last executing test programs: 7m29.708894618s ago: executing program 4 (id=32): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 7m29.19612797s ago: executing program 4 (id=38): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9f, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af26"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000b710000000071120700000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 7m28.787990584s ago: executing program 4 (id=42): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r3, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20000000000000008400000006"], 0x38}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) socketpair(0x26, 0x1, 0x2, &(0x7f0000000100)) write$cgroup_int(r5, &(0x7f00000000c0)=0x401, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0xa}, 0x90) r6 = gettid() perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x870, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0x25c7, 0x3}, 0x1000, 0x0, 0x0, 0x3, 0x9, 0x1f, 0x83f3, 0x0, 0x8000, 0x0, 0x800}, r6, 0x6, 0xffffffffffffffff, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001780)={'bond_slave_1\x00', @broadcast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000000)=0x1) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x12) syz_clone(0x1140, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 7m28.243692439s ago: executing program 4 (id=47): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x40c, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001480)=r0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x11, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000140)="75d73a70024c05930c6126bccceca7d827c310a828c89783fa5ee343c32e5479df67a9660fc280c5647a322841b767f41cfe48d962e23e1d485b60760f04ca00305922726629a1", 0x47}, {0x0}, {&(0x7f0000000280)="2bdcd757f046d9c3d7f9b5ce466a0c027bb5438d", 0x14}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="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", 0x3c1}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7m27.879619049s ago: executing program 4 (id=51): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffd}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000000), 0x15) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)="fb15f319e8483d29d556a509c1cef4a145fea984a09f692a98c683fc656bcfa8f92f417b5a35216ded1e3f20954798343027777a8728a9ad1b7bb35932e9dd3c5c3c6cc02a8eeb675a6b7a5623e791312386534ad43b69a2d5381da87375", 0x5e}, {&(0x7f0000000080)="6651dec38bc89527d7c1ce6b4803668d90b4acfb9e3f7eb1061a3fa7a284b1d2b114eb312d18b65159f82a23b45f046c13", 0x31}, {&(0x7f00000004c0)="19421b075cb71142ddf7cc55f4d2d6e77aa7db3602c289d8b447811ebf3f42445a28863fcda5a0a2f199e99cb5ab060696f051c7302599f6891ccbb2e1ab2ceb8ed801f5ab7c300f7dbf1997a29dfa69b58e35530fda3d1c51ceca326e", 0x5d}, {&(0x7f00000009c0)="928f029f194181472bea207c88d72f955617981cff602b85995851d4b608aac221b53e93145cecf117ae9abca91f292635c1267f9f926fdffae66e77443d63651bb0fc12aa64652fa08b1e435d7f1fac2d25d8fe2b228dfaf4d93f636f9439dd32ea9fb7377882eef03306c8c04faa3bdf939fe3044ce024bf844b83ec103603e5387a31de17f83f3839c87d7b3ec3e6ac27f731d8a03027071755f25c3601e3eb442eb2de6dd081998435460c", 0xad}, {&(0x7f0000000600)="1905107dd989ced10df2155899bc2986fda367c2af25fa9a97056793c24fce6332bc744bed71b2aabb823f269f83734b5edcac51d1e7c93a0a3f531d583dd2ef5326ccf1276998dae163447e7409250b22b1a7129bc4c8fd88b2b0bb9e3c00da59e75f56d5fabee1c3bda878d4e0060e69ca0b7336eba4737a7838b7825da4b8ab4a832a189ce7275670ce8125dca7abdc2a5faeb7384b886b3c71153d1cba69d6f3ae9cb8bd3f7f7be486a0b00f953d51f977133f3e0f87b153d55456897d811a5cc0f55d403a51e39178047245ef49a4092b656601b24bf4687d7ac5676a6b2452259870fead3fd76c69f0f4f5c5ec", 0xf0}, {&(0x7f0000000700)="72e51d618fcf539e9a2d3591b812cba7bc995781f659bcdb499a82fd436ec0237baa787fb54f93ca3e847d90439efd92f7486e4b6da3b06d7a662c", 0x3b}, {&(0x7f0000000400)="6d54f03a8ab4a164152d054afb0b7e990fac671b9b9beb316e2e28a839ac75d2adb839514bf19fb26e88fee8aad5249c7c", 0x31}], 0x7, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0x44000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000e30000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sys_exit\x00', r6}, 0x10) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000600)='snd_soc_jack_report\x00'}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {0x7, 0x1, 0x2}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x23) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 7m27.152268909s ago: executing program 4 (id=56): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0x7, [@datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x3, 0x6, 0xfffffe00}, {0x4, 0xa, 0x3}, {0x5, 0x294, 0x8}, {0x1, 0x8, 0x2}, {0x2, 0x8, 0xd}, {0x4, 0x200, 0x514}, {0x4, 0x7, 0x566b}, {0x5, 0x8}, {0x1, 0xac4, 0x3}], "3acc"}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x4}, {0x2, 0x5}, {0xd, 0x1}, {0x7, 0x2}, {0x10, 0x2}, {0x2, 0x1}, {0xd}, {0x5, 0x2}, {0xa, 0x2}]}, @const={0x3, 0x0, 0x0, 0xa, 0x2}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x5f, 0x0, 0x61, 0x5f]}}, &(0x7f0000000140)=""/41, 0x107, 0x29, 0x1, 0x9}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-8'], 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 8.391230907s ago: executing program 2 (id=2934): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000706ffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='task_rename\x00', r2}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x5fee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x15, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000845b02000014000000b703008500000083000000bf090000000000005509010000000000950000000000000025218520000005000000183100000400008a86e3e5725f725effb229da31", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x57d, 0xd3, &(0x7f0000000740)=""/211, 0x41000, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r5, 0x1, r1, r10], &(0x7f0000000940)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x5, 0xc, 0xb}], 0x10, 0x5}, 0x90) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='bcache_btree_write\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 7.044489438s ago: executing program 2 (id=2940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x61581, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 5.902658082s ago: executing program 2 (id=2942): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001ff, 0x0, 0x76}, 0x0, 0xe, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xe}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4.423292535s ago: executing program 2 (id=2944): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (fail_nth: 3) 4.384593528s ago: executing program 1 (id=2945): r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="d02a26f3c080e1e48d6764026b5c8af28c3572a1dabf7a8a414305745b9a409efd0b56b35e1c304ed3a67931249ae30dadcaaa5af39454cb01523e3cce53a1edb1e001a16fdd4e5947375e328d8d8f5bd4a5d4d054b58c128f2408344f0d686cd7e0a93a3ab760a1f38063bbccd0822b53041559c57d5df799c013505e5e0d2a4064f7f2e60028b9841e292ecda924d75efac8018764bf110fdf814048a9d5f1e2768851c6457c580d4ec745dbcc5351a99ce1e6acb182c5dedf4a2d985dcc8050f78e348dda058af626"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = perf_event_open(&(0x7f0000000b80)={0x5, 0x80, 0x19, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext, 0x2a1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000200)="f59a9e4c580d90f6f214af8e836071798f61a6a61b0b9c6c9a1404"}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140), 0x0, 0xf, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x5, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex=r8, r6, 0x2e, 0x20, 0x0, @prog_fd=r6, r9}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000ac0)='}s\xe6?\x92\x109\xa0\x8b\xbc') 3.38818284s ago: executing program 3 (id=2948): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) 3.338613124s ago: executing program 0 (id=2949): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1bec39af700e7306}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc8ba, '\x00', r4, r0, 0x1, 0x4, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r11}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='ext4_es_insert_delayed_block\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r10, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRES16=r5], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2b}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12, 0x0, 0x1}, 0x48) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r13, &(0x7f0000000180), 0x2009) socket$kcm(0x10, 0x2, 0x0) 3.324853775s ago: executing program 1 (id=2950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000706ffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='task_rename\x00', r2}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x5fee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x15, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000845b02000014000000b703008500000083000000bf090000000000005509010000000000950000000000000025218520000005000000183100000400008a86e3e5725f725effb229da31", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x57d, 0xd3, &(0x7f0000000740)=""/211, 0x41000, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r5, 0x1, r1, r10], &(0x7f0000000940)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x5, 0xc, 0xb}], 0x10, 0x5}, 0x90) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='bcache_btree_write\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3.167896738s ago: executing program 3 (id=2951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x61581, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 2.545278259s ago: executing program 0 (id=2952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4, 0x0, 0xffffffff00000000}, 0x38) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x110101, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150a06001400000000120800040043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x642b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}}, 0x0, 0xffffffffffffffff, r5, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 2.232002175s ago: executing program 3 (id=2953): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x2a928e5c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.202900838s ago: executing program 1 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 3) 1.534665693s ago: executing program 3 (id=2955): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000706ffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='task_rename\x00', r2}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x5fee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x15, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000845b02000014000000b703008500000083000000bf090000000000005509010000000000950000000000000025218520000005000000183100000400008a86e3e5725f725effb229da31", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x57d, 0xd3, &(0x7f0000000740)=""/211, 0x41000, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r5, 0x1, r1, r10], &(0x7f0000000940)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x5, 0xc, 0xb}], 0x10, 0x5}, 0x90) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='bcache_btree_write\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.426836882s ago: executing program 0 (id=2956): perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007200911fdabcf8b30771a54a07"], 0xfe33) 1.337842789s ago: executing program 1 (id=2957): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r2, 0x8) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000003c0)=""/185, 0xb9}], 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x80) 1.287792503s ago: executing program 0 (id=2958): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000200000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200b7030000000000008500000005000000bc8900000000000035090100000000009500000000000000b7020000001ac81b7baaf8ff00000000d5090000000000007baaf0ff00000000bf830000000000000708040000f0ffffff24020000080000001822000095c5131e7ab601332304df3eed51ebbcf5e9bcca75e95dc5e212b699481be96ffb920f03ec88cabdb87a1cbef5105296699a508d13ffab9b8730217b6ee56fadc3d2b99d72a008dc246cf185e86a699b85770eea73d862718f8923", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, &(0x7f00000000c0)=""/38, 0x0, &(0x7f0000000b40)="db52a3ba3a6d7b02a261385da81ed7631698ebd2711c6d6c02cb07950afb1e6a86b68929a4746c46440831aea0f1d9c3a7640a0b9b19ef38852f52776f458e3213edf849ec1504dcd1de3cae5222513438c2cb7d20c9a331e3ab63d52429228837b019dde150e0ce7460bf8bc201371a0740d70d60cc3044313067cb0d94853ee2d77df7c150eb9d0862d1260f6299d41cb8b053e732e5bd9bca2a44f2f8", 0x4, r2, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r4, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) 841.75086ms ago: executing program 3 (id=2959): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000200000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200b7030000000000008500000005000000bc8900000000000035090100000000009500000000000000b7020000001ac81b7baaf8ff00000000d5090000000000007baaf0ff00000000bf830000000000000708040000f0ffffff24020000080000001822000095c5131e7ab601332304df3eed51ebbcf5e9bcca75e95dc5e212b699481be96ffb920f03ec88cabdb87a1cbef5105296699a508d13ffab9b8730217b6ee56fadc3d2b99d72a008dc246cf185e86a699b85770eea73d862718f8923", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, &(0x7f00000000c0)=""/38, 0x0, &(0x7f0000000b40)="db52a3ba3a6d7b02a261385da81ed7631698ebd2711c6d6c02cb07950afb1e6a86b68929a4746c46440831aea0f1d9c3a7640a0b9b19ef38852f52776f458e3213edf849ec1504dcd1de3cae5222513438c2cb7d20c9a331e3ab63d52429228837b019dde150e0ce7460bf8bc201371a0740d70d60cc3044313067cb0d94853ee2d77df7c150eb9d0862d1260f6299d41cb8b053e732e5bd9bca2a44f2f8", 0x4, r2, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r4, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) 709.635621ms ago: executing program 2 (id=2960): r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="d02a26f3c080e1e48d6764026b5c8af28c3572a1dabf7a8a414305745b9a409efd0b56b35e1c304ed3a67931249ae30dadcaaa5af39454cb01523e3cce53a1edb1e001a16fdd4e5947375e328d8d8f5bd4a5d4d054b58c128f2408344f0d686cd7e0a93a3ab760a1f38063bbccd0822b53041559c57d5df799c013505e5e0d2a4064f7f2e60028b9841e292ecda924d75efac8018764bf110fdf814048a9d5f1e2768851c6457c580d4ec745dbcc5351a99ce1e6acb182c5dedf4a2d985dcc8050f78e348dda058af626"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = perf_event_open(&(0x7f0000000b80)={0x5, 0x80, 0x19, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext, 0x2a1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000200)="f59a9e4c580d90f6f214af8e836071798f61a6a61b0b9c6c9a1404"}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140), 0x0, 0xf, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x5, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex=r8, r6, 0x2e, 0x20, 0x0, @prog_fd=r6, r9}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000ac0)='}s\xe6?