last executing test programs: 5m14.673087711s ago: executing program 4 (id=245): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5ddf40ff4de54abf98110c1aaa1dc26fd154cd13075002909d09179dc0d17cc279331f7f7a2e5ce80251b39cd242513c9cb800fef682147cda95206fc89f40bc6dd1fb448522678976410815bedfc589af009e2abf642d079e9ef892c1200fc0a20619f58f0ba4de1e256e4590bd03108b28c939f3ff3bd1d288f3f6446f43cd05565a53e6b7b7943d0f5c8f32abcab823deb617fdc42d22b67762f6", @ANYRES64, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000003c0), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000001ac0), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001b00)={0x0, 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') ioctl$TUNSETIFF(r5, 0xb701, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001cc0)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000001d00), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001d40)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x11, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000001e80), 0xfffffffffffffd71) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r11 = openat$cgroup_procs(r10, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000400), 0x12) mkdir(&(0x7f00000005c0)='./cgroup/../file0\x00', 0x2c2) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000640)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000680), 0x12) 5m14.633701965s ago: executing program 4 (id=249): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x68, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 5m14.513584837s ago: executing program 4 (id=252): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fc07000000000000000000008500000041000000850000009e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000280), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 5m14.19155222s ago: executing program 4 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000d00), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeef}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000cc0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@cgroup=r4, 0x34, 0x1, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000a80)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000b40)=r2) write$cgroup_devices(r5, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0xa, 0xa8, 0x4, 0x0, 0xfffffffffffffa04, 0x1080, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xd4, 0x1}, 0x6, 0x1, 0x8, 0xb, 0x2ec, 0xc, 0xdbe6, 0x0, 0xde2, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000380)='\bw\"\xb5\x14}D\xdcK\xc5+\xb1k\x1a\xd8\xb0M\xea7\x9d\x04\x8ay\x8cRL\"[\x80w\x9d\x1d\x8b\xdd\xe6\a\xbaoi\xa8\x01\x86\xfe\xeb\xa8JV\xd9\xd1t\xbd\xbeW\x92\x93\xe7\x12\xf3\x81\xf9!\xa4\xc8\xfb/\xacb\x8c_g\x95z\xb5\x82\x00\x9e`\x02\xc6qV\x1b\xb9\xc5\xa3\x8b\xd8\"\xb4\x83\xba\x15\xc4<\x18\xf8\xae\x82\x05\xe9dh\x01\xca\xe2\xea\xcd[\xf4\xef\xe2\xf2m1\xb2\x1b0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40008000) write$cgroup_subtree(r3, &(0x7f00000003c0), 0xfdef) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.current\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x19, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000700)={0x0, 0xfffffff5, &(0x7f0000000740)=[{&(0x7f0000000780)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r6, &(0x7f00000007c0)=ANY=[], 0x5dc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000017850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r5, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x7, 0x7, 0x2, 0xc, r7, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xf}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000001100000095"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x10001, 0xda7, 0x2, 0x88, r4, 0x67b3, '\x00', 0x0, r4, 0x0, 0x1, 0x3, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffc00000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8396}}, @generic={0x5, 0x4, 0x8, 0x5, 0xffffffc0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}]}, &(0x7f0000001040)='GPL\x00', 0x4, 0xac, &(0x7f0000001080)=""/172, 0x41000, 0xc, '\x00', r8, 0x0, r4, 0x8, &(0x7f0000001140)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001180)=[r9, r6, r7, r10, 0xffffffffffffffff, r7, r11, r7, r4, r4], &(0x7f00000011c0)=[{0x1, 0x2, 0xa, 0x1}, {0x2, 0x1, 0x10, 0x9}], 0x10, 0x200}, 0x94) (async) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000001200)=r8) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x400, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r13}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x18, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="b400000000eb00000f10000000000000630008000000000095f8aad862000000928eb311a9ba4c38b539b778829b569e5b468b4c53db3f7ac9bc09236ced48406ba735a5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43bec5ef0727bfa5532d53"], &(0x7f0000001380)='GPL\x00', 0x4, 0xfd90, &(0x7f00000013c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0x1f2, 0x10, &(0x7f0000001500), 0xfffffe51}, 0x22) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001640)={r4, &(0x7f0000001540)="0fc485a08d384dcfc4a7f9901abb37069a5371ed4eeb2453ac332b4ef9bdb024cd668b7bdf8ad77bc7679b6a3df50bdb4fe5da397c4311ba6557e51a26b8b6b7c80826b6247c7ab3148e31eecf03f14b0ea6767f10b01cc4ad9a4dfec18e136c02c174836acadb15", &(0x7f00000015c0)=""/93}, 0x20) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 5m13.10407535s ago: executing program 4 (id=272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={r0}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000002000)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002140)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000021c0)={'sit0\x00', @random="4f33e363a4b1"}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r3, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000002280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000002380)=""/253, 0x44, 0xfd, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x1f, 0x4, 0x0, &(0x7f0000002540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000002580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002600)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002640)={@cgroup, 0x2f, 0x0, 0x2, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000026c0)=[0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x1f, 0x2, &(0x7f0000002840)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000002880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000028c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00), &(0x7f0000002a40), 0xffffffff, r5}, 0x38) 4m57.965605004s ago: executing program 32 (id=272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={r0}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000002000)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002140)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000021c0)={'sit0\x00', @random="4f33e363a4b1"}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r3, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000002280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000002380)=""/253, 0x44, 0xfd, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x1f, 0x4, 0x0, &(0x7f0000002540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000002580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002600)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002640)={@cgroup, 0x2f, 0x0, 0x2, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000026c0)=[0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x1f, 0x2, &(0x7f0000002840)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000002880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000028c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00), &(0x7f0000002a40), 0xffffffff, r5}, 0x38) 2m53.245457519s ago: executing program 3 (id=1517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) (async) close(0x3) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000005000000080000004300000042000000", @ANYRES32, @ANYBLOB="0000000000000000000100000000000000070000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0x6, &(0x7f0000000f40)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000f80)='GPL\x00', 0x4, 0xc3, &(0x7f0000000fc0)=""/195}, 0x70) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x1000, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="e0b9547ed387db05abc8996f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m53.23381047s ago: executing program 3 (id=1518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r1, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="3800000005000000000000008000000018dd6b1100005b918aba088de5b8404828e596ad23ffe63cbd3d915f", @ANYRES64=r2, @ANYBLOB="00000000ddffffffb70200000200000085000000860000001801d000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x33, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x0, 0x1, 0x3, 0x1, 0xffffffffffffffe0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000a40)='syzkaller\x00', 0x1, 0x15, &(0x7f0000000a80)=""/21, 0x41000, 0x52, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0xb, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[r0, 0x1, r1, r0], &(0x7f0000000b40), 0x10, 0x2621}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x101, 0x0, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0xfffc, 0xfffffff8}, @generic={0x6, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x80004}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000080000000100000040"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000001400)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r9, 0xfeffff, 0x113, 0x0, &(0x7f00000014c0)="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", 0x0, 0xf0, 0x0, 0x78, 0x0, &(0x7f0000001600)="6a5dfeb9c5e052db7741b4675fde689e4539f1200ca3c9f4fd321e1f5f4f4c089d6513bd5317033e2dcd9417fb7c7e51c8444ebc718808d580937e25abb2a0a4bb63f464e6e8c3f325055ccaceaf2ea7094dcb19ffe536a9e91e4e10f76214075c5db24279defeac1677949e80d085fc73f146cfa5ff666e", 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.017324442s ago: executing program 3 (id=1520): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008800000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xff, 0x0, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r7}, 0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r8, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x6, 0xe, &(0x7f0000000b00)=@raw=[@jmp={0x5, 0x0, 0x9, 0x5, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}, @generic={0x3, 0xd, 0xa, 0x7, 0x81}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @ldst={0x1, 0x3, 0x3, 0x7, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @generic={0xc, 0x6, 0xf, 0x2, 0x431}, @ldst={0x2, 0x2, 0x1, 0x3, 0x0, 0x30, 0x8}], &(0x7f0000000b80)='GPL\x00', 0x1, 0x1000, &(0x7f0000000bc0)=""/4096, 0x0, 0x11, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000001c80)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001cc0)=[r4, r1, r4, r5, r5, 0x1, r5], &(0x7f0000001d00)=[{0x4, 0x3, 0x6, 0xb}, {0x5, 0x1, 0x2, 0x8}], 0x10, 0x3}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x20, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xaba4eb9ff39acf1d, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x25}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x10000, 0x6, &(0x7f0000000440)=""/6, 0x1f00, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0x5}, 0x10, r10, 0x0, 0x6, &(0x7f0000000540)=[r1, r2, r2, r2, r2, r1, r1, r2], &(0x7f0000000580)=[{0x4, 0x1, 0x1, 0x6}, {0x3, 0x5, 0x2, 0x3}, {0x5, 0x5, 0x4, 0x9}, {0x0, 0x5, 0x1, 0x3}, {0x0, 0x1, 0xe, 0x8}, {0x2, 0x4, 0x1, 0x7}], 0x10, 0x4}, 0x94) 2m52.996242114s ago: executing program 3 (id=1524): perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x12, 0x4, &(0x7f0000002100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x209, 0x0, 0x0, 0x0, 0x1ffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000002140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xea75}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x2b, &(0x7f0000002180)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe37}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4533}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x3, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x0, 0x3, 0x1}], &(0x7f00000006c0)='GPL\x00', 0xffff, 0xb7, &(0x7f00000007c0)=""/183, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x8, 0x80000001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0xc}, {0x2, 0x1, 0x7}]}, 0xffffffffffffff17) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000b40)={0xffffffffffffffff, r1, 0x4, r6}, 0x10) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) (async) r9 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x51) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x11, 0x14, &(0x7f00000023c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x605}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000580)='GPL\x00', 0x10000, 0x17, &(0x7f00000005c0)=""/23, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x8, 0x1, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000024c0)=[r8, r7, r7, r10, r8], &(0x7f0000002500)=[{0x5, 0x4, 0x0, 0xa}], 0x10, 0x4}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@base={0x12, 0x4, 0x8, 0x9}, 0x50) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0xe, 0x3, &(0x7f0000002740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002780)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000027c0)={@map=r12, r13, 0x4}, 0x10) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000001940)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r14, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000001a00)="b9ff03076804268cb89e14f086dd47e0ffff2000000000020000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b80)={0x1, 0x58, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x3, 0x21, &(0x7f0000001d00)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000001e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, @sched_cls}, 0x94) (async) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r16, 0xffffffffffffffff, 0x1}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e80), 0x4) 2m52.83581481s ago: executing program 3 (id=1528): r0 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xa, 0x9, 0x48, 0x5, 0x0, 0x9e8, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe, 0x2, @perf_config_ext={0x1, 0xffff}, 0x1, 0xffffffff, 0x9, 0x0, 0xc27a, 0x8, 0xffff, 0x0, 0x2, 0x0, 0x8000}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2}, 0x0, 0x0, r0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x3, &(0x7f00000022c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000002300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000002340)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002380)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000030000000000000000000000181100007ff9c0d7053a5d1960bc76b2e32eee2fb4377e2674e4381f375e377e0dc38fb26a8f5cb850939e01a4d389f53261f4bb92ae20adb6308d3537c36f126db46f5a08db19c6b2d1c2d0d950b4dd501f6ce6be7ddcf68f292e8e02d8332444bc0d8502e44738563470f3c65935dbe295583e8466282ff5b93b07ee0084eb9f56ed433c1e1eb450573627d8cbb3e3617547e30000bfa0693d5440b560135540d48e205b7f88754ac393a979e0f1b43ddc71631d915c1fe47d453b3acbe21c4f63c1dec29551ea502205330bfd521c5550df55ea6247ae82eceb", @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f00000024c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000001f80)=ANY=[@ANYBLOB="180000000000000000008000000000001801000020646c2100000000002020007b00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738ad6ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000120000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x14, &(0x7f0000002100)=ANY=[@ANYRES16, @ANYRES32=r4], &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b1168000000000085100000020000008500000005000000181a0000", @ANYRES32=r4, @ANYBLOB='\x00'], &(0x7f0000000880)='GPL\x00', 0x1, 0xc3, &(0x7f0000000d00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000021c0)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x3, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000680)=""/210, 0x41100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12e307000009000000040004b535320ee34bd19192907dfb1a07a50002000000000000ac02057334291c7afd3da6a6e1035724b5389f93aa4a87b78b7a2cbfed6efb921af4b27c47e0f41ffe24e49a06002fce4613e2e23318361278f5e79ab81c36cd0e0017dec5ef944a738de7ddabc3739e51e6e81ec9c3b4befe7b76761d769ce99bc8d22810442486308fb10dc7236d504db6711f4e393045cefeaa847fb91750ccc01a78bf97483bf49fc5743c2b03132eeb666d0fe946190c50", @ANYRES32=0x1, @ANYRES16=r2, @ANYRESOCT=r5, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT, @ANYRESHEX=r4], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5599}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x1f, 0xc, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x59}, 0x94) r9 = perf_event_open(&(0x7f0000002780)={0x1, 0x80, 0x0, 0x2, 0x0, 0x4, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400000000000df}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x8, 0x3, &(0x7f00000028c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000002940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x1, 0xe, &(0x7f0000002a40)=ANY=[], &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB="0300000004040000040000000a"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0x1, 0x8, &(0x7f0000003080)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f00000030c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003100)={{r11}, &(0x7f0000003140), &(0x7f0000003180)=r10}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000031c0)=r12, 0x4) 2m52.593270675s ago: executing program 3 (id=1530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'sit0\x00', @random="4f33e363a4b1"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x86e46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000640)=""/253, 0x44, 0xfd, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x4, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup, 0x2f, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0xffffffff, r4}, 0x38) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000d40)={0x4, 0x80, 0xff, 0x8, 0x9, 0x3, 0x0, 0x800, 0x2400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000dc0), 0x11}, 0x204, 0x2, 0x8, 0x3, 0x4, 0x12, 0x99b, 0x0, 0x2, 0x0, 0x24000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xfffffffa, 0x6, 0x800, 0x60, r0, 0xff, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3, 0x800, 0x5}, 0x50) 2m37.562575908s ago: executing program 33 (id=1530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'sit0\x00', @random="4f33e363a4b1"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x86e46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x2e, 0x0, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000640)=""/253, 0x44, 0xfd, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x4, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup, 0x2f, 0x0, 0x2, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0xffffffff, r4}, 0x38) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000d40)={0x4, 0x80, 0xff, 0x8, 0x9, 0x3, 0x0, 0x800, 0x2400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000dc0), 0x11}, 0x204, 0x2, 0x8, 0x3, 0x4, 0x12, 0x99b, 0x0, 0x2, 0x0, 0x24000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xfffffffa, 0x6, 0x800, 0x60, r0, 0xff, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3, 0x800, 0x5}, 0x50) 23.153760764s ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xf3ca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000002a000000040000000200000000000000", @ANYRES32, @ANYBLOB="e9fb414b384e3b82709440c567f8cd2e8c94169661cadba61c2e34273faf1eee6ed524d751643b2f763283288f51384a9a18389ae363a2db23a67cefcfbc66cc62f0b8e24c7813835fb2b361b20ce8154ae8eb951ddf3d062d5f46bec9243b5db45885eb514e14d0259c1865d92d27bd2ea05a24e6710d2c0cb188369164adebbac8dff898acb3b3497d917da2c276fed4077f74", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216454aab4c09989ec829ad0d832cf614e77c00e511870972e0bf0ed19d44857fc162dfa231c", @ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000800), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1b, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.921164413s ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xf3ca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000002a000000040000000200000000000000", @ANYRES32, @ANYBLOB="e9fb414b384e3b82709440c567f8cd2e8c94169661cadba61c2e34273faf1eee6ed524d751643b2f763283288f51384a9a18389ae363a2db23a67cefcfbc66cc62f0b8e24c7813835fb2b361b20ce8154ae8eb951ddf3d062d5f46bec9243b5db45885eb514e14d0259c1865d92d27bd2ea05a24e6710d2c0cb188369164adebbac8dff898acb3b3497d917da2c276fed4077f74", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216454aab4c09989ec829ad0d832cf614e77c00e511870972e0bf0ed19d44857fc162dfa231c", @ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000800), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1b, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.999859409s ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xf3ca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000002a000000040000000200000000000000", @ANYRES32, @ANYBLOB="e9fb414b384e3b82709440c567f8cd2e8c94169661cadba61c2e34273faf1eee6ed524d751643b2f763283288f51384a9a18389ae363a2db23a67cefcfbc66cc62f0b8e24c7813835fb2b361b20ce8154ae8eb951ddf3d062d5f46bec9243b5db45885eb514e14d0259c1865d92d27bd2ea05a24e6710d2c0cb188369164adebbac8dff898acb3b3497d917da2c276fed4077f74", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216454aab4c09989ec829ad0d832cf614e77c00e511870972e0bf0ed19d44857fc162dfa231c", @ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000800), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1b, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.187261127s ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xf3ca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000002a000000040000000200000000000000", @ANYRES32, @ANYBLOB="e9fb414b384e3b82709440c567f8cd2e8c94169661cadba61c2e34273faf1eee6ed524d751643b2f763283288f51384a9a18389ae363a2db23a67cefcfbc66cc62f0b8e24c7813835fb2b361b20ce8154ae8eb951ddf3d062d5f46bec9243b5db45885eb514e14d0259c1865d92d27bd2ea05a24e6710d2c0cb188369164adebbac8dff898acb3b3497d917da2c276fed4077f74", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216454aab4c09989ec829ad0d832cf614e77c00e511870972e0bf0ed19d44857fc162dfa231c", @ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000800), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1b, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.474304124s ago: executing program 5 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x88541, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000dc0)={0x34, &(0x7f0000000e00)=[{0x0, 0x40, 0x0, 0x3}, {0x4, 0xfd}, {0x6, 0xfa, 0x0, 0x10002}]}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2f}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0), 0x200000, 0x10, &(0x7f0000000d00), 0x143}, 0x48) socketpair(0x1e, 0x3, 0x1, &(0x7f0000000000)) 4.786793403s ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xf3ca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000002a000000040000000200000000000000", @ANYRES32, @ANYBLOB="e9fb414b384e3b82709440c567f8cd2e8c94169661cadba61c2e34273faf1eee6ed524d751643b2f763283288f51384a9a18389ae363a2db23a67cefcfbc66cc62f0b8e24c7813835fb2b361b20ce8154ae8eb951ddf3d062d5f46bec9243b5db45885eb514e14d0259c1865d92d27bd2ea05a24e6710d2c0cb188369164adebbac8dff898acb3b3497d917da2c276fed4077f74", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216454aab4c09989ec829ad0d832cf614e77c00e511870972e0bf0ed19d44857fc162dfa231c", @ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000800), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1b, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.481933199s ago: executing program 0 (id=2775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000008770000ade4f95af6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000004c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000500)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2b}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000900)={r5}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="18f500000b0000000005000006000000181101003c78aea0581d0ab68b410e19fc6d59c4b5a7a07b6258c9a4c899f358932c7a0adfddce3fb3d3af", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000180000000b00000000000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000603000085000000060000008510000007000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x2, 0xe}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x3, 0x4, 0xf, 0x7}, {0x3, 0x2, 0xb}, {0x3, 0x1, 0x8, 0xc}, {0x0, 0x1, 0xf, 0x2}], 0x10, 0xff}, 0x94) 2.47709116s ago: executing program 6 (id=2777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0xe}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='(()}^+&)\x00') (async, rerun: 64) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async, rerun: 32) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 2.47305583s ago: executing program 5 (id=2778): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x2a979d) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x2, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.current\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000600), 0x12) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x5}, {0xf}, {0x6, 0x2}, {0xe}]}, @enum={0x7, 0xa, 0x0, 0x6, 0x4, [{0x6, 0x9}, {0xa, 0x4}, {0x5, 0x2}, {0x7, 0xfd8}, {0xc, 0x9}, {0x4, 0x9ce}, {0x1, 0x5}, {0x5, 0x10001}, {0x5, 0xffff}, {0x0, 0x9}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x9}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum64={0x10, 0x4, 0x0, 0x13, 0x1, 0xb, [{0xd, 0x19, 0x401}, {0xf, 0x9, 0x6}, {0x5, 0x1, 0x4}, {0x10, 0x1, 0x8}]}, @fwd={0x9}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000200)=""/156, 0x118, 0x9c, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x800, '\x00', 0x0, r4, 0x1, 0x1, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x7, 0x8, &(0x7f0000001100)=@raw=[@map_fd={0x18, 0x2}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.440118864s ago: executing program 0 (id=2779): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000000c000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open$cgroup(&(0x7f0000000540)={0x6, 0x80, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80100, 0x9c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x2080, 0x3ff, 0xfffffffe, 0x6, 0xfffffffffffffffe, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d000000040000000800000006000000010000000000000000000000000000000000a700000000003a0c3d0e82cd0b689903a08f82bef56e073899157555acdf08b1", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0], 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.%////0%))/(!#]\\\x00') 2.425126425s ago: executing program 0 (id=2780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x400000000398}, 0x18020, 0x4, 0x0, 0x0, 0x2, 0xfffff271}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x89fa, &(0x7f0000000780)={'sit0\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x3a, 0x10, &(0x7f0000000580), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x2000012, 0xeff, 0x0, &(0x7f0000000640)="63eced8e46ea3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000680)=r3) (async, rerun: 32) close(r1) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (rerun: 64) 1.88519236s ago: executing program 1 (id=2781): r0 = getpid() (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) close(r1) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ff", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x10044001) (async) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x6, 0xff, 0x0, 0x0, 0x5, 0x2224, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1010, 0x8997, 0xd328, 0x6, 0x1f, 0x1, 0x1ff, 0x0, 0x9, 0x0, 0x5}, r0, 0x5, r1, 0x2) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) 1.858308133s ago: executing program 1 (id=2782): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0x1c, 0x200, 0x9a6, 0xabd, 0x2, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x6, 0x0, 0x0, 0x200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x2000000000000216, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffcb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8000000000000004, 0x8000}, 0x4105, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x101080, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1a000000000000000000000f00000000000000000000040000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x19, &(0x7f0000001bc0)=ANY=[@ANYBLOB="180000008f000000000000000b001400181100001341acce981274bf80102411ff061673e7d02d73ffb334353fb32be0b33e1f93fa444b6bc32e02d70442079eed522c207d86bba4a795882b559f04335c2919b3983a0b5a827cbe0b280408b8c36c775410", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff010003d018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000b80)='GPL\x00', 0x7, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x2f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0xf227f920360cd989, 0x1, 0x3, &(0x7f0000000140)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4}, 0x18) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000340)=r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 1.664649203s ago: executing program 5 (id=2783): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xaa7d5eca8cbb40f5, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x5, 0x80000, 0x6, &(0x7f00000000c0)) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) (async) openat$cgroup(r1, 0x0, 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x38, 0x8000}, 0x4001) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) 1.449339544s ago: executing program 5 (id=2784): r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x9400, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x63c2700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0xe, 0xfeff, &(0x7f0000000a00)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x9, '\x00', r5, r6, 0x4, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1d, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd7b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x8e4cd5eb879787a6, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x3, 0x0, 0x0, 0x7, 0x9, 0x2, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x4, 0xee, &(0x7f0000000200)=""/238}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = gettid() syz_open_procfs$namespace(r7, 0xfffffffffffffffd) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x40047440, 0xf0ff1f00000000) 1.442040685s ago: executing program 6 (id=2794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000280)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x2, r4}, 0x27) r5 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='THAWED\x00', 0x7) 1.3976188s ago: executing program 1 (id=2785): r0 = perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) syz_clone(0x40840080, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001240)) (async) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x2, 0xffff0001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000020000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001cb900000600"/22], 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef) (async) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x1000006, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r4) (async, rerun: 64) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) write$cgroup_subtree(r5, &(0x7f0000000740)=ANY=[], 0xfdef) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x4, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"/467], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000001a40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000001a80)}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={0x0, 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="0600000004000000040000000f0000000000", @ANYRES32=0x1, @ANYBLOB='\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x14, &(0x7f0000001c00)=ANY=[], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001c80), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x26e1, 0x0) (async, rerun: 32) close(r2) (rerun: 32) 1.259778324s ago: executing program 0 (id=2786): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780), 0x48) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x1, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffff9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0xbb}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, r5, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, r6}, &(0x7f0000000240), &(0x7f0000000340)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1.214448279s ago: executing program 6 (id=2787): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=""/31}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xecc}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0200000000000000e9ff0000debffffb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bfd9ee59725ef8, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x1, 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000e479ae3b00"/20, @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="03000000040000000200"/28], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r8 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x10, 0x9, 0x7f, 0xfc, 0x0, 0x9, 0xa00, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x6}, 0x440, 0x6, 0x2, 0x4, 0x100000000, 0x3f7, 0x9, 0x0, 0x1ff, 0x0, 0x200}, 0x0, 0xf, r4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.058680934s ago: executing program 6 (id=2788): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000020000000100000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000008b6500000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0x4, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x1b}, 0x104002, 0xfffffffffffffffc, 0x0, 0x0, 0x6f00000001000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x6}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000900)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f00000009c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x2, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0xc, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/net\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000418c224cb218444107cdb8513641409000000040000040a0000000400000043a3accf7a3e5e7c5bd7c27e20c842c0719221baa4f0cf214529f1d46c3add34f4f539e46bcdaba041b2f415199d562fb15e6da3924e023f20e76085418931c5a96f71aea6784519e54573a8bc80996ed145baa34f7e28f41ff54423f4a4e7806fa68a59a72b6db9f9063b07a16464d0dddc111c6e1dc2090538fd2a0dc46aaedec61ce1567c85443e9373d07cfdaab4725d3a97aec4d32d396fd5b3ca1d6e1dd4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x50) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0)=r7, 0x12) 969.311603ms ago: executing program 5 (id=2789): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000b80)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000540)=r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000640)=r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702b1ffe80000000000000", @ANYRESDEC], 0xffdd) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111a800000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000b80)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000540)=r3) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000600)) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000640)=r3) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702b1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111a800000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @fallback=0x1f}, 0x94) (async) 904.96632ms ago: executing program 1 (id=2790): r0 = perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1c95, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d7e044f, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1c95, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d7e044f, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 595.031801ms ago: executing program 1 (id=2791): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xd, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x7, [{0xa, 0x3, 0x6}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x61, 0x2e, 0x61, 0x0, 0x61, 0x8fdb67a5e18b50bb]}}, 0x0, 0x3d}, 0x28) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x30, 0x4, 0xfd, 0xfffff014}, {0x6, 0x0, 0x2}]}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'syzkaller0\x00', 0x600}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 495.335961ms ago: executing program 6 (id=2792): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 397.238821ms ago: executing program 0 (id=2793): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x9, 0x0, 0x9, 0x0, 0x0, 0x34b82, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0, 0x1}, 0x2001, 0x3, 0xfffffffb, 0x7, 0xffffffffffffbbfd, 0x1, 0x8004, 0x0, 0xa2a, 0x0, 0x200000000000000}, 0x0, 0x1000, r1, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 395.672311ms ago: executing program 6 (id=2795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0xff, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffefefffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="620ac4ff00000000711025000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="620ac4ff00000000711025000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.91206ms ago: executing program 5 (id=2796): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f00000007c0)='GPL\x00', 0x4, 0xd2, &(0x7f0000000880)=""/210}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') sendmsg$unix(r2, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x45}, 0x20000000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10062) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0x16, &(0x7f0000001040)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000001140)='GPL\x00'}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x2000}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0x0, 0xe2, 0x73, &(0x7f0000000c80)="4d6a26485695a128c1a8885fa6e540079162e2c0573066b2f43eb59ad6fba04dae7479e77dcb934c284ad2214faacb797d559a8ac0420ec193612c6c45fd329f1bf9b4fbeb23829eaeca16546cb5f1d43407ac68b97321bce8c247cba94fb78a80366fd254c42de0adede26c416cc1da142810443a5bfc28cfc1da35fd22456ac710bd3db769842452bd1df0641389e4f5eca03f10f7435943295f2ec6ed59c242aa44c3214d3ec977ed80e177b96f5f60d1938adf2bac20461bbbd4291bdc933b90c29a2d9493cd8dd902cd7fd3bd165b3abc9224d0b0fef8055b4d1b5e82441562", &(0x7f0000000d80)=""/115, 0x9, 0x0, 0xa2, 0x0, &(0x7f0000000e00)="d8de6565a95a0c971b981c6c12ae8d8dccf7bbfc2f264f7f6dd843c83cff0f51cedc4d488827e4fcbb94f77e2b48aa365badaca4507c386df26d1f20d4785f8b3e5fbbafa093d2dd5214350429e5072e72ed1e133b9a9c119a3f4efe07ab448716f428d9cac5d2b194fa600d2a1991ed541adbc3669983b3ba3291660168e08dc69c652b87651ab9d4f642e25de2963d1fb72d3aa7709048927403abde7a26361e57", &(0x7f0000000ec0), 0x4, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000300), 0x4) recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/30, 0x1e}, 0x40010040) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.10746ms ago: executing program 0 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x4, &(0x7f0000001780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xc, &(0x7f0000001880)=ANY=[], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f0000000480)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000007c0)={r0, &(0x7f0000000800), 0x0}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='syzkaller\x00'}, 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000500)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000780), 