last executing test programs: 10m41.95260708s ago: executing program 4 (id=11974): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000691075000000000004000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x3f7, &(0x7f0000000240)=""/195}, 0x48) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3ff, 0x8a6a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x327, 0x9}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x9, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000480)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffdc3, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x50) r5 = syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0xc8547904a89223ae, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x1, 0x0, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0xb, [@func={0x6, 0x0, 0x0, 0xc, 0x1}, @struct={0x5, 0x6, 0x0, 0x4, 0x0, 0x5273, [{0xb, 0x2, 0x7}, {0xa, 0x1, 0xffffffff}, {0x1, 0x0, 0x5}, {0x10, 0x0, 0x6}, {0x2, 0x2, 0xd1}, {0xe, 0x2}]}, @int={0xb, 0x0, 0x0, 0x1, 0x2, 0x25, 0x0, 0x3, 0x1}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x9, 0xfffff3e1}, {0xa, 0xfffffffe}, {0x4, 0xa2e}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0x3ff, [{0x6, 0x5, 0x10000}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x8, 0x2}, {0x1, 0x1}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @enum={0x7, 0xa, 0x0, 0x6, 0x4, [{0xb, 0x31c8}, {0x6, 0x933}, {0x7, 0xb40}, {0x1, 0xe}, {0x9, 0xac4}, {0xb, 0x4}, {0x2, 0x80000001}, {0xc, 0x7}, {0x4, 0xdf6}, {0x10, 0x28}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x5f, 0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000e80)=""/49, 0x167, 0x31, 0x0, 0x3c37, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r3, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)=r1}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@o_path={&(0x7f0000001040)='./file0\x00', 0x0, 0x4000, r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x18, r8, 0x8, &(0x7f0000000f00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0x2, 0xe0b8, 0x4}, 0x10, 0x15070, r4, 0x2, &(0x7f00000010c0)=[r3, r9, r3, r3, r10], &(0x7f0000001100)=[{0x0, 0x5, 0x6, 0x1}, {0x2, 0x3, 0xb, 0xa}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a00)={r14}, 0xc) close(0x3) perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x2, 0xfc, 0x32, 0xf, 0x0, 0x2, 0x2008, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x15bc8fdd, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x3, 0x7, 0x3, 0x40260af6, 0xffffff44, 0x8, 0x0, 0x4, 0x0, 0x4}, r5, 0x9, r6, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0x8, &(0x7f00000024c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r15, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002540)={r16}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002580)={r16}, 0xc) 10m41.549425311s ago: executing program 4 (id=11980): recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="b700000000000000bf1600000000000079616700000000001501020000000000850000008a000000b70000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1080}], 0x21}, 0x0) 10m41.480579858s ago: executing program 4 (id=11982): close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x2000000000000216, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000640), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000a6000000ffffff859500007b000000008500000076000021108e009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x92, &(0x7f0000000040)=""/146}, 0x94) 10m41.114058375s ago: executing program 4 (id=11987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='syzkaller\x00'}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, &(0x7f0000000dc0)=""/33, 0xb7, 0x21, 0x1, 0x7fffffff, 0x4a7bbf71fc553994}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000e80)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000ec0)="a4"}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='pids.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x10}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r5, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000001400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002580)={0x1d, 0xd, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @alu={0x4, 0x0, 0x8, 0x0, 0x5, 0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000001}, @ldst={0x3, 0x0, 0x6, 0x0, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000001280)='syzkaller\x00', 0x5, 0x3, &(0x7f00000012c0)=""/3, 0x40f00, 0x10, '\x00', r6, 0x0, r1, 0x8, &(0x7f0000002480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0x2, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002500)=[r5, r5, r3, r5, r3, r5, r5, r2, r5], &(0x7f0000002540)=[{0x5, 0x5, 0xd, 0x6}, {0x5, 0x2, 0x5, 0x8}, {0x3, 0x3, 0x7}], 0x10, 0x10}, 0x94) r7 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={@map=0xffffffffffffffff, 0x1e, 0x1, 0x8, &(0x7f0000000f40)=[0x0], 0x1, 0x0, &(0x7f0000000f80)=[0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={r9, 0x58, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001100), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="130000001c20000000000000", @ANYRES32=r12, @ANYBLOB="f2ccc3fd12ea48f6f0a0c4d94d4af1963022e4b2c2c3bcbb5f2da4c79b3389503822dd", @ANYRES64=r10], 0x20) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b40)={0x18, 0x19, &(0x7f00000028c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1ff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f00000029c0)='syzkaller\x00', 0x81, 0x6a, &(0x7f0000002a00)=""/106, 0x40f00, 0x52, '\x00', r11, 0x0, r3, 0x8, &(0x7f0000002a80)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002ac0)=[r3, r9], &(0x7f0000002b00)=[{0x2, 0x4, 0x6, 0x6}, {0x4, 0x5, 0xa, 0x7}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x1d, 0x1f, &(0x7f0000002640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x8, 0x5, 0x6, 0x50, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ldst={0x2, 0x0, 0x6, 0x7, 0x3, 0x18, 0x8}, @ldst={0x1, 0x1, 0x4, 0x4, 0xe, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002740)='syzkaller\x00', 0x8, 0xad, &(0x7f0000002780)=""/173, 0x41000, 0x10, '\x00', r11, @fallback=0xc, r12, 0x8, &(0x7f0000002840)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002880)={0x2, 0x9, 0x0, 0x3}, 0x10, 0xffffffffffffffff, r13, 0x0, &(0x7f0000002c00)=[r9, r3, 0xffffffffffffffff, r12, r5, r9], &(0x7f0000002c40), 0x10, 0x200}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup=r2, r8, 0x1b, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r10}, 0x20) 10m41.093198827s ago: executing program 4 (id=11988): socketpair(0x2c, 0x3, 0x101, &(0x7f00000004c0)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000400)={0x5, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r0, 0x1000}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000040000000000000053f8635a8d1b22b88e52d5429b17339f42ea9468859cc37ebf75eac04e607e18e1d99f2bcc5b4fd39c25478974eb9f45b95a40a2e5972d0c59da8ae9136f17e9982e5383ad4e15568045"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001b00)='memory.current\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b40)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x3, &(0x7f0000001d00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001d80)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000001e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000001f40)=@generic={0x0, r9}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f80)={0x0, 0x1, 0x20}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r5, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0], 0x0, 0x55, &(0x7f00000021c0), 0x0, 0x10, &(0x7f0000002200), &(0x7f0000002240), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000002280)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000b3ffcae700000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x1, 0x1b, &(0x7f0000002400)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b703c8e90000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af80100000000bfa10000000000000700f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x1a, 0x10, &(0x7f0000002600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x8, 0x7, 0x2, 0x50, 0x1}, @alu={0x4, 0x1, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x18}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000002680)='syzkaller\x00', 0x5, 0xa6, &(0x7f00000026c0)=""/166, 0x41100, 0x2, '\x00', r10, @fallback=0x3c, r7, 0x8, &(0x7f0000002780)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xfffffffe, 0x4, 0xd}, 0x10, 0xffffffffffffffff, r9, 0x3, &(0x7f0000002800), &(0x7f0000002840)=[{0x3, 0x5, 0x3, 0xa}, {0x0, 0x5, 0x6, 0xc}, {0x5, 0x1, 0x8, 0x1}], 0x10, 0x80000001}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000029c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="9feb010018000000ecffffff0f0000001000000003000000030000000000001103000000ffffffff000000"], &(0x7f00000028c0)=""/237, 0x2b, 0xed, 0x1, 0x7, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002a80)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x3, 0x22, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x37}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xa, 0x5, 0x6, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x8, 0x1, 0xb, 0x8, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0xc7, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x4, '\x00', r10, @sched_cls=0x37, r12, 0x8, &(0x7f0000002a00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002a40)={0x2, 0x3, 0x0, 0x9}, 0x10, r13, r4, 0x6, &(0x7f0000002ac0)=[r3, r1, r1], &(0x7f0000002b00)=[{0x2, 0x2, 0x5, 0xb}, {0x3, 0x1, 0x10}, {0x0, 0x4, 0x5, 0x8}, {0x2, 0x5, 0x3, 0x1}, {0x3, 0x3, 0x3, 0x1}, {0x0, 0x5, 0x3, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r2, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2, &(0x7f0000002c40)=ANY=[@ANYBLOB="18480000ffffffff0000000000000000b556d15db77f1deb645b181f786605f379565ee49560bce7ca0d44f1516e31fc707d4a4b69f35bba61beb79020c8ec4a5a179cb80be6ecbf809086d806000000f4fb2575d62773cd54618b6ea5b049d4e12c4eea759b786d2b8ad42f3440517e23cc2b50ce6dd3896e1d0319a7bc2ba41a8d2c2eaa"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x13, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x6, 0x1000, 0x80000000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000800)=[{0x3, 0x3, 0x40005, 0x93ee4df60452919a}, {0x0, 0x2, 0xc, 0x3}, {0x0, 0x5, 0x10, 0xb}]}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', r14, @fallback=0x11}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r4}, 0x18) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r15, 0x400454d0, 0x18) 10m40.141162474s ago: executing program 4 (id=12004): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000d00)={&(0x7f0000000d40)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1470, 0x0, 0x0, 0x0, 0x35}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000200)=""/40, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0xa, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)="cdc805514344b3ed6bcc8b25305203828b1d086cc3aed5dc237339d0609bbb7404ccd3e5", &(0x7f0000000940)="5ff60000000050ac6d28492eb88dada6d695eaa36c624ef2a3bb3dec9abc366b03b2a4c0d8736fddd81bb334ce83e0ec830515a60c9f718ab168f3a795ad78289511c43bb0c251d9a40a7812d1a30864ec5a00320020d31db74a328ebdbefad119902646a8047b0135fd33def67766cf3cc82c1580bd06e0457ccec91eed861df38eda781a39ff8ba6cca885803be157f8f463728d37d0fb081e", 0xfffffff7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, &(0x7f0000000880), &(0x7f00000008c0)=""/95}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000007c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@map=r3, 0x9, 0x1, 0x1, &(0x7f0000000e40)=[0x0], 0x1, 0x0, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x2, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000b80)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={r7, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r7, 0xffffffffffffffff, 0x4000, 0x0, 0x0}, 0xfffffffffffffee2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) sendmsg$tipc(r1, &(0x7f0000000d00)={&(0x7f0000000d40)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000040) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1470, 0x0, 0x0, 0x0, 0x35}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000200)=""/40, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0xa, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)="cdc805514344b3ed6bcc8b25305203828b1d086cc3aed5dc237339d0609bbb7404ccd3e5", &(0x7f0000000940)="5ff60000000050ac6d28492eb88dada6d695eaa36c624ef2a3bb3dec9abc366b03b2a4c0d8736fddd81bb334ce83e0ec830515a60c9f718ab168f3a795ad78289511c43bb0c251d9a40a7812d1a30864ec5a00320020d31db74a328ebdbefad119902646a8047b0135fd33def67766cf3cc82c1580bd06e0457ccec91eed861df38eda781a39ff8ba6cca885803be157f8f463728d37d0fb081e", 0xfffffff7, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, &(0x7f0000000880), &(0x7f00000008c0)=""/95}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) (async) perf_event_open(&(0x7f00000007c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@map=r3, 0x9, 0x1, 0x1, &(0x7f0000000e40)=[0x0], 0x1, 0x0, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x2, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000b80)=""/210}, 0x70) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) getpid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={r7, r5, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r7, 0xffffffffffffffff, 0x4000, 0x0, 0x0}, 0xfffffffffffffee2) (async) 10m25.153844948s ago: executing program 32 (id=12004): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000d00)={&(0x7f0000000d40)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1470, 0x0, 0x0, 0x0, 0x35}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000200)=""/40, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0xa, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)="cdc805514344b3ed6bcc8b25305203828b1d086cc3aed5dc237339d0609bbb7404ccd3e5", &(0x7f0000000940)="5ff60000000050ac6d28492eb88dada6d695eaa36c624ef2a3bb3dec9abc366b03b2a4c0d8736fddd81bb334ce83e0ec830515a60c9f718ab168f3a795ad78289511c43bb0c251d9a40a7812d1a30864ec5a00320020d31db74a328ebdbefad119902646a8047b0135fd33def67766cf3cc82c1580bd06e0457ccec91eed861df38eda781a39ff8ba6cca885803be157f8f463728d37d0fb081e", 0xfffffff7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, &(0x7f0000000880), &(0x7f00000008c0)=""/95}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000007c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@map=r3, 0x9, 0x1, 0x1, &(0x7f0000000e40)=[0x0], 0x1, 0x0, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x2, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000b80)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={r7, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r7, 0xffffffffffffffff, 0x4000, 0x0, 0x0}, 0xfffffffffffffee2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) sendmsg$tipc(r1, &(0x7f0000000d00)={&(0x7f0000000d40)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000040) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1470, 0x0, 0x0, 0x0, 0x35}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000200)=""/40, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0xa, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)="cdc805514344b3ed6bcc8b25305203828b1d086cc3aed5dc237339d0609bbb7404ccd3e5", &(0x7f0000000940)="5ff60000000050ac6d28492eb88dada6d695eaa36c624ef2a3bb3dec9abc366b03b2a4c0d8736fddd81bb334ce83e0ec830515a60c9f718ab168f3a795ad78289511c43bb0c251d9a40a7812d1a30864ec5a00320020d31db74a328ebdbefad119902646a8047b0135fd33def67766cf3cc82c1580bd06e0457ccec91eed861df38eda781a39ff8ba6cca885803be157f8f463728d37d0fb081e", 0xfffffff7, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, &(0x7f0000000880), &(0x7f00000008c0)=""/95}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) (async) perf_event_open(&(0x7f00000007c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@map=r3, 0x9, 0x1, 0x1, &(0x7f0000000e40)=[0x0], 0x1, 0x0, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x2, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000b80)=""/210}, 0x70) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) getpid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={r7, r5, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r7, 0xffffffffffffffff, 0x4000, 0x0, 0x0}, 0xfffffffffffffee2) (async) 4m11.147019165s ago: executing program 3 (id=16472): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404cc0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 4m11.145620355s ago: executing program 3 (id=16473): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r1, &(0x7f0000000380), &(0x7f00000003c0)=""/10, 0x2}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r4], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r3}, &(0x7f00000008c0), &(0x7f0000000940)='%-010d \x00'}, 0x20) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 4m6.937661753s ago: executing program 3 (id=16513): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14b795e28958306b7f8600000004000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000018000000"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x12}, 0x10000, 0x100, 0x6, 0x0, 0x200}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0xb}, 0xb900, 0x0, 0x0, 0x8}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000005000000010001000a0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r3}, &(0x7f0000001140), &(0x7f0000001180)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000001280)={&(0x7f00000012c0)=@name={0x1e, 0x2, 0x0, {{0xcd2e33a676089c01}}}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="05000000000b5c0a3bf84ee3e2c793000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xd, 0x9, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000014"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007000000c1"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x1, 0x4, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), 0xc, r7}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r8}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x3f, r6}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) 4m6.87005599s ago: executing program 3 (id=16515): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0xd, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r1, &(0x7f0000000740), 0x0}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x50, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000300), &(0x7f00000004c0)=""/247}, 0x20) (async) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) syz_clone(0x4002003a, 0x0, 0x0, 0x0, 0x0, 0x0) 4m6.796324497s ago: executing program 3 (id=16518): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2b, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0x7f, 0x3db}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000780)=[{0x3, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x3, 0xf}, {0x0, 0x3, 0xa, 0x9}, {0x5, 0x4, 0x5, 0x9}, {0x1, 0x2, 0x6, 0xa}, {0x3, 0x4, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000008c0)={r4, r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4000000, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2b, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0x7f, 0x3db}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000780)=[{0x3, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x3, 0xf}, {0x0, 0x3, 0xa, 0x9}, {0x5, 0x4, 0x5, 0x9}, {0x1, 0x2, 0x6, 0xa}, {0x3, 0x4, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000008c0)={r4, r3}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) (async) syz_clone(0x4000000, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x0) (async) 4m6.722253625s ago: executing program 3 (id=16519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'rose0\x00', 0x112}) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000090000000300000009"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000080000008b9ee2428d037bcd", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=r3, @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000000100"/28], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xf, 0x0, 0x0, 0x1, 0x4, 0x64, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x4f]}}, &(0x7f00000003c0)=""/155, 0x2c, 0x9b, 0x1, 0x7fffffff}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES32=r7, @ANYRES16=r0, @ANYRES16=r3, @ANYRES8=r5, @ANYRES32=r5, @ANYRESOCT=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x8, 0x7, 0x8, 0x1, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x861c, 0x0, 0x0, 0x41000, 0x40, '\x00', r3, @fallback=0x3d, r6, 0x8, &(0x7f00000004c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[r7, 0x1], &(0x7f0000000640)=[{0x1, 0x3, 0xc, 0xa}, {0x1, 0x5, 0x4, 0xb}, {0x4, 0x3, 0xc, 0x7}, {0x1, 0x1, 0x6, 0xb}], 0x10, 0x7}, 0x94) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x2, &(0x7f0000000580)=[{0x30, 0x7f, 0x86, 0xfffff018}, {0x6, 0xfe, 0x3, 0xfdfffdff}]}) 3m51.698720612s ago: executing program 33 (id=16519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'rose0\x00', 0x112}) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000090000000300000009"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000080000008b9ee2428d037bcd", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=r3, @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000000100"/28], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xf, 0x0, 0x0, 0x1, 0x4, 0x64, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x4f]}}, &(0x7f00000003c0)=""/155, 0x2c, 0x9b, 0x1, 0x7fffffff}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES32=r7, @ANYRES16=r0, @ANYRES16=r3, @ANYRES8=r5, @ANYRES32=r5, @ANYRESOCT=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x8, 0x7, 0x8, 0x1, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x861c, 0x0, 0x0, 0x41000, 0x40, '\x00', r3, @fallback=0x3d, r6, 0x8, &(0x7f00000004c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[r7, 0x1], &(0x7f0000000640)=[{0x1, 0x3, 0xc, 0xa}, {0x1, 0x5, 0x4, 0xb}, {0x4, 0x3, 0xc, 0x7}, {0x1, 0x1, 0x6, 0xb}], 0x10, 0x7}, 0x94) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x2, &(0x7f0000000580)=[{0x30, 0x7f, 0x86, 0xfffff018}, {0x6, 0xfe, 0x3, 0xfdfffdff}]}) 2.438719552s ago: executing program 6 (id=18823): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x541) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000b0000000000000b04000000002e5f6f264100005f5f00"], &(0x7f0000000040)=""/104, 0x2f, 