\x92\x109\xa0\x8b\xbc') 593.054151ms ago: executing program 0 (id=2961): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) 452.473832ms ago: executing program 0 (id=2962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x61581, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 312.247874ms ago: executing program 1 (id=2963): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000100)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000640)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000002062079f7d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc25fc32521b8b49005e657444a8180000000000000000000000000000cf1df4e2008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x11, 0x1, 0x3, &(0x7f0000000080)) 197.264053ms ago: executing program 3 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000706ffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='task_rename\x00', r2}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x5fee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x15, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000845b02000014000000b703008500000083000000bf090000000000005509010000000000950000000000000025218520000005000000183100000400008a86e3e5725f725effb229da31", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x57d, 0xd3, &(0x7f0000000740)=""/211, 0x41000, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r5, 0x1, r1, r10], &(0x7f0000000940)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x5, 0xc, 0xb}], 0x10, 0x5}, 0x90) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='bcache_btree_write\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 143.881068ms ago: executing program 2 (id=2965): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x2a928e5c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=2966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="850000002e000000350000000000ba000700000008000000950000000000000064f1c09faf5d6806f8a1572b41a141d524581835d80532cb457f454698165b61a3cf5fc6dd8442230e35230163cf094949fc8b0a9114f43d1b6538f5976be4adc07e8c97d76b1895c322a1ef1f83dd6c1023158a1086f7d0f9dce435554bc34e6bdea4217cfaa9a1f8ad1087c697acd9a7ab696922c9e35f0aee6156c599c7b297de0019b27d67bfb3fe241454a04080bf7f8ce021879c820f9b80fe04be5b11cc7bf16c8a029df573db051357c71be1f5e8ce8db0f96ee1d8a312e9671e652bd6f32c7a458f129a8d8bc9a5d905441c0785d333135a04001bb4cd5b295b9add7a0247cada056be3a9e29f9d4b57ddd4130ccbbbcd6e000000000000004102d74c391acc0880312cc8a8c51c7bddd3698f620a69f46984c2a2e742fadecf0e18c91f1715450ff0e09b7e52fd66a7c81b7e62ca8c3572c3dc46dc7579c100010000000000001af7d2149c8ab5ef187087f74b65a6c7da154853894437ffcb5cc3a2b13759c42b350b09a639a8f257d81204e7e61b7f7230db061fabbdc611df1129695265a3426e02f9b24ebc243a8b7ab50e4279be8594af30231a567d1f0ac5297daa6e9e82eb90c602adffc6a3de64b1db82ac547a6a4b78a323aebbf4917450e54b989c6065aeafe708ed91d86ee0ea4ad86715a9bad226f1eda090456f50863060f074c0469fb82752e4aacbf6ab830391cdb628b5f371ce3b1431b2726cbd8b933f3ce2d452d46d56a8cc49e160581b4a23e881264d498b4b6e7c2f9bc962da260e699aa50d2da32c555047ca"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5d}, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x900, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, &(0x7f00000002c0)=""/202, 0xca}, 0x1062) setsockopt$sock_attach_bpf(r8, 0x107, 0x2, &(0x7f00000000c0), 0x10) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\xff%r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007200911fdabcf8b30771a54a07"], 0xfe33) kernel console output (not intermixed with test programs): ode [ 411.306510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.327544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.359894][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.385886][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.420324][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.502960][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.541719][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.602537][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.616370][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.668832][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.915498][T11175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.923248][T11175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.024745][T11179] netlink: 'syz.1.2274': attribute type 10 has an invalid length. [ 412.192242][T11185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.199849][T11185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.685193][T11203] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 412.741650][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.758545][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.793012][T10964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.018036][T11232] netlink: 'syz.2.2289': attribute type 10 has an invalid length. [ 414.345819][T11246] netlink: 'syz.2.2294': attribute type 10 has an invalid length. [ 414.445592][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.457694][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.574794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.593123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.619513][T10964] device veth0_vlan entered promiscuous mode [ 414.657132][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.681118][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.730655][T10964] device veth1_vlan entered promiscuous mode [ 414.766437][T11256] netlink: 'syz.2.2298': attribute type 29 has an invalid length. [ 414.824736][T11256] netlink: 'syz.2.2298': attribute type 29 has an invalid length. [ 414.922535][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 414.942025][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 414.990416][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.035022][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.078592][T10964] device veth0_macvtap entered promiscuous mode [ 415.142556][T10964] device veth1_macvtap entered promiscuous mode [ 415.280978][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.321874][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.362628][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.400751][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.438434][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.465370][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.502524][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.545283][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.576571][T10964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.628554][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 415.654692][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 415.668930][T11267] net_ratelimit: 10 callbacks suppressed [ 415.668952][T11267] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.681374][T11267] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.697170][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.738109][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.785649][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.823561][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.851759][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.912165][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.943022][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.010493][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.040264][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.082043][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.117291][T10964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.138809][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.169558][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.212982][T11280] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 416.239817][T10964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.279154][T10964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.301913][T10964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.325383][T10964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.363255][T11290] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 416.448437][T11288] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 416.456034][T11288] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 416.635988][ T7066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.675663][ T7066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.721322][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.775296][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.818052][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.857088][T11300] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 416.864278][T11300] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 416.900176][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 417.342473][T11317] netlink: 'syz.1.2317': attribute type 10 has an invalid length. [ 417.773250][T11319] netlink: 'syz.1.2318': attribute type 10 has an invalid length. [ 418.292053][T11330] netlink: 'syz.2.2323': attribute type 10 has an invalid length. [ 418.327104][T11331] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.333612][T11331] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 418.584544][T11333] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.593215][T11333] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 418.622196][T11341] netlink: 'syz.1.2327': attribute type 10 has an invalid length. [ 418.829693][T11346] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 419.671598][T11357] netlink: 'syz.0.2335': attribute type 10 has an invalid length. [ 419.837226][T11365] netlink: 'syz.2.2340': attribute type 10 has an invalid length. [ 420.078746][T11372] netlink: 'syz.3.2342': attribute type 10 has an invalid length. [ 421.031288][T11390] net_ratelimit: 10 callbacks suppressed [ 421.031477][T11390] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 421.044069][T11390] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 421.215539][T11395] validate_nla: 3 callbacks suppressed [ 421.215577][T11395] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 421.415677][T11400] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 421.424088][T11400] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 421.429246][T11399] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 421.440910][T11399] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 421.853007][T11411] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 421.859522][T11411] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.021187][T11414] netlink: 'syz.0.2359': attribute type 29 has an invalid length. [ 422.047557][T11414] netlink: 'syz.0.2359': attribute type 29 has an invalid length. [ 422.255794][T11429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.262330][T11429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.479614][T11431] netlink: 'syz.2.2366': attribute type 10 has an invalid length. [ 423.389659][T11448] netlink: 'syz.2.2373': attribute type 29 has an invalid length. [ 423.433555][T11448] netlink: 'syz.2.2373': attribute type 29 has an invalid length. [ 423.905560][T11461] netlink: 'syz.0.2377': attribute type 10 has an invalid length. [ 424.800672][T11490] FAULT_INJECTION: forcing a failure. [ 424.800672][T11490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.829722][T11490] CPU: 0 PID: 11490 Comm: syz.3.2385 Not tainted 6.1.102-syzkaller #0 [ 424.837941][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 424.848015][T11490] Call Trace: [ 424.851316][T11490] [ 424.854267][T11490] dump_stack_lvl+0x1e3/0x2cb [ 424.858995][T11490] ? nf_tcp_handle_invalid+0x642/0x642 [ 424.864503][T11490] ? panic+0x764/0x764 [ 424.868616][T11490] ? __lock_acquire+0x1f80/0x1f80 [ 424.873689][T11490] should_fail_ex+0x3a6/0x4d0 [ 424.878405][T11490] _copy_from_user+0x2b/0x170 [ 424.883198][T11490] iovec_from_user+0x13d/0x380 [ 424.887998][T11490] ? __might_fault+0xa1/0x110 [ 424.892712][T11490] __import_iovec+0x72/0x4c0 [ 424.897336][T11490] ? __might_fault+0xa1/0x110 [ 424.902047][T11490] import_iovec+0xe6/0x120 [ 424.906501][T11490] copy_msghdr_from_user+0x527/0x670 [ 424.911828][T11490] ? sendmsg_copy_msghdr+0x70/0x70 [ 424.916991][T11490] __sys_sendmsg+0x236/0x390 [ 424.921622][T11490] ? ____sys_sendmsg+0x8f0/0x8f0 [ 424.926766][T11490] ? vfs_write+0x6cf/0xbc0 [ 424.931245][T11490] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 424.937267][T11490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 424.943276][T11490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 424.949369][T11490] ? lockdep_hardirqs_on+0x94/0x130 [ 424.954589][T11490] ? syscall_enter_from_user_mode+0x2e/0x230 [ 424.960605][T11490] do_syscall_64+0x3b/0xb0 [ 424.965049][T11490] ? clear_bhb_loop+0x45/0xa0 [ 424.969757][T11490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.975694][T11490] RIP: 0033:0x7ff567977299 [ 424.980131][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.999756][T11490] RSP: 002b:00007ff5686c2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.008198][T11490] RAX: ffffffffffffffda RBX: 00007ff567b05f80 RCX: 00007ff567977299 [ 425.016190][T11490] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 425.024187][T11490] RBP: 00007ff5686c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 425.032190][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.040176][T11490] R13: 000000000000000b R14: 00007ff567b05f80 R15: 00007ffdcb056bc8 [ 425.048189][T11490] [ 425.581872][T11496] netlink: 'syz.0.2388': attribute type 29 has an invalid length. [ 425.608023][T11496] netlink: 'syz.0.2388': attribute type 29 has an invalid length. [ 426.174594][T11504] netlink: 'syz.2.2390': attribute type 10 has an invalid length. [ 427.879348][T11549] netlink: 'syz.1.2402': attribute type 29 has an invalid length. [ 427.909435][T11549] netlink: 'syz.1.2402': attribute type 29 has an invalid length. [ 428.032344][T11547] net_ratelimit: 14 callbacks suppressed [ 428.032432][T11547] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.047912][T11547] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.108688][T11556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.123278][T11556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.273283][T11561] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 428.332505][T11566] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.339019][T11566] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 428.855820][T11579] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 428.862410][T11579] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 429.376001][T11585] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2412'. [ 429.465250][T11585] bond0: (slave macvlan0): Releasing backup interface [ 430.756812][T11597] netlink: 'syz.0.2415': attribute type 29 has an invalid length. [ 430.803953][T11597] netlink: 'syz.0.2415': attribute type 29 has an invalid length. [ 432.747991][T11626] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.754592][T11626] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.170057][T11629] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2425'. [ 433.537682][T11633] netlink: 'syz.1.2426': attribute type 29 has an invalid length. [ 433.580655][T11636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.587210][T11636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.812041][T11629] bond0: (slave macvlan0): Releasing backup interface [ 434.061193][T11633] netlink: 'syz.1.2426': attribute type 29 has an invalid length. [ 434.528298][T11644] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 434.534835][T11644] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 434.941361][T11648] netlink: 'syz.2.2431': attribute type 10 has an invalid length. [ 435.180484][T11656] netlink: 'syz.2.2434': attribute type 3 has an invalid length. [ 435.198948][T11656] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2434'. [ 435.305257][T11657] netlink: 'syz.0.2433': attribute type 29 has an invalid length. [ 435.332101][T11662] FAULT_INJECTION: forcing a failure. [ 435.332101][T11662] name failslab, interval 1, probability 0, space 0, times 0 [ 435.367574][T11657] netlink: 'syz.0.2433': attribute type 29 has an invalid length. [ 435.369779][T11662] CPU: 1 PID: 11662 Comm: syz.3.2435 Not tainted 6.1.102-syzkaller #0 [ 435.384016][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 435.394106][T11662] Call Trace: [ 435.397412][T11662] [ 435.400365][T11662] dump_stack_lvl+0x1e3/0x2cb [ 435.405089][T11662] ? nf_tcp_handle_invalid+0x642/0x642 [ 435.410589][T11662] ? panic+0x764/0x764 [ 435.414878][T11662] ? __might_sleep+0xb0/0xb0 [ 435.419495][T11662] ? copy_from_kernel_nofault_allowed+0xa5/0x120 [ 435.425875][T11662] should_fail_ex+0x3a6/0x4d0 [ 435.430594][T11662] should_failslab+0x5/0x20 [ 435.435127][T11662] slab_pre_alloc_hook+0x59/0x300 [ 435.440184][T11662] ? prepend_path+0x2f/0xbe0 [ 435.444823][T11662] ? tomoyo_encode+0x26b/0x530 [ 435.449632][T11662] __kmem_cache_alloc_node+0x47/0x260 [ 435.455050][T11662] ? d_absolute_path+0x1c2/0x300 [ 435.460058][T11662] ? tomoyo_encode+0x26b/0x530 [ 435.464874][T11662] __kmalloc+0xa1/0x230 [ 435.469076][T11662] tomoyo_encode+0x26b/0x530 [ 435.473690][T11662] tomoyo_realpath_from_path+0x594/0x5d0 [ 435.479349][T11662] tomoyo_path_number_perm+0x21f/0x7f0 [ 435.484820][T11662] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 435.490466][T11662] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 435.495950][T11662] ? __fget_files+0x28/0x4a0 [ 435.500570][T11662] ? __fget_files+0x28/0x4a0 [ 435.505170][T11662] ? __fget_files+0x435/0x4a0 [ 435.509897][T11662] ? __fget_files+0x28/0x4a0 [ 435.514548][T11662] security_file_ioctl+0x6d/0xa0 [ 435.519516][T11662] __se_sys_ioctl+0x47/0x160 [ 435.524136][T11662] do_syscall_64+0x3b/0xb0 [ 435.528574][T11662] ? clear_bhb_loop+0x45/0xa0 [ 435.533432][T11662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.539394][T11662] RIP: 0033:0x7ff567977299 [ 435.543831][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.563534][T11662] RSP: 002b:00007ff5686c2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.571958][T11662] RAX: ffffffffffffffda RBX: 00007ff567b05f80 RCX: 00007ff567977299 [ 435.579942][T11662] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000003 [ 435.587919][T11662] RBP: 00007ff5686c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 435.595902][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.603879][T11662] R13: 