0xfdef) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0xd, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r6, 0x0, 0xe, 0x0, &(0x7f0000001480)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x9d9, 0x7d1a839, 0x200, 0x10, 0x1, 0xc09, '\x00', r2, r7, 0x3, 0x4, 0x5}, 0x50) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.00162ms ago: executing program 1 (id=2798): r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x2b, 0x14, 0xd, 0x0, 0x7, 0x66053, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x28, 0x0, @perf_config_ext={0x1, 0x72}, 0x10918, 0x4, 0x78, 0x7, 0x1ff, 0x4, 0xfff9, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0xb) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='syz0\x00') (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'net_prio'}, {0x2b, 'rdma'}, {0x0, 'hugetlb'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2b, 'pids'}, {0x2b, 'blkio'}, {0x2d, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'cpuacct'}]}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x2a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa5}, @call={0x85, 0x0, 0x0, 0xcc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x9, 0x96, &(0x7f00000003c0)=""/150, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x81}, 0x10, 0x71, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x5, 0xc}, {0x2, 0x5, 0x5, 0x6}, {0x0, 0x4, 0x3, 0x9}, {0x4, 0x1, 0xd, 0x6}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000680)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x17, 0x10, 0x9, 0x1, 0x1010c, r4, 0xec20, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @value=r6}, 0x50) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xaad8) syz_clone(0x800200, &(0x7f0000000ac0)="866f0566361da3987fd58272c2e0efa40a18422220b04bacb8c15330fe7ccfed4a0f8e", 0x23, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="f92863aa0ca48bb4d60342dda525d3184e491c8dfdd0de9280b2c2991c638d989412a997009b2513ff051149c4b465999a8fdf0b627b178c5de1f96c07b2c9e39332bb4a4bb616ab16e154fa1c6da473d9a08642da6f460811f8f7300b694792b989baa3e5c4450e3bfac9bc0b39caa331b7ebb04a") r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x80802, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000c40)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001200)={&(0x7f0000000cc0), 0x6e, &(0x7f0000001180)=[{&(0x7f0000000d40)=""/216, 0xd8}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000000f40)=""/216, 0xd8}, {&(0x7f0000001040)=""/60, 0x3c}, {&(0x7f0000001080)=""/227, 0xe3}], 0x5}, 0x20) (async) r10 = openat$cgroup_int(r2, &(0x7f0000001240)='cpu.idle\x00', 0x2, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={r7, 0xffffffffffffffff}, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000012c0)) (async) perf_event_open$cgroup(&(0x7f0000001300)={0x0, 0x80, 0x2, 0x9, 0xb0, 0x2, 0x0, 0x7ff, 0x40800, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x4, 0x7ff}, 0x10020, 0x3ff, 0x0, 0x7, 0x1, 0x6, 0x1ff, 0x0, 0x1e3f}, r1, 0xffffffffffffffff, r0, 0xaf3197ba8c115832) (async) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001380)={'team_slave_0', 0x32, 0x32}, 0xf) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x3, '\x00', r5, r10, 0x2, 0x4}, 0x50) (async) r13 = openat$cgroup_devices(r2, &(0x7f0000001440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000001480)={'a', ' *:* ', 'w\x00'}, 0x8) (async) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000014c0)=""/231) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r3, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x9, [@int={0x3, 0x0, 0x0, 0x1, 0x7, 0x26, 0x0, 0x3, 0x2}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0xa7, [{0xc, 0x2, 0x8001}, {0x1, 0x2, 0x5e}]}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x9, 0x0, 0x900}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x10000}}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x4, 0x1, 0xd}]}, @fwd={0x8}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/120, 0xed, 0x78, 0x0, 0x4c, 0x10000, @value=r11}, 0x28) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c80)={{r12, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1d, 0x12, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001680)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x2, '\x00', r14, @lsm=0x2b, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x1, 0x1, 0x38000, 0xf3}, 0x10, 0x0, r3, 0x6, &(0x7f0000001cc0)=[r16, r11, r7, r4, r11, r12], &(0x7f0000001d00)=[{0x5, 0x3, 0xb, 0x6}, {0x1, 0x5, 0xd, 0x2}, {0x0, 0x4, 0xf}, {0x4, 0x3, 0xb, 0x5}, {0x2, 0x2, 0x5, 0x4}, {0x3, 0x4, 0x6, 0xb}], 0x10, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={&(0x7f0000001e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x10, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000001e80)=""/138, 0x28, 0x8a, 0x0, 0xce, 0x10000}, 0x28) 0s ago: executing program 2 (id=2211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xf3ca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000002a000000040000000200000000000000", @ANYRES32, @ANYBLOB="e9fb414b384e3b82709440c567f8cd2e8c94169661cadba61c2e34273faf1eee6ed524d751643b2f763283288f51384a9a18389ae363a2db23a67cefcfbc66cc62f0b8e24c7813835fb2b361b20ce8154ae8eb951ddf3d062d5f46bec9243b5db45885eb514e14d0259c1865d92d27bd2ea05a24e6710d2c0cb188369164adebbac8dff898acb3b3497d917da2c276fed4077f74", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216454aab4c09989ec829ad0d832cf614e77c00e511870972e0bf0ed19d44857fc162dfa231c", @ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000800), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1b, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 0 4c 89 01 48 c7 44 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 [ 228.821106][ C0] RSP: 0018:ffffc9000e0972d8 EFLAGS: 00000293 [ 228.821119][ C0] RAX: ffffffff81e14441 RBX: ffff888132e15708 RCX: 0000000000000000 [ 228.821130][ C0] RDX: ffff8881182a5100 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.821141][ C0] RBP: ffffc9000e0972d8 R08: 0000000000000000 R09: 0000000000000001 [ 228.821151][ C0] R10: 0000000000000000 R11: ffffffff8402fef0 R12: 00000000000041ed [ 228.821162][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000000041ed [ 228.821174][ C0] ? __cfi_net_namespace+0x10/0x10 [ 228.821195][ C0] ? kernfs_new_node+0x61/0x260 [ 228.821213][ C0] kernfs_new_node+0x61/0x260 [ 228.821229][ C0] kernfs_create_dir_ns+0x47/0x130 [ 228.821245][ C0] internal_create_group+0x48c/0xeb0 [ 228.821275][ C0] ? kobject_init_and_add+0x128/0x190 [ 228.821293][ C0] ? ip_tunnel_init_net+0x32b/0x820 [ 228.821310][ C0] ? ipip_init_net+0x29/0x30 [ 228.821333][ C0] ? sysfs_create_group+0x30/0x30 [ 228.821354][ C0] ? copy_process+0x1304/0x3500 [ 228.821376][ C0] ? do_syscall_64+0x4c/0xa0 [ 228.821393][ C0] sysfs_create_group+0x1f/0x30 [ 228.821414][ C0] netdev_queue_update_kobjects+0x213/0x470 [ 228.821435][ C0] netdev_register_kobject+0x281/0x330 [ 228.821454][ C0] register_netdevice+0xec9/0x1550 [ 228.821471][ C0] ? irqentry_exit+0x37/0x40 [ 228.821494][ C0] ? __cfi_register_netdevice+0x10/0x10 [ 228.821509][ C0] ? memcpy+0x56/0x70 [ 228.821527][ C0] ? memcpy+0x56/0x70 [ 228.821543][ C0] __ip_tunnel_create+0x346/0x450 [ 228.821562][ C0] ? ip_tunnel_init_net+0x820/0x820 [ 228.821582][ C0] ip_tunnel_init_net+0x32b/0x820 [ 228.821599][ C0] ? __cfi_ip_tunnel_init_net+0x10/0x10 [ 228.821618][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 228.821633][ C0] ? __kasan_kmalloc+0x95/0xb0 [ 228.821653][ C0] ? ops_init+0x88/0x470 [ 228.821670][ C0] ipip_init_net+0x29/0x30 [ 228.821691][ C0] ops_init+0x2ce/0x470 [ 228.821708][ C0] setup_net+0x4b4/0xcd0 [ 228.821724][ C0] ? copy_net_ns+0x5c0/0x5c0 [ 228.821742][ C0] copy_net_ns+0x355/0x5c0 [ 228.821758][ C0] create_new_namespaces+0x3a8/0x660 [ 228.821782][ C0] copy_namespaces+0x1cc/0x220 [ 228.821805][ C0] copy_process+0x1304/0x3500 [ 228.821832][ C0] ? idle_dummy+0x10/0x10 [ 228.821852][ C0] ? preempt_schedule_irq+0xca/0x120 [ 228.821869][ C0] ? __perf_event_task_sched_in+0x2ab/0x320 [ 228.821888][ C0] ? __kasan_check_read+0x11/0x20 [ 228.821906][ C0] kernel_clone+0x22f/0x7f0 [ 228.821926][ C0] ? sysvec_reschedule_ipi+0x78/0x80 [ 228.821947][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 228.821969][ C0] ? __x64_sys_clone+0x18b/0x200 [ 228.821993][ C0] __x64_sys_clone+0x193/0x200 [ 228.822015][ C0] ? __cfi___x64_sys_clone+0x10/0x10 [ 228.822040][ C0] ? perf_trace_sys_enter+0x30/0x150 [ 228.822058][ C0] ? trace_sys_enter+0x3d/0x50 [ 228.822075][ C0] x64_sys_call+0x990/0x9a0 [ 228.822094][ C0] do_syscall_64+0x4c/0xa0 [ 228.822108][ C0] ? clear_bhb_loop+0x30/0x80 [ 228.822127][ C0] ? clear_bhb_loop+0x30/0x80 [ 228.822146][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.822165][ C0] RIP: 0033:0x7f822619fb19 [ 228.822177][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.822190][ C0] RSP: 002b:00007f8226fccfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 228.822205][ C0] RAX: ffffffffffffffda RBX: 00007f8226426180 RCX: 00007f822619fb19 [ 228.822217][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044063400 [ 228.822227][ C0] RBP: 00007f8226237b70 R08: 0000000000000000 R09: 0000000000000000 [ 228.822237][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 228.822247][ C0] R13: 00007f8226426218 R14: 00007f8226426180 R15: 00007ffcaa2f1a58 [ 228.822268][ C0] [ 229.432888][ T7321] syz.0.1674 (7321) used greatest stack depth: 14144 bytes left [ 229.599568][ T7319] syz.0.1674 (7319) used greatest stack depth: 13120 bytes left [ 233.398697][ T8295] device sit0 left promiscuous mode [ 233.413992][ T8296] device sit0 entered promiscuous mode [ 234.026650][ T8349] tap1: tun_chr_ioctl cmd 1074025677 [ 234.058722][ T8349] tap1: linktype set to 6 [ 234.251849][ T8354] device syzkaller0 entered promiscuous mode [ 234.637537][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.825528][ T8381] device team_slave_1 left promiscuous mode [ 234.831820][ T8381] bridge0: port 3(team_slave_1) entered disabled state [ 234.854483][ T8381] device bridge_slave_1 left promiscuous mode [ 234.861158][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.896896][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.092408][ T8501] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.167889][ T8501] device syzkaller0 entered promiscuous mode [ 238.585544][ T8537] device syzkaller0 entered promiscuous mode [ 239.126910][ T8551] device veth0_vlan left promiscuous mode [ 239.146262][ T8551] device veth0_vlan entered promiscuous mode [ 239.168737][ T8549] device sit0 left promiscuous mode [ 239.186469][ T8555] device sit0 entered promiscuous mode [ 239.272758][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.406213][ T8598] device team_slave_0 entered promiscuous mode [ 240.600298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.628354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.534133][ T8655] device syzkaller0 entered promiscuous mode [ 242.049762][ T8660] device wg2 left promiscuous mode [ 242.501548][ T8689] device syzkaller0 entered promiscuous mode [ 242.682781][ T8683] device wg2 entered promiscuous mode [ 243.622606][ T8741] device sit0 left promiscuous mode [ 243.997314][ T8748] device sit0 entered promiscuous mode [ 244.142405][ T8763] device syzkaller0 entered promiscuous mode [ 244.149043][ T8765] Ã2®|: renamed from team_slave_1 [ 244.183836][ T8768] device wg2 left promiscuous mode [ 245.919176][ T8831] device syzkaller0 entered promiscuous mode [ 246.026640][ T8828] device wg2 entered promiscuous mode [ 246.973608][ T8896] device sit0 left promiscuous mode [ 247.495869][ T8902] device sit0 entered promiscuous mode [ 250.446843][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 167 seconds. [ 250.454881][ T29] Not tainted syzkaller #0 [ 250.509731][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.503194][ T29] task:rcu_tasks_kthre state:D stack:28800 pid:11 ppid:2 flags:0x00004000 [ 251.512679][ T29] Call Trace: [ 251.515966][ T29] [ 251.518921][ T29] __schedule+0xcb3/0x1700 [ 251.523454][ T29] ? release_firmware_map_entry+0x190/0x190 [ 251.529419][ T29] ? __queue_work+0x9f2/0xd50 [ 251.534105][ T29] schedule+0xbd/0x170 [ 251.538193][ T29] schedule_timeout+0xba/0x340 [ 251.543035][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 251.548438][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 251.554254][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 251.559116][ T29] wait_for_common+0x364/0x640 [ 251.563882][ T29] ? wait_for_completion+0x20/0x20 [ 251.569006][ T29] wait_for_completion+0x18/0x20 [ 251.573945][ T29] __synchronize_srcu+0x173/0x200 [ 251.579080][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 251.584798][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 251.590268][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 251.595710][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 251.602106][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 251.607733][ T29] synchronize_srcu+0x1c5/0x1d0 [ 251.612589][ T29] rcu_tasks_postscan+0x10/0x20 [ 251.617463][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 251.622405][ T29] ? __kasan_check_write+0x14/0x20 [ 251.627631][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 251.633097][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 251.638574][ T29] ? mutex_lock+0x93/0x1b0 [ 251.642994][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 251.647848][ T29] ? schedule_timeout+0x1a7/0x340 [ 251.652873][ T29] rcu_tasks_kthread+0x6a/0x90 [ 251.657638][ T29] kthread+0x281/0x320 [ 251.661697][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 251.667155][ T29] ? __cfi_kthread+0x10/0x10 [ 251.671737][ T29] ret_from_fork+0x1f/0x30 [ 251.676147][ T29] [ 251.679610][ T29] NMI backtrace for cpu 1 [ 251.683943][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 251.691139][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 251.701178][ T29] Call Trace: [ 251.704446][ T29] [ 251.707361][ T29] __dump_stack+0x21/0x24 [ 251.711839][ T29] dump_stack_lvl+0x110/0x170 [ 251.716499][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 251.721508][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 251.728155][ T29] dump_stack+0x15/0x24 [ 251.732294][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 251.737214][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 251.742749][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 251.748194][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 251.754244][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 251.760208][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 251.766173][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 251.772137][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 251.778013][ T29] watchdog+0xde1/0xf30 [ 251.782236][ T29] ? __cfi_watchdog+0x10/0x10 [ 251.786895][ T29] ? __kasan_check_read+0x11/0x20 [ 251.791905][ T29] ? __kthread_parkme+0x13a/0x180 [ 251.796912][ T29] kthread+0x281/0x320 [ 251.800965][ T29] ? __cfi_watchdog+0x10/0x10 [ 251.805625][ T29] ? __cfi_kthread+0x10/0x10 [ 251.810203][ T29] ret_from_fork+0x1f/0x30 [ 251.814609][ T29] [ 251.817732][ T29] Sending NMI from CPU 1 to CPUs 0: [ 251.822938][ C0] NMI backtrace for cpu 0 [ 251.822948][ C0] CPU: 0 PID: 8914 Comm: syz.0.2053 Not tainted syzkaller #0 [ 251.822965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 251.822975][ C0] RIP: 0010:pvclock_clocksource_read+0xf0/0x720 [ 251.822998][ C0] Code: 00 00 fc ff df 48 89 55 a0 43 0f b6 04 23 84 c0 0f 85 40 01 00 00 42 0f b6 04 22 84 c0 0f 85 7b 01 00 00 8b 1f 0f 01 f9 66 90 <49> 89 d5 48 8b 8d 38 ff ff ff 42 0f b6 0c 21 84 c9 0f 85 a5 01 00 [ 251.823012][ C0] RSP: 0018:ffffc90000007dc0 EFLAGS: 00000046 [ 251.823124][ C0] RAX: 000000004f8a430a RBX: 0000000000000006 RCX: 0000000000000000 [ 251.823135][ C0] RDX: 0000000000000083 RSI: ffffffff87b7501c RDI: ffffffff87b75000 [ 251.823146][ C0] RBP: ffffc90000007e90 R08: ffffffff87b75008 R09: ffffffff87b75018 [ 251.823158][ C0] R10: ffffffff87b75003 R11: 1ffffffff0f6ea00 R12: dffffc0000000000 [ 251.823170][ C0] R13: dffffc0000000000 R14: ffffffff866d79a0 R15: 0000000000000000 [ 251.823182][ C0] FS: 00007fabf3f396c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 251.823197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.823208][ C0] CR2: 00007f87369ed200 CR3: 0000000117a74000 CR4: 00000000003506b0 [ 251.823222][ C0] DR0: 00002000000021c0 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.823232][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 251.823242][ C0] Call Trace: [ 251.823246][ C0] [ 251.823255][ C0] ? clockevents_program_event+0x24a/0x330 [ 251.823310][ C0] kvm_sched_clock_read+0x18/0x40 [ 251.823333][ C0] sched_clock+0x9/0x10 [ 251.823352][ C0] sched_clock_cpu+0x6e/0x260 [ 251.823398][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 251.823419][ C0] irqtime_account_irq+0x75/0x240 [ 251.823467][ C0] __irq_exit_rcu+0x18/0xf0 [ 251.823484][ C0] irq_exit_rcu+0x9/0x10 [ 251.823499][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 251.823519][ C0] [ 251.823524][ C0] [ 251.823529][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 251.823549][ C0] RIP: 0010:unwind_next_frame+0x358/0x660 [ 251.823568][ C0] Code: 00 00 00 fc ff df 42 80 3c 30 00 4c 8d 6b 28 74 08 4c 89 ff e8 a9 72 81 00 49 8b 0f eb 43 65 48 8b 05 4c d0 cc 7e 48 39 45 d0 <49> be 00 00 00 00 00 fc ff df 4c 8d 6b 28 74 0d 4c 89 e7 e8 f0 02 [ 251.823580][ C0] RSP: 0018:ffffc9000eed7348 EFLAGS: 00000246 [ 251.823593][ C0] RAX: ffff88811b6c3cc0 RBX: ffffc9000eed73a8 RCX: 0000000000000000 [ 251.823605][ C0] RDX: dffffc0000000000 RSI: ffffffff83f11de4 RDI: ffffc9000eed7f48 [ 251.823616][ C0] RBP: ffffc9000eed7398 R08: ffffc9000eed7470 R09: ffffc9000eed7468 [ 251.823628][ C0] R10: 0000000000000008 R11: fffff52001ddae81 R12: ffffc9000eed7910 [ 251.823640][ C0] R13: 1ffff92001ddae7f R14: ffffc9000eed73f8 R15: 0000000000000000 [ 251.823654][ C0] ? setup_net+0x4b4/0xcd0 [ 251.823703][ C0] ? setup_net+0x4b4/0xcd0 [ 251.823719][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 251.823766][ C0] arch_stack_walk+0x124/0x150 [ 251.823790][ C0] ? setup_net+0x4b4/0xcd0 [ 251.823807][ C0] stack_trace_save+0xa6/0xf0 [ 251.823826][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 251.823848][ C0] ? memset+0x35/0x40 [ 251.823865][ C0] kasan_set_track+0x4b/0x70 [ 251.823915][ C0] ? kasan_set_track+0x4b/0x70 [ 251.823932][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 251.823947][ C0] ? __kasan_kmalloc+0x95/0xb0 [ 251.823966][ C0] ? __kmalloc+0xb4/0x1e0 [ 251.823980][ C0] ? __register_sysctl_table+0xd9/0xe50 [ 251.824025][ C0] ? register_net_sysctl+0x23f/0x250 [ 251.824103][ C0] ? ipv6_frags_init_net+0x1ef/0x2d0 [ 251.824171][ C0] ? ops_init+0x2ce/0x470 [ 251.824187][ C0] ? setup_net+0x4b4/0xcd0 [ 251.824213][ C0] kasan_save_alloc_info+0x1f/0x30 [ 251.824228][ C0] __kasan_kmalloc+0x95/0xb0 [ 251.824247][ C0] ? __register_sysctl_table+0xd9/0xe50 [ 251.824265][ C0] __kmalloc+0xb4/0x1e0 [ 251.824280][ C0] __register_sysctl_table+0xd9/0xe50 [ 251.824298][ C0] ? preempt_count_add+0x90/0x1b0 [ 251.824315][ C0] register_net_sysctl+0x23f/0x250 [ 251.824339][ C0] ipv6_frags_init_net+0x1ef/0x2d0 [ 251.824363][ C0] ops_init+0x2ce/0x470 [ 251.824381][ C0] setup_net+0x4b4/0xcd0 [ 251.824396][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 251.824416][ C0] ? copy_net_ns+0x5c0/0x5c0 [ 251.824434][ C0] copy_net_ns+0x355/0x5c0 [ 251.824451][ C0] create_new_namespaces+0x3a8/0x660 [ 251.824476][ C0] copy_namespaces+0x1cc/0x220 [ 251.824499][ C0] copy_process+0x1304/0x3500 [ 251.824521][ C0] ? __kasan_check_read+0x11/0x20 [ 251.824541][ C0] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 251.824586][ C0] ? idle_dummy+0x10/0x10 [ 251.824607][ C0] ? kernel_clone+0xc0/0x7f0 [ 251.824628][ C0] ? memset_erms+0xb/0x10 [ 251.824670][ C0] kernel_clone+0x22f/0x7f0 [ 251.824693][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 251.824718][ C0] __x64_sys_clone+0x193/0x200 [ 251.824741][ C0] ? __cfi___x64_sys_clone+0x10/0x10 [ 251.824765][ C0] ? __kasan_check_write+0x14/0x20 [ 251.824781][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 251.824800][ C0] ? switch_fpu_return+0xe/0x10 [ 251.824819][ C0] x64_sys_call+0x990/0x9a0 [ 251.824837][ C0] do_syscall_64+0x4c/0xa0 [ 251.824851][ C0] ? clear_bhb_loop+0x30/0x80 [ 251.824870][ C0] ? clear_bhb_loop+0x30/0x80 [ 251.824889][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.824908][ C0] RIP: 0033:0x7fabf2f9fb19 [ 251.824922][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.824935][ C0] RSP: 002b:00007fabf3f38fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 251.824951][ C0] RAX: ffffffffffffffda RBX: 00007fabf3226090 RCX: 00007fabf2f9fb19 [ 251.824962][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0126080 [ 251.824972][ C0] RBP: 00007fabf3037b70 R08: 0000000000000000 R09: 0000000000000000 [ 251.824983][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 251.824993][ C0] R13: 00007fabf3226128 R14: 00007fabf3226090 R15: 00007ffcd046ea68 [ 251.825009][ C0] [ 252.569571][ T8936] device syzkaller0 entered promiscuous mode [ 254.546992][ T9038] device sit0 left promiscuous mode [ 255.184408][ T9039] device sit0 entered promiscuous mode [ 255.397870][ T9059] device syzkaller0 entered promiscuous mode [ 257.975878][ T9073] device syzkaller0 entered promiscuous mode [ 258.013886][ T9094] device syzkaller0 entered promiscuous mode [ 258.218869][ T9122] device syzkaller0 entered promiscuous mode [ 258.292382][ T9131] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 258.298365][ T9131] syzkaller0: linktype set to 270 [ 259.574276][ T9179] device batadv_slave_0 entered promiscuous mode [ 268.528907][ T9223] device syzkaller0 entered promiscuous mode [ 268.972349][ T9251] device sit0 left promiscuous mode [ 268.986015][ T9252] device sit0 entered promiscuous mode [ 269.183891][ T9258] device syzkaller0 entered promiscuous mode [ 269.615145][ T9289] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 269.615196][ T1526] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 272.079153][ T9353] device syzkaller0 entered promiscuous mode [ 272.627014][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 189 seconds. [ 272.634957][ T29] Not tainted syzkaller #0 [ 272.639993][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.648696][ T29] task:rcu_tasks_kthre state:D stack:28800 pid:11 ppid:2 flags:0x00004000 [ 272.657949][ T29] Call Trace: [ 272.661248][ T29] [ 272.664174][ T29] __schedule+0xcb3/0x1700 [ 272.668600][ T29] ? release_firmware_map_entry+0x190/0x190 [ 272.674489][ T29] ? __queue_work+0x9f2/0xd50 [ 272.679175][ T29] schedule+0xbd/0x170 [ 272.683235][ T29] schedule_timeout+0xba/0x340 [ 272.688015][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 272.693387][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 272.699199][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 272.704044][ T29] wait_for_common+0x364/0x640 [ 272.708828][ T29] ? wait_for_completion+0x20/0x20 [ 272.713935][ T29] wait_for_completion+0x18/0x20 [ 272.718880][ T29] __synchronize_srcu+0x173/0x200 [ 272.723899][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 272.729620][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 272.735078][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 272.740469][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 272.746820][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 272.752367][ T29] synchronize_srcu+0x1c5/0x1d0 [ 272.757222][ T29] rcu_tasks_postscan+0x10/0x20 [ 272.762151][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 272.767093][ T29] ? __kasan_check_write+0x14/0x20 [ 272.772195][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 272.777655][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 272.783367][ T29] ? mutex_lock+0x93/0x1b0 [ 272.787791][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 272.792633][ T29] ? schedule_timeout+0x1a7/0x340 [ 272.797668][ T29] rcu_tasks_kthread+0x6a/0x90 [ 272.802427][ T29] kthread+0x281/0x320 [ 272.806487][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 272.811981][ T29] ? __cfi_kthread+0x10/0x10 [ 272.816580][ T29] ret_from_fork+0x1f/0x30 [ 272.821008][ T29] [ 272.843870][ T29] NMI backtrace for cpu 1 [ 272.848241][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 272.855427][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 272.865465][ T29] Call Trace: [ 272.868733][ T29] [ 272.871650][ T29] __dump_stack+0x21/0x24 [ 272.875968][ T29] dump_stack_lvl+0x110/0x170 [ 272.880631][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 272.885641][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x1e7/0x960 [ 272.892222][ T29] dump_stack+0x15/0x24 [ 272.896362][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 272.901288][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 272.906827][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 272.912288][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 272.918340][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 272.924308][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 272.930275][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 272.936243][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 272.942122][ T29] watchdog+0xde1/0xf30 [ 272.946266][ T29] ? __cfi_watchdog+0x10/0x10 [ 272.950928][ T29] ? __kasan_check_read+0x11/0x20 [ 272.955937][ T29] ? __kthread_parkme+0x13a/0x180 [ 272.960948][ T29] kthread+0x281/0x320 [ 272.965012][ T29] ? __cfi_watchdog+0x10/0x10 [ 272.969687][ T29] ? __cfi_kthread+0x10/0x10 [ 272.974271][ T29] ret_from_fork+0x1f/0x30 [ 272.978687][ T29] [ 272.981827][ T29] Sending NMI from CPU 1 to CPUs 0: [ 272.987064][ C0] NMI backtrace for cpu 0 [ 272.987078][ C0] CPU: 0 PID: 9396 Comm: syz.0.2181 Not tainted syzkaller #0 [ 272.987095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 272.987104][ C0] RIP: 0010:unmap_page_range+0xe88/0x2360 [ 272.987238][ C0] Code: 33 00 74 0a 48 8b 7c 24 08 e8 d4 ed 0b 00 48 8b 44 24 30 4c 89 20 48 8b bc 24 e0 00 00 00 49 89 fc 49 c1 ec 03 43 80 3c 34 00 <74> 0d e8 c1 ec 0b 00 48 8b bc 24 e0 00 00 00 4c 8b 2f 48 8b 04 24 [ 272.987252][ C0] RSP: 0018:ffffc9000108f3e0 EFLAGS: 00000246 [ 272.987267][ C0] RAX: ffff88811e767ae8 RBX: 1ffff11023cecf5d RCX: ffff888146c8bcc0 [ 272.987279][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000108f7d0 [ 272.987290][ C0] RBP: ffffc9000108f5b0 R08: ffff888146c8bcc7 R09: 1ffff11028d91798 [ 272.987302][ C0] R10: dffffc0000000000 R11: ffffed1028d91799 R12: 1ffff92000211efa [ 272.987314][ C0] R13: 80000001474fe067 R14: dffffc0000000000 R15: ffffea00051d3f80 [ 272.987327][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 272.987341][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.987352][ C0] CR2: 0000000000000000 CR3: 000000012e607000 CR4: 00000000003506b0 [ 272.987367][ C0] DR0: 00002000000021c0 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.987378][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 272.987388][ C0] Call Trace: [ 272.987393][ C0] [ 272.987407][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 272.987432][ C0] ? mas_find+0xdf/0x380 [ 272.987490][ C0] unmap_vmas+0x34c/0x480 [ 272.987513][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 272.987537][ C0] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 272.987608][ C0] ? __kasan_check_write+0x14/0x20 [ 272.987625][ C0] exit_mmap+0x2a4/0xc10 [ 272.987664][ C0] ? perf_event_exit_event+0x530/0x530 [ 272.987705][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 272.987718][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 272.987738][ C0] ? __cfi_exit_aio+0x10/0x10 [ 272.987790][ C0] ? uprobe_clear_state+0x2c6/0x320 [ 272.987809][ C0] __mmput+0x92/0x340 [ 272.987830][ C0] mmput+0x4b/0x150 [ 272.987848][ C0] do_exit+0xa62/0x29f0 [ 272.987872][ C0] ? __cfi_do_exit+0x10/0x10 [ 272.987895][ C0] ? plist_check_list+0x255/0x270 [ 272.987911][ C0] ? _raw_spin_lock+0x94/0xf0 [ 272.987927][ C0] ? __kasan_check_write+0x14/0x20 [ 272.987944][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 272.987958][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 272.987975][ C0] do_group_exit+0x21b/0x2e0 [ 272.987996][ C0] ? __kasan_check_write+0x14/0x20 [ 272.988012][ C0] ? recalc_sigpending+0x168/0x1c0 [ 272.988031][ C0] get_signal+0x167c/0x1700 [ 272.988057][ C0] ? __cfi_get_signal+0x10/0x10 [ 272.988081][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 272.988102][ C0] ? do_futex+0x2e2/0x430 [ 272.988149][ C0] ? __cfi_do_futex+0x10/0x10 [ 272.988165][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 272.988184][ C0] ? __se_sys_futex+0x136/0x310 [ 272.988204][ C0] ? __kasan_check_write+0x14/0x20 [ 272.988221][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 272.988239][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 272.988257][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 272.988278][ C0] do_syscall_64+0x58/0xa0 [ 272.988293][ C0] ? clear_bhb_loop+0x30/0x80 [ 272.988312][ C0] ? clear_bhb_loop+0x30/0x80 [ 272.988332][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.988351][ C0] RIP: 0033:0x7fabf2f9fb19 [ 272.988363][ C0] Code: Unable to access opcode bytes at 0x7fabf2f9faef. [ 272.988371][ C0] RSP: 002b:00007fabf3f390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.988387][ C0] RAX: fffffffffffffe00 RBX: 00007fabf3226098 RCX: 00007fabf2f9fb19 [ 272.988399][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabf3226098 [ 272.988409][ C0] RBP: 00007fabf3226090 R08: 0000000000000000 R09: 0000000000000000 [ 272.988419][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.988429][ C0] R13: 00007fabf3226128 R14: 00007ffcd046e980 R15: 00007ffcd046ea68 [ 272.988444][ C0] [ 273.667988][ T9401] -1: renamed from syzkaller0 [ 275.273134][ T9485] device syzkaller0 entered promiscuous mode [ 275.680202][ T9600] device wg2 entered promiscuous mode [ 275.824637][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.835867][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.847509][ T9598] device bridge_slave_0 entered promiscuous mode [ 275.864742][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.871867][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.879480][ T9598] device bridge_slave_1 entered promiscuous mode [ 276.026382][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.033477][ T9598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.040780][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.047830][ T9598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.124059][ T9622] device syzkaller0 entered promiscuous mode [ 276.134673][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.143461][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.167237][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.185099][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.241061][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.249546][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.295723][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.363732][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.386600][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.400325][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.438661][ T9598] device veth0_vlan entered promiscuous mode [ 276.443994][ T28] audit: type=1400 audit(1794181257.562:158): avc: denied { create } for pid=9630 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 276.448848][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.479661][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.494221][ T9619] device bridge_slave_0 entered promiscuous mode [ 276.559534][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.568883][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.576476][ T9619] device bridge_slave_1 entered promiscuous mode [ 276.619916][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.732454][ T9598] device veth1_macvtap entered promiscuous mode [ 276.815529][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.824948][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.187585][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.199169][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.227080][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.235800][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.255731][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.262827][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.271431][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.287293][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.296941][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.303994][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.313774][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.342486][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.365122][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.448594][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.461993][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.477700][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.493894][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.549434][ T9619] device veth0_vlan entered promiscuous mode [ 277.557356][ T5908] device vlan0 left promiscuous mode [ 277.563136][ T5908] @: port 1(vlan0) entered disabled state [ 277.571017][ T5908] device team_slave_1 left promiscuous mode [ 277.577269][ T5908] bridge0: port 3(team_slave_1) entered disabled state [ 277.584722][ T5908] device bridge_slave_1 left promiscuous mode [ 277.591147][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.599201][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.211936][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.221270][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.229582][ T9692] device bridge_slave_0 entered promiscuous mode [ 278.241920][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.250432][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.263185][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.270354][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.278405][ T9692] device bridge_slave_1 entered promiscuous mode [ 278.358475][ T9619] device veth1_macvtap entered promiscuous mode [ 278.374818][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.383096][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.392279][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.413962][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.422754][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.462884][ T9719] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 278.473894][ T9719] device syzkaller0 entered promiscuous mode [ 278.624539][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.631629][ T9692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.638932][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.645961][ T9692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.719683][ T9745] device veth0_vlan left promiscuous mode [ 278.753944][ T9745] device veth0_vlan entered promiscuous mode [ 278.824279][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.831967][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.843171][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.855367][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.863667][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.197581][ T9771] device syzkaller0 entered promiscuous mode [ 279.715595][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.734325][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.803475][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.153205][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.167111][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.174170][ T8847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.182079][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.190543][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.206837][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.213902][ T8847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.297699][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.347234][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.365283][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.374458][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.439934][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.470011][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.714237][ T9692] device veth0_vlan entered promiscuous mode [ 280.730833][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.739211][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.786611][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.795819][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.803916][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.813929][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.278740][ T9692] device veth1_macvtap entered promiscuous mode [ 281.353791][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.397369][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.405908][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.434732][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.443461][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.526531][ T5908] device bridge_slave_1 left promiscuous mode [ 281.538963][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.554179][ T5908] device bridge_slave_0 left promiscuous mode [ 281.560477][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.576600][ T5908] device veth1_macvtap left promiscuous mode [ 281.582796][ T5908] device veth0_vlan left promiscuous mode [ 281.845257][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.852360][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.859947][ T9831] device bridge_slave_0 entered promiscuous mode [ 281.867183][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.874214][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.881832][ T9831] device bridge_slave_1 entered promiscuous mode [ 281.957942][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.965027][ T9831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.972335][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.979396][ T9831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.018220][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.026053][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.033867][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.045345][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.053873][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.060968][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.071202][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.079459][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.086488][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.110157][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.131610][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.148531][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.466665][ T9838] device syzkaller0 entered promiscuous mode [ 282.561906][ T9836] device syzkaller0 entered promiscuous mode [ 283.045957][ T9831] device veth0_vlan entered promiscuous mode [ 283.054625][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.067455][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.103055][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.174361][ T9856] device syzkaller0 entered promiscuous mode [ 283.313703][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.323281][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.335975][ T9865] device sit0 entered promiscuous mode [ 283.480195][ T9831] device veth1_macvtap entered promiscuous mode [ 283.634153][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.647420][ T9879] device veth0_vlan