last executing test programs: 3.124014509s ago: executing program 2 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e000000000000000000000000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 2.819205012s ago: executing program 3 (id=4): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000380), 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000002b00), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r1) 2.527147554s ago: executing program 3 (id=9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2.361967246s ago: executing program 2 (id=11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.361802096s ago: executing program 3 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1b00d600feff0000000a9500000000000001"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 2.315312479s ago: executing program 1 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r3}, 0xc) 2.215328427s ago: executing program 1 (id=18): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000600180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) close(r0) 2.193464438s ago: executing program 4 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfc, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x80) 2.141823992s ago: executing program 0 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa93, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.044731439s ago: executing program 1 (id=22): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x48) 1.926539008s ago: executing program 1 (id=23): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r3) 1.926043498s ago: executing program 0 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 1.890983291s ago: executing program 0 (id=24): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) 1.826063406s ago: executing program 1 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.787735908s ago: executing program 4 (id=26): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.753096751s ago: executing program 0 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 1.752952981s ago: executing program 4 (id=28): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 1.718122573s ago: executing program 0 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, 0x0}, 0x6) 1.617096561s ago: executing program 4 (id=30): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) 1.608916491s ago: executing program 1 (id=31): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000080000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e107000000000000007cde9e8f4b9197701b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8f91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c67a8f2888d6fd95f20202866918c3c3771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547b4dac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.595854532s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047452, 0x2000000c) 1.535126177s ago: executing program 4 (id=34): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa2c"], 0xfdef) 689.25µs ago: executing program 4 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 20.313625][ T30] audit: type=1400 audit(1725529520.766:66): avc: denied { integrity } for pid=278 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.337260][ T30] audit: type=1400 audit(1725529520.786:67): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.338570][ T278] cgroup: Unknown subsys name 'net' [ 20.359727][ T30] audit: type=1400 audit(1725529520.786:68): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.386816][ T30] audit: type=1400 audit(1725529520.816:69): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.386989][ T278] cgroup: Unknown subsys name 'devices' [ 20.564152][ T278] cgroup: Unknown subsys name 'hugetlb' [ 20.569696][ T278] cgroup: Unknown subsys name 'rlimit' [ 20.762848][ T30] audit: type=1400 audit(1725529521.216:70): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.785898][ T30] audit: type=1400 audit(1725529521.216:71): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.810425][ T30] audit: type=1400 audit(1725529521.216:72): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.836876][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.845508][ T30] audit: type=1400 audit(1725529521.296:73): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.870701][ T30] audit: type=1400 audit(1725529521.296:74): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.902298][ T30] audit: type=1400 audit(1725529521.356:75): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.928016][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.348318][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.355191][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.362598][ T288] device bridge_slave_0 entered promiscuous mode [ 21.370319][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.377218][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.384322][ T288] device bridge_slave_1 entered promiscuous mode [ 21.414526][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.421385][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.428724][ T289] device bridge_slave_0 entered promiscuous mode [ 21.438643][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.445730][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.452934][ T289] device bridge_slave_1 entered promiscuous mode [ 21.499128][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.506040][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.513351][ T291] device bridge_slave_0 entered promiscuous mode [ 21.533113][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.539967][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.547294][ T291] device bridge_slave_1 entered promiscuous mode [ 21.595021][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.602240][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.609338][ T290] device bridge_slave_0 entered promiscuous mode [ 21.625682][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.632686][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.639775][ T290] device bridge_slave_1 entered promiscuous mode [ 