish_output2+0x957/0x1850 [ 2134.975030][ C1] ? __ip6_finish_output+0x780/0x780 [ 2134.975041][ C1] ? sched_clock+0x3a/0x40 [ 2134.975054][ C1] ? sched_clock_cpu+0x1b/0x3b0 [ 2134.975075][ C1] ? irq_work_run+0xf0/0xf0 [ 2134.975086][ C1] ? sched_clock+0x3a/0x40 [ 2134.975100][ C1] __ip6_finish_output+0x5ec/0x780 [ 2134.975113][ C1] ip6_finish_output+0x34/0x1e0 [ 2134.975124][ C1] ? ip6_output+0x481/0x4c0 [ 2134.975135][ C1] ip6_output+0x1f7/0x4c0 [ 2134.975148][ C1] ? ac6_seq_show+0xf0/0xf0 [ 2134.975160][ C1] ? xfrm_lookup+0x38/0x50 [ 2134.975172][ C1] ? ip6_output+0x4c0/0x4c0 [ 2134.975185][ C1] ? icmp6_dst_alloc+0x4f0/0x560 [ 2134.975197][ C1] ndisc_send_skb+0x6e9/0xc00 [ 2134.975210][ C1] ? irq_work_run+0xf0/0xf0 [ 2134.975222][ C1] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 2134.975236][ C1] ? ndisc_error_report+0xc0/0xc0 [ 2134.975249][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 2134.975260][ C1] ? skb_put+0x92/0x210 [ 2134.975273][ C1] ? ndisc_send_rs+0x457/0x6a0 [ 2134.975285][ C1] ndisc_send_rs+0x532/0x6a0 [ 2134.975298][ C1] addrconf_rs_timer+0x2d1/0x600 [ 2134.975313][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2134.975327][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2134.975341][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2134.975356][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2134.975368][ C1] call_timer_fn+0x3b/0x2d0 [ 2134.975383][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2134.975395][ C1] __run_timers+0x72a/0xa10 [ 2134.975409][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2134.975421][ C1] ? calc_index+0x270/0x270 [ 2134.975433][ C1] ? run_timer_softirq+0x24/0xf0 [ 2134.975449][ C1] ? __sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 2134.975462][ C1] run_timer_softirq+0x69/0xf0 [ 2134.975472][ C1] __do_softirq+0x268/0x5bb [ 2134.975483][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2134.975490][ C1] [ 2134.975500][ C1] do_softirq_own_stack+0x60/0x80 [ 2134.975509][ C1] __irq_exit_rcu+0x128/0x150 [ 2134.975518][ C1] irq_exit_rcu+0x9/0x10 [ 2134.975528][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 2134.975539][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2134.975549][ C1] RIP: 0010:find_next_bit+0xe2/0x100 [ 2134.975578][ C1] Code: e8 33 1c 18 ff 4d 39 f4 72 bf e8 19 1a 18 ff eb 19 e8 12 1a 18 ff 48 89 5d d0 f3 48 0f bc 45 d0 4c 01 e0 4c 39 f0 4c 0f 42 f0 <4c> 89 f0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 19 18 [ 2134.975590][ C1] RSP: 0018:ffffc9000379f6d0 EFLAGS: 00000293 [ 2134.975609][ C1] RAX: ffffffff825292c7 RBX: 0000000000000000 RCX: ffff88810efd3b40 [ 2134.975623][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000040 [ 2134.975637][ C1] RBP: ffffc9000379f700 R08: ffffffff825292bd R09: 0000000000000003 [ 2134.975651][ C1] R10: fffff520006f3ee0 R11: dffffc0000000001 R12: 0000000000000040 [ 2134.975665][ C1] R13: dffffc0000000000 R14: 0000000000000008 R15: ffffffff86e3a980 [ 2134.975675][ C1] ? find_next_bit+0xbd/0x100 [ 2134.975684][ C1] ? find_next_bit+0xc7/0x100 [ 2134.975693][ C1] ? cpumask_next+0x11/0x30 [ 2134.975701][ C1] cpumask_next+0x23/0x30 [ 2134.975711][ C1] mnt_get_count+0x114/0x1e0 [ 2134.975720][ C1] mntput_no_expire+0x160/0x6a0 [ 2134.975729][ C1] ? vfs_submount+0xb0/0xb0 [ 2134.975738][ C1] ? namespace_unlock+0x371/0x4d0 [ 2134.975748][ C1] namespace_unlock+0x42e/0x4d0 [ 2134.975757][ C1] ? umount_tree+0xef0/0xef0 [ 2134.975767][ C1] ? __detach_mounts+0x5a0/0x5a0 [ 2134.975776][ C1] ? __kasan_check_write+0x14/0x20 [ 2134.975786][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 2134.975795][ C1] put_mnt_ns+0xaf/0x1e0 [ 2134.975803][ C1] free_nsproxy+0x4c/0x240 [ 2134.975814][ C1] exit_task_namespaces+0xb4/0xd0 [ 2134.975824][ C1] do_exit+0xc7e/0x2a50 [ 2134.975834][ C1] ? put_task_struct+0x80/0x80 [ 2134.975844][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2134.975853][ C1] ? __kasan_check_write+0x14/0x20 [ 2134.975863][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2134.975871][ C1] do_group_exit+0x141/0x310 [ 2134.975880][ C1] get_signal+0x10a0/0x1410 [ 2134.975891][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2134.975901][ C1] arch_do_signal_or_restart+0xbd/0x17c0 [ 2134.975912][ C1] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2134.975922][ C1] ? __kasan_check_write+0x14/0x20 [ 2134.975931][ C1] ? finish_task_switch+0x1bb/0x5a0 [ 2134.975940][ C1] ? __switch_to_asm+0x34/0x60 [ 2134.975951][ C1] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2134.975960][ C1] ? __kasan_check_read+0x11/0x20 [ 2134.975969][ C1] ? schedule+0x154/0x1d0 [ 2134.975979][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2134.975989][ C1] exit_to_user_mode_loop+0x9b/0xd0 [ 2134.975999][ C1] irqentry_exit_to_user_mode+0x4e/0x80 [ 2134.976008][ C1] irqentry_exit+0x12/0x60 [ 2134.976018][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2134.976029][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2134.976037][ C1] RIP: 0033:0x7f37d469bef9 [ 2134.976051][ C1] Code: Unable to access opcode bytes at RIP 0x7f37d469becf. [ 2134.976068][ C1] RSP: 002b:00007f37d3315038 EFLAGS: 00000246 [ 2134.976087][ C1] RAX: 0000000000000000 RBX: 00007f37d4853f80 RCX: 00007f37d469bef9 [ 2134.976101][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 000000000000000b [ 2134.976114][ C1] RBP: 00007f37d470eb76 R08: 0000000000000000 R09: 0000000000000000 [ 2134.976128][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2134.976142][ C1] R13: 0000000000000000 R14: 00007f37d4853f80 R15: 00007ffce2937698 [ 2191.545119][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2191.552810][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2191.560542][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2191.715917][ T3957] device veth0_vlan entered promiscuous mode [ 2191.740897][ T3957] device veth1_macvtap entered promiscuous mode [ 2191.748299][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2191.756156][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2191.815984][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2191.825171][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2191.834119][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.841046][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2191.855565][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2191.864117][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2191.872778][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.879692][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2191.887725][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2191.895976][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2191.905061][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2191.913830][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2191.922548][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2191.931621][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2191.940849][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2191.952850][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2191.992810][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2192.044055][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2192.107870][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2192.377773][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2192.388936][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2192.417619][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2192.563513][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.570546][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.579051][ T4013] device bridge_slave_0 entered promiscuous mode [ 2192.586867][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.594897][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.603974][ T4013] device bridge_slave_1 entered promiscuous mode [ 2193.115332][ T4013] device veth0_vlan entered promiscuous mode [ 2193.140469][ T4013] device veth1_macvtap entered promiscuous mode [ 2193.380741][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.388606][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.396546][ T4014] device bridge_slave_0 entered promiscuous mode [ 2193.404468][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.411377][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.419506][ T4014] device bridge_slave_1 entered promiscuous mode [ 2193.535706][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.542635][ T4014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.549985][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.556982][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.622033][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2193.631505][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2193.639706][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2193.647847][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2193.656414][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2193.665702][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.672612][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.681054][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2193.690122][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2193.699231][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.706106][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.714604][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2193.723612][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2193.732591][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2193.741206][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2193.750153][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2193.759577][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2193.768791][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2193.777417][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2193.786185][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2193.795617][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2193.805286][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2193.814550][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2193.838700][ T3907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.846335][ T3907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.855595][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2193.863691][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2193.872090][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2194.103002][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.110082][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2194.118426][ T4021] device bridge_slave_0 entered promiscuous mode [ 2194.126257][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.133666][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.141938][ T4021] device bridge_slave_1 entered promiscuous mode [ 2194.258743][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.265649][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.272891][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.279814][ T4021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.434244][ T4021] device veth0_vlan entered promiscuous mode [ 2194.464504][ T4021] device veth1_macvtap entered promiscuous mode [ 2194.616675][ T4014] device veth0_vlan entered promiscuous mode [ 2194.648119][ T4014] device veth1_macvtap entered promiscuous mode [ 2195.317301][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2218.741835][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2218.795026][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2218.918764][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2218.927868][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2218.936898][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2218.945450][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2219.111824][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2219.298748][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2219.672926][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2220.659873][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2220.759316][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2222.420592][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2222.618342][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2222.639140][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2222.647244][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2222.655425][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2222.664999][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2223.119475][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2223.233650][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2223.242394][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.249301][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.256615][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2223.417229][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.424221][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.444343][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2223.453039][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2224.405561][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.880699][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.058407][ T4023] device bridge_slave_0 entered promiscuous mode [ 2225.208408][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.215326][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.658181][ T4023] device bridge_slave_1 entered promiscuous mode [ 2246.207017][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2246.215741][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2246.243405][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2246.252748][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2246.297542][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2246.304610][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.312907][ T4022] device bridge_slave_0 entered promiscuous mode [ 2246.321269][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2246.328458][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.336476][ T4022] device bridge_slave_1 entered promiscuous mode [ 2246.458007][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2246.464992][ T4022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2246.472242][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2246.479146][ T4022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2250.004462][ T4023] device veth0_vlan entered promiscuous mode [ 2250.032578][ T4023] device veth1_macvtap entered promiscuous mode [ 2251.378855][ T3907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.389363][ T3907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.399539][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2251.409375][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2251.418339][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2251.427311][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2251.436062][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2251.444221][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2251.452474][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2251.461276][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2251.469213][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2251.476831][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2251.485883][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2251.494572][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2251.501686][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2251.509454][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2251.518388][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2251.526732][ T3907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2251.533664][ T3907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2251.541707][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2251.550206][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2251.559248][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2251.568074][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2251.708507][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2277.284718][ T4090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.307419][ T4090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.315389][ T4090] device bridge_slave_0 entered promiscuous mode [ 2277.338663][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.345551][ T4090] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.368070][ T4090] device