left promiscuous mode [ 283.653989][ T9879] device veth0_vlan entered promiscuous mode [ 283.722292][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.742825][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.914405][ T9883] device syzkaller0 entered promiscuous mode [ 283.925233][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.937705][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.128604][ T5908] device bridge_slave_1 left promiscuous mode [ 284.142189][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.177321][ T5908] device bridge_slave_0 left promiscuous mode [ 284.183486][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.207987][ T5908] device veth1_macvtap left promiscuous mode [ 284.214342][ T5908] device veth0_vlan left promiscuous mode [ 284.644835][ T9918] device syzkaller0 entered promiscuous mode [ 284.849232][ T9923] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 284.864892][ T9923] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 284.992930][ T9932] device wg2 left promiscuous mode [ 285.003548][ T9921] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.015757][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.031168][ T9921] device bridge_slave_0 entered promiscuous mode [ 285.038426][ T9921] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.045474][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.053419][ T9921] device bridge_slave_1 entered promiscuous mode [ 285.232899][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.241983][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.274476][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.283601][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.299886][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.306961][ T8847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.320669][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.337919][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.354492][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.361591][ T8847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.380175][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.466859][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.583114][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.641710][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.672152][ T9921] device veth0_vlan entered promiscuous mode [ 285.734238][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.752050][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.772422][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.811749][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.896074][ T9921] device veth1_macvtap entered promiscuous mode [ 285.955400][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.001904][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.551928][ T5908] device bridge_slave_1 left promiscuous mode [ 290.560562][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.612947][ T5908] device bridge_slave_0 left promiscuous mode [ 290.648874][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.680290][ T5908] device veth1_macvtap left promiscuous mode [ 290.687077][ T5908] device veth0_vlan left promiscuous mode [ 291.791264][T10063] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.798708][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.820866][T10063] device bridge_slave_0 entered promiscuous mode [ 291.845173][T10063] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.852441][T10063] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.860513][T10063] device bridge_slave_1 entered promiscuous mode [ 292.003215][ T5908] device bridge_slave_1 left promiscuous mode [ 292.010031][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.033893][ T5908] device bridge_slave_0 left promiscuous mode [ 292.067646][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.098994][ T5908] device veth1_macvtap left promiscuous mode [ 292.105657][ T5908] device veth0_vlan left promiscuous mode [ 292.242921][T10068] cgroup: fork rejected by pids controller in /syz0 [ 292.646958][T10107] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 292.652990][T10110] ªªªªª6: renamed from veth0_vlan [ 292.665630][T10131] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 292.774962][T10148] @: port 1(vlan0) entered blocking state [ 292.788175][T10148] @: port 1(vlan0) entered disabled state [ 292.796635][T10148] device vlan0 entered promiscuous mode [ 292.915472][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.927060][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.031506][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.045975][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.054405][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.061470][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.069785][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.078261][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.093888][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.100985][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.111204][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.119946][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.128328][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.148400][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.158579][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.258982][T10063] device veth0_vlan entered promiscuous mode [ 293.284211][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.297703][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.307325][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.327576][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.337926][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.345791][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.397810][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.427976][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.437513][T10063] device veth1_macvtap entered promiscuous mode [ 293.459798][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.468456][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.486022][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.549510][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.583376][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.747969][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 210 seconds. [ 293.756076][ T29] Not tainted syzkaller #0 [ 293.761337][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.770042][ T29] task:rcu_tasks_kthre state:D stack:28800 pid:11 ppid:2 flags:0x00004000 [ 293.779295][ T29] Call Trace: [ 293.782568][ T29] [ 293.785488][ T29] __schedule+0xcb3/0x1700 [ 293.789925][ T29] ? release_firmware_map_entry+0x190/0x190 [ 293.795823][ T29] ? __queue_work+0x9f2/0xd50 [ 293.800513][ T29] schedule+0xbd/0x170 [ 293.804581][ T29] schedule_timeout+0xba/0x340 [ 293.809365][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 293.814735][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 293.820549][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 293.825392][ T29] wait_for_common+0x364/0x640 [ 293.830177][ T29] ? wait_for_completion+0x20/0x20 [ 293.835285][ T29] wait_for_completion+0x18/0x20 [ 293.840228][ T29] __synchronize_srcu+0x173/0x200 [ 293.845244][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 293.850977][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 293.856429][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 293.861813][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 293.868163][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 293.873705][ T29] synchronize_srcu+0x1c5/0x1d0 [ 293.878559][ T29] rcu_tasks_postscan+0x10/0x20 [ 293.883401][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 293.888345][ T29] ? __kasan_check_write+0x14/0x20 [ 293.893446][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 293.898909][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 293.904358][ T29] ? mutex_lock+0x93/0x1b0 [ 293.908821][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 293.913662][ T29] ? schedule_timeout+0x1a7/0x340 [ 293.918697][ T29] rcu_tasks_kthread+0x6a/0x90 [ 293.923451][ T29] kthread+0x281/0x320 [ 293.927534][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 293.932987][ T29] ? __cfi_kthread+0x10/0x10 [ 293.937577][ T29] ret_from_fork+0x1f/0x30 [ 293.941988][ T29] [ 293.996942][ T29] NMI backtrace for cpu 0 [ 294.001312][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 294.008511][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 294.018568][ T29] Call Trace: [ 294.021851][ T29] [ 294.024787][ T29] __dump_stack+0x21/0x24 [ 294.029126][ T29] dump_stack_lvl+0x110/0x170 [ 294.033804][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 294.038834][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 294.045442][ T29] dump_stack+0x15/0x24 [ 294.049624][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 294.054605][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 294.060156][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 294.065616][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 294.071679][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.077666][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.083652][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 294.089636][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 294.095529][ T29] watchdog+0xde1/0xf30 [ 294.099690][ T29] ? __cfi_watchdog+0x10/0x10 [ 294.104375][ T29] ? __kasan_check_read+0x11/0x20 [ 294.109399][ T29] ? __kthread_parkme+0x13a/0x180 [ 294.114430][ T29] kthread+0x281/0x320 [ 294.118535][ T29] ? __cfi_watchdog+0x10/0x10 [ 294.123215][ T29] ? __cfi_kthread+0x10/0x10 [ 294.127808][ T29] ret_from_fork+0x1f/0x30 [ 294.132230][ T29] [ 294.135361][ T29] Sending NMI from CPU 0 to CPUs 1: [ 294.140584][ C1] NMI backtrace for cpu 1 [ 294.140594][ C1] CPU: 1 PID: 10224 Comm: syz.0.2350 Not tainted syzkaller #0 [ 294.140611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 294.140621][ C1] RIP: 0010:error_return+0x0/0x20 [ 294.140645][ C1] Code: d0 48 c1 ea 20 0f 30 0f 1f 44 00 00 48 8d 7c 24 08 e8 c4 3a db ff 48 89 c7 eb 89 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 84 24 88 00 00 00 03 0f 84 3f fd ff ff e9 dd fc ff ff 90 90 90 [ 294.140659][ C1] RSP: 0018:ffffc90004016e18 EFLAGS: 00000046 [ 294.140675][ C1] RAX: ffff88813fbb3cc0 RBX: 0000000000000000 RCX: 9ac0213ee432a700 [ 294.140687][ C1] RDX: 1ffffffff0f6ea08 RSI: 0000000000000000 RDI: ffffc90004016e18 [ 294.140698][ C1] RBP: ffffc90004016e19 R08: ffffffff87b75048 R09: ffffffff87b75058 [ 294.140710][ C1] R10: ffffffff87b75043 R11: 1ffffffff0f6ea08 R12: 0000000000000000 [ 294.140721][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.140731][ C1] FS: 00007fabf3f186c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 294.140746][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.140758][ C1] CR2: 0000200000040000 CR3: 0000000165158000 CR4: 00000000003506a0 [ 294.140772][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 294.140782][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 294.140792][ C1] Call Trace: [ 294.140797][ C1] [ 294.140805][ C1] ? __mark_chain_precision+0xd26/0x2100 [ 294.140920][ C1] ? mark_chain_precision+0x90/0x90 [ 294.140939][ C1] ? kasan_set_track+0x1/0x70 [ 294.140958][ C1] ? __cfi_verbose+0x10/0x10 [ 294.140976][ C1] ? __cfi_disasm_kfunc_name+0x10/0x10 [ 294.140998][ C1] ? is_branch_taken+0xd77/0xff0 [ 294.141042][ C1] do_check+0x9685/0xf140 [ 294.141076][ C1] ? init_func_state+0x640/0x640 [ 294.141100][ C1] do_check_common+0x11c3/0x1970 [ 294.141127][ C1] bpf_check+0xa04e/0x10e90 [ 294.141149][ C1] ? perf_tp_event+0x9c0/0xa20 [ 294.141173][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 294.141192][ C1] ? __cfi_bpf_check+0x10/0x10 [ 294.141223][ C1] ? 0xffffffffa0000960 [ 294.141234][ C1] ? is_bpf_text_address+0x177/0x190 [ 294.141304][ C1] ? kernel_text_address+0xa0/0xd0 [ 294.141324][ C1] ? __kernel_text_address+0xd/0x30 [ 294.141344][ C1] ? unwind_get_return_address+0x4d/0x90 [ 294.141363][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 294.141385][ C1] ? arch_stack_walk+0xfc/0x150 [ 294.141412][ C1] ? stack_trace_save+0xa6/0xf0 [ 294.141433][ C1] ? __stack_depot_save+0x36/0x490 [ 294.141509][ C1] ? kasan_set_track+0x60/0x70 [ 294.141527][ C1] ? kasan_set_track+0x4b/0x70 [ 294.141544][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 294.141559][ C1] ? __kasan_kmalloc+0x95/0xb0 [ 294.141578][ C1] ? kmalloc_trace+0x40/0xb0 [ 294.141593][ C1] ? selinux_bpf_prog_alloc+0x51/0x140 [ 294.141664][ C1] ? security_bpf_prog_alloc+0x73/0xa0 [ 294.141701][ C1] ? bpf_prog_load+0xa03/0x1670 [ 294.141717][ C1] ? __sys_bpf+0x57b/0x850 [ 294.141731][ C1] ? __x64_sys_bpf+0x7c/0x90 [ 294.141745][ C1] ? x64_sys_call+0x488/0x9a0 [ 294.141763][ C1] ? do_syscall_64+0x4c/0xa0 [ 294.141778][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.141805][ C1] ? irqentry_exit+0x37/0x40 [ 294.141825][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 294.141845][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 294.141867][ C1] ? refcount_dec_and_lock_irqsave+0xc1/0x100 [ 294.141909][ C1] ? memset+0x35/0x40 [ 294.141924][ C1] ? bpf_obj_name_cpy+0x193/0x1e0 [ 294.141947][ C1] bpf_prog_load+0x10f4/0x1670 [ 294.141966][ C1] ? map_freeze+0x3a0/0x3a0 [ 294.141986][ C1] ? selinux_bpf+0xc7/0xf0 [ 294.142007][ C1] ? security_bpf+0x93/0xb0 [ 294.142021][ C1] __sys_bpf+0x57b/0x850 [ 294.142036][ C1] ? bpf_link_show_fdinfo+0x330/0x330 [ 294.142057][ C1] ? debug_smp_processor_id+0x17/0x20 [ 294.142079][ C1] ? perf_trace_sys_enter+0x30/0x150 [ 294.142097][ C1] __x64_sys_bpf+0x7c/0x90 [ 294.142111][ C1] x64_sys_call+0x488/0x9a0 [ 294.142129][ C1] do_syscall_64+0x4c/0xa0 [ 294.142143][ C1] ? clear_bhb_loop+0x30/0x80 [ 294.142162][ C1] ? clear_bhb_loop+0x30/0x80 [ 294.142181][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.142200][ C1] RIP: 0033:0x7fabf2f9fb19 [ 294.142246][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.142259][ C1] RSP: 002b:00007fabf3f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.142276][ C1] RAX: ffffffffffffffda RBX: 00007fabf3226180 RCX: 00007fabf2f9fb19 [ 294.142288][ C1] RDX: 0000000000000048 RSI: 0000200000000d40 RDI: 0000000000000005 [ 294.142298][ C1] RBP: 00007fabf3037b70 R08: 0000000000000000 R09: 0000000000000000 [ 294.142308][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.142318][ C1] R13: 00007fabf3226218 R14: 00007fabf3226180 R15: 00007ffcd046ea68 [ 294.142334][ C1] [ 295.767563][ T5908] device bridge_slave_1 left promiscuous mode [ 295.779774][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.829163][ T5908] device bridge_slave_0 left promiscuous mode [ 295.836448][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.900351][ T5908] device veth1_macvtap left promiscuous mode [ 295.910897][ T5908] device veth0_vlan left promiscuous mode [ 296.059138][T10268] bridge0: port 3(team_slave_1) entered blocking state [ 296.066081][T10268] bridge0: port 3(team_slave_1) entered disabled state [ 296.073566][T10268] device team_slave_1 entered promiscuous mode [ 296.096121][T10279] device syzkaller0 entered promiscuous mode [ 296.188372][T10274] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.196693][T10274] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.218570][T10274] device bridge_slave_0 entered promiscuous mode [ 296.225842][T10274] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.233527][T10274] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.241133][T10274] device bridge_slave_1 entered promiscuous mode [ 296.324935][T10274] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.332033][T10274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.339339][T10274] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.346367][T10274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.406465][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.417358][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.425962][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.443958][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.459448][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.477760][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.490989][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.513447][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.531986][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.547024][T10274] device veth0_vlan entered promiscuous mode [ 296.570389][T10306] device syzkaller0 entered promiscuous mode [ 296.591893][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.617983][T10274] device veth1_macvtap entered promiscuous mode [ 296.624269][ T28] audit: type=1400 audit(1794181277.742:159): avc: denied { create } for pid=10305 comm="syz.6.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 296.683612][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.716610][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.697301][T10342] device syzkaller0 entered promiscuous mode [ 297.797204][T10342] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 297.805922][T10342] syzkaller0: Linktype set failed because interface is up [ 297.843027][T10353] device sit0 left promiscuous mode [ 297.918574][T10348] device wg2 entered promiscuous mode [ 297.941794][T10352] device sit0 entered promiscuous mode [ 298.619718][T10371] Ã2®|: renamed from team_slave_1 [ 298.658575][ T7181] device bridge_slave_1 left promiscuous mode [ 298.664731][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.702315][ T7181] device bridge_slave_0 left promiscuous mode [ 298.757153][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.813968][ T7181] device veth1_macvtap left promiscuous mode [ 298.825555][ T7181] device veth0_vlan left promiscuous mode [ 299.384262][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.391377][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.398906][T10355] device bridge_slave_0 entered promiscuous mode [ 299.406015][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.413090][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.420811][T10355] device bridge_slave_1 entered promiscuous mode [ 299.596212][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.603300][T10355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.610625][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.617730][T10355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.660300][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.668646][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.676033][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.688377][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.696647][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.703708][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.755509][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.777295][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.784381][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.799807][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.812988][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.849702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.881896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.894503][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.921158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.930784][T10355] device veth0_vlan entered promiscuous mode [ 299.972430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.985867][T10355] device veth1_macvtap entered promiscuous mode [ 300.021304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.052722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.069563][T10458] device sit0 left promiscuous mode [ 300.937621][ T7181] device bridge_slave_1 left promiscuous mode [ 