000000000000000b R14: 00007ff567b05f80 R15: 00007ffdcb056bc8 [ 435.611875][T11662] [ 435.761114][T11662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 436.261381][T11674] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.267934][T11674] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 436.299870][T11671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.313212][T11671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 436.900666][T11689] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2443'. [ 436.952403][T11687] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.961179][T11687] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 436.990173][T11689] bond0: (slave macvlan0): Releasing backup interface [ 437.052151][T11693] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 437.261467][T11700] netlink: 'syz.0.2447': attribute type 3 has an invalid length. [ 437.271929][T11700] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2447'. [ 437.343922][ T3657] Bluetooth: hci3: command 0x0406 tx timeout [ 437.571211][T11708] netlink: 'syz.0.2450': attribute type 29 has an invalid length. [ 437.679938][T11708] netlink: 'syz.0.2450': attribute type 29 has an invalid length. [ 438.655208][T11731] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 438.681252][T11735] netlink: 'syz.0.2459': attribute type 3 has an invalid length. [ 438.726939][T11735] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2459'. [ 439.367161][T11747] net_ratelimit: 4 callbacks suppressed [ 439.367184][T11747] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 439.379308][T11747] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 439.778509][T11744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 440.106089][T11751] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 440.112561][T11751] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 440.434084][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.440446][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.217743][T11744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.233272][T11754] netlink: 'syz.1.2466': attribute type 10 has an invalid length. [ 441.541755][T11763] netlink: 'syz.3.2469': attribute type 10 has an invalid length. [ 441.542290][T11761] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 441.559619][T11761] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 441.762268][T11766] netlink: 'syz.2.2470': attribute type 10 has an invalid length. [ 441.826273][T11772] netlink: 'syz.0.2473': attribute type 3 has an invalid length. [ 441.844008][T11772] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2473'. [ 442.030113][T11782] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 442.038112][T11782] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 442.038812][T11783] FAULT_INJECTION: forcing a failure. [ 442.038812][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 442.056043][T11774] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 442.083362][T11784] netlink: 'syz.2.2477': attribute type 29 has an invalid length. [ 442.087275][T11783] CPU: 0 PID: 11783 Comm: syz.1.2478 Not tainted 6.1.102-syzkaller #0 [ 442.099640][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 442.109729][T11783] Call Trace: [ 442.113026][T11783] [ 442.116020][T11783] dump_stack_lvl+0x1e3/0x2cb [ 442.120741][T11783] ? nf_tcp_handle_invalid+0x642/0x642 [ 442.126329][T11783] ? panic+0x764/0x764 [ 442.130430][T11783] ? __might_sleep+0xb0/0xb0 [ 442.135064][T11783] ? is_bpf_text_address+0x22/0x2a0 [ 442.140303][T11783] should_fail_ex+0x3a6/0x4d0 [ 442.145014][T11783] should_failslab+0x5/0x20 [ 442.149549][T11783] slab_pre_alloc_hook+0x59/0x300 [ 442.154608][T11783] ? __get_vm_area_node+0x126/0x360 [ 442.159836][T11783] __kmem_cache_alloc_node+0x47/0x260 [ 442.165238][T11783] ? __get_vm_area_node+0x126/0x360 [ 442.170469][T11783] kmalloc_node_trace+0x23/0xe0 [ 442.175356][T11783] __get_vm_area_node+0x126/0x360 [ 442.180422][T11783] __vmalloc_node_range+0x389/0x1490 [ 442.185743][T11783] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.191325][T11783] ? free_vm_area+0x50/0x50 [ 442.195843][T11783] ? end_current_label_crit_section+0x170/0x170 [ 442.202375][T11783] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.207926][T11783] __vmalloc+0x75/0x80 [ 442.212011][T11783] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.217560][T11783] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.222935][T11783] ? bpf_prog_alloc+0x13/0x1b0 [ 442.227881][T11783] bpf_prog_alloc+0x1c/0x1b0 [ 442.232489][T11783] bpf_prog_load+0x803/0x1bb0 [ 442.237191][T11783] ? map_freeze+0x390/0x390 [ 442.241707][T11783] ? __might_fault+0xa1/0x110 [ 442.246400][T11783] ? __might_fault+0xbd/0x110 [ 442.251084][T11783] ? bpf_lsm_bpf+0x5/0x10 [ 442.255425][T11783] ? security_bpf+0x7d/0xa0 [ 442.259938][T11783] __sys_bpf+0x382/0x6c0 [ 442.264202][T11783] ? __fget_files+0x435/0x4a0 [ 442.268881][T11783] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 442.274265][T11783] ? print_irqtrace_events+0x210/0x210 [ 442.279725][T11783] ? print_irqtrace_events+0x210/0x210 [ 442.285203][T11783] ? syscall_enter_from_user_mode+0x2e/0x230 [ 442.291196][T11783] ? syscall_enter_from_user_mode+0x2e/0x230 [ 442.297185][T11783] ? lockdep_hardirqs_on+0x94/0x130 [ 442.302389][T11783] __x64_sys_bpf+0x78/0x90 [ 442.306820][T11783] do_syscall_64+0x3b/0xb0 [ 442.311248][T11783] ? clear_bhb_loop+0x45/0xa0 [ 442.315934][T11783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.321841][T11783] RIP: 0033:0x7fa455377299 [ 442.326262][T11783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.345871][T11783] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.354293][T11783] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 442.362264][T11783] RDX: 0000000000000090 RSI: 00000000200001c0 RDI: 0000000000000005 [ 442.370240][T11783] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 442.378212][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.386185][T11783] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 442.394173][T11783] [ 442.451558][T11783] syz.1.2478: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 442.452793][T11774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.477065][T11783] CPU: 1 PID: 11783 Comm: syz.1.2478 Not tainted 6.1.102-syzkaller #0 [ 442.492133][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 442.502215][T11783] Call Trace: [ 442.505515][T11783] [ 442.508474][T11783] dump_stack_lvl+0x1e3/0x2cb [ 442.513199][T11783] ? nf_tcp_handle_invalid+0x642/0x642 [ 442.518692][T11783] ? panic+0x764/0x764 [ 442.522777][T11783] ? strlcpy+0x82/0xc0 [ 442.526871][T11783] ? cpuset_print_current_mems_allowed+0x1b/0x350 [ 442.533314][T11783] ? cpuset_print_current_mems_allowed+0x30f/0x350 [ 442.539855][T11783] warn_alloc+0x26f/0x400 [ 442.544223][T11783] ? __get_vm_area_node+0x126/0x360 [ 442.549462][T11783] ? zone_watermark_ok_safe+0x270/0x270 [ 442.555051][T11783] ? __get_vm_area_node+0x351/0x360 [ 442.560306][T11783] __vmalloc_node_range+0x3ae/0x1490 [ 442.565660][T11783] ? free_vm_area+0x50/0x50 [ 442.570206][T11783] ? end_current_label_crit_section+0x170/0x170 [ 442.576478][T11783] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.582045][T11783] __vmalloc+0x75/0x80 [ 442.586146][T11783] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.591800][T11783] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 442.597189][T11783] ? bpf_prog_alloc+0x13/0x1b0 [ 442.601975][T11783] bpf_prog_alloc+0x1c/0x1b0 [ 442.606573][T11783] bpf_prog_load+0x803/0x1bb0 [ 442.611273][T11783] ? map_freeze+0x390/0x390 [ 442.615792][T11783] ? __might_fault+0xa1/0x110 [ 442.620510][T11783] ? __might_fault+0xbd/0x110 [ 442.625196][T11783] ? bpf_lsm_bpf+0x5/0x10 [ 442.629543][T11783] ? security_bpf+0x7d/0xa0 [ 442.634057][T11783] __sys_bpf+0x382/0x6c0 [ 442.638310][T11783] ? __fget_files+0x435/0x4a0 [ 442.643020][T11783] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 442.648415][T11783] ? print_irqtrace_events+0x210/0x210 [ 442.653911][T11783] ? print_irqtrace_events+0x210/0x210 [ 442.659378][T11783] ? syscall_enter_from_user_mode+0x2e/0x230 [ 442.665361][T11783] ? syscall_enter_from_user_mode+0x2e/0x230 [ 442.671344][T11783] ? lockdep_hardirqs_on+0x94/0x130 [ 442.676547][T11783] __x64_sys_bpf+0x78/0x90 [ 442.680976][T11783] do_syscall_64+0x3b/0xb0 [ 442.685404][T11783] ? clear_bhb_loop+0x45/0xa0 [ 442.690088][T11783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.695997][T11783] RIP: 0033:0x7fa455377299 [ 442.700420][T11783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.720062][T11783] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.728481][T11783] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 442.736570][T11783] RDX: 0000000000000090 RSI: 00000000200001c0 RDI: 0000000000000005 [ 442.744540][T11783] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 442.752558][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.760556][T11783] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 442.768593][T11783] [ 442.771750][T11784] netlink: 'syz.2.2477': attribute type 29 has an invalid length. [ 442.806961][T11783] Mem-Info: [ 442.813513][T11783] active_anon:8421 inactive_anon:0 isolated_anon:0 [ 442.813513][T11783] active_file:14420 inactive_file:38295 isolated_file:0 [ 442.813513][T11783] unevictable:768 dirty:234 writeback:0 [ 442.813513][T11783] slab_reclaimable:19865 slab_unreclaimable:94980 [ 442.813513][T11783] mapped:22404 shmem:1257 pagetables:520 [ 442.813513][T11783] sec_pagetables:0 bounce:0 [ 442.813513][T11783] kernel_misc_reclaimable:0 [ 442.813513][T11783] free:1368816 free_pcp:12426 free_cma:0 [ 442.864777][T11783] Node 0 active_anon:33684kB inactive_anon:0kB active_file:57680kB inactive_file:153108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89616kB dirty:936kB writeback:0kB shmem:3492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10024kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no [ 442.899687][T11783] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 442.934659][T11783] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.012279][T11783] lowmem_reserve[]: 0 2615 2616 2616 2616 [ 443.031287][T11783] Node 0 DMA32 free:1538236kB boost:0kB min:35424kB low:44280kB high:53136kB reserved_highatomic:0KB active_anon:33684kB inactive_anon:0kB active_file:57680kB inactive_file:153108kB unevictable:1536kB writepending:936kB present:3129332kB managed:2683904kB mlocked:0kB bounce:0kB free_pcp:32244kB local_pcp:19704kB free_cma:0kB [ 443.063551][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 443.173544][T11783] lowmem_reserve[]: 0 0 1 1 1 [ 443.194197][T11783] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.314740][T11783] lowmem_reserve[]: 0 0 0 0 0 [ 443.319555][T11783] Node 1 Normal free:3920772kB boost:0kB min:54464kB low:68080kB high:81696kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18920kB local_pcp:9024kB free_cma:0kB [ 443.349610][T11783] lowmem_reserve[]: 0 0 0 0 0 [ 443.354896][T11783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 443.371251][T11783] Node 0 DMA32: 3*4kB (UME) 2*8kB (ME) 480*16kB (UME) 395*32kB (UM) 266*64kB (ME) 158*128kB (UME) 82*256kB (UME) 40*512kB (UM) 11*1024kB (UM) 1*2048kB (U) 348*4096kB (UM) = 1537788kB [ 443.394656][T11783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 443.412946][T11783] Node 1 Normal: 91*4kB (UE) 45*8kB (UE) 23*16kB (UME) 24*32kB (UME) 15*64kB (UME) 7*128kB (UE) 3*256kB (U) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 955*4096kB (M) = 3920772kB [ 443.470217][T11783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.532766][T11783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.554596][T11783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.592133][T11783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.652992][T11783] 53973 total pagecache pages [ 443.688827][T11783] 0 pages in swap cache [ 443.693044][T11783] Free swap = 124996kB [ 443.750564][T11783] Total swap = 124996kB [ 443.758624][T11783] 2097051 pages RAM [ 443.770519][T11783] 0 pages HighMem/MovableOnly [ 443.786864][T11783] 392538 pages reserved [ 443.801737][T11783] 0 pages cma reserved [ 443.955842][T11808] netlink: 'syz.2.2485': attribute type 3 has an invalid length. [ 443.978776][T11809] netlink: 'syz.1.2486': attribute type 10 has an invalid length. [ 443.996580][T11808] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2485'. [ 444.666188][T11818] netlink: 'syz.1.2489': attribute type 29 has an invalid length. [ 444.680396][T11818] netlink: 'syz.1.2489': attribute type 29 has an invalid length. [ 444.793212][T11821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.942473][T11828] net_ratelimit: 3 callbacks suppressed [ 444.942492][T11828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.954592][T11828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 444.985129][T11821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.004767][T11825] netlink: 'syz.0.2491': attribute type 10 has an invalid length. [ 445.221426][T11833] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2494'. [ 445.294540][T11833] bond0: (slave macvlan0): Releasing backup interface [ 445.355857][T11838] netlink: 'syz.2.2496': attribute type 10 has an invalid length. [ 445.728662][T11846] netlink: 'syz.3.2497': attribute type 3 has an invalid length. [ 445.789408][T11846] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2497'. [ 446.272201][T11860] FAULT_INJECTION: forcing a failure. [ 446.272201][T11860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.300317][T11860] CPU: 1 PID: 11860 Comm: syz.1.2501 Not tainted 6.1.102-syzkaller #0 [ 446.308728][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 446.318822][T11860] Call Trace: [ 446.322132][T11860] [ 446.325090][T11860] dump_stack_lvl+0x1e3/0x2cb [ 446.329818][T11860] ? nf_tcp_handle_invalid+0x642/0x642 [ 446.335320][T11860] ? panic+0x764/0x764 [ 446.339425][T11860] ? __lock_acquire+0x1f80/0x1f80 [ 446.344504][T11860] should_fail_ex+0x3a6/0x4d0 [ 446.349224][T11860] _copy_from_user+0x2b/0x170 [ 446.353935][T11860] ___bpf_copy_key+0x8c/0x110 [ 446.358648][T11860] map_update_elem+0x2b4/0x680 [ 446.363460][T11860] __sys_bpf+0x337/0x6c0 [ 446.367732][T11860] ? __fget_files+0x435/0x4a0 [ 446.372417][T11860] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 446.377803][T11860] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 446.383983][T11860] ? print_irqtrace_events+0x210/0x210 [ 446.389459][T11860] ? print_irqtrace_events+0x210/0x210 [ 446.394937][T11860] ? syscall_enter_from_user_mode+0x2e/0x230 [ 446.400924][T11860] ? lockdep_hardirqs_on+0x94/0x130 [ 446.406131][T11860] __x64_sys_bpf+0x78/0x90 [ 446.410564][T11860] do_syscall_64+0x3b/0xb0 [ 446.414996][T11860] ? clear_bhb_loop+0x45/0xa0 [ 446.419684][T11860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.425585][T11860] RIP: 0033:0x7fa455377299 [ 446.430004][T11860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.449617][T11860] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.458038][T11860] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 446.466013][T11860] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 446.473985][T11860] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 446.481958][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.489935][T11860] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 446.497925][T11860] [ 446.757805][T11868] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 446.764341][T11868] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 446.922539][T11869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.179421][T11869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.322789][T11879] netlink: 'syz.3.2507': attribute type 10 has an invalid length. [ 447.390657][T11882] netlink: 'syz.0.2509': attribute type 3 has an invalid length. [ 447.409050][T11882] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2509'. [ 447.511338][T11884] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 447.519343][T11884] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 447.677765][T11891] netlink: 'syz.2.2513': attribute type 8 has an invalid length. [ 447.685974][T11891] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2513'. [ 447.815745][T11896] FAULT_INJECTION: forcing a failure. [ 447.815745][T11896] name failslab, interval 1, probability 0, space 0, times 0 [ 447.840831][T11896] CPU: 0 PID: 11896 Comm: syz.2.2515 Not tainted 6.1.102-syzkaller #0 [ 447.849060][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 447.859148][T11896] Call Trace: [ 447.862457][T11896] [ 447.865416][T11896] dump_stack_lvl+0x1e3/0x2cb [ 