last executing test programs: 3m53.936390652s ago: executing program 3 (id=498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000030000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000000740)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000b02"], 0x0, 0x4e}, 0x20) write$cgroup_devices(r5, &(0x7f0000000880)=ANY=[], 0xfffffeff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/124, 0x7c}], 0x1, &(0x7f00000009c0)=""/230, 0xe6}, 0x102) write$cgroup_int(r5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r4, r5, 0x5, 0x0, 0x1}, 0x50) 3m53.691124147s ago: executing program 3 (id=502): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@restrict, @datasec={0x2, 0x0, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x1}], "25ff"}, @datasec={0x0, 0x2a, 0x0, 0xf, 0x2, [{0x2, 0xf, 0x2}, {0x3, 0x3, 0x7f}], "b8b3"}]}, {0x0, [0x0, 0x61]}}, 0xfffffffffffffffe, 0x68, 0x91, 0x1}, 0x28) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000840)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x216c, 0x0, &(0x7f0000000980), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000001500)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f00000015c0)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700)}, 0x2c) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xff, '\x00', r5, r0, 0x0, 0x5, 0x1}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r6}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="13050000000000851000000600000018280000", @ANYRES32=r3, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500000000000022"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m53.65240576s ago: executing program 3 (id=503): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x5}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'ip6gre0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x6, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_config_ext={0x9, 0x80000000000}, 0x8004, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000380)) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) 3m53.155467651s ago: executing program 3 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x12, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x8, 0xa, 0xc, 0xffffffffffffffc0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x21, &(0x7f0000000140)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0x1ff, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[r0, r0], &(0x7f0000000240)=[{0x5, 0x4, 0x3, 0x9}, {0x4, 0x3, 0xa, 0x6}, {0x3, 0x4, 0x4, 0x4}], 0x10, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r1, r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x0, 0x6, 0x1, 0x0, 0x5, 0x804, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x10001, 0x9}, 0x10001, 0xfffffffffffffff9, 0xfffffffa, 0x2, 0x8001, 0x40000000, 0x2, 0x0, 0x3ff, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xffffffffffff90c9) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000ec0)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 3m53.151692552s ago: executing program 3 (id=512): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711905000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1}, 0x15008, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x0, 0x10, &(0x7f0000001180), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x29, 0x3d, 0xfffffffffffffcac, &(0x7f0000001240)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000880)="3a0f9f9b36242c8466d0f27a1a1c645f175d03dcd3b85f7ae9ac770fecada37d4b6c9ac5c78b15b74f0549be5d5f8a52de4e780dbfe1485625ff4e839c96727db4a6e61ed2ce75cf87bd86b49aa22b275ae0a16250390c9065f206a4af65bcb685dbb03b6fe508e5ad53b5c8e9aefe2771a19961e4bc70a16787cc82802ed3e6df337fe830602ed92b724d80103bb0da20cf5fad", 0x94}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="bbdeb32de8dde5294beed0fd0fef60abeeb876bdbda35709983897c7d1f10da53edb9ea307ef6f93eda5eed2d8463023e74faef3488602a2caa1d7bc03eb85a9e5febc51adb9776164a4e0819297244896a062941c052e61fb72b8fece4ebfd25b5475b1be4ca8aa78b229b462f4188af63c01f1282b935d3b466e80e6e3c1050aaec7ff8bf48047766c0d1d210c0a80612f39a8532aa0d0c7ac304c8716eb513490e60ba2caefa9b0bc09850f4afd3e3810c989bf0ca19ade9e0acde995b6dc19b2d2e8aecac1a0acd9946c5fe2c3a5eb914f87dc9144197ec72f9c03a722b7c940284e39c8c2f74f33", 0xea}, {&(0x7f0000002380)="d6ef95bc1a592ca1b852d518e9b8b0a3807efe01d99d774065d01e50d6f114da308c4ba33ddcd2965d8875ff791b7ba79abfb03f4f7afb195e98323fab5e6cf71d503683d92c3e378959b8255761eb9ee1069201babb0e6a078d", 0x5a}, {&(0x7f0000002400)="a2d0a35277081eb6580b92ab2681c45373537e1360f0930cd99db4026ddc74cbd6385e12b06666d2bda7ed02dabca417b919f9c09f997e609df5c7a4257a9d1aa06e5eea0df282f87b8583f44dffd76aa10e05f0d77004e27746fb93e93b0d58ae9e8e7cb5a2ba724048bdba77740b2fc6bb6cbf7eafaa1f6f1a325fce103c75e4d600cd2bf5bc05e343dea40b9ab191764928537e1b760e93dbe5f7f351c6216831dc2ae76a0020c46ed08a1464a526fb157d0831395da65dae9bd18a0df6577cad08c0b4a0be", 0xc7}, {&(0x7f0000002500)="a24901cbd71bc5f58f19373907b9027a1cf86b40bd09f53b1c91aab7830694ca1c6b2ac48886196ad25725714be8716de21ede582ef76bde89abe5769f85888cab9fab615bc80b07a1683c32e6d2e441e877d4726f95508343dfbe4ea80aca97400c0b05140c92a8296cb7ee420475c4975d96c76193e9925f2ae487e92c54e57bca47f01c75d7a459e493f2f03f49283efa56b1a4b8ec34a529386d106776944b2af5e4aec6577ded4e4f10f63023fe946564f02635e428b0844974ecab119745c6bd0956aaf5cbb9c1d335a484056e385feb8107beaf975532d4df4bb0b7e60585c8bafdf66eef47c77c1bfbe72b6638bf33c520afac0b", 0xf8}], 0x6, &(0x7f0000002680)=[@timestamping={{0x14}}], 0x18}, 0x80) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180008a5ad1e290000000000000000000000000073013d00000000009500000070adc7d5988abd9e1212a9e6759f025c83d8e985c46bda5edfab0eb620de62dd1f366e63341f3e9513574142ee03b81afa591e1162adc108e86f67b17d1b63106dbf0d929b25fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000080000000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x11, 0xd, &(0x7f00000027c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000002840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002880)={r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m53.148125122s ago: executing program 3 (id=518): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000780)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'sit0\x00', @random="4f33e363a4b1"}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000d00)=""/253, 0x20, 0xfd, 0x1, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0x4, 0x0, &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000f80)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup, 0x2f, 0x0, 0x2, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001040)=[0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1f, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480), &(0x7f00000014c0), 0xffffffff, r4}, 0x38) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001500)={0x4, 0x80, 0xff, 0x8, 0x9, 0x3, 0x0, 0x800, 0x2400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001580), 0x11}, 0x204, 0x2, 0x8, 0x3, 0x4, 0x12, 0x99b, 0x0, 0x2, 0x0, 0x24000}) 3m34.633451882s ago: executing program 32 (id=518): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000780)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'sit0\x00', @random="4f33e363a4b1"}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000d00)=""/253, 0x20, 0xfd, 0x1, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0x4, 0x0, &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000f80)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup, 0x2f, 0x0, 0x2, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001040)=[0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1f, 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480), &(0x7f00000014c0), 0xffffffff, r4}, 0x38) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001500)={0x4, 0x80, 0xff, 0x8, 0x9, 0x3, 0x0, 0x800, 0x2400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001580), 0x11}, 0x204, 0x2, 0x8, 0x3, 0x4, 0x12, 0x99b, 0x0, 0x2, 0x0, 0x24000}) 25.302929836s ago: executing program 5 (id=2215): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xc, 0x1821, 0x2, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000280)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x23) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xbe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(r1, &(0x7f0000000d00)={0x0, 0xfffffff5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0}, 0x4000000) 16.665171698s ago: executing program 5 (id=2215): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xc, 0x1821, 0x2, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000280)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x23) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xbe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(r1, &(0x7f0000000d00)={0x0, 0xfffffff5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0}, 0x4000000) 12.985738094s ago: executing program 5 (id=2215): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xc, 0x1821, 0x2, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000280)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x23) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xbe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(r1, &(0x7f0000000d00)={0x0, 0xfffffff5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0}, 0x4000000) 9.531252086s ago: executing program 5 (id=2215): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xc, 0x1821, 0x2, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000280)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x23) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xbe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(r1, &(0x7f0000000d00)={0x0, 0xfffffff5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0}, 0x4000000) 4.174106164s ago: executing program 1 (id=2373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000003f0000004000000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)="6453bc5d9881217f2c", &(0x7f0000000200)="e6efe8f23e4c391fa1a119293cdb579f282546ed0af74f1d879246dfdda48f377a4dbbc3cf1192b663070d1983bde7ce8c90c44bf78c7cdb718d046e4aba8cf80170fbf2e9b87240e257c414f42699968c0a2eb736bdf48b6bd8915d54c890f7ee2c17346ec2d44c000000000000000000bb89f46feeefd5d3f732a6bc3acfcff2e6221822f00ee26bfd20a707493e62cb2b27e79f892f10aeb85efc452f9886e719bbec686ceafa846e8e939982dec7137ea335e30b06", 0x1003, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/245}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 4.11079487s ago: executing program 1 (id=2375): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000085ad1773db6c24e1f5875a1df469e2fc60214765d226b8061bca040d42872f4e24825f401b1fbbb8dca9e38e6287824c6e8eac28459d55ccf1377af36e0088979801f2037cab6077e5c4b68372ae6382d604eaf8ab950d8767f1efdeff631301f390804aa03fa5fa58967bdc8c704e787fd859948b0fbafb2a8aa686f2184979204ea5c073df1865c096aa56dd71e77e7ac096cadaef3a8caf556f000000"], 0x50) (async) r0 = perf_event_open(&(0x7f0000000c00)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r0}, 0x20) (async) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0x8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001040)={r4}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r2, 0x58, &(0x7f0000000dc0)={0x0, 0x0}}, 0x36) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={r5}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={r5, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r9, 0x18000000000002a0, 0x54, 0x0, &(0x7f0000000740)="0e08000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xc2, 0x5, 0x0, 0x0, 0x0, 0x8, 0x20099, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x33, 0x0, 0x1, 0x2, 0xfffffffe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback=r8, 0x10, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000340)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0), 0x0}, 0x40) (async) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00'}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@map=r8, r10, 0x13, 0x6, r10, @void, @value=r13, @void, @void, r12}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r15, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048001}, 0x2000c001) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000980)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000009c0)={r16, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r14, 0x1, 0x21, &(0x7f0000000a40), 0x4) (async) sendmsg$tipc(r15, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) 4.036187228s ago: executing program 5 (id=2215): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xc, 0x1821, 0x2, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000280)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x23) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xbe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(r1, &(0x7f0000000d00)={0x0, 0xfffffff5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0}, 0x4000000) 3.297128053s ago: executing program 1 (id=2377): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185300000d00000000000f000000000018390000010000000000000000000000180000000100000000000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000186700000c000000000000000700000085100000ffffffff"], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x72, &(0x7f0000000380)=""/114, 0x40f00, 0x20, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xa, 0x1e, 0x9}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000009c0)=[r3, r1, r4, r5, r6, r7], 0x0, 0x10, 0x8}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r9}, &(0x7f0000000d40), &(0x7f0000000e40)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x16, 0x3, &(0x7f0000000fc0)=@framed, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x3, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000001140)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) 3.074037906s ago: executing program 4 (id=2382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071105900000000001d400500000000004704000001ed00000f030000000000006f440000000000006b0a00fe000000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050cdcfc92f5daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf9bf04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff4e2c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230000065937f36f6490eb033b1ce0d4922701cb42aa86ee11cd5950b58ebffffae2aba1a21410e6cb3835bc2c19c9dacbb5f836d1c0de069c20c55fa567859aca8be3afdc3a14779e9181a382831580eac154d314974d209c00896548b04f80d68da1c7ecdfea1e05d0f442b81c4f2a38ae1f43688aff1d3eb14112da5d5289bedeeff7093a12faf47f55bd7ffc82893600042e761ec18de4cd287e176befc4af4063e5f091f8a50cbf02ad70682c0131d616ff6d999fc6fba6e9d4a3fc4e6430aca493d38db18ef4b2d46a22c1dc14910a49126684e453d30ea51dc537a0c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000000fd9c9d328056b30000611034000000000063012f0000f6bb28e85c150000009500000000000000", @ANYRES64=r0], &(0x7f0000000a00)='GPL\x00', 0x245, 0xb7, &(0x7f0000000a40)=""/183, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x4, 0xfffffffb, 0x7ffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) unlink(&(0x7f0000000bc0)='./file0\x00') (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x9}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x8000) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f0000000f40)=r4, 0x4) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x50) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000dc0)={'wg2\x00'}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000e40)={'wg2\x00', @multicast}) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f80)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r7, 0xb704, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) close(r5) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r1], 0x50) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r8, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r9}, 0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r10, 0x18000000000002a0, 0x48, 0x62, &(0x7f00000008c0)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r11 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x6, 0x6, 0x0, 0x3, 0x0, 0x5, 0x18080, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x800, 0x0, 0x80000000, 0x8, 0x4, 0xffffffdd, 0x7a, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r0) socketpair(0x26, 0xa, 0x6, &(0x7f0000000080)) 3.03465392s ago: executing program 2 (id=2383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0x2a, 0xa, 0x1, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0xfe, 0x20}, {0x4d, 0x0, 0x9}]}) 2.93492336s ago: executing program 4 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x45}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4a477225cddefa6249e050000000000b304058200000000699c8a47718e6a0b1fbd007b0198000000"], &(0x7f0000000680)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), 0xf7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x21, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x3, 0x3, 0x7, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001000), 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r0}, &(0x7f0000001240), &(0x7f0000001280)='%-010d \x00'}, 0x20) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f00000001c0)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.881329146s ago: executing program 1 (id=2385): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x6, 0x80, 0x2, 0x0, 0xdc, 0x0, 0x0, 0x8cff, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x526c, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x80, 0x7, 0x81, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x48000, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871, 0x0, 0x6}, 0x0, 0x0, r1, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="53e00a", 0x3}], 0x1, 0x0, 0x0, 0x24068001}, 0x40) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[], 0xfdef) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000011c390be00003db59ce73ae67a1b1b6163e46979df22b2e33194ce0a2b5e2bf6252446fcede689a208f2189ef806fa19d090f2d7fbf3205d2426a9edfe3e9411be89000b", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=r0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x2f, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000d00)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.880811076s ago: executing program 2 (id=2386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') sendmsg$unix(r2, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x45}, 0x20000000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10062) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x2000}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0x0, 0x14, 0xd3, &(0x7f0000000340)="89e5b9f8489ff377ff7250805e2f6936b6580bfe", &(0x7f00000006c0)=""/211, 0x9, 0x0, 0xc2, 0x36, &(0x7f0000000880)="f4908930e2a49cac702d2804cc923cffb3738429577774559e23419ab917ed817be04035281aaec645f18e2a2a16b406b2fd916daf30649fb95b6120e5dadd2e4c0594be7a69cbb4a42fcfd98d2090596cc0227fa4efaacf3ad891375fff1e840130cebd49ef347a4a9b76219a26bb8e202e103963dd8b56ea1d8fc4a8c2358c6672f3a7c44c66c85fd26f657907ed24b7d039fb82a9aef5967b7e1d4fed656ab46d2231c8c689749a57db57d5ee4325049d5a421da3547ea330d4bba173ff6ea6fb", &(0x7f0000000980)="d0a3f4858833cc0f9318e8ff56d2af32409aea8b20eb549c1f9318638e3832b7ee74a87cb7d803921b44fb30e19f8743a50c2759a18b", 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.081426707s ago: executing program 0 (id=2388): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @typedef={0xd}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x30, 0x0]}}, &(0x7f0000000300)=""/66, 0x37, 0x42, 0x1, 0x6, 0x10000}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x23, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd07f}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0xcb, 0xa, 0x7, 0x8, 0xfffffe7e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x87f3, 0x0, 0x0, 0x0, 0xffffffd9}], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x5b, &(0x7f0000000240)=""/91, 0x40f00, 0x76, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r4], 0x0, 0x10, 0xe30b}, 0x94) (async) write$cgroup_subtree(r3, &(0x7f00000005c0)={[{0x2b, 'pids'}]}, 0x6) openat$cgroup_int(r0, &(0x7f0000000600)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000640)) r5 = openat$cgroup_ro(r0, &(0x7f0000000680)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5}, 0x4) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x5, [@fwd={0x6}, @union={0xc, 0x9, 0x0, 0x5, 0x0, 0x3d9, [{0x7, 0x0, 0xe6}, {0xf, 0x1, 0xee}, {0x2, 0x1, 0xb}, {0xd, 0x3, 0x89}, {0x2, 0x0, 0xba2}, {0x4, 0x5, 0x3e}, {0x10, 0x2}, {0xf, 0x5, 0x800}, {0xb, 0x4, 0x10000}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x4}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x10, 0x100, 0xbfce}, {0xb, 0x4a0af9a}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2}, {0xc, 0x2}, {0xe, 0x3}, {0x7, 0x1}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x30, 