bridge_slave_1 entered promiscuous mode [ 2277.510998][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.517924][ T4090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2277.525090][ T4090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.532019][ T4090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2277.660518][ T4090] device veth0_vlan entered promiscuous mode [ 2277.687724][ T4090] device veth1_macvtap entered promiscuous mode [ 2278.108664][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2278.116784][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2278.128310][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2278.140430][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2278.149478][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2278.159039][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2278.168563][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2278.177269][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2278.186105][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2278.195324][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2278.203243][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2278.211322][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2282.250398][ T4099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.257340][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.265261][ T4099] device bridge_slave_0 entered promiscuous mode [ 2282.273739][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.280983][ T4099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.288918][ T4099] device bridge_slave_1 entered promiscuous mode [ 2282.408408][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.415310][ T4099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2282.422623][ T4099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.429532][ T4099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2282.584890][ T4099] device veth0_vlan entered promiscuous mode [ 2282.612090][ T4099] device veth1_macvtap entered promiscuous mode [ 2282.901798][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2282.910480][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2282.919845][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2282.940577][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2282.950713][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2282.960595][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2282.969300][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2282.978031][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2282.986746][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2282.996387][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2283.004597][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2283.012648][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2283.335281][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.342590][ T4088] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.350661][ T4088] device bridge_slave_0 entered promiscuous mode [ 2283.359171][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.366051][ T4088] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.374175][ T4088] device bridge_slave_1 entered promiscuous mode [ 2283.510256][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.517177][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2283.524393][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.531846][ T4088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2284.628476][ T4088] device veth0_vlan entered promiscuous mode [ 2284.676981][ T4088] device veth1_macvtap entered promiscuous mode [ 2285.916833][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.923979][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.932668][ T4100] device bridge_slave_0 entered promiscuous mode [ 2286.021241][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.028932][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.037908][ T4097] device bridge_slave_0 entered promiscuous mode [ 2286.045867][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2286.053565][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.062295][ T4097] device bridge_slave_1 entered promiscuous mode [ 2286.187318][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2286.194267][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2286.201556][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.208461][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2286.349269][ T4097] device veth0_vlan entered promiscuous mode [ 2286.377529][ T4097] device veth1_macvtap entered promiscuous mode [ 2330.777526][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2330.785898][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2331.037280][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2331.045993][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2333.087828][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2333.099368][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2345.072049][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2345.299465][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2345.478347][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2345.877653][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2346.068336][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2346.237647][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2346.538174][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2346.788825][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2347.018095][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2369.688699][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2369.698116][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2369.708172][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2369.716522][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2369.725329][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2369.734315][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2369.743271][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2369.751332][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2369.759464][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2369.787380][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2369.794530][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2369.815622][ T4100] device bridge_slave_1 entered promiscuous mode [ 2377.519103][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.526009][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.535606][ T4183] device bridge_slave_0 entered promiscuous mode [ 2377.582618][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.590938][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 2377.599763][ T4183] device bridge_slave_1 entered promiscuous mode [ 2377.850453][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.858636][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.866577][ T4184] device bridge_slave_0 entered promiscuous mode [ 2377.874840][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.882345][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.891251][ T4175] device bridge_slave_0 entered promiscuous mode [ 2377.898880][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.905755][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.914944][ T4179] device bridge_slave_0 entered promiscuous mode [ 2377.931303][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.938577][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.946537][ T4178] device bridge_slave_0 entered promiscuous mode [ 2377.954372][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.962073][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 2377.970398][ T4184] device bridge_slave_1 entered promiscuous mode [ 2377.977803][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.984679][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 2377.996635][ T4175] device bridge_slave_1 entered promiscuous mode [ 2378.004840][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.012410][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 2378.020806][ T4179] device bridge_slave_1 entered promiscuous mode [ 2378.039727][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.046617][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 