21.650722][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.657602][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.664939][ T292] device bridge_slave_0 entered promiscuous mode [ 21.671670][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.678652][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.685788][ T292] device bridge_slave_1 entered promiscuous mode [ 21.827577][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.834435][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.841610][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.848436][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.861609][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.868477][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.875573][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.882385][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.907646][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.915341][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.922418][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.929723][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.937851][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.983903][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.991995][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.998822][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.006106][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.013403][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.020553][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.028658][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.036613][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.043456][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.050583][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.058612][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.066547][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.073384][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.080603][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.088299][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.113208][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.121400][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.151634][ T291] device veth0_vlan entered promiscuous mode [ 22.158936][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.166397][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.174997][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.182836][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.189996][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.197381][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.204673][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.212659][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.219483][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.226675][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.234661][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.241476][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.248691][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.262676][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.270656][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.277511][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.284675][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.293034][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.299870][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.307206][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.325162][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.358428][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.366528][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.374391][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.382200][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.395754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.403586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.411858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.422771][ T288] device veth0_vlan entered promiscuous mode [ 22.434033][ T291] device veth1_macvtap entered promiscuous mode [ 22.447114][ T289] device veth0_vlan entered promiscuous mode [ 22.453141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.460914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.468937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.476928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.485104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.493299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.501327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.508591][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.515808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.523974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.531964][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.538802][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.545983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.553582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.561311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.569474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.577675][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.584620][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.591865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.599129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.606383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.613837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.621089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.629935][ T288] device veth1_macvtap entered promiscuous mode [ 22.641654][ T290] device veth0_vlan entered promiscuous mode [ 