0x61]}}, &(0x7f0000000840)=""/126, 0x12d, 0x7e, 0x0, 0x1, 0x10000, @value=r5}, 0x28) (async) recvmsg$unix(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/100, 0x64}, {&(0x7f0000000980)=""/182, 0xb6}, {&(0x7f0000000a40)=""/17, 0x11}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40002140) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c80)={r5, r13, 0x0, r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r9, 0x58, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0xfffffff5, 0x10, 0xa1cc, 0x44023, r11, 0x6, '\x00', r15, r8, 0x0, 0x2, 0x4, 0x9}, 0x50) (async) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000e00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2f4a}], &(0x7f0000000e40)='GPL\x00', 0x5, 0x0, &(0x7f0000000e80), 0x40f00, 0x20, '\x00', r15, 0x1b, r6, 0x8, &(0x7f0000000ec0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r12, r13, r4, r12, 0xffffffffffffffff, r9], &(0x7f0000000f40)=[{0x0, 0x3, 0xc, 0x3}, {0x5, 0x3, 0xe, 0x8}, {0x1, 0x1, 0x2, 0x7}, {0x1, 0x3, 0x9, 0x4}, {0x2, 0x2}, {0x0, 0x4, 0x8, 0xc}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001080)=r17, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x80, 0x0, r7, 0x4, '\x00', 0x0, r7, 0x3, 0x5, 0x4}, 0x50) (async) sendmsg$tipc(r10, &(0x7f0000001800)={&(0x7f0000001140)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x3}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001180)="78da0870fcabb7461b4d554d4dd7155618ed9ed55dbd2a49fa3d3b90ab7980417c99c76475d405568b93fe3d6518b160f98cc8af3111487b64341dd5a80448b6fbd7821e54688eb9275f971935f1baed3361c8eb05fa7750b817e5013499c4ec44a839e54e8a55cfaef76f0cc6141dbdf45f2e101b200a694dd4c2ed1d4dc16e49a73b9ba21676b700b9421d447bd88d131c4d50dc19a5eaac", 0x99}, {&(0x7f0000001240)="8d7768d5c5293a2d073c46fb864cec214eb88018ed11b0ab53eca25a0f932835552b1fc6003f4407a1414f1ea7793b7113efeda41120a8b9bb46613999c26726630cc75a5b318da03146023787eff61cedcd31a5e70e6ca39117afef2808e54946f100ca", 0x64}, {&(0x7f00000012c0)="795c0e40869fc9f66cf06c8fdd210449dd7300592ce08b6fe3c4c568943b1f518856f45a36016fcdb84a65c2769a45b7ffaca5e0dcc4d1f3a64fff886dc1e121540648dd8c1831a17b2acae2c59fd7a4f6e9dc3086652e683f01de330c835cbf8c", 0x61}, {&(0x7f0000001340)="44e168ee570d1e6fc3ff38d4e0432ab0c32dc404bd4d14009ad19d7ecd8a1fb52ee6117a1c25b808b3d396bdee46d8da818f011410891e3d74bf4f48b0e835add236f3f5b9926cd8dfd51625ff194074c453b12cfa0b1cafd637207db5659b6a6326168e8193f83dea8477f8e2ae203162d087c43272c5f25dbc2dec969dcbd168603f3e07a6478b36cc50769aad50c186fd6e3834945ba18661a325412c9a5b", 0xa0}, {&(0x7f0000001400)}, {&(0x7f0000001440)="92d93b6c668f288dadbdc1e5fb4e547fd81645", 0x13}, {&(0x7f0000001480)="897ecbc3c45e247f4304fe5f9728f6841b2a60a02aa00bb7f34bfda5cb7588dc5bc111d82b27e364b6ef941a130063cce2d1f19884289746b0c933635a9fa748a1a2a0224cd4ba7cb51617344cfa21321d4ae8ef9b821df999d08e60eb5dc69d4ab448813b562c016ad5ff75fa26994cb0ded39a1a6203e623206e6f038b55b41257d59101e1261a4901430c71d5883a4eab5f8565ea1bf4295256591c880efb738a6f0f22bcc3bdf20f28d9a336653099d56f05b837e803abcf55668692bf139bf924d7321b13a509ae4a53067909", 0xcf}, {&(0x7f0000001580)="42b57d7bbfa3cb7f0f1c505f067d7ed6f44c47d2e98f86ed15738e97124f792ecff56a5b18933b4d3358da7bb06d316addcb643a216d61446c7c2766595c8acfdf055c87c54ae250cb59bac8b696b6612c9727199627a5c17da38ddae12b6e73710100340c2caba8ef5feaac62dd29f11177374d1e04371d5910855fe885bba2fbcd03d8439e417a7fac706b4caa8911a41ff10b4fd643fe9205fb3115c649ef9525450d4ad251695e6c36dc47ee52f8", 0xb0}, {&(0x7f0000001640)="4b037e11ed03330edb304c9dee885bf73049651c2735508fcd9415f9f44ca367ced8720248c11a58555cee3e9e3a323de6c0810b0710c3ab40b532bbb88b9eecc9b2052963d709391d50ae5a73d3a6663330232e27ebbf1355c2ba66fe5d15ec707078363857eef266840697bf4ab89ff9fee49ba39cecabae15c7b41499321b81e99927338b1edc5273931c519b3f9becff53df2636ca385552eff956a048659cc5ccf129db02260a3f50440723b2949552ca", 0xb3}], 0x9, &(0x7f00000017c0)="04310023", 0x4}, 0x4004040) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x2, 0xfffffffc, 0x4, 0x80, 0x0, r5, 0x7, '\x00', 0x0, r7, 0x5, 0x3, 0x5}, 0x50) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f00000018c0)) (async) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0xe65, 0x0, r14, 0x7, '\x00', r15, r13, 0x5, 0x3}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b80)={r18, 0x58, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1e, 0x17, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @generic={0xa, 0xc, 0x6, 0x955, 0x7}, @generic={0x9, 0x1, 0x2, 0x1800, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r19}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001a40)='syzkaller\x00', 0x8, 0x54, &(0x7f0000001a80)=""/84, 0x41100, 0x21, '\x00', r20, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x2, 0x4, 0x7dc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)=[r12], &(0x7f0000001c80)=[{0x0, 0x3, 0xf, 0x1}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x2, 0xa}, {0x4, 0x3, 0x1, 0x1}, {0x5, 0x4, 0xe, 0x3}, {0x0, 0x5, 0x8, 0x4}, {0x0, 0x5, 0xb, 0x7}, {0x5, 0x5, 0xc, 0xa}], 0x10, 0x63}, 0x94) (async) sendmsg$tipc(r13, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000001dc0)="998e70584abdf98c3a1f0abc7a9128b641c2753c613bcc760e726d0e3d5528bbcec3f5cbf12f46cc1a1b63016451ef8834701d4f05f73264497e29231762009ec151fff4ce67035c186538f4dfc4264cdf66561a745684fa93e0307f5f7c59a83dc41e40140a96211b420f13289c1ce75ee5ec9216d3ab9e2bfe078473a9ba1c00f0169e9f0963aaded3ed27dc0279015739949214d7b2dd593fffe4b2d12e82edc8551a620509f088838d7cc74e2d49e0b2989d25d1c3665f442f82a76f24f39cf327af3ed261c8e8f13f3085c830f34ebd15f51ebd1c2f486d6dd669e368f429ee53e5137eae658646b3c66179c4e0b89a1ea14e89585bea445ad4b90bb5b978112effa0496a7ecbc9a5ceb39f166cbd8c04cb63bb93903019adf0f810cad51cc596b075f6f04329f5a4a0ef9c2217c1c0c7648eb45811add0e03f71b5e07a8539410fbaa751f52773a8dbad1d14698a522a7a5db1f4aa46e2392796768f5f58329c3adc6e5a0c2314b87419c7a51cae58e028ee0d4a1df44b445bd3abfb04775f70bf5346c1952bbe0503be8ea60c148f24b3146aad52e271ba214759746af5bbbcf653912b71fdf9f0de1940bd899ca847f833ea0d9b63369d9c5785deb687e0bf6a1e49c07e2b0f9c3800b75151e5fb01e412a285d289870f1a7134b5e409bcf835d58726c017aba7ecdeee969c4151fcdb7b6daa8b7544a10daa094569fab5c33874288d9871e831881420e560f0b41528f2cf9d7d33fea8a5fd2615ea2c8e42bc48aed0c7a05807ab5e9070c3cfacbc6bad950f182777850193148c2f8e1344801a94c8dfb046aa780a1f18443534eb117e58a52d039a9e83ed1906aef8fbab7437573e2eca519eb3b9be2dd122cd6efd75a8e4697e9122f6c9418274dfa424d25734d96538584ca8adc233307494af76b785aa0a1454e11d66bf2d675e1484f31b17c6c6b81b6699e56da653d04bd6314cd78cbe512e79505a73e9fa4dbae85b02ca0b29de7349c638736c3d9b7373d53ecae7eb7d33940fe2bad35241fb9aa0ee764c64a576afec1deb360c1d9d4f0d0c88657fff178f59be0c718464976b5fe0855e320e03c1685bd753251c9252e90a388eecdca06bd9f839138253176354fb5498866e732f2e6d2d1a64a74183607a64dd18350d2e718fc68599b22291cfea5cfa955fdb3de67a58f545c9adb5920972f0b3240a1a6483bfd8905563348b5be9d771f7a96951230385c43afcc60e2fcbe76e48774197c483944a97b87ee4f466ec0d5e23311293eb594434a708b287b04687351997be5e8e3db869b5a4691e097bd17ebc308f3a7a28b7ba888ee1a50fc20da8f143fc1075ccfe866d85b39fa7e3b0d20aa29217008f97532ee2d7694de7007422ce1d713478e49d0c33c61cff6013a98237539d88c7e7e166afaf0a9cc92fd55f98f64592552bc8da94a29f37f96279eff6a99a7c960e2cac8f9f49ee21c169ac9f19ed3a8eda06dbfd7132cbb7bafc78d96b90498af87e54fb76f78126210d7d8ea16223112321a07659e7a025f5c4dcfa0c602562c6eaaefd0c3d95e870da01e8e7f0c0c1effa8de529ba970b619c56922f846920c8456b8c275af9660b6fa04f667738eeb1537db90fbc009288c650239f28344763f653232c7a037f1485e424c426201be758782723475090f6cde091a1dd77d272ed54c723c2c4377f6c1c401da9412821b265fdc638e33e8d5e47a4fcbb3e47eeccf56bfb5c83106241f5016cd49a746f3c77013a0c43b22058c0cb7cdfa464ed784c83ea4cc60a74688ba09d12caf025fb665acac6d162814a3cf97d64ebe626769f0ce07a2bf64b91f240501c8377e3c9150892695517ff35b272d88c5a772a4e7ab13b3b1ab634ed9088bb26639cccf419f5e9ec43e5cc98bd69ab8c982f2fc170ad83e24c20240c5436b919d1aac75e560ede919bc7f6739b6944bf44e5dd824c76f0624984e701072f8b6998ec73dfa9bf877bf27fd47e9fcebc93919c96f3d6dd34749a19c896f5c1b365adcef98587230e897598dfefc3cb9f1d1b65e5950d0b31963703b500e8451561b50727d521e0220c9a352f29d56d63212e05631e79742c91205287059fde68804f88dfa74bda5f6148916f85720794582ddea916442a88eb52cae839ef7f290a1d5dcea21cb6a1f4c8988831981bdb183b82abae8a4800da89de0b728d3809f330ea6d93fc52ab875edcc95634845751ab1bca12abec72df50568b2204d0e40d053e14368141cd3b9c2e60b724e32644ed4a7e33a3c80085b572bb2b30b4af3ee2c3f80956134dbadcaf9a1402fdd135afdfd674edf558cdb25d31a313b4577e4d1eecb97fbea9bb19048060db72bfd5f4916ac8db1fb708a2148d520c4030e0a5b5bd376930c5d5998fdea4900221d8c874b8a8829460a371e573e0d7aabb5fde0a5f727a37c5c8a1999f0b9318ca7f817d4d9262493a1b73a5a5cf783ce59c0fe058e0d788302d24a818d7283e069dc8b27f32cb785562e15d1753aa372db4731536223e6871d97b4998c9cb915ca0dc8f4a226a4078652b4705a571b5c41c415c3511ab5081e418163c52178af4473a1fb662fef7af2f98c11dbe57a059f2c61a574213e6f9b59270ae4cee80b08972f2b761ba6c8e94451096ec57c2f6f0351346e48e6d8fd1e837bdf725ad189b24083a9715368e78b028418c54531955ac93a8ec7d7f5fade4b292e416ec41b1f6776c666bbbf9c3724ef111e996982371c18583bdc40bfaee6eac4bbcb8ccc90fd4772ee4ec1312f5bd9c32db491bf38290d20fb66126fb6b68590f491b6a0045bc8cace86b9a0f4c899ba63b1e81626bf55df652e9c52d9b4823449d35cf7739a6d32fbe0cfdcb47ec3e0d99dba4b46bc2370655d901cafbc04cda1e4954491958aa442d6ffea9dc3049810ee1f211a803656b028c4c129b5a70da13d5d6f322a47aae85d8e1a136a01bdb31800a43d019c7023d5e59f8c1074690c6ebf886d06f319c6c9cd14c7f7aaa9ecb178acde64095d4175b61562dce412f0732da3173e0c2d02d8e4818aff3aa4a302ea14986919c36eac1beec557a7e7511aca5c57076a554d9ef5fb00370d596b4fafa47f00baeeea839f695f2d20616f50fda866eeff4284cbe4ac16da99adcff6cf6ae8c08ddcd4231a7efc18fd29f30ac7fcbd35904c0050e2ed8599c0b6dc3a09ab71e31750b6a9126b313cdea7619fbf376f4d6bd381509f26742299a3084ce15752cf7dd3d6083e1965a2591ce0fbab46d28246aba9bb67c73b06ea02485daa8335379ca257cf2389f427c3cdd99d860748ff696c7b53da8c0b74029e916f871e6d47b855237b60505494e77441a381dd3f54f4c927a92c03a55d85bf0c7f4a06c9b07917004de754d951844762f28b8675c3063ff1490c18c9e3274b3e5cc4f1b8ea8f26d21ae72602eec46c1d42476dc693df49b2e9af157ad7238d5166a9e6be0c8b9b93bd2a4f221b2bdc31764836c39a76c685b36cd3ca689be5ed8eb000f99b4d48396db8f32f92aa0bf8a17071ab7c6a0f304d0aa5818031c27f34a022b5e7c45814064bc138beb80215a0552902f8b98e1c76455990205ded30cb21e6537795a7bfd2104e0d6ee7457e951982549a426c2297496d754f7586c182bae37fdfb33211bc1b1e8db0a7dea40efdbeef0e026b29016028428dd2378fc1b3bcc69edece8b17a6b4408db85c71ee670ab8da8ab435e34814cf1875c1020bfec88952d56a26b7c5dbcfba2b37a3a1c3db9c4464bbee00387527ede9952572239606bc29c668c61a25de70f0d8788bcbf71bf085777450250a9014ac77741df6746f6303f32f98892b25ef402ffc10ff16fda126525560d1e246ccb5089dba23169adcf7b84c4bd8cfb0be8b8c690b21d73f05c850211def33f26a375d1ee2b608dac53fd8ab4c3bd00d296782ed3980f72a204d11f70a015bf836082341b544c429bde7a401abefa476b081bd4e2e7388c552ca2a63948e3718a71ca73c3dfff242d277168f4d16458672696891997f7819101bc392f499a0a84e777418bdaa6f92065ec9044b7ca155112533c73f0912fa2262602f1a4e2ad6da30c0a96335c9ca26be50bc740cadc7283566ccbd52c15adffe7f158e8ef0d2b9bc63855e24f91338e6bc7b118a2c9cfbbbc322ab897c956018951a435215a9e11f82480faa394ec455b8f2d4b0899f7788ee2af5fb25d9642c2b9c4bac3e88bbae5caf3617b8c766c826a03cb5bb33cb04280b193098e9a10ce8f1486492b2d809c9d92e0cdab1be2c9a6b0843f222b6c6549f56508c9cba0ee2c25a51a6b720b6c8f997203f03b5bbe0cf114923672412499999fc086e90846d676e7faa1d12a66f3c0e2f6d24129af3981c97bdc9b2b30558acbfab6ebcd1a75399f297c5b844d8ad31bc255fed783fc9eec5d25f60508d147dd6bd685b847b3f59a50cc1a30e65fee9255c8a8fda22424f585b89be1fbf55b2e58a540c82d0f805e171fd3caef6e98790d2911e02003b20ad0ca17a885072730d140715941fbdeb39ccba7f234b84d668400b743e93acc0f792a3623d9160af0a5303c9789bac3af98f9215489afa19ce7478bece52d362276be8a3e341fe6311b3fd2c22a626d8b1ed992d5039aa3ebf4745036765bf0b7e3313a3a07245a52518db4735a0fa9012d406df3e4a6295dabfef90ad3e8b4b7587960750a2d9e8ae1de02a180141a1039fe02c2cbff3bca086e55658c0b9303e3068a89f0f7a5dd55e72ec72bc1187509a28011fc1f81eb59a70ae958cf39f79ffb12d4b22122e38e655acff6f39cb3ace186783a2426942007b400f96171f0e1bcd53504c847271faaf54ba4db6c07670f2a6654bed55b5385cdb23122e0e4b67f456a5309068ffb9e2bcd19504d4d1555b18fea10e2ce29f1a65dea86b3a8c9eedefa2ea7a9df952727dd45dadeaebde6ce422d6f4a668d489b21a350fa8e8b0a7d77c15484cdb2944772de3e16252fa1595176890236c24ece3d8adc7a1054ed954e072e523ab54a75d9881a9012118142325e881ffde63ed20f02875ab19b25b9fbd59405dbbb4240bcc497a2779fe333453ffe8f1916584a850b84e075c375af45437c924558a27e24f4a192dd2e1086262782d7738971caf86edc455798340fe55af28489b52448f9157d74536211067f634b9426d3cac018dce8082eea1e22aa12d3c3e71a0a0ffbd670496c91b3e63c29c5ab3ef960d4a48426a4e8e4023a5bbcdf8acf123f53e8286ac10a60110393f42725c8e5f976aec9b83daa720b5bba6132ee4da4afaaed11e0200374e41fc45a1d3afea73e25c90169d0636759c8c938889ea30cce10c93124af12ad5ed56ce659ce91f7c37568769148e7ef474adf589db9d37634a81039689017dbfcdfc9075594d73b6c8e5f14542a093c47a51b496979c52e22d65bc9c636f3abbc7a42ab7731ed23462e26eafab919362a216764252faa59e91b75e7780ffe4f564ab3dfe66886b9a8d9f57fe558760e694b8e4b82d429003ee5240717de73980528f38c84503087af2e1be1ca34cccdc28611ac01d57604d66b412cf6f8412dece0eda94d9dcc55706f9c066a742c731c3dd733cfa20025282800659c9bae8a6513377a3dcae3771c29abb76162600573e5b5b4170ab32e3fc96ca2666be98bf98495de87c60e5458afa34e83d002c04a1a248da14459a99c89c9a56e71377391c01c870de3f229da8142eb11086591f3c92976ece9c93022908fb9c3de5d3da1d735ef3a6be3c41c929296", 0x1000}, {&(0x7f0000002dc0)="06baf60e71b13429ff6349d33af302e7f00a8ad28b94d0070dc9447aacc454c2fe28343b972f44e3826ab90c64001fe9ba8f7b98f1665cf1f92827a551628964ece5a552e132211dd12f8261100ff769f8509caa166a7fbb67", 0x59}, {&(0x7f0000002e40)="ab62c979985201fe8892600b72c86bf3b38442d4b00108c60f3b1becce4e5b76c50d6cbcb7dd31246a3c92f66fd394633d9848a33df94265590b422c72ef2096ddabf433e3994a6e29ffc78007bf163e282cb5c5720cf24801493dde7dee58a655aa945507aea39668a26ee1186454861497ef62b5a78643e938df3eba7e410eef4a56563aaeec7cfc11ddf6327cc2a9adad1b68779486be519bb5cec3a6d15947f66d5069985b3867dd8810926f09a372b6f0853e267f512babafdc67242c4b3d0a566a40b8d3c25b2a37ddd51e93759e5bd60221d4951b9565c13ca6f8d32f9dace70f31056f", 0xe7}, {&(0x7f0000002f40)="3ad325a138610de17a6561ccaeaca875095c8a5f8f96b63a1833b19d6ce6149030addd3e2e17ade25574361394ac75b9808351a1ee55ed6c9d78fed1696deb3fe675d6e9c342efd50cbc120190110ad2c34c9f48c91349950f560c89888de72e34436a571327aebb1f8d390b8dd6f3792f4e2f36daf8095df88388f91e9f4ad6bf41b4e82f859d4decc242e89b4de3066fc45187005bf088c3637ef27eb9138c390566e27ea7aa8bf8e1", 0xaa}, {&(0x7f0000003000)="67bac7f554125b287a0b0f0e21db5c4a3bd55b4ee30e8d1373c0b3dff949ed2e3ac02debdc694213572643b8b1cf584a0cf270055979f1eed1b9af42cafb00d55bd03f1c60b756607f87a6c067f6eafe0b087e2ff15f36888cf27c0a25b0083a5e0ea18effefb734cf4e1e3b801f57db205ddd9f09bfd333c989b922083d3c70f77ae5973d7722b8dadb02a4539d6a4e2bdbba9c03ee0aae52550d565808796a5ad34831df9dfd8f15a5783af8a1b75472432bf0957c21aad92240ff07a7a9339ff866ea9c16b83fbf897734b8df3a0915685385a2179a298d7c4b32a88490bf2dda66c38e", 0xe5}], 0x5, 0x0, 0x0, 0x24000095}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000032c0)={@map=r8, 0xe, 0x1, 0x7a, &(0x7f00000031c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000003200)=[0x0], &(0x7f0000003240)=[0x0, 0x0], &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r22 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003340)={0x3, 0x4, 0x4, 0xa, 0x0, r21, 0x30, '\x00', r15, r22}, 0x50) 2.014007074s ago: executing program 0 (id=2389): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3b, 0x0, &(0x7f0000000640)="b9ff03316844268cb89e14f0080048e0050000006000002f77fbac141416e000030a890c9f03b180000302040200845013f2325f003901050b038d", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0x0, 0x4a, 0xf3, 0x5f, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x5c70, 0xc8, 0x7, 0x4, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x2, 0x103a, &(0x7f0000001300)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0x0, 0x10, &(0x7f0000002340), 0x2a3}, 0x48) write$cgroup_subtree(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c2000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x367}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x3, 0x3, &(0x7f00000025c0)=@framed, &(0x7f0000002600)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002640)={r3, 0x58, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r4}, 0x50) r5 = openat$cgroup_ro(r2, &(0x7f0000002780)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x9, 0x10, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000002400)='syzkaller\x00', 0x0, 0xa3, &(0x7f0000002440)=""/163, 0x40f00, 0x8, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000027c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002800)={0x2, 0x9, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002840)=[r2, r2, r2, r2], &(0x7f0000002880), 0x10, 0x97}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000001c0)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth0_vlan\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000340)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000007a0af0ff000000001811000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xab01, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000900)=0x7) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.006927645s ago: executing program 4 (id=2390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000040)=""/210, 0xd2, 0x0, &(0x7f0000000140)=""/187, 0xbb}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) 1.996444346s ago: executing program 2 (id=2391): socketpair(0x11, 0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1c, 0x40, 0x4, 0x9, 0x40202, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x4, 0x3, 0x3}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000840), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1eb85, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x4, &(0x7f0000000a80)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000740)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000340)="00000000000000fffffffe0000", 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), 0x0}, 0x20) 1.581623869s ago: executing program 2 (id=2392): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={0x0, 0x0, 0xc}, 0x18) (async) bpf$ITER_CREATE(0xb, &(0x7f0000001940), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000019c0)=0x267, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200000003000000000000000000000000001e7b149d1d3526bddcd3799b0d212aafde64bf44de311f4ea9a9326339cfd6dfb426856b683630d594a54f3002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESDEC=r5, @ANYRES64=r3, @ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1b, 0x2000000000000216, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0xc, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00'}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000001640)="ff138bd7abfd06ff106c3ed990f7", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async, rerun: 32) socketpair(0x8, 0x5, 0x8, &(0x7f0000000180)) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000880)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, 0x0, 0x36) 1.213018036s ago: executing program 4 (id=2395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000500000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b80)="9dc8c44fd020e601000d40c0694c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000180)='GPL\x00', 0x2, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x1f2, 0x10, &(0x7f0000000780), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000b70a0000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 1.119707536s ago: executing program 2 (id=2396): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4c0}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x31, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="12000000040050506edeaf079c4a000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)=ANY=[], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001040)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x12, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x12, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x4800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r3}, &(0x7f0000000c40), &(0x7f0000000c80)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000cc0)={r3, &(0x7f0000000d00), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r13, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/53, 0x35}], 0x1, &(0x7f0000000a00)=""/145, 0x91}, 0x40012000) (async) recvmsg(r13, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/53, 0x35}], 0x1, &(0x7f0000000a00)=""/145, 0x91}, 0x40012000) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000940)=r14, 0x4) sendmsg$unix(r13, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r13, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 874.30519ms ago: executing program 1 (id=2397): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c03000000000000000000000201000000000000000000000d000000000000000000005f"], 