0x68, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x20, &(0x7f0000000440)={&(0x7f0000000180)=""/72, 0x48, 0x0, &(0x7f0000000340)=""/249, 0xf9}}, 0x10) 2.438141442s ago: executing program 5 (id=18824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f00000002c0)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000300)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xd, 0x8, 0x4, 0x6, 0x0, r2, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d40)={r4, &(0x7f0000000d80), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000080000003c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000b40)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r7, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_subtree(r9, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r10, &(0x7f0000000200)=ANY=[], 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ec0)={r3, &(0x7f0000000e40)="316263bde73217352ba27f8d6638dfa33b125a897dadfdb97771ada22d", &(0x7f0000000e80)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180500002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.373303698s ago: executing program 6 (id=18826): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x9, 0x51d}, 0xe000, 0x0, 0x80, 0x7, 0x0, 0x10000000, 0x3}, 0x0, 0xfffffe0000000000, r0, 0x2) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x1714, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000600)=0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x6, 0x7, 0x4, 0x3, 0x0, 0x8, 0x40, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x100280, 0x0, 0x80, 0x2, 0x0, 0x8, 0x40, 0x0, 0x814, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r1, 0x2) 2.301938416s ago: executing program 5 (id=18828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1a41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19e9b5381791cbf0ceb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c008fc6da4fb2e98e5083aa3c0ad0d"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), 0x2ca}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000e80)={0x1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{}, 0x0, &(0x7f0000000fc0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0xffffffffffffffff, 0x3, 0x10}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x8, 0x17, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000001800", @ANYRES32, @ANYBLOB], &(0x7f0000001140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000001180)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x12000}, 0x72bd1de2ad10b2b3, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) (rerun: 64) sendmsg$tipc(r2, &(0x7f00000012c0)={&(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000001340)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001380), 0x101d0}], 0x4}, 0x0) (async, rerun: 32) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x8e}, 0x28) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x18000000000002a0, 0x2f, 0x0, &(0x7f0000000640)="b90103600033f0000000000081001fffffe100004000632f77fbac141411e0000601be3e7d2a1fec1585e7dda131b4", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001580)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000015c0)={r4}, 0xc) (async) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x29, 0x12) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xd132}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xfc, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x78, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xd5, 0x8, 0x56, &(0x7f00000008c0)}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9601"], 0x6e8a) socketpair(0xa, 0x2, 0x0, &(0x7f0000000a40)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 2.168488399s ago: executing program 6 (id=18832): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r4, &(0x7f0000000580)="02150e5401a4adc80d5681d78e15208457721d40f94bdca842b78f56546c0da4e992d756bce8ed9e03edff4186073fb5bf816f71c2896bfdf4e13b32459c4bca67b7651e89cff2725367a061aabb01f8200428d64f52d2bf12bf195968fe8e61cd113ec0aea2255c901bdebc307325ce6a1ed3c12003ec1fa682a05ca83caea5811f09b0c424c2431129053247308f7be9e236ffd4e6283a237e7ec54d585a163173b0f233842441ee2ff6b34995ca6239b84bed20dc05d6c508ba6e1a55877828ef946a10d998c94283bc01b2c2685b47024169aede812c3c7bcd", &(0x7f0000000680)=""/189}, 0x20) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000630000001500020000000000bf010000000000008500000056000000b70000000200"], &(0x7f00000011c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x3, 0x7, 0x8, 0x0, 0x8, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xca, 0xb, 0x4, 0x4, 0x3, 0x1, 0x0, 0xfffffff9, 0x0, 0x3}, r1, 0x4, r2, 0xa) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x14a900, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r7, 0x400454ce, 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) (async) socketpair(0x10, 0x6, 0x0, &(0x7f0000000040)) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) (async, rerun: 32) syz_clone(0xc020000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.022043754s ago: executing program 1 (id=18834): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000300)={'macsec0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000440)={'veth0\x00', 0xe00}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xd5, &(0x7f00000004c0)=""/213, 0x41100, 0x0, '\x00', r0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x7c2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6}]}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000300)={'macsec0\x00', 0x400}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000440)={'veth0\x00', 0xe00}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000ef9500000000000000359bb9f43d861bbeb136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da7744009dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff823638164eede81d2887c16f785c683bb1d14df53679b4fd31a5beca649ce0b23ae4cff839b518b98e38b6296aab2b9c65777b79f1885aa6e0cc929812f3bc9e01d68fc6dab2a58af1351ed7d2dd915d58b37e3f572b74bb9e4413c21cff318163ae70dfbd69d7f990145a7d3a37596c1de0da198fd9ddee4a2c7556e993693908554aefc8a606059f09212f539dc9e295ebd4518392ba0de6467b832101cd4595ca80e07602e3e603509b1180cae919d62a60d353b1375b0cbeb098d45b6b718b954c42b8ef3bb0a2bf75b5aaeb3009bdef48853cd606aa6017ea0835cb32dba502c4d23075043cca8feb2490bf311d0598b32a272188000000000000000000000000000030c91bb930135fe8d1c2e638778642c72cd653ff04963f03db4248371b000855cbad775691006df60edde1cbaac0c00930ca28483995612050236339bb35b4aeecb5822cac639016af0590bd3e16d109f59a82d7a8c002fb82a70c6b49186c7a631f0c92cf0d81b5ce099a02b78480fde84b8d4892c40ec75c0eb6e200233511e606c64d4edc2dd4640be52b9501283daea74452e4c773c8249fd4c7804e165892d513b211d1be469d"], &(0x7f0000000480)='syzkaller\x00', 0x7, 0xd5, &(0x7f00000004c0)=""/213, 0x41100, 0x0, '\x00', r0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) (async) 2.020782194s ago: executing program 2 (id=18835): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc6, 0x0, 0xff, 0x0, 0x0, 0x9b47, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x7}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) close(r3) (async) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2d, 'rdma'}]}, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2420b6d8}, 0x0, 0xc48, 0x200000, 0x0, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) (async, rerun: 32) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x3, 0x80, 0x2, 0x7, 0xfc, 0x3, 0x0, 0x8000000000000001, 0x1000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3e, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40, 0xfffffffffffffff7, 0x10001, 0x6, 0x1, 0x8, 0x6d42, 0x0, 0x80000000, 0x0, 0x4323}) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.925136894s ago: executing program 6 (id=18838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f00000008c0)={0x20ffffff}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffff7fd, [{0xa, 0x2, 0x636c}]}]}, {0x0, [0x61, 0x61, 0x30, 0x2e, 0x61, 0x5f, 0x5f, 0x61, 0x0]}}, 0x0, 0x3b}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0xffffffffffffffff, 0x0, &(0x7f00000009c0), &(0x7f0000000a00), 0x800, r3}, 0x38) 1.873993119s ago: executing program 1 (id=18839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x3, 0x5, 0x12940, r0, 0x1, '\x00', 0x0, r2, 0x1, 0x2, 0x4, 0x3, @void, @value, @value=r3}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x58000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_clone(0x4002003a, 0x0, 0x0, 0x0, 0x0, 0x0) 1.872057659s ago: executing program 2 (id=18840): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x14, &(0x7f0000001280)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x14, &(0x7f0000001280)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1e000000090000000300000009"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r1, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0400000004000000080000008b9ee2428d037bcd", @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x11, 0x14, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002480)={r4}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f00000016c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000b000000000000000300000d000000000a000000020000000f000000030000000c0000000000000b010000000d000000010000930800000001000000010000000a000000030000000000000b000000000d000000010000040000000000000000010000004308000000000000615f0d51003000d8ebb552e595c812982c3a8ee42036b1142c6ced19da2b3dd9a032"], &(0x7f00000015c0)=""/21, 0x8f, 0x15, 0x0, 0x80, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f00000016c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000b000000000000000300000d000000000a000000020000000f000000030000000c0000000000000b010000000d000000010000930800000001000000010000000a000000030000000000000b000000000d000000010000040000000000000000010000004308000000000000615f0d51003000d8ebb552e595c812982c3a8ee42036b1142c6ced19da2b3dd9a032"], &(0x7f00000015c0)=""/21, 0x8f, 0x15, 0x0, 0x80, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000fd1a0800"/36], 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000fd1a0800"/36], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x7, 0x17, &(0x7f00000021c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="0c0000000b00000000010000f453000011810400", @ANYRES32=r0, @ANYBLOB="ffffffff00"/20, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="02000000050000000500"/20, @ANYRES32, @ANYBLOB="6ef7afc8f4d86e08b0fe43b1295e0c43d364138026cf95f432801f262cb261133338eb81b893d661fc78175cc129452807908bc077b605c2781e059d04e3a8835eb7932130766c451a63"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xa, 0x4, &(0x7f0000000e80)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x4, 0xfd90, &(0x7f0000000f00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x49, 0x10, &(0x7f0000001040), 0x3}, 0x28) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000001080)={0x2, &(0x7f0000001140)=[{0x20, 0x4, 0x9, 0xfffff02c}, {0x6, 0x0, 0x0, 0x80007}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001500)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa004a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8410, 0x2000000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xe, 0x16, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) 1.859780871s ago: executing program 0 (id=18841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x10, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000840)=r5, 0x4) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.805421096s ago: executing program 1 (id=18842): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1c, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, 0x0, 0x0, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r4 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='memory.current\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001380)={r4, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000013c0)={0xffffff00, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x11, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000008000b00970018110000746dd2c894949bd952d249bd93ab1b01651e6b76d972624fb280d41bec82dc0dfdc67e9cf401157f63aff410a6124e4c37a015b14bf4ba02f41a728dabe13fe5b191a7904170319edb0b2ed786ad64fb2e1a4edd8882dfe018b81f5fa0bc312c3258f5a42b90a4ba71cf82f76a967eab94f1bc273ac93ac5ded3a8b212752f4d9c15ff9df0e21f84fbf6", @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a3400000040000001005e0ff00000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001600)='GPL\x00', 0x200, 0xd4, &(0x7f0000001640)=""/212, 0x41100, 0x0, '\x00', r3, @fallback=0x30, r5, 0x8, &(0x7f0000001740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0xb, 0x7, 0x100}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f00000017c0)=[r2, r2], &(0x7f0000001800)=[{0x1, 0x5, 0xb, 0xa}, {0x5, 0x5, 0xe, 0xa}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000001900)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x1c, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='syzkaller\x00', 0x49, 0x0, 0x0, 0x40f00, 0xa, '\x00', r3, 0x0, r8, 0x8, &(0x7f0000001940)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001980)={0x0, 0x8, 0x200, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[r0, r0, r0], &(0x7f0000001a00)=[{0x2, 0x2, 0x4, 0x1}, {0x0, 0x2, 0x1, 0x7}, {0x1, 0x1, 0xc, 0x7}], 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r9}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r12, 0x0, 0xe, 0x0, &(0x7f00000009c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r10}, 0xc) 1.730097234s ago: executing program 0 (id=18843): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000005c0)=""/258, 0x26, 0x102, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xd6, &(0x7f00000002c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1.728898824s ago: executing program 0 (id=18844): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x4800) (async) recvmsg$unix(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000c00)=r3, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e5a, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x8) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xfffffff7}}]}}, &(0x7f0000000680)=""/213, 0x3e, 0xd5, 0x1}, 0x28) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x900000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800004850000007500000095"], 0x0, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r5, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000007003a78ebe6eb380000000000000000000018110000704c8129fcca621be2594c31f0f51ad8eaecf10c65a6fe24351a974e734c6c021f119f1e142837f9e577fa3b58cdb8e2c2b4fc5964884c32d25d28cf93fc9124a58a86e7d14ab824bcbe3e935a0853ef574ecc6530f4588a0be7480aff68324d03118276617a208088a75719b76e2bc0bf07f7f08289aa88ffbd4e1acd7ad756a0123042e86de8372540e900f9dcddf4576f343af7d9204ea78c1d7d77a0918d65c140a39f1bfbe8538647e0363052616c8b9c90d55316e27ee800"/222, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186800000f0000000000000009000000950000000000000018260000", @ANYRES32=r5, @ANYBLOB="00000000a1300000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x3, 0x48, &(0x7f00000003c0)=""/72, 0x41100, 0x27, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000880)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x10, 0x80, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r5, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x6}, 0x94) (async) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x704, 0x2}, 0x40, 0x0, 0x0, 0x3, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x8011080, 0x0, 0x23, 0x0, 0x0, 0x0) (async) close(r4) 1.616993495s ago: executing program 0 (id=18845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r1, r0, 0x0, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000440)=""/177, 0x2b, 0xb1, 0x1}, 0x28) perf_event_open(&(0x7f0000000a80)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20001, 0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7f, 0x3}, 0x880, 0x4000000000000000, 0xcfb5, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000b40)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r3, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/197, 0xc5, 0x0, &(0x7f0000000840)=""/132, 0x84}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x17, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', r1, 0x1b, r3, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0xb2e, 0xc1a}, 0x10, r6, 0x0, 0x2, 0x0, &(0x7f0000000980)=[{0x3, 0x4, 0xd, 0xb}, {0x2, 0x1, 0xb}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r7}, 0x18) 1.321704366s ago: executing program 0 (id=18846): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r0, 0x16, 0x1, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x4e, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000b40)=ANY=[], 0x0, 0x7956, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000073116600000000008510000002000000850000007600000095000000000000009500a505000000e1"], &(0x7f0000000280)='GPL\x00', 0x5, 0x29e, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2d, 'net_prio'}]}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x6, 0x5}]}, @enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x20926233}, {0x10, 0x200}, {0x0, 0x2}, {0xd, 0x4}]}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @typedef={0xb}]}, {0x0, [0x5f]}}, &(0x7f0000000c00)=""/160, 0x87, 0xa0, 0x0, 0x8, 0x10000, @value=r1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000800)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0x3) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000640)=""/12) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) 1.153249643s ago: executing program 5 (id=18847): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="00d10a1549000000b703009050db0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x80, 0x3, 0x100, 0x4400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xa}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x7fff, 0x80000001, 0x200, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18250000", @ANYRES32=r0, @ANYBLOB="0000000000100000183300ff03000000000000000000a27f"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r1, r4, r5], &(0x7f00000004c0)=[{0x3, 0x2, 0x5, 0x1}, {0x3, 0x3, 0x8, 0x6}], 0x10, 0xfffffffb}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 1.092354759s ago: executing program 5 (id=18848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="75f2d8f2d2a6a28b00468fb00000", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xe0f, 0x0, 0x1, 0x1261, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001680)={r1, &(0x7f0000001600)="370a7b4d802e8d5ccbed6c756281c73b6256c96336212c51be668c820e4c12849639386a39a8e9e46b63d3696705084b865d026a607066bc8dc52f7c474a87f876494d56663ea730251b309c86"}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%pI4 \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000015c0)={&(0x7f0000000000)="f547e2bc5afa61617c6bbbf6b1bb7f1d417b5f8c1e5cdf833f14ca1cdcded3f3f6765c71f67a77557e20c0069186fa7083b14c9671b8d24f71baea696c8e7cba8e6172964a703427b7e003efd0f21512bf7e3919a1792bd53ad019beddaa9b901b38f3df92363a615f48909f78c95c437a949d54b617f2cc452c9a5e0dad6c980c4b83e634b40b90e59d9c92a76fceb380dfba0a9e6b20dace8795d889d97883e9c4ec352127ee99a3737d067415865a84058ef9a2ffbce44bef61a10fff959e35c53790fb21c336382d8156845ecb7494471116922997f4cec93b4834", &(0x7f00000001c0)=""/177, &(0x7f00000004c0)="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", &(0x7f00000014c0)="a5102734f8", 0x4, r2}, 0x38) 969.916261ms ago: executing program 6 (id=18849): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_clone(0x41204100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe84}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8949, &(0x7f0000000a00)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000a40)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000bc0)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x82, &(0x7f0000000c00), 0x4bd) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000f2ffff070000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000061181c000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x5be0}, 0x0, 0x8, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) 735.152795ms ago: executing program 2 (id=18853): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000006894ef48d006f02b7c6dbb8b4841f6f00195bb5c107e565625437d6c50e7aefd00c93b0aed625fbb5dad01b6073763045470e46d7b13195f070d8a43118524e54d56eb56f29fcef939cf0f6ad891bfc0cb57baad"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) socketpair(0x1f, 0x5, 0x8e, &(0x7f0000000ac0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r2, r1, 0x5, 0x5, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x14, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r7}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x9, 0xf, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000dc0)={r11}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e00)={r9}, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000001200)=r3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r12 = perf_event_open$cgroup(&(0x7f0000000a00)={0x3, 0x80, 0x3, 0x1, 0x7, 0x9, 0x0, 0x0, 0x8200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x3091, 0xc, 0x228, 0x9, 0x1, 0x7f, 0x8, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000a80)=')\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000840)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000004, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r14) recvmsg$unix(r13, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000004, 0xffffffff}, 0x0, 0x0, 0x81, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) 635.365585ms ago: executing program 2 (id=18854): perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x5, 0x6, 0x4, 0x0, 0x9, 0x80, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x105020, 0x5, 0x9, 0x9, 0x1, 0x1ff, 0x9, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xd, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0xc, 0xe8, 0xcb, 0x0, 0x6, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x10001, 0xa60b, 0x1, 0x6, 0xffff, 0x8, 0x8, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0xc, 0xe8, 0xcb, 0x0, 0x6, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x10001, 0xa60b, 0x1, 0x6, 0xffff, 0x8, 0x8, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x0, 0x2420b6d8}, 0x0, 0xc48, 0x200000, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x0, 0x2420b6d8}, 0x0, 0xc48, 