2378.055483][ T4178] device bridge_slave_1 entered promiscuous mode [ 2378.208057][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.215135][ T4183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2378.222508][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2378.229426][ T4183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2378.747484][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 2378.763674][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 2379.060358][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2379.072026][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2379.080319][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2379.089350][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2379.098268][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.105140][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2379.113144][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2379.122278][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2379.131081][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.137989][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2379.364685][ T4178] device veth0_vlan entered promiscuous mode [ 2379.391944][ T4178] device veth1_macvtap entered promiscuous mode [ 2379.499193][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2379.508374][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2379.517152][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2379.524859][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2379.533077][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2379.541857][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2379.549676][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2379.557935][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2379.566568][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2379.575567][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.582686][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2379.590247][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2379.599108][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2379.609379][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.616266][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2379.624107][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2379.632494][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2379.641426][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2379.650297][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2379.659566][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2379.668476][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2379.677380][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2380.288835][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2380.297857][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2380.306744][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2380.315786][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2380.538540][ T4183] device veth0_vlan entered promiscuous mode [ 2380.567516][ T4183] device veth1_macvtap entered promiscuous mode [ 2380.818366][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2380.832168][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2380.847686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2380.855828][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2380.868354][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2380.887077][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2380.895462][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2380.903691][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2380.912803][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2380.927677][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2380.936167][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2380.955385][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2380.963366][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2380.981522][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2380.994174][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2381.204939][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 2381.212177][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 2382.471834][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2382.480664][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2382.489694][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2382.496687][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2382.683631][ T4184] device veth0_vlan entered promiscuous mode [ 2385.333634][ T4184] device veth1_macvtap entered promiscuous mode [ 2419.960993][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2420.301058][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2420.460236][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2420.565935][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2420.665834][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2420.777736][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2420.869586][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2420.968314][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.975303][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2421.135122][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2421.215556][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2421.310174][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2421.317121][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2421.540242][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2421.639253][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2421.727851][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2421.819401][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2422.080441][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2422.209145][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2422.295701][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2422.464230][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2422.541581][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2422.656107][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2422.801147][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2422.877967][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2422.984378][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2423.087931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2423.207447][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2423.297499][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2425.257539][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2425.359500][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2425.366395][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2425.719707][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2444.170635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2444.768388][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2474.307034][ T4237] ÿÿÿÿÿÿ: renamed from vlan1 [ 2494.305021][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2494.312002][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2494.320478][ T4248] device bridge_slave_0 entered promiscuous mode [ 2494.328526][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2494.335398][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2494.343946][ T4248] device bridge_slave_1 entered promiscuous mode [ 2494.464253][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2494.471177][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2494.478386][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2494.485365][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2494.609053][ T4248] device veth0_vlan entered promiscuous mode [ 2494.635480][ T4248] device veth1_macvtap entered promiscuous mode [ 2494.806005][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2494.814178][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2494.822873][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2494.849196][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2494.858313][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2494.867793][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2494.876156][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2494.885019][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2494.894074][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2494.903023][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2494.911038][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2494.919418][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2496.877588][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2496.884586][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 