0x0, 0x44}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x7c2}) close(0x3) 593.98021ms ago: executing program 0 (id=2398): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xd050, 0x1}, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000fc0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001080)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x8, 0x2, &(0x7f0000000e40)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], &(0x7f0000000e80)='syzkaller\x00', 0xceb, 0x7, &(0x7f0000000ec0)=""/7, 0x41100, 0x2, '\x00', 0x0, @fallback=0x18, r0, 0x8, &(0x7f0000001000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001040)={0x3, 0x6, 0x6, 0x8001}, 0x10, r1, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001100)=[{0x0, 0x4, 0xe, 0xc}, {0x3, 0x1, 0xa, 0x1}, {0x0, 0x5, 0x8, 0x7}, {0x0, 0x5, 0x0, 0x8}, {0x0, 0x1, 0xe, 0x6}, {0x4, 0x3, 0xb, 0x9}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x6, 0x2000005, 0x3}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000050000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x1, 0x1, 0xffffffffffffffff, 0x12}, 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000680)=""/222}, 0x78) write$cgroup_devices(r10, 0x0, 0xee8a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8983, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b40), &(0x7f0000000c40), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r11, 0x4) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 336.258876ms ago: executing program 1 (id=2399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x842, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000040)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f00000004c0)={0x0, 0xfffffffffffffd8e, &(0x7f0000000500)=[{&(0x7f0000000540)="a2", 0xfffffdef}], 0x1}, 0x80) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x46, &(0x7f0000000580), 0x4) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 271.344202ms ago: executing program 0 (id=2400): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000000, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x6884c1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r3}, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80242, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000300)=""/215}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{}, [@alu]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x17, &(0x7f0000000b40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x67}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x40802, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r8 = getpid() syz_open_procfs$namespace(r8, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000780), 0xfffffeed) 209.843369ms ago: executing program 2 (id=2401): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)="0023c4aa361643bcd1e405bef6c229036d4833a0f9d7772128dd8ef862469bf004ca0061eed45a3c9b73923f12ec95b1ea453b8cd6d7d89eef0962c3a81e498b7680d54c82730146d7b0677cdf244d2e6ea510222c8b62295064a06410eea74201ede4b18288f8a3fb271b27254f4ad1a3c3a378af580f25dc75eeb9299dac7246348731057a00f17f64bdc73606f47b2b57d9c6a1720175cc702c0e89508caea87397ed0f9cdcaaff5b92224ae612c025cf319e76dee2bd63c1e42472a75c6696e543ef15a1c3749084641b5b34578ae08f1a4899f0af675d2172c52f", &(0x7f0000000100)=""/182}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x6}}, @enum64={0x6, 0x5, 0x0, 0x13, 0x1, 0xa, [{0x3, 0x10001, 0x5}, {0x8, 0x5, 0x73d0}, {0xa, 0x100}, {0x7, 0x2, 0x8d8}, {0x1, 0x8, 0x7fff}]}, @struct={0x5, 0x2, 0x0, 0x4, 0x1, 0xfffffffc, [{0x9, 0x0, 0x998}, {0x8, 0x2, 0xffffffff}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x400}}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @enum64={0x3, 0x4, 0x0, 0x13, 0x1, 0x2, [{0x3, 0x8, 0x81}, {0xe, 0x7, 0x5}, {0x6, 0x200, 0x6}, {0x1, 0x8}]}]}, {0x0, [0x5f, 0x61, 0x30, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000340)=""/53, 0x110, 0x35, 0x0, 0x7, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc4cb, '\x00', 0x0, r0, 0x0, 0x1, 0x1}, 0x50) mkdir(&(0x7f0000000440)='./file0\x00', 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x4, 0x7f, 0x2, 0x400, r2, 0x7, '\x00', r3, r0, 0x1, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0), 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x4, &(0x7f0000000640)=@raw=[@ldst={0x0, 0x3, 0x2, 0x8, 0x2, 0x8, 0x10}, @ldst={0x1, 0x0, 0x0, 0x6, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000680)='GPL\x00', 0x8, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0x26, '\x00', r3, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x3, 0xb, 0x0, 0xfff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001740)=[r4, r4, r1], &(0x7f0000001780)=[{0x5, 0x1, 0x8, 0xd}, {0x2, 0x1, 0xb, 0x9}, {0x0, 0x1, 0xd}], 0x10, 0x2}, 0x94) r7 = syz_clone(0x70050400, &(0x7f0000001940)="200cbfe49b267cec4e9d2bd9bc82de43c7fe0ae6fa427c449d7c13fc13e5b9a833e3cb4b0d6ca8b6059c6186fae02f480063f86dd393556199550729324fc331ab06e5eafe4fe81659f6ce051dea896673d2820b9f3654116af1d00e10a0dd245019bd4150f8ade79a7a3f80f0fb2f72ff9ca8d35b48bab7320572d8e7c81f726181aaf8262bf332afb80824b097bf625e52100461cf64faa7d22458c63d692e4c809f2935", 0xa5, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)="19c3c529d5434e078f") r8 = perf_event_open(&(0x7f00000018c0)={0x3, 0x80, 0x6, 0xce, 0x1, 0xb, 0x0, 0x2, 0x1000, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1000000, 0x4, @perf_bp={&(0x7f0000001880), 0x8}, 0x8, 0x9, 0x7, 0x5, 0x100, 0x2, 0x5, 0x0, 0x3, 0x0, 0x4}, r7, 0xf, 0xffffffffffffffff, 0xa) close(r6) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x10, r0}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001cc0)=@o_path={&(0x7f0000001c80)='./file0\x00', 0x0, 0x6000, r5}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1c, 0x6, &(0x7f0000001ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd}, @alu={0x4, 0x0, 0x3, 0x8, 0x1, 0xc, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit], &(0x7f0000001b00)='GPL\x00', 0xb1b6, 0x66, &(0x7f0000001b40)=""/102, 0x40f00, 0x0, '\x00', r3, @fallback=0x24, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x6, 0x10, 0xa6ae, 0x3}, 0x10, 0x0, r9, 0x5, &(0x7f0000001d00)=[r10, r4, r2], &(0x7f0000001d40)=[{0x5, 0x2, 0xa, 0x6}, {0x2, 0x5, 0x4, 0x3}, {0x4, 0x2, 0xa, 0x6}, {0x0, 0x4, 0x8, 0x32637c9eb85764ef}, {0x3, 0x1, 0x8, 0xb}], 0x10, 0x81cb}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000001e80), 0x20000, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ec0), 0x80000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000022c0)={r0, 0x20, &(0x7f0000002280)={&(0x7f0000002100)=""/214, 0xd6, 0x0, &(0x7f0000002200)=""/116, 0x74}}, 0x10) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002380)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0x9, '\x00', 0x0, r5, 0x2, 0x4}, 0x50) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002400)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x2, '\x00', r3, r0, 0x4, 0x0, 0x3}, 0x50) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_lsm={0x1d, 0x7, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}]}, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xff, &(0x7f0000001f80)=""/255, 0x41100, 0x2b, '\x00', r3, 0x1b, r0, 0x8, &(0x7f0000002080)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000020c0)={0x2, 0x0, 0xffffff80, 0x6}, 0x10, r13, 0x0, 0x1, &(0x7f0000002480)=[r10, r14, r15, r1, r16, r10, 0x1, r4], &(0x7f00000024c0)=[{0x0, 0x5, 0x4}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x1, 0x17, &(0x7f00000025c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000002680)='GPL\x00', 0xbbf, 0x0, 0x0, 0x1e00, 0x16, '\x00', r3, @fallback=0xd, r5, 0x8, &(0x7f00000026c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r13, r11, 0x0, &(0x7f0000002700)=[r17, r16, r4, r15, r4, r16, r16, r1], 0x0, 0x10, 0x87}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000002800), 0x4000, 0x0) ioctl$TUNSETVNETBE(r12, 0x400454de, &(0x7f0000002840)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) recvmsg(r18, &(0x7f0000002a00)={&(0x7f00000028c0), 0x80, &(0x7f0000002980)=[{&(0x7f0000002940)=""/40, 0x28}], 0x1, &(0x7f00000029c0)=""/20, 0x14}, 0x10020) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002a40)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) 162.674263ms ago: executing program 4 (id=2402): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x1003, r0}, 0x38) socketpair(0x8, 0x5, 0x8, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f00000002c0), &(0x7f0000000300)=""/37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x22, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 6.939839ms ago: executing program 0 (id=2403): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=2215): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xc, 0x1821, 0x2, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000280)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x23) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xbe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(r1, &(0x7f0000000d00)={0x0, 0xfffffff5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 22.014452][ T28] audit: type=1400 audit(1793531274.237:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.017901][ T279] cgroup: Unknown subsys name 'net' [ 22.037312][ T28] audit: type=1400 audit(1793531274.237:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.064496][ T28] audit: type=1400 audit(1793531274.277:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.064870][ T279] cgroup: Unknown subsys name 'devices' [ 22.207420][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.213036][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.318709][ T28] audit: type=1400 audit(1793531274.547:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.342045][ T28] audit: type=1400 audit(1793531274.547:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.366844][ T28] audit: type=1400 audit(1793531274.547:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.397104][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.406164][ T28] audit: type=1400 audit(1793531274.637:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.432621][ T28] audit: type=1400 audit(1793531274.637:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.461959][ T28] audit: type=1400 audit(1793531274.687:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.462314][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.487650][ T28] audit: type=1400 audit(1793531274.687:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.700579][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.707836][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.715356][ T288] device bridge_slave_0 entered promiscuous mode [ 23.723654][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.730975][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.738441][ T290] device bridge_slave_0 entered promiscuous mode [ 23.748622][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.755751][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.763210][ T290] device bridge_slave_1 entered promiscuous mode [ 23.776531][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.783591][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.791106][ T288] device bridge_slave_1 entered promiscuous mode [ 23.797696][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.804761][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.812298][ T287] device bridge_slave_0 entered promiscuous mode [ 23.836278][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.843344][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.850845][ T287] device bridge_slave_1 entered promiscuous mode [ 23.915763][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.922825][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.930331][ T291] device bridge_slave_0 entered promiscuous mode [ 23.940824][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.947907][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.955550][ T291] device bridge_slave_1 entered promiscuous mode [ 24.034234][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.041401][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.048914][ T289] device bridge_slave_0 entered promiscuous mode [ 24.058791][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.065893][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.073269][ T289] device bridge_slave_1 entered promiscuous mode [ 24.129110][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.136278][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.143577][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150644][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.197720][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.204774][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.212098][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.219262][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.232654][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.239727][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.247051][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.254093][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.317172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.324934][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.332593][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.340160][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.347915][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.355093][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.362404][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.383057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.391287][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.398364][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.406024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.414252][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.421322][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.449562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.457286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.465774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.473821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.481613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.500152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.508482][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.515552][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.523285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.531781][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.538852][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.546247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.554381][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.561455][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.572305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.600193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.608469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.617663][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.624717][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.632263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.640887][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.647966][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.655530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.663800][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.670879][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.678280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.686370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.694706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.710094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.718743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.727289][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.734335][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.741875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.750133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.758270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.766386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.774378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.782613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.790661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.807333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.815591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.823523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.832164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.840695][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.847785][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.860475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.868757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.883139][ T288] device veth0_vlan entered promiscuous mode [ 24.891304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.899796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.908351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.916481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.924544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.933044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.942126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.949769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.961457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.970135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.988878][ T290] device veth0_vlan entered promiscuous mode [ 24.999501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.008663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.016854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.024781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.033441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.041098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.053040][ T287] device veth0_vlan entered promiscuous mode [ 25.069861][ T290] device veth1_macvtap entered promiscuous mode [ 25.076730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.084694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.093255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.101713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.110053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.117823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.126273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.134438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.143105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.151575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.159977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.168411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.176069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.184164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.192638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.201822][ T288] device veth1_macvtap entered promiscuous mode [ 25.216271][ T289] device veth0_vlan entered promiscuous mode [ 25.225979][ T287] device veth1_macvtap entered promiscuous mode [ 25.232593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.240642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.248564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.256900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.267094][ T291] device veth0_vlan entered promiscuous mode [ 25.285592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.293140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.300972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.308970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.317891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.326266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.334582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.343072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.351566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.360051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.368579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.377000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.385385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.393614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.402076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.410550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.419021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.426577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.445743][ T291] device veth1_macvtap entered promiscuous mode [ 25.452821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.472407][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.477001][ T289] device veth1_macvtap entered promiscuous mode [ 