0x200000, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0x268}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0x268}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000006c000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x20000, &(0x7f0000001140)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000340)) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/60, 0x3c}], 0x36}, 0x41fe) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 557.226933ms ago: executing program 0 (id=18855): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8a114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r1, 0x0) syz_clone(0x808a3000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4000000, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x0) 375.559982ms ago: executing program 2 (id=18856): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8, 0x7, 0x0, 0x0, 0x4, 0x1d78, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000740)=""/222, 0x0, 0x8}, 0x78) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x619, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r1, &(0x7f00000009c0)="9ba73a1daa", 0x0}, 0x20) (async) perf_event_open(&(0x7f0000000100)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000070000010000000000000000850000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000012c0), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001300)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001340)=r4, 0x12) (async) syz_open_procfs$namespace(r4, &(0x7f0000001380)='ns/time_for_children\x00') (async) sendmsg$unix(r3, &(0x7f0000001440)={&(0x7f0000000340)=@file={0xf82940c914850570, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="729ad068c9420c62ab29c848627f2645a459c44eaf6a4e58b069e4c8251bb65c162e1edc7a4b06aa9324628a9d621c24cc19fb96a9face4eb8d570a61bb6dff096d932d4bc90a1d315d31a7ec665d026d04b677840f3c40d7cf0cafe7c117baf138b09fa9a4862ba1fee783a46a4bc1ecc7c6ad09b57beb7585dea333ca654067ad25ddc055d6740be4aeec986f4df399ef34f296bdc5b7074119de54ec28dbd0ea598576af3aea154b468a481c5839bd2b0f7a11f7a35fa45432771011c4eb8432f450eb9199342f128f86c0e6d0ae0fa6d", 0xd2}, {&(0x7f0000000ec0)="9b1ef516fef00a1915b6e127b3cb06ffc07ac6e54bde244fd20eecfc3bb64f79ca53c114e865cf26e9ab3b5a396c2f5036a594e4742a5c7cabca54b4824910949a9a24bb0fb663285f9b58081c640d96ebc105c05b257c890223f0f98fe32edd953cb2fefd8f9400922254045d22afa8d919bde0472a028bca6fff314abf8c6dabfa1cd0005d0de3bcfae1546c610c83e8bcf194254da968169c56a0cf88196e8879833e001e69a2b6dd5083ae", 0xad}, {&(0x7f0000000f80)="3cf3f3004cb929f451ba63d786f1d1d99509840c37c7b34bede8f6c93b99ac3bd61788", 0x23}], 0x3, &(0x7f00000013c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xffffffffffffffff}}}], 0x60, 0x40006}, 0x240090a0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x5, &(0x7f0000000c80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x99) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000d80)='\x00'/14, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x94) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 372.462122ms ago: executing program 5 (id=18857): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, 0x0, &(0x7f0000000540)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020005000000000000000000000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe12a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x10}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000003c0)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000500)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 139.033135ms ago: executing program 6 (id=18858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r0, &(0x7f0000000880)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000700)={'macsec0\x00', @random="010000201000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000009500"/24], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r0, &(0x7f0000000880)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000700)={'macsec0\x00', @random="010000201000"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) (async) close(r4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0xfe, 0xfffffffffffffffc}, 0x10) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000009500"/24], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) 138.662815ms ago: executing program 2 (id=18859): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000940)=0x5, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0xc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='.'], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000009c0)={r8, &(0x7f0000000a00), &(0x7f0000000a40)=""/73}, 0x70) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x24048850}, 0x40044000) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r5) close(r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 1 (id=18860): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="057c69e22309733b15271f03df054fa9644e8e93cf0db0b38b1cdf0063ce5860c9ad582db998a3134aeb14aa2dff439a6828c04366bfa38e14a341e4e6078fcb7225c3ef741107ab9d6939de966802cf25d03a0d7cb4ecbea5521002f7cff65b07a26fa730fd7bf8239d56dd696de5c8211a2a641c75876c5397348be521e9b71899ec3e694776cdc768865b", &(0x7f00000000c0)=""/81}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001200)={r0, &(0x7f00000001c0)="56745b9635f3e7fbabb93a0274ba630a65b832a9e44127bd2badf2e60d753ce65235994a70", &(0x7f0000000200)=""/4096}, 0x20) r1 = perf_event_open$cgroup(&(0x7f0000001240)={0x5, 0x80, 0x5, 0x4, 0x8, 0x8, 0x0, 0xc, 0xa0400, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7397, 0x0, @perf_config_ext={0x1, 0xf}, 0x1801, 0x6, 0xc45f, 0x7, 0xa, 0x6, 0x9, 0x0, 0x2e9, 0x0, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000012c0)='\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r0, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.numa_stat\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x21, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_query, @ringbuf_query, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffd6a8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xd, 0x10a9, 0xc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001600)=[{0x4, 0x4, 0x0, 0x3}, {0x4, 0x2, 0xf, 0x4}, {0x5, 0x5, 0xf, 0x2}, {0x5, 0x5, 0x9, 0x3}, {0x2, 0x3, 0x6, 0x3}, {0x2, 0x3, 0x5, 0xb}, {0x3, 0x1, 0x7, 0x5}], 0x10, 0x9}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001780), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@map=r2, r3, 0x9, 0x1, r4, @void, @value=r5}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x907, 0x0, r3, 0x0, '\x00', 0x0, r5, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b00)={{r3, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0xa, &(0x7f0000001840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaef}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0xb, 0x9, 0x5, 0xffffffffffffffe0, 0x10}], &(0x7f00000018c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000001900)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0x5, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001b40)=[r3, r5, r0, r7, r0], &(0x7f0000001b80)=[{0x0, 0x3, 0xe}, {0x0, 0x4, 0xb, 0x7}, {0x1, 0x2, 0x2, 0x6}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x800) r8 = perf_event_open(&(0x7f0000001cc0)={0x2, 0x80, 0x2, 0x72, 0x8, 0x9, 0x0, 0x18, 0x1008, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000001c80), 0x9}, 0x100000, 0x1, 0x0, 0x6, 0x0, 0x85, 0x8, 0x0, 0x1, 0x0, 0x1fe0000000000000}, 0xffffffffffffffff, 0x0, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000001d40)='\x00') recvmsg$unix(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001d80)=""/211, 0xd3}, {&(0x7f0000001e80)=""/20, 0x14}, {&(0x7f0000001ec0)=""/78, 0x4e}, {&(0x7f0000001f40)=""/136, 0x88}, {&(0x7f0000002000)=""/48, 0x30}, {&(0x7f0000002040)=""/47, 0x2f}, {&(0x7f0000002080)=""/45, 0x2d}], 0x7}, 0x2000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000023c0)={r3, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002400)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x9cc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002480)={0xffffffffffffffff, 0x7fffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x0, 0x24, &(0x7f0000002180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x8, 0xb, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000022c0)='GPL\x00', 0x5, 0x26, &(0x7f0000002300)=""/38, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002380)={0x5, 0xe, 0x9, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000024c0)=[r2, r9, r10, r11, r2], &(0x7f0000002500)=[{0x3, 0x1, 0x7, 0x3}], 0x10, 0x5e}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000002600)='%+9llu \x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002740)={@map=r10, 0x11, 0x0, 0x7ff, &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002680)=[0x0], &(0x7f00000026c0)=[0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002880)={@map=r10, 0x13, 0x0, 0x5, &(0x7f0000002780)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002840)=[0x0, 0x0, 0x0]}, 0x40) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000028c0)={0x0, 0x34e, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002980)={r9, 0x58, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=@arena={0x21, 0x0, 0x0, 0x2a, 0x40400, r12, 0x7, '\x00', r13, r5, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002a40)={'dvmrp0\x00', 0x8c03}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002ac0)=@generic={&(0x7f0000002a80)='./file0\x00', r5}, 0x18) close(r3) kernel console output (not intermixed with test programs): ready [ 1285.486871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1285.657823][T32670] device veth1_macvtap entered promiscuous mode [ 1285.673352][T32696] device syzkaller0 entered promiscuous mode [ 1285.765893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1285.781993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1286.000038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1286.021139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1286.261795][T32710] device veth0_vlan left promiscuous mode [ 1286.394424][T32710] device veth0_vlan entered promiscuous mode [ 1286.905334][T32721] device dummy0 entered promiscuous mode [ 1288.103863][T32756] device sit0 left promiscuous mode [ 1288.303584][T32756] syzkaller0: mtu greater than device maximum [ 1288.316916][T32757] device syzkaller0 entered promiscuous mode [ 1288.512263][T11238] bridge0: port 3(veth0_vlan) entered disabled state [ 1288.533766][T11238] device bridge_slave_1 left promiscuous mode [ 1288.558551][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.585399][T11238] device bridge_slave_0 left promiscuous mode [ 1288.600094][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.634246][T11238] device veth1_macvtap left promiscuous mode [ 1288.654569][T11238] device veth0_vlan left promiscuous mode [ 1291.170812][ T476] device wg2 left promiscuous mode [ 1291.178171][ T477] device wg2 entered promiscuous mode [ 1292.887177][ T522] device veth1_macvtap left promiscuous mode [ 1292.900958][ T522] device macsec0 entered promiscuous mode [ 1293.225356][ T583] : renamed from team_slave_1 [ 1293.352966][ T593] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 1294.214191][ T617] tap0: tun_chr_ioctl cmd 1074025677 [ 1294.219524][ T617] tap0: linktype set to 774 [ 1295.726288][ T694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.741468][ T694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.841597][ T827] device sit0 entered promiscuous mode [ 1298.972563][ T857] : port 1(dummy0) entered blocking state [ 1298.978409][ T857] : port 1(dummy0) entered disabled state [ 1299.011433][ T857] device dummy0 entered promiscuous mode [ 1299.140886][ T863] device syzkaller0 entered promiscuous mode [ 1300.400183][ T905] device sit0 entered promiscuous mode [ 1300.888543][ T919] device syzkaller0 entered promiscuous mode [ 1300.921820][ T923] bridge0: port 3(ip6gretap0) entered blocking state [ 1300.966725][ T923] bridge0: port 3(ip6gretap0) entered disabled state [ 1300.986368][ T923] device ip6gretap0 entered promiscuous mode [ 1300.993479][ T923] bridge0: port 3(ip6gretap0) entered blocking state [ 1301.000243][ T923] bridge0: port 3(ip6gretap0) entered forwarding state [ 1301.008178][ T928] ref_ctr_offset mismatch. inode: 0x1e2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1302.455804][ T6251] syzkaller0: tun_net_xmit 76 [ 1302.460746][ T6251] syzkaller0: tun_net_xmit 48 [ 1302.480807][ C1] syzkaller0: tun_net_xmit 76 [ 1304.633899][ T1089] tun0: tun_chr_ioctl cmd 1074025677 [ 1304.649529][ T1089] tun0: linktype set to 824 [ 1305.475501][ T1193] device wg2 left promiscuous mode [ 1305.528895][ T1194] device wg2 entered promiscuous mode [ 1305.746632][ T1200] device syzkaller0 entered promiscuous mode [ 1306.373817][ T1232] device syzkaller0 entered promiscuous mode [ 1306.527658][ T1230] device syzkaller0 entered promiscuous mode [ 1307.416519][ T1297] device sit0 entered promiscuous mode [ 1309.709495][ T1377] device syzkaller0 entered promiscuous mode [ 1310.669655][ T1432] device macsec0 entered promiscuous mode [ 1311.922603][ T1472] device lo entered promiscuous mode [ 1312.092931][ T1493] device syzkaller0 entered promiscuous mode [ 1313.995103][ T1564] device syzkaller0 entered promiscuous mode [ 1316.039505][ T1638] 0: renamed from pim6reg1 [ 1316.935324][ T1655] device syzkaller0 entered promiscuous mode [ 1318.542237][ T1692] device syzkaller0 entered promiscuous mode [ 1325.876224][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.023866][ T2081] device syzkaller0 entered promiscuous mode [ 1327.529923][ T2126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.568015][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.585997][ T2126] device bridge_slave_0 entered promiscuous mode [ 1327.612288][ T2126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.620529][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.635758][ T2126] device bridge_slave_1 entered promiscuous mode [ 1327.799718][ T2126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.806818][ T2126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.814112][ T2126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.821153][ T2126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.951487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1327.978022][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.010845][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.085907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1328.099616][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.106697][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.248375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1328.287188][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.294284][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.389101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1328.454845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1328.507147][ T2126] device veth0_vlan entered promiscuous mode [ 1328.541622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1328.564153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1328.586591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1328.601282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1328.624517][ T2126] device veth1_macvtap entered promiscuous mode [ 1328.674182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1328.683620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1328.700997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1328.715569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1328.731413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1328.782550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1328.864516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1328.904383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1328.919903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1330.677792][ T2243] 0: renamed from pim6reg1 [ 1330.939491][T11238] device bridge_slave_1 left promiscuous mode [ 1330.947143][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.986490][T11238] device bridge_slave_0 left promiscuous mode [ 1330.993262][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.010664][T11238] device veth0_vlan left promiscuous mode [ 1331.224735][ T2275] device syzkaller0 entered promiscuous mode [ 1333.821750][ T2411] tap0: tun_chr_ioctl cmd 1074025677 [ 1333.868745][ T2411] tap0: linktype set to 805 [ 1334.010613][ T2413] tap0: tun_chr_ioctl cmd 35092 [ 1334.368646][ T2446] device syzkaller0 entered promiscuous mode [ 1335.580411][ T2494] device sit0 left promiscuous mode [ 1336.654650][ T2530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.661844][ T2530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.199260][ T2565] device syzkaller0 entered promiscuous mode [ 1341.803507][ T2775] device syzkaller0 entered promiscuous mode [ 1343.835569][ T2869] nr0: port 1(macsec0) entered blocking state [ 1343.841795][ T2869] nr0: port 1(macsec0) entered disabled state [ 1349.910795][ T3018] device wg2 entered promiscuous mode [ 1350.959515][ T3094] device syzkaller0 entered promiscuous mode [ 1352.291550][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 122 seconds. [ 1352.299712][ T26] Tainted: G W syzkaller #0 [ 1352.347668][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1352.369437][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1352.410786][ T26] Call Trace: [ 1352.420900][ T26] __schedule+0xc03/0x13e0 [ 1352.425375][ T26] ? __sched_text_start+0x8/0x8 [ 1352.430225][ T26] ? wake_up_process+0x10/0x20 [ 1352.470787][ T26] ? insert_work+0x28a/0x320 [ 1352.475494][ T26] schedule+0x13c/0x1d0 [ 1352.485174][ T26] schedule_timeout+0xba/0x330 [ 1352.498581][ T26] ? console_conditional_schedule+0x10/0x10 [ 1352.515325][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1352.530184][ T26] wait_for_common+0x284/0x430 [ 1352.551843][ T26] ? wait_for_completion+0x20/0x20 [ 1352.564567][ T26] wait_for_completion+0x18/0x20 [ 1352.578174][ T26] __synchronize_srcu+0x179/0x200 [ 1352.592954][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1352.608422][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1352.624130][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1352.638973][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1352.653188][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1352.658078][ T26] rcu_tasks_postscan+0x10/0x20 [ 1352.663045][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1352.668032][ T26] ? __kasan_check_write+0x14/0x20 [ 1352.673253][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1352.678765][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1352.685288][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1352.691188][ T26] ? finish_wait+0x1ac/0x1c0 [ 1352.695857][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1352.700842][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1352.705751][ T26] ? io_schedule+0xe0/0xe0 [ 1352.710256][ T26] ? __kasan_check_read+0x11/0x20 [ 1352.715341][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1352.720369][ T26] kthread+0x324/0x3b0 [ 1352.724503][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1352.729387][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1352.734119][ T26] ret_from_fork+0x1f/0x30 [ 1352.739250][ T26] NMI backtrace for cpu 1 [ 1352.743734][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1352.752298][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1352.762339][ T26] Call Trace: [ 1352.765620][ T26] __dump_stack+0x21/0x24 [ 1352.769931][ T26] dump_stack_lvl+0x1a7/0x208 [ 1352.774635][ T26] ? show_regs_print_info+0x18/0x18 [ 1352.779817][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1352.785432][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1352.790360][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1352.796432][ T26] dump_stack+0x15/0x1c [ 1352.800576][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1352.806543][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1352.812420][ T26] watchdog+0xe14/0xf60 [ 1352.816563][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1352.821577][ T26] ? __kasan_check_read+0x11/0x20 [ 1352.826584][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1352.831506][ T26] kthread+0x324/0x3b0 [ 1352.835560][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1352.840570][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1352.845141][ T26] ret_from_fork+0x1f/0x30 [ 1352.849703][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1352.855181][ C0] NMI backtrace for cpu 0 [ 1352.855188][ C0] CPU: 0 PID: 20160 Comm: kworker/0:66 Tainted: G W syzkaller #0 [ 1352.855194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1352.855198][ C0] Workqueue: rcu_gp process_srcu [ 1352.855205][ C0] RIP: 0010:delay_tsc+0x5d/0xc0 [ 1352.855217][ C0] Code: 90 49 89 d4 49 c1 e4 20 49 09 c4 4d 29 fc 49 39 dc 73 55 bf 01 00 00 00 e8 50 91 e6 fe 65 8b 05 55 2d a4 7d 85 c0 74 1d f3 90 01 00 00 00 e8 89 8f e6 fe e8 34 9d 1f 02 41 39 c6 75 0e 0f 01 [ 1352.855221][ C0] RSP: 0018:ffffc90001587b80 EFLAGS: 00000286 [ 1352.855228][ C0] RAX: 0000000080000000 RBX: 0000000000002af9 RCX: 0000000000000000 [ 1352.855234][ C0] RDX: 00000000000002b6 RSI: ffffffff85406dc0 RDI: 00000000ffffffff [ 1352.855239][ C0] RBP: ffffc90001587ba0 R08: ffffc90001587bc7 R09: 1ffff920002b0f78 [ 1352.855244][ C0] R10: dffffc0000000000 R11: fffff520002b0f79 R12: 0000000000001ec2 [ 1352.855249][ C0] R13: 0000000000009015 R14: 0000000000000000 R15: 000002b6b900c0f2 [ 1352.855254][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1352.855259][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1352.855264][ C0] CR2: 0000000000000000 CR3: 00000001488d5000 CR4: 00000000003506b0 [ 1352.855269][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1352.855274][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1352.855277][ C0] Call Trace: [ 1352.855280][ C0] __const_udelay+0x61/0x70 [ 1352.855284][ C0] try_check_zero+0x2dc/0x350 [ 1352.855287][ C0] process_srcu+0x1bd/0xca0 [ 1352.855291][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 1352.855295][ C0] ? __kasan_check_read+0x11/0x20 [ 1352.855298][ C0] ? read_word_at_a_time+0x12/0x20 [ 1352.855301][ C0] ? strscpy+0x9b/0x290 [ 1352.855305][ C0] process_one_work+0x6fd/0xbc0 [ 1352.855309][ C0] worker_thread+0xa8e/0x13c0 [ 1352.855312][ C0] kthread+0x324/0x3b0 [ 1352.855315][ C0] ? worker_clr_flags+0x190/0x190 [ 1352.855319][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1352.855322][ C0] ret_from_fork+0x1f/0x30 [ 1355.076474][ T3270] device veth0_vlan left promiscuous mode [ 1355.135710][ T3270] device veth0_vlan entered promiscuous mode [ 1355.280571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1355.454973][ T3280] device wg2 left promiscuous mode [ 1356.248666][ T3314] device syzkaller0 entered promiscuous mode [ 1356.426840][ T3327] device syzkaller0 entered promiscuous mode [ 1359.443975][ T3478] device syzkaller0 entered promiscuous mode [ 1361.027455][ T3590] device syzkaller0 entered promiscuous mode [ 1361.381046][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.388243][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.440761][ T3636] device bridge_slave_1 left promiscuous mode [ 1361.462563][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.500455][ T3636] device bridge_slave_0 left promiscuous mode [ 1361.512115][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.918162][ T3695] device syzkaller0 entered promiscuous mode [ 1365.411122][ T3773] device syzkaller0 entered promiscuous mode [ 1366.259663][ T3814] device syzkaller0 entered promiscuous mode [ 1368.313774][ T3890] device veth0_vlan left promiscuous mode [ 1368.320331][ T3890] device veth0_vlan entered promiscuous mode [ 1368.806416][ T3888] device veth0_vlan left promiscuous mode [ 1368.819545][ T3888] device veth0_vlan entered promiscuous mode [ 1368.835241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1368.862083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1368.929274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1371.343712][ T3956] @0: renamed from bond_slave_1 [ 1371.422658][ T3961] : port 2(syz_tun) entered blocking state [ 1371.431774][ T3961] : port 2(syz_tun) entered disabled state [ 1371.445791][ T3961] device syz_tun entered promiscuous mode [ 1371.902015][ T3994] 7B: renamed from syzkaller0 [ 1371.946002][ T3996] tap0: tun_chr_ioctl cmd 2147767520 [ 1373.033525][ T4040] device syzkaller0 entered promiscuous mode [ 1373.421324][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 144 seconds. [ 1373.429246][ T26] Tainted: G W syzkaller #0 [ 1373.459892][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1373.488556][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1373.516549][ T26] Call Trace: [ 1373.524250][ T26] __schedule+0xc03/0x13e0 [ 1373.533006][ T26] ? __sched_text_start+0x8/0x8 [ 1373.537932][ T26] ? wake_up_process+0x10/0x20 [ 1373.542763][ T26] ? insert_work+0x28a/0x320 [ 1373.547374][ T26] schedule+0x13c/0x1d0 [ 1373.551559][ T26] schedule_timeout+0xba/0x330 [ 1373.556336][ T26] ? console_conditional_schedule+0x10/0x10 [ 1373.562255][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1373.567388][ T26] wait_for_common+0x284/0x430 [ 1373.572193][ T26] ? wait_for_completion+0x20/0x20 [ 1373.577415][ T26] wait_for_completion+0x18/0x20 [ 1373.582392][ T26] __synchronize_srcu+0x179/0x200 [ 1373.587430][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1373.593168][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1373.598640][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1373.603788][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1373.609353][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1373.614225][ T26] rcu_tasks_postscan+0x10/0x20 [ 1373.619092][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1373.624075][ T26] ? __kasan_check_write+0x14/0x20 [ 1373.629199][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1373.634681][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1373.641120][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1373.646965][ T26] ? finish_wait+0x1ac/0x1c0 [ 1373.651648][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1373.656604][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1373.661689][ T26] ? io_schedule+0xe0/0xe0 [ 1373.666127][ T26] ? __kasan_check_read+0x11/0x20 [ 1373.671281][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1373.676239][ T26] kthread+0x324/0x3b0 [ 1373.680313][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1373.685343][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1373.689943][ T26] ret_from_fork+0x1f/0x30 [ 1373.695586][ T26] NMI backtrace for cpu 1 [ 1373.699922][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1373.708497][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1373.718529][ T26] Call Trace: [ 1373.721799][ T26] __dump_stack+0x21/0x24 [ 1373.726101][ T26] dump_stack_lvl+0x1a7/0x208 [ 1373.730755][ T26] ? show_regs_print_info+0x18/0x18 [ 1373.735930][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1373.741539][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1373.746452][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1373.752491][ T26] dump_stack+0x15/0x1c [ 1373.756624][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1373.762578][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1373.768444][ T26] watchdog+0xe14/0xf60 [ 1373.772579][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1373.777602][ T26] ? __kasan_check_read+0x11/0x20 [ 1373.782600][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1373.787513][ T26] kthread+0x324/0x3b0 [ 1373.791561][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1373.796562][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1373.801156][ T26] ret_from_fork+0x1f/0x30 [ 1373.805640][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1373.811230][ C0] NMI backtrace for cpu 0 [ 1373.811236][ C0] CPU: 0 PID: 84 Comm: klogd Tainted: G W syzkaller #0 [ 1373.811242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1373.811246][ C0] RIP: 0010:__memset+0x0/0x30 [ 1373.811257][ C0] Code: 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 f3 a4 c3 00 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 [ 1373.811261][ C0] RSP: 0018:ffffc90000b77770 EFLAGS: 00000002 [ 1373.811270][ C0] RAX: ffffffff825bf101 RBX: 0000000000000018 RCX: ffffffff825bf1c5 [ 1373.811275][ C0] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000b77820 [ 1373.811280][ C0] RBP: ffffc90000b77790 R08: ffffc90000b77837 R09: 1ffff9200016ef06 [ 1373.811285][ C0] R10: dffffc0000000000 R11: fffff5200016ef07 R12: ffffffffffffffff [ 1373.811290][ C0] R13: 00000000000bb9bc R14: 0000000000000000 R15: ffffc90000b77820 [ 1373.811296][ C0] FS: 00007f981668ec80(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1373.811300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1373.811305][ C0] CR2: 00005555837d94e8 CR3: 000000010d572000 CR4: 00000000003506b0 [ 1373.811310][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1373.811315][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1373.811318][ C0] Call Trace: [ 1373.811321][ C0] ? memset+0x35/0x40 [ 1373.811324][ C0] number+0x285/0xef0 [ 1373.811328][ C0] ? pointer+0xc40/0xc40 [ 1373.811331][ C0] ? format_decode+0xbf4/0x1520 [ 1373.811334][ C0] vsnprintf+0xf56/0x1990 [ 1373.811337][ C0] sprintf+0xe4/0x140 [ 1373.811340][ C0] ? vsprintf+0x40/0x40 [ 1373.811344][ C0] ? prb_read_valid+0x60/0x60 [ 1373.811347][ C0] info_print_prefix+0x168/0x360 [ 1373.811351][ C0] ? trace_raw_output_console+0xd0/0xd0 [ 1373.811354][ C0] syslog_print+0x2d5/0x720 [ 1373.811358][ C0] ? do_syslog+0x9a0/0x9a0 [ 1373.811361][ C0] ? cap_capable+0x19c/0x220 [ 1373.811365][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1373.811368][ C0] ? finish_wait+0x1ac/0x1c0 [ 1373.811372][ C0] do_syslog+0x94c/0x9a0 [ 1373.811375][ C0] ? devkmsg_release+0x130/0x130 [ 1373.811379][ C0] ? __switch_to_asm+0x3a/0x60 [ 1373.811382][ C0] ? io_schedule+0xe0/0xe0 [ 1373.811385][ C0] ? fpu__clear_all+0x20/0x20 [ 1373.811389][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1373.811393][ C0] __x64_sys_syslog+0x7c/0x90 [ 1373.811396][ C0] do_syscall_64+0x31/0x40 [ 1373.811400][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1373.811403][ C0] RIP: 0033:0x7f9816858a37 [ 1373.811414][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 1373.811418][ C0] RSP: 002b:00007ffe546bd078 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 1373.811426][ C0] RAX: ffffffffffffffda RBX: 00007f98169f8490 RCX: 00007f9816858a37 [ 1373.811431][ C0] RDX: 00000000000003ff RSI: 00007f98169f8490 RDI: 0000000000000002 [ 1373.811436][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1373.811441][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f98169f8490 [ 1373.811446][ C0] R13: 00007f98169d5dfe R14: 00007f98169f84f8 R15: 00007f98169f84f8 [ 1374.200839][ T4068] device syzkaller0 entered promiscuous mode [ 1375.552857][ T4115] device veth1_macvtap left promiscuous mode [ 1376.104151][ T4128] device syzkaller0 entered promiscuous mode [ 1378.714352][ T4217] device syzkaller0 entered promiscuous mode [ 1379.434950][ T4276] device syzkaller0 entered promiscuous mode [ 1379.538783][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.544175][ T4283] tun0: linktype set to 768 [ 1379.548843][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.554439][ T4283] tun0: linktype set to 768 [ 1379.572144][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.577837][ T4283] tun0: linktype set to 768 [ 1379.728784][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.734380][ T4283] tun0: linktype set to 768 [ 1379.796096][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.801679][ T4283] tun0: linktype set to 768 [ 1379.855251][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.865616][ T4283] tun0: linktype set to 768 [ 1379.982584][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.988277][ T4283] tun0: linktype set to 768 [ 1379.993155][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1379.998595][ T4283] tun0: linktype set to 768 [ 1380.003453][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1380.017793][ T4283] tun0: linktype set to 768 [ 1380.171555][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1380.176889][ T4283] tun0: linktype set to 768 [ 1380.188813][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1380.194169][ T4283] tun0: linktype set to 768 [ 1380.512873][ T4283] tun0: tun_chr_ioctl cmd 1074025677 [ 1380.518229][ T4283] tun0: linktype set to 768 [ 1381.766222][ T4355] tap0: tun_chr_ioctl cmd 1074025677 [ 1381.780763][ T4355] tap0: linktype set to 778 [ 1381.965146][ T4365] device syzkaller0 entered promiscuous mode [ 1383.497090][ T4504] device syzkaller0 entered promiscuous mode [ 1384.077136][ T4540] device syzkaller0 entered promiscuous mode [ 1384.851076][ T4557] device syzkaller0 entered promiscuous mode [ 1385.095128][ T4581] device sit0 entered promiscuous mode [ 1385.252208][ T4600] : renamed from bond_slave_0 [ 1385.768622][ T4613] device veth0_vlan left promiscuous mode [ 1385.809108][ T4613] device veth0_vlan entered promiscuous mode [ 1385.872119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1385.885774][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1385.918060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1386.300793][ T4640] device bridge_slave_1 left promiscuous mode [ 1386.327246][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.391138][ T4640] device bridge_slave_0 left promiscuous mode [ 1386.411064][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.533486][ T4663] syzkaller0: mtu greater than device maximum [ 1386.975068][ T4700] device sit0 left promiscuous mode [ 1387.072774][ T4703] device sit0 entered promiscuous mode [ 1388.167378][ T4734] device sit0 left promiscuous mode [ 1388.608788][ T4750] : renamed from vlan1 [ 1388.916617][ T4765] device syzkaller0 entered promiscuous mode [ 1391.523250][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.528853][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.595544][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.634410][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.640097][ T4920] geneve1: persist disabled [ 1391.644985][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.650649][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.656507][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.662414][ T4920] geneve1: persist disabled [ 1391.667094][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.672996][ T4920] geneve1: persist disabled [ 1391.677629][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.686014][ T4920] geneve1: persist disabled [ 1391.730833][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.755594][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.771423][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.785826][ T4920] geneve1: persist disabled [ 1391.806760][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.835888][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.868070][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.912257][ T4920] geneve1: persist disabled [ 1391.937148][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1391.960785][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1391.980766][ T4920] geneve1: persist disabled [ 1391.985316][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.001001][ T4920] geneve1: persist disabled [ 1392.010745][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.040104][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.060801][ T4920] geneve1: persist disabled [ 1392.065507][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.088547][ T4940] tap0: tun_chr_ioctl cmd 1074025677 [ 1392.097370][ T4940] tap0: linktype set to 780 [ 1392.110769][ T4936] tap0: tun_chr_ioctl cmd 1074025673 [ 1392.116140][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.122273][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.127815][ T4920] geneve1: persist disabled [ 1392.150781][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.156370][ T4920] geneve1: persist disabled [ 1392.170882][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.181174][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.186749][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.200756][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.206315][ T4920] geneve1: persist disabled [ 1392.223990][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.240764][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.246356][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.260931][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.266516][ T4920] geneve1: persist disabled [ 1392.285944][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.297320][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.349131][ T4954] device syzkaller0 entered promiscuous mode [ 1392.363345][ T4920] geneve1: tun_chr_ioctl cmd 1074025675 [ 1392.368929][ T4920] geneve1: persist disabled [ 1392.380208][ T4919] geneve1: tun_chr_ioctl cmd 1074025673 [ 1392.420026][ T4956] device syzkaller0 entered promiscuous mode [ 1392.635258][ T4975] device syzkaller0 entered promiscuous mode [ 1392.655084][ T4975] syz_tun: tun_net_xmit 86 [ 1392.924539][ T5008] tap0: tun_chr_ioctl cmd 1074025684 [ 1393.731241][ C0] syz_tun: tun_net_xmit 86 [ 1394.532477][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 165 seconds. [ 1394.562578][ T26] Tainted: G W syzkaller #0 [ 1394.569125][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1394.588645][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1394.601799][ T26] Call Trace: [ 1394.605120][ T26] __schedule+0xc03/0x13e0 [ 1394.610201][ T26] ? __sched_text_start+0x8/0x8 [ 1394.615933][ T26] ? wake_up_process+0x10/0x20 [ 1394.621092][ T26] ? insert_work+0x28a/0x320 [ 1394.625732][ T26] schedule+0x13c/0x1d0 [ 1394.630865][ T26] schedule_timeout+0xba/0x330 [ 1394.636244][ T26] ? console_conditional_schedule+0x10/0x10 [ 1394.642325][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1394.647614][ T26] wait_for_common+0x284/0x430 [ 1394.652567][ T26] ? wait_for_completion+0x20/0x20 [ 1394.657744][ T26] wait_for_completion+0x18/0x20 [ 1394.662843][ T26] __synchronize_srcu+0x179/0x200 [ 1394.671983][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1394.677849][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1394.683578][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1394.710953][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1394.731944][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1394.749880][ T26] rcu_tasks_postscan+0x10/0x20 [ 1394.770603][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1394.770772][ C0] syz_tun: tun_net_xmit 86 [ 1394.792628][ T26] ? __kasan_check_write+0x14/0x20 [ 1394.809250][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1394.829480][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1394.862951][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1394.885437][ T26] ? finish_wait+0x1ac/0x1c0 [ 1394.894421][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1394.904860][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1394.915129][ T26] ? io_schedule+0xe0/0xe0 [ 1394.923967][ T26] ? __kasan_check_read+0x11/0x20 [ 1394.945838][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1394.956296][ T26] kthread+0x324/0x3b0 [ 1394.964749][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1394.975145][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1394.985209][ T26] ret_from_fork+0x1f/0x30 [ 1394.994558][ T26] NMI backtrace for cpu 0 [ 1394.998930][ T26] CPU: 0 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1395.007505][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1395.017555][ T26] Call Trace: [ 1395.020846][ T26] __dump_stack+0x21/0x24 [ 1395.025169][ T26] dump_stack_lvl+0x1a7/0x208 [ 1395.029837][ T26] ? show_regs_print_info+0x18/0x18 [ 1395.035025][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1395.040647][ T26] ? sched_show_task+0x31c/0x480 [ 1395.045581][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1395.050514][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1395.056575][ T26] dump_stack+0x15/0x1c [ 1395.060726][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1395.066701][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1395.072673][ T26] watchdog+0xe14/0xf60 [ 1395.076841][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1395.081874][ T26] ? __kasan_check_read+0x11/0x20 [ 1395.086900][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1395.091820][ T26] kthread+0x324/0x3b0 [ 1395.095868][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1395.100876][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1395.105465][ T26] ret_from_fork+0x1f/0x30 [ 1395.110064][ T26] Sending NMI from CPU 0 to CPUs 1: [ 1395.115394][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0x12/0x20 [ 1395.139980][ T5091] device veth1_to_bond entered promiscuous mode [ 1398.807413][ T5215] tap0: tun_chr_ioctl cmd 1074025673 [ 1402.762429][ T5392] device veth0_vlan left promiscuous mode [ 1402.858671][ T5392] device veth0_vlan entered promiscuous mode [ 1403.099007][T25750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1403.119999][T25750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1403.173576][T25750] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 1405.007462][ T5467] device lo left promiscuous mode [ 1405.816159][ T5523] device syzkaller0 entered promiscuous mode [ 1408.308965][ T5704] @0: renamed from bond_slave_1 [ 1408.458922][ T5709] device syzkaller0 entered promiscuous mode [ 1409.996482][ T5770] tun0: tun_chr_ioctl cmd 1074025675 [ 1410.007811][ T5770] tun0: persist enabled [ 1414.971902][ T6048] IPv6: pim6reg1: Disabled Multicast RS [ 1415.652094][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 186 seconds. [ 1415.690924][ T26] Tainted: G W syzkaller #0 [ 1415.697283][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1415.794396][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1415.810703][ T26] Call Trace: [ 1415.820876][ T26] __schedule+0xc03/0x13e0 [ 1415.825635][ T26] ? __sched_text_start+0x8/0x8 [ 1415.843919][ T26] ? wake_up_process+0x10/0x20 [ 1415.858853][ T26] ? insert_work+0x28a/0x320 [ 1415.866933][ T26] schedule+0x13c/0x1d0 [ 1415.878698][ T26] schedule_timeout+0xba/0x330 [ 1415.891743][ T26] ? console_conditional_schedule+0x10/0x10 [ 1415.907837][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1415.921661][ T26] wait_for_common+0x284/0x430 [ 1415.932978][ T26] ? wait_for_completion+0x20/0x20 [ 1415.943558][ T26] wait_for_completion+0x18/0x20 [ 1415.963061][ T26] __synchronize_srcu+0x179/0x200 [ 1415.980085][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1415.997962][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1416.015433][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1416.030366][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1416.049132][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1416.070749][ T26] rcu_tasks_postscan+0x10/0x20 [ 1416.085421][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1416.100752][ T26] ? __kasan_check_write+0x14/0x20 [ 1416.117825][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1416.135291][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1416.154830][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1416.168363][ T26] ? finish_wait+0x1ac/0x1c0 [ 1416.178631][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1416.189065][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1416.199466][ T26] ? io_schedule+0xe0/0xe0 [ 1416.209359][ T26] ? __kasan_check_read+0x11/0x20 [ 1416.219885][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1416.230424][ T26] kthread+0x324/0x3b0 [ 1416.238978][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1416.249311][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1416.258308][ T26] ret_from_fork+0x1f/0x30 [ 1416.268442][ T26] NMI backtrace for cpu 0 [ 1416.272856][ T26] CPU: 0 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1416.281429][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1416.291472][ T26] Call Trace: [ 1416.294755][ T26] __dump_stack+0x21/0x24 [ 1416.299073][ T26] dump_stack_lvl+0x1a7/0x208 [ 1416.303741][ T26] ? show_regs_print_info+0x18/0x18 [ 1416.308935][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1416.314556][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1416.319493][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1416.325547][ T26] dump_stack+0x15/0x1c [ 1416.329700][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1416.335678][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1416.341567][ T26] watchdog+0xe14/0xf60 [ 1416.345890][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1416.350938][ T26] ? __kasan_check_read+0x11/0x20 [ 1416.355958][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1416.360891][ T26] kthread+0x324/0x3b0 [ 1416.364953][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1416.369973][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1416.374565][ T26] ret_from_fork+0x1f/0x30 [ 1416.379072][ T26] Sending NMI from CPU 0 to CPUs 1: [ 1416.384961][ C1] NMI backtrace for cpu 1 [ 1416.384967][ C1] CPU: 1 PID: 6067 Comm: syz.5.16535 Tainted: G W syzkaller #0 [ 1416.384974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1416.384978][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x10/0x80 [ 1416.384989][ C1] Code: 18 4a 89 44 01 20 48 ff c2 48 89 11 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 48 8b 45 08 65 48 8b 0d a0 b4 9d 7e <65> 8b 15 a5 b4 9d 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 [ 1416.384993][ C1] RSP: 0018:ffffc90000170b68 EFLAGS: 00000046 [ 1416.385000][ C1] RAX: ffffffff81558237 RBX: ffff888116845958 RCX: ffff888113201400 [ 1416.385005][ C1] RDX: 0000000080010000 RSI: 0000000000002710 RDI: 00000149c672a15e [ 1416.385011][ C1] RBP: ffffc90000170b68 R08: ffffc900001709f7 R09: ffffc900001709e0 [ 1416.385016][ C1] R10: dffffc0000000000 R11: fffff5200002e13f R12: 0000000000002710 [ 1416.385021][ C1] R13: 00000149c672a15e R14: 00000149c6727a4e R15: 7fffffffffffffff [ 1416.385026][ C1] FS: 00007f1c3ccfd6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1416.385030][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1416.385035][ C1] CR2: 000020000018c5ff CR3: 00000001176e8000 CR4: 00000000003506a0 [ 1416.385041][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1416.385046][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1416.385049][ C1] Call Trace: [ 1416.385051][ C1] [ 1416.385054][ C1] hrtimer_forward+0x117/0x290 [ 1416.385058][ C1] perf_swevent_hrtimer+0x485/0x570 [ 1416.385062][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1416.385066][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1416.385070][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1416.385073][ C1] __hrtimer_run_queues+0x33a/0x7d0 [ 1416.385077][ C1] ? hrtimer_interrupt+0xc80/0xc80 [ 1416.385081][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 1416.385085][ C1] hrtimer_interrupt+0x313/0xc80 [ 1416.385089][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 1416.385092][ C1] asm_call_irq_on_stack+0xf/0x20 [ 1416.385095][ C1] [ 1416.385099][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 1416.385103][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1416.385107][ C1] RIP: 0010:prep_new_page+0x168/0x190 [ 1416.385118][ C1] Code: 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 42 ff ff ff 4c 89 ef e8 3d 7b 03 00 e9 35 ff ff ff <48> 89 df 44 89 fe 8b 55 d4 e8 1a 15 08 00 45 85 ff 0f 85 76 ff ff [ 1416.385122][ C1] RSP: 0018:ffffc90000b27118 EFLAGS: 00000256 [ 1416.385129][ C1] RAX: ffff888113201400 RBX: ffffea0004e15580 RCX: 0000000000000000 [ 1416.385134][ C1] RDX: 0000000000000200 RSI: 0000000000000001 RDI: 00000000ffffffff [ 1416.385139][ C1] RBP: ffffc90000b27150 R08: ffffea0004e155b7 R09: ffffed10270aac00 [ 1416.385144][ C1] R10: dffffc0000000000 R11: fffff940009c2ab7 R12: 0000000000000001 [ 1416.385149][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1416.385152][ C1] ? prep_new_page+0xeb/0x190 [ 1416.385156][ C1] get_page_from_freelist+0x225f/0x23f0 [ 1416.385160][ C1] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1416.385164][ C1] ? __alloc_pages_nodemask+0x640/0x640 [ 1416.385168][ C1] __alloc_pages_nodemask+0x29a/0x640 [ 1416.385171][ C1] ? irq_exit_rcu+0x9/0x10 [ 1416.385175][ C1] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1416.385179][ C1] shmem_alloc_page+0x1fd/0x380 [ 1416.385182][ C1] ? put_page+0xd0/0xd0 [ 1416.385186][ C1] ? shmem_alloc_and_acct_page+0x3c2/0x840 [ 1416.385189][ C1] ? shmem_alloc_page+0xd/0x380 [ 1416.385193][ C1] shmem_alloc_and_acct_page+0x3d3/0x840 [ 1416.385197][ C1] ? shmem_swapin_page+0x16f0/0x16f0 [ 1416.385200][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 1416.385203][ C1] ? sched_clock+0x3a/0x40 [ 1416.385207][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 1416.385210][ C1] ? __irq_exit_rcu+0x40/0x150 [ 1416.385214][ C1] ? irq_exit_rcu+0x9/0x10 [ 1416.385218][ C1] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1416.385222][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1416.385225][ C1] ? shmem_getpage_gfp+0x5d9/0x20f0 [ 1416.385229][ C1] shmem_getpage_gfp+0x785/0x20f0 [ 1416.385238][ C1] shmem_write_begin+0xce/0x1b0 [ 1416.385242][ C1] generic_perform_write+0x2ce/0x540 [ 1416.385246][ C1] ? grab_cache_page_write_begin+0xb0/0xb0 [ 1416.385249][ C1] ? file_remove_privs+0x590/0x590 [ 1416.385253][ C1] __generic_file_write_iter+0x24b/0x480 [ 1416.385257][ C1] ? generic_write_checks+0x3bf/0x480 [ 1416.385261][ C1] generic_file_write_iter+0xa9/0x1d0 [ 1416.385264][ C1] vfs_write+0x770/0xd70 [ 1416.385267][ C1] ? kernel_write+0x3c0/0x3c0 [ 1416.385271][ C1] ? mutex_trylock+0xb0/0xb0 [ 1416.385274][ C1] ? __fdget_pos+0x2d2/0x380 [ 1416.385278][ C1] ? ksys_write+0x70/0x260 [ 1416.385281][ C1] ksys_write+0x14a/0x260 [ 1416.385284][ C1] ? __ia32_sys_read+0x90/0x90 [ 1416.385287][ C1] ? __kasan_check_read+0x11/0x20 [ 1416.385289][ C1] __x64_sys_write+0x7b/0x90 [ 1416.385292][ C1] do_syscall_64+0x31/0x40 [ 1416.385295][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1416.385297][ C1] RIP: 0033:0x7f1c3e2a5b19 [ 1416.385306][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.385309][ C1] RSP: 002b:00007f1c3ccfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1416.385316][ C1] RAX: ffffffffffffffda RBX: 00007f1c3e52bfa0 RCX: 00007f1c3e2a5b19 [ 1416.385320][ C1] RDX: 0000000013bb711e RSI: 0000200000000600 RDI: 000000000000000b [ 1416.385324][ C1] RBP: 00007f1c3e33db70 R08: 0000000000000000 R09: 0000000000000000 [ 1416.385327][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.385332][ C1] R13: 00007f1c3e52c038 R14: 00007f1c3e52bfa0 R15: 00007ffdf8271278 [ 1419.042875][ T6131] geneve1: tun_chr_ioctl cmd 1074025694 [ 1420.444085][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.451195][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.459134][ T6151] device bridge_slave_0 entered promiscuous mode [ 1420.601344][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.608421][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.635255][ T6151] device bridge_slave_1 entered promiscuous mode [ 1421.333456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1421.341530][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1421.359381][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1421.368388][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1421.442386][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.449470][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.478162][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1421.495250][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1421.512197][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.519286][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.528492][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1421.536652][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1421.544656][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1421.552743][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1421.572284][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1421.580258][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1421.588729][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1421.760189][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1421.768494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1421.797706][ T6151] device veth0_vlan entered promiscuous mode [ 1421.930388][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1421.955934][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1422.116712][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1422.127680][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1422.176622][ T6151] device veth1_macvtap entered promiscuous mode [ 1422.431399][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1422.860834][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1422.869294][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1422.891064][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1422.899384][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1423.353632][ T6206] device syzkaller0 entered promiscuous mode [ 1423.387629][ T6213] bridge0: port 3(veth1_vlan) entered blocking state [ 1423.398730][ T6213] bridge0: port 3(veth1_vlan) entered disabled state [ 1423.421136][ T6213] device veth1_vlan entered promiscuous mode [ 1423.427245][ T6213] bridge0: port 3(veth1_vlan) entered blocking state [ 1423.433958][ T6213] bridge0: port 3(veth1_vlan) entered forwarding state [ 1424.317509][ T7] nr0: port 1(macsec0) entered disabled state [ 1424.779388][ T6279] device syzkaller0 entered promiscuous mode [ 1425.797738][ T6313] device syzkaller0 entered promiscuous mode [ 1426.065399][ T6321] device syzkaller0 entered promiscuous mode [ 1429.897416][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.914655][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.931333][ T6473] device bridge_slave_0 entered promiscuous mode [ 1429.948176][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.966443][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.984279][ T6473] device bridge_slave_1 entered promiscuous mode [ 1430.683545][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1430.701249][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1430.744846][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1430.778730][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1430.801299][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.808392][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.836009][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1430.866529][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1430.881262][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.888332][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.091290][ T6529] device wg2 entered promiscuous mode [ 1431.097457][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1431.120999][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1431.141963][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1431.169003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1431.189837][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1431.220864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1431.244380][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1431.267431][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1431.289817][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1431.316095][ T6473] device veth0_vlan entered promiscuous mode [ 1431.341919][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1431.351232][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1431.429588][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1431.444889][ T6473] device veth1_macvtap entered promiscuous mode [ 1431.486925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1431.509829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1431.540103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1431.556481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1432.781428][ T6591] : renamed from team_slave_1 [ 1436.831269][ T6777] device xfrm0 entered promiscuous mode [ 1437.323078][ T6778] device bridge0 entered promiscuous mode [ 1437.415649][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 208 seconds. [ 1437.443147][ T26] Tainted: G W syzkaller #0 [ 1437.462903][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.494202][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1437.513142][ T26] Call Trace: [ 1437.519771][ T26] __schedule+0xc03/0x13e0 [ 1437.529742][ T26] ? __sched_text_start+0x8/0x8 [ 1437.546078][ T26] ? wake_up_process+0x10/0x20 [ 1437.555238][ T26] ? insert_work+0x28a/0x320 [ 1437.565234][ T26] schedule+0x13c/0x1d0 [ 1437.573723][ T26] schedule_timeout+0xba/0x330 [ 1437.583902][ T26] ? console_conditional_schedule+0x10/0x10 [ 1437.595204][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1437.603451][ T26] wait_for_common+0x284/0x430 [ 1437.608232][ T26] ? wait_for_completion+0x20/0x20 [ 1437.613613][ T26] wait_for_completion+0x18/0x20 [ 1437.618546][ T26] __synchronize_srcu+0x179/0x200 [ 1437.623606][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1437.629380][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1437.634846][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1437.640012][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1437.645587][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1437.650508][ T26] rcu_tasks_postscan+0x10/0x20 [ 1437.655702][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1437.660739][ T26] ? __kasan_check_write+0x14/0x20 [ 1437.665843][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1437.671377][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1437.677783][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1437.683805][ T26] ? finish_wait+0x1ac/0x1c0 [ 1437.688387][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1437.693487][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1437.698380][ T26] ? io_schedule+0xe0/0xe0 [ 1437.702935][ T26] ? __kasan_check_read+0x11/0x20 [ 1437.707951][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1437.713072][ T26] kthread+0x324/0x3b0 [ 1437.717133][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1437.722188][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1437.726828][ T26] ret_from_fork+0x1f/0x30 [ 1437.731634][ T26] NMI backtrace for cpu 1 [ 1437.735966][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1437.744532][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1437.754576][ T26] Call Trace: [ 1437.757871][ T26] __dump_stack+0x21/0x24 [ 1437.762183][ T26] dump_stack_lvl+0x1a7/0x208 [ 1437.766845][ T26] ? show_regs_print_info+0x18/0x18 [ 1437.772028][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1437.777651][ T26] ? sched_show_task+0x31c/0x480 [ 1437.782570][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1437.787492][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1437.793539][ T26] dump_stack+0x15/0x1c [ 1437.797683][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1437.803647][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1437.809523][ T26] watchdog+0xe14/0xf60 [ 1437.813671][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1437.818682][ T26] ? __kasan_check_read+0x11/0x20 [ 1437.823697][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1437.828622][ T26] kthread+0x324/0x3b0 [ 1437.832677][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1437.837685][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1437.842264][ T26] ret_from_fork+0x1f/0x30 [ 1437.846838][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1437.852319][ C0] NMI backtrace for cpu 0 [ 1437.852326][ C0] CPU: 0 PID: 6473 Comm: syz-executor Tainted: G W syzkaller #0 [ 1437.852333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1437.852337][ C0] RIP: 0010:_raw_spin_lock_irqsave+0xcf/0x130 [ 1437.852348][ C0] Code: 00 00 00 48 89 df be 04 00 00 00 e8 0b 40 1c fd 4c 89 ff be 04 00 00 00 e8 fe 3f 1c fd 8b 44 24 20 b9 01 00 00 00 f0 0f b1 0b <75> 41 43 c6 44 2c 04 f8 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 1437.852352][ C0] RSP: 0018:ffffc90000f47b00 EFLAGS: 00000046 [ 1437.852360][ C0] RAX: 0000000000000000 RBX: ffff888115c79920 RCX: 0000000000000001 [ 1437.852365][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000f47b20 [ 1437.852370][ C0] RBP: ffffc90000f47bc0 R08: 0000000000000003 R09: 0000000000000004 [ 1437.852375][ C0] R10: dffffc0000000000 R11: fffff520001e8f64 R12: 1ffff920001e8f60 [ 1437.852380][ C0] R13: dffffc0000000000 R14: 0000000000000a06 R15: ffffc90000f47b20 [ 1437.852386][ C0] FS: 000055558e3e8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1437.852391][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1437.852397][ C0] CR2: 00007f1c3ccdbff8 CR3: 000000012318e000 CR4: 00000000003506b0 [ 1437.852402][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1437.852407][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1437.852410][ C0] Call Trace: [ 1437.852414][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 1437.852417][ C0] ? hrtimer_start_range_ns+0x994/0xa90 [ 1437.852421][ C0] ? hrtimer_try_to_cancel+0x1ef/0x330 [ 1437.852425][ C0] add_wait_queue+0x3e/0x150 [ 1437.852428][ C0] do_wait+0xf4/0x6a0 [ 1437.852431][ C0] kernel_wait4+0x1d1/0x2b0 [ 1437.852435][ C0] ? __ia32_sys_waitid+0xd0/0xd0 [ 1437.852438][ C0] ? hrtimer_nanosleep+0x2e8/0x400 [ 1437.852442][ C0] ? kernel_waitid+0x3d0/0x3d0 [ 1437.852446][ C0] ? enqueue_hrtimer+0x1e0/0x1e0 [ 1437.852449][ C0] __x64_sys_wait4+0x163/0x230 [ 1437.852453][ C0] ? kernel_wait+0x1c0/0x1c0 [ 1437.852456][ C0] ? __kasan_check_read+0x11/0x20 [ 1437.852460][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 1437.852463][ C0] do_syscall_64+0x31/0x40 [ 1437.852467][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1437.852471][ C0] RIP: 0033:0x7fd450563c97 [ 1437.852481][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1437.852486][ C0] RSP: 002b:00007ffff7250270 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1437.852494][ C0] RAX: ffffffffffffffda RBX: 000055558e3e8500 RCX: 00007fd450563c97 [ 1437.852499][ C0] RDX: 0000000040000001 RSI: 00007ffff72502fc RDI: ffffffffffffffff [ 1437.852504][ C0] RBP: 00007ffff72502fc R08: 0000000000000000 R09: 0000000000000000 [ 1437.852510][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1437.852514][ C0] R13: 00000000000927c0 R14: 000000000015eee5 R15: 00007ffff7250350 [ 1443.350920][ T7025] geneve1: tun_chr_ioctl cmd 1074025675 [ 1443.380762][ T7025] geneve1: persist disabled [ 1443.724257][ T7066] nr0: port 1(macsec0) entered blocking state [ 1443.768252][ T7066] nr0: port 1(macsec0) entered disabled state [ 1443.801247][ T7066] device macsec0 entered promiscuous mode [ 1444.024744][ T7103] device veth1_to_bond left promiscuous mode [ 1444.228000][ T7122] device syzkaller0 entered promiscuous mode [ 1444.393086][ T7124] device syzkaller0 entered promiscuous mode [ 1444.494744][ T7066] nr0: port 1(macsec0) entered blocking state [ 1444.500889][ T7066] nr0: port 1(macsec0) entered forwarding state [ 1446.504941][ T7242] device syzkaller0 entered promiscuous mode [ 1448.498611][ T7321] geneve0: tun_chr_ioctl cmd 2147767517 [ 1448.601039][ T7321] 2: renamed from team_slave_1 [ 1452.002002][ T7522] device wg2 left promiscuous mode [ 1454.144531][ T7614] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1456.103976][ T7680] device sit0 entered promiscuous mode [ 1457.898968][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 228 seconds. [ 1457.929167][ T26] Tainted: G W syzkaller #0 [ 1457.955806][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1457.964654][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1457.974112][ T26] Call Trace: [ 1457.977647][ T26] __schedule+0xc03/0x13e0 [ 1457.983766][ T26] ? __sched_text_start+0x8/0x8 [ 1457.988710][ T26] ? wake_up_process+0x10/0x20 [ 1457.993539][ T26] ? insert_work+0x28a/0x320 [ 1457.998176][ T26] schedule+0x13c/0x1d0 [ 1458.002454][ T26] schedule_timeout+0xba/0x330 [ 1458.007274][ T26] ? console_conditional_schedule+0x10/0x10 [ 1458.013277][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1458.018426][ T26] wait_for_common+0x284/0x430 [ 1458.023278][ T26] ? wait_for_completion+0x20/0x20 [ 1458.028484][ T26] wait_for_completion+0x18/0x20 [ 1458.033620][ T26] __synchronize_srcu+0x179/0x200 [ 1458.038713][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1458.044709][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1458.050248][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1458.056297][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1458.062050][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1458.066957][ T26] rcu_tasks_postscan+0x10/0x20 [ 1458.076171][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1458.084424][ T26] ? __kasan_check_write+0x14/0x20 [ 1458.090260][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1458.098276][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1458.150869][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1458.156751][ T26] ? finish_wait+0x1ac/0x1c0 [ 1458.161556][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1458.166501][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1458.171577][ T26] ? io_schedule+0xe0/0xe0 [ 1458.176001][ T26] ? __kasan_check_read+0x11/0x20 [ 1458.181201][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1458.194189][ T26] kthread+0x324/0x3b0 [ 1458.198298][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1458.203522][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1458.208111][ T26] ret_from_fork+0x1f/0x30 [ 1458.212948][ T26] NMI backtrace for cpu 1 [ 1458.217314][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1458.225884][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1458.235931][ T26] Call Trace: [ 1458.239219][ T26] __dump_stack+0x21/0x24 [ 1458.243534][ T26] dump_stack_lvl+0x1a7/0x208 [ 1458.248198][ T26] ? show_regs_print_info+0x18/0x18 [ 1458.253390][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1458.259013][ T26] ? sched_show_task+0x31c/0x480 [ 1458.263942][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1458.268871][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1458.274922][ T26] dump_stack+0x15/0x1c [ 1458.279069][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1458.285036][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1458.290931][ T26] watchdog+0xe14/0xf60 [ 1458.295085][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1458.300101][ T26] ? __kasan_check_read+0x11/0x20 [ 1458.305117][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1458.310057][ T26] kthread+0x324/0x3b0 [ 1458.314131][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1458.319159][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1458.323752][ T26] ret_from_fork+0x1f/0x30 [ 1458.328372][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1458.334389][ C0] NMI backtrace for cpu 0 [ 1458.334396][ C0] CPU: 0 PID: 7769 Comm: syz.0.16925 Tainted: G W syzkaller #0 [ 1458.334402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1458.334413][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1458.334424][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <0f> 1f 44 00 00 eb d6 89 f6 31 d2 e8 f7 07 2b 01 5d c3 0f 1f 44 00 [ 1458.334429][ C0] RSP: 0018:ffffc90000007e30 EFLAGS: 00000046 [ 1458.334437][ C0] RAX: 000000000000003e RBX: 000000000000003e RCX: 0000000000000838 [ 1458.334443][ C0] RDX: 0000000000000000 RSI: 000000000000003e RDI: 0000000000000838 [ 1458.334448][ C0] RBP: ffffc90000007e30 R08: ffff8881152e5000 R09: 0000000000000002 [ 1458.334454][ C0] R10: 0000000000000003 R11: 0000000080010000 R12: ffff8881f7026ea8 [ 1458.334459][ C0] R13: ffff8881f7026e88 R14: ffffffff85bf5998 R15: dffffc0000000000 [ 1458.334465][ C0] FS: 00007fe6023386c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1458.334470][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1458.334475][ C0] CR2: 0000000100000000 CR3: 000000014854a000 CR4: 00000000003506b0 [ 1458.334478][ C0] Call Trace: [ 1458.334480][ C0] [ 1458.334484][ C0] lapic_next_event+0x5f/0x70 [ 1458.334488][ C0] clockevents_program_event+0x1e9/0x8e0 [ 1458.334492][ C0] tick_program_event+0xa3/0x120 [ 1458.334495][ C0] hrtimer_interrupt+0x368/0xc80 [ 1458.334499][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 1458.334503][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1458.334506][ C0] [ 1458.334510][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 1458.334514][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1458.334519][ C0] RIP: 0010:unwind_next_frame+0x381/0x670 [ 1458.334529][ C0] Code: d0 49 be 00 00 00 00 00 fc ff df 4c 8d 6b 28 74 0d 4c 89 e7 e8 00 03 00 00 48 89 c1 eb 1a 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 <74> 08 4c 89 e7 e8 35 0a 70 00 49 8b 0c 24 48 89 df 48 89 4d d0 48 [ 1458.334533][ C0] RSP: 0018:ffffc900016f6d48 EFLAGS: 00000246 [ 1458.334541][ C0] RAX: 1ffff920002dee46 RBX: ffffc900016f6da8 RCX: 0000000000000000 [ 1458.334546][ C0] RDX: dffffc0000000000 RSI: ffffffff81904405 RDI: ffffc900016f7f48 [ 1458.334551][ C0] RBP: ffffc900016f6d98 R08: ffffc900016f6e70 R09: ffffc900016f6e68 [ 1458.334556][ C0] R10: 0000000000000006 R11: fffff520002dedc1 R12: ffffc900016f7230 [ 1458.334561][ C0] R13: ffffc900016f6dd0 R14: dffffc0000000000 R15: 0000000000000000 [ 1458.334565][ C0] ? kvfree+0x35/0x40 [ 1458.334568][ C0] ? unwind_next_frame+0x39e/0x670 [ 1458.334572][ C0] ? stack_trace_save+0xf0/0xf0 [ 1458.334575][ C0] arch_stack_walk+0x108/0x140 [ 1458.334579][ C0] ? kvfree+0x35/0x40 [ 1458.334582][ C0] stack_trace_save+0xa6/0xf0 [ 1458.334586][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1458.334589][ C0] ? memset+0x35/0x40 [ 1458.334592][ C0] kasan_set_track+0x4a/0x70 [ 1458.334596][ C0] ? kasan_set_track+0x4a/0x70 [ 1458.334599][ C0] ? kasan_set_free_info+0x23/0x40 [ 1458.334603][ C0] ? ____kasan_slab_free+0x125/0x160 [ 1458.334606][ C0] ? __kasan_slab_free+0x11/0x20 [ 1458.334610][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 1458.334613][ C0] ? kfree+0xc0/0x270 [ 1458.334615][ C0] ? kvfree+0x35/0x40 [ 1458.334618][ C0] ? kfree+0xc0/0x270 [ 1458.334621][ C0] kasan_set_free_info+0x23/0x40 [ 1458.334623][ C0] ____kasan_slab_free+0x125/0x160 [ 1458.334626][ C0] __kasan_slab_free+0x11/0x20 [ 1458.334629][ C0] slab_free_freelist_hook+0xc5/0x190 [ 1458.334632][ C0] ? kvfree+0x35/0x40 [ 1458.334634][ C0] kfree+0xc0/0x270 [ 1458.334636][ C0] kvfree+0x35/0x40 [ 1458.334639][ C0] __vunmap+0x8e1/0x980 [ 1458.334641][ C0] vfree+0x61/0x90 [ 1458.334644][ C0] bpf_prog_calc_tag+0x5eb/0x720 [ 1458.334647][ C0] ? __bpf_prog_free+0xe0/0xe0 [ 1458.334650][ C0] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1458.334652][ C0] resolve_pseudo_ldimm64+0xcc/0x10b0 [ 1458.334655][ C0] ? irq_exit_rcu+0x9/0x10 [ 1458.334658][ C0] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1458.334660][ C0] ? bpf_check+0xdcd0/0xdcd0 [ 1458.334663][ C0] bpf_check+0x91f3/0xdcd0 [ 1458.334666][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1458.334668][ C0] ? irq_exit_rcu+0x9/0x10 [ 1458.334671][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1458.334674][ C0] ? bpf_get_btf_vmlinux+0x70/0x70 [ 1458.334677][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1458.334679][ C0] ? __irq_exit_rcu+0x40/0x150 [ 1458.334682][ C0] ? irq_exit_rcu+0x9/0x10 [ 1458.334685][ C0] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1458.334688][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1458.334691][ C0] ? __stack_depot_save+0x1bb/0x4c0 [ 1458.334694][ C0] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1458.334697][ C0] ? sched_clock+0x3a/0x40 [ 1458.334700][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1458.334702][ C0] ? sched_clock+0x3a/0x40 [ 1458.334705][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1458.334708][ C0] ? sched_clock+0x3a/0x40 [ 1458.334710][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1458.334713][ C0] ? __irq_exit_rcu+0x40/0x150 [ 1458.334716][ C0] ? irq_exit_rcu+0x9/0x10 [ 1458.334719][ C0] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1458.334722][ C0] ? bpf_prog_load+0xfe6/0x14e0 [ 1458.334724][ C0] bpf_prog_load+0x1004/0x14e0 [ 1458.334727][ C0] ? map_freeze+0x330/0x330 [ 1458.334730][ C0] ? __irq_exit_rcu+0x40/0x150 [ 1458.334733][ C0] __se_sys_bpf+0x49a/0x740 [ 1458.334735][ C0] ? __x64_sys_bpf+0x90/0x90 [ 1458.334738][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1458.334741][ C0] __x64_sys_bpf+0x7b/0x90 [ 1458.334744][ C0] do_syscall_64+0x31/0x40 [ 1458.334747][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1458.334749][ C0] RIP: 0033:0x7fe6038e0b19 [ 1458.334758][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.334761][ C0] RSP: 002b:00007fe602338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1458.334768][ C0] RAX: ffffffffffffffda RBX: 00007fe603b66fa0 RCX: 00007fe6038e0b19 [ 1458.334772][ C0] RDX: 0000000000000094 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 1458.334776][ C0] RBP: 00007fe603978b70 R08: 0000000000000000 R09: 0000000000000000 [ 1458.334780][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.334784][ C0] R13: 00007fe603b67038 R14: 00007fe603b66fa0 R15: 00007ffff9c0e5e8 [ 1461.697886][ T7805] device sit0 left promiscuous mode [ 1461.874344][ T7806] device sit0 entered promiscuous mode [ 1463.710049][ T7848] : renamed from bond_slave_0 [ 1466.452783][ T7922] geneve0: tun_chr_ioctl cmd 35108 [ 1472.564124][ T8254] device syzkaller0 entered promiscuous mode [ 1475.552928][ T8365] device syzkaller0 entered promiscuous mode [ 1477.359709][ T8446] device syzkaller0 entered promiscuous mode [ 1477.712875][ T8450] device wg2 entered promiscuous mode [ 1478.002293][ T8463] geneve0: tun_chr_ioctl cmd 1074812118 [ 1479.013765][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 249 seconds. [ 1479.052709][ T26] Tainted: G W syzkaller #0 [ 1479.065556][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.127083][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1479.136398][ T26] Call Trace: [ 1479.139690][ T26] __schedule+0xc03/0x13e0 [ 1479.144162][ T26] ? __sched_text_start+0x8/0x8 [ 1479.149058][ T26] ? wake_up_process+0x10/0x20 [ 1479.154022][ T26] ? insert_work+0x28a/0x320 [ 1479.159526][ T26] schedule+0x13c/0x1d0 [ 1479.163885][ T26] schedule_timeout+0xba/0x330 [ 1479.168648][ T26] ? console_conditional_schedule+0x10/0x10 [ 1479.187753][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1479.215026][ T26] wait_for_common+0x284/0x430 [ 1479.219823][ T26] ? wait_for_completion+0x20/0x20 [ 1479.245375][ T26] wait_for_completion+0x18/0x20 [ 1479.250344][ T26] __synchronize_srcu+0x179/0x200 [ 1479.265948][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1479.286081][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1479.296166][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1479.301324][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1479.317084][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1479.321996][ T26] rcu_tasks_postscan+0x10/0x20 [ 1479.326887][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1479.332381][ T26] ? __kasan_check_write+0x14/0x20 [ 1479.337492][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1479.343150][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1479.349559][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1479.355551][ T26] ? finish_wait+0x1ac/0x1c0 [ 1479.360135][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1479.365200][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1479.370074][ T26] ? io_schedule+0xe0/0xe0 [ 1479.374632][ T26] ? __kasan_check_read+0x11/0x20 [ 1479.379646][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1479.384736][ T26] kthread+0x324/0x3b0 [ 1479.388793][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1479.393755][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1479.398376][ T26] ret_from_fork+0x1f/0x30 [ 1479.403093][ T26] NMI backtrace for cpu 1 [ 1479.407421][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1479.416000][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1479.426042][ T26] Call Trace: [ 1479.429326][ T26] __dump_stack+0x21/0x24 [ 1479.433640][ T26] dump_stack_lvl+0x1a7/0x208 [ 1479.438303][ T26] ? show_regs_print_info+0x18/0x18 [ 1479.443496][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1479.449112][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1479.454040][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1479.460095][ T26] dump_stack+0x15/0x1c [ 1479.464243][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1479.470214][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1479.476100][ T26] watchdog+0xe14/0xf60 [ 1479.480250][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1479.485263][ T26] ? __kasan_check_read+0x11/0x20 [ 1479.490270][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1479.495196][ T26] kthread+0x324/0x3b0 [ 1479.499251][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1479.504262][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1479.508839][ T26] ret_from_fork+0x1f/0x30 [ 1479.513410][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1479.518813][ C0] NMI backtrace for cpu 0 [ 1479.518819][ C0] CPU: 0 PID: 20203 Comm: kworker/0:94 Tainted: G W syzkaller #0 [ 1479.518826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1479.518830][ C0] Workqueue: rcu_gp process_srcu [ 1479.518836][ C0] RIP: 0010:delay_tsc+0x74/0xc0 [ 1479.518847][ C0] Code: 00 e8 50 91 e6 fe 65 8b 05 55 2d a4 7d 85 c0 74 1d f3 90 bf 01 00 00 00 e8 89 8f e6 fe e8 34 9d 1f 02 41 39 c6 75 0e 0f 01 f9 <66> 90 eb bc e8 27 2d a2 fe eb dc 4c 29 e3 e8 19 9d 1f 02 41 89 c6 [ 1479.518851][ C0] RSP: 0018:ffffc900019d7b80 EFLAGS: 00000246 [ 1479.518859][ C0] RAX: 000000009bb58a9a RBX: 0000000000002af9 RCX: 0000000000000000 [ 1479.518865][ C0] RDX: 00000000000002f7 RSI: ffffffff85406dc0 RDI: ffffffff85406d80 [ 1479.518870][ C0] RBP: ffffc900019d7ba0 R08: ffffc900019d7bc7 R09: 1ffff9200033af78 [ 1479.518875][ C0] R10: dffffc0000000000 R11: fffff5200033af79 R12: 0000000000000480 [ 1479.518880][ C0] R13: 0000000000009015 R14: 0000000000000000 R15: 000002f79bb5858c [ 1479.518886][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1479.518890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1479.518895][ C0] CR2: 00007f8aa5ecef88 CR3: 000000012b9c7000 CR4: 00000000003506b0 [ 1479.518900][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1479.518905][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1479.518908][ C0] Call Trace: [ 1479.518911][ C0] __const_udelay+0x61/0x70 [ 1479.518915][ C0] try_check_zero+0x2dc/0x350 [ 1479.518918][ C0] process_srcu+0x1bd/0xca0 [ 1479.518922][ C0] ? __kasan_check_read+0x11/0x20 [ 1479.518925][ C0] ? read_word_at_a_time+0x12/0x20 [ 1479.518929][ C0] ? strscpy+0x9b/0x290 [ 1479.518932][ C0] process_one_work+0x6fd/0xbc0 [ 1479.518936][ C0] worker_thread+0xa8e/0x13c0 [ 1479.518939][ C0] kthread+0x324/0x3b0 [ 1479.518943][ C0] ? worker_clr_flags+0x190/0x190 [ 1479.518947][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1479.518950][ C0] ret_from_fork+0x1f/0x30 [ 1481.367963][ T8608] : renamed from bond_slave_1 [ 1482.920842][ T8678] device lo entered promiscuous mode [ 1482.929635][ T8688] geneve1: tun_chr_ioctl cmd 1074025678 [ 1482.950681][ T8688] geneve1: group set to 0 [ 1484.168920][ T8765] device macsec0 entered promiscuous mode [ 1484.570505][ T8787] device sit0 left promiscuous mode [ 1484.728923][ T8790] device sit0 entered promiscuous mode [ 1485.282141][ T8824] Q6`Ҙ: renamed from lo [ 1486.280827][ T8850] device veth0_vlan left promiscuous mode [ 1486.287261][ T8850] device veth0_vlan entered promiscuous mode [ 1488.488081][ T8908] device sit0 entered promiscuous mode [ 1489.339856][ T8938] : renamed from bond_slave_0 [ 1492.700797][ T9053] device sit0 left promiscuous mode [ 1493.910508][ T9123] device wg2 left promiscuous mode [ 1495.069329][ T9171] device veth1 entered promiscuous mode [ 1495.490013][ T9185] device syzkaller0 entered promiscuous mode [ 1497.229838][ T9236] device syzkaller0 entered promiscuous mode [ 1499.461118][ T9300] device lo left promiscuous mode [ 1500.131132][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 270 seconds. [ 1500.139056][ T26] Tainted: G W syzkaller #0 [ 1500.343427][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1500.376880][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1500.435148][ T26] Call Trace: [ 1500.459782][ T26] __schedule+0xc03/0x13e0 [ 1500.464430][ T26] ? __sched_text_start+0x8/0x8 [ 1500.469292][ T26] ? wake_up_process+0x10/0x20 [ 1500.484255][ T26] ? insert_work+0x28a/0x320 [ 1500.488884][ T26] schedule+0x13c/0x1d0 [ 1500.500661][ T26] schedule_timeout+0xba/0x330 [ 1500.505578][ T26] ? console_conditional_schedule+0x10/0x10 [ 1500.511612][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1500.516748][ T26] wait_for_common+0x284/0x430 [ 1500.521589][ T26] ? wait_for_completion+0x20/0x20 [ 1500.526806][ T26] wait_for_completion+0x18/0x20 [ 1500.531871][ T26] __synchronize_srcu+0x179/0x200 [ 1500.536913][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1500.542725][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1500.548209][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1500.553436][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1500.559004][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1500.563952][ T26] rcu_tasks_postscan+0x10/0x20 [ 1500.568830][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1500.573814][ T26] ? __kasan_check_write+0x14/0x20 [ 1500.579003][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1500.584525][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1500.591057][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1500.596885][ T26] ? finish_wait+0x1ac/0x1c0 [ 1500.601564][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1500.606528][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1500.611429][ T26] ? io_schedule+0xe0/0xe0 [ 1500.615930][ T26] ? __kasan_check_read+0x11/0x20 [ 1500.620991][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1500.626019][ T26] kthread+0x324/0x3b0 [ 1500.630110][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1500.635014][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1500.639681][ T26] ret_from_fork+0x1f/0x30 [ 1500.708746][ T26] NMI backtrace for cpu 1 [ 1500.713237][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1500.721809][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1500.731854][ T26] Call Trace: [ 1500.735145][ T26] __dump_stack+0x21/0x24 [ 1500.739461][ T26] dump_stack_lvl+0x1a7/0x208 [ 1500.744126][ T26] ? show_regs_print_info+0x18/0x18 [ 1500.749311][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1500.754925][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1500.759840][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1500.765883][ T26] dump_stack+0x15/0x1c [ 1500.770017][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1500.775975][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1500.781847][ T26] watchdog+0xe14/0xf60 [ 1500.785987][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1500.790990][ T26] ? __kasan_check_read+0x11/0x20 [ 1500.795993][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1500.800906][ T26] kthread+0x324/0x3b0 [ 1500.804955][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1500.809957][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1500.814527][ T26] ret_from_fork+0x1f/0x30 [ 1500.819044][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1500.825204][ C0] NMI backtrace for cpu 0 [ 1500.825211][ C0] CPU: 0 PID: 9284 Comm: syz.5.17281 Tainted: G W syzkaller #0 [ 1500.825217][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1500.825221][ C0] RIP: 0010:rb_erase+0x9bc/0xec0 [ 1500.825232][ C0] Code: fa 04 00 00 4c 8b 75 d0 e9 30 fb ff ff 49 bf 00 00 00 00 00 fc ff df 43 80 3c 3e 00 74 08 48 89 df e8 18 3a 44 ff 4c 8b 75 d0 <4c> 89 33 4d 85 f6 74 1e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 [ 1500.825236][ C0] RSP: 0018:ffffc900010b6c98 EFLAGS: 00000046 [ 1500.825244][ C0] RAX: 1ffff11024f67206 RBX: ffff888127b39030 RCX: dffffc0000000000 [ 1500.825249][ C0] RDX: 0000000000000800 RSI: ffff888127b39030 RDI: ffff888119bf8098 [ 1500.825254][ C0] RBP: ffffc900010b6ce8 R08: ffff888127b39080 R09: ffff88810dfa6498 [ 1500.825259][ C0] R10: dffffc0000000000 R11: ffffed1021bf4c95 R12: 0000000000000001 [ 1500.825264][ C0] R13: 0000000000000000 R14: ffff88810dfa6490 R15: dffffc0000000000 [ 1500.825269][ C0] FS: 00007f1c3ccfd6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1500.825273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1500.825278][ C0] CR2: 00007fd44efdeff8 CR3: 0000000154b6a000 CR4: 00000000003506b0 [ 1500.825283][ C0] DR0: 0000200000003180 DR1: 00002000000002c0 DR2: 0000000000000000 [ 1500.825288][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1500.825291][ C0] Call Trace: [ 1500.825294][ C0] set_next_entity+0xa4/0x5d0 [ 1500.825298][ C0] pick_next_task_fair+0x6b2/0xa50 [ 1500.825302][ C0] ? __update_idle_core+0x280/0x280 [ 1500.825305][ C0] ? task_rq_lock+0x2d0/0x2d0 [ 1500.825309][ C0] __schedule+0x4fc/0x13e0 [ 1500.825312][ C0] ? __sched_text_start+0x8/0x8 [ 1500.825316][ C0] preempt_schedule_irq+0xaa/0x120 [ 1500.825319][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1500.825323][ C0] ? __irq_exit_rcu+0x40/0x150 [ 1500.825326][ C0] irqentry_exit+0x56/0x60 [ 1500.825330][ C0] sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1500.825334][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1500.825338][ C0] RIP: 0010:memset_erms+0x9/0x10 [ 1500.825349][ C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 1500.825354][ C0] RSP: 0018:ffffc900010b70b0 EFLAGS: 00010202 [ 1500.825361][ C0] RAX: 0000000000002400 RBX: 0000000000000200 RCX: 0000000000000180 [ 1500.825366][ C0] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffc900010b7160 [ 1500.825371][ C0] RBP: ffffc900010b70d0 R08: ffffc900010b72df R09: ffffc900010b70e0 [ 1500.825376][ C0] R10: dffffc0000000000 R11: fffff52000216e5c R12: 0000000000000001 [ 1500.825382][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900010b70e0 [ 1500.825385][ C0] ? memset+0x35/0x40 [ 1500.825388][ C0] kasan_set_track+0x3b/0x70 [ 1500.825391][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1500.825395][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1500.825399][ C0] ? sched_clock+0x3a/0x40 [ 1500.825402][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1500.825405][ C0] ? sched_clock+0x3a/0x40 [ 1500.825409][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1500.825413][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1500.825416][ C0] ? kmem_cache_free+0x100/0x2d0 [ 1500.825420][ C0] kasan_set_free_info+0x23/0x40 [ 1500.825423][ C0] ____kasan_slab_free+0x125/0x160 [ 1500.825427][ C0] __kasan_slab_free+0x11/0x20 [ 1500.825431][ C0] slab_free_freelist_hook+0xc5/0x190 [ 1500.825434][ C0] ? kernfs_put+0x315/0x480 [ 1500.825438][ C0] kmem_cache_free+0x100/0x2d0 [ 1500.825441][ C0] kernfs_put+0x315/0x480 [ 1500.825444][ C0] kernfs_remove_by_name_ns+0xea/0x160 [ 1500.825446][ C0] sysfs_remove_group+0x108/0x290 [ 1500.825449][ C0] sysfs_remove_groups+0x56/0xb0 [ 1500.825452][ C0] device_remove_attrs+0x113/0x130 [ 1500.825455][ C0] device_del+0x626/0xe60 [ 1500.825458][ C0] ? __kasan_check_write+0x14/0x20 [ 1500.825460][ C0] ? kill_device+0xd0/0xd0 [ 1500.825463][ C0] ? __kasan_check_write+0x14/0x20 [ 1500.825466][ C0] ? pm_runtime_set_memalloc_noio+0x20d/0x260 [ 1500.825469][ C0] netdev_unregister_kobject+0x179/0x260 [ 1500.825472][ C0] unregister_netdevice_many+0x14c6/0x19f0 [ 1500.825475][ C0] ? alloc_netdev_mqs+0xca0/0xca0 [ 1500.825479][ C0] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1500.825482][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1500.825485][ C0] ? ip_tunnel_delete_nets+0x2e1/0x390 [ 1500.825488][ C0] ip_tunnel_delete_nets+0x343/0x390 [ 1500.825491][ C0] ? ip_tunnel_bind_dev+0x750/0x750 [ 1500.825494][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1500.825497][ C0] ipgre_exit_batch_net+0x22/0x30 [ 1500.825499][ C0] ? ipgre_init_net+0x30/0x30 [ 1500.825502][ C0] setup_net+0x735/0xae0 [ 1500.825505][ C0] ? copy_net_ns+0x520/0x520 [ 1500.825507][ C0] ? __kasan_check_write+0x14/0x20 [ 1500.825510][ C0] copy_net_ns+0x314/0x520 [ 1500.825513][ C0] create_new_namespaces+0x3a8/0x650 [ 1500.825516][ C0] copy_namespaces+0x1cc/0x220 [ 1500.825519][ C0] copy_process+0x13b7/0x3320 [ 1500.825521][ C0] ? __pidfd_prepare+0x150/0x150 [ 1500.825524][ C0] ? sched_clock+0x3a/0x40 [ 1500.825527][ C0] kernel_clone+0x233/0x950 [ 1500.825529][ C0] ? irq_exit_rcu+0x9/0x10 [ 1500.825532][ C0] ? create_io_thread+0x170/0x170 [ 1500.825535][ C0] __x64_sys_clone+0x198/0x210 [ 1500.825538][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 1500.825541][ C0] ? switch_fpu_return+0x19c/0x330 [ 1500.825543][ C0] ? __kasan_check_read+0x11/0x20 [ 1500.825546][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 1500.825549][ C0] do_syscall_64+0x31/0x40 [ 1500.825552][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1500.825555][ C0] RIP: 