22.649426][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.657000][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.664890][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.672914][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.680897][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.689213][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.696475][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.716042][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.723970][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.731650][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.739618][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.747394][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.755391][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.763321][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.771296][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.779456][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.787457][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.797786][ T289] device veth1_macvtap entered promiscuous mode [ 22.809605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.817232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.825490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.833614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.841470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.857080][ T290] device veth1_macvtap entered promiscuous mode [ 22.887215][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.898202][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.906902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.915243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.923365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.931379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.939537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.955258][ T292] device veth0_vlan entered promiscuous mode [ 22.975882][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.990329][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.006078][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.014427][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.022562][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.030695][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.053526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.062011][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.080792][ C1] hrtimer: interrupt took 39506 ns [ 23.099279][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.117305][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.136150][ T292] device veth1_macvtap entered promiscuous mode [ 23.184252][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.203286][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.211419][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.220855][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.231195][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.843088][ T349] device pim6reg1 entered promiscuous mode [ 26.071721][ C0] sched: RT throttling activated [ 128.121679][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 128.128125][ C0] rcu: 0-...!: (9999 ticks this GP) idle=487/1/0x4000000000000000 softirq=2561/2561 fqs=0 last_accelerate: 9579/bc89 dyntick_enabled: 1 [ 128.141922][ C0] (t=10000 jiffies g=1081 q=1000) [ 128.146883][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g1081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 128.158834][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=641 [ 128.166385][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g1081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 128.177488][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 128.187299][ C0] rcu: RCU grace-period kthread stack dump: [ 128.193046][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 128.202060][ C0] Call Trace: [ 128.205177][ C0] [ 128.207973][ C0] __schedule+0xccc/0x1590 [ 128.212210][ C0] ? release_firmware_map_entry+0x190/0x190 [ 128.217934][ C0] ? __kasan_check_write+0x14/0x20 [ 128.222887][ C0] schedule+0x11f/0x1e0 [ 128.226875][ C0] schedule_timeout+0x18c/0x370 [ 128.231559][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 128.236594][ C0] ? console_conditional_schedule+0x30/0x30 [ 128.242321][ C0] ? update_process_times+0x200/0x200 [ 128.247530][ C0] ? prepare_to_swait_event+0x308/0x320 [ 128.252912][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 128.257512][ C0] ? debug_smp_processor_id+0x17/0x20 [ 128.262720][ C0] ? __note_gp_changes+0x4ab/0x920 [ 128.267666][ C0] ? rcu_gp_init+0xc30/0xc30 [ 128.272104][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 128.277124][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 128.281552][ C0] rcu_gp_kthread+0xa4/0x350 [ 128.285987][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 128.290664][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 128.295179][ C0] ? __kasan_check_read+0x11/0x20 [ 128.300164][ C0] ? __kthread_parkme+0xb2/0x200 [ 128.305108][ C0] kthread+0x421/0x510 [ 128.309011][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 128.313523][ C0] ? kthread_blkcg+0xd0/0xd0 [ 128.317949][ C0] ret_from_fork+0x1f/0x30 [ 128.322214][ C0] [ 128.325075][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 128.331228][ C0] Sending NMI from CPU 0 to CPUs 1: [ 128.336320][ C1] NMI backtrace for cpu 1 [ 128.336336][ C1] CPU: 1 PID: 385 Comm: syz.0.32 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 128.336353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 128.336362][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 128.336382][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d da ec 12 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 128.336395][ C1] RSP: 0018:ffffc90000ba6ee0 EFLAGS: 00000046 [ 128.336410][ C1] RAX: 0000000000000003 RBX: 1ffff92000174de0 RCX: ffffffff81552fff [ 128.336422][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127730 [ 128.336433][ C1] RBP: ffffc90000ba6f90 R08: dffffc0000000000 R09: ffffed103ee24ee7 [ 128.336457][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 128.336468][ C1] R13: ffff8881f7127730 R14: 0000000000000003 R15: 1ffff92000174de4 [ 128.336479][ C1] FS: 0000555556a4c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 128.336494][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.336506][ C1] CR2: 0000000100000000 CR3: 0000000125b9d000 CR4: 00000000003506a0 [ 128.336520][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.336529][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.336539][ C1] Call Trace: [ 128.336545][ C1] [ 128.336551][ C1] ? show_regs+0x58/0x60 [ 128.336568][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 128.336588][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 128.336608][ C1] ? kvm_wait+0x117/0x180 [ 128.336622][ C1] ? kvm_wait+0x117/0x180 [ 128.336637][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 128.336655][ C1] ? nmi_handle+0xa8/0x280 [ 128.336672][ C1] ? kvm_wait+0x117/0x180 [ 128.336686][ C1] ? default_do_nmi+0x69/0x160 [ 128.336702][ C1] ? exc_nmi+0xad/0x100 [ 128.336715][ C1] ? end_repeat_nmi+0x16/0x31 [ 128.336731][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 128.336751][ C1] ? kvm_wait+0x117/0x180 [ 128.336766][ C1] ? kvm_wait+0x117/0x180 [ 128.336780][ C1] ? kvm_wait+0x117/0x180 [ 128.336795][ C1] [ 128.336799][ C1] [ 128.336803][ C1] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 128.336823][ C1] ? kvfree_call_rcu+0xb1/0x8b0 [ 128.336839][ C1] ? trie_delete_elem+0x58d/0x760 [ 128.336855][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 128.336871][ C1] ? pv_hash+0x86/0x150 [ 128.336888][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 128.336906][ C1] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 128.336925][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 128.336946][ C1] _raw_spin_lock+0x139/0x1b0 [ 128.336963][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 128.336982][ C1] kvfree_call_rcu+0x149/0x8b0 [ 128.337000][ C1] ? call_rcu+0x1310/0x1310 [ 128.337016][ C1] ? __kasan_check_write+0x14/0x20 [ 128.337032][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 128.337050][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 128.337068][ C1] ? longest_prefix_match+0x331/0x650 [ 128.337085][ C1] trie_delete_elem+0x58d/0x760 [ 128.337102][ C1] bpf_prog_2e5e7763945ac34e+0x3c/0xb6c [ 128.337116][ C1] bpf_trace_run3+0x11e/0x250 [ 128.337133][ C1] ? __kasan_check_write+0x14/0x20 [ 128.337150][ C1] ? bpf_trace_run2+0x210/0x210 [ 128.337168][ C1] ? debug_smp_processor_id+0x17/0x20 [ 128.337183][ C1] ? get_nohz_timer_target+0x79/0x750 [ 128.337203][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 128.337221][ C1] enqueue_timer+0x351/0x4c0 [ 128.337237][ C1] __mod_timer+0x8d3/0xcf0 [ 128.337250][ C1] ? kasan_save_stack+0x4b/0x60 [ 128.337276][ C1] ? kasan_save_stack+0x3b/0x60 [ 128.337290][ C1] ? unregister_netdevice_many+0xe0a/0x17c0 [ 128.337307][ C1] ? unregister_netdevice_queue+0x2e6/0x350 [ 128.337323][ C1] ? mod_timer_pending+0x30/0x30 [ 128.337352][ C1] ? syscall_exit_to_user_mode+0x26/0x160 [ 128.337368][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.337390][ C1] add_timer+0x68/0x80 [ 128.337403][ C1] __queue_delayed_work+0x16d/0x1f0 [ 128.337421][ C1] queue_delayed_work_on+0x10f/0x180 [ 128.337440][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 128.337465][ C1] kvfree_call_rcu+0x4b9/0x8b0 [ 128.337482][ C1] ? call_rcu+0x1310/0x1310 [ 128.337499][ C1] ? __kasan_check_write+0x14/0x20 [ 128.337516][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 128.337535][ C1] drop_sysctl_table+0x311/0x450 [ 128.337552][ C1] ? insert_header+0xe70/0xe70 [ 128.337567][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 128.337583][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 128.337600][ C1] ? __ip_mc_dec_group+0x133/0x590 [ 128.337614][ C1] ? __kasan_check_read+0x11/0x20 [ 128.337631][ C1] ? count_subheaders+0xca/0x100 [ 128.337648][ C1] unregister_sysctl_table+0x7b/0x120 [ 128.337664][ C1] ? unregister_net_sysctl_table+0xd/0x20 [ 128.337683][ C1] unregister_net_sysctl_table+0x15/0x20 [ 128.337701][ C1] inetdev_event+0x774/0x10a0 [ 128.337719][ C1] ? ipv4_doint_and_flush+0x150/0x150 [ 128.337736][ C1] ? up_read+0x5d/0x220 [ 128.337763][ C1] raw_notifier_call_chain+0x8c/0xf0 [ 128.337781][ C1] unregister_netdevice_many+0xe0a/0x17c0 [ 128.337799][ C1] ? alloc_netdev_mqs+0xc90/0xc90 [ 128.337813][ C1] ? locks_remove_posix+0x610/0x610 [ 128.337830][ C1] ? __kasan_check_read+0x11/0x20 [ 128.337846][ C1] unregister_netdevice_queue+0x2e6/0x350 [ 128.337861][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 128.337878][ C1] ? list_netdevice+0x4c0/0x4c0 [ 128.337891][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 128.337908][ C1] ppp_release+0xed/0x1e0 [ 128.337941][ C1] ? ppp_open+0x70/0x70 [ 128.337956][ C1] __fput+0x3fe/0x910 [ 128.337974][ C1] ____fput+0x15/0x20 [ 128.337988][ C1] task_work_run+0x129/0x190 [ 128.338004][ C1] exit_to_user_mode_loop+0xc4/0xe0 [ 128.338020][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 128.338036][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 128.338052][ C1] do_syscall_64+0x47/0xb0 [ 128.338068][ C1] ? clear_bhb_loop+0x35/0x90 [ 128.338082][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.338101][ C1] RIP: 0033:0x7f88e4759ef9 [ 128.338116][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.338128][ C1] RSP: 002b:00007ffe2ae18748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 128.338143][ C1] RAX: 0000000000000000 RBX: 0000000000005fc2 RCX: 00007f88e4759ef9 [ 128.338154][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 128.338163][ C1] RBP: 00007f88e4914a80 R08: 0000000000000001 R09: 00007ffe2ae18a3f [ 128.338174][ C1] R10: 00007f88e45dd000 R11: 0000000000000246 R12: 000000000000604f [ 128.338184][ C1] R13: 00007ffe2ae18850 R14: 0000000000000032 R15: ffffffffffffffff [ 128.338199][ C1] [ 128.338328][ C0] NMI backtrace for cpu 0 [ 128.992716][ C0] CPU: 0 PID: 393 Comm: syz.3.36 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 129.002164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 129.012058][ C0] Call Trace: [ 129.015185][ C0] [ 129.017876][ C0] dump_stack_lvl+0x151/0x1c0 [ 129.022386][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 129.027855][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 129.032542][ C0] dump_stack+0x15/0x20 [ 129.036531][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 129.041307][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 129.047296][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 129.052589][ C0] ? __kasan_check_write+0x14/0x20 [ 129.057544][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 129.062221][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 129.068125][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 129.073937][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 129.079842][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 129.085573][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 129.090517][ C0] print_cpu_stall+0x315/0x5f0 [ 129.095119][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 129.100152][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 129.106143][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 129.111174][ C0] update_process_times+0x198/0x200 [ 129.116218][ C0] tick_sched_timer+0x188/0x240 [ 129.120898][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 129.126277][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 129.131311][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 129.136256][ C0] ? clockevents_program_event+0x22f/0x300 [ 129.141898][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 129.147801][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 129.152577][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 129.158301][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 129.163770][ C0] [ 129.166546][ C0] [ 129.169325][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 129.175141][ C0] RIP: 0010:smp_call_function_many_cond+0x843/0x9b0 [ 129.181572][ C0] Code: 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 f6 a8 0a 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 07 e8 31 a5 0a 00 eb 38 f3 90 <42> 0f b6 04 3b 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 a5 [ 129.201001][ C0] RSP: 0018:ffffc90000b87360 EFLAGS: 00000293 [ 129.206904][ C0] RAX: ffffffff8165c7eb RBX: 1ffff1103ee2784d RCX: ffff88810d36cf00 [ 129.214715][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 129.222527][ C0] RBP: ffffc90000b87478 R08: ffffffff8165c7ba R09: ffffed103ee071d3 [ 129.230335][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 129.238146][ C0] R13: ffff8881f713c268 R14: ffff8881f7038e80 R15: dffffc0000000000 [ 129.245961][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 129.251774][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 129.257594][ C0] ? text_poke_sync+0x30/0x30 [ 129.262103][ C0] ? smp_call_function_many+0x40/0x40 [ 129.267310][ C0] ? insn_decode+0x308/0x490 [ 129.271736][ C0] ? text_poke_sync+0x30/0x30 [ 129.276248][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 129.281197][ C0] ? enqueue_timer+0x169/0x4c0 [ 129.285797][ C0] text_poke_bp_batch+0x1db/0x720 [ 129.290656][ C0] ? text_poke_loc_init+0x680/0x680 [ 129.295693][ C0] ? __kasan_check_write+0x14/0x20 [ 129.300638][ C0] ? mutex_lock+0xb6/0x1e0 [ 129.304890][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 129.310012][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 129.316432][ C0] ? text_poke_queue+0xe4/0x1a0 [ 129.321121][ C0] text_poke_finish+0x1a/0x30 [ 129.325635][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 129.331449][ C0] __jump_label_update+0x36a/0x380 [ 129.336396][ C0] jump_label_update+0x3af/0x450 [ 129.341169][ C0] static_key_disable_cpuslocked+0xcd/0x1b0 [ 129.346898][ C0] static_key_disable+0x1a/0x30 [ 129.351582][ C0] tracepoint_probe_unregister+0x60a/0x900 [ 129.357224][ C0] ? __bpf_trace_timer_class+0x30/0x30 [ 129.362519][ C0] bpf_probe_unregister+0x61/0x70 [ 129.367379][ C0] bpf_raw_tp_link_release+0x63/0x90 [ 129.372501][ C0] bpf_link_free+0x129/0x3f0 [ 129.376941][ C0] ? bpf_link_put_deferred+0x20/0x20 [ 129.382050][ C0] ? debug_smp_processor_id+0x17/0x20 [ 129.387256][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 129.392376][ C0] bpf_link_release+0x170/0x180 [ 129.397060][ C0] ? bpf_prog_get_stats+0x2f0/0x2f0 [ 129.402101][ C0] __fput+0x3fe/0x910 [ 129.405917][ C0] ____fput+0x15/0x20 [ 129.409736][ C0] task_work_run+0x129/0x190 [ 129.414177][ C0] do_exit+0xc48/0x2ca0 [ 129.418158][ C0] ? put_task_struct+0x80/0x80 [ 129.422755][ C0] ? __kasan_check_write+0x14/0x20 [ 129.427700][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 129.432644][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 129.438027][ C0] do_group_exit+0x141/0x310 [ 129.442453][ C0] get_signal+0x7a3/0x1630 [ 129.446710][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 129.452196][ C0] ? selinux_bpf+0xd2/0x100 [ 129.456513][ C0] ? security_bpf+0x82/0xb0 [ 129.460853][ C0] ? get_sigframe_size+0x10/0x10 [ 129.465629][ C0] ? __sys_bpf+0x489/0x760 [ 129.469882][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 129.475091][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 129.480122][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 129.485416][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 129.490797][ C0] do_syscall_64+0x47/0xb0 [ 129.495049][ C0] ? clear_bhb_loop+0x35/0x90 [ 129.499562][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.505291][ C0] RIP: 0033:0x7ffb51e7cef9 [ 129.509544][ C0] Code: Unable to access opcode bytes at RIP 0x7ffb51e7cecf. [ 129.516746][ C0] RSP: 002b:00007ffb50af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.524993][ C0] RAX: 0000000000000005 RBX: 00007ffb52035f80 RCX: 00007ffb51e7cef9 [ 129.532801][ C0] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 129.540613][ C0] RBP: 00007ffb51eef01e R08: 0000000000000000 R09: 0000000000000000 [ 129.548426][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.556238][ C0] R13: 0000000000000000 R14: 00007ffb52035f80 R15: 00007ffc9ba03928 [ 129.564051][ C0] [ 129.566915][ C0] Sending NMI from CPU 0 to CPUs 1: [ 129.571996][ C1] NMI backtrace for cpu 1 [ 129.572005][ C1] CPU: 1 PID: 385 Comm: syz.0.32 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 129.572023][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 129.572032][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 129.572052][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d da ec 12 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 129.572065][ C1] RSP: 0018:ffffc90000ba6ee0 EFLAGS: 00000046 [ 129.572079][ C1] RAX: 0000000000000003 RBX: 1ffff92000174de0 RCX: ffffffff81552fff [ 129.572091][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127730 [ 129.572104][ C1] RBP: ffffc90000ba6f90 R08: dffffc0000000000 R09: ffffed103ee24ee7 [ 129.572116][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 129.572128][ C1] R13: ffff8881f7127730 R14: 0000000000000003 R15: 1ffff92000174de4 [ 129.572152][ C1] FS: 0000555556a4c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 129.572166][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.572176][ C1] CR2: 0000000100000000 CR3: 0000000125b9d000 CR4: 00000000003506a0 [ 129.572209][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.572218][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.572228][ C1] Call Trace: [ 129.572233][ C1] [ 129.572238][ C1] ? show_regs+0x58/0x60 [ 129.572254][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 129.572274][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 129.572294][ C1] ? kvm_wait+0x117/0x180 [ 129.572308][ C1] ? kvm_wait+0x117/0x180 [ 129.572322][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 129.572349][ C1] ? nmi_handle+0xa8/0x280 [ 129.572365][ C1] ? kvm_wait+0x117/0x180 [ 129.572379][ C1] ? kvm_wait+0x117/0x180 [ 129.572393][ C1] ? default_do_nmi+0x69/0x160 [ 129.572408][ C1] ? exc_nmi+0xad/0x100 [ 129.572422][ C1] ? end_repeat_nmi+0x16/0x31 [ 129.572437][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 129.572457][ C1] ? kvm_wait+0x117/0x180 [ 129.572471][ C1] ? kvm_wait+0x117/0x180 [ 129.572486][ C1] ? kvm_wait+0x117/0x180 [ 129.572500][ C1] [ 129.572505][ C1] [ 129.572509][ C1] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 129.572527][ C1] ? kvfree_call_rcu+0xb1/0x8b0 [ 129.572543][ C1] ? trie_delete_elem+0x58d/0x760 [ 129.572559][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 129.572575][ C1] ? pv_hash+0x86/0x150 [ 129.572591][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 129.572609][ C1] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 129.572627][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 129.572648][ C1] _raw_spin_lock+0x139/0x1b0 [ 129.572665][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 129.572684][ C1] kvfree_call_rcu+0x149/0x8b0 [ 129.572701][ C1] ? call_rcu+0x1310/0x1310 [ 129.572717][ C1] ? __kasan_check_write+0x14/0x20 [ 129.572733][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 129.572751][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 129.572768][ C1] ? longest_prefix_match+0x331/0x650 [ 129.572786][ C1] trie_delete_elem+0x58d/0x760 [ 129.572803][ C1] bpf_prog_2e5e7763945ac34e+0x3c/0xb6c [ 129.572816][ C1] bpf_trace_run3+0x11e/0x250 [ 129.572833][ C1] ? __kasan_check_write+0x14/0x20 [ 129.572850][ C1] ? bpf_trace_run2+0x210/0x210 [ 129.572867][ C1] ? debug_smp_processor_id+0x17/0x20 [ 129.572882][ C1] ? get_nohz_timer_target+0x79/0x750 [ 129.572901][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 129.572919][ C1] enqueue_timer+0x351/0x4c0 [ 129.572934][ C1] __mod_timer+0x8d3/0xcf0 [ 129.572947][ C1] ? kasan_save_stack+0x4b/0x60 [ 129.572962][ C1] ? kasan_save_stack+0x3b/0x60 [ 129.572977][ C1] ? unregister_netdevice_many+0xe0a/0x17c0 [ 129.572995][ C1] ? unregister_netdevice_queue+0x2e6/0x350 [ 129.573012][ C1] ? mod_timer_pending+0x30/0x30 [ 129.573025][ C1] ? syscall_exit_to_user_mode+0x26/0x160 [ 129.573041][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.573063][ C1] add_timer+0x68/0x80 [ 129.573076][ C1] __queue_delayed_work+0x16d/0x1f0 [ 129.573095][ C1] queue_delayed_work_on+0x10f/0x180 [ 129.573113][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 129.573132][ C1] kvfree_call_rcu+0x4b9/0x8b0 [ 129.573149][ C1] ? call_rcu+0x1310/0x1310 [ 129.573166][ C1] ? __kasan_check_write+0x14/0x20 [ 129.573182][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 129.573201][ C1] drop_sysctl_table+0x311/0x450 [ 129.573219][ C1] ? insert_header+0xe70/0xe70 [ 129.573233][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 129.573250][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 129.573266][ C1] ? __ip_mc_dec_group+0x133/0x590 [ 129.573280][ C1] ? __kasan_check_read+0x11/0x20 [ 129.573297][ C1] ? count_subheaders+0xca/0x100 [ 129.573314][ C1] unregister_sysctl_table+0x7b/0x120 [ 129.573330][ C1] ? unregister_net_sysctl_table+0xd/0x20 [ 129.573353][ C1] unregister_net_sysctl_table+0x15/0x20 [ 129.573371][ C1] inetdev_event+0x774/0x10a0 [ 129.573388][ C1] ? ipv4_doint_and_flush+0x150/0x150 [ 129.573406][ C1] ? up_read+0x5d/0x220 [ 129.573422][ C1] raw_notifier_call_chain+0x8c/0xf0 [ 129.573441][ C1] unregister_netdevice_many+0xe0a/0x17c0 [ 129.573460][ C1] ? alloc_netdev_mqs+0xc90/0xc90 [ 129.573476][ C1] ? locks_remove_posix+0x610/0x610 [ 129.573494][ C1] ? __kasan_check_read+0x11/0x20 [ 129.573511][ C1] unregister_netdevice_queue+0x2e6/0x350 [ 129.573528][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 129.573545][ C1] ? list_netdevice+0x4c0/0x4c0 [ 129.573560][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 129.573578][ C1] ppp_release+0xed/0x1e0 [ 129.573594][ C1] ? ppp_open+0x70/0x70 [ 129.573608][ C1] __fput+0x3fe/0x910 [ 129.573626][ C1] ____fput+0x15/0x20 [ 129.573641][ C1] task_work_run+0x129/0x190 [ 129.573656][ C1] exit_to_user_mode_loop+0xc4/0xe0 [ 129.573672][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 129.573689][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 129.573705][ C1] do_syscall_64+0x47/0xb0 [ 129.573721][ C1] ? clear_bhb_loop+0x35/0x90 [ 129.573735][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.573754][ C1] RIP: 0033:0x7f88e4759ef9 [ 129.573767][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.573779][ C1] RSP: 002b:00007ffe2ae18748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 129.573794][ C1] RAX: 0000000000000000 RBX: 0000000000005fc2 RCX: 00007f88e4759ef9 [ 129.573805][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 129.573814][ C1] RBP: 00007f88e4914a80 R08: 0000000000000001 R09: 00007ffe2ae18a3f [ 129.573825][ C1] R10: 00007f88e45dd000 R11: 0000000000000246 R12: 000000000000604f [ 129.573835][ C1] R13: 00007ffe2ae18850 R14: 0000000000000032 R15: ffffffffffffffff [ 129.573850][ C1] [ 