25.499269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.511545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.520817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.529846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.538315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.565360][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.578900][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.602024][ T311] device syzkaller0 entered promiscuous mode [ 25.620319][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.641225][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.641826][ C1] hrtimer: interrupt took 31456 ns [ 26.458580][ T366] Illegal XDP return value 663510129 on prog (id 46) dev N/A, expect packet loss! [ 27.045852][ T401] tun0: tun_chr_ioctl cmd 1074812118 [ 27.064832][ T401] syz.2.24 (401) used obsolete PPPIOCDETACH ioctl [ 27.159045][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 27.159061][ T28] audit: type=1400 audit(1793531279.387:116): avc: denied { create } for pid=406 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 27.395740][ T417] Ã2®|: renamed from team_slave_1 [ 27.460926][ T417] device sit0 entered promiscuous mode [ 27.469960][ T28] audit: type=1400 audit(1793531279.707:117): avc: denied { create } for pid=421 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.872615][ T28] audit: type=1400 audit(1793531281.097:118): avc: denied { append } for pid=495 comm="syz.1.50" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.190934][ T520] device syzkaller0 entered promiscuous mode [ 29.233283][ T314] syzkaller0: tun_net_xmit 48 [ 29.252877][ T28] audit: type=1400 audit(1793531281.477:119): avc: denied { relabelfrom } for pid=516 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.272944][ T520] syzkaller0: tun_net_xmit 1280 [ 29.292669][ T520] syzkaller0: create flow: hash 3404553027 index 1 [ 29.306693][ T28] audit: type=1400 audit(1793531281.477:120): avc: denied { relabelto } for pid=516 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.483009][ T523] bridge0: port 3(ip6gretap0) entered blocking state [ 29.495815][ T523] bridge0: port 3(ip6gretap0) entered disabled state [ 29.582057][ T523] device ip6gretap0 entered promiscuous mode [ 29.610404][ T523] bridge0: port 3(ip6gretap0) entered blocking state [ 29.619313][ T523] bridge0: port 3(ip6gretap0) entered forwarding state [ 29.755539][ T524] bridge0: port 4(veth0_to_team) entered blocking state [ 29.762536][ T524] bridge0: port 4(veth0_to_team) entered disabled state [ 29.776369][ T524] device veth0_to_team entered promiscuous mode [ 29.894825][ T521] syzkaller0: delete flow: hash 3404553027 index 1 [ 30.301995][ T563] device syz_tun entered promiscuous mode [ 30.315648][ T28] audit: type=1400 audit(1793531282.547:121): avc: denied { create } for pid=570 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.471094][ T28] audit: type=1400 audit(1793531282.697:122): avc: denied { create } for pid=530 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.600314][ T28] audit: type=1400 audit(1793531282.767:123): avc: denied { create } for pid=530 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.024413][ T584] device veth0_vlan left promiscuous mode [ 31.043850][ T584] device veth0_vlan entered promiscuous mode [ 31.357270][ T28] audit: type=1400 audit(1793531283.587:124): avc: denied { attach_queue } for pid=606 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.793596][ T634] device veth0_vlan left promiscuous mode [ 31.825969][ T634] device veth0_vlan entered promiscuous mode [ 32.702933][ T28] audit: type=1400 audit(1793531284.927:125): avc: denied { create } for pid=679 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.166461][ T28] audit: type=1400 audit(1793531285.397:126): avc: denied { create } for pid=704 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.105272][ C0] sched: RT throttling activated [ 36.113963][ T28] audit: type=1400 audit(1793531288.337:127): avc: denied { create } for pid=716 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 38.233823][ T748] device syzkaller0 entered promiscuous mode [ 38.261844][ T753] macsec0: mtu less than device minimum [ 38.288273][ T760] macsec0: mtu less than device minimum [ 38.627805][ T28] audit: type=1400 audit(1793531290.857:128): avc: denied { create } for pid=795 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 39.968750][ T886] device veth1_macvtap left promiscuous mode [ 40.038324][ T28] audit: type=1400 audit(1793531292.267:129): avc: denied { create } for pid=904 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.090043][ T28] audit: type=1400 audit(1793531292.317:130): avc: denied { create } for pid=905 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 40.564280][ T28] audit: type=1400 audit(1793531292.787:131): avc: denied { create } for pid=939 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 40.649875][ T940] device wg2 entered promiscuous mode [ 41.275013][ T1023] device syzkaller0 entered promiscuous mode [ 41.350017][ T1029] device wg2 left promiscuous mode [ 41.427759][ T1030] device wg2 entered promiscuous mode [ 42.348607][ T1084] device veth0_vlan left promiscuous mode [ 42.366073][ T1084] device veth0_vlan entered promiscuous mode [ 42.473564][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.860745][ T28] audit: type=1400 audit(1793531296.087:132): avc: denied { ioctl } for pid=1154 comm="syz.3.213" path="socket:[18715]" dev="sockfs" ino=18715 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.918159][ T1155] device syzkaller0 entered promiscuous mode [ 45.839978][ T28] audit: type=1400 audit(1793531298.067:133): avc: denied { create } for pid=1164 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 45.888678][ T1171] device wg2 left promiscuous mode [ 45.911074][ T1171] device wg2 entered promiscuous mode [ 48.902492][ T28] audit: type=1400 audit(1793531301.127:134): avc: denied { create } for pid=1279 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.646044][ T1411] syz.0.272[1411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.646139][ T1411] syz.0.272[1411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.141966][ T1425] device syzkaller0 entered promiscuous mode [ 56.164998][ T1425] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 56.224532][ T28] audit: type=1400 audit(1793531308.447:135): avc: denied { create } for pid=1436 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 58.131235][ T1481] device veth1_macvtap left promiscuous mode [ 58.533547][ T1487] device syzkaller0 entered promiscuous mode [ 58.790894][ T1529] tap0: tun_chr_ioctl cmd 2148553947 [ 58.823696][ T1526] device syzkaller0 entered promiscuous mode [ 58.973872][ T1547] bridge0: port 3(veth0) entered blocking state [ 58.980378][ T1547] bridge0: port 3(veth0) entered disabled state [ 58.987722][ T1547] device veth0 entered promiscuous mode [ 58.993443][ T1547] bridge0: port 3(veth0) entered blocking state [ 58.999754][ T1547] bridge0: port 3(veth0) entered forwarding state [ 59.049650][ T1564] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.073763][ T1547] device veth0 left promiscuous mode [ 59.089652][ T1547] bridge0: port 3(veth0) entered disabled state [ 59.131338][ T1562] caif0: tun_chr_ioctl cmd 2147767520 [ 59.141083][ T1574] FAULT_INJECTION: forcing a failure. [ 59.141083][ T1574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.154443][ T1574] CPU: 0 PID: 1574 Comm: syz.4.321 Not tainted syzkaller #0 [ 59.161761][ T1574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.171853][ T1574] Call Trace: [ 59.175179][ T1574] [ 59.178157][ T1574] __dump_stack+0x21/0x24 [ 59.182567][ T1574] dump_stack_lvl+0x110/0x170 [ 59.187304][ T1574] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.192350][ T1574] dump_stack+0x15/0x24 [ 59.196537][ T1574] should_fail_ex+0x3bf/0x510 [ 59.201245][ T1574] should_fail+0xb/0x10 [ 59.205520][ T1574] should_fail_usercopy+0x1a/0x20 [ 59.210574][ T1574] _copy_from_user+0x1e/0xc0 [ 59.215188][ T1574] __sys_bpf+0x2a0/0x850 [ 59.219454][ T1574] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.224857][ T1574] ? __cfi_ksys_write+0x10/0x10 [ 59.229731][ T1574] ? debug_smp_processor_id+0x17/0x20 [ 59.235136][ T1574] __x64_sys_bpf+0x7c/0x90 [ 59.239578][ T1574] x64_sys_call+0x488/0x9a0 [ 59.244105][ T1574] do_syscall_64+0x4c/0xa0 [ 59.248543][ T1574] ? clear_bhb_loop+0x30/0x80 [ 59.253258][ T1574] ? clear_bhb_loop+0x30/0x80 [ 59.257992][ T1574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.263923][ T1574] RIP: 0033:0x7fc4b379f559 [ 59.268357][ T1574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.287985][ T1574] RSP: 002b:00007fc4b46dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.296431][ T1574] RAX: ffffffffffffffda RBX: 00007fc4b3a25fa0 RCX: 00007fc4b379f559 [ 59.304418][ T1574] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 59.312428][ T1574] RBP: 00007fc4b46dd090 R08: 0000000000000000 R09: 0000000000000000 [ 59.320408][ T1574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.328388][ T1574] R13: 00007fc4b3a26038 R14: 00007fc4b3a25fa0 R15: 00007ffed6410858 [ 59.336391][ T1574] [ 59.353256][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.375547][ T1478] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.382662][ T1478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.775299][ T1605] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.783887][ T1605] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.824300][ T1611] FAULT_INJECTION: forcing a failure. [ 59.824300][ T1611] name failslab, interval 1, probability 0, space 0, times 1 [ 59.837261][ T1611] CPU: 0 PID: 1611 Comm: syz.1.332 Not tainted syzkaller #0 [ 59.844593][ T1611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.854695][ T1611] Call Trace: [ 59.857986][ T1611] [ 59.860951][ T1611] __dump_stack+0x21/0x24 [ 59.865310][ T1611] dump_stack_lvl+0x110/0x170 [ 59.870010][ T1611] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.875059][ T1611] ? __this_cpu_preempt_check+0x13/0x20 [ 59.880621][ T1611] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 59.886874][ T1611] dump_stack+0x15/0x24 [ 59.891030][ T1611] should_fail_ex+0x3bf/0x510 [ 59.895738][ T1611] __should_failslab+0xac/0xf0 [ 59.900526][ T1611] should_failslab+0x9/0x20 [ 59.905034][ T1611] __kmem_cache_alloc_node+0x3d/0x2d0 [ 59.910419][ T1611] ? bpf_prog_test_run_skb+0x230/0x18a0 [ 59.915977][ T1611] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 59.921730][ T1611] ? kstrtouint_from_user+0x113/0x170 [ 59.927132][ T1611] ? bpf_prog_test_run_skb+0x230/0x18a0 [ 59.932681][ T1611] __kmalloc+0xa4/0x1e0 [ 59.936837][ T1611] bpf_prog_test_run_skb+0x230/0x18a0 [ 59.942212][ T1611] ? __fget_files+0x2d1/0x330 [ 59.946899][ T1611] ? __kasan_check_write+0x14/0x20 [ 59.952019][ T1611] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 59.957837][ T1611] bpf_prog_test_run+0x3b4/0x5c0 [ 59.962777][ T1611] ? bpf_prog_query+0x270/0x270 [ 59.967630][ T1611] ? selinux_bpf+0xce/0xf0 [ 59.972066][ T1611] ? security_bpf+0x93/0xb0 [ 59.976576][ T1611] __sys_bpf+0x5ee/0x850 [ 59.980913][ T1611] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.986289][ T1611] ? __cfi_sched_clock_cpu+0x10/0x10 [ 59.991601][ T1611] __x64_sys_bpf+0x7c/0x90 [ 59.996013][ T1611] x64_sys_call+0x488/0x9a0 [ 60.000523][ T1611] do_syscall_64+0x4c/0xa0 [ 60.004947][ T1611] ? clear_bhb_loop+0x30/0x80 [ 60.009626][ T1611] ? clear_bhb_loop+0x30/0x80 [ 60.014327][ T1611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.020231][ T1611] RIP: 0033:0x7efcb179f559 [ 60.024662][ T1611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.044270][ T1611] RSP: 002b:00007efcb2588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.052690][ T1611] RAX: ffffffffffffffda RBX: 00007efcb1a25fa0 RCX: 00007efcb179f559 [ 60.060663][ T1611] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 60.068640][ T1611] RBP: 00007efcb2588090 R08: 0000000000000000 R09: 0000000000000000 [ 60.076628][ T1611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.084602][ T1611] R13: 00007efcb1a26038 R14: 00007efcb1a25fa0 R15: 00007ffec1e2b2a8 [ 60.092579][ T1611] [ 60.108550][ T1605] device bridge_slave_1 left promiscuous mode [ 60.116024][ T1605] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.130158][ T1605] device bridge_slave_0 left promiscuous mode [ 60.137839][ T1605] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.251126][ T1612] device syzkaller0 entered promiscuous mode [ 61.273149][ T1682] : renamed from bond_slave_1 [ 62.132353][ T1761] device macsec0 entered promiscuous mode [ 62.151228][ T1761] device veth1_macvtap entered promiscuous mode [ 62.162926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.388957][ T28] audit: type=1400 audit(1793531314.617:136): avc: denied { create } for pid=1766 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 63.458537][ T1877] device veth0_vlan left promiscuous mode [ 63.479739][ T1877] device veth0_vlan entered promiscuous mode [ 64.546021][ T1942] device syzkaller0 entered promiscuous mode [ 64.810438][ T1974] device wg2 entered promiscuous mode [ 67.201207][ T1980] device wg2 entered promiscuous mode [ 68.028215][ T2054] device veth0_vlan left promiscuous mode [ 68.044521][ T2054] device veth0_vlan entered promiscuous mode [ 68.198309][ T2070] bridge0: port 3(team_slave_1) entered blocking state [ 68.214576][ T2070] bridge0: port 3(team_slave_1) entered disabled state [ 68.231952][ T2070] device team_slave_1 entered promiscuous mode [ 68.425151][ T2027] cgroup: fork rejected by pids controller in /syz3 [ 68.623876][ T2092] device veth0_vlan left promiscuous mode [ 68.636007][ T2092] device veth0_vlan entered promiscuous mode [ 69.286658][ T28] audit: type=1400 audit(1793531321.517:137): avc: denied { create } for pid=2155 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.348914][ T28] audit: type=1400 audit(1793531321.567:138): avc: denied { create } for pid=2160 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 74.399790][ T2217] tap0: tun_chr_ioctl cmd 1074025673 [ 74.406206][ T28] audit: type=1400 audit(1793531326.637:139): avc: denied { setattr } for pid=2216 comm="syz.2.475" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.567865][ T2290] device sit0 left promiscuous mode [ 75.616051][ T2286] device sit0 entered promiscuous mode [ 76.259045][ T2338] device syzkaller0 entered promiscuous mode [ 76.672924][ T2393] device sit0 entered promiscuous mode [ 76.929397][ T2413] device veth1_macvtap left promiscuous mode [ 76.942835][ T2413] device macsec0 entered promiscuous mode [ 77.605781][ T2444] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 77.631210][ T2444] device syzkaller0 entered promiscuous mode [ 77.890808][ T2454] tap0: tun_chr_ioctl cmd 1074025673 [ 77.981268][ T2463] device veth1_macvtap left promiscuous mode [ 78.054443][ T2463] device macsec0 left promiscuous mode [ 78.335786][ T28] audit: type=1400 audit(1793531330.567:140): avc: denied { create } for pid=2485 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.069417][ T2481] cgroup: fork rejected by pids controller in /syz0 [ 83.193309][ T28] audit: type=1400 audit(1793531335.417:141): avc: denied { create } for pid=2559 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.532144][ T28] audit: type=1400 audit(1793531335.757:142): avc: denied { create } for pid=2587 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.272489][ T28] audit: type=1400 audit(1793531338.497:143): avc: denied { create } for pid=2651 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.357789][ T28] audit: type=1400 audit(1793531338.587:144): avc: denied { create } for pid=2655 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.642573][ T2667] device syzkaller0 entered promiscuous mode [ 86.832690][ T2698] tap0: tun_chr_ioctl cmd 1074025680 [ 88.835925][ T2745] device wg2 left promiscuous mode [ 89.004437][ T2746] device wg2 entered promiscuous mode [ 89.346833][ T2749] device syzkaller0 entered promiscuous mode [ 89.622135][ T2767] device veth1_macvtap left promiscuous mode [ 89.628738][ T2767] device macsec0 entered promiscuous mode [ 89.883784][ T2775] device veth1_to_bond entered promiscuous mode [ 89.966262][ T2776] device syzkaller0 entered promiscuous mode [ 90.079303][ T2791] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.086559][ T2791] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.360231][ T2788] device team_slave_1 left promiscuous mode [ 90.370955][ T2788] bridge0: port 3(team_slave_1) entered disabled state [ 90.401497][ T2788] device bridge_slave_1 left promiscuous mode [ 90.410414][ T2788] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.445062][ T2788] device bridge_slave_0 left promiscuous mode [ 90.453233][ T2788] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.146502][ T2873] bridge0: port 5(gretap0) entered blocking state [ 96.152987][ T2873] bridge0: port 5(gretap0) entered disabled state [ 96.176042][ T2873] device gretap0 entered promiscuous mode [ 96.190919][ T2873] bridge0: port 5(gretap0) entered blocking state [ 96.197432][ T2873] bridge0: port 5(gretap0) entered forwarding state [ 96.453433][ T28] audit: type=1400 audit(1793531348.677:145): avc: denied { create } for pid=2882 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.826679][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.834006][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.330207][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.347182][ T2881] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.354748][ T2881] device bridge_slave_0 entered promiscuous mode [ 99.401652][ T28] audit: type=1400 audit(1793531351.627:146): avc: denied { create } for pid=2918 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.469542][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.501755][ T2881] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.533603][ T2881] device bridge_slave_1 entered promiscuous mode [ 100.154657][ T28] audit: type=1400 audit(1793531352.377:147): avc: denied { create } for pid=2881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.247725][ T28] audit: type=1400 audit(1793531352.477:148): avc: denied { write } for pid=2881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.389856][ T28] audit: type=1400 audit(1793531352.477:149): avc: denied { read } for pid=2881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.506237][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.515900][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.579324][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.608016][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.645565][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.652659][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.668883][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.684661][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.735194][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.742345][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.749891][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.760182][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.768436][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.811821][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.844451][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.901035][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.915756][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.927843][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.935976][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.949675][ T2881] device veth0_vlan entered promiscuous mode [ 100.981807][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.005777][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.025111][ T2881] device veth1_macvtap entered promiscuous mode [ 101.042412][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.063931][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.078129][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.102416][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.110887][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.120287][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.132224][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.332552][ T2984] device macsec0 left promiscuous mode [ 101.383784][ T2981] device veth1_macvtap entered promiscuous mode [ 101.392311][ T2981] device macsec0 entered promiscuous mode [ 101.409017][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.506011][ T2986] device veth1_macvtap left promiscuous mode [ 101.512336][ T2986] device macsec0 entered promiscuous mode [ 101.561239][ T28] audit: type=1400 audit(1793531353.797:150): avc: denied { create } for pid=2988 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 101.625640][ T2995] device veth1_macvtap entered promiscuous mode [ 103.035977][ T3051] device syzkaller0 entered promiscuous mode [ 103.274561][ T3065] device syzkaller0 entered promiscuous mode [ 104.417282][ T2996] syz.1.670 (2996) used greatest stack depth: 21880 bytes left [ 104.529960][ T3116] device vlan1 entered promiscuous mode [ 105.668039][ T28] audit: type=1400 audit(1793531357.897:151): avc: denied { ioctl } for pid=3180 comm="syz.2.728" path="cgroup:[4026532459]" dev="nsfs" ino=4026532459 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.462101][ T28] audit: type=1400 audit(1793531360.687:152): avc: denied { create } for pid=3227 comm="syz.5.