300.943949][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.952940][ T7181] device bridge_slave_0 left promiscuous mode [ 300.959331][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.037936][ T7181] device veth1_macvtap left promiscuous mode [ 301.044030][ T7181] device veth0_vlan left promiscuous mode [ 301.255145][ T28] audit: type=1400 audit(1794181282.372:160): avc: denied { create } for pid=10483 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 301.589842][T10510] tap0: tun_chr_ioctl cmd 1074025677 [ 301.605021][T10510] tap0: linktype set to 270 [ 301.646520][T10493] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.653647][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.662557][T10493] device bridge_slave_0 entered promiscuous mode [ 301.681912][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.689221][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.709198][T10493] device bridge_slave_1 entered promiscuous mode [ 301.886173][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.893282][T10493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.900570][T10493] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.907630][T10493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.937021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.945155][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.957603][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.990102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.000194][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.007269][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.022124][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.030640][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.037719][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.055085][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.089739][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.124431][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.146696][T10546] device wg2 left promiscuous mode [ 302.213342][T10493] device veth0_vlan entered promiscuous mode [ 302.231487][T10549] device wg2 entered promiscuous mode [ 302.242016][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.253133][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.261346][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.534600][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.562983][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.579756][T10493] device veth1_macvtap entered promiscuous mode [ 302.678950][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.726068][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.735073][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.780428][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.819381][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.259329][T10581] ------------[ cut here ]------------ [ 303.264845][T10581] WARNING: CPU: 1 PID: 10581 at kernel/events/core.c:6564 perf_pending_task+0x3ba/0x4e0 [ 303.275159][T10581] Modules linked in: [ 303.279104][T10581] CPU: 1 PID: 10581 Comm: syz.0.2441 Not tainted syzkaller #0 [ 303.286589][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 303.296725][T10581] RIP: 0010:perf_pending_task+0x3ba/0x4e0 [ 303.302490][T10581] Code: 48 ff ff eb 05 e8 f6 a5 d7 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e2 a5 d7 ff e8 79 b0 66 ff eb 98 e8 d6 a5 d7 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2e 00 0f 85 bf fe ff [ 303.322149][T10581] RSP: 0018:ffffc90001297880 EFLAGS: 00010293 [ 303.328242][T10581] RAX: ffffffff8199cc4a RBX: ffff888164db4810 RCX: ffff88811563bcc0 [ 303.336216][T10581] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 303.344234][T10581] RBP: ffffc900012978b0 R08: 0000000000000003 R09: 0000000000000004 [ 303.352271][T10581] R10: 0000000000000000 R11: ffffffff8199c890 R12: ffff88811563bcc0 [ 303.360289][T10581] R13: ffff88811fe4b4c8 R14: 1ffff1102c9b68da R15: ffff888164db46d0 [ 303.368281][T10581] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 303.377257][T10581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.383835][T10581] CR2: 0000000100000001 CR3: 000000000700f000 CR4: 00000000003506a0 [ 303.391854][T10581] DR0: 0000200000001ac0 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.399848][T10581] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 303.407860][T10581] Call Trace: [ 303.411136][T10581] [ 303.414066][T10581] task_work_run+0x1e1/0x250 [ 303.418702][T10581] ? __cfi_task_work_run+0x10/0x10 [ 303.423819][T10581] ? mm_update_next_owner+0x56/0x650 [ 303.429162][T10581] ? __kasan_check_write+0x14/0x20 [ 303.434274][T10581] do_exit+0xb0d/0x29f0 [ 303.438493][T10581] ? _raw_spin_lock_irq+0x95/0xf0 [ 303.443525][T10581] ? __cfi_do_exit+0x10/0x10 [ 303.448155][T10581] ? __kasan_check_write+0x14/0x20 [ 303.453269][T10581] ? perf_pending_task+0x39a/0x4e0 [ 303.458439][T10581] ? __kasan_check_write+0x14/0x20 [ 303.463549][T10581] ? _raw_spin_lock_irq+0x95/0xf0 [ 303.468636][T10581] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 303.474185][T10581] do_group_exit+0x21b/0x2e0 [ 303.478826][T10581] ? __kasan_check_write+0x14/0x20 [ 303.483945][T10581] ? recalc_sigpending+0x168/0x1c0 [ 303.489104][T10581] get_signal+0x167c/0x1700 [ 303.493610][T10581] ? __cfi_get_signal+0x10/0x10 [ 303.498501][T10581] arch_do_signal_or_restart+0xd1/0x11c0 [ 303.504134][T10581] ? do_futex+0x2e2/0x430 [ 303.508505][T10581] ? __cfi_send_sig_perf+0x10/0x10 [ 303.513621][T10581] ? __cfi_do_futex+0x10/0x10 [ 303.518342][T10581] ? __kasan_check_write+0x14/0x20 [ 303.523458][T10581] ? _raw_spin_lock_irq+0x95/0xf0 [ 303.528543][T10581] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 303.534715][T10581] ? __se_sys_futex+0x136/0x310 [ 303.539626][T10581] exit_to_user_mode_loop+0x7a/0xb0 [ 303.544825][T10581] exit_to_user_mode_prepare+0x87/0xd0 [ 303.550326][T10581] syscall_exit_to_user_mode+0x1a/0x30 [ 303.555785][T10581] do_syscall_64+0x58/0xa0 [ 303.560243][T10581] ? clear_bhb_loop+0x30/0x80 [ 303.564923][T10581] ? clear_bhb_loop+0x30/0x80 [ 303.569645][T10581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.575545][T10581] RIP: 0033:0x7fabf2f9fb19 [ 303.580007][T10581] Code: Unable to access opcode bytes at 0x7fabf2f9faef. [ 303.587119][T10581] RSP: 002b:00007fabf3f390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.595539][T10581] RAX: fffffffffffffe00 RBX: 00007fabf3226098 RCX: 00007fabf2f9fb19 [ 303.603553][T10581] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabf3226098 [ 303.611547][T10581] RBP: 00007fabf3226090 R08: 0000000000000000 R09: 0000000000000000 [ 303.619574][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.627566][T10581] R13: 00007fabf3226128 R14: 00007ffcd046e980 R15: 00007ffcd046ea68 [ 303.635549][T10581] [ 303.638600][T10581] ---[ end trace 0000000000000000 ]--- [ 304.517139][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.524346][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.532083][T10608] device bridge_slave_0 entered promiscuous mode [ 304.540399][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.548076][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.556005][T10608] device bridge_slave_1 entered promiscuous mode [ 304.706680][T10627] device syzkaller0 entered promiscuous mode [ 304.784342][ T7181] device bridge_slave_1 left promiscuous mode [ 304.791008][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.799060][ T7181] device bridge_slave_0 left promiscuous mode [ 304.805734][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.816285][ T7181] device veth1_macvtap left promiscuous mode [ 304.826428][ T7181] device veth0_vlan left promiscuous mode [ 305.098594][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.108443][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.141665][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.181154][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.189464][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.196524][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.204043][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.213068][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.221703][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.228779][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.270938][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.328844][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.343429][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.378144][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.390754][T10608] device veth0_vlan entered promiscuous mode [ 305.403159][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.416063][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.424028][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.440299][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.453359][T10608] device veth1_macvtap entered promiscuous mode [ 305.474916][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.599735][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.710785][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.400050][ T28] audit: type=1400 audit(1794181291.502:161): avc: denied { setattr } for pid=10680 comm="syz.6.2468" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 314.258173][ T7181] device bridge_slave_1 left promiscuous mode [ 314.264374][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.272383][ T7181] device bridge_slave_0 left promiscuous mode [ 314.278607][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.288177][ T7181] device veth1_macvtap left promiscuous mode [ 314.294295][ T7181] device veth0_vlan left promiscuous mode [ 314.866890][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 231 seconds. [ 314.875093][ T29] Tainted: G W syzkaller #0 [ 314.881563][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.890270][ T29] task:rcu_tasks_kthre state:D stack:28800 pid:11 ppid:2 flags:0x00004000 [ 314.899512][ T29] Call Trace: [ 314.902793][ T29] [ 314.905725][ T29] __schedule+0xcb3/0x1700 [ 314.910176][ T29] ? release_firmware_map_entry+0x190/0x190 [ 314.916084][ T29] ? __queue_work+0x9f2/0xd50 [ 314.920798][ T29] schedule+0xbd/0x170 [ 314.924875][ T29] schedule_timeout+0xba/0x340 [ 314.929694][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 314.935081][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 314.940919][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 314.945786][ T29] wait_for_common+0x364/0x640 [ 314.950600][ T29] ? wait_for_completion+0x20/0x20 [ 314.955727][ T29] wait_for_completion+0x18/0x20 [ 314.960701][ T29] __synchronize_srcu+0x173/0x200 [ 314.965734][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 314.971486][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 314.976978][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 314.982365][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 314.988742][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 314.994304][ T29] synchronize_srcu+0x1c5/0x1d0 [ 314.999197][ T29] rcu_tasks_postscan+0x10/0x20 [ 315.004059][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 315.009080][ T29] ? __kasan_check_write+0x14/0x20 [ 315.014206][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 315.019688][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 315.025141][ T29] ? mutex_lock+0x93/0x1b0 [ 315.029567][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 315.034415][ T29] ? schedule_timeout+0x1a7/0x340 [ 315.039477][ T29] rcu_tasks_kthread+0x6a/0x90 [ 315.044251][ T29] kthread+0x281/0x320 [ 315.048345][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 315.053807][ T29] ? __cfi_kthread+0x10/0x10 [ 315.058408][ T29] ret_from_fork+0x1f/0x30 [ 315.062822][ T29] [ 315.066158][ T29] NMI backtrace for cpu 1 [ 315.070487][ T29] CPU: 1 PID: 29 Comm: khungtaskd Tainted: G W syzkaller #0 [ 315.079154][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 315.089200][ T29] Call Trace: [ 315.092464][ T29] [ 315.095389][ T29] __dump_stack+0x21/0x24 [ 315.099706][ T29] dump_stack_lvl+0x110/0x170 [ 315.104365][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 315.109370][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 315.115946][ T29] dump_stack+0x15/0x24 [ 315.120083][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 315.125006][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 315.130541][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 315.135995][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 315.142061][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 315.148035][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 315.154005][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 315.159975][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 315.165853][ T29] watchdog+0xde1/0xf30 [ 315.170024][ T29] ? __cfi_watchdog+0x10/0x10 [ 315.174685][ T29] ? __kasan_check_read+0x11/0x20 [ 315.179697][ T29] ? __kthread_parkme+0x13a/0x180 [ 315.184704][ T29] kthread+0x281/0x320 [ 315.188754][ T29] ? __cfi_watchdog+0x10/0x10 [ 315.193411][ T29] ? __cfi_kthread+0x10/0x10 [ 315.197984][ T29] ret_from_fork+0x1f/0x30 [ 315.202386][ T29] [ 315.205471][ T29] Sending NMI from CPU 1 to CPUs 0: [ 315.210690][ C0] NMI backtrace for cpu 0 [ 315.210701][ C0] CPU: 0 PID: 7177 Comm: kworker/u4:32 Tainted: G W syzkaller #0 [ 315.210720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 315.210729][ C0] Workqueue: events_unbound toggle_allocation_gate [ 315.210755][ C0] RIP: 0010:insn_get_opcode+0x7d2/0xa40 [ 315.210775][ C0] Code: a8 01 00 00 41 8b 1f 89 de 81 e6 c0 07 08 00 31 ff e8 92 02 7b fc 81 e3 c0 07 08 00 74 27 e8 65 fe 7a fc 48 8b 85 78 ff ff ff <42> 0f b6 04 20 84 c0 48 8b 9d 70 ff ff ff 0f 85 8c 01 00 00 c6 03 [ 315.210788][ C0] RSP: 0018:ffffc9000f9df798 EFLAGS: 00000293 [ 315.210801][ C0] RAX: 1ffff92001f3bf3f RBX: 1ffff92001f3bf45 RCX: ffff888134e62880 [ 315.210814][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.210824][ C0] RBP: ffffc9000f9df858 R08: ffffc9000f9dfa37 R09: ffffc9000f9df9e0 [ 315.210836][ C0] R10: dffffc0000000000 R11: fffff52001f3bf47 R12: dffffc0000000000 [ 315.210848][ C0] R13: 0000000000000000 R14: ffffc9000f9dfa2c R15: ffffc9000f9dfa40 [ 315.210859][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 315.210873][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.210885][ C0] CR2: 00007f9410647199 CR3: 000000000700f000 CR4: 00000000003506b0 [ 315.210899][ C0] DR0: 00002000000014c0 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.210909][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 315.210920][ C0] Call Trace: [ 315.210924][ C0] [ 315.210935][ C0] insn_get_modrm+0x21d/0x750 [ 315.210953][ C0] insn_get_displacement+0x13f/0x9c0 [ 315.210970][ C0] insn_get_immediate+0x31d/0x12b0 [ 315.210988][ C0] insn_decode+0x3ba/0x560 [ 315.211004][ C0] ? kmem_cache_alloc+0xae/0x320 [ 315.211119][ C0] __jump_label_patch+0x105/0x450 [ 315.211143][ C0] ? arch_jump_label_transform_queue+0xe0/0xe0 [ 315.211168][ C0] ? kmem_cache_alloc+0xae/0x320 [ 315.211188][ C0] ? kmem_cache_alloc+0xbd/0x320 [ 315.211209][ C0] ? kmem_cache_alloc+0xaf/0x320 [ 315.211229][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 315.211247][ C0] ? mutex_unlock+0x8f/0x230 [ 315.211263][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 315.211281][ C0] ? text_poke_queue+0xde/0x1a0 [ 315.211304][ C0] arch_jump_label_transform_queue+0x4d/0xe0 [ 315.211327][ C0] __jump_label_update+0x187/0x3b0 [ 315.211389][ C0] jump_label_update+0x39b/0x450 [ 315.211409][ C0] static_key_disable_cpuslocked+0xc9/0x1a0 [ 315.211430][ C0] static_key_disable+0x1a/0x30 [ 315.211449][ C0] toggle_allocation_gate+0x3a5/0x440 [ 315.211468][ C0] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 315.211488][ C0] ? finish_task_switch+0x16b/0x7c0 [ 315.211511][ C0] ? __schedule+0xcbb/0x1700 [ 315.211530][ C0] process_one_work+0x717/0xc30 [ 315.211549][ C0] worker_thread+0xa4d/0x11d0 [ 315.211571][ C0] kthread+0x281/0x320 [ 315.211587][ C0] ? __cfi_worker_thread+0x10/0x10 [ 315.211603][ C0] ? __cfi_kthread+0x10/0x10 [ 315.211620][ C0] ret_from_fork+0x1f/0x30 [ 315.211642][ C0] [ 315.268010][T10726] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.519541][T10726] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.528543][T10726] device bridge_slave_0 entered promiscuous mode [ 315.541533][T10734] tap0: tun_chr_ioctl cmd 1074025677 [ 315.558755][T10734] tap0: linktype set to 804 [ 315.564500][T10726] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.573207][T10726] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.586064][T10726] device bridge_slave_1 entered promiscuous mode [ 315.829154][T10745] device syzkaller0 entered promiscuous mode [ 315.887952][T10745] syzkaller0: tun_net_xmit 1280 [ 315.939903][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.953740][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.051800][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.086709][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.206437][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.213545][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.261902][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.270392][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.511847][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.518945][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.526378][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.543220][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.554107][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.563149][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.592958][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.603674][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.613686][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.641324][T10726] device veth0_vlan entered promiscuous mode [ 316.652198][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.663012][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.678182][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.685906][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.704858][T10726] device veth1_macvtap entered promiscuous mode [ 316.716975][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.725402][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.734683][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.816336][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.874206][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.883084][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.898153][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.888042][ T43] device bridge_slave_1 left promiscuous mode [ 317.894313][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.902019][ T43] device bridge_slave_0 left promiscuous mode [ 317.908191][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.916892][ T43] device veth1_macvtap left promiscuous mode [ 317.923053][ T43] device veth0_vlan left promiscuous mode [ 318.699295][T10832] device macsec0 entered promiscuous mode [ 319.071305][T10837] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.078533][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.092241][T10837] device bridge_slave_0 entered promiscuous mode [ 319.100310][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.107668][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.115367][T10837] device bridge_slave_1 entered promiscuous mode [ 319.331659][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.352869][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.477398][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.531290][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.563597][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.570693][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.578954][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.587722][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.606920][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.614000][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.677290][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.696300][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.739439][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.783679][T10837] device