265.123859][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.3.36:393] [ 265.131692][ C0] Modules linked in: [ 265.135430][ C0] CPU: 0 PID: 393 Comm: syz.3.36 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 265.144885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 265.154802][ C0] RIP: 0010:smp_call_function_many_cond+0x843/0x9b0 [ 265.161212][ C0] Code: 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 f6 a8 0a 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 07 e8 31 a5 0a 00 eb 38 f3 90 <42> 0f b6 04 3b 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 a5 [ 265.181079][ C0] RSP: 0018:ffffc90000b87360 EFLAGS: 00000293 [ 265.186982][ C0] RAX: ffffffff8165c7eb RBX: 1ffff1103ee2784d RCX: ffff88810d36cf00 [ 265.194788][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 265.202600][ C0] RBP: ffffc90000b87478 R08: ffffffff8165c7ba R09: ffffed103ee071d3 [ 265.210411][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 265.218223][ C0] R13: ffff8881f713c268 R14: ffff8881f7038e80 R15: dffffc0000000000 [ 265.226035][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.234798][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.241221][ C0] CR2: 0000001b2e018ff8 CR3: 0000000006a0f000 CR4: 00000000003506b0 [ 265.249035][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.256841][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.264776][ C0] Call Trace: [ 265.267896][ C0] [ 265.270596][ C0] ? show_regs+0x58/0x60 [ 265.274673][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.279613][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.284758][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.289945][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.294892][ C0] ? clockevents_program_event+0x22f/0x300 [ 265.300534][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.306435][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.311385][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.317282][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.322921][ C0] [ 265.325701][ C0] [ 265.328491][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.334469][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 265.340281][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 265.346096][ C0] ? smp_call_function_many_cond+0x843/0x9b0 [ 265.351915][ C0] ? text_poke_sync+0x30/0x30 [ 265.356424][ C0] ? smp_call_function_many+0x40/0x40 [ 265.361632][ C0] ? insn_decode+0x308/0x490 [ 265.366058][ C0] ? text_poke_sync+0x30/0x30 [ 265.370571][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 265.375523][ C0] ? enqueue_timer+0x169/0x4c0 [ 265.380118][ C0] text_poke_bp_batch+0x1db/0x720 [ 265.384988][ C0] ? text_poke_loc_init+0x680/0x680 [ 265.390011][ C0] ? __kasan_check_write+0x14/0x20 [ 265.394980][ C0] ? mutex_lock+0xb6/0x1e0 [ 265.399210][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 265.404331][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 265.410754][ C0] ? text_poke_queue+0xe4/0x1a0 [ 265.415444][ C0] text_poke_finish+0x1a/0x30 [ 265.419954][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 265.425773][ C0] __jump_label_update+0x36a/0x380 [ 265.430717][ C0] jump_label_update+0x3af/0x450 [ 265.435493][ C0] static_key_disable_cpuslocked+0xcd/0x1b0 [ 265.441227][ C0] static_key_disable+0x1a/0x30 [ 265.445906][ C0] tracepoint_probe_unregister+0x60a/0x900 [ 265.451556][ C0] ? __bpf_trace_timer_class+0x30/0x30 [ 265.456840][ C0] bpf_probe_unregister+0x61/0x70 [ 265.461701][ C0] bpf_raw_tp_link_release+0x63/0x90 [ 265.466823][ C0] bpf_link_free+0x129/0x3f0 [ 265.471249][ C0] ? bpf_link_put_deferred+0x20/0x20 [ 265.476369][ C0] ? debug_smp_processor_id+0x17/0x20 [ 265.481578][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 265.486698][ C0] bpf_link_release+0x170/0x180 [ 265.491382][ C0] ? bpf_prog_get_stats+0x2f0/0x2f0 [ 265.496417][ C0] __fput+0x3fe/0x910 [ 265.500239][ C0] ____fput+0x15/0x20 [ 265.504155][ C0] task_work_run+0x129/0x190 [ 265.508580][ C0] do_exit+0xc48/0x2ca0 [ 265.512577][ C0] ? put_task_struct+0x80/0x80 [ 265.517174][ C0] ? __kasan_check_write+0x14/0x20 [ 265.522129][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 265.527069][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 265.532448][ C0] do_group_exit+0x141/0x310 [ 265.536877][ C0] get_signal+0x7a3/0x1630 [ 265.541129][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 265.546597][ C0] ? selinux_bpf+0xd2/0x100 [ 265.550935][ C0] ? security_bpf+0x82/0xb0 [ 265.555275][ C0] ? get_sigframe_size+0x10/0x10 [ 265.560049][ C0] ? __sys_bpf+0x489/0x760 [ 265.564302][ C0] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 265.569513][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 265.574542][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 265.579837][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 265.585218][ C0] do_syscall_64+0x47/0xb0 [ 265.589469][ C0] ? clear_bhb_loop+0x35/0x90 [ 265.593983][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.599710][ C0] RIP: 0033:0x7ffb51e7cef9 [ 265.603965][ C0] Code: Unable to access opcode bytes at RIP 0x7ffb51e7cecf. [ 265.611169][ C0] RSP: 002b:00007ffb50af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.619411][ C0] RAX: 0000000000000005 RBX: 00007ffb52035f80 RCX: 00007ffb51e7cef9 [ 265.627225][ C0] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 265.635037][ C0] RBP: 00007ffb51eef01e R08: 0000000000000000 R09: 0000000000000000 [ 265.642847][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.650657][ C0] R13: 0000000000000000 R14: 00007ffb52035f80 R15: 00007ffc9ba03928 [ 265.658471][ C0] [ 265.661348][ C0] Sending NMI from CPU 0 to CPUs 1: [ 265.666492][ C1] NMI backtrace for cpu 1 [ 265.666500][ C1] CPU: 1 PID: 385 Comm: syz.0.32 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0 [ 265.666516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 265.666525][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 265.666545][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d da ec 12 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 265.666558][ C1] RSP: 0018:ffffc90000ba6ee0 EFLAGS: 00000046 [ 265.666571][ C1] RAX: 0000000000000003 