0033:0x7f1c3e2a5b19 [ 1500.825563][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.825567][ C0] RSP: 002b:00007f1c3ccfcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1500.825574][ C0] RAX: ffffffffffffffda RBX: 00007f1c3e52bfa0 RCX: 00007f1c3e2a5b19 [ 1500.825578][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 1500.825581][ C0] RBP: 00007f1c3e33db70 R08: 0000000000000000 R09: 0000000000000000 [ 1500.825585][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1500.825589][ C0] R13: 00007f1c3e52c038 R14: 00007f1c3e52bfa0 R15: 00007ffdf8271278 [ 1503.206955][ T9391] device syzkaller0 entered promiscuous mode [ 1505.879204][ T9436] -: renamed from syzkaller0 [ 1506.079295][ T9463] tap0: tun_chr_ioctl cmd 1074025692 [ 1508.282426][ T9594] device syzkaller0 entered promiscuous mode [ 1512.379025][ T9711] device syzkaller0 entered promiscuous mode [ 1512.387971][ T9715] device lo entered promiscuous mode [ 1512.394502][ T9714] device lo left promiscuous mode [ 1513.671055][ T9745] bridge0: port 4(ip6gretap0) entered blocking state [ 1513.698201][ T9745] bridge0: port 4(ip6gretap0) entered disabled state [ 1513.749170][ T9745] device ip6gretap0 entered promiscuous mode [ 1513.770900][ T9745] bridge0: port 4(ip6gretap0) entered blocking state [ 1513.777640][ T9745] bridge0: port 4(ip6gretap0) entered forwarding state [ 1516.598824][ T9849] cgroup: fork rejected by pids controller in /syz6 [ 1517.258196][ T9895] device syzkaller0 entered promiscuous mode [ 1517.732718][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.742372][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.749832][ T9901] device bridge_slave_0 entered promiscuous mode [ 1517.782860][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.794225][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.821332][ T9901] device bridge_slave_1 entered promiscuous mode [ 1518.189288][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.196384][ T9901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.203681][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.210722][ T9901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.404179][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.454794][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.833121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.843886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.866301][ T9932] device syzkaller0 entered promiscuous mode [ 1518.899408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1518.936683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1518.951119][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.958199][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.070935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.098864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.167699][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.174806][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.194843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1519.203296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.211916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1519.220464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1519.288619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1519.297170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.468263][ T9901] device veth0_vlan entered promiscuous mode [ 1519.481365][ T9901] device veth1_macvtap entered promiscuous mode [ 1519.495864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1519.511697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1519.525225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1519.541606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1519.559864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1519.592890][ T9983] device syzkaller0 entered promiscuous mode [ 1519.604373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1519.612356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1519.620086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1519.628703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1519.637765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1519.646928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1519.908029][T10008] device syzkaller0 entered promiscuous mode [ 1520.442833][T10049] device syzkaller0 entered promiscuous mode [ 1521.757076][T10116] device lo entered promiscuous mode [ 1521.891336][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 292 seconds. [ 1521.901572][ T26] Tainted: G W syzkaller #0 [ 1521.907917][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1521.998817][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1522.070697][ T26] Call Trace: [ 1522.090784][ T26] __schedule+0xc03/0x13e0 [ 1522.126393][ T26] ? __sched_text_start+0x8/0x8 [ 1522.157890][ T26] ? wake_up_process+0x10/0x20 [ 1522.199158][ T26] ? insert_work+0x28a/0x320 [ 1522.220664][ T26] schedule+0x13c/0x1d0 [ 1522.229905][ T26] schedule_timeout+0xba/0x330 [ 1522.240010][ T26] ? console_conditional_schedule+0x10/0x10 [ 1522.270354][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1522.285461][ T26] wait_for_common+0x284/0x430 [ 1522.302128][ T26] ? wait_for_completion+0x20/0x20 [ 1522.313914][ T26] wait_for_completion+0x18/0x20 [ 1522.324301][ T26] __synchronize_srcu+0x179/0x200 [ 1522.342356][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1522.359427][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1522.370521][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1522.382606][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1522.396391][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1522.407102][ T26] rcu_tasks_postscan+0x10/0x20 [ 1522.417495][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1522.428016][ T26] ? __kasan_check_write+0x14/0x20 [ 1522.438635][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1522.450024][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1522.464335][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1522.475672][ T26] ? finish_wait+0x1ac/0x1c0 [ 1522.485807][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1522.503316][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1522.514745][ T26] ? io_schedule+0xe0/0xe0 [ 1522.523563][ T26] ? __kasan_check_read+0x11/0x20 [ 1522.535176][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1522.545583][ T26] kthread+0x324/0x3b0 [ 1522.554064][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1522.564384][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1522.573088][ T26] ret_from_fork+0x1f/0x30 [ 1522.583131][ T26] NMI backtrace for cpu 1 [ 1522.587493][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1522.596067][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1522.606114][ T26] Call Trace: [ 1522.609400][ T26] __dump_stack+0x21/0x24 [ 1522.613720][ T26] dump_stack_lvl+0x1a7/0x208 [ 1522.618386][ T26] ? show_regs_print_info+0x18/0x18 [ 1522.623576][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1522.629633][ T26] dump_stack+0x15/0x1c [ 1522.633782][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1522.639758][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1522.645644][ T26] watchdog+0xe14/0xf60 [ 1522.649797][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1522.654818][ T26] ? __kasan_check_read+0x11/0x20 [ 1522.659829][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1522.664756][ T26] kthread+0x324/0x3b0 [ 1522.668811][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1522.673822][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1522.678400][ T26] ret_from_fork+0x1f/0x30 [ 1522.682916][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1522.688750][ C0] NMI backtrace for cpu 0 [ 1522.688758][ C0] CPU: 0 PID: 10085 Comm: syz.1.17479 Tainted: G W syzkaller #0 [ 1522.688764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1522.688768][ C0] RIP: 0010:update_stack_state+0x365/0x490 [ 1522.688779][ C0] Code: 00 00 48 8b 45 d0 4c 8d 70 38 4c 89 f0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 74 08 4c 89 f7 e8 7b 04 70 00 <48> 8b 45 a0 49 89 06 49 89 c6 48 8b 45 a8 42 80 3c 28 00 48 8b 45 [ 1522.688784][ C0] RSP: 0018:ffffc90000d06f08 EFLAGS: 00000246 [ 1522.688792][ C0] RAX: 1ffff920001a0e0c RBX: ffffc90000d07030 RCX: ffffc90000d07501 [ 1522.688797][ C0] RDX: ffffc90000d07510 RSI: 1ffff920001a0e06 RDI: ffffc90000d07080 [ 1522.688803][ C0] RBP: ffffc90000d06fb8 R08: ffffc90000d070f0 R09: ffffc90000d070e8 [ 1522.688808][ C0] R10: 0000000000000006 R11: fffff520001a0e11 R12: 1ffff920001a0e0d [ 1522.688813][ C0] R13: dffffc0000000000 R14: ffffc90000d07060 R15: ffffc90000d08000 [ 1522.688818][ C0] FS: 00007f8aa5ecf6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1522.688823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1522.688828][ C0] CR2: 00007ffe80b9c0c8 CR3: 0000000123eee000 CR4: 00000000003506b0 [ 1522.688834][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1522.688839][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1522.688842][ C0] Call Trace: [ 1522.688846][ C0] unwind_next_frame+0x39e/0x670 [ 1522.688850][ C0] ? stack_trace_save+0xf0/0xf0 [ 1522.688853][ C0] arch_stack_walk+0x108/0x140 [ 1522.688858][ C0] ? free_verifier_state+0xe9/0x250 [ 1522.688861][ C0] stack_trace_save+0xa6/0xf0 [ 1522.688865][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1522.688868][ C0] ? memset+0x35/0x40 [ 1522.688872][ C0] kasan_set_track+0x4a/0x70 [ 1522.688876][ C0] ? kasan_set_track+0x4a/0x70 [ 1522.688880][ C0] ? kasan_set_free_info+0x23/0x40 [ 1522.688883][ C0] ? ____kasan_slab_free+0x125/0x160 [ 1522.688887][ C0] ? __kasan_slab_free+0x11/0x20 [ 1522.688891][ C0] ? slab_free_freelist_hook+0xc5/0x190 [ 1522.688894][ C0] ? kfree+0xc0/0x270 [ 1522.688898][ C0] ? free_verifier_state+0xe9/0x250 [ 1522.688901][ C0] ? kfree+0xc0/0x270 [ 1522.688905][ C0] kasan_set_free_info+0x23/0x40 [ 1522.688909][ C0] ____kasan_slab_free+0x125/0x160 [ 1522.688912][ C0] __kasan_slab_free+0x11/0x20 [ 1522.688916][ C0] slab_free_freelist_hook+0xc5/0x190 [ 1522.688920][ C0] ? free_verifier_state+0xe9/0x250 [ 1522.688923][ C0] kfree+0xc0/0x270 [ 1522.688927][ C0] free_verifier_state+0xe9/0x250 [ 1522.688937][ C0] do_check_common+0xa5c/0x1190 [ 1522.688940][ C0] bpf_check+0x97e4/0xdcd0 [ 1522.688944][ C0] ? update_stack_state+0xc1/0x490 [ 1522.688948][ C0] ? bpf_get_btf_vmlinux+0x70/0x70 [ 1522.688951][ C0] ? 0xffffffffa00102e8 [ 1522.688955][ C0] ? is_bpf_text_address+0x177/0x190 [ 1522.688959][ C0] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1522.688963][ C0] ? __kernel_text_address+0xa0/0x100 [ 1522.688967][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1522.688971][ C0] ? stack_trace_save+0xf0/0xf0 [ 1522.688974][ C0] ? arch_stack_walk+0xee/0x140 [ 1522.688978][ C0] ? stack_trace_save+0xa6/0xf0 [ 1522.688982][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1522.688986][ C0] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1522.688989][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1522.688993][ C0] ? sched_clock+0x3a/0x40 [ 1522.688997][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1522.689000][ C0] ? sched_clock+0x3a/0x40 [ 1522.689004][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 1522.689007][ C0] ? __irq_exit_rcu+0x40/0x150 [ 1522.689011][ C0] ? irq_exit_rcu+0x9/0x10 [ 1522.689015][ C0] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 1522.689019][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1522.689023][ C0] ? ktime_get_with_offset+0x82/0x1e0 [ 1522.689026][ C0] ? memset+0x35/0x40 [ 1522.689030][ C0] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1522.689034][ C0] bpf_prog_load+0x1004/0x14e0 [ 1522.689037][ C0] ? map_freeze+0x330/0x330 [ 1522.689040][ C0] ? selinux_bpf+0xc7/0xf0 [ 1522.689043][ C0] ? security_bpf+0x82/0xa0 [ 1522.689047][ C0] __se_sys_bpf+0x49a/0x740 [ 1522.689050][ C0] ? __x64_sys_bpf+0x90/0x90 [ 1522.689054][ C0] ? __kasan_check_read+0x11/0x20 [ 1522.689057][ C0] __x64_sys_bpf+0x7b/0x90 [ 1522.689060][ C0] do_syscall_64+0x31/0x40 [ 1522.689064][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1522.689068][ C0] RIP: 0033:0x7f8aa7477b19 [ 1522.689079][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.689083][ C0] RSP: 002b:00007f8aa5ecf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1522.689092][ C0] RAX: ffffffffffffffda RBX: 00007f8aa76fdfa0 RCX: 00007f8aa7477b19 [ 1522.689097][ C0] RDX: 0000000000000027 RSI: 0000200000000500 RDI: 0000000000000005 [ 1522.689101][ C0] RBP: 00007f8aa750fb70 R08: 0000000000000000 R09: 0000000000000000 [ 1522.689105][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.689109][ C0] R13: 00007f8aa76fe038 R14: 00007f8aa76fdfa0 R15: 00007ffe80b9bd68 [ 1523.217283][T10148] tap0: tun_chr_ioctl cmd 2147767520 [ 1523.348405][T10176] device syzkaller0 entered promiscuous mode [ 1524.222174][T10232] device syzkaller0 entered promiscuous mode [ 1526.191368][T10316] device sit0 left promiscuous mode [ 1526.810702][T10321] device sit0 entered promiscuous mode [ 1531.002622][T10445] tun0: tun_chr_ioctl cmd 1074025677 [ 1531.028464][T10445] tun0: linktype set to 776 [ 1532.115026][T10479] device syzkaller0 entered promiscuous mode [ 1532.490879][T10495] tap0: tun_chr_ioctl cmd 1074025692 [ 1532.822979][T10519] nr0: port 1(macsec0) entered blocking state [ 1532.840557][T10519] nr0: port 1(macsec0) entered disabled state [ 1532.860411][T10519] device macsec0 entered promiscuous mode [ 1532.870990][T10519] nr0: port 1(macsec0) entered blocking state [ 1532.877096][T10519] nr0: port 1(macsec0) entered forwarding state [ 1534.426362][T10567] device sit0 entered promiscuous mode [ 1535.757209][T10627] device sit0 entered promiscuous mode [ 1536.649055][T10652] bridge0: port 4(ip6gretap0) entered disabled state [ 1536.655856][T10652] bridge0: port 3(veth1_vlan) entered disabled state [ 1536.662778][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.669912][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.768295][T10653] device ip6gretap0 left promiscuous mode [ 1536.780801][T10653] bridge0: port 4(ip6gretap0) entered disabled state [ 1536.815724][T10653] device veth1_vlan left promiscuous mode [ 1536.825174][T10653] bridge0: port 3(veth1_vlan) entered disabled state [ 1536.856672][T10653] device bridge_slave_1 left promiscuous mode [ 1536.870776][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.903794][T10653] device bridge_slave_0 left promiscuous mode [ 1536.935771][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.976336][T10660] tun0: tun_chr_ioctl cmd 1074025677 [ 1536.981709][T10660] tun0: linktype set to 825 [ 1537.370778][T10707] bridge0: port 3(ip6gretap0) entered disabled state [ 1537.381025][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.402971][T10707] device bridge0 left promiscuous mode [ 1537.607346][T10710] device ip6gretap0 left promiscuous mode [ 1537.633504][T10710] bridge0: port 3(ip6gretap0) entered disabled state [ 1537.680861][T10710] device bridge_slave_1 left promiscuous mode [ 1537.687072][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.714285][T10710] device bridge_slave_0 left promiscuous mode [ 1537.741918][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.297814][T10820] 2: renamed from team_slave_1 [ 1540.298080][T10934] device sit0 left promiscuous mode [ 1540.741294][T10950] device syzkaller0 entered promiscuous mode [ 1541.170696][T10958] device sit0 left promiscuous mode [ 1543.655384][ T26] INFO: task rcu_tasks_kthre:10 blocked for more than 314 seconds. [ 1543.711812][ T26] Tainted: G W syzkaller #0 [ 1543.725811][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1543.741072][ T26] task:rcu_tasks_kthre state:D stack: 0 pid: 10 ppid: 2 flags:0x00004000 [ 1543.757957][ T26] Call Trace: [ 1543.764589][ T26] __schedule+0xc03/0x13e0 [ 1543.772283][ T26] ? __sched_text_start+0x8/0x8 [ 1543.780790][ T26] ? wake_up_process+0x10/0x20 [ 1543.790764][ T26] ? insert_work+0x28a/0x320 [ 1543.800753][ T26] schedule+0x13c/0x1d0 [ 1543.809288][ T26] schedule_timeout+0xba/0x330 [ 1543.819643][ T26] ? console_conditional_schedule+0x10/0x10 [ 1543.831122][ T26] ? __prepare_to_swait+0xa8/0x130 [ 1543.841760][ T26] wait_for_common+0x284/0x430 [ 1543.852026][ T26] ? wait_for_completion+0x20/0x20 [ 1543.862648][ T26] wait_for_completion+0x18/0x20 [ 1543.894145][ T26] __synchronize_srcu+0x179/0x200 [ 1543.904633][ T26] ? synchronize_srcu_expedited+0x20/0x20 [ 1543.910765][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1543.916389][ T26] ? rcu_test_sync_prims+0x10/0x10 [ 1543.921747][ T26] ? ktime_get_mono_fast_ns+0x182/0x1b0 [ 1543.927407][ T26] synchronize_srcu+0x1cb/0x1e0 [ 1543.932501][ T26] rcu_tasks_postscan+0x10/0x20 [ 1543.937572][ T26] rcu_tasks_wait_gp+0x3a3/0x860 [ 1543.942754][ T26] ? __kasan_check_write+0x14/0x20 [ 1543.948810][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1543.954465][ T26] ? trace_raw_output_rcu_stall_warning+0xb0/0xb0 [ 1543.961066][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1543.966892][ T26] ? finish_wait+0x1ac/0x1c0 [ 1543.971784][ T26] rcu_tasks_kthread+0x294/0x5c0 [ 1543.976787][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1543.981955][ T26] ? io_schedule+0xe0/0xe0 [ 1543.986410][ T26] ? __kasan_check_read+0x11/0x20 [ 1544.010640][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1544.015621][ T26] kthread+0x324/0x3b0 [ 1544.019730][ T26] ? rcu_tasks_postgp+0x10/0x10 [ 1544.034904][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1544.039520][ T26] ret_from_fork+0x1f/0x30 [ 1544.097667][ T26] NMI backtrace for cpu 1 [ 1544.102093][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 1544.110781][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1544.120833][ T26] Call Trace: [ 1544.124126][ T26] __dump_stack+0x21/0x24 [ 1544.128449][ T26] dump_stack_lvl+0x1a7/0x208 [ 1544.133123][ T26] ? show_regs_print_info+0x18/0x18 [ 1544.138314][ T26] ? rcu_read_unlock_special+0x177/0x430 [ 1544.143962][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 1544.148905][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1544.154974][ T26] dump_stack+0x15/0x1c [ 1544.159130][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 1544.165142][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1544.171717][ T26] watchdog+0xe14/0xf60 [ 1544.175856][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1544.180862][ T26] ? __kasan_check_read+0x11/0x20 [ 1544.185861][ T26] ? __kthread_parkme+0xb3/0x1b0 [ 1544.190779][ T26] kthread+0x324/0x3b0 [ 1544.194827][ T26] ? hungtask_pm_notify+0x50/0x50 [ 1544.199833][ T26] ? kthread_blkcg+0xd0/0xd0 [ 1544.204401][ T26] ret_from_fork+0x1f/0x30 [ 1544.208893][ T26] Sending NMI from CPU 1 to CPUs 0: [ 1544.214346][ C0] NMI backtrace for cpu 0 [ 1544.214353][ C0] CPU: 0 PID: 20232 Comm: kworker/0:105 Tainted: G W syzkaller #0 [ 1544.214360][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1544.214364][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 1544.214371][ C0] RIP: 0010:enqueue_task_fair+0x0/0x2250 [ 1544.214382][ C0] Code: e0 85 c3 86 80 e1 07 80 c1 03 38 d1 0f 8c a0 fc ff ff 89 c3 48 c7 c7 e0 85 c3 86 e8 3a 40 58 00 89 d8 e9 8b fc ff ff 0f 1f 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 [ 1544.214387][ C0] RSP: 0018:ffffc90001a4fb38 EFLAGS: 00000046 [ 1544.214394][ C0] RAX: 1ffffffff0b7e589 RBX: 1ffff92000349f74 RCX: dffffc0000000000 [ 1544.214399][ C0] RDX: 0000000000000009 RSI: ffff88811495e400 RDI: ffff8881f7056000 [ 1544.214403][ C0] RBP: ffffc90001a4fc68 R08: ffffffff864fc117 R09: 1ffffffff0c9f822 [ 1544.214408][ C0] R10: dffffc0000000000 R11: fffffbfff0c9f823 R12: ffff8881f7056000 [ 1544.214413][ C0] R13: dffffc0000000000 R14: ffffffff85bf2c48 R15: ffff88811495e400 [ 1544.214418][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1544.214422][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1544.214427][ C0] CR2: 0000000000000000 CR3: 000000011d30f000 CR4: 00000000003506b0 [ 1544.214432][ C0] DR0: 0000000000000000 DR1: 0000200000000880 DR2: 0000000000000000 [ 1544.214437][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1544.214440][ C0] Call Trace: [ 1544.214443][ C0] ? enqueue_task+0x176/0x1050 [ 1544.214446][ C0] ? activate_task+0xa0/0xa0 [ 1544.214450][ C0] ? update_irq_load_avg+0x10c/0x360 [ 1544.214453][ C0] ? update_rq_clock+0x225/0x670 [ 1544.214456][ C0] ? task_rq_lock+0x2d0/0x2d0 [ 1544.214460][ C0] ttwu_do_activate+0x1b2/0x2a0 [ 1544.214463][ C0] try_to_wake_up+0x4a9/0xdf0 [ 1544.214467][ C0] wake_up_process+0x10/0x20 [ 1544.214470][ C0] process_one_work+0x640/0xbc0 [ 1544.214473][ C0] worker_thread+0xa8e/0x13c0 [ 1544.214477][ C0] kthread+0x324/0x3b0 [ 1544.214480][ C0] ? worker_clr_flags+0x190/0x190 [ 1544.214484][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1544.214487][ C0] ret_from_fork+0x1f/0x30 [ 1545.406294][T11101] lo: mtu less than device minimum [ 1545.830688][T11111] device sit0 left promiscuous mode [ 1545.957727][T11111] device sit0 entered promiscuous mode [ 1548.274541][T11268] device syzkaller0 entered promiscuous mode [ 1548.592625][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.609673][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.747040][T11294] device bridge_slave_1 left promiscuous mode [ 1548.761390][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.772607][T11294] device bridge_slave_0 left promiscuous mode [ 1548.778757][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.021134][T11305] device syzkaller0 entered promiscuous mode [ 1550.748688][T11348] device syzkaller0 entered promiscuous mode [ 1551.008770][T11374] syz_tun: tun_net_xmit 1514 [ 1551.013500][T11374] syz_tun: tun_net_xmit 1514 [ 1551.018111][T11374] syz_tun: tun_net_xmit 636 [ 1551.138351][T11374] syz_tun: tun_net_xmit 1514 [ 1551.143082][T11374] syz_tun: tun_net_xmit 1514 [ 1551.147703][T11374] syz_tun: tun_net_xmit 636 [ 1551.202291][T11374] syz_tun: tun_net_xmit 1514 [ 1551.206970][T11374] syz_tun: tun_net_xmit 1514 [ 1551.211605][T11374] syz_tun: tun_net_xmit 636 [ 1551.261170][T11374] syz_tun: tun_net_xmit 1514 [ 1551.265859][T11374] syz_tun: tun_net_xmit 1514 [ 1551.270496][T11374] syz_tun: tun_net_xmit 636 [ 1551.347936][T11374] syz_tun: tun_net_xmit 1514 [ 1551.352639][T11374] syz_tun: tun_net_xmit 1514 [ 1551.357288][T11374] syz_tun: tun_net_xmit 636 [ 1551.418547][T11374] syz_tun: tun_net_xmit 1514 [ 1551.423242][T11374] syz_tun: tun_net_xmit 1514 [ 