447.870147][T11896] ? nf_tcp_handle_invalid+0x642/0x642 [ 447.875659][T11896] ? panic+0x764/0x764 [ 447.879760][T11896] ? __might_sleep+0xb0/0xb0 [ 447.884377][T11896] ? __mutex_trylock_common+0x17e/0x2e0 [ 447.889973][T11896] should_fail_ex+0x3a6/0x4d0 [ 447.894794][T11896] should_failslab+0x5/0x20 [ 447.899331][T11896] slab_pre_alloc_hook+0x59/0x300 [ 447.904386][T11896] ? __mutex_lock+0x2f7/0xd80 [ 447.909103][T11896] ? tracepoint_add_func+0x2de/0x9d0 [ 447.914422][T11896] __kmem_cache_alloc_node+0x47/0x260 [ 447.919830][T11896] ? tracepoint_add_func+0x2de/0x9d0 [ 447.925143][T11896] __kmalloc+0xa1/0x230 [ 447.929344][T11896] ? trace_event_raw_event_timer_class+0x1b0/0x1b0 [ 447.935878][T11896] tracepoint_add_func+0x2de/0x9d0 [ 447.941039][T11896] ? trace_event_raw_event_timer_class+0x1b0/0x1b0 [ 447.947671][T11896] tracepoint_probe_register+0x101/0x160 [ 447.953336][T11896] ? pcpu_alloc+0x10af/0x18f0 [ 447.958057][T11896] ? tracepoint_probe_register_prio+0x190/0x190 [ 447.964324][T11896] ? trace_event_raw_event_timer_class+0x1b0/0x1b0 [ 447.970867][T11896] perf_trace_event_init+0x449/0x940 [ 447.976199][T11896] perf_trace_init+0x23b/0x2d0 [ 447.981007][T11896] perf_tp_event_init+0x89/0x110 [ 447.985976][T11896] perf_try_init_event+0x135/0x3e0 [ 447.991104][T11896] ? perf_event_alloc+0xf5b/0x2120 [ 447.996230][T11896] perf_event_alloc+0xf66/0x2120 [ 448.001213][T11896] ? perf_event_alloc+0xc18/0x2120 [ 448.006349][T11896] __se_sys_perf_event_open+0xb2e/0x4960 [ 448.012261][T11896] ? __se_sys_perf_event_open+0x74a/0x4960 [ 448.018181][T11896] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 448.024359][T11896] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 448.030023][T11896] ? syscall_enter_from_user_mode+0x2e/0x230 [ 448.036018][T11896] ? lockdep_hardirqs_on+0x94/0x130 [ 448.041321][T11896] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 448.046978][T11896] do_syscall_64+0x3b/0xb0 [ 448.051497][T11896] ? clear_bhb_loop+0x45/0xa0 [ 448.056187][T11896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.062359][T11896] RIP: 0033:0x7f10b5f77299 [ 448.066784][T11896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.086440][T11896] RSP: 002b:00007f10b6cdc048 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 448.094876][T11896] RAX: ffffffffffffffda RBX: 00007f10b6105f80 RCX: 00007f10b5f77299 [ 448.102855][T11896] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000140 [ 448.110845][T11896] RBP: 00007f10b6cdc0a0 R08: 000000000000000b R09: 0000000000000000 [ 448.118825][T11896] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 448.126813][T11896] R13: 000000000000000b R14: 00007f10b6105f80 R15: 00007ffdc2461da8 [ 448.134803][T11896] [ 448.526448][T11903] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 448.700109][T11903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.766970][T11913] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2521'. [ 448.889431][T11915] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2522'. [ 448.942685][T11917] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 449.368721][T11934] validate_nla: 11 callbacks suppressed [ 449.368764][T11934] netlink: 'syz.0.2531': attribute type 10 has an invalid length. [ 449.425544][T11939] netlink: 'syz.2.2533': attribute type 3 has an invalid length. [ 449.433342][T11939] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2533'. [ 449.688761][T11946] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 449.846134][T11949] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 449.861641][T11949] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2536'. [ 450.236579][T11955] FAULT_INJECTION: forcing a failure. [ 450.236579][T11955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.278252][T11955] CPU: 0 PID: 11955 Comm: syz.2.2537 Not tainted 6.1.102-syzkaller #0 [ 450.286483][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 450.296562][T11955] Call Trace: [ 450.299862][T11955] [ 450.302819][T11955] dump_stack_lvl+0x1e3/0x2cb [ 450.307537][T11955] ? nf_tcp_handle_invalid+0x642/0x642 [ 450.313051][T11955] ? panic+0x764/0x764 [ 450.317161][T11955] ? snprintf+0xd6/0x120 [ 450.321444][T11955] should_fail_ex+0x3a6/0x4d0 [ 450.326168][T11955] _copy_to_user+0x2b/0x130 [ 450.330701][T11955] simple_read_from_buffer+0xc6/0x150 [ 450.336114][T11955] proc_fail_nth_read+0x1a3/0x210 [ 450.341189][T11955] ? proc_fault_inject_write+0x390/0x390 [ 450.346877][T11955] ? fsnotify_perm+0x439/0x590 [ 450.351680][T11955] ? proc_fault_inject_write+0x390/0x390 [ 450.357356][T11955] vfs_read+0x2ed/0xbf0 [ 450.361547][T11955] ? __fdget_pos+0x2ba/0x360 [ 450.366167][T11955] ? kernel_read+0x1f0/0x1f0 [ 450.370786][T11955] ? __fget_files+0x28/0x4a0 [ 450.375404][T11955] ? __fget_files+0x435/0x4a0 [ 450.380123][T11955] ? __fdget_pos+0x2ba/0x360 [ 450.384753][T11955] ? ksys_read+0x77/0x2c0 [ 450.389121][T11955] ksys_read+0x19c/0x2c0 [ 450.393399][T11955] ? print_irqtrace_events+0x210/0x210 [ 450.398906][T11955] ? vfs_write+0xbc0/0xbc0 [ 450.403351][T11955] ? syscall_enter_from_user_mode+0x2e/0x230 [ 450.409369][T11955] ? lockdep_hardirqs_on+0x94/0x130 [ 450.414605][T11955] ? syscall_enter_from_user_mode+0x2e/0x230 [ 450.420637][T11955] do_syscall_64+0x3b/0xb0 [ 450.425089][T11955] ? clear_bhb_loop+0x45/0xa0 [ 450.429818][T11955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.435759][T11955] RIP: 0033:0x7f10b5f75d7c [ 450.440201][T11955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 450.459842][T11955] RSP: 002b:00007f10b6cdc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.468304][T11955] RAX: ffffffffffffffda RBX: 00007f10b6105f80 RCX: 00007f10b5f75d7c [ 450.476313][T11955] RDX: 000000000000000f RSI: 00007f10b6cdc0b0 RDI: 0000000000000004 [ 450.484319][T11955] RBP: 00007f10b6cdc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.492318][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.500313][T11955] R13: 000000000000000b R14: 00007f10b6105f80 R15: 00007ffdc2461da8 [ 450.508325][T11955] [ 450.664619][T11959] net_ratelimit: 4 callbacks suppressed [ 450.664642][T11959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 450.676935][T11959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 450.914881][T11970] netlink: 'syz.3.2543': attribute type 10 has an invalid length. [ 450.982137][T11971] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 450.988670][T11971] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 451.068690][T11973] netlink: 'syz.1.2544': attribute type 10 has an invalid length. [ 451.632634][T11980] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 452.057145][T11980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.382677][T11992] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 452.391077][T11992] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 452.742483][T11999] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 452.781809][T11999] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2553'. [ 452.948187][T12005] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 453.141405][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 453.160921][T12003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.211817][T12010] netlink: 'syz.3.2557': attribute type 10 has an invalid length. [ 453.366291][T12016] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 453.372868][T12016] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 453.847178][T12026] netlink: 'syz.0.2562': attribute type 3 has an invalid length. [ 453.976307][T12026] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2562'. [ 454.310744][T12036] netlink: 'syz.1.2565': attribute type 10 has an invalid length. [ 454.526482][T12043] netlink: 'syz.3.2569': attribute type 10 has an invalid length. [ 455.073466][T12046] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 455.721650][T12063] netlink: 'syz.2.2574': attribute type 29 has an invalid length. [ 455.730531][T12068] net_ratelimit: 5 callbacks suppressed [ 455.730556][T12068] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.730646][T12068] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 455.849065][T12063] netlink: 'syz.2.2574': attribute type 29 has an invalid length. [ 455.942957][T12072] netlink: 'syz.3.2577': attribute type 10 has an invalid length. [ 456.357067][T12083] netlink: 'syz.2.2581': attribute type 3 has an invalid length. [ 456.365598][T12083] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2581'. [ 456.549198][T12089] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.553886][T12087] netlink: 'syz.0.2582': attribute type 10 has an invalid length. [ 456.556827][T12089] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.677976][T12090] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.688585][T12090] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.902115][T12098] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.908681][T12098] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 457.819204][T12114] netlink: 'syz.0.2590': attribute type 10 has an invalid length. [ 457.958765][ T3656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.971378][ T3656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.005577][ T3656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.015089][ T3656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.023564][ T3656] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.030884][ T3656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.252953][ T7059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.459402][T12126] netlink: 'syz.1.2595': attribute type 10 has an invalid length. [ 458.842762][ T7059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.861796][T12137] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.869401][T12137] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.984877][ T7059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.107398][ T7059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.167617][T12147] netlink: 'syz.1.2600': attribute type 29 has an invalid length. [ 459.206919][T12147] netlink: 'syz.1.2600': attribute type 29 has an invalid length. [ 459.376938][T12119] chnl_net:caif_netlink_parms(): no params data found [ 459.807083][T12119] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.824262][T12119] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.852034][T12119] device bridge_slave_0 entered promiscuous mode [ 459.876178][T12167] validate_nla: 1 callbacks suppressed [ 459.876216][T12167] netlink: 'syz.0.2605': attribute type 10 has an invalid length. [ 459.978017][T12119] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.026694][T12119] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.053864][ T3656] Bluetooth: hci1: command tx timeout [ 460.071714][T12119] device bridge_slave_1 entered promiscuous mode [ 460.306396][T12119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.461185][T12119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.680234][T12119] team0: Port device team_slave_0 added [ 460.696739][T12119] team0: Port device team_slave_1 added [ 460.942939][T12119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.962157][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.204179][T12119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.415759][T12203] netlink: 'syz.3.2612': attribute type 10 has an invalid length. [ 461.434614][T12119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.457371][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.554151][T12119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.720091][ T3656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 461.738728][ T3656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 461.764797][ T3656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 461.775296][ T3656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 461.783086][ T3656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 461.791262][ T3656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.799493][T12213] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2616'. [ 461.844766][T12119] device hsr_slave_0 entered promiscuous mode [ 461.855316][T12119] device hsr_slave_1 entered promiscuous mode [ 461.960923][T12119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.005447][T12119] Cannot create hsr debugfs directory [ 462.163605][ T3647] Bluetooth: hci1: command tx timeout [ 462.526299][T12231] net_ratelimit: 4 callbacks suppressed [ 462.526322][T12231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 462.538426][T12231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 462.819123][T12238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 462.826853][T12238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 462.919813][T12241] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2619'. [ 462.995414][ T7059] device hsr_slave_0 left promiscuous mode [ 463.041307][ T7059] device hsr_slave_1 left promiscuous mode [ 463.068359][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.093681][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.103010][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.113456][T12247] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.119946][T12247] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 463.137342][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.166071][ T7059] device bridge_slave_1 left promiscuous mode [ 463.172382][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.202253][ T7059] device bridge_slave_0 left promiscuous mode [ 463.232200][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.326935][ T7059] device veth1_macvtap left promiscuous mode [ 463.333071][ T7059] device veth0_macvtap left promiscuous mode [ 463.363763][ T7059] device veth1_vlan left promiscuous mode [ 463.369661][ T7059] device veth0_vlan left promiscuous mode [ 463.705393][T12263] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 463.896798][ T3647] Bluetooth: hci4: command tx timeout [ 464.162444][ T7059] team0 (unregistering): Port device team_slave_1 removed [ 464.198353][ T7059] team0 (unregistering): Port device team_slave_0 removed [ 464.213823][ T3647] Bluetooth: hci1: command tx timeout [ 464.240458][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.275071][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.591009][ T7059] bond0 (unregistering): Released all slaves [ 464.663211][T12250] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 464.675135][T12263] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 465.002451][T12273] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.008953][T12273] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.131129][T12276] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2628'. [ 465.257794][T12215] chnl_net:caif_netlink_parms(): no params data found [ 465.541952][T12283] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.552273][T12283] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.637989][T12285] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2630'. [ 465.835903][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.856942][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.885068][T12215] device bridge_slave_0 entered promiscuous mode [ 465.915041][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.939143][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.954695][T12301] FAULT_INJECTION: forcing a failure. [ 465.954695][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 465.973787][ T3647] Bluetooth: hci4: command tx timeout [ 465.983587][T12215] device bridge_slave_1 entered promiscuous mode [ 466.005911][T12301] CPU: 0 PID: 12301 Comm: syz.1.2634 Not tainted 6.1.102-syzkaller #0 [ 466.014126][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 466.024203][T12301] Call Trace: [ 466.027499][T12301] [ 466.030446][T12301] dump_stack_lvl+0x1e3/0x2cb [ 466.035191][T12301] ? nf_tcp_handle_invalid+0x642/0x642 [ 466.040689][T12301] ? panic+0x764/0x764 [ 466.044790][T12301] ? __might_sleep+0xb0/0xb0 [ 466.049417][T12301] should_fail_ex+0x3a6/0x4d0 [ 466.054219][T12301] should_failslab+0x5/0x20 [ 466.058743][T12301] slab_pre_alloc_hook+0x59/0x300 [ 466.063781][T12301] ? __get_vm_area_node+0x126/0x360 [ 466.068990][T12301] __kmem_cache_alloc_node+0x47/0x260 [ 466.074397][T12301] ? __get_vm_area_node+0x126/0x360 [ 466.079616][T12301] kmalloc_node_trace+0x23/0xe0 [ 466.084476][T12301] __get_vm_area_node+0x126/0x360 [ 466.089515][T12301] __vmalloc_node_range+0x389/0x1490 [ 466.094807][T12301] ? netlink_sendmsg+0x644/0xd60 [ 466.099790][T12301] ? free_vm_area+0x50/0x50 [ 466.104298][T12301] ? __netlink_lookup+0x658/0x6d0 [ 466.109337][T12301] ? netlink_sendmsg+0x644/0xd60 [ 466.114284][T12301] vmalloc+0x75/0x80 [ 