2496.892719][ T4247] device bridge_slave_0 entered promiscuous mode [ 2496.901190][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2496.908156][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 2496.916281][ T4247] device bridge_slave_1 entered promiscuous mode [ 2497.038761][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2497.045749][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2497.052980][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2497.059876][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2497.127155][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2497.143837][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2497.154044][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2497.324260][ T4247] device veth0_vlan entered promiscuous mode [ 2497.350067][ T4247] device veth1_macvtap entered promiscuous mode [ 2497.423021][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2497.431564][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2497.440269][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2497.448806][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2497.457552][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2497.466155][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2497.476727][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2497.485310][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2497.494816][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2497.503762][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2497.512663][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2497.521540][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2497.530688][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2497.539886][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2497.549353][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2499.352402][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2499.359333][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.367468][ T4257] device bridge_slave_0 entered promiscuous mode [ 2499.375270][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 2499.382178][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.390370][ T4257] device bridge_slave_1 entered promiscuous mode [ 2499.830483][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2499.841012][ T1429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2507.644999][ T4257] device veth0_vlan entered promiscuous mode [ 2507.673489][ T4257] device veth1_macvtap entered promiscuous mode [ 2507.858288][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2507.867323][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2507.876486][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2507.885032][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2507.893534][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2507.902363][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2507.911347][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2507.919029][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2507.927120][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2507.935853][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2507.943769][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2507.951719][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2507.960559][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2507.969140][ T4147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2507.976130][ T4147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2507.983564][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2507.992411][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2508.001085][ T4147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.007979][ T4147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2508.041224][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.048246][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.056385][ T4295] device bridge_slave_0 entered promiscuous mode [ 2508.064762][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.072032][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.080308][ T4295] device bridge_slave_1 entered promiscuous mode [ 2508.206107][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.213031][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2508.220341][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.227257][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2508.417844][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.424822][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.434863][ T4256] device bridge_slave_0 entered promiscuous mode [ 2508.442981][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.456627][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.465931][ T4256] device bridge_slave_1 entered promiscuous mode [ 2508.710472][ T4256] device veth0_vlan entered promiscuous mode [ 2508.740448][ T4256] device veth1_macvtap entered promiscuous mode [ 2508.835774][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2508.847889][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2508.860178][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2510.893806][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2510.902176][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2510.911949][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2510.949413][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2510.957569][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2510.968794][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2510.978211][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2510.987646][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2510.996044][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2511.004989][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2511.014145][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2511.023116][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2511.031119][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2511.039367][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2511.048361][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2511.056025][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2511.064298][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2511.073359][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2511.082063][ T4147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2511.088978][ T4147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2511.096817][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2511.105498][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2511.114372][ T4147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2511.121285][ T4147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2511.129416][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2511.144296][ T4295] device veth0_vlan entered promiscuous mode [ 2611.226967][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2611.233466][ C1] rcu: 1-....: (9999 ticks this GP) idle=5ca/1/0x4000000000000000 softirq=36673/36673 fqs=3599 last_accelerate: 5f5f/8670 dyntick_enabled: 1 [ 2611.247660][ C1] (t=10001 jiffies g=39905 q=295776) [ 2611.252872][ C1] NMI backtrace for cpu 1 [ 2611.257035][ C1] CPU: 1 PID: 3661 Comm: syz.2.352 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2611.268054][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2611.277934][ C1] Call Trace: [ 2611.281056][ C1] [ 2611.283775][ C1] dump_stack_lvl+0x1e2/0x24b [ 2611.288271][ C1] ? panic+0x812/0x812 [ 2611.292323][ C1] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2611.297611][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2611.303042][ C1] ? vprintk_func+0x19d/0x1e0 [ 2611.307542][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2611.312220][ C1] ? printk+0xd1/0x111 [ 2611.316153][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2611.322212][ C1] dump_stack+0x15/0x17 [ 2611.326294][ C1] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 2611.332198][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2611.338151][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2611.343827][ C1] rcu_dump_cpu_stacks+0x199/0x2b0 [ 2611.348951][ C1] rcu_sched_clock_irq+0xf8a/0x1890 [ 2611.353983][ C1] ? rcutree_dead_cpu+0x340/0x340 [ 2611.358839][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 2611.363873][ C1] update_process_times+0x198/0x200 [ 2611.368912][ C1] tick_sched_timer+0x188/0x240 [ 2611.373591][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 2611.378986][ C1] __hrtimer_run_queues+0x3d7/0xa50 [ 2611.384017][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 2611.388966][ C1] hrtimer_interrupt+0x39a/0x8b0 [ 2611.393751][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2611.399467][ C1] sysvec_apic_timer_interrupt+0xba/0xe0 [ 2611.404927][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2611.410740][ C1] RIP: 0010:call_timer_fn+0x3b/0x2d0 [ 2611.415859][ C1] Code: 49 89 f6 49 89 ff e8 c4 c9 0f 00 65 44 8b 2d 68 8a a7 7e 0f 1f 44 00 00 e8 b2 c9 0f 00 41 81 e5 ff ff ff 7f 4c 89 ff 41 ff d6 <0f> 1f 44 00 00 e8 9b c9 0f 00 65 8b 1d 40 8a a7 7e 81 e3 ff ff ff [ 2611.435330][ C1] RSP: 0018:ffffc90000170d80 EFLAGS: 00000246 [ 2611.441224][ C1] RAX: 68676d657ae7f600 RBX: ffff8881f7147840 RCX: ffff88810efd3b40 [ 2611.449014][ C1] RDX: 0000000000000101 RSI: 000000000000000b RDI: 0000000000000000 [ 2611.456830][ C1] RBP: ffffc90000170db0 R08: ffffffff84283b96 R09: ffffed1022354922 [ 2611.464642][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000100036c00 [ 2611.472454][ C1] R13: 0000000000000101 R14: ffffffff84283770 R15: ffff888111aa4a68 [ 2611.480287][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2611.486181][ C1] ? addrconf_rs_timer+0x426/0x600 [ 2611.491137][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2611.497022][ C1] __run_timers+0x72a/0xa10 [ 2611.501386][ C1] ? calc_index+0x270/0x270 [ 2611.505889][ C1] run_timer_softirq+0x69/0xf0 [ 2611.510480][ C1] __do_softirq+0x268/0x5bb [ 2611.514822][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2611.519662][ C1] [ 2611.522457][ C1] do_softirq_own_stack+0x60/0x80 [ 2611.527320][ C1] __irq_exit_rcu+0x128/0x150 [ 2611.531849][ C1] irq_exit_rcu+0x9/0x10 [ 2611.535913][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 2611.541395][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2611.547222][ C1] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 2611.552949][ C1] Code: 4c 89 e7 e8 f0 f9 f6 fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 44 c5 97 fc fb bf 01 00 00 00 89 e6 ff ff fa bf 01 00 00 00 e8 ce c6 97 fc 65 48 8b 1d 56 20 [ 2611.572619][ C1] RSP: 0018:ffffc9000379f140 EFLAGS: 00000246 [ 2611.578532][ C1] RAX: 1ffff11021dfa8ae RBX: 1ffff920006f3e2c RCX: ffffffff84b27500 [ 2611.586474][ C1] RDX: 1ffff11021dfa76c RSI: 0000000000000000 RDI: 0000000000000001 [ 2611.594481][ C1] RBP: ffffc9000379f1c0 R08: ffffffff87084048 R09: ffffffff87084058 [ 2611.602729][ C1] R10: ffffffff87084050 R11: ffffffff87084043 R12: ffffc9000379f160 [ 2611.610608][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006f3e28 [ 2611.618716][ C1] ? _raw_write_unlock_irq+0x20/0x60 [ 2611.623823][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 2611.629562][ C1] ? __irq_exit_rcu+0x40/0x150 [ 2611.634148][ C1] irqentry_exit+0x4f/0x60 [ 2611.638401][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2611.643874][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2611.649686][ C1] RIP: 0010:update_stack_state+0x3cc/0x460 [ 2611.655319][ C1] Code: 39 06 74 0d 48 89 df e8 42 fc ff ff 49 89 c6 eb 19 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 67 26 76 00 4c 8b 33 <48> 8b 5d d0 48 83 c3 48 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 [ 2611.674761][ C1] RSP: 0018:ffffc9000379f2b0 EFLAGS: 00000246 [ 2611.680665][ C1] RAX: 1ffff920006f3ee7 RBX: ffffc9000379f738 RCX: 1ffff920006f3e8b [ 2611.688474][ C1] RDX: 1ffff920006f3e82 RSI: ffffc9000379f730 RDI: ffffc9000379f458 [ 2611.696287][ C1] RBP: ffffc9000379f368 R08: ffffc9000379f4e8 R09: 0000000000000000 [ 2611.704100][ C1] R10: ffffc9000379f4f0 R11: dffffc0000000001 R12: 1ffff920006f3e88 [ 2611.711908][ C1] R13: 0000000000000000 R14: ffffffff81a41d7e R15: dffffc0000000000 [ 2611.719730][ C1] ? free_the_page+0x9e/0x370 [ 2611.724276][ C1] unwind_next_frame+0x3cb/0x700 [ 2611.729017][ C1] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2611.734492][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2611.739341][ C1] arch_stack_walk+0x10d/0x140 [ 2611.743956][ C1] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2611.749417][ C1] stack_trace_save+0x113/0x1c0 [ 2611.754105][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2611.759139][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2611.764078][ C1] ? sched_clock+0x3a/0x40 [ 2611.768345][ C1] save_stack+0x97/0x240 [ 2611.772418][ C1] ? __reset_page_owner+0x150/0x150 [ 2611.777455][ C1] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2611.782925][ C1] ? sched_clock+0x3a/0x40 [ 2611.787174][ C1] ? sched_clock_cpu+0x1b/0x3b0 [ 2611.791867][ C1] ? lookup_page_ext+0x74/0x120 [ 2611.796557][ C1] __reset_page_owner+0x36/0x150 [ 2611.801321][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 2611.806014][ C1] free_unref_page_prepare+0x2ae/0x2d0 [ 2611.811310][ C1] free_the_page+0x9e/0x370 [ 2611.815651][ C1] ? irq_exit_rcu+0x9/0x10 [ 2611.819904][ C1] ? get_zeroed_page+0x40/0x40 [ 2611.824511][ C1] __free_pages+0x67/0xc0 [ 2611.828664][ C1] __vunmap+0x7bc/0x8f0 [ 2611.832661][ C1] ? kcov_open+0x60/0x60 [ 2611.836741][ C1] vfree+0x5c/0x80 [ 2611.840290][ C1] kcov_close+0x2b/0x50 [ 2611.844296][ C1] __fput+0x33d/0x7b0 [ 2611.848116][ C1] ____fput+0x15/0x20 [ 2611.851927][ C1] task_work_run+0x129/0x190 [ 2611.856357][ C1] do_exit+0xc83/0x2a50 [ 2611.860355][ C1] ? put_task_struct+0x80/0x80 [ 2611.864943][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2611.870085][ C1] ? __kasan_check_write+0x14/0x20 [ 2611.875017][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2611.879969][ C1] do_group_exit+0x141/0x310 [ 2611.884395][ C1] get_signal+0x10a0/0x1410 [ 2611.889181][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2611.895069][ C1] arch_do_signal_or_restart+0xbd/0x17c0 [ 2611.900537][ C1] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2611.906274][ C1] ? __kasan_check_write+0x14/0x20 [ 2611.911211][ C1] ? finish_task_switch+0x1bb/0x5a0 [ 2611.916260][ C1] ? __switch_to_asm+0x34/0x60 [ 2611.920867][ C1] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2611.926176][ C1] ? __kasan_check_read+0x11/0x20 [ 2611.931093][ C1] ? schedule+0x154/0x1d0 [ 2611.935269][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2611.941177][ C1] exit_to_user_mode_loop+0x9b/0xd0 [ 2611.946197][ C1] irqentry_exit_to_user_mode+0x4e/0x80 [ 2611.951575][ C1] irqentry_exit+0x12/0x60 [ 2611.955831][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2611.961385][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2611.967199][ C1] RIP: 0033:0x7f37d469bef9 [ 2611.971440][ C1] Code: Unable to access opcode bytes at RIP 0x7f37d469becf. [ 2611.978733][ C1] RSP: 002b:00007f37d3315038 EFLAGS: 00000246 [ 2611.984635][ C1] RAX: 0000000000000000 RBX: 00007f37d4853f80 RCX: 00007f37d469bef9 [ 2611.992453][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 000000000000000b [ 2612.000263][ C1] RBP: 00007f37d470eb76 R08: 0000000000000000 R09: 0000000000000000 [ 2612.008074][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2612.015995][ C1] R13: 0000000000000000 R14: 00007f37d4853f80 R15: 00007ffce2937698 [ 2615.237009][ T3581] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-... } 10399 jiffies s: 30901 root: 0x2/. [ 2615.267037][ T3581] rcu: blocking rcu_node structures: [ 2615.272200][ T3581] Task dump for CPU 1: [ 2615.276111][ T3581] task:syz.2.352 state:R running task stack: 0 pid: 3661 ppid: 3503 flags:0x1000400e [ 2615.286750][ T3581] Call Trace: [ 2615.289909][ T3581] ? _raw_write_unlock_irq+0x20/0x60 [ 2615.294966][ T3581] ? preempt_schedule_irq+0xc2/0x140 [ 2615.300117][ T3581] ? preempt_schedule_notrace+0x140/0x140 [ 2615.305649][ T3581] ? __irq_exit_rcu+0x40/0x150 [ 2615.310275][ T3581] ? irqentry_exit+0x4f/0x60 [ 2615.314674][ T3581] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2615.320382][ T3581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2615.326396][ T3581] ? free_the_page+0x9e/0x370 [ 2615.330958][ T3581] ? update_stack_state+0x3cc/0x460 [ 2615.335973][ T3581] ? unwind_next_frame+0x3cb/0x700 [ 2615.340922][ T3581] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2615.346364][ T3581] ? stack_trace_save+0x1c0/0x1c0 [ 2615.351276][ T3581] ? arch_stack_walk+0x10d/0x140 [ 2615.356002][ T3581] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2615.361496][ T3581] ? stack_trace_save+0x113/0x1c0 [ 2615.366413][ T3581] ? kvm_sched_clock_read+0x18/0x40 [ 2615.371508][ T3581] ? stack_trace_snprint+0xf0/0xf0 [ 2615.376431][ T3581] ? sched_clock+0x3a/0x40 [ 2615.380710][ T3581] ? save_stack+0x97/0x240 [ 2615.384900][ T3581] ? __reset_page_owner+0x150/0x150 [ 2615.389960][ T3581] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2615.395418][ T3581] ? sched_clock+0x3a/0x40 [ 2615.399689][ T3581] ? sched_clock_cpu+0x1b/0x3b0 [ 2615.404352][ T3581] ? lookup_page_ext+0x74/0x120 [ 2615.409079][ T3581] ? __reset_page_owner+0x36/0x150 [ 2615.413976][ T3581] ? _raw_spin_unlock+0x4d/0x70 [ 2615.418785][ T3581] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2615.424216][ T3581] ? free_the_page+0x9e/0x370 [ 2615.428777][ T3581] ? irq_exit_rcu+0x9/0x10 [ 2615.432982][ T3581] ? get_zeroed_page+0x40/0x40 [ 2615.437673][ T3581] ? __free_pages+0x67/0xc0 [ 2615.442044][ T3581] ? __vunmap+0x7bc/0x8f0 [ 2615.446261][ T3581] ? kcov_open+0x60/0x60 [ 2615.450318][ T3581] ? vfree+0x5c/0x80 [ 2615.454007][ T3581] ? kcov_close+0x2b/0x50 [ 2615.458202][ T3581] ? __fput+0x33d/0x7b0 [ 2615.462179][ T3581] ? ____fput+0x15/0x20 [ 2615.466169][ T3581] ? task_work_run+0x129/0x190 [ 2615.470832][ T3581] ? do_exit+0xc83/0x2a50 [ 2615.474942][ T3581] ? put_task_struct+0x80/0x80 [ 2615.479565][ T3581] ? kvm_sched_clock_read+0x18/0x40 [ 2615.484599][ T3581] ? __kasan_check_write+0x14/0x20 [ 2615.489556][ T3581] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2615.494475][ T3581] ? do_group_exit+0x141/0x310 [ 2615.499121][ T3581] ? get_signal+0x10a0/0x1410 [ 2615.503591][ T3581] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2615.509516][ T3581] ? arch_do_signal_or_restart+0xbd/0x17c0 [ 2615.515123][ T3581] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2615.520893][ T3581] ? __kasan_check_write+0x14/0x20 [ 2615.525804][ T3581] ? finish_task_switch+0x1bb/0x5a0 [ 2615.530887][ T3581] ? __switch_to_asm+0x34/0x60 [ 2615.535437][ T3581] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2615.540786][ T3581] ? __kasan_check_read+0x11/0x20 [ 2615.545587][ T3581] ? schedule+0x154/0x1d0 [ 2615.549779][ T3581] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2615.555685][ T3581] ? exit_to_user_mode_loop+0x9b/0xd0 [ 2615.560921][ T3581] ? irqentry_exit_to_user_mode+0x4e/0x80 [ 2615.566576][ T3581] ? irqentry_exit+0x12/0x60 [ 2615.571024][ T3581] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2615.576627][ T3581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2751.163488][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.2.352:3661] [ 2751.171500][ C1] Modules linked in: [ 2751.175273][ C1] CPU: 1 PID: 3661 Comm: syz.2.352 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2751.186271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2751.196195][ C1] RIP: 0010:dst_alloc+0x1e8/0x590 [ 2751.201119][ C1] Code: f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 12 4c 89 f7 e8 a5 02 e0 fd 48 b9 00 00 00 00 00 fc ff df 49 8b 06 <65> ff 00 eb 1c e8 8e 68 a2 fd 45 31 e4 e9 50 02 00 00 e8 81 68 a2 [ 2751.221082][ C1] RSP: 0018:ffffc90000170948 EFLAGS: 00000246 [ 2751.226971][ C1] RAX: 0000607e08202fec RBX: ffff88812b88f780 RCX: dffffc0000000000 [ 2751.234783][ C1] RDX: 0000000000000101 RSI: 0000000000000000 RDI: ffff88812b88f870 [ 2751.242595][ C1] RBP: ffffc90000170988 R08: 0000000000000140 R09: ffff88812b88f780 [ 2751.250419][ C1] R10: 00000000e2d801db R11: 000000008eff2b18 R12: ffff88812b88f780 [ 2751.258228][ C1] R13: 0000000000000000 R14: ffff888115f804d0 R15: ffff88813bdbc1c0 [ 2751.266142][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2751.274985][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2751.281415][ C1] CR2: ffffffffde000000 CR3: 000000000660f000 CR4: 00000000003506a0 [ 2751.289228][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2751.297030][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2751.304835][ C1] Call Trace: [ 2751.307961][ C1] [ 2751.310679][ C1] ? show_regs+0x58/0x60 [ 2751.314754][ C1] ? watchdog_timer_fn+0x471/0x590 [ 2751.320069][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 2751.325172][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 2751.330389][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 2751.335362][ C1] ? clockevents_program_event+0x21b/0x2c0 [ 2751.340976][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 2751.345947][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2751.351837][ C1] ? sysvec_apic_timer_interrupt+0xba/0xe0 [ 2751.357460][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2751.363472][ C1] ? dst_alloc+0x1e8/0x590 [ 2751.367699][ C1] ? dst_alloc+0x1b5/0x590 [ 2751.372043][ C1] icmp6_dst_alloc+0xfc/0x560 [ 2751.376557][ C1] ? security_sk_classify_flow+0x7a/0x90 [ 2751.382038][ C1] ndisc_send_skb+0x25a/0xc00 [ 2751.386552][ C1] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 2751.391320][ C1] ? ndisc_alloc_skb+0xf3/0x2d0 [ 2751.396009][ C1] ? __kmalloc_track_caller+0x184/0x320 [ 2751.401390][ C1] ? __kasan_check_write+0x14/0x20 [ 2751.406323][ C1] ? skb_set_owner_w+0x1fa/0x350 [ 2751.411100][ C1] ? ndisc_send_rs+0x457/0x6a0 [ 2751.415702][ C1] ? memcpy+0x56/0x70 [ 2751.419761][ C1] ndisc_send_rs+0x532/0x6a0 [ 2751.424190][ C1] addrconf_rs_timer+0x2d1/0x600 [ 2751.428968][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2751.434871][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2751.439819][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2751.445456][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2751.451363][ C1] call_timer_fn+0x3b/0x2d0 [ 2751.455707][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 2751.461611][ C1] __run_timers+0x72a/0xa10 [ 2751.465944][ C1] ? calc_index+0x270/0x270 [ 2751.470290][ C1] run_timer_softirq+0x69/0xf0 [ 2751.474883][ C1] __do_softirq+0x268/0x5bb [ 2751.479238][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2751.484055][ C1] [ 2751.486860][ C1] do_softirq_own_stack+0x60/0x80 [ 2751.491716][ C1] __irq_exit_rcu+0x128/0x150 [ 2751.496242][ C1] irq_exit_rcu+0x9/0x10 [ 2751.500307][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 2751.505776][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2751.511589][ C1] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 2751.517317][ C1] Code: 4c 89 e7 e8 f0 f9 f6 fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 44 c5 97 fc fb bf 01 00 00 00 89 e6 ff ff fa bf 01 00 00 00 e8 ce c6 97 fc 65 48 8b 1d 56 20 [ 2751.536759][ C1] RSP: 0018:ffffc9000379f140 EFLAGS: 00000246 [ 2751.542672][ C1] RAX: 1ffff11021dfa8ae RBX: 1ffff920006f3e2c RCX: ffffffff84b27500 [ 2751.550472][ C1] RDX: 1ffff11021dfa76c RSI: 0000000000000000 RDI: 0000000000000001 [ 2751.558290][ C1] RBP: ffffc9000379f1c0 R08: ffffffff87084048 R09: ffffffff87084058 [ 2751.566179][ C1] R10: ffffffff87084050 R11: ffffffff87084043 R12: ffffc9000379f160 [ 2751.573989][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006f3e28 [ 2751.581845][ C1] ? _raw_write_unlock_irq+0x20/0x60 [ 2751.586943][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 2751.592497][ C1] ? __irq_exit_rcu+0x40/0x150 [ 2751.597096][ C1] irqentry_exit+0x4f/0x60 [ 2751.601441][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2751.606903][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2751.612719][ C1] RIP: 0010:update_stack_state+0x3cc/0x460 [ 2751.618353][ C1] Code: 39 06 74 0d 48 89 df e8 42 fc ff ff 49 89 c6 eb 19 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 67 26 76 00 4c 8b 33 <48> 8b 5d d0 48 83 c3 48 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 [ 2751.637908][ C1] RSP: 0018:ffffc9000379f2b0 