veth0_vlan entered promiscuous mode [ 319.837726][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.856228][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.909698][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.924178][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.981013][T10837] device veth1_macvtap entered promiscuous mode [ 320.036217][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.060370][T10891] tap0: tun_chr_ioctl cmd 1074025673 [ 320.098165][T10890] tap0: tun_chr_ioctl cmd 1074025675 [ 320.107123][T10890] tap0: persist enabled [ 320.158650][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.172910][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.196465][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.234214][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.257537][ T43] device bridge_slave_1 left promiscuous mode [ 321.263697][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.273827][ T43] device bridge_slave_0 left promiscuous mode [ 321.280166][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.288885][ T43] device veth1_macvtap left promiscuous mode [ 321.294934][ T43] device veth0_vlan left promiscuous mode [ 322.576635][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.586875][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.594540][T10968] device bridge_slave_0 entered promiscuous mode [ 322.631232][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.657848][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.685129][T10968] device bridge_slave_1 entered promiscuous mode [ 322.861096][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.868183][T10968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.875464][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.882508][T10968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.928487][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.973234][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.991489][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.016120][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.025249][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.032325][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.046703][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.061775][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.068858][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.146418][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.154850][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.187893][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.221733][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.294900][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.325292][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.357094][T10968] device veth0_vlan entered promiscuous mode [ 323.442464][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.455133][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.479507][T10968] device veth1_macvtap entered promiscuous mode [ 323.649784][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.662168][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.689802][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.785484][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.811000][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.108416][ T7184] device bridge_slave_1 left promiscuous mode [ 325.114607][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.122638][ T7184] device bridge_slave_0 left promiscuous mode [ 325.129014][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.139321][ T7184] device veth1_macvtap left promiscuous mode [ 325.145403][ T7184] device veth0_vlan left promiscuous mode [ 325.727255][ T28] audit: type=1400 audit(1794181306.852:162): avc: denied { create } for pid=11050 comm="syz.0.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 326.539361][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.547196][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.597151][T11066] device bridge_slave_0 entered promiscuous mode [ 326.721605][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.731719][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.746802][T11066] device bridge_slave_1 entered promiscuous mode [ 327.078976][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.086061][T11066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.156663][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.172544][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.181002][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.201569][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.210367][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.219651][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.226686][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.236736][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.256366][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.263445][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.298043][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.306128][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.352903][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.389371][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.426570][T11066] device veth0_vlan entered promiscuous mode [ 327.433985][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.447089][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.487065][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.508492][T11066] device veth1_macvtap entered promiscuous mode [ 327.564301][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.578472][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.507592][ T7184] device bridge_slave_1 left promiscuous mode [ 328.513750][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.539376][ T7184] device bridge_slave_0 left promiscuous mode [ 328.547103][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.562668][ T7184] device veth1_macvtap left promiscuous mode [ 328.568786][ T7184] device veth0_vlan left promiscuous mode [ 329.503233][T11173] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 329.536839][T11173] syzkaller1: group set to 1 [ 329.870527][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.877818][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.898751][T11178] device bridge_slave_0 entered promiscuous mode [ 329.939420][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.953978][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.962777][T11178] device bridge_slave_1 entered promiscuous mode [ 330.279742][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.286819][T11178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.294090][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.301141][T11178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.435272][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.456184][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.479915][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.505815][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.538010][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.562641][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.569741][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.609094][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.631116][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.638203][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.735967][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.762473][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.811410][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.844010][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.870565][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.902409][T11178] device veth0_vlan entered promiscuous mode [ 330.923537][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.939800][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.977185][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.007424][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.039328][T11178] device veth1_macvtap entered promiscuous mode [ 331.071274][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.086551][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.128032][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.159131][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.276130][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.248654][ T7184] device bridge_slave_1 left promiscuous mode [ 332.254838][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.262601][ T7184] device bridge_slave_0 left promiscuous mode [ 332.268780][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.276887][ T7184] device veth1_macvtap left promiscuous mode [ 332.283087][ T7184] device veth0_vlan left promiscuous mode [ 333.256326][T11308] -: renamed from syzkaller0 [ 333.585590][T11349] device syzkaller0 entered promiscuous mode [ 333.731540][T11349] device syzkaller0 entered promiscuous mode [ 333.863211][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.870322][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.878260][T11334] device bridge_slave_0 entered promiscuous mode [ 333.885632][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.893086][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.900719][T11334] device bridge_slave_1 entered promiscuous mode [ 333.914929][T11359] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.070242][T11359] device syzkaller0 entered promiscuous mode [ 334.229687][T11382] device veth1_macvtap left promiscuous mode [ 334.281884][T11382] device veth1_macvtap entered promiscuous mode [ 334.289571][T11382] device macsec0 entered promiscuous mode [ 334.592943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.657518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.665165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.673844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.682250][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.689318][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.908398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.918110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.930788][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.937867][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.977339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.040027][T11408] device syzkaller0 entered promiscuous mode [ 335.071717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.088257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.307313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.317887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.350749][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 252 seconds. [ 335.358873][ T29] Tainted: G W syzkaller #0 [ 335.365289][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.374017][ T29] task:rcu_tasks_kthre state:D stack:28800 pid:11 ppid:2 flags:0x00004000 [ 335.376651][T11334] device veth0_vlan entered promiscuous mode [ 335.383258][ T29] Call Trace: [ 335.392525][ T29] [ 335.395443][ T29] __schedule+0xcb3/0x1700 [ 335.399868][ T29] ? release_firmware_map_entry+0x190/0x190 [ 335.405749][ T29] ? __queue_work+0x9f2/0xd50 [ 335.410427][ T29] schedule+0xbd/0x170 [ 335.414485][ T29] schedule_timeout+0xba/0x340 [ 335.419251][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 335.424621][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 335.430430][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 335.435272][ T29] wait_for_common+0x364/0x640 [ 335.440042][ T29] ? wait_for_completion+0x20/0x20 [ 335.445148][ T29] wait_for_completion+0x18/0x20 [ 335.450110][ T29] __synchronize_srcu+0x173/0x200 [ 335.455129][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 335.460848][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 335.466294][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 335.471670][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 335.478003][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 335.483537][ T29] synchronize_srcu+0x1c5/0x1d0 [ 335.488389][ T29] rcu_tasks_postscan+0x10/0x20 [ 335.493231][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 335.498182][ T29] ? __kasan_check_write+0x14/0x20 [ 335.503287][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 335.508765][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 335.514209][ T29] ? mutex_lock+0x93/0x1b0 [ 335.518631][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 335.523472][ T29] ? schedule_timeout+0x1a7/0x340 [ 335.528508][ T29] rcu_tasks_kthread+0x6a/0x90 [ 335.533267][ T29] kthread+0x281/0x320 [ 335.537339][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 335.542791][ T29] ? __cfi_kthread+0x10/0x10 [ 335.547383][ T29] ret_from_fork+0x1f/0x30 [ 335.551793][ T29] [ 335.641179][ T29] NMI backtrace for cpu 1 [ 335.645541][ T29] CPU: 1 PID: 29 Comm: khungtaskd Tainted: G W syzkaller #0 [ 335.654233][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 335.664291][ T29] Call Trace: [ 335.667562][ T29] [ 335.670559][ T29] __dump_stack+0x21/0x24 [ 335.674889][ T29] dump_stack_lvl+0x110/0x170 [ 335.679564][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 335.684581][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x69a/0x960 [ 335.691171][ T29] dump_stack+0x15/0x24 [ 335.695319][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 335.700256][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 335.705804][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 335.711256][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 335.717316][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.723292][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.729267][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 335.735246][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 335.741134][ T29] watchdog+0xde1/0xf30 [ 335.745288][ T29] ? __cfi_watchdog+0x10/0x10 [ 335.749961][ T29] ? __kasan_check_read+0x11/0x20 [ 335.754981][ T29] ? __kthread_parkme+0x13a/0x180 [ 335.760001][ T29] kthread+0x281/0x320 [ 335.764062][ T29] ? __cfi_watchdog+0x10/0x10 [ 335.768731][ T29] ? __cfi_kthread+0x10/0x10 [ 335.773318][ T29] ret_from_fork+0x1f/0x30 [ 335.777732][ T29] [ 335.780899][ T29] Sending NMI from CPU 1 to CPUs 0: [ 335.786099][ C0] NMI backtrace for cpu 0 [ 335.786111][ C0] CPU: 0 PID: 11424 Comm: syz.0.2638 Tainted: G W syzkaller #0 [ 335.786129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 335.786138][ C0] RIP: 0010:hrtimer_interrupt+0x4b4/0x8c0 [ 335.786174][ C0] Code: df 44 8b 75 cc eb 23 e8 1a 25 0e 00 48 89 df be 0f 00 00 00 e8 fd ea ff ff 49 89 c7 eb 0c e8 03 25 0e 00 4d 89 ef 4c 8b 6d 98 <48> 8b 45 80 42 80 3c 20 00 74 08 4c 89 ef e8 c9 c3 53 00 4d 89 7d [ 335.786188][ C0] RSP: 0018:ffffc90000007ec0 EFLAGS: 00000006 [ 335.786204][ C0] RAX: ffffffff81634d1d RBX: ffff8881f6e29d40 RCX: ffff888144f1bcc0 [ 335.786217][ C0] RDX: 0000000000010000 RSI: 7fffffffffffffff RDI: 0000004e2cd0fc45 [ 335.786228][ C0] RBP: ffffc90000007fb0 R08: ffff888117e46247 R09: ffff888117e46238 [ 335.786240][ C0] R10: dffffc0000000000 R11: ffffed1022fc8c49 R12: dffffc0000000000 [ 335.786252][ C0] R13: ffff8881f6e29d60 R14: 0000000000000002 R15: 0000004e2cd0fc45 [ 335.786264][ C0] FS: 00007fabf3f396c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 335.786278][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.786290][ C0] CR2: 0000000100000001 CR3: 0000000117f19000 CR4: 00000000003506b0 [ 335.786305][ C0] DR0: 0000000001000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.786315][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 335.786325][ C0] Call Trace: [ 335.786329][ C0] [ 335.786340][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 335.786364][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 335.786385][ C0] [ 335.786389][ C0] [ 335.786394][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 335.786414][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 335.786519][ C0] Code: 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 48 89 e5 48 8b 45 08 65 48 8b 15 70 f7 90 7e 65 8b 0d 71 f7 90 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 0b 00 00 [ 335.786532][ C0] RSP: 0018:ffffc900011e7908 EFLAGS: 00000246 [ 335.786546][ C0] RAX: ffffffff81c3d9d8 RBX: 1ffff9200023cf83 RCX: 0000000080000000 [ 335.786557][ C0] RDX: ffff888144f1bcc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.786568][ C0] RBP: ffffc900011e7908 R08: ffffc900011e7847 R09: 1ffff9200023cf08 [ 335.786580][ C0] R10: dffffc0000000000 R11: fffff5200023cf09 R12: dffffc0000000000 [ 335.786592][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900011e7c1c [ 335.786604][ C0] ? terminate_walk+0x368/0x520 [ 335.786657][ C0] terminate_walk+0x368/0x520 [ 335.786672][ C0] path_openat+0x27aa/0x2f30 [ 335.786693][ C0] ? slab_post_alloc_hook+0x4f/0x2d0 [ 335.786715][ C0] ? kmem_cache_alloc+0x166/0x320 [ 335.786736][ C0] ? getname_flags+0xba/0x510 [ 335.786752][ C0] ? do_sys_openat2+0xeb/0x820 [ 335.786800][ C0] ? do_filp_open+0x420/0x420 [ 335.786821][ C0] do_filp_open+0x1ee/0x420 [ 335.786841][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 335.786865][ C0] ? alloc_fd+0x4c1/0x570 [ 335.786908][ C0] do_sys_openat2+0x15e/0x820 [ 335.786929][ C0] ? clockevents_program_event+0x24a/0x330 [ 335.786947][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 335.786969][ C0] ? do_sys_open+0xe0/0xe0 [ 335.786991][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 335.787013][ C0] __x64_sys_openat+0x136/0x160 [ 335.787037][ C0] x64_sys_call+0x783/0x9a0 [ 335.787055][ C0] do_syscall_64+0x4c/0xa0 [ 335.787070][ C0] ? clear_bhb_loop+0x30/0x80 [ 335.787089][ C0] ? clear_bhb_loop+0x30/0x80 [ 335.787108][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.787127][ C0] RIP: 0033:0x7fabf2f9fb19 [ 335.787140][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.787154][ C0] RSP: 002b:00007fabf3f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.787176][ C0] RAX: ffffffffffffffda RBX: 00007fabf3226090 RCX: 00007fabf2f9fb19 [ 335.787189][ C0] RDX: 0000000000000000 RSI: 00002000000026c0 RDI: ffffffffffffff9c [ 335.787200][ C0] RBP: 00007fabf3037b70 R08: 0000000000000000 R09: 0000000000000000 [ 335.787210][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.787220][ C0] R13: 00007fabf3226128 R14: 00007fabf3226090 R15: 00007ffcd046ea68 [ 335.787236][ C0] [ 336.211051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.219090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.227197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.234639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.256905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.266254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.279665][T11334] device veth1_macvtap entered promiscuous mode [ 336.299279][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 336.327032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.337839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.346235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.365891][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.386410][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.369546][ T7181] device bridge_slave_1 left promiscuous mode [ 337.375701][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.398559][ T7181] device bridge_slave_0 left promiscuous mode [ 