466.118186][T12301] ? netlink_sendmsg+0x644/0xd60 [ 466.123131][T12301] netlink_sendmsg+0x644/0xd60 [ 466.127919][T12301] ? netlink_getsockopt+0x580/0x580 [ 466.133128][T12301] ? aa_sock_msg_perm+0x91/0x150 [ 466.138079][T12301] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 466.143400][T12301] ? security_socket_sendmsg+0x7d/0xa0 [ 466.148888][T12301] ? netlink_getsockopt+0x580/0x580 [ 466.154103][T12301] ____sys_sendmsg+0x5a5/0x8f0 [ 466.158912][T12301] ? __sys_sendmsg_sock+0x30/0x30 [ 466.163962][T12301] __sys_sendmsg+0x2a9/0x390 [ 466.168565][T12301] ? ____sys_sendmsg+0x8f0/0x8f0 [ 466.173528][T12301] ? vfs_write+0x6cf/0xbc0 [ 466.177971][T12301] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 466.183973][T12301] ? syscall_enter_from_user_mode+0x2e/0x230 [ 466.189973][T12301] ? lockdep_hardirqs_on+0x94/0x130 [ 466.195177][T12301] ? syscall_enter_from_user_mode+0x2e/0x230 [ 466.201163][T12301] do_syscall_64+0x3b/0xb0 [ 466.205687][T12301] ? clear_bhb_loop+0x45/0xa0 [ 466.210375][T12301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.216277][T12301] RIP: 0033:0x7fa455377299 [ 466.220784][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.240393][T12301] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.248816][T12301] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 466.256792][T12301] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 466.264938][T12301] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 466.272921][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.280897][T12301] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 466.288884][T12301] [ 466.296698][ T3647] Bluetooth: hci1: command tx timeout [ 466.313626][T12301] syz.1.2634: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 466.451700][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.465755][T12301] CPU: 1 PID: 12301 Comm: syz.1.2634 Not tainted 6.1.102-syzkaller #0 [ 466.473959][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 466.484033][T12301] Call Trace: [ 466.487335][T12301] [ 466.490291][T12301] dump_stack_lvl+0x1e3/0x2cb [ 466.495007][T12301] ? nf_tcp_handle_invalid+0x642/0x642 [ 466.500499][T12301] ? panic+0x764/0x764 [ 466.504768][T12301] ? strlcpy+0x82/0xc0 [ 466.508867][T12301] ? cpuset_print_current_mems_allowed+0x1b/0x350 [ 466.515319][T12301] ? cpuset_print_current_mems_allowed+0x30f/0x350 [ 466.521871][T12301] warn_alloc+0x26f/0x400 [ 466.526236][T12301] ? __get_vm_area_node+0x126/0x360 [ 466.531473][T12301] ? zone_watermark_ok_safe+0x270/0x270 [ 466.537060][T12301] ? __get_vm_area_node+0x351/0x360 [ 466.542299][T12301] __vmalloc_node_range+0x3ae/0x1490 [ 466.547657][T12301] ? free_vm_area+0x50/0x50 [ 466.552200][T12301] ? __netlink_lookup+0x658/0x6d0 [ 466.557280][T12301] ? netlink_sendmsg+0x644/0xd60 [ 466.562255][T12301] vmalloc+0x75/0x80 [ 466.566181][T12301] ? netlink_sendmsg+0x644/0xd60 [ 466.571150][T12301] netlink_sendmsg+0x644/0xd60 [ 466.575956][T12301] ? netlink_getsockopt+0x580/0x580 [ 466.581188][T12301] ? aa_sock_msg_perm+0x91/0x150 [ 466.586158][T12301] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 466.591474][T12301] ? security_socket_sendmsg+0x7d/0xa0 [ 466.596960][T12301] ? netlink_getsockopt+0x580/0x580 [ 466.602194][T12301] ____sys_sendmsg+0x5a5/0x8f0 [ 466.607017][T12301] ? __sys_sendmsg_sock+0x30/0x30 [ 466.612088][T12301] __sys_sendmsg+0x2a9/0x390 [ 466.616716][T12301] ? ____sys_sendmsg+0x8f0/0x8f0 [ 466.621768][T12301] ? vfs_write+0x6cf/0xbc0 [ 466.626240][T12301] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 466.632291][T12301] ? syscall_enter_from_user_mode+0x2e/0x230 [ 466.638296][T12301] ? lockdep_hardirqs_on+0x94/0x130 [ 466.643524][T12301] ? syscall_enter_from_user_mode+0x2e/0x230 [ 466.649535][T12301] do_syscall_64+0x3b/0xb0 [ 466.653980][T12301] ? clear_bhb_loop+0x45/0xa0 [ 466.658695][T12301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.664629][T12301] RIP: 0033:0x7fa455377299 [ 466.669074][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.688719][T12301] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.697174][T12301] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 466.705172][T12301] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 466.713249][T12301] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 466.721250][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.729262][T12301] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 466.737282][T12301] [ 466.773738][T12308] netlink: 'syz.0.2635': attribute type 10 has an invalid length. [ 466.808689][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.864416][T12301] Mem-Info: [ 466.867979][T12301] active_anon:8521 inactive_anon:0 isolated_anon:0 [ 466.867979][T12301] active_file:14420 inactive_file:38306 isolated_file:0 [ 466.867979][T12301] unevictable:768 dirty:136 writeback:0 [ 466.867979][T12301] slab_reclaimable:19876 slab_unreclaimable:93832 [ 466.867979][T12301] mapped:21433 shmem:1270 pagetables:528 [ 466.867979][T12301] sec_pagetables:0 bounce:0 [ 466.867979][T12301] kernel_misc_reclaimable:0 [ 466.867979][T12301] free:1374707 free_pcp:8170 free_cma:0 [ 467.005411][T12119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.032661][T12119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.041820][T12301] Node 0 active_anon:33784kB inactive_anon:0kB active_file:57680kB inactive_file:153152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85432kB dirty:544kB writeback:0kB shmem:3544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9900kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no [ 467.085082][T12215] team0: Port device team_slave_0 added [ 467.093558][T12119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.105598][T12119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.165895][T12215] team0: Port device team_slave_1 added [ 467.174046][T12301] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 467.257569][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.265605][T12301] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.295236][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.356732][T12317] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2636'. [ 467.384087][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.423307][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.430513][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.460720][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.471661][T12301] lowmem_reserve[]: 0 2615 2616 2616 2616 [ 467.488030][T12301] Node 0 DMA32 free:1562188kB boost:0kB min:35424kB low:44280kB high:53136kB reserved_highatomic:0KB active_anon:33624kB inactive_anon:0kB active_file:57680kB inactive_file:153160kB unevictable:1536kB writepending:644kB present:3129332kB managed:2683904kB mlocked:0kB bounce:0kB free_pcp:14464kB local_pcp:3296kB free_cma:0kB [ 467.631897][T12301] lowmem_reserve[]: 0 0 1 1 1 [ 467.662883][T12215] device hsr_slave_0 entered promiscuous mode [ 467.669967][T12301] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.719132][T12215] device hsr_slave_1 entered promiscuous mode [ 467.729515][T12215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.753680][T12215] Cannot create hsr debugfs directory [ 467.853893][T12301] lowmem_reserve[]: 0 0 0 0 0 [ 467.858790][T12301] Node 1 Normal free:3920772kB boost:0kB min:54464kB low:68080kB high:81696kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18920kB local_pcp:9896kB free_cma:0kB [ 467.936631][T12322] net_ratelimit: 4 callbacks suppressed [ 467.936728][T12322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 467.954361][T12322] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.973281][T12301] lowmem_reserve[]: 0 0 0 0 0 [ 467.989143][T12301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.047343][T12301] Node 0 DMA32: 2*4kB (UE) 1*8kB (M) 404*16kB (U) 1192*32kB (UME) 340*64kB (UME) 122*128kB (UME) 82*256kB (UME) 40*512kB (UM) 11*1024kB (UM) 1*2048kB (U) 348*4096kB (UM) = 1562192kB [ 468.054130][ T3647] Bluetooth: hci4: command tx timeout [ 468.078513][T12301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.128024][T12119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.136650][T12301] Node 1 Normal: 91*4kB (UE) 45*8kB (UE) 23*16kB (UME) 24*32kB (UME) 15*64kB (UME) 7*128kB (UE) 3*256kB (U) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 955*4096kB (M) = 3920772kB [ 468.156195][T12301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.174885][T12301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.185487][T12301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.206631][T12301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.231730][T12301] 53952 total pagecache pages [ 468.237036][T12301] 0 pages in swap cache [ 468.241228][T12301] Free swap = 124996kB [ 468.248899][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.265880][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.266832][T12301] Total swap = 124996kB [ 468.310681][T12119] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.319792][T12301] 2097051 pages RAM [ 468.334432][T12301] 0 pages HighMem/MovableOnly [ 468.339334][T12301] 392538 pages reserved [ 468.343690][T12301] 0 pages cma reserved [ 468.388672][T12215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.421251][T12329] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2641'. [ 468.488949][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.513098][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.556735][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.563946][T11170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.651056][T12215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.708476][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.728952][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.751194][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.881676][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.888960][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.950121][T12341] netlink: 'syz.1.2644': attribute type 29 has an invalid length. [ 469.129979][T12215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.166249][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.195765][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.512214][T12215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.542595][T12346] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 469.567044][T12341] netlink: 'syz.1.2644': attribute type 29 has an invalid length. [ 469.615835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.660936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.703068][T12119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.733578][T12119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.766847][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.777113][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.814829][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.834687][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.863444][T12355] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.872427][T12355] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.902273][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.922973][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.942092][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.980661][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.134259][ T3647] Bluetooth: hci4: command tx timeout [ 470.193537][T12360] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.201887][T12360] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 470.435220][T12367] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.754497][T12377] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2651'. [ 470.954631][T12215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.131470][T12119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.156576][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.176148][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.199732][T12215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.359158][T12215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.400615][T12215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.508193][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.527684][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.659663][T12400] netlink: 'syz.1.2655': attribute type 10 has an invalid length. [ 471.722116][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.741398][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.770531][T12119] device veth0_vlan entered promiscuous mode [ 471.827985][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.848502][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.948560][T12119] device veth1_vlan entered promiscuous mode [ 471.971644][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 472.242273][T12215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.483014][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.514047][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.526010][T12119] device veth0_macvtap entered promiscuous mode [ 472.632802][T12119] device veth1_macvtap entered promiscuous mode [ 472.695290][T12417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 472.701756][T12417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 472.739468][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.749920][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.759259][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.767865][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.776295][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.114616][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.133865][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.165554][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.172787][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.269685][T12427] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2660'. [ 473.292572][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.352626][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.393459][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.420065][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.440277][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.460186][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.476210][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.503472][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.544520][T12119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.552092][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.571867][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.600164][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.631677][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.638925][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.661845][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.680575][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.697334][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.813732][T12433] netlink: 'syz.0.2661': attribute type 4 has an invalid length. [ 473.821556][T12433] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2661'. [ 473.948883][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.998394][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.015879][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.042232][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.070917][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.112417][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.134173][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.155589][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.168072][T12119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.187234][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.201724][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.227275][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.246557][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.262203][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.272428][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.282406][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.294126][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.305918][T12442] netlink: 'syz.3.2663': attribute type 10 has an invalid length. [ 474.322774][T12446] netlink: 'syz.1.2664': attribute type 10 has an invalid length. [ 474.368000][T12119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.395154][T12119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.432081][T12119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.451706][T12119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.486243][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.501496][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.553043][ T7059] device hsr_slave_0 left promiscuous mode [ 474.592145][ T7059] device hsr_slave_1 left promiscuous mode [ 474.604420][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.611939][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.645476][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.663338][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.676253][ T7059] device bridge_slave_1 left promiscuous mode [ 474.684654][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.758424][ T7059] device bridge_slave_0 left promiscuous mode [ 474.770281][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.935305][ T7059] device veth1_macvtap left promiscuous mode [ 474.941907][ T7059] device veth0_macvtap left promiscuous mode [ 474.984004][ T7059] device veth1_vlan left promiscuous mode [ 475.019867][ T7059] device veth0_vlan left promiscuous mode [ 475.477056][T12471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 475.485712][T12471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 476.212111][ T7059] team0 (unregistering): Port device team_slave_1 removed [ 476.305103][ T7059] team0 (unregistering): Port device team_slave_0 removed [ 476.367152][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.429838][T12484] FAULT_INJECTION: forcing a failure. [ 476.429838][T12484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.443711][T12484] CPU: 1 PID: 12484 Comm: syz.0.2674 Not tainted 6.1.102-syzkaller #0 [ 476.451907][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 476.461994][T12484] Call Trace: [ 476.465301][T12484] [ 476.468257][T12484] dump_stack_lvl+0x1e3/0x2cb [ 476.472976][T12484] ? nf_tcp_handle_invalid+0x642/0x642 [ 476.478455][T12484] ? panic+0x764/0x764 [ 476.482534][T12484] ? __lock_acquire+0x1f80/0x1f80 [ 476.487584][T12484] should_fail_ex+0x3a6/0x4d0 [ 476.492284][T12484] _copy_from_user+0x2b/0x170 [ 476.496976][T12484] iovec_from_user+0x13d/0x380 [ 476.501838][T12484] ? __might_fault+0xa1/0x110 [ 476.506530][T12484] __import_iovec+0x72/0x4c0 [ 476.511148][T12484] import_iovec+0xe6/0x120 [ 476.515580][T12484] copy_msghdr_from_user+0x527/0x670 [ 476.520887][T12484] ? sendmsg_copy_msghdr+0x70/0x70 [ 476.526028][T12484] __sys_sendmsg+0x236/0x390 [ 476.530633][T12484] ? ____sys_sendmsg+0x8f0/0x8f0 [ 476.535581][T12484] ? vfs_write+0x6cf/0xbc0 [ 476.540050][T12484] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 476.546070][T12484] ? syscall_enter_from_user_mode+0x2e/0x230 [ 476.552068][T12484] ? lockdep_hardirqs_on+0x94/0x130 [ 476.557282][T12484] ? syscall_enter_from_user_mode+0x2e/0x230 [ 476.563305][T12484] do_syscall_64+0x3b/0xb0 [ 476.567741][T12484] ? clear_bhb_loop+0x45/0xa0 [ 476.572443][T12484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.578345][T12484] RIP: 0033:0x7f5a40d77299 [ 476.582765][T12484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.602420][T12484] RSP: 002b:00007f5a41b88048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.610858][T12484] RAX: ffffffffffffffda RBX: 00007f5a40f05f80 RCX: 00007f5a40d77299 [ 476.618845][T12484] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 476.626834][T12484] RBP: 00007f5a41b880a0 R08: 0000000000000000 R09: 0000000000000000 [ 476.634808][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.642778][T12484] R13: 000000000000000b R14: 00007f5a40f05f80 R15: 00007ffdcb8aa3a8 [ 476.650771][T12484] [ 476.666641][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.350324][ T7059] bond0 (unregistering): Released all slaves [ 477.459300][T12215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.478642][T12215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.529563][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.538301][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.568069][T12482] netlink: 'syz.3.2673': attribute type 15 has an invalid length. [ 477.584333][T12482] netlink: 'syz.3.2673': attribute type 7 has an invalid length. [ 477.994348][ T7044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.022462][ T7044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.062110][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.097901][ T7042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.114156][ T7042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.160757][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.325284][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.332889][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.378333][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.780358][T12510] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 478.786888][T12510] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.152475][T12517] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 481.999797][T12533] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 482.048908][T12533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.441328][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.482738][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.043696][T12558] netlink: 'syz.0.2690': attribute type 10 has an invalid length. [ 483.203711][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.213712][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.222977][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.231275][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.251541][T12215] device veth0_vlan entered promiscuous mode [ 483.349703][T12215] device veth1_vlan entered promiscuous mode [ 483.452475][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 483.477310][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.528813][T12215] device veth0_macvtap entered promiscuous mode [ 483.590258][T12571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.590902][T12215] device veth1_macvtap entered promiscuous mode [ 483.596744][T12571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.670335][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.681280][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.691824][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.702771][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.713168][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.727931][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.738385][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.763846][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.801940][T12215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.842765][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.852489][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 483.876171][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 483.888860][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.907649][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.946871][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.969574][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.042982][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.071278][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.100778][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.225265][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.302801][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.345152][T12215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.389230][T12582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 484.467663][T12582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.534831][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 484.561117][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.608877][T12215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.643503][T12215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.660317][T12215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.669733][T12215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.955976][T12595] netlink: 'syz.3.2702': attribute type 10 has an invalid length. [ 485.090193][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.123495][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.162357][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 485.212726][ T7066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.227801][ T7066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.256639][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 485.426102][T12610] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 485.432636][T12610] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 485.538703][T12612] netlink: 'syz.1.2708': attribute type 10 has an invalid length. [ 486.046728][T12621] netlink: 'syz.2.2711': attribute type 29 has an invalid length. [ 486.069848][T12621] netlink: 'syz.2.2711': attribute type 29 has an invalid length. [ 486.362987][T12628] netlink: 'syz.0.2713': attribute type 21 has an invalid length. [ 486.435986][T12629] netlink: 'syz.0.2713': attribute type 28 has an invalid length. [ 486.550915][T12629] netlink: 'syz.0.2713': attribute type 4 has an invalid length. [ 486.622298][T12633] netlink: 'syz.2.2715': attribute type 10 has an invalid length. [ 486.681629][T12629] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2713'. [ 486.770546][T12633] device macvlan0 entered promiscuous mode [ 487.238879][T12633] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 487.336013][T12642] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2718'. [ 487.462227][T12644] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.473917][T12644] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 487.693890][T12655] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2722'. [ 488.828926][T12663] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 488.930135][T12663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.269437][T12680] netlink: 'syz.3.2733': attribute type 10 has an invalid length. [ 489.333111][T12684] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2734'. [ 489.395902][T12684] bond0: (slave macvlan0): Releasing backup interface [ 489.483499][T12671] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 489.544527][T12671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.689722][T12691] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2738'. [ 490.205953][T12702] netlink: 'syz.1.2742': attribute type 29 has an invalid length. [ 490.303968][T12702] netlink: 'syz.1.2742': attribute type 29 has an invalid length. [ 492.496904][T12724] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2748'. [ 492.560195][T12726] netlink: 'syz.2.2749': attribute type 10 has an invalid length. [ 493.891489][T12747] netlink: 'syz.3.2755': attribute type 29 has an invalid length. [ 493.911384][T12747] netlink: 'syz.3.2755': attribute type 29 has an invalid length. [ 494.210021][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 494.240467][T12754] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 494.247643][T12754] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 494.601333][T12757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.693618][T12759] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2759'. [ 495.311749][T12778] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 495.318358][T12778] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 495.985605][T12785] netlink: 'syz.1.2769': attribute type 29 has an invalid length. [ 496.035269][T12785] netlink: 'syz.1.2769': attribute type 29 has an invalid length. [ 496.479581][T12794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2772'. [ 496.514648][T12793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 496.521107][T12793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 496.605176][T12796] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2773'. [ 496.795104][T12803] netlink: 'syz.0.2776': attribute type 10 has an invalid length. [ 496.821648][T12801] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.011010][T12807] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.023119][T12807] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 497.084196][T12801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.119345][T12822] netlink: 'syz.0.2782': attribute type 29 has an invalid length. [ 498.162278][T12822] netlink: 'syz.0.2782': attribute type 29 has an invalid length. [ 498.818040][T12833] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2786'. [ 499.134184][T12839] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2789'. [ 500.733800][T12856] netlink: 'syz.3.2795': attribute type 29 has an invalid length. [ 500.747962][T12856] netlink: 'syz.3.2795': attribute type 29 has an invalid length. [ 500.819629][T12855] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 500.986509][T12855] net_ratelimit: 2 callbacks suppressed [ 500.986576][T12855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.018087][T12860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2796'. [ 501.121951][T12865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.131703][T12865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 501.170703][T12864] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.185695][T12864] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 501.530537][T12872] netlink: 'syz.1.2801': attribute type 29 has an invalid length. [ 501.566567][T12872] netlink: 'syz.1.2801': attribute type 29 has an invalid length. [ 501.796176][T12885] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.803735][T12885] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 501.818706][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.825134][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.160329][T12892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 502.166861][T12892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.498147][T12894] netlink: 'syz.2.2807': attribute type 29 has an invalid length. [ 502.531168][T12894] netlink: 'syz.2.2807': attribute type 29 has an invalid length. [ 502.606312][T12903] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2810'. [ 502.661742][T12899] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 502.904784][T12899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.336067][T12914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 505.103294][T12940] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2822'. [ 506.216491][T12970] netlink: 'syz.2.2831': attribute type 29 has an invalid length. [ 506.380269][T12970] netlink: 'syz.2.2831': attribute type 29 has an invalid length. [ 506.638532][T12982] net_ratelimit: 7 callbacks suppressed [ 506.638553][T12982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 506.650758][T12982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.695032][T12984] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2835'. [ 506.908252][T12992] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 506.915202][T12992] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 507.001378][T12994] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 507.009067][T12994] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 507.603757][T13013] netlink: 'syz.1.2844': attribute type 29 has an invalid length. [ 507.820621][T13013] netlink: 'syz.1.2844': attribute type 29 has an invalid length. [ 508.683268][T13021] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2846'. [ 509.094934][T13034] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.101388][T13034] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.289383][T13036] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.297287][T13036] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.356259][T13038] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2853'. [ 509.375519][T13039] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2853'. [ 510.049897][T13048] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 510.123330][T13048] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 510.789816][T13062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2859'. [ 513.133223][T13095] syz.3.2869[13095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.133362][T13095] syz.3.2869[13095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.255467][T13094] netlink: 'syz.2.2868': attribute type 29 has an invalid length. [ 513.312779][T13094] netlink: 'syz.2.2868': attribute type 29 has an invalid length. [ 514.166337][T13111] net_ratelimit: 2 callbacks suppressed [ 514.166358][T13111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 514.178421][T13111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 514.973904][T13115] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2875'. [ 