EFLAGS: 00000246 [ 2751.643798][ C1] RAX: 1ffff920006f3ee7 RBX: ffffc9000379f738 RCX: 1ffff920006f3e8b [ 2751.651616][ C1] RDX: 1ffff920006f3e82 RSI: ffffc9000379f730 RDI: ffffc9000379f458 [ 2751.659435][ C1] RBP: ffffc9000379f368 R08: ffffc9000379f4e8 R09: 0000000000000000 [ 2751.667238][ C1] R10: ffffc9000379f4f0 R11: dffffc0000000001 R12: 1ffff920006f3e88 [ 2751.675044][ C1] R13: 0000000000000000 R14: ffffffff81a41d7e R15: dffffc0000000000 [ 2751.682876][ C1] ? free_the_page+0x9e/0x370 [ 2751.687419][ C1] unwind_next_frame+0x3cb/0x700 [ 2751.692168][ C1] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2751.697630][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2751.702488][ C1] arch_stack_walk+0x10d/0x140 [ 2751.707101][ C1] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2751.712568][ C1] stack_trace_save+0x113/0x1c0 [ 2751.717245][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2751.722371][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2751.727306][ C1] ? sched_clock+0x3a/0x40 [ 2751.731576][ C1] save_stack+0x97/0x240 [ 2751.735645][ C1] ? __reset_page_owner+0x150/0x150 [ 2751.740679][ C1] ? free_unref_page_prepare+0x2ae/0x2d0 [ 2751.746164][ C1] ? sched_clock+0x3a/0x40 [ 2751.750486][ C1] ? sched_clock_cpu+0x1b/0x3b0 [ 2751.755185][ C1] ? lookup_page_ext+0x74/0x120 [ 2751.759863][ C1] __reset_page_owner+0x36/0x150 [ 2751.764645][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 2751.769345][ C1] free_unref_page_prepare+0x2ae/0x2d0 [ 2751.774709][ C1] free_the_page+0x9e/0x370 [ 2751.779051][ C1] ? irq_exit_rcu+0x9/0x10 [ 2751.783294][ C1] ? get_zeroed_page+0x40/0x40 [ 2751.787912][ C1] __free_pages+0x67/0xc0 [ 2751.792062][ C1] __vunmap+0x7bc/0x8f0 [ 2751.796066][ C1] ? kcov_open+0x60/0x60 [ 2751.800332][ C1] vfree+0x5c/0x80 [ 2751.803877][ C1] kcov_close+0x2b/0x50 [ 2751.807875][ C1] __fput+0x33d/0x7b0 [ 2751.811705][ C1] ____fput+0x15/0x20 [ 2751.815518][ C1] task_work_run+0x129/0x190 [ 2751.819948][ C1] do_exit+0xc83/0x2a50 [ 2751.823945][ C1] ? put_task_struct+0x80/0x80 [ 2751.828539][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 2751.833588][ C1] ? __kasan_check_write+0x14/0x20 [ 2751.838518][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2751.843470][ C1] do_group_exit+0x141/0x310 [ 2751.847897][ C1] get_signal+0x10a0/0x1410 [ 2751.852328][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2751.858222][ C1] arch_do_signal_or_restart+0xbd/0x17c0 [ 2751.863690][ C1] ? __perf_event_task_sched_in+0x1f9/0x2a0 [ 2751.869431][ C1] ? __kasan_check_write+0x14/0x20 [ 2751.874365][ C1] ? finish_task_switch+0x1bb/0x5a0 [ 2751.879395][ C1] ? __switch_to_asm+0x34/0x60 [ 2751.883999][ C1] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 2751.889322][ C1] ? __kasan_check_read+0x11/0x20 [ 2751.894156][ C1] ? schedule+0x154/0x1d0 [ 2751.898327][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2751.904233][ C1] exit_to_user_mode_loop+0x9b/0xd0 [ 2751.909269][ C1] irqentry_exit_to_user_mode+0x4e/0x80 [ 2751.914734][ C1] irqentry_exit+0x12/0x60 [ 2751.918980][ C1] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 2751.924538][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2751.930352][ C1] RIP: 0033:0x7f37d469bef9 [ 2751.934592][ C1] Code: Unable to access opcode bytes at RIP 0x7f37d469becf. [ 2751.941803][ C1] RSP: 002b:00007f37d3315038 EFLAGS: 00000246 [ 2751.947702][ C1] RAX: 0000000000000000 RBX: 00007f37d4853f80 RCX: 00007f37d469bef9 [ 2751.955518][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 000000000000000b [ 2751.963329][ C1] RBP: 00007f37d470eb76 R08: 0000000000000000 R09: 0000000000000000 [ 2751.971141][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2751.978956][ C1] R13: 0000000000000000 R14: 00007f37d4853f80 R15: 00007ffce2937698 [ 2751.986781][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2751.993713][ C0] NMI backtrace for cpu 0 [ 2751.993737][ C0] CPU: 0 PID: 815 Comm: kworker/u4:6 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2751.993757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2751.993772][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2751.993796][ C0] RIP: 0010:smp_call_function_single+0x289/0x510 [ 2751.993837][ C0] Code: 31 ff e8 fa ed 0a 00 41 83 e5 01 75 0a e8 3f ea 0a 00 e9 eb 00 00 00 f3 90 42 0f b6 04 23 84 c0 75 15 f7 44 24 48 01 00 00 00 <0f> 84 cd 00 00 00 e8 1c ea 0a 00 eb e0 44 89 f1 80 e1 07 80 c1 03 [ 2751.993853][ C0] RSP: 0018:ffffc900014ff720 EFLAGS: 00000202 [ 2751.993879][ C0] RAX: 0000000000000000 RBX: 1ffff9200029feed RCX: ffff88810c82bb40 [ 2751.993898][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2751.993917][ C0] RBP: ffffc900014ff810 R08: ffffffff815fc296 R09: ffffed103ee2aec9 [ 2751.993936][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2751.993955][ C0] R13: 0000000000000001 R14: ffffc900014ff768 R15: 0000000000000000 [ 2751.993976][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2751.993992][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2751.994011][ C0] CR2: 00007ffae47d8ab8 CR3: 000000000660f000 CR4: 00000000003506b0 [ 2751.994030][ C0] DR0: 0000000020000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2751.994049][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2751.994059][ C0] Call Trace: [ 2751.994068][ C0] [ 2751.994079][ C0] ? show_regs+0x58/0x60 [ 2751.994093][ C0] ? nmi_cpu_backtrace+0x133/0x160 [ 2751.994108][ C0] ? smp_call_function_single+0x289/0x510 [ 2751.994121][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2751.994134][ C0] ? nmi_handle+0xa8/0x280 [ 2751.994149][ C0] ? smp_call_function_single+0x289/0x510 [ 2751.994160][ C0] ? default_do_nmi+0x69/0x160 [ 2751.994172][ C0] ? exc_nmi+0xad/0x100 [ 2751.994184][ C0] ? end_repeat_nmi+0x16/0x31 [ 2751.994199][ C0] ? smp_call_function_single+0x266/0x510 [ 2751.994214][ C0] ? smp_call_function_single+0x289/0x510 [ 2751.994228][ C0] ? smp_call_function_single+0x289/0x510 [ 2751.994242][ C0] ? smp_call_function_single+0x289/0x510 [ 2751.994252][ C0] [ 2751.994264][ C0] ? text_poke_sync+0x20/0x20 [ 2751.994280][ C0] ? flush_smp_call_function_from_idle+0x1b0/0x1b0 [ 2751.994293][ C0] ? cpumask_any_but+0x18/0xb0 [ 2751.994306][ C0] ? text_poke_sync+0x20/0x20 [ 2751.994318][ C0] ? cpumask_any_but+0xa3/0xb0 [ 2751.994333][ C0] smp_call_function_many_cond+0x94e/0xa30 [ 2751.994347][ C0] ? __kmalloc_track_caller+0xe8/0x320 [ 2751.994359][ C0] ? text_poke_sync+0x20/0x20 [ 2751.994373][ C0] ? smp_call_function_many+0x40/0x40 [ 2751.994385][ C0] ? text_poke+0x20/0x20 [ 2751.994404][ C0] ? text_poke_sync+0x20/0x20 [ 2751.994417][ C0] on_each_cpu+0xa8/0x1a0 [ 2751.994431][ C0] ? __kmalloc_track_caller+0xe8/0x320 [ 2751.994443][ C0] ? smp_call_function+0x90/0x90 [ 2751.994456][ C0] ? text_poke_loc_init+0xc5/0x580 [ 2751.994468][ C0] ? text_poke_finish+0x30/0x30 [ 2751.994478][ C0] text_poke_bp_batch+0x1d4/0x600 [ 2751.994488][ C0] ? __kasan_check_write+0x14/0x20 [ 2751.994498][ C0] ? text_poke_loc_init+0x580/0x580 [ 2751.994508][ C0] ? __kasan_check_write+0x14/0x20 [ 2751.994516][ C0] ? mutex_lock+0xa5/0x110 [ 2751.994526][ C0] ? mutex_trylock+0xa0/0xa0 [ 2751.994535][ C0] ? __kmalloc_track_caller+0xe8/0x320 [ 2751.994545][ C0] ? __kasan_check_write+0x14/0x20 [ 2751.994554][ C0] ? mutex_unlock+0x1c/0x40 [ 2751.994563][ C0] text_poke_finish+0x1a/0x30 [ 2751.994574][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 2751.994584][ C0] __jump_label_update+0x36a/0x380 [ 2751.994593][ C0] jump_label_update+0x379/0x400 [ 2751.994603][ C0] static_key_enable_cpuslocked+0x12f/0x250 [ 2751.994613][ C0] static_key_enable+0x1a/0x30 [ 2751.994623][ C0] toggle_allocation_gate+0xbf/0x450 [ 2751.994632][ C0] ? kfence_protect+0x270/0x270 [ 2751.994642][ C0] ? finish_task_switch+0x130/0x5a0 [ 2751.994652][ C0] ? switch_mm_irqs_off+0x71b/0x9a0 [ 2751.994661][ C0] ? __switch_to_asm+0x34/0x60 [ 2751.994670][ C0] ? __kasan_check_read+0x11/0x20 [ 2751.994680][ C0] ? read_word_at_a_time+0x12/0x20 [ 2751.994688][ C0] ? strscpy+0x9c/0x260 [ 2751.994698][ C0] process_one_work+0x6dc/0xbd0 [ 2751.994707][ C0] worker_thread+0xaea/0x1510 [ 2751.994715][ C0] kthread+0x34b/0x3d0 [ 2751.994724][ C0] ? worker_clr_flags+0x180/0x180 [ 2751.994733][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2751.994742][ C0] ret_from_fork+0x1f/0x30