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.504232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.518263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.555630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.420830][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.428109][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.731298][ T3456] device wg2 left promiscuous mode [ 113.825696][ T3456] device wg2 entered promiscuous mode [ 114.119333][ T28] audit: type=1400 audit(1793531366.347:153): avc: denied { create } for pid=3462 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.252363][ T3470] device syzkaller0 left promiscuous mode [ 114.444633][ T3473] device wg2 entered promiscuous mode [ 114.462549][ T3479] device wg2 left promiscuous mode [ 114.685533][ T3479] device syzkaller0 entered promiscuous mode [ 115.776062][ T3518] device syzkaller0 entered promiscuous mode [ 117.616801][ T3577] pimreg1: tun_chr_ioctl cmd 1074025677 [ 117.622526][ T3577] pimreg1: linktype set to 773 [ 118.910707][ T3617] û: renamed from bond_slave_0 [ 119.042662][ T3620] device syzkaller0 entered promiscuous mode [ 120.397134][ T28] audit: type=1400 audit(1793531372.627:154): avc: denied { setattr } for pid=3688 comm="syz.5.862" path="pipe:[23897]" dev="pipefs" ino=23897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 121.113452][ T3720] @0Ù: renamed from bond_slave_1 [ 122.335763][ T28] audit: type=1400 audit(1793531374.487:155): avc: denied { create } for pid=3771 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 126.051715][ T28] audit: type=1400 audit(1793531378.277:156): avc: denied { create } for pid=3840 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.331542][ T3910] device macsec0 entered promiscuous mode [ 133.487787][ T3979] -1: renamed from syzkaller0 [ 133.563260][ T3979] -1: tun_chr_ioctl cmd 2147767521 [ 135.829954][ T28] audit: type=1400 audit(1793531388.057:157): avc: denied { create } for pid=4034 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.127039][ T4064] device dummy0 entered promiscuous mode [ 136.209044][ T4068] device veth1_macvtap left promiscuous mode [ 136.227218][ T4068] device macsec0 left promiscuous mode [ 136.560157][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 136.637007][ T28] audit: type=1400 audit(1793531388.857:158): avc: denied { read open } for pid=4076 comm="syz.2.977" path="net:[4026532466]" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.619868][ T4103] syz.2.986 (4103) used greatest stack depth: 21408 bytes left [ 141.829603][ T4241] device syzkaller0 entered promiscuous mode [ 142.257181][ T4228] device syzkaller0 entered promiscuous mode [ 142.413307][ T4261] tap1: tun_chr_ioctl cmd 1074025676 [ 142.418737][ T4261] tap1: owner set to 0 [ 142.575179][ T4263] device wg2 entered promiscuous mode [ 142.592760][ T4269] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 142.936148][ T4292] device dummy0 entered promiscuous mode [ 143.009686][ T4295] syz.0.1030[4295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.009798][ T4295] syz.0.1030[4295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.737653][ T4430] tap0: tun_chr_ioctl cmd 1074812118 [ 146.281932][ T28] audit: type=1400 audit(1793531398.507:159): avc: denied { create } for pid=4455 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.549563][ T4567] device sit0 entered promiscuous mode [ 149.895468][ T4633] device syzkaller0 entered promiscuous mode [ 150.876388][ T4686] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 150.900133][ T4686] syzkaller0: linktype set to 0 [ 151.600707][ T4724] erspan0: refused to change device tx_queue_len [ 151.911746][ T4732] device bridge_slave_1 left promiscuous mode [ 151.998550][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.144502][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.810239][ T4771] ªªªªª: renamed from bond_slave_0 [ 161.207656][ T4834] pimreg: tun_chr_ioctl cmd 1074025675 [ 161.296961][ T4834] pimreg: persist disabled [ 162.819299][ T4877] device syzkaller0 entered promiscuous mode [ 164.703409][ T28] audit: type=1400 audit(1793531416.927:160): avc: denied { create } for pid=4951 comm="syz.1.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 165.337126][ T4992] device syzkaller0 entered promiscuous mode [ 165.428672][ T4997] device syzkaller0 entered promiscuous mode [ 167.550814][ T5077] tap0: tun_chr_ioctl cmd 1074025677 [ 167.625410][ T5077] tap0: linktype set to 825 [ 168.048944][ T5102] tap1: tun_chr_ioctl cmd 1074025673 [ 173.502935][ T28] audit: type=1400 audit(1793531425.727:161): avc: denied { ioctl } for pid=5216 comm="syz.1.1258" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 175.357102][ T5310] device wg2 left promiscuous mode [ 176.034473][ T5355] device syzkaller0 entered promiscuous mode [ 177.402248][ T5408] device syzkaller0 entered promiscuous mode [ 180.210400][ T5491] device sit0 entered promiscuous mode [ 182.796471][ T5598] device sit0 left promiscuous mode [ 183.102942][ T5601] device sit0 entered promiscuous mode [ 184.193585][ T5667] device syzkaller0 entered promiscuous mode [ 184.211345][ T5678] device sit0 left promiscuous mode [ 184.286932][ T5680] device syzkaller0 entered promiscuous mode [ 184.304105][ T5681] device sit0 entered promiscuous mode [ 185.012567][ T5727] tap0: tun_chr_ioctl cmd 2147767520 [ 185.603516][ T5759] device bridge_slave_0 entered promiscuous mode [ 187.365068][ T5856] device syzkaller0 entered promiscuous mode [ 188.601117][ T5922] device wg2 left promiscuous mode [ 188.727665][ T5924] device wg2 entered promiscuous mode [ 189.456753][ T5949] cgroup: fork rejected by pids controller in /syz5 [ 190.019742][ T5982] IPv6: …: Disabled Multicast RS [ 190.360200][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.367436][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.375161][ T5983] device bridge_slave_0 entered promiscuous mode [ 190.398480][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.405734][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.414980][ T5983] device bridge_slave_1 entered promiscuous mode [ 190.780468][ T43] device bridge_slave_1 left promiscuous mode [ 190.798866][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.828669][ T43] device bridge_slave_0 left promiscuous mode [ 190.844185][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.865801][ T43] device veth1_macvtap left promiscuous mode [ 190.872691][ T43] device veth0_vlan left promiscuous mode [ 191.044132][ T6011] syz.4.1452[6011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.044215][ T6011] syz.4.1452[6011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.363362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.399000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.419917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.441826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.461759][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.468879][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.479546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.509343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.534949][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.542074][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.560768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.597048][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.645267][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.653444][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.820673][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.834582][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.856057][ T5983] device veth0_vlan entered promiscuous mode [ 191.867294][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.879645][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.895824][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.908799][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.015578][ T6049] device sit0 left promiscuous mode [ 192.156851][ T6060] device sit0 entered promiscuous mode [ 192.208350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.216745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.227150][ T5983] device veth1_macvtap entered promiscuous mode [ 192.250955][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.259970][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.268432][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.302659][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.321297][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.493909][ T6097] device lo entered promiscuous mode [ 194.767765][ T6144] device lo entered promiscuous mode [ 195.235981][ T6175] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 196.277165][ T6213] device syzkaller0 entered promiscuous mode [ 197.516177][ T6252] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 198.226644][ T6298] cgroup: fork rejected by pids controller in /syz4 [ 198.989734][ T6316] tap0: tun_chr_ioctl cmd 1074812118 [ 199.015357][ T6316] tap0: tun_chr_ioctl cmd 2147767517 [ 199.083679][ T43] bridge0: port 3(ip6gretap0) entered disabled state [ 199.169973][ T43] device ip6gretap0 left promiscuous mode [ 199.184703][ T43] bridge0: port 3(ip6gretap0) entered disabled state [ 199.296125][ T28] audit: type=1400 audit(1793531451.527:162): avc: denied { create } for pid=6326 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 199.549978][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.557254][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.587280][ T6332] device bridge_slave_0 entered promiscuous mode [ 199.642945][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.685994][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.719041][ T6332] device bridge_slave_1 entered promiscuous mode [ 199.822018][ T43] bridge0: port 5(gretap0) entered disabled state [ 199.926107][ T43] device gretap0 left promiscuous mode [ 199.965576][ T43] bridge0: port 5(gretap0) entered disabled state [ 200.372709][ T43] device veth0_to_team left promiscuous mode [ 200.385539][ T43] bridge0: port 4(veth0_to_team) entered disabled state [ 200.416410][ T43] device bridge_slave_1 left promiscuous mode [ 200.451923][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.486111][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.541403][ T43] device veth0_vlan left promiscuous mode [ 203.378015][ T6381] device syzkaller0 entered promiscuous mode [ 203.567799][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.602012][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.633306][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.675577][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.705710][ T2206] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.712894][ T2206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.820731][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.868680][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.886248][ T2206] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.893329][ T2206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.909143][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.922269][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.931210][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.946814][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.987702][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.042320][ T6420] device syzkaller0 left promiscuous mode [ 204.086978][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.115315][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.286119][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.316102][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.360832][ T6332] device veth0_vlan entered promiscuous mode [ 204.389221][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.402811][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.549963][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.566031][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.679203][ T6332] device veth1_macvtap entered promiscuous mode [ 204.774321][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.795738][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.848829][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.877094][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.887951][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.187524][ T6457] device sit0 entered promiscuous mode [ 205.440893][ T6472] device syzkaller0 entered promiscuous mode [ 206.315745][ T6536] syz.4.1610[6536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.315822][ T6536] syz.4.1610[6536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.436440][ T6545] device macsec0 entered promiscuous mode [ 213.526064][ T6667] device sit0 left promiscuous mode [ 214.731386][ T6706] device syzkaller0 entered promiscuous mode [ 214.818361][ T6720] device syzkaller0 entered promiscuous mode [ 216.752228][ T6775] device syzkaller0 entered promiscuous mode [ 220.294949][ T6923] ±ÿ: renamed from team_slave_1 [ 221.574342][ T6974] device wg2 entered promiscuous mode [ 222.524743][ T6982] device wg2 left promiscuous mode [ 222.615654][ T6987] device wg2 entered promiscuous mode [ 223.239648][ T6997] device veth0_vlan left promiscuous mode [ 223.312282][ T6997] device veth0_vlan entered promiscuous mode [ 223.403615][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.418399][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.440166][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.495075][ T7083] device syzkaller0 entered promiscuous mode [ 225.102057][ T7098] device wg2 entered promiscuous mode [ 226.645404][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 122 seconds. [ 226.653526][ T29] Not tainted syzkaller #0 [ 226.658772][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 226.667598][ T29] task:rcu_tasks_kthre state:D stack:28864 pid:11 ppid:2 flags:0x00004000 [ 226.676906][ T29] Call Trace: [ 226.680219][ T29] [ 226.683171][ T29] __schedule+0xcb3/0x1700 [ 226.687657][ T29] ? release_firmware_map_entry+0x190/0x190 [ 226.693585][ T29] ? __queue_work+0x9f2/0xd50 [ 226.698302][ T29] schedule+0xbd/0x170 [ 226.702382][ T29] schedule_timeout+0xba/0x340 [ 226.707178][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 226.712574][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 226.718413][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 226.723292][ T29] wait_for_common+0x364/0x640 [ 226.728093][ T29] ? wait_for_completion+0x20/0x20 [ 226.733223][ T29] wait_for_completion+0x18/0x20 [ 226.738189][ T29] __synchronize_srcu+0x173/0x200 [ 226.743235][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 226.748999][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 226.754476][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 226.759887][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 226.766248][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 226.771820][ T29] synchronize_srcu+0x1c5/0x1d0 [ 226.776720][ T29] rcu_tasks_postscan+0x10/0x20 [ 226.781584][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 226.786551][ T29] ? __kasan_check_write+0x14/0x20 [ 226.791674][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 226.797156][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 226.802629][ T29] ? mutex_lock+0x93/0x1b0 [ 226.807088][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 226.811951][ T29] ? schedule_timeout+0x1a7/0x340 [ 226.817020][ T29] rcu_tasks_kthread+0x6a/0x90 [ 226.821887][ T29] kthread+0x281/0x320 [ 226.825983][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 226.831457][ T29] ? __cfi_kthread+0x10/0x10 [ 226.836076][ T29] ret_from_fork+0x1f/0x30 [ 226.840513][ T29] [ 226.844965][ T29] NMI backtrace for cpu 0 [ 226.849329][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 226.856547][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.866619][ T29] Call Trace: [ 226.869914][ T29] [ 226.872861][ T29] __dump_stack+0x21/0x24 [ 226.877217][ T29] dump_stack_lvl+0x110/0x170 [ 226.881918][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 226.886971][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 226.893600][ T29] dump_stack+0x15/0x24 [ 226.897781][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 226.902754][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 226.908421][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 226.913909][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 226.920003][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 226.926010][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 226.932038][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 226.938090][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 226.944012][ T29] watchdog+0xde1/0xf30 [ 226.948204][ T29] ? __cfi_watchdog+0x10/0x10 [ 226.952909][ T29] ? __kasan_check_read+0x11/0x20 [ 226.957960][ T29] ? __kthread_parkme+0x13a/0x180 [ 226.963004][ T29] kthread+0x281/0x320 [ 226.967099][ T29] ? __cfi_watchdog+0x10/0x10 [ 226.971811][ T29] ? __cfi_kthread+0x10/0x10 [ 226.976437][ T29] ret_from_fork+0x1f/0x30 [ 226.980897][ T29] [ 226.984112][ T29] Sending NMI from CPU 0 to CPUs 1: [ 226.989459][ C1] NMI backtrace for cpu 1 [ 226.989470][ C1] CPU: 1 PID: 7157 Comm: syz.4.1758 Not tainted syzkaller #0 [ 226.989487][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.989496][ C1] RIP: 0010:arch_stack_walk+0x12b/0x150 [ 226.989528][ C1] Code: 48 89 df 48 89 c6 41 ba 4a 9c 94 52 45 03 56 fc 74 02 0f 0b 41 ff d6 84 c0 74 11 4c 89 ff e8 9c a6 05 00 83 bd 78 ff ff ff 00 <75> c7 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 75 0d 48 83 c4 68 5b [ 226.989541][ C1] RSP: 0018:ffffc900007676a8 EFLAGS: 00000202 [ 226.989556][ C1] RAX: 1ffff920000ece01 RBX: ffffc90000767760 RCX: 00000000000ece01 [ 226.989568][ C1] RDX: ffffc900007677e0 RSI: 1ffff920000eced6 RDI: ffffc900007676d0 [ 226.989581][ C1] RBP: ffffc90000767730 R08: ffffc90000767770 R09: ffffc90000767768 [ 226.989593][ C1] R10: 0000000000000000 R11: fffff520000ecee1 R12: ffff88814bd08000 [ 226.989605][ C1] R13: 0000000000000000 R14: ffffffff81620dd0 R15: ffffc900007676a8 [ 226.989616][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 226.989630][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.989642][ C1] CR2: 00007fb200ff3990 CR3: 000000012d4e3000 CR4: 00000000003506a0 [ 226.989657][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.989667][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 226.989677][ C1] Call Trace: [ 226.989682][ C1] [ 226.989690][ C1] ? kasan_set_track+0x4b/0x70 [ 226.989712][ C1] stack_trace_save+0xa6/0xf0 [ 226.989734][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 226.989756][ C1] ? __stack_depot_save+0x36/0x490 [ 226.989780][ C1] ? memset+0x35/0x40 [ 226.989796][ C1] kasan_set_track+0x4b/0x70 [ 226.989831][ C1] ? debug_smp_processor_id+0x17/0x20 [ 226.989854][ C1] ? kasan_quarantine_put+0x34/0x190 [ 226.989873][ C1] ? kmem_cache_free+0x12d/0x300 [ 226.989895][ C1] kasan_save_free_info+0x2b/0x40 [ 226.989911][ C1] ____kasan_slab_free+0x132/0x180 [ 226.989933][ C1] __kasan_slab_free+0x11/0x20 [ 226.989953][ C1] slab_free_freelist_hook+0xc2/0x190 [ 226.989971][ C1] ? __vm_area_free+0x7e/0x130 [ 226.989990][ C1] kmem_cache_free+0x12d/0x300 [ 226.990022][ C1] __vm_area_free+0x7e/0x130 [ 226.990042][ C1] exit_mmap+0x5e2/0xc10 [ 226.990055][ C1] ? __cfi_perf_event_task_output+0x10/0x10 [ 226.990076][ C1] ? __cfi_exit_mmap+0x10/0x10 [ 226.990094][ C1] ? __cfi_exit_aio+0x10/0x10 [ 226.990115][ C1] ? uprobe_clear_state+0x2c6/0x320 [ 226.990136][ C1] __mmput+0x92/0x340 [ 226.990157][ C1] mmput+0x4b/0x150 [ 226.990177][ C1] do_exit+0xa62/0x29f0 [ 226.990203][ C1] ? __cfi_do_exit+0x10/0x10 [ 226.990225][ C1] ? xfd_validate_state+0x70/0x150 [ 226.990249][ C1] ? __kasan_check_write+0x14/0x20 [ 226.990269][ C1] __x64_sys_exit+0x40/0x40 [ 226.990292][ C1] x64_sys_call+0x67/0x9a0 [ 226.990311][ C1] do_syscall_64+0x4c/0xa0 [ 226.990326][ C1] ? clear_bhb_loop+0x30/0x80 [ 226.990346][ C1] ? clear_bhb_loop+0x30/0x80 [ 226.990366][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.990404][ C1] RIP: 0033:0x7ff03339f559 [ 226.990435][ C1] Code: Unable to access opcode bytes at 0x7ff03339f52f. [ 226.990443][ C1] RSP: 