515.187695][T13120] syz.1.2877[13120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.190087][T13120] syz.1.2877[13120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.252000][T13120] FAULT_INJECTION: forcing a failure. [ 515.252000][T13120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.276914][T13120] CPU: 1 PID: 13120 Comm: syz.1.2877 Not tainted 6.1.102-syzkaller #0 [ 515.285098][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 515.295176][T13120] Call Trace: [ 515.298481][T13120] [ 515.301433][T13120] dump_stack_lvl+0x1e3/0x2cb [ 515.306157][T13120] ? nf_tcp_handle_invalid+0x642/0x642 [ 515.311666][T13120] ? panic+0x764/0x764 [ 515.315781][T13120] ? read_lock_is_recursive+0x10/0x10 [ 515.321208][T13120] should_fail_ex+0x3a6/0x4d0 [ 515.325926][T13120] copy_to_user_nofault+0xd9/0x1c0 [ 515.331079][T13120] bpf_prog_42b0bc03b33f5c41+0x3f/0x45 [ 515.336567][T13120] bpf_trace_run3+0x231/0x440 [ 515.341269][T13120] ? bpf_trace_run3+0x146/0x440 [ 515.346148][T13120] ? bpf_trace_run2+0x410/0x410 [ 515.351039][T13120] trace_percpu_free_percpu+0x1d6/0x260 [ 515.356632][T13120] free_percpu+0x91b/0xea0 [ 515.361090][T13120] ? __alloc_reserved_percpu+0x30/0x30 [ 515.366576][T13120] ? __fget_files+0x28/0x4a0 [ 515.371187][T13120] ? __fget_files+0x435/0x4a0 [ 515.375883][T13120] ? lockdep_softirqs_off+0x420/0x420 [ 515.381307][T13120] ? lockdep_softirqs_off+0x420/0x420 [ 515.386712][T13120] array_map_free+0x473/0x5b0 [ 515.391419][T13120] ? btf_get_by_fd+0x8f/0x170 [ 515.396131][T13120] map_create+0x97a/0xd20 [ 515.400498][T13120] ? bpf_lsm_bpf+0x5/0x10 [ 515.404847][T13120] ? security_bpf+0x7d/0xa0 [ 515.409382][T13120] __sys_bpf+0x2d3/0x6c0 [ 515.413645][T13120] ? __fget_files+0x435/0x4a0 [ 515.418339][T13120] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 515.423757][T13120] ? print_irqtrace_events+0x210/0x210 [ 515.429247][T13120] ? print_irqtrace_events+0x210/0x210 [ 515.434736][T13120] ? syscall_enter_from_user_mode+0x2e/0x230 [ 515.440733][T13120] ? lockdep_hardirqs_on+0x94/0x130 [ 515.445992][T13120] __x64_sys_bpf+0x78/0x90 [ 515.450448][T13120] do_syscall_64+0x3b/0xb0 [ 515.454911][T13120] ? clear_bhb_loop+0x45/0xa0 [ 515.459618][T13120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.465534][T13120] RIP: 0033:0x7fa455377299 [ 515.469966][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.489590][T13120] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.498026][T13120] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 515.506011][T13120] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 515.514000][T13120] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 515.521994][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.529982][T13120] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 515.537988][T13120] [ 515.927473][T13128] netlink: 'syz.2.2881': attribute type 29 has an invalid length. [ 516.062395][T13128] netlink: 'syz.2.2881': attribute type 29 has an invalid length. [ 516.609272][T13143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 516.615786][T13143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 516.775130][T13146] syz.0.2885[13146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.775266][T13146] syz.0.2885[13146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.827762][T13148] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2886'. [ 517.227580][T13155] netlink: 'syz.0.2889': attribute type 10 has an invalid length. [ 519.218663][T13174] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2894'. [ 519.424983][T13180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.431538][T13180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.879743][T13186] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2897'. [ 520.298814][T13197] netlink: 'syz.2.2900': attribute type 10 has an invalid length. [ 521.420492][T13211] netlink: 'syz.1.2904': attribute type 29 has an invalid length. [ 521.626213][T13211] netlink: 'syz.1.2904': attribute type 29 has an invalid length. [ 522.103983][T13217] FAULT_INJECTION: forcing a failure. [ 522.103983][T13217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.223581][T13217] CPU: 0 PID: 13217 Comm: syz.0.2905 Not tainted 6.1.102-syzkaller #0 [ 522.231823][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 522.241914][T13217] Call Trace: [ 522.245220][T13217] [ 522.248180][T13217] dump_stack_lvl+0x1e3/0x2cb [ 522.252912][T13217] ? nf_tcp_handle_invalid+0x642/0x642 [ 522.258434][T13217] ? panic+0x764/0x764 [ 522.262547][T13217] ? __lock_acquire+0x1f80/0x1f80 [ 522.267648][T13217] should_fail_ex+0x3a6/0x4d0 [ 522.272382][T13217] _copy_from_user+0x2b/0x170 [ 522.277105][T13217] iovec_from_user+0x13d/0x380 [ 522.281917][T13217] ? __might_fault+0xa1/0x110 [ 522.286665][T13217] __import_iovec+0x72/0x4c0 [ 522.291332][T13217] import_iovec+0xe6/0x120 [ 522.295840][T13217] copy_msghdr_from_user+0x527/0x670 [ 522.301200][T13217] ? sendmsg_copy_msghdr+0x70/0x70 [ 522.306412][T13217] __sys_sendmsg+0x236/0x390 [ 522.311066][T13217] ? ____sys_sendmsg+0x8f0/0x8f0 [ 522.316052][T13217] ? vfs_write+0x6cf/0xbc0 [ 522.320583][T13217] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 522.326643][T13217] ? syscall_enter_from_user_mode+0x2e/0x230 [ 522.332672][T13217] ? lockdep_hardirqs_on+0x94/0x130 [ 522.337928][T13217] ? syscall_enter_from_user_mode+0x2e/0x230 [ 522.343970][T13217] do_syscall_64+0x3b/0xb0 [ 522.348433][T13217] ? clear_bhb_loop+0x45/0xa0 [ 522.353163][T13217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.359116][T13217] RIP: 0033:0x7f5a40d77299 [ 522.363574][T13217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.383235][T13217] RSP: 002b:00007f5a41b88048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.391715][T13217] RAX: ffffffffffffffda RBX: 00007f5a40f05f80 RCX: 00007f5a40d77299 [ 522.399746][T13217] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 522.407777][T13217] RBP: 00007f5a41b880a0 R08: 0000000000000000 R09: 0000000000000000 [ 522.415796][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.423805][T13217] R13: 000000000000000b R14: 00007f5a40f05f80 R15: 00007ffdcb8aa3a8 [ 522.431855][T13217] [ 522.518844][T13220] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 522.525631][T13220] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 522.922314][ T3656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.931213][ T7042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.931226][ T3656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.949474][ T3657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.965410][ T3657] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.984240][ T3657] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 522.991882][ T3657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.043832][T13229] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2908'. [ 523.246343][ T7042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.757236][ T7042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.796864][T13239] netlink: 'syz.1.2912': attribute type 10 has an invalid length. [ 524.102918][ T7042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.438738][T13227] chnl_net:caif_netlink_parms(): no params data found [ 525.013712][ T3647] Bluetooth: hci4: command tx timeout [ 525.231574][T13279] netlink: 'syz.3.2919': attribute type 10 has an invalid length. [ 525.356114][T13286] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2920'. [ 525.455316][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.462495][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.485268][T13227] device bridge_slave_0 entered promiscuous mode [ 525.540396][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.566071][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.597296][T13227] device bridge_slave_1 entered promiscuous mode [ 525.630951][T13303] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2924'. [ 525.876991][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.008710][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.246279][T13296] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 526.398950][T13296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.554611][T13227] team0: Port device team_slave_0 added [ 526.562909][T13227] team0: Port device team_slave_1 added [ 526.726495][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.747875][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.818681][T13329] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.825675][T13329] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.834468][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.894129][T13331] netlink: 'syz.2.2929': attribute type 29 has an invalid length. [ 527.000010][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.011789][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.076268][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.093572][ T3657] Bluetooth: hci4: command tx timeout [ 527.112449][T13331] netlink: 'syz.2.2929': attribute type 29 has an invalid length. [ 527.251545][T13337] netlink: 'syz.0.2931': attribute type 10 has an invalid length. [ 527.277034][T13344] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2933'. [ 527.462485][T13349] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 527.919029][T13349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.158349][T13227] device hsr_slave_0 entered promiscuous mode [ 528.184596][T13227] device hsr_slave_1 entered promiscuous mode [ 528.194432][T13227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.213243][T13227] Cannot create hsr debugfs directory [ 528.226121][T13359] netlink: 'syz.3.2936': attribute type 21 has an invalid length. [ 528.249899][T13359] netlink: 'syz.3.2936': attribute type 3 has an invalid length. [ 528.262787][T13359] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2936'. [ 528.311233][T13367] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 528.498185][T13367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.614873][ T7042] device hsr_slave_0 left promiscuous mode [ 528.663035][ T7042] device hsr_slave_1 left promiscuous mode [ 528.692206][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.728065][ T7042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.759231][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.815077][ T7042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.895836][ T7042] device bridge_slave_1 left promiscuous mode [ 528.902177][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.982514][ T7042] device bridge_slave_0 left promiscuous mode [ 529.001016][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.064114][ T7042] device veth1_macvtap left promiscuous mode [ 529.077802][ T7042] device veth0_macvtap left promiscuous mode [ 529.090378][ T7042] device veth1_vlan left promiscuous mode [ 529.103895][ T7042] device veth0_vlan left promiscuous mode [ 529.184104][ T3657] Bluetooth: hci4: command tx timeout [ 530.205682][ T7042] team0 (unregistering): Port device team_slave_1 removed [ 530.259748][ T7042] team0 (unregistering): Port device team_slave_0 removed [ 530.308349][ T7042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.361776][ T7042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.855331][ T7042] bond0 (unregistering): Released all slaves [ 531.212712][T13395] FAULT_INJECTION: forcing a failure. [ 531.212712][T13395] name failslab, interval 1, probability 0, space 0, times 0 [ 531.239069][T13393] netlink: 'syz.0.2943': attribute type 29 has an invalid length. [ 531.242800][T13395] CPU: 0 PID: 13395 Comm: syz.2.2944 Not tainted 6.1.102-syzkaller #0 [ 531.255136][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 531.265218][T13395] Call Trace: [ 531.268521][T13395] [ 531.271476][T13395] dump_stack_lvl+0x1e3/0x2cb [ 531.276200][T13395] ? nf_tcp_handle_invalid+0x642/0x642 [ 531.281783][T13395] ? panic+0x764/0x764 [ 531.285889][T13395] ? __might_sleep+0xb0/0xb0 [ 531.290527][T13395] ? is_bpf_text_address+0x22/0x2a0 [ 531.295753][T13395] should_fail_ex+0x3a6/0x4d0 [ 531.295938][ T3657] Bluetooth: hci4: command tx timeout [ 531.300450][T13395] should_failslab+0x5/0x20 [ 531.310346][T13395] slab_pre_alloc_hook+0x59/0x300 [ 531.315408][T13395] ? __get_vm_area_node+0x126/0x360 [ 531.320642][T13395] __kmem_cache_alloc_node+0x47/0x260 [ 531.324806][T13393] netlink: 'syz.0.2943': attribute type 29 has an invalid length. [ 531.326034][T13395] ? __get_vm_area_node+0x126/0x360 [ 531.326068][T13395] kmalloc_node_trace+0x23/0xe0 [ 531.326097][T13395] __get_vm_area_node+0x126/0x360 [ 531.348955][T13395] __vmalloc_node_range+0x389/0x1490 [ 531.354341][T13395] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.359902][T13395] ? free_vm_area+0x50/0x50 [ 531.364410][T13395] ? end_current_label_crit_section+0x170/0x170 [ 531.370684][T13395] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.376254][T13395] __vmalloc+0x75/0x80 [ 531.380362][T13395] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.385925][T13395] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.391303][T13395] ? bpf_prog_alloc+0x13/0x1b0 [ 531.396076][T13395] bpf_prog_alloc+0x1c/0x1b0 [ 531.400670][T13395] bpf_prog_load+0x803/0x1bb0 [ 531.405372][T13395] ? map_freeze+0x390/0x390 [ 531.409889][T13395] ? __might_fault+0xa1/0x110 [ 531.414584][T13395] ? __might_fault+0xbd/0x110 [ 531.419269][T13395] ? bpf_lsm_bpf+0x5/0x10 [ 531.423611][T13395] ? security_bpf+0x7d/0xa0 [ 531.428137][T13395] __sys_bpf+0x382/0x6c0 [ 531.432389][T13395] ? __fget_files+0x435/0x4a0 [ 531.437073][T13395] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 531.442465][T13395] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 531.448635][T13395] ? print_irqtrace_events+0x210/0x210 [ 531.454107][T13395] ? print_irqtrace_events+0x210/0x210 [ 531.459592][T13395] ? syscall_enter_from_user_mode+0x2e/0x230 [ 531.465574][T13395] ? lockdep_hardirqs_on+0x94/0x130 [ 531.470777][T13395] __x64_sys_bpf+0x78/0x90 [ 531.475223][T13395] do_syscall_64+0x3b/0xb0 [ 531.479647][T13395] ? clear_bhb_loop+0x45/0xa0 [ 531.484335][T13395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.490237][T13395] RIP: 0033:0x7efe65b77299 [ 531.494656][T13395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.514261][T13395] RSP: 002b:00007efe6692b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.522676][T13395] RAX: ffffffffffffffda RBX: 00007efe65d05f80 RCX: 00007efe65b77299 [ 531.530646][T13395] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 531.538631][T13395] RBP: 00007efe6692b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.546606][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.554574][T13395] R13: 000000000000000b R14: 00007efe65d05f80 R15: 00007ffff9ce3b18 [ 531.562642][T13395] [ 531.610591][T13400] netlink: 'syz.3.2946': attribute type 3 has an invalid length. [ 531.635770][T13400] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2946'. [ 531.655161][T13395] syz.2.2944: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 531.678933][T13395] CPU: 1 PID: 13395 Comm: syz.2.2944 Not tainted 6.1.102-syzkaller #0 [ 531.687157][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 531.697238][T13395] Call Trace: [ 531.700564][T13395] [ 531.703505][T13395] dump_stack_lvl+0x1e3/0x2cb [ 531.708201][T13395] ? nf_tcp_handle_invalid+0x642/0x642 [ 531.713705][T13395] ? panic+0x764/0x764 [ 531.717778][T13395] ? strlcpy+0x82/0xc0 [ 531.721875][T13395] ? cpuset_print_current_mems_allowed+0x1b/0x350 [ 531.728300][T13395] ? cpuset_print_current_mems_allowed+0x30f/0x350 [ 531.734812][T13395] warn_alloc+0x26f/0x400 [ 531.739149][T13395] ? __get_vm_area_node+0x126/0x360 [ 531.744385][T13395] ? zone_watermark_ok_safe+0x270/0x270 [ 531.749943][T13395] ? __get_vm_area_node+0x351/0x360 [ 531.755163][T13395] __vmalloc_node_range+0x3ae/0x1490 [ 531.760479][T13395] ? free_vm_area+0x50/0x50 [ 531.765018][T13395] ? end_current_label_crit_section+0x170/0x170 [ 531.771276][T13395] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.777001][T13395] __vmalloc+0x75/0x80 [ 531.781082][T13395] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.786632][T13395] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 531.792008][T13395] ? bpf_prog_alloc+0x13/0x1b0 [ 531.796779][T13395] bpf_prog_alloc+0x1c/0x1b0 [ 531.801382][T13395] bpf_prog_load+0x803/0x1bb0 [ 531.806082][T13395] ? map_freeze+0x390/0x390 [ 531.810597][T13395] ? __might_fault+0xa1/0x110 [ 531.815296][T13395] ? __might_fault+0xbd/0x110 [ 531.819993][T13395] ? bpf_lsm_bpf+0x5/0x10 [ 531.824334][T13395] ? security_bpf+0x7d/0xa0 [ 531.828960][T13395] __sys_bpf+0x382/0x6c0 [ 531.833233][T13395] ? __fget_files+0x435/0x4a0 [ 531.837950][T13395] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 531.843341][T13395] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 