1551.427891][T11374] syz_tun: tun_net_xmit 636 [ 1551.477871][T11374] syz_tun: tun_net_xmit 1514 [ 1551.482568][T11374] syz_tun: tun_net_xmit 1514 [ 1551.487220][T11374] syz_tun: tun_net_xmit 636 [ 1551.541970][T11374] syz_tun: tun_net_xmit 1514 [ 1551.546651][T11374] syz_tun: tun_net_xmit 1514 [ 1551.551303][T11374] syz_tun: tun_net_xmit 636 [ 1551.645231][T11374] syz_tun: tun_net_xmit 1514 [ 1551.649890][T11374] syz_tun: tun_net_xmit 1514 [ 1551.654525][T11374] syz_tun: tun_net_xmit 636 [ 1551.741075][T11374] syz_tun: tun_net_xmit 1514 [ 1551.745719][T11374] syz_tun: tun_net_xmit 1514 [ 1551.750323][T11374] syz_tun: tun_net_xmit 636 [ 1551.844186][T11374] syz_tun: tun_net_xmit 1514 [ 1551.848840][T11374] syz_tun: tun_net_xmit 1514 [ 1551.853480][T11374] syz_tun: tun_net_xmit 636 [ 1551.859734][T11374] syz_tun: tun_net_xmit 1514 [ 1551.864384][T11374] syz_tun: tun_net_xmit 1514 [ 1551.868997][T11374] syz_tun: tun_net_xmit 636 [ 1555.109178][T11537] tun0: tun_chr_ioctl cmd 1074025677 [ 1555.121548][T11537] tun0: linktype set to 825 [ 1555.126136][T11543] tun0: tun_chr_ioctl cmd 1074025673 [ 1555.210787][T11544] tun0: tun_chr_ioctl cmd 1074025677 [ 1555.216110][T11544] tun0: linktype set to 825 [ 1556.218862][T11569] device lo entered promiscuous mode [ 1556.292080][T11569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1556.642131][T11607] device sit0 left promiscuous mode [ 1557.542015][T11661] : port 1(vlan1) entered blocking state [ 1557.570520][T11661] : port 1(vlan1) entered disabled state [ 1557.615497][T11661] device vlan1 entered promiscuous mode [ 1558.213115][T11692] device syzkaller0 entered promiscuous mode [ 1558.877826][T11731] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1558.900707][T11731] device syzkaller0 entered promiscuous mode [ 1559.281149][T11776] device wg2 left promiscuous mode [ 1559.632889][T11789] device syzkaller0 entered promiscuous mode [ 1559.910827][T11795] device syzkaller0 entered promiscuous mode [ 1560.107810][T11803] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1560.130718][T11803] syzkaller0: linktype set to 270 [ 1560.318903][T11807] device lo left promiscuous mode [ 1560.351818][T11812] Q6`Ҙ: renamed from lo [ 1564.718801][T12008] : renamed from syzkaller0 [ 1569.036278][T12157] device syzkaller0 entered promiscuous mode [ 1569.333265][T12200] device sit0 entered promiscuous mode [ 1572.918598][T12353] device syzkaller0 entered promiscuous mode [ 1574.135787][T12383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.150620][T12383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.158075][T12383] device bridge_slave_0 entered promiscuous mode [ 1574.230733][T12383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.243249][T12383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.258294][T12383] device bridge_slave_1 entered promiscuous mode [ 1574.466007][T12383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.473108][T12383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.480431][T12383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.487503][T12383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.560855][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.575257][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.773711][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1574.795708][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1574.891199][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1574.899647][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1574.916995][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.924109][T11238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.959985][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1574.980354][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1574.990346][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.997423][T11238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.025120][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1575.045506][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1575.065685][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1575.074048][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1575.155736][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1575.171992][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1575.194783][T12383] device veth0_vlan entered promiscuous mode [ 1575.205569][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1575.218624][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1575.229648][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1575.241045][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1575.255281][T12461] device veth1_macvtap left promiscuous mode [ 1575.297990][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1575.339358][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1575.357850][T12470] device veth1_macvtap entered promiscuous mode [ 1575.400688][T12469] device veth1_macvtap left promiscuous mode [ 1575.493603][T12383] device veth1_macvtap entered promiscuous mode [ 1575.645985][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1575.727962][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1575.745510][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1575.754058][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1575.762507][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1577.180494][T12528] device syzkaller0 entered promiscuous mode [ 1578.320854][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.328618][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.470965][T12642] device bridge_slave_1 left promiscuous mode [ 1578.477244][T12642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.500945][T12642] device bridge_slave_0 left promiscuous mode [ 1578.513831][T12642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.560991][T12644] device wg2 entered promiscuous mode [ 1578.775413][ T7] device veth0_vlan left promiscuous mode [ 1580.640780][T12725] tun0: tun_chr_ioctl cmd 1074025675 [ 1580.662569][T12725] tun0: persist enabled [ 1580.903276][T12720] tun0: tun_chr_ioctl cmd 1074025675 [ 1580.948074][T12720] tun0: persist disabled [ 1583.610274][T12897] lo: mtu less than device minimum [ 1583.694578][T12902] lo: mtu less than device minimum [ 1585.127126][T12995] device syzkaller0 entered promiscuous mode [ 1585.422662][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1585.444348][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1586.401497][T13041] device sit0 entered promiscuous mode [ 1588.221667][ T9] nr0: port 1(macsec0) entered disabled state [ 1593.020114][T13425] device veth1_macvtap left promiscuous mode [ 1593.057198][T13447] tap0: tun_chr_ioctl cmd 1074025673 [ 1593.162277][T13455] tun0: tun_chr_ioctl cmd 1074025675 [ 1593.167789][T13455] tun0: persist enabled [ 1593.470523][T13454] tun0: tun_chr_ioctl cmd 1074025675 [ 1593.484754][T13454] tun0: persist enabled [ 1595.066690][T13513] device syzkaller0 entered promiscuous mode [ 1596.772262][T13621] device sit0 left promiscuous mode [ 1596.792834][T13622] device sit0 entered promiscuous mode [ 1597.412895][T13736] device veth0_vlan left promiscuous mode [ 1597.600791][T13736] device veth0_vlan entered promiscuous mode [ 1598.339551][T13772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.478828][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.486583][T13772] device bridge_slave_0 entered promiscuous mode [ 1598.550987][T13772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.660668][T13772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.668224][T13772] device bridge_slave_1 entered promiscuous mode [ 1599.582688][T13772] device veth0_vlan entered promiscuous mode [ 1599.734961][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1599.816226][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1599.825141][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1599.842450][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1599.859363][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.866445][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.894640][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1600.015288][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1600.040862][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.047930][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.083934][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1600.154051][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1600.178488][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1600.196877][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1600.214054][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1600.232178][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1600.249238][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1600.320761][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1600.396819][T13772] device veth1_macvtap entered promiscuous mode [ 1600.426547][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1600.443906][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1600.482620][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1600.505203][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1600.746384][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1600.760189][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1600.772562][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1600.781056][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1605.556542][T32670] device syz_tun left promiscuous mode [ 1605.562207][T32670] : port 2(syz_tun) entered disabled state [ 1605.736324][T13931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.765832][T13931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.787953][T13931] device bridge_slave_0 entered promiscuous mode [ 1605.834176][T13938] device syzkaller0 entered promiscuous mode [ 1605.853154][T13931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.860787][T13931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.868505][T13931] device bridge_slave_1 entered promiscuous mode [ 1606.172180][T13958] device syzkaller0 entered promiscuous mode [ 1607.310901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1607.318432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1607.357905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1607.366353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1607.375067][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.382126][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.389673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1607.466680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1607.475500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1607.483831][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.490874][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.498950][ T7] device macsec0 left promiscuous mode [ 1607.504695][ T7] nr0: port 1(macsec0) entered disabled state [ 1607.528865][ T7] device veth1_macvtap left promiscuous mode [ 1607.541492][ T7] device veth0_vlan left promiscuous mode [ 1607.717523][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1607.725707][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1607.914500][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1607.978582][T13931] device veth0_vlan entered promiscuous mode [ 1608.006623][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1608.038960][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1608.059118][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1608.074174][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1608.097113][T13931] device veth1_macvtap entered promiscuous mode [ 1608.119920][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1608.182453][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1608.195658][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1608.283083][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1608.304381][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1608.957075][T14056] 0: renamed from pim6reg1 [ 1611.057345][T14170] device sit0 left promiscuous mode [ 1611.175909][T14174] device sit0 entered promiscuous mode [ 1611.259298][ T7] device macsec0 left promiscuous mode [ 1611.267790][ T7] nr0: port 1(macsec0) entered disabled state [ 1611.292855][ T7] device dummy0 left promiscuous mode [ 1611.308044][ T7] : port 1(dummy0) entered disabled state [ 1612.601441][T14236] device sit0 entered promiscuous mode [ 1612.856911][T14252] device sit0 left promiscuous mode [ 1615.323461][T14341] ref_ctr_offset mismatch. inode: 0xbec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1618.855633][T14399] device syzkaller0 entered promiscuous mode [ 1620.781040][T14481] device syzkaller0 entered promiscuous mode [ 1621.087978][T14501] device syzkaller0 entered promiscuous mode [ 1621.257429][T14505] device syzkaller0 entered promiscuous mode [ 1621.863367][T14552] device lo entered promiscuous mode [ 1622.271614][T14611] : renamed from team_slave_1 [ 1623.203698][T14659] device sit0 entered promiscuous mode [ 1624.010679][T14642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.032276][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.071105][T14642] device bridge_slave_0 entered promiscuous mode [ 1624.360706][T14642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.408480][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.426580][T14642] device bridge_slave_1 entered promiscuous mode [ 1625.300129][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1625.320346][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1625.563341][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1625.589569][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1625.616533][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.623648][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.646187][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1625.665017][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1625.678830][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.685904][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.693276][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1625.701334][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1625.709290][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1625.846014][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1625.901166][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1626.614088][T14642] device veth0_vlan entered promiscuous mode [ 1626.727452][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1626.738579][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1626.747131][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1626.756552][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1626.988529][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1626.997318][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1627.009810][T14642] device veth1_macvtap entered promiscuous mode [ 1627.120411][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1627.132180][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1627.140476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1627.161071][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1627.171456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1627.541158][T14751] tap0: tun_chr_ioctl cmd 1074025677 [ 1627.546476][T14751] tap0: linktype set to 805 [ 1628.071010][T14752] device veth1_to_bond entered promiscuous mode [ 1628.611687][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.618923][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.763296][T14790] : renamed from bond_slave_0 [ 1629.890880][T14802] tun0: tun_chr_ioctl cmd 1074025677 [ 1629.905886][T14802] tun0: linktype set to 776 [ 1629.962740][T14808] bridge0: port 3(ip6gretap0) entered blocking state [ 1629.979651][T14808] bridge0: port 3(ip6gretap0) entered disabled state [ 1629.990159][T14808] device ip6gretap0 entered promiscuous mode [ 1630.007730][T14808] bridge0: port 3(ip6gretap0) entered blocking state [ 1630.014573][T14808] bridge0: port 3(ip6gretap0) entered forwarding state [ 1637.347553][T15097] device syzkaller0 entered promiscuous mode [ 1637.592961][T15115] device syzkaller0 entered promiscuous mode [ 1637.740961][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1637.923191][T15140] device syzkaller0 entered promiscuous mode [ 1638.496722][T15172] device syzkaller0 entered promiscuous mode [ 1640.830213][T15201] device syzkaller0 entered promiscuous mode [ 1641.691924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1641.700478][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1641.731072][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1644.028050][T15319] device syzkaller0 entered promiscuous mode [ 1644.065348][T15327] device veth0_to_bond entered promiscuous mode [ 1645.681195][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1645.699844][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1645.712855][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1645.789755][T15368] device syzkaller0 entered promiscuous mode [ 1646.453446][T15393] device wg2 entered promiscuous mode [ 1646.723460][T15421] device sit0 entered promiscuous mode [ 1648.006132][T15474] -1A2~: renamed from syzkaller0 [ 1648.921044][T15493] IPv6: : Disabled Multicast RS [ 1650.101418][T15544] syzkaller0: mtu less than device minimum [ 1650.482907][T15565] device syzkaller0 entered promiscuous mode [ 1650.760728][T15570] device wg2 entered promiscuous mode [ 1651.679489][T15602] device lo left promiscuous mode [ 1651.817663][T15603] Q6`Ҙ: renamed from lo [ 1653.005291][T15650] device syzkaller0 entered promiscuous mode [ 1653.284520][T15681] tun0: tun_chr_ioctl cmd 2147767511 [ 1655.722629][T15756] device syzkaller0 entered promiscuous mode [ 1656.090722][T15792] device sit0 left promiscuous mode [ 1657.256515][T15862] device syzkaller0 entered promiscuous mode [ 1657.683356][T15914] device syzkaller0 entered promiscuous mode [ 1657.816316][T15912] device sit0 left promiscuous mode [ 1657.832805][T15916] device sit0 entered promiscuous mode [ 1658.750438][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.863387][T16043] ------------[ cut here ]------------ [ 1659.900932][T16043] kernel BUG at kernel/bpf/arraymap.c:993! [ 1659.962809][T16043] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1659.968927][T16043] CPU: 1 PID: 16043 Comm: syz.6.18858 Tainted: G W syzkaller #0 [ 1659.977850][T16043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1659.987934][T16043] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 1659.994168][T16043] Code: 51 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 18 51 e9 ff 0f 0b e9 78 f9 ff ff e8 0c 51 e9 ff 0f 0b e8 05 51 e9 ff <0f> 0b e8 fe 50 e9 ff 0f 0b e8 f7 50 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 1660.013771][T16043] RSP: 0018:ffffc900014b7c90 EFLAGS: 00010293 [ 1660.019853][T16043] RAX: ffffffff817b65bb RBX: ffff88811922d690 RCX: ffff88811183bc00 [ 1660.027908][T16043] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 1660.035876][T16043] RBP: ffffc900014b7d08 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 1660.043845][T16043] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 1660.051814][T16043] R13: ffff88810c02ca80 R14: 0000000000000001 R15: ffffffffa0002a00 [ 1660.059781][T16043] FS: 00007f97776d26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1660.068715][T16043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1660.075291][T16043] CR2: 00007f7128753ff8 CR3: 00000001229ef000 CR4: 00000000003506a0 [ 1660.083262][T16043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1660.091230][T16043] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1660.099195][T16043] Call Trace: [ 1660.102488][T16043] ? bpf_prog_178c55262a54958c+0xb/0xfc8 [ 1660.108119][T16043] fd_array_map_delete_elem+0x142/0x240 [ 1660.113667][T16043] map_delete_elem+0x320/0x4d0 [ 1660.118431][T16043] __se_sys_bpf+0x40b/0x740 [ 1660.122934][T16043] ? __x64_sys_bpf+0x90/0x90 [ 1660.127524][T16043] ? __se_sys_rt_sigprocmask+0x22c/0x290 [ 1660.133181][T16043] ? debug_smp_processor_id+0x17/0x20 [ 1660.138536][T16043] __x64_sys_bpf+0x7b/0x90 [ 1660.142933][T16043] do_syscall_64+0x31/0x40 [ 1660.147331][T16043] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1660.153201][T16043] RIP: 0033:0x7f9778de5b19 [ 1660.157593][T16043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.177178][T16043] RSP: 002b:00007f97776d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1660.185569][T16043] RAX: ffffffffffffffda RBX: 00007f977906c9f0 RCX: 00007f9778de5b19 [ 1660.193518][T16043] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 1660.201475][T16043] RBP: 00007f9778e7db70 R08: 0000000000000000 R09: 0000000000000000 [ 1660.209425][T16043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1660.217376][T16043] R13: 00007f977906ca88 R14: 00007f977906c9f0 R15: 00007ffceb40f798 [ 1660.225347][T16043] Modules linked in: [ 1660.260685][T16043] ---[ end trace 8f23c77857a1129c ]--- [ 1660.281095][T16043] RIP: 0010:prog_array_map_poke_run+0x6fb/0x710 [ 1660.287417][T16043] Code: 51 e9 ff 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 18 51 e9 ff 0f 0b e9 78 f9 ff ff e8 0c 51 e9 ff 0f 0b e8 05 51 e9 ff <0f> 0b e8 fe 50 e9 ff 0f 0b e8 f7 50 e9 ff 0f 0b 0f 1f 44 00 00 55 [ 1660.330691][T16043] RSP: 0018:ffffc900014b7c90 EFLAGS: 00010293 [ 1660.336844][T16043] RAX: ffffffff817b65bb RBX: ffff88811922d690 RCX: ffff88811183bc00 [ 1660.352697][T16043] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 1660.361089][T16043] RBP: ffffc900014b7d08 R08: ffffffff864eab87 R09: 1ffffffff0c9d570 [ 1660.369092][T16043] R10: dffffc0000000000 R11: fffffbfff0c9d571 R12: 00000000fffffff0 [ 1660.377281][T16043] R13: ffff88810c02ca80 R14: 0000000000000001 R15: ffffffffa0002a00 [ 1660.385576][T16043] FS: 00007f97776d26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1660.394565][T16043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1660.401696][T16043] CR2: 00007f7128753ff8 CR3: 00000001229ef000 CR4: 00000000003506a0 [ 1660.415373][T16043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1660.423582][T16043] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1660.431637][T16043] Kernel panic - not syncing: Fatal exception [ 1660.437901][T16043] Kernel Offset: disabled [ 1660.442217][T16043] Rebooting in 86400 seconds..