RBX: 1ffff92000174de0 RCX: ffffffff81552fff [ 265.666581][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127730 [ 265.666592][ C1] RBP: ffffc90000ba6f90 R08: dffffc0000000000 R09: ffffed103ee24ee7 [ 265.666603][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.666613][ C1] R13: ffff8881f7127730 R14: 0000000000000003 R15: 1ffff92000174de4 [ 265.666624][ C1] FS: 0000555556a4c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.666638][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.666648][ C1] CR2: 0000000100000000 CR3: 0000000125b9d000 CR4: 00000000003506a0 [ 265.666662][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.666670][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.666680][ C1] Call Trace: [ 265.666685][ C1] [ 265.666691][ C1] ? show_regs+0x58/0x60 [ 265.666716][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 265.666746][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 265.666776][ C1] ? kvm_wait+0x117/0x180 [ 265.666798][ C1] ? kvm_wait+0x117/0x180 [ 265.666821][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 265.666847][ C1] ? nmi_handle+0xa8/0x280 [ 265.666873][ C1] ? kvm_wait+0x117/0x180 [ 265.666895][ C1] ? kvm_wait+0x117/0x180 [ 265.666914][ C1] ? default_do_nmi+0x69/0x160 [ 265.666928][ C1] ? exc_nmi+0xad/0x100 [ 265.666940][ C1] ? end_repeat_nmi+0x16/0x31 [ 265.666955][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.666973][ C1] ? kvm_wait+0x117/0x180 [ 265.666987][ C1] ? kvm_wait+0x117/0x180 [ 265.667001][ C1] ? kvm_wait+0x117/0x180 [ 265.667014][ C1] [ 265.667018][ C1] [ 265.667022][ C1] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 265.667038][ C1] ? kvfree_call_rcu+0xb1/0x8b0 [ 265.667053][ C1] ? trie_delete_elem+0x58d/0x760 [ 265.667068][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 265.667083][ C1] ? pv_hash+0x86/0x150 [ 265.667098][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 265.667115][ C1] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 265.667132][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.667152][ C1] _raw_spin_lock+0x139/0x1b0 [ 265.667177][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 265.667195][ C1] kvfree_call_rcu+0x149/0x8b0 [ 265.667211][ C1] ? call_rcu+0x1310/0x1310 [ 265.667226][ C1] ? __kasan_check_write+0x14/0x20 [ 265.667241][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 265.667258][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 265.667274][ C1] ? longest_prefix_match+0x331/0x650 [ 265.667290][ C1] trie_delete_elem+0x58d/0x760 [ 265.667306][ C1] bpf_prog_2e5e7763945ac34e+0x3c/0xb6c [ 265.667318][ C1] bpf_trace_run3+0x11e/0x250 [ 265.667334][ C1] ? __kasan_check_write+0x14/0x20 [ 265.667350][ C1] ? bpf_trace_run2+0x210/0x210 [ 265.667366][ C1] ? debug_smp_processor_id+0x17/0x20 [ 265.667380][ C1] ? get_nohz_timer_target+0x79/0x750 [ 265.667398][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 265.667416][ C1] enqueue_timer+0x351/0x4c0 [ 265.667430][ C1] __mod_timer+0x8d3/0xcf0 [ 265.667443][ C1] ? kasan_save_stack+0x4b/0x60 [ 265.667456][ C1] ? kasan_save_stack+0x3b/0x60 [ 265.667471][ C1] ? unregister_netdevice_many+0xe0a/0x17c0 [ 265.667487][ C1] ? unregister_netdevice_queue+0x2e6/0x350 [ 265.667503][ C1] ? mod_timer_pending+0x30/0x30 [ 265.667516][ C1] ? syscall_exit_to_user_mode+0x26/0x160 [ 265.667530][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.667551][ C1] add_timer+0x68/0x80 [ 265.667563][ C1] __queue_delayed_work+0x16d/0x1f0 [ 265.667580][ C1] queue_delayed_work_on+0x10f/0x180 [ 265.667597][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 265.667615][ C1] kvfree_call_rcu+0x4b9/0x8b0 [ 265.667631][ C1] ? call_rcu+0x1310/0x1310 [ 265.667647][ C1] ? __kasan_check_write+0x14/0x20 [ 265.667662][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 265.667680][ C1] drop_sysctl_table+0x311/0x450 [ 265.667697][ C1] ? insert_header+0xe70/0xe70 [ 265.667721][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 265.667735][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 265.667750][ C1] ? __ip_mc_dec_group+0x133/0x590 [ 265.667762][ C1] ? __kasan_check_read+0x11/0x20 [ 265.667777][ C1] ? count_subheaders+0xca/0x100 [ 265.667791][ C1] unregister_sysctl_table+0x7b/0x120 [ 265.667805][ C1] ? unregister_net_sysctl_table+0xd/0x20 [ 265.667821][ C1] unregister_net_sysctl_table+0x15/0x20 [ 265.667837][ C1] inetdev_event+0x774/0x10a0 [ 265.667852][ C1] ? ipv4_doint_and_flush+0x150/0x150 [ 265.667867][ C1] ? up_read+0x5d/0x220 [ 265.667881][ C1] raw_notifier_call_chain+0x8c/0xf0 [ 265.667897][ C1] unregister_netdevice_many+0xe0a/0x17c0 [ 265.667915][ C1] ? alloc_netdev_mqs+0xc90/0xc90 [ 265.667929][ C1] ? locks_remove_posix+0x610/0x610 [ 265.667944][ C1] ? __kasan_check_read+0x11/0x20 [ 265.667959][ C1] unregister_netdevice_queue+0x2e6/0x350 [ 265.667974][ C1] ? wait_for_completion_killable_timeout+0x10/0x10 [ 265.667989][ C1] ? list_netdevice+0x4c0/0x4c0 [ 265.668002][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 265.668018][ C1] ppp_release+0xed/0x1e0 [ 265.668031][ C1] ? ppp_open+0x70/0x70 [ 265.668044][ C1] __fput+0x3fe/0x910 [ 265.668059][ C1] ____fput+0x15/0x20 [ 265.668072][ C1] task_work_run+0x129/0x190 [ 265.668086][ C1] exit_to_user_mode_loop+0xc4/0xe0 [ 265.668100][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 265.668114][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 265.668128][ C1] do_syscall_64+0x47/0xb0 [ 265.668142][ C1] ? clear_bhb_loop+0x35/0x90 [ 265.668155][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.668175][ C1] RIP: 0033:0x7f88e4759ef9 [ 265.668196][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.668207][ C1] RSP: 002b:00007ffe2ae18748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 265.668221][ C1] RAX: 0000000000000000 RBX: 0000000000005fc2 RCX: 00007f88e4759ef9 [ 265.668230][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 265.668238][ C1] RBP: 00007f88e4914a80 R08: 0000000000000001 R09: 00007ffe2ae18a3f [ 265.668247][ C1] R10: 00007f88e45dd000 R11: 0000000000000246 R12: 000000000000604f [ 265.668256][ C1] R13: 00007ffe2ae18850 R14: 0000000000000032 R15: ffffffffffffffff [ 265.668269][ C1]