002b:00007ff03417dfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 226.990459][ C1] RAX: ffffffffffffffda RBX: 00007ff033626090 RCX: 00007ff03339f559 [ 226.990471][ C1] RDX: 00007ff03417e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.990482][ C1] RBP: 00007ff033436b50 R08: 0000000000000000 R09: 0000000000000000 [ 226.990492][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.990503][ C1] R13: 00007ff033626128 R14: 00007ff033626090 R15: 00007ffd38599528 [ 226.990520][ C1] [ 227.357701][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.364988][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.951142][ T7217] caif0: tun_chr_ioctl cmd 2147767520 [ 232.040979][ T7316] device syzkaller0 entered promiscuous mode [ 234.066767][ T7393] device dummy0 entered promiscuous mode [ 236.073397][ T7472] tap1: tun_chr_ioctl cmd 21731 [ 237.277215][ T7516] device syzkaller0 entered promiscuous mode [ 239.059762][ T7624] device sit0 entered promiscuous mode [ 241.693388][ T7692] device syzkaller0 left promiscuous mode [ 242.769882][ T7725] device syzkaller0 entered promiscuous mode [ 242.837149][ T7725] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 244.053364][ T7775] tap0: tun_chr_ioctl cmd 1074025676 [ 244.067248][ T7775] tap0: owner set to 0 [ 245.045909][ T7819] FAULT_INJECTION: forcing a failure. [ 245.045909][ T7819] name failslab, interval 1, probability 0, space 0, times 0 [ 245.058629][ T7819] CPU: 0 PID: 7819 Comm: syz.5.1938 Not tainted syzkaller #0 [ 245.066029][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.076101][ T7819] Call Trace: [ 245.079394][ T7819] [ 245.082354][ T7819] __dump_stack+0x21/0x24 [ 245.086720][ T7819] dump_stack_lvl+0x110/0x170 [ 245.091425][ T7819] ? __cfi_dump_stack_lvl+0x8/0x8 [ 245.096476][ T7819] dump_stack+0x15/0x24 [ 245.100654][ T7819] should_fail_ex+0x3bf/0x510 [ 245.105363][ T7819] ? radix_tree_node_alloc+0x80/0x380 [ 245.110772][ T7819] __should_failslab+0xac/0xf0 [ 245.115566][ T7819] should_failslab+0x9/0x20 [ 245.120086][ T7819] kmem_cache_alloc+0x3b/0x320 [ 245.124875][ T7819] ? kasan_save_free_info+0x2b/0x40 [ 245.130117][ T7819] ? ____kasan_slab_free+0x132/0x180 [ 245.135697][ T7819] radix_tree_node_alloc+0x80/0x380 [ 245.140930][ T7819] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.147118][ T7819] radix_tree_extend+0x134/0x530 [ 245.152096][ T7819] idr_get_free+0x1bb/0xa90 [ 245.156656][ T7819] idr_alloc_cyclic+0x2a4/0x5f0 [ 245.161559][ T7819] ? __cfi_idr_alloc_cyclic+0x10/0x10 [ 245.167003][ T7819] ? __kasan_check_write+0x14/0x20 [ 245.172175][ T7819] ? _raw_spin_lock_bh+0x94/0xf0 [ 245.177152][ T7819] ? debug_smp_processor_id+0x17/0x20 [ 245.182576][ T7819] btf_alloc_id+0x44/0x140 [ 245.187037][ T7819] btf_new_fd+0x5c9/0x7a0 [ 245.191411][ T7819] bpf_btf_load+0x6f/0x90 [ 245.195781][ T7819] __sys_bpf+0x5d5/0x850 [ 245.200053][ T7819] ? bpf_link_show_fdinfo+0x330/0x330 [ 245.205449][ T7819] ? fput+0x154/0x1a0 [ 245.209467][ T7819] ? fpregs_restore_userregs+0x128/0x260 [ 245.215146][ T7819] __x64_sys_bpf+0x7c/0x90 [ 245.219613][ T7819] x64_sys_call+0x488/0x9a0 [ 245.224156][ T7819] do_syscall_64+0x4c/0xa0 [ 245.228622][ T7819] ? clear_bhb_loop+0x30/0x80 [ 245.233333][ T7819] ? clear_bhb_loop+0x30/0x80 [ 245.238056][ T7819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.243990][ T7819] RIP: 0033:0x7fa0abd9f559 [ 245.248433][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.268069][ T7819] RSP: 002b:00007fa0acc04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.276524][ T7819] RAX: ffffffffffffffda RBX: 00007fa0ac025fa0 RCX: 00007fa0abd9f559 [ 245.284530][ T7819] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 245.292535][ T7819] RBP: 00007fa0acc04090 R08: 0000000000000000 R09: 0000000000000000 [ 245.300541][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.308545][ T7819] R13: 00007fa0ac026038 R14: 00007fa0ac025fa0 R15: 00007ffcfc677848 [ 245.316567][ T7819] [ 246.476952][ T7858] FAULT_INJECTION: forcing a failure. [ 246.476952][ T7858] name failslab, interval 1, probability 0, space 0, times 0 [ 246.489648][ T7858] CPU: 1 PID: 7858 Comm: syz.2.1951 Not tainted syzkaller #0 [ 246.497073][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.507158][ T7858] Call Trace: [ 246.510461][ T7858] [ 246.513418][ T7858] __dump_stack+0x21/0x24 [ 246.517778][ T7858] dump_stack_lvl+0x110/0x170 [ 246.522480][ T7858] ? __cfi_dump_stack_lvl+0x8/0x8 [ 246.527530][ T7858] ? kasan_save_alloc_info+0x1f/0x30 [ 246.532845][ T7858] ? __kasan_slab_alloc+0x72/0x80 [ 246.537910][ T7858] ? slab_post_alloc_hook+0x4f/0x2d0 [ 246.543240][ T7858] ? radix_tree_node_alloc+0x80/0x380 [ 246.548645][ T7858] dump_stack+0x15/0x24 [ 246.552827][ T7858] should_fail_ex+0x3bf/0x510 [ 246.557534][ T7858] ? radix_tree_node_alloc+0x80/0x380 [ 246.562963][ T7858] __should_failslab+0xac/0xf0 [ 246.567765][ T7858] should_failslab+0x9/0x20 [ 246.572296][ T7858] kmem_cache_alloc+0x3b/0x320 [ 246.577089][ T7858] radix_tree_node_alloc+0x80/0x380 [ 246.582330][ T7858] idr_get_free+0x2b1/0xa90 [ 246.586870][ T7858] idr_alloc_cyclic+0x2a4/0x5f0 [ 246.591754][ T7858] ? __cfi_idr_alloc_cyclic+0x10/0x10 [ 246.597146][ T7858] ? __kasan_check_write+0x14/0x20 [ 246.602291][ T7858] ? _raw_spin_lock_bh+0x94/0xf0 [ 246.607260][ T7858] ? debug_smp_processor_id+0x17/0x20 [ 246.612671][ T7858] btf_alloc_id+0x44/0x140 [ 246.617119][ T7858] btf_new_fd+0x5c9/0x7a0 [ 246.621487][ T7858] bpf_btf_load+0x6f/0x90 [ 246.625854][ T7858] __sys_bpf+0x5d5/0x850 [ 246.630114][ T7858] ? bpf_link_show_fdinfo+0x330/0x330 [ 246.635518][ T7858] ? __cfi_ksys_write+0x10/0x10 [ 246.640391][ T7858] ? do_user_addr_fault+0x9a5/0x1030 [ 246.645779][ T7858] ? debug_smp_processor_id+0x17/0x20 [ 246.651178][ T7858] __x64_sys_bpf+0x7c/0x90 [ 246.655608][ T7858] x64_sys_call+0x488/0x9a0 [ 246.660130][ T7858] do_syscall_64+0x4c/0xa0 [ 246.664569][ T7858] ? clear_bhb_loop+0x30/0x80 [ 246.669267][ T7858] ? clear_bhb_loop+0x30/0x80 [ 246.673952][ T7858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.679865][ T7858] RIP: 0033:0x7f0a1359f559 [ 246.684298][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.703920][ T7858] RSP: 002b:00007f0a14474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.712351][ T7858] RAX: ffffffffffffffda RBX: 00007f0a13825fa0 RCX: 00007f0a1359f559 [ 246.720337][ T7858] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 246.728328][ T7858] RBP: 00007f0a14474090 R08: 0000000000000000 R09: 0000000000000000 [ 246.736313][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.744297][ T7858] R13: 00007f0a13826038 R14: 00007f0a13825fa0 R15: 00007ffc148ae748 [ 246.752288][ T7858] [ 246.788548][ T7854] device wg2 left promiscuous mode [ 246.827835][ T7854] device wg2 entered promiscuous mode [ 247.381689][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 247.390125][ T29] Not tainted syzkaller #0 [ 247.395089][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.403839][ T29] task:rcu_tasks_kthre state:D stack:28864 pid:11 ppid:2 flags:0x00004000 [ 247.413080][ T29] Call Trace: [ 247.416398][ T29] [ 247.419351][ T29] __schedule+0xcb3/0x1700 [ 247.423787][ T29] ? release_firmware_map_entry+0x190/0x190 [ 247.429708][ T29] ? __queue_work+0x9f2/0xd50 [ 247.434405][ T29] schedule+0xbd/0x170 [ 247.438493][ T29] schedule_timeout+0xba/0x340 [ 247.443281][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 247.448715][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 247.454540][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 247.459416][ T29] wait_for_common+0x364/0x640 [ 247.464188][ T29] ? wait_for_completion+0x20/0x20 [ 247.469334][ T29] wait_for_completion+0x18/0x20 [ 247.474287][ T29] __synchronize_srcu+0x173/0x200 [ 247.479345][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 247.485106][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 247.490591][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 247.496004][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 247.502352][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 247.507927][ T29] synchronize_srcu+0x1c5/0x1d0 [ 247.512797][ T29] rcu_tasks_postscan+0x10/0x20 [ 247.517669][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 247.522642][ T29] ? __kasan_check_write+0x14/0x20 [ 247.527897][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 247.533373][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 247.538869][ T29] ? mutex_lock+0x93/0x1b0 [ 247.543308][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 247.548190][ T29] ? schedule_timeout+0x1a7/0x340 [ 247.553269][ T29] rcu_tasks_kthread+0x6a/0x90 [ 247.558061][ T29] kthread+0x281/0x320 [ 247.562141][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 247.567630][ T29] ? __cfi_kthread+0x10/0x10 [ 247.572323][ T29] ret_from_fork+0x1f/0x30 [ 247.576767][ T29] [ 247.587155][ T29] NMI backtrace for cpu 0 [ 247.591516][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 247.598740][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.608817][ T29] Call Trace: [ 247.612124][ T29] [ 247.615070][ T29] __dump_stack+0x21/0x24 [ 247.619412][ T29] dump_stack_lvl+0x110/0x170 [ 247.624095][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 247.629132][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 247.635752][ T29] dump_stack+0x15/0x24 [ 247.639921][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 247.644869][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 247.650450][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 247.655921][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 247.662011][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 247.668003][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 247.674015][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 247.680009][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 247.685921][ T29] watchdog+0xde1/0xf30 [ 247.690098][ T29] ? __cfi_watchdog+0x10/0x10 [ 247.694788][ T29] ? __kasan_check_read+0x11/0x20 [ 247.699823][ T29] ? __kthread_parkme+0x13a/0x180 [ 247.704862][ T29] kthread+0x281/0x320 [ 247.708945][ T29] ? __cfi_watchdog+0x10/0x10 [ 247.713669][ T29] ? __cfi_kthread+0x10/0x10 [ 247.718270][ T29] ret_from_fork+0x1f/0x30 [ 247.722707][ T29] [ 247.725880][ T29] Sending NMI from CPU 0 to CPUs 1: [ 247.731111][ C1] NMI backtrace for cpu 1 [ 247.731123][ C1] CPU: 1 PID: 7847 Comm: syz.0.1946 Not tainted syzkaller #0 [ 247.731141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.731151][ C1] RIP: 0033:0x7fb2000527bf [ 247.731166][ C1] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 f8 3b 00 89 f0 4c 8d 05 49 d8 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 247.731181][ C1] RSP: 002b:00007ffd2a672e08 EFLAGS: 00000206 [ 247.731197][ C1] RAX: 0000000084186c77 RBX: ffffffff84186c77 RCX: ffffffff84186e10 [ 247.731210][ C1] RDX: 0000000000000c77 RSI: ffffffff84186c77 RDI: 000000000000001d [ 247.731222][ C1] RBP: 0000000000000000 R08: 00007fb200410000 R09: 00007fb200412000 [ 247.731233][ C1] R10: 0000000084186c7b R11: 000000000000001d R12: 00007fb200426128 [ 247.731245][ C1] R13: 00000000000170e6 R14: ffffffff841866f7 R15: 00007fb200f55720 [ 247.731257][ C1] FS: 000055558cdd3500 GS: 0000000000000000 [ 253.571385][ T7984] device veth0_vlan left promiscuous mode [ 253.587363][ T7984] device veth0_vlan entered promiscuous mode [ 253.651984][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.669080][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.719468][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.949197][ T8053] device veth1_macvtap left promiscuous mode [ 255.718792][ T8101] device syzkaller0 entered promiscuous mode [ 256.206163][ T8125] @: port 1(vlan0) entered blocking state [ 256.212203][ T8125] @: port 1(vlan0) entered disabled state [ 256.278581][ T8125] device vlan0 entered promiscuous mode [ 257.055809][ T8153] bridge0: port 3(syz_tun) entered blocking state [ 257.178231][ T8153] bridge0: port 3(syz_tun) entered disabled state [ 257.247628][ T8153] device syz_tun entered promiscuous mode [ 257.266598][ T8153] bridge0: port 3(syz_tun) entered blocking state [ 257.273093][ T8153] bridge0: port 3(syz_tun) entered forwarding state [ 257.475589][ T8163] tap0: tun_chr_ioctl cmd 2148553947 [ 257.601311][ T8159] tap0: tun_chr_ioctl cmd 1074025673 [ 257.686385][ T8169] tap0: tun_chr_ioctl cmd 2148553947 [ 259.495881][ T8249] device syzkaller0 entered promiscuous mode [ 260.529346][ T8320] device wg2 left promiscuous mode [ 260.592289][ T8320] device wg2 entered promiscuous mode [ 263.431147][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 263.454321][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 263.473649][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 263.985973][ T8404] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 264.038354][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 264.087310][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 264.177331][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 264.707749][ T8416] device wg2 left promiscuous mode [ 264.978136][ T8430] device wg2 entered promiscuous mode [ 266.298577][ T8481] device macsec0 left promiscuous mode [ 267.350495][ T8506] device veth0_vlan left promiscuous mode [ 267.360370][ T8506] device veth0_vlan entered promiscuous mode [ 267.375699][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.392859][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.406139][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.415553][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.853017][ T8537] syz.1.2129[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.853099][ T8537] syz.1.2129[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.245302][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 164 seconds. [ 268.264723][ T29] Not tainted syzkaller #0 [ 268.269781][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.278529][ T29] task:rcu_tasks_kthre state:D stack:28864 pid:11 ppid:2 flags:0x00004000 [ 268.287811][ T29] Call Trace: [ 268.291101][ T29] [ 268.294050][ T29] __schedule+0xcb3/0x1700 [ 268.298509][ T29] ? release_firmware_map_entry+0x190/0x190 [ 268.304426][ T29] ? __queue_work+0x9f2/0xd50 [ 268.309140][ T29] schedule+0xbd/0x170 [ 268.313221][ T29] schedule_timeout+0xba/0x340 [ 268.318020][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 268.323418][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 268.329336][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 268.334203][ T29] wait_for_common+0x364/0x640 [ 268.339019][ T29] ? wait_for_completion+0x20/0x20 [ 268.344157][ T29] wait_for_completion+0x18/0x20 [ 268.349127][ T29] __synchronize_srcu+0x173/0x200 [ 268.354167][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 268.359922][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 268.365412][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 268.370804][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 268.377158][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 268.382718][ T29] synchronize_srcu+0x1c5/0x1d0 [ 268.387597][ T29] rcu_tasks_postscan+0x10/0x20 [ 268.392556][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 268.397525][ T29] ? __kasan_check_write+0x14/0x20 [ 268.402755][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 268.408239][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 268.413709][ T29] ? mutex_lock+0x93/0x1b0 [ 268.418155][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 268.423102][ T29] ? schedule_timeout+0x1a7/0x340 [ 268.428176][ T29] rcu_tasks_kthread+0x6a/0x90 [ 268.432956][ T29] kthread+0x281/0x320 [ 268.437048][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 268.442516][ T29] ? __cfi_kthread+0x10/0x10 [ 268.447146][ T29] ret_from_fork+0x1f/0x30 [ 268.451577][ T29] [ 268.456509][ T29] NMI backtrace for cpu 1 [ 268.460866][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 268.468104][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 268.478216][ T29] Call Trace: [ 268.481520][ T29] [ 268.484473][ T29] __dump_stack+0x21/0x24 [ 268.488828][ T29] dump_stack_lvl+0x110/0x170 [ 268.493530][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 268.498561][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 268.505180][ T29] dump_stack+0x15/0x24 [ 268.509345][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 268.514307][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 268.519966][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 268.525439][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 268.531517][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.537606][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.543607][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 268.549608][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 268.555687][ T29] watchdog+0xde1/0xf30 [ 268.559858][ T29] ? __cfi_watchdog+0x10/0x10 [ 268.564545][ T29] ? __kasan_check_read+0x11/0x20 [ 268.569582][ T29] ? __kthread_parkme+0x13a/0x180 [ 268.574619][ T29] kthread+0x281/0x320 [ 268.578700][ T29] ? __cfi_watchdog+0x10/0x10 [ 268.583390][ T29] ? __cfi_kthread+0x10/0x10 [ 268.587989][ T29] ret_from_fork+0x1f/0x30 [ 268.592443][ T29] [ 268.595549][ T29] Sending NMI from CPU 1 to CPUs 0: [ 268.600781][ C0] NMI backtrace for cpu 0 [ 268.600790][ C0] CPU: 0 PID: 8543 Comm: syz.5.2131 Not tainted syzkaller #0 [ 268.600807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 268.600816][ C0] RIP: 0010:syscall_return_via_sysret+0x1b/0x44 [ 268.600840][ C0] Code: 48 83 bc 24 a0 00 00 00 2b 0f 85 5a 0d 00 00 66 90 b9 48 00 00 00 65 48 8b 14 25 e8 6d 02 00 83 e2 fe 89 d0 48 c1 ea 20 0f 30 <41> 5f 41 5e 41 5d 41 5c 5d 5b 41 5b 41 5a 41 59 41 58 58 59 5a 5e [ 268.600854][ C0] RSP: 0018:ffffc90005df7f58 EFLAGS: 00000046 [ 268.600868][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000048 [ 268.600879][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88814bd09440 [ 268.600890][ C0] RBP: 0000000000000000 R08: ffff88814bd09447 R09: 1ffff110297a1288 [ 268.600901][ C0] R10: dffffc0000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.600912][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.600922][ C0] FS: 000055555b990500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 268.600937][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.600949][ C0] CR2: 00007f0a1365d442 CR3: 000000013b2b8000 CR4: 00000000003506b0 [ 268.600964][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.600973][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 268.600984][ C0] Call Trace: [ 268.600989][ C0] [ 268.600999][ C0] [ 268.765287][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 268.935773][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 269.002303][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 269.118436][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 269.224941][ T8586] device wg2 left promiscuous mode [ 271.242120][ T8616] device syzkaller0 entered promiscuous mode [ 271.282526][ T8622] device syzkaller0 left promiscuous mode [ 271.534113][ T8643] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 271.536707][ T8622] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 272.537231][ T8680] device syzkaller0 entered promiscuous mode [ 272.693967][ T8668] caif0: tun_chr_ioctl cmd 2147767520 [ 277.242025][ T8692] syz_tun: refused to change device tx_queue_len [ 277.261979][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 277.279648][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 277.663012][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 277.680417][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 280.345061][ T2205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.287835][ T5983] bridge0: port 3(syz_tun) entered disabled state [ 281.317937][ T5983] device syz_tun left promiscuous mode [ 281.325976][ T5983] bridge0: port 3(syz_tun) entered disabled state [ 282.250959][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.258080][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.265695][ T8855] device bridge_slave_0 entered promiscuous mode [ 282.273285][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.280694][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.289502][ T8855] device bridge_slave_1 entered promiscuous mode [ 282.803461][ T6532] device bridge_slave_1 left promiscuous mode [ 282.810345][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.850088][ T6532] device bridge_slave_0 left promiscuous mode [ 282.883309][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.927233][ T6532] device veth1_macvtap left promiscuous mode [ 282.935668][ T6532] device veth0_vlan left promiscuous mode [ 