531.849537][T13395] ? print_irqtrace_events+0x210/0x210 [ 531.855011][T13395] ? print_irqtrace_events+0x210/0x210 [ 531.860519][T13395] ? syscall_enter_from_user_mode+0x2e/0x230 [ 531.866527][T13395] ? lockdep_hardirqs_on+0x94/0x130 [ 531.871747][T13395] __x64_sys_bpf+0x78/0x90 [ 531.876200][T13395] do_syscall_64+0x3b/0xb0 [ 531.880632][T13395] ? clear_bhb_loop+0x45/0xa0 [ 531.885320][T13395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.891223][T13395] RIP: 0033:0x7efe65b77299 [ 531.895647][T13395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.915256][T13395] RSP: 002b:00007efe6692b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.923675][T13395] RAX: ffffffffffffffda RBX: 00007efe65d05f80 RCX: 00007efe65b77299 [ 531.931659][T13395] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 531.939735][T13395] RBP: 00007efe6692b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.947717][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.955688][T13395] R13: 000000000000000b R14: 00007efe65d05f80 R15: 00007ffff9ce3b18 [ 531.963671][T13395] [ 532.006820][T13404] netlink: 'syz.1.2945': attribute type 10 has an invalid length. [ 532.867270][T13395] Mem-Info: [ 532.870592][T13395] active_anon:12257 inactive_anon:0 isolated_anon:0 [ 532.870592][T13395] active_file:14420 inactive_file:38335 isolated_file:0 [ 532.870592][T13395] unevictable:768 dirty:174 writeback:0 [ 532.870592][T13395] slab_reclaimable:19815 slab_unreclaimable:92656 [ 532.870592][T13395] mapped:21448 shmem:1252 pagetables:543 [ 532.870592][T13395] sec_pagetables:0 bounce:0 [ 532.870592][T13395] kernel_misc_reclaimable:0 [ 532.870592][T13395] free:1372359 free_pcp:8766 free_cma:0 [ 533.285444][T13227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.401104][T13227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.446633][T13227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.446636][T13395] Node 0 active_anon:48916kB inactive_anon:0kB active_file:57680kB inactive_file:153268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85764kB dirty:712kB writeback:0kB shmem:3448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9756kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no [ 533.505559][T13434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 533.543262][T13443] FAULT_INJECTION: forcing a failure. [ 533.543262][T13443] name failslab, interval 1, probability 0, space 0, times 0 [ 533.603625][T13443] CPU: 1 PID: 13443 Comm: syz.1.2954 Not tainted 6.1.102-syzkaller #0 [ 533.611872][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 533.621989][T13443] Call Trace: [ 533.625322][T13443] [ 533.628303][T13443] dump_stack_lvl+0x1e3/0x2cb [ 533.633067][T13443] ? nf_tcp_handle_invalid+0x642/0x642 [ 533.638604][T13443] ? panic+0x764/0x764 [ 533.642743][T13443] ? __might_sleep+0xb0/0xb0 [ 533.647417][T13443] ? is_bpf_text_address+0x22/0x2a0 [ 533.652693][T13443] should_fail_ex+0x3a6/0x4d0 [ 533.657453][T13443] should_failslab+0x5/0x20 [ 533.662005][T13443] slab_pre_alloc_hook+0x59/0x300 [ 533.667106][T13443] ? __get_vm_area_node+0x126/0x360 [ 533.672367][T13443] __kmem_cache_alloc_node+0x47/0x260 [ 533.677824][T13443] ? __get_vm_area_node+0x126/0x360 [ 533.683079][T13443] kmalloc_node_trace+0x23/0xe0 [ 533.688002][T13443] __get_vm_area_node+0x126/0x360 [ 533.693124][T13443] __vmalloc_node_range+0x389/0x1490 [ 533.698480][T13443] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 533.704083][T13443] ? trace_event_raw_event_lock+0x240/0x240 [ 533.710120][T13443] ? free_vm_area+0x50/0x50 [ 533.714691][T13443] ? end_current_label_crit_section+0x170/0x170 [ 533.721023][T13443] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 533.726630][T13443] __vmalloc+0x75/0x80 [ 533.730761][T13443] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 533.736370][T13443] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 533.741796][T13443] ? bpf_prog_alloc+0x13/0x1b0 [ 533.746799][T13443] bpf_prog_alloc+0x1c/0x1b0 [ 533.751461][T13443] bpf_prog_load+0x803/0x1bb0 [ 533.756240][T13443] ? map_freeze+0x390/0x390 [ 533.757656][T13434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.760786][T13443] ? __might_fault+0xa1/0x110 [ 533.760885][T13443] ? __might_fault+0xbd/0x110 [ 533.760923][T13443] ? bpf_lsm_bpf+0x5/0x10 [ 533.789822][T13443] ? security_bpf+0x7d/0xa0 [ 533.794404][T13443] __sys_bpf+0x382/0x6c0 [ 533.798699][T13443] ? __fget_files+0x435/0x4a0 [ 533.803431][T13443] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 533.808903][T13443] ? print_irqtrace_events+0x210/0x210 [ 533.814437][T13443] ? print_irqtrace_events+0x210/0x210 [ 533.817359][T13227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 533.819940][T13443] ? syscall_enter_from_user_mode+0x2e/0x230 [ 533.819990][T13443] ? syscall_enter_from_user_mode+0x2e/0x230 [ 533.820020][T13443] ? lockdep_hardirqs_on+0x94/0x130 [ 533.843971][T13443] __x64_sys_bpf+0x78/0x90 [ 533.848454][T13443] do_syscall_64+0x3b/0xb0 [ 533.852927][T13443] ? clear_bhb_loop+0x45/0xa0 [ 533.857666][T13443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.863624][T13443] RIP: 0033:0x7fa455377299 [ 533.868088][T13443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.887751][T13443] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.896238][T13443] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 533.904260][T13443] RDX: 0000000000000090 RSI: 0000000020000480 RDI: 0000000000000005 [ 533.912271][T13443] RBP: 00007fa4560930a0 R08: 0000000000000000 R09: 0000000000000000 [ 533.920286][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.928391][T13443] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 533.936469][T13443] [ 533.951768][T13395] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 533.994305][T13395] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.052168][T13395] lowmem_reserve[]: 0 2615 2616 2616 2616 [ 534.104439][T13395] Node 0 DMA32 free:1551576kB boost:0kB min:35424kB low:44280kB high:53136kB reserved_highatomic:0KB active_anon:48816kB inactive_anon:0kB active_file:57680kB inactive_file:153268kB unevictable:1536kB writepending:712kB present:3129332kB managed:2683904kB mlocked:0kB bounce:0kB free_pcp:18684kB local_pcp:9852kB free_cma:0kB [ 534.211202][T13395] lowmem_reserve[]: 0 0 1 1 1 [ 534.229793][T13395] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.317850][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.333440][T13395] lowmem_reserve[]: 0 0 0 0 0 [ 534.338241][T13395] Node 1 Normal free:3920772kB boost:0kB min:54464kB low:68080kB high:81696kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18920kB local_pcp:9024kB free_cma:0kB [ 534.405703][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.420284][T13395] lowmem_reserve[]: 0 0 0 0 0 [ 534.436896][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.444093][T13395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 534.467915][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.521085][T13456] netlink: 'syz.0.2958': attribute type 29 has an invalid length. [ 534.533150][T13395] Node 0 DMA32: 1138*4kB (UM) 187*8kB (UM) 426*16kB (UME) 595*32kB (UE) 343*64kB (UME) 133*128kB (UME) 83*256kB (UME) 40*512kB (UM) 11*1024kB (UM) 1*2048kB (U) 348*4096kB (UM) = 1551328kB [ 534.557258][T13395] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 534.569070][T13395] Node 1 Normal: 91*4kB (UE) 45*8kB (UE) 23*16kB (UME) 24*32kB (UME) 15*64kB (UME) 7*128kB (UE) 3*256kB (U) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 955*4096kB (M) = 3920772kB [ 534.586890][T13395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.596895][T13395] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.606466][T13395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.623805][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.632248][T13395] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.642946][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.651984][T13395] 54004 total pagecache pages [ 534.667622][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.671762][T13395] 0 pages in swap cache [ 534.674826][T12331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.685743][T13395] Free swap = 124996kB [ 534.698242][T13395] Total swap = 124996kB [ 534.711606][T13395] 2097051 pages RAM [ 534.720881][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.722318][T13395] 0 pages HighMem/MovableOnly [ 534.759670][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.762209][T13395] 392538 pages reserved [ 534.780968][T13395] 0 pages cma reserved [ 534.799019][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.806240][T12331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.850872][T13456] netlink: 'syz.0.2958': attribute type 29 has an invalid length. [ 534.878192][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.900477][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.923316][T13463] netlink: 'syz.3.2959': attribute type 29 has an invalid length. [ 534.950026][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.983363][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 535.027400][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 535.070300][T13463] netlink: 'syz.3.2959': attribute type 29 has an invalid length. [ 535.099623][T13468] netlink: 'syz.2.2960': attribute type 10 has an invalid length. [ 535.134751][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.157871][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 535.178196][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 535.217275][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.254659][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.286091][T13227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.347915][T13227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.392050][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.414376][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.790364][T13493] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 535.798240][T13493] #PF: supervisor instruction fetch in kernel mode [ 535.804857][T13493] #PF: error_code(0x0010) - not-present page [ 535.810875][T13493] PGD 2431f067 P4D 2431f067 PUD 29f89067 PMD 0 [ 535.817173][T13493] Oops: 0010 [#1] PREEMPT SMP KASAN [ 535.822395][T13493] CPU: 0 PID: 13493 Comm: syz.1.2966 Not tainted 6.1.102-syzkaller #0 [ 535.830652][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 535.840732][T13493] RIP: 0010:0x0 [ 535.844220][T13493] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 535.851607][T13493] RSP: 0018:ffffc900037df158 EFLAGS: 00010246 [ 535.857705][T13493] RAX: 1ffffffff175245f RBX: ffffffff8ba922f8 RCX: 0000000000000000 [ 535.865696][T13493] RDX: ffffc900037df200 RSI: 0000000000000001 RDI: ffff888073ee8000 [ 535.873703][T13493] RBP: ffffc900037df2d0 R08: ffffffff85aad541 R09: ffffed100e7dd008 [ 535.881734][T13493] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 535.889744][T13493] R13: ffff888073ee8000 R14: ffffc900037df238 R15: ffffc900037df238 [ 535.897752][T13493] FS: 00007fa4560936c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 535.906711][T13493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.913323][T13493] CR2: ffffffffffffffd6 CR3: 000000005ab10000 CR4: 00000000003506f0 [ 535.921328][T13493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 535.929326][T13493] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 535.937330][T13493] Call Trace: [ 535.940633][T13493] [ 535.943583][T13493] ? __die_body+0x5e/0xa0 [ 535.947953][T13493] ? page_fault_oops+0x7fe/0xaa0 [ 535.952918][T13493] ? mark_lock+0x9a/0x340 [ 535.957297][T13493] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 535.962878][T13493] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 535.968914][T13493] ? rcu_is_watching+0x11/0xb0 [ 535.973709][T13493] ? is_errata93+0xc0/0x240 [ 535.978250][T13493] ? exc_page_fault+0x3d1/0x620 [ 535.983137][T13493] ? asm_exc_page_fault+0x22/0x30 [ 535.988200][T13493] ? bond_get_slave_by_id+0x251/0x560 [ 535.993650][T13493] bond_xdp_xmit+0x3fd/0x650 [ 535.998274][T13493] ? bond_xdp_xmit+0xa7/0x650 [ 536.002979][T13493] ? bond_xdp+0x950/0x950 [ 536.007329][T13493] ? do_raw_spin_unlock+0x137/0x8a0 [ 536.012570][T13493] ? _raw_spin_unlock+0x24/0x40 [ 536.017453][T13493] ? page_pool_put_defragged_page+0x5e6/0x8d0 [ 536.023563][T13493] bq_xmit_all+0xdb8/0x1210 [ 536.028101][T13493] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 536.034137][T13493] ? __next_zones_zonelist+0x9e/0x130 [ 536.039521][T13493] ? print_irqtrace_events+0x210/0x210 [ 536.045000][T13493] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 536.051168][T13493] ? lockdep_hardirqs_on+0x94/0x130 [ 536.056376][T13493] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 536.062634][T13493] ? __dev_flush+0x1c0/0x1c0 [ 536.067232][T13493] ? dev_map_enqueue_multi+0x378/0x1100 [ 536.072786][T13493] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 536.078946][T13493] ? rcu_read_lock_bh_held+0x7a/0x110 [ 536.084355][T13493] bq_enqueue+0x324/0x3b0 [ 536.088698][T13493] dev_map_enqueue_multi+0xf8d/0x1100 [ 536.094086][T13493] ? dev_map_enqueue+0x340/0x340 [ 536.099027][T13493] ? print_irqtrace_events+0x210/0x210 [ 536.104505][T13493] ? trace_xdp_redirect+0xc3/0x2d0 [ 536.109709][T13493] xdp_do_redirect_frame+0x491/0x660 [ 536.115014][T13493] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 536.120477][T13493] ? __mutex_unlock_slowpath+0x218/0x750 [ 536.126150][T13493] ? __SCT__tp_func_snd_hdac_stream_stop+0x8/0x8 [ 536.132489][T13493] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 536.138063][T13493] ? xdp_convert_md_to_buff+0x330/0x330 [ 536.143614][T13493] ? bpf_dispatcher_change_prog+0xe0c/0xf90 [ 536.149527][T13493] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 536.155775][T13493] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 536.161936][T13493] ? xdp_convert_md_to_buff+0x5b/0x330 [ 536.167394][T13493] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 536.172951][T13493] ? dev_put+0x80/0x80 [ 536.177030][T13493] ? dev_put+0x80/0x80 [ 536.181120][T13493] bpf_prog_test_run+0x32f/0x3a0 [ 536.186350][T13493] __sys_bpf+0x3eb/0x6c0 [ 536.190610][T13493] ? ktime_get+0x242/0x270 [ 536.195033][T13493] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 536.200423][T13493] ? print_irqtrace_events+0x210/0x210 [ 536.205894][T13493] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 536.211882][T13493] ? syscall_enter_from_user_mode+0x2e/0x230 [ 536.217861][T13493] ? lockdep_hardirqs_on+0x94/0x130 [ 536.223060][T13493] __x64_sys_bpf+0x78/0x90 [ 536.227579][T13493] do_syscall_64+0x3b/0xb0 [ 536.232001][T13493] ? clear_bhb_loop+0x45/0xa0 [ 536.236686][T13493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.242581][T13493] RIP: 0033:0x7fa455377299 [ 536.247000][T13493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.266704][T13493] RSP: 002b:00007fa456093048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.275123][T13493] RAX: ffffffffffffffda RBX: 00007fa455505f80 RCX: 00007fa455377299 [ 536.283103][T13493] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 536.291077][T13493] RBP: 00007fa4553e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 536.299047][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.307017][T13493] R13: 000000000000000b R14: 00007fa455505f80 R15: 00007ffc51885a78 [ 536.314999][T13493] [ 536.318023][T13493] Modules linked in: [ 536.321930][T13493] CR2: 0000000000000000 [ 536.326134][T13493] ---[ end trace 0000000000000000 ]--- [ 536.331583][T13493] RIP: 0010:0x0 [ 536.335045][T13493] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 536.342401][T13493] RSP: 0018:ffffc900037df158 EFLAGS: 00010246 [ 536.348465][T13493] RAX: 1ffffffff175245f RBX: ffffffff8ba922f8 RCX: 0000000000000000 [ 536.356443][T13493] RDX: ffffc900037df200 RSI: 0000000000000001 RDI: ffff888073ee8000 [ 536.364414][T13493] RBP: ffffc900037df2d0 R08: ffffffff85aad541 R09: ffffed100e7dd008 [ 536.372389][T13493] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 536.380364][T13493] R13: ffff888073ee8000 R14: ffffc900037df238 R15: ffffc900037df238 [ 536.388348][T13493] FS: 00007fa4560936c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 536.397281][T13493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.403870][T13493] CR2: ffffffffffffffd6 CR3: 000000005ab10000 CR4: 00000000003506f0 [ 536.411848][T13493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.419821][T13493] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 536.427793][T13493] Kernel panic - not syncing: Fatal exception in interrupt [ 536.435125][T13493] Kernel Offset: disabled [ 536.439445][T13493] Rebooting in 86400 seconds..