337.404974][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.413847][ T7181] device veth1_macvtap left promiscuous mode [ 337.420160][ T7181] device veth0_vlan left promiscuous mode [ 338.682695][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.689936][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.706142][T11493] device bridge_slave_0 entered promiscuous mode [ 338.725049][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.732264][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.741047][T11493] device bridge_slave_1 entered promiscuous mode [ 339.132545][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.139628][T11493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.146909][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.153930][T11493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.307156][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.325913][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.354987][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.400685][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.431442][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.438541][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.453490][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.471534][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.478618][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.515504][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.526367][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.534726][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.543388][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.881082][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.890640][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.047065][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.077381][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.103890][T11493] device veth0_vlan entered promiscuous mode [ 340.142023][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.181859][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.320492][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.353171][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.372686][T11493] device veth1_macvtap entered promiscuous mode [ 340.437807][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.464602][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.523116][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.557307][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.567790][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.967597][ T5908] device bridge_slave_1 left promiscuous mode [ 341.973822][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.981825][ T5908] device bridge_slave_0 left promiscuous mode [ 341.988108][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.997506][ T5908] device veth1_macvtap left promiscuous mode [ 342.003537][ T5908] device veth0_vlan left promiscuous mode [ 342.674422][T11584] device macsec0 left promiscuous mode [ 343.044645][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.052387][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.060251][T11612] device bridge_slave_0 entered promiscuous mode [ 343.068458][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.075836][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.083726][T11612] device bridge_slave_1 entered promiscuous mode [ 343.203570][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.210668][T11612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.217964][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.224987][T11612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.253655][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.268099][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.275922][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.305957][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.316708][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.323813][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.350732][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.360326][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.367423][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.425580][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.436452][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.444726][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.458496][T11612] device veth0_vlan entered promiscuous mode [ 343.471490][T11612] device veth1_macvtap entered promiscuous mode [ 343.493866][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.503542][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.541562][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.549185][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.601461][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 343.616139][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.628110][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.636600][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.705243][T11641] device syzkaller0 entered promiscuous mode [ 344.817653][ T5908] device bridge_slave_1 left promiscuous mode [ 344.823932][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.832282][ T5908] device bridge_slave_0 left promiscuous mode [ 344.838554][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.847464][ T5908] device veth1_macvtap left promiscuous mode [ 344.853593][ T5908] device veth0_vlan left promiscuous mode [ 346.536245][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.601410][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.612224][T11678] device bridge_slave_0 entered promiscuous mode [ 346.636173][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.670528][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.678481][T11678] device bridge_slave_1 entered promiscuous mode [ 346.720919][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.728096][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.811567][T11714] device veth0_vlan left promiscuous mode [ 346.822178][T11714] device veth0_vlan entered promiscuous mode [ 346.864908][T11718] device syzkaller0 entered promiscuous mode [ 347.604775][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.616032][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.661129][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.676473][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.695603][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.702701][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.726526][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.744677][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.766901][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.774001][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.781871][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.798931][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.827952][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.854437][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.919281][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.961216][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.974162][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.009667][T11678] device veth0_vlan entered promiscuous mode [ 348.021401][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.036240][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.059936][T11678] device veth1_macvtap entered promiscuous mode [ 348.081890][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.100012][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.152660][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.176208][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.208305][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.249046][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.285596][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.302797][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.338098][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.644200][T11813] device syzkaller0 entered promiscuous mode [ 350.687953][ T7185] device bridge_slave_1 left promiscuous mode [ 350.694117][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.736331][ T7185] device bridge_slave_0 left promiscuous mode [ 350.743153][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.755658][ T7185] device veth1_macvtap left promiscuous mode [ 350.767998][ T7185] device veth0_vlan left promiscuous mode [ 350.930298][T11833] device lo entered promiscuous mode [ 350.935999][T11833] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.605441][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.652534][T11845] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.674586][T11845] device bridge_slave_0 entered promiscuous mode [ 351.700356][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.715438][T11845] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.727844][T11845] device bridge_slave_1 entered promiscuous mode [ 353.655492][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.665643][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.697582][T11939] device syzkaller0 entered promiscuous mode [ 353.746643][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.755295][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.764372][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.771445][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.818182][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.826322][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.835248][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.843883][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.850941][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.902272][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.910757][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.986179][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.999769][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.032674][ T28] audit: type=1400 audit(1794181335.152:163): avc: denied { setattr } for pid=11960 comm="syz.5.2763" path="pipe:[24841]" dev="pipefs" ino=24841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 354.063762][T11975] device syzkaller0 entered promiscuous mode [ 354.070866][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.079430][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.115242][T11845] device veth0_vlan entered promiscuous mode [ 354.144459][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.152818][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.200960][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.208848][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.236045][T11845] device veth1_macvtap entered promiscuous mode [ 354.244403][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.255347][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.287860][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.296151][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.360161][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.394507][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.703100][T11997] device veth1_macvtap left promiscuous mode [ 356.077784][ T7185] device bridge_slave_1 left promiscuous mode [ 356.083905][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.091948][ T7185] device bridge_slave_0 left promiscuous mode [ 356.098205][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.108013][ T7185] device veth1_macvtap left promiscuous mode [ 356.114058][ T7185] device veth0_vlan left promiscuous mode [ 356.466845][ T29] INFO: task rcu_tasks_kthre:11 blocked for more than 273 seconds. [ 356.474967][ T29] Tainted: G W syzkaller #0 [ 356.481512][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.490210][ T29] task:rcu_tasks_kthre state:D stack:28800 pid:11 ppid:2 flags:0x00004000 [ 356.499463][ T29] Call Trace: [ 356.502762][ T29] [ 356.505676][ T29] __schedule+0xcb3/0x1700 [ 356.510112][ T29] ? release_firmware_map_entry+0x190/0x190 [ 356.516019][ T29] ? __queue_work+0x9f2/0xd50 [ 356.520724][ T29] schedule+0xbd/0x170 [ 356.524790][ T29] schedule_timeout+0xba/0x340 [ 356.529572][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 356.534946][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 356.540781][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 356.545679][ T29] wait_for_common+0x364/0x640 [ 356.550483][ T29] ? wait_for_completion+0x20/0x20 [ 356.555585][ T29] wait_for_completion+0x18/0x20 [ 356.560547][ T29] __synchronize_srcu+0x173/0x200 [ 356.565564][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 356.571283][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 356.576734][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 356.582139][ T29] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 356.588473][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 356.594015][ T29] synchronize_srcu+0x1c5/0x1d0 [ 356.598875][ T29] rcu_tasks_postscan+0x10/0x20 [ 356.603715][ T29] rcu_tasks_wait_gp+0x2ec/0xa30 [ 356.608665][ T29] ? __kasan_check_write+0x14/0x20 [ 356.613770][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 356.619231][ T29] ? __cfi_rcu_tasks_wait_gp+0x10/0x10 [ 356.624678][ T29] ? mutex_lock+0x93/0x1b0 [ 356.629481][ T29] rcu_tasks_one_gp+0xc25/0xde0 [ 356.634328][ T29] ? schedule_timeout+0x1a7/0x340 [ 356.639378][ T29] rcu_tasks_kthread+0x6a/0x90 [ 356.644132][ T29] kthread+0x281/0x320 [ 356.648205][ T29] ? __cfi_rcu_tasks_kthread+0x10/0x10 [ 356.653658][ T29] ? __cfi_kthread+0x10/0x10 [ 356.658251][ T29] ret_from_fork+0x1f/0x30 [ 356.662665][ T29] [ 356.666078][ T29] NMI backtrace for cpu 0 [ 356.670403][ T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G W syzkaller #0 [ 356.679054][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 356.689090][ T29] Call Trace: [ 356.692346][ T29] [ 356.695256][ T29] __dump_stack+0x21/0x24 [ 356.699568][ T29] dump_stack_lvl+0x110/0x170 [ 356.704247][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 356.709260][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960 [ 356.715832][ T29] dump_stack+0x15/0x24 [ 356.719961][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 356.724876][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 356.730400][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 356.735851][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 356.741905][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 356.747868][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 356.753824][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 356.759782][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 356.765654][ T29] watchdog+0xde1/0xf30 [ 356.769784][ T29] ? __cfi_watchdog+0x10/0x10 [ 356.774437][ T29] ? __kasan_check_read+0x11/0x20 [ 356.779437][ T29] ? __kthread_parkme+0x13a/0x180 [ 356.784437][ T29] kthread+0x281/0x320 [ 356.788482][ T29] ? __cfi_watchdog+0x10/0x10 [ 356.793137][ T29] ? __cfi_kthread+0x10/0x10 [ 356.797711][ T29] ret_from_fork+0x1f/0x30 [ 356.802137][ T29] [ 356.805236][ T29] Sending NMI from CPU 0 to CPUs 1: [ 356.810463][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 [ 357.520986][T12039] device syzkaller0 entered promiscuous mode [ 357.722095][T12027] cgroup: fork rejected by pids controller in /syz6 [ 357.775854][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.820725][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.847415][T12049] device bridge_slave_0 entered promiscuous mode [ 357.971260][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.986792][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.994269][T12049] device bridge_slave_1 entered promiscuous mode [ 358.676391][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.699706][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.749859][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.775628][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.788630][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.795707][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.808375][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.828647][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.852636][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.859749][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.913034][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.922807][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.938480][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.010086][T12049] device veth0_vlan entered promiscuous mode [ 359.028017][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.046911][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.067809][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.079885][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.095967][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.106549][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.134522][T12049] device veth1_macvtap entered promiscuous mode [ 359.146471][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.159896][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.172438][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.187943][T12151] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.195147][T12151] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.236740][T12151] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.243835][T12151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.251137][T12151] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.258182][T12151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.278236][T12151] device bridge0 entered promiscuous mode [ 359.290057][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.306274][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.329408][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.355011][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.616819][ T28] audit: type=1400 audit(1794181340.732:164): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[15109]" dev="pipefs" ino=15109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=2211 state=3 status=67 (errno 9: Bad file descriptor) [ 362.838380][ T7185] device vlan0 left promiscuous mode [ 362.843896][ T7185] @: port 1(vlan0) entered disabled state [ 362.850563][ T7185] device dummy0 left promiscuous mode [ 362.855998][ T7185] : port 1(dummy0) entered disabled state [ 362.868157][ T7185] device team_slave_1 left promiscuous mode [ 362.874280][ T7185] bridge0: port 3(team_slave_1) entered disabled state [ 362.881885][ T7185] device bridge_slave_1 left promiscuous mode [ 362.888195][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.895726][ T7185] device bridge_slave_0 left promiscuous mode [ 362.902017][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.910230][ T7185] : port 1(dummy0) entered disabled state [ 362.916941][ T7185] device vlan0 left promiscuous mode [ 362.922357][ T7185] @: port 1(vlan0) entered disabled state [ 362.931367][ T7185] device bridge_slave_1 left promiscuous mode [ 362.937580][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.945651][ T7185] device bridge_slave_0 left promiscuous mode [ 362.951927][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.960737][ T7185] device bridge_slave_1 left promiscuous mode [ 362.967931][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.975552][ T7185] device bridge_slave_0 left promiscuous mode [ 362.981875][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.991365][ T7185] device veth0_vlan left promiscuous mode [ 362.997754][ T7185] device veth0_vlan left promiscuous mode [ 363.004046][ T7185] device veth1_macvtap left promiscuous mode [ 363.010208][ T7185] device veth0_vlan left promiscuous mode [ 363.016909][ T7185] device veth1_macvtap left promiscuous mode [ 363.023008][ T7185] device veth0_vlan left promiscuous mode