283.401078][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.416398][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.442565][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.486330][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.520578][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.527719][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.535874][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.549283][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.557925][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.564992][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.601342][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.641012][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.666266][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.684367][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.703181][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.782317][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.795047][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.812283][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.825770][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.844761][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.852727][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.877833][ T8855] device veth0_vlan entered promiscuous mode [ 284.006528][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.015632][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.038380][ T8855] device veth1_macvtap entered promiscuous mode [ 284.077610][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.089975][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.109322][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.152477][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.164747][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.010967][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.029213][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.038857][ T8974] device bridge_slave_0 entered promiscuous mode [ 286.063443][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.095931][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.142116][ T8974] device bridge_slave_1 entered promiscuous mode [ 290.095732][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 186 seconds. [ 290.103678][ T29] Not tainted syzkaller #0 [ 290.115215][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.124019][ T29] task:rcu_tasks_kthre state:D stack:28864 pid:11 ppid:2 flags:0x00004000 [ 290.133374][ T29] Call Trace: [ 290.136736][ T29] [ 290.139696][ T29] __schedule+0xcb3/0x1700 [ 290.144144][ T29] ? release_firmware_map_entry+0x190/0x190 [ 290.150336][ T29] ? __queue_work+0x9f2/0xd50 [ 290.155085][ T29] schedule+0xbd/0x170 [ 291.106896][ T29] schedule_timeout+0xba/0x340 [ 291.111810][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 291.117570][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 291.123487][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 291.128785][ T29] wait_for_common+0x364/0x640 [ 291.133646][ T29] ? wait_for_completion+0x20/0x20 [ 291.139024][ T29] wait_for_completion+0x18/0x20 [ 291.144047][ T29] __synchronize_srcu+0x173/0x200 [ 291.149453][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 291.155318][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 291.160878][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 291.166435][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 291.172802][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 291.178401][ T29] synchronize_srcu+0x1c5/0x1d0 [ 291.183285][ T29] rcu_tasks_postscan+0x10/0x20 [ 291.188183][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 291.193157][ T29] ? __kasan_check_write+0x14/0x20 [ 291.198355][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 291.203856][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 291.210116][ T29] ? mutex_lock+0x93/0x1b0 [ 291.214580][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 291.219471][ T29] ? schedule_timeout+0x1a7/0x340 [ 291.224541][ T29] rcu_tasks_kthread+0x6a/0x90 [ 291.229367][ T29] kthread+0x281/0x320 [ 291.233467][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 291.238961][ T29] ? __cfi_kthread+0x10/0x10 [ 291.243577][ T29] ret_from_fork+0x1f/0x30 [ 291.248047][ T29] [ 291.274782][ T29] NMI backtrace for cpu 1 [ 291.279166][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 291.286390][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 291.296467][ T29] Call Trace: [ 291.299784][ T29] [ 291.302820][ T29] __dump_stack+0x21/0x24 [ 291.307179][ T29] dump_stack_lvl+0x110/0x170 [ 291.311894][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 291.316935][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x1e7/0x960 [ 291.323555][ T29] dump_stack+0x15/0x24 [ 291.327726][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 291.332688][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 291.338261][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 291.343745][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 291.349854][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.355861][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.361884][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 291.367894][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 291.373834][ T29] watchdog+0xde1/0xf30 [ 291.378011][ T29] ? __cfi_watchdog+0x10/0x10 [ 291.382704][ T29] ? __kasan_check_read+0x11/0x20 [ 291.387742][ T29] ? __kthread_parkme+0x13a/0x180 [ 291.392776][ T29] kthread+0x281/0x320 [ 291.396859][ T29] ? __cfi_watchdog+0x10/0x10 [ 291.401554][ T29] ? __cfi_kthread+0x10/0x10 [ 291.406165][ T29] ret_from_fork+0x1f/0x30 [ 291.410602][ T29] [ 291.413787][ T29] Sending NMI from CPU 1 to CPUs 0: [ 291.419063][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 291.706375][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.718781][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.757922][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.768387][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.787431][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.794528][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.810647][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.819766][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.829555][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.836658][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.882637][ T6532] device bridge_slave_1 left promiscuous mode [ 291.889597][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.906410][ T6532] device bridge_slave_0 left promiscuous mode [ 291.917161][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.927005][ T6532] device veth1_macvtap left promiscuous mode [ 291.936035][ T6532] device veth0_vlan left promiscuous mode [ 292.102557][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.287949][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.296565][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.304722][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.318366][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.326912][ T9081] device syzkaller0 entered promiscuous mode [ 292.368559][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.388503][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.428018][ T9084] device syzkaller0 entered promiscuous mode [ 292.441029][ T8974] device veth0_vlan entered promiscuous mode [ 292.465277][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.475997][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.511393][ T9091] device bond_slave_1 entered promiscuous mode [ 292.518318][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.538528][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.550696][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 292.569415][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.733843][ T8974] device veth1_macvtap entered promiscuous mode [ 292.747421][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.756000][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.764244][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.854412][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.865988][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.910506][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.928934][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.982559][ T9112] device syzkaller0 entered promiscuous mode [ 293.261018][ T9121] device syzkaller0 entered promiscuous mode [ 293.625914][ T9138] device veth0_vlan left promiscuous mode [ 293.635634][ T9138] device veth0_vlan entered promiscuous mode [ 293.646494][ T9138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.663217][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.677337][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.684614][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.781009][ T9142] device syzkaller0 entered promiscuous mode [ 293.792222][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.802201][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.119848][ T9134] device bridge_slave_0 entered promiscuous mode [ 295.130293][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.137621][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.145120][ T9134] device bridge_slave_1 entered promiscuous mode [ 295.831356][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.852905][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.888441][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.909571][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.923875][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.931064][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.939323][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.953650][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.971254][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.978351][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.995684][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.003791][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.068851][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.093527][ T9134] device veth0_vlan entered promiscuous mode [ 296.122729][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.163139][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.189488][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.197229][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.358031][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.373318][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.421324][ T9134] device veth1_macvtap entered promiscuous mode [ 296.470424][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.491042][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.529318][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.548922][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.569974][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.176572][ T308] device bridge_slave_1 left promiscuous mode [ 297.182962][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.190736][ T308] device bridge_slave_0 left promiscuous mode [ 297.197072][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.209100][ T308] device veth1_macvtap left promiscuous mode [ 297.215311][ T308] device veth0_vlan left promiscuous mode [ 297.396131][ T9222] device syz_tun entered promiscuous mode [ 297.423121][ T9234] device syzkaller0 entered promiscuous mode [ 297.832693][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.856200][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.877478][ T9244] device bridge_slave_0 entered promiscuous mode [ 297.903376][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.910871][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.920514][ T9244] device bridge_slave_1 entered promiscuous mode [ 298.171731][ T9263] device syzkaller0 entered promiscuous mode [ 298.300597][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.307707][ T9244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.315025][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.322104][ T9244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.349783][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.359591][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.434053][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.451761][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.547118][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.572002][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.591268][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.598373][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.609780][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.627394][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.665387][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.672497][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.746183][ T308] device bridge_slave_1 left promiscuous mode [ 298.752832][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.774807][ T308] device bridge_slave_0 left promiscuous mode [ 298.784634][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.817860][ T308] device veth1_macvtap left promiscuous mode [ 298.833659][ T308] device veth0_vlan left promiscuous mode [ 299.059583][ T9297] device sit0 left promiscuous mode [ 299.216270][ T9277] device syzkaller0 entered promiscuous mode [ 299.383854][ T9295] device sit0 entered promiscuous mode [ 299.405459][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.413757][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.423959][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.433645][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.474082][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.488644][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.621533][ T9317] device wg2 left promiscuous mode [ 299.691387][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 299.707052][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 299.731920][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.746540][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.761335][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.776344][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.792984][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 299.821211][ T9244] device veth0_vlan entered promiscuous mode [ 299.847264][ T9329] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 299.882776][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.894387][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.928847][ T9244] device veth1_macvtap entered promiscuous mode [ 299.941001][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.967193][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.980753][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.037812][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.054740][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.110253][ T9391] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 301.215784][ T9391] device syzkaller0 entered promiscuous mode [ 301.426226][ T308] device bridge_slave_1 left promiscuous mode [ 301.432400][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.448585][ T308] device bridge_slave_0 left promiscuous mode [ 301.454754][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.484969][ T308] device veth1_macvtap left promiscuous mode [ 301.491301][ T308] device veth0_vlan left promiscuous mode [ 303.138424][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.145527][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.153917][ T9406] device bridge_slave_0 entered promiscuous mode [ 303.173879][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.181262][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.192173][ T9406] device bridge_slave_1 entered promiscuous mode [ 303.350882][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.357996][ T9406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.365316][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.372364][ T9406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.549406][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.589810][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.633714][ T9455] device syzkaller0 entered promiscuous mode [ 304.687675][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.728753][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.773745][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.788131][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.814881][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.822016][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.861509][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.920785][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.953225][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.960330][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.996141][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.007634][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.015847][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.029792][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.128794][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.167355][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.231689][ T9406] device veth0_vlan entered promiscuous mode [ 305.249378][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.259132][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.280429][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.289702][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.316592][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.331480][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.351414][ T9406] device veth1_macvtap entered promiscuous mode [ 305.426044][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.446909][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.478648][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.497589][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.514016][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.677713][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 305.686229][ T9504] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 306.432539][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 306.471578][ T9513] @0Ù: renamed from bond_slave_1 [ 306.729700][ T28] audit: type=1400 audit(1793531558.957:163): avc: denied { create } for pid=9520 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.877050][ T308] device bridge_slave_1 left promiscuous mode [ 306.883338][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.893628][ T308] device bridge_slave_0 left promiscuous mode [ 306.925670][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.957925][ T308] device veth1_macvtap left promiscuous mode [ 306.965730][ T308] device veth0_vlan left promiscuous mode [ 307.793158][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.800351][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.809256][ T9542] device bridge_slave_0 entered promiscuous mode [ 307.858025][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.865284][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.872965][ T9542] device bridge_slave_1 entered promiscuous mode [ 308.307293][ T28] audit: type=1400 audit(1793531560.537:164): avc: denied { create } for pid=9579 comm="syz.2.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 308.367344][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.374422][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.381773][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.388850][ T9542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.705427][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.735866][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.772290][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.848347][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.909813][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.937133][ T1478] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.944238][ T1478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.986438][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.012453][ T1478] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.019580][ T1478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.133827][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.145082][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.205642][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.236232][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.326817][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.335905][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.359464][ T9542] device veth0_vlan entered promiscuous mode [ 309.374805][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.388264][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.410800][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.427432][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.459183][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.474554][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.503821][ T9542] device veth1_macvtap entered promiscuous mode [ 309.526307][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.539676][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.564932][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.600513][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.617159][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.634754][ T9644] tap0: tun_chr_ioctl cmd 1074025673 [ 309.749410][ T9656] ================================================================== [ 309.757520][ T9656] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6fa/0x960 [ 309.765367][ T9656] Write of size 64 at addr ffff888117936610 by task syz.0.2403/9656 [ 309.773366][ T9656] [ 309.775706][ T9656] CPU: 1 PID: 9656 Comm: syz.0.2403 Not tainted syzkaller #0 [ 309.783112][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 309.793186][ T9656] Call Trace: [ 309.796479][ T9656] [ 309.799432][ T9656] __dump_stack+0x21/0x24 [ 309.803785][ T9656] dump_stack_lvl+0x110/0x170 [ 309.808484][ T9656] ? __cfi_dump_stack_lvl+0x8/0x8 [ 309.813537][ T9656] ? __bpf_get_stackid+0x6fa/0x960 [ 309.818677][ T9656] print_address_description+0x71/0x200 [ 309.824268][ T9656] print_report+0x4a/0x60 [ 309.828643][ T9656] kasan_report+0x122/0x150 [ 309.833284][ T9656] ? __bpf_get_stackid+0x6fa/0x960 [ 309.838435][ T9656] kasan_check_range+0x249/0x2a0 [ 309.843406][ T9656] ? __bpf_get_stackid+0x6fa/0x960 [ 309.848545][ T9656] memcpy+0x44/0x70 [ 309.852382][ T9656] __bpf_get_stackid+0x6fa/0x960 [ 309.857438][ T9656] bpf_get_stackid_pe+0x2ee/0x400 [ 309.862496][ T9656] bpf_prog_47bcecfbcadd1995+0x21/0x39 [ 309.867982][ T9656] bpf_overflow_handler+0x3c7/0x5e0 [ 309.873290][ T9656] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 309.879030][ T9656] ? __this_cpu_preempt_check+0x13/0x20 [ 309.884604][ T9656] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 309.890862][ T9656] __perf_event_overflow+0x458/0x640 [ 309.896166][ T9656] perf_swevent_overflow+0x1ae/0x240 [ 309.901468][ T9656] perf_swevent_event+0x3a9/0x440 [ 309.906510][ T9656] ? perf_tp_event+0xa20/0xa20 [ 309.911291][ T9656] ? memset+0x35/0x40 [ 309.915284][ T9656] ___perf_sw_event+0x3bf/0x500 [ 309.920150][ T9656] ? __cfi_perf_event_switch_output+0x10/0x10 [ 309.926226][ T9656] ? __cfi____perf_sw_event+0x10/0x10 [ 309.931631][ T9656] ? __this_cpu_preempt_check+0x13/0x20 [ 309.937197][ T9656] ? __perf_event_task_sched_in+0x2ab/0x320 [ 309.943111][ T9656] ? __kasan_check_read+0x11/0x20 [ 309.948150][ T9656] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 309.954417][ T9656] __perf_sw_event+0x134/0x270 [ 309.959210][ T9656] do_user_addr_fault+0xfe9/0x1030 [ 309.964356][ T9656] ? __schedule+0xcbb/0x1700 [ 309.968975][ T9656] exc_page_fault+0x51/0xb0 [ 309.973506][ T9656] asm_exc_page_fault+0x27/0x30 [ 309.978380][ T9656] RIP: 0010:strncpy_from_user+0xd7/0x2c0 [ 309.984037][ T9656] Code: 89 f6 e8 ac 2e e1 fe 49 83 fe 07 0f 86 a5 00 00 00 4c 89 75 c8 49 c7 c6 f8 ff ff ff 45 31 ff 4c 89 65 c0 4c 89 6d d0 4d 89 fd <4b> 8b 1c 3c 48 b8 ff fe fe fe fe fe fe fe 4c 8d 3c 03 49 89 dc 49 [ 310.003749][ T9656] RSP: 0018:ffffc9000725fb28 EFLAGS: 00050246 [ 310.009848][ T9656] RAX: ffffffff82904834 RBX: 000000000000007f RCX: ffff888134c75100 [ 310.017919][ T9656] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000007 [ 310.025899][ T9656] RBP: ffffc9000725fb70 R08: ffff888134c75100 R09: 0000000000000002 [ 310.033882][ T9656] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 310.041859][ T9656] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 310.049854][ T9656] ? strncpy_from_user+0xb4/0x2c0 [ 310.054906][ T9656] ? strncpy_from_user+0xb4/0x2c0 [ 310.059961][ T9656] bpf_prog_load+0x1f1/0x1670 [ 310.064658][ T9656] ? map_freeze+0x3a0/0x3a0 [ 310.069180][ T9656] ? selinux_bpf+0xc7/0xf0 [ 310.073612][ T9656] ? security_bpf+0x93/0xb0 [ 310.078136][ T9656] __sys_bpf+0x57b/0x850 [ 310.082391][ T9656] ? bpf_link_show_fdinfo+0x330/0x330 [ 310.087785][ T9656] ? fpregs_restore_userregs+0x128/0x260 [ 310.093450][ T9656] __x64_sys_bpf+0x7c/0x90 [ 310.097875][ T9656] x64_sys_call+0x488/0x9a0 [ 310.102505][ T9656] do_syscall_64+0x4c/0xa0 [ 310.106935][ T9656] ? clear_bhb_loop+0x30/0x80 [ 310.111641][ T9656] ? clear_bhb_loop+0x30/0x80 [ 310.116334][ T9656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.122252][ T9656] RIP: 0033:0x7fb20019f559 [ 310.126678][ T9656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.146293][ T9656] RSP: 002b:00007fb200ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.154718][ T9656] RAX: ffffffffffffffda RBX: 00007fb200425fa0 RCX: 00007fb20019f559 [ 310.162700][ T9656] RDX: 0000000000000090 RSI: 00002000000023c0 RDI: 0000000000000005 [ 310.170691][ T9656] RBP: 00007fb200236b50 R08: 0000000000000000 R09: 0000000000000000 [ 310.178685][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.186670][ T9656] R13: 00007fb200426038 R14: 00007fb200425fa0 R15: 00007ffd2a672d78 [ 310.194673][ T9656] [ 310.197714][ T9656] [ 310.200056][ T9656] Allocated by task 9658: [ 310.204394][ T9656] kasan_set_track+0x4b/0x70 [ 310.209021][ T9656] kasan_save_alloc_info+0x1f/0x30 [ 310.214143][ T9656] __kasan_kmalloc+0x95/0xb0 [ 310.218750][ T9656] __kmalloc_node+0xb2/0x1e0 [ 310.223351][ T9656] bpf_map_area_alloc+0x4b/0xe0 [ 310.228233][ T9656] prealloc_elems_and_freelist+0x8a/0x1e0 [ 310.233989][ T9656] stack_map_alloc+0x398/0x520 [ 310.238771][ T9656] map_create+0x467/0xcf0 [ 310.243111][ T9656] __sys_bpf+0x34e/0x850 [ 310.247362][ T9656] __x64_sys_bpf+0x7c/0x90 [ 310.251790][ T9656] x64_sys_call+0x488/0x9a0 [ 310.256306][ T9656] do_syscall_64+0x4c/0xa0 [ 310.260731][ T9656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.266654][ T9656] [ 310.268990][ T9656] Last potentially related work creation: [ 310.274719][ T9656] kasan_save_stack+0x3a/0x60 [ 310.279408][ T9656] __kasan_record_aux_stack+0xb6/0xc0 [ 310.284791][ T9656] kasan_record_aux_stack_noalloc+0xb/0x10 [ 310.290611][ T9656] call_rcu+0xcf/0xf50 [ 310.294697][ T9656] __nf_unregister_net_hook+0x486/0x610 [ 310.300252][ T9656] nf_unregister_net_hooks+0xe2/0x150 [ 310.305647][ T9656] selinux_nf_unregister+0x21/0x30 [ 310.310800][ T9656] cleanup_net+0x5b0/0xb10 [ 310.315234][ T9656] process_one_work+0x717/0xc30 [ 310.320109][ T9656] worker_thread+0xa4d/0x11d0 [ 310.324894][ T9656] kthread+0x281/0x320 [ 310.328979][ T9656] ret_from_fork+0x1f/0x30 [ 310.333430][ T9656] [ 310.335771][ T9656] Second to last potentially related work creation: [ 310.342378][ T9656] kasan_save_stack+0x3a/0x60 [ 310.347086][ T9656] __kasan_record_aux_stack+0xb6/0xc0 [ 310.352509][ T9656] kasan_record_aux_stack_noalloc+0xb/0x10 [ 310.358342][ T9656] kvfree_call_rcu+0x8b/0x7a0 [ 310.363051][ T9656] trie_update_elem+0x8be/0xcb0 [ 310.367929][ T9656] bpf_prog_47bcecfbcadd1995+0x33/0x39 [ 310.373409][ T9656] bpf_test_run+0x35f/0x940 [ 310.377936][ T9656] bpf_prog_test_run_skb+0xd64/0x18a0 [ 310.383348][ T9656] bpf_prog_test_run+0x3b4/0x5c0 [ 310.388304][ T9656] __sys_bpf+0x5ee/0x850 [ 310.392565][ T9656] __x64_sys_bpf+0x7c/0x90 [ 310.396998][ T9656] x64_sys_call+0x488/0x9a0 [ 310.401526][ T9656] do_syscall_64+0x4c/0xa0 [ 310.405964][ T9656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.411887][ T9656] [ 310.414232][ T9656] The buggy address belongs to the object at ffff888117936600 [ 310.414232][ T9656] which belongs to the cache kmalloc-64 of size 64 [ 310.428125][ T9656] The buggy address is located 16 bytes inside of [ 310.428125][ T9656] 64-byte region [ffff888117936600, ffff888117936640) [ 310.441247][ T9656] [ 310.443597][ T9656] The buggy address belongs to the physical page: [ 310.450016][ T9656] page:ffffea00045e4d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117936 [ 310.460313][ T9656] flags: 0x4000000000000200(slab|zone=1) [ 310.465988][ T9656] raw: 4000000000000200 ffffea0004380d80 dead000000000002 ffff888100042780 [ 310.475036][ T9656] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 310.483656][ T9656] page dumped because: kasan: bad access detected [ 310.490091][ T9656] page_owner tracks the page as allocated [ 310.495819][ T9656] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 107, tgid 107 (udevd), ts 6146541482, free_ts 0 [ 310.512421][ T9656] post_alloc_hook+0x1f5/0x210 [ 310.517231][ T9656] prep_new_page+0x1c/0x110 [ 310.521760][ T9656] get_page_from_freelist+0x2ca9/0x2d20 [ 310.527335][ T9656] __alloc_pages+0x1fa/0x610 [ 310.531952][ T9656] alloc_slab_page+0x6e/0xf0 [ 310.536662][ T9656] new_slab+0x98/0x3e0 [ 310.540752][ T9656] ___slab_alloc+0x70f/0xb70 [ 310.545405][ T9656] __slab_alloc+0x5e/0xa0 [ 310.549763][ T9656] __kmem_cache_alloc_node+0x204/0x2d0 [ 310.555247][ T9656] __kmalloc_node_track_caller+0xa1/0x1e0 [ 310.560990][ T9656] kmemdup_nul+0x31/0xa0 [ 310.565250][ T9656] security_context_to_sid_core+0xe3/0x600 [ 310.571073][ T9656] security_context_to_sid_force+0x38/0x50 [ 310.576899][ T9656] selinux_inode_post_setxattr+0x112/0x490 [ 310.582750][ T9656] security_inode_post_setxattr+0xd8/0x130 [ 310.588585][ T9656] __vfs_setxattr_noperm+0x493/0x5e0 [ 310.593893][ T9656] page_owner free stack trace missing [ 310.599382][ T9656] [ 310.601713][ T9656] Memory state around the buggy address: [ 310.607447][ T9656] ffff888117936500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 310.615533][ T9656] ffff888117936580: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 310.623630][ T9656] >ffff888117936600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 310.631698][ T9656] ^ [ 310.637085][ T9656] ffff888117936680: 00 00 00 00 00 00 00 02 fc fc fc fc fc fc fc fc [ 310.645162][ T9656] ffff888117936700: 00 00 00 00 00 00 00 02 fc fc fc fc fc fc fc fc [ 310.653243][ T9656] ================================================================== [ 310.661333][ T9656] Disabling lock debugging due to kernel taint [ 310.697778][ T28] audit: type=1400 audit(1793531562.927:165): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 310.720616][ T28] audit: type=1400 audit(1793531562.927:166): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.742221][ T28] audit: type=1400 audit(1793531562.927:167): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.764830][ T28] audit: type=1400 audit(1793531562.927:168): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.785695][ T28] audit: type=1400 audit(1793531562.927:169): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.806357][ T28] audit: type=1400 audit(1793531562.927:170): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.829311][ T28] audit: type=1400 audit(1793531562.927:171): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 311.398356][ T28] audit: type=1400 audit(1793531563.627:172): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14639]" dev="pipefs" ino=14639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 311.422505][ T308] device bridge_slave_1 left promiscuous mode [ 311.435294][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.449703][ T308] device bridge_slave_0 left promiscuous mode [ 311.457696][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.467078][ T308] device veth1_macvtap left promiscuous mode [ 311.473155][ T308] device veth0_vlan left promiscuous mode [ 311.765927][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 208 seconds. [ 311.773900][ T29] Tainted: G B syzkaller #0 [ 311.780433][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.789133][ T29] task:rcu_tasks_kthre state:D stack:28864 pid:11 ppid:2 flags:0x00004000 [ 311.798398][ T29] Call Trace: [ 311.801694][ T29] [ 311.804649][ T29] __schedule+0xcb3/0x1700 [ 311.809108][ T29] ? release_firmware_map_entry+0x190/0x190 [ 311.815019][ T29] ? __queue_work+0x9f2/0xd50 [ 311.819748][ T29] schedule+0xbd/0x170 [ 311.823835][ T29] schedule_timeout+0xba/0x340 [ 311.828643][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 311.834046][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 311.839891][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 311.844757][ T29] wait_for_common+0x364/0x640 [ 311.849555][ T29] ? wait_for_completion+0x20/0x20 [ 311.854689][ T29] wait_for_completion+0x18/0x20 [ 311.859740][ T29] __synchronize_srcu+0x173/0x200 [ 311.864783][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 311.870540][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 311.876026][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 311.881443][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 311.887805][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 311.893361][ T29] synchronize_srcu+0x1c5/0x1d0 [ 311.898241][ T29] rcu_tasks_postscan+0x10/0x20 [ 311.903105][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 311.908064][ T29] ? __kasan_check_write+0x14/0x20 [ 311.913189][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 311.918671][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 311.924139][ T29] ? mutex_lock+0x93/0x1b0 [ 311.928609][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 311.933477][ T29] ? schedule_timeout+0x1a7/0x340 [ 311.938541][ T29] rcu_tasks_kthread+0x6a/0x90 [ 311.943507][ T29] kthread+0x281/0x320 [ 311.947599][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 311.953068][ T29] ? __cfi_kthread+0x10/0x10 [ 311.957690][ T29] ret_from_fork+0x1f/0x30 [ 311.962128][ T29] [ 311.978233][ T29] NMI backtrace for cpu 1 [ 311.982599][ T29] CPU: 1 PID: 29 Comm: khungtaskd Tainted: G B syzkaller #0 [ 311.991290][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 312.001360][ T29] Call Trace: [ 312.004666][ T29] [ 312.007618][ T29] __dump_stack+0x21/0x24 [ 312.011973][ T29] dump_stack_lvl+0x110/0x170 [ 312.017036][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 312.022090][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 312.028703][ T29] dump_stack+0x15/0x24 [ 312.032873][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 312.038090][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 312.043675][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 312.049150][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 312.055252][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.061253][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.067259][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 312.073262][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 312.079168][ T29] watchdog+0xde1/0xf30 [ 312.083338][ T29] ? __cfi_watchdog+0x10/0x10 [ 312.088031][ T29] ? __kasan_check_read+0x11/0x20 [ 312.093063][ T29] ? __kthread_parkme+0x13a/0x180 [ 312.098145][ T29] kthread+0x281/0x320 [ 312.102231][ T29] ? __cfi_watchdog+0x10/0x10 [ 312.106912][ T29] ? __cfi_kthread+0x10/0x10 [ 312.111513][ T29] ret_from_fork+0x1f/0x30 [ 312.115970][ T29] [ 312.119104][ T29] Sending NMI from CPU 1 to CPUs 0: [ 312.124340][ C0] NMI backtrace for cpu 0 [ 312.124350][ C0] CPU: 0 PID: 9661 Comm: syz-executor Tainted: G B syzkaller #0 [ 312.124369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 312.124379][ C0] RIP: 0010:kernel_text_address+0x8/0xd0 [ 312.124408][ C0] Code: 0f 92 c2 20 ca 08 c2 0f b6 c2 5b 5d c3 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 dc 6f 7b 4a 55 48 89 e5 41 57 41 56 <53> 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff b0 48 40 85 0f 92 c1 41 [ 312.124423][ C0] RSP: 0018:ffffc90000ed7228 EFLAGS: 00000246 [ 312.124438][ C0] RAX: 0000000000000000 RBX: ffffffff81601327 RCX: 00000000001dae01 [ 312.124451][ C0] RDX: ffffc90000ed7ed0 RSI: 1ffff920001dae52 RDI: ffffffff81601327 [ 312.124464][ C0] RBP: ffffc90000ed7238 R08: ffffc90000ed7350 R09: ffffc90000ed7348 [ 312.124478][ C0] R10: 000000000000000d R11: fffff520001dae5d R12: ffff888134963cc0 [ 312.124490][ C0] R13: 1ffff1102692c84d R14: dffffc0000000000 R15: 1ffff920001dae5a [ 312.124504][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 312.124519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.124532][ C0] CR2: 0000563b2e210af8 CR3: 000000010f7ae000 CR4: 00000000003506b0 [ 312.124548][ C0] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.124558][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 312.124569][ C0] Call Trace: [ 312.124574][ C0] [ 312.124580][ C0] __kernel_text_address+0xd/0x30 [ 312.124602][ C0] unwind_get_return_address+0x4d/0x90 [ 312.124623][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 312.124647][ C0] arch_stack_walk+0xfc/0x150 [ 312.124675][ C0] ? exit_to_user_mode_prepare+0x87/0xd0 [ 312.124696][ C0] stack_trace_save+0xa6/0xf0 [ 312.124718][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 312.124740][ C0] ? __stack_depot_save+0x36/0x490 [ 312.124765][ C0] ? memset+0x35/0x40 [ 312.124783][ C0] save_stack+0x121/0x230 [ 312.124801][ C0] ? __reset_page_owner+0x190/0x190 [ 312.124819][ C0] ? free_unref_page_prepare+0x81b/0x820 [ 312.124843][ C0] ? free_unref_page+0x93/0x530 [ 312.124865][ C0] ? __free_pages+0x67/0x100 [ 312.124892][ C0] ? __vunmap+0xa3c/0xc00 [ 312.124909][ C0] ? vfree+0x61/0x90 [ 312.124925][ C0] ? kcov_close+0x2b/0x50 [ 312.124940][ C0] ? __fput+0x1fd/0x8f0 [ 312.124961][ C0] ? ____fput+0x15/0x20 [ 312.124981][ C0] ? task_work_run+0x1e1/0x250 [ 312.125002][ C0] ? do_exit+0xb0d/0x29f0 [ 312.125026][ C0] ? do_group_exit+0x21b/0x2e0 [ 312.125050][ C0] ? get_signal+0x167c/0x1700 [ 312.125074][ C0] ? arch_do_signal_or_restart+0xd1/0x11c0 [ 312.125095][ C0] ? exit_to_user_mode_loop+0x7a/0xb0 [ 312.125118][ C0] __reset_page_owner+0x54/0x190 [ 312.125135][ C0] ? __kasan_check_write+0x14/0x20 [ 312.125158][ C0] free_unref_page_prepare+0x81b/0x820 [ 312.125187][ C0] free_unref_page+0x93/0x530 [ 312.125212][ C0] ? __cfi_free_unref_page+0x10/0x10 [ 312.125238][ C0] __free_pages+0x67/0x100 [ 312.125260][ C0] __vunmap+0xa3c/0xc00 [ 312.125278][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 312.125297][ C0] ? vunmap+0x60/0x60 [ 312.125316][ C0] vfree+0x61/0x90 [ 312.125333][ C0] kcov_close+0x2b/0x50 [ 312.125347][ C0] ? __cfi_kcov_close+0x10/0x10 [ 312.125362][ C0] __fput+0x1fd/0x8f0 [ 312.125387][ C0] ____fput+0x15/0x20 [ 312.125409][ C0] task_work_run+0x1e1/0x250 [ 312.125450][ C0] ? __cfi_task_work_run+0x10/0x10 [ 312.125472][ C0] ? free_nsproxy+0x21f/0x270 [ 312.125499][ C0] do_exit+0xb0d/0x29f0 [ 312.125525][ C0] ? __cfi_do_exit+0x10/0x10 [ 312.125549][ C0] ? __cfi____update_load_sum+0x10/0x10 [ 312.125574][ C0] ? kfree_skbmem+0x10c/0x180 [ 312.125597][ C0] ? kmem_cache_free+0x12d/0x300 [ 312.125623][ C0] ? __kasan_check_write+0x14/0x20 [ 312.125641][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 312.125657][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 312.125674][ C0] do_group_exit+0x21b/0x2e0 [ 312.125699][ C0] ? __kasan_check_write+0x14/0x20 [ 312.125716][ C0] ? recalc_sigpending+0x180/0x1c0 [ 312.125737][ C0] get_signal+0x167c/0x1700 [ 312.125766][ C0] ? __cfi_get_signal+0x10/0x10 [ 312.125793][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 312.125815][ C0] ? release_firmware_map_entry+0x190/0x190 [ 312.125834][ C0] ? __cfi___sys_sendto+0x10/0x10 [ 312.125862][ C0] ? __kasan_check_read+0x11/0x20 [ 312.125902][ C0] ? preempt_schedule_irq+0xca/0x120 [ 312.125919][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 312.125944][ C0] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 312.125967][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 312.125985][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 312.126005][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 312.126027][ C0] do_syscall_64+0x58/0xa0 [ 312.126042][ C0] ? clear_bhb_loop+0x30/0x80 [ 312.126061][ C0] ? clear_bhb_loop+0x30/0x80 [ 312.126082][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.126101][ C0] RIP: 0033:0x7fbc8055a6d7 [ 312.126114][ C0] Code: Unable to access opcode bytes at 0x7fbc8055a6ad. [ 312.126122][ C0] RSP: 002b:00007fff00a6e540 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 312.126156][ C0] RAX: 0000000000000028 RBX: 00005555798c3500 RCX: 00007fbc8055a6d7 [ 312.126168][ C0] RDX: 0000000000000028 RSI: 00007fbc81354670 RDI: 0000000000000003 [ 312.126179][ C0] RBP: 0000000000000001 R08: 00007fff00a6e5a4 R09: 000000000000000c [ 312.126190][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 312.126201][ C0] R13: 0000000000000000 R14: 00007fbc81354670 R15: 0000000000000000 [ 312.126216][ C0] [ 313.408418][ T308] device vlan0 left promiscuous mode [ 313.414037][ T308] @: port 1(vlan0) entered disabled state [ 313.422433][ T308] device bridge_slave_1 left promiscuous mode [ 313.428638][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.436720][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.447944][ T308] device veth0_vlan left promiscuous mode [ 313.454287][ T308] device veth1_macvtap left promiscuous mode