last executing test programs: 14.720170558s ago: executing program 2 (id=407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.321916827s ago: executing program 2 (id=407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.408127439s ago: executing program 2 (id=407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.605202721s ago: executing program 2 (id=407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.21929521s ago: executing program 2 (id=407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.823045159s ago: executing program 1 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28) 1.662068922s ago: executing program 4 (id=753): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x5, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='host1x_channel_submitted\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x10d}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r7, @ANYRES16=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 1.635543895s ago: executing program 3 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xffffffff, 0x2, 0x4, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x405, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x807}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x0, 0x0, 0xfe, 0x0, 0xfffffffffffffffc, 0xa200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x11}, 0x102081, 0xc8, 0x0, 0x4}, r1, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYBLOB="e99c473038856dee311901f73b01469b35b634a599be6a08927da08f8e7a7db94a2145416c837dc85cbaabd0270e4a99c4f1aaf5c0e4b2be1a3f6874c742b8317e2965b740db24e2ceaf0e482273a32d69981e0739f4c7d4a9c18337e85d8420eb828f34dd4d3893a8525a8457f584be8c9c76f82156211ae7deec4c51316f85e6a8699cb4541e89a2707e", @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000007900280400000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009502000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x66a2f86af8c652bb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r8}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) write$cgroup_int(r9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x4030582b, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f00000002c0)={&(0x7f0000000940)=""/107, 0x6b, 0x0, &(0x7f00000007c0)=""/228, 0xe4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x2, 0xff, 0x220, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x0, 0x0, 0x0, 0xc00, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x2}, 0x48) close(r10) 1.625995855s ago: executing program 4 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000dfffffff00000000000000000000006c00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 1.611905846s ago: executing program 1 (id=757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="c947f1762199c2ef402b17bc904ea921a549900ce359eec58778446c61c7dfc2a0c2b9ba693efbdb28ba6ee690320d8c4fdabbcaa7ff527b055a5a46bc7a3216a733bc7b1780beabde53ac8f1c6c1891e68249c0198195f7235c6df00faecb08cc1b2463e85e1d54a7bb37abfdf3432f6afda12f0a60439cd5c360e901cd5ac98938eb09c54610c31dd359373042a7b4ae0015b0c6a9567f5075233417bc0e9f78052c5331da9f42dddd0e", @ANYRESHEX=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xb, 0x80, 0x80}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000004c0), 0xbde, r4}, 0x38) 1.56819487s ago: executing program 0 (id=758): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xed}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007d000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000150000005c93000000000000b5030200000000008500000000000000b700000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.472957118s ago: executing program 0 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x80, 0x7, 0x6, 0x25, 0x1, 0x0, 0x800, 0x11c20, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0xc57}, 0xa00, 0x9, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702c1ffe80000000000000ffffa1dce408db9d13"], 0xffdd) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYBLOB="1d2faa0370081f55b9eec28a566fcd5c1d921364c73046a79f89e509df4f09d3b2cf89e9aef19185b68c0b0a6752af43e0b60fa400e8fe737480bc23154c048e1e15104d59717beaab21ca39dcd8536e85b98cc60c08ac6d316144f98528166278ad98822150ceb8c84376ab045c93ba1a65bf00e1ffbd26937437a6b17d235fdd454f1c35873381be8988c851ec05bf3b1009383aef59effd25c76bb34993bd8761586584b44ead6854960f572652d6e38d3930ee14553cabec29e9f283330638ef774e3afca06edd6cc497297772afc4f8d9e15b50c7aa52839e81493db9d0f81c52ca2bfd", @ANYRESOCT=r6], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, &(0x7f0000000080), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.318148741s ago: executing program 3 (id=760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000000080)=""/142}, 0x90) 1.314297961s ago: executing program 1 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="afcaaeb87d70"}) (fail_nth: 3) 1.263707236s ago: executing program 3 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000dfffffff00000000000000000000006c00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 899.944976ms ago: executing program 4 (id=763): perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0x4127519, 0x8b, 0x800, r5, 0x3, '\x00', r6, r7, 0x0, 0x5, 0x2, 0xe}, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) syz_clone(0x41200, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x50}, 0x1e) 893.169386ms ago: executing program 0 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="afcaaeb87d70"}) 817.312852ms ago: executing program 3 (id=765): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) 706.032031ms ago: executing program 3 (id=766): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x5, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='host1x_channel_submitted\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x10d}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r7, @ANYRES16=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 673.679535ms ago: executing program 4 (id=767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 652.259176ms ago: executing program 4 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001380)='!\x00') ioctl$TUNSETLINK(r4, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="afcaaeb87d70"}) 612.919989ms ago: executing program 1 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x27, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r2, &(0x7f0000000640), &(0x7f00000006c0)=""/172}, 0x20) 612.498989ms ago: executing program 3 (id=770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) 584.079342ms ago: executing program 1 (id=771): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="c947f1762199c2ef402b17bc904ea921a549900ce359eec58778446c61c7dfc2a0c2b9ba693efbdb28ba6ee690320d8c4fdabbcaa7ff527b055a5a46bc7a3216a733bc7b1780beabde53ac8f1c6c1891e68249c0198195f7235c6df00faecb08cc1b2463e85e1d54a7bb37abfdf3432f6afda12f0a60439cd5c360e901cd5ac98938eb09c54610c31dd359373042a7b4ae0015b0c6a9567f5075233417bc0e9f78052c5331da9f42dddd0e", @ANYRESHEX=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xb, 0x80, 0x80}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000004c0), 0xbde, r4}, 0x38) 581.604122ms ago: executing program 0 (id=781): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 394.228928ms ago: executing program 1 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x58, &(0x7f0000000a80)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000040180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000009c0)="e47cc01bc511e0f02bed466b3799dfcf1ec803cb3c92d5c6c1678d8c928d945203289d3ee04a06d306e0b2d2e316657de689669dcfeeb4f55eb073da8fc252410214e36aca99a2c4efdead31362d", &(0x7f0000000340)=""/3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000020000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) 393.918387ms ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) unlink(0x0) 213.845513ms ago: executing program 0 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 213.434843ms ago: executing program 4 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000dfffffff00000000000000000000006c00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 0s ago: executing program 2 (id=407): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x9}, 0x144}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): y_perm+0x6a/0x5d0 [ 86.754907][ T1608] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 86.760633][ T1608] ? __kasan_check_write+0x14/0x20 [ 86.765581][ T1608] ? fput_many+0x160/0x1b0 [ 86.769836][ T1608] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 86.775560][ T1608] bpf_prog_test_run+0x3b0/0x630 [ 86.780336][ T1608] ? bpf_prog_query+0x220/0x220 [ 86.785022][ T1608] ? selinux_bpf+0xd2/0x100 [ 86.789366][ T1608] ? security_bpf+0x82/0xb0 [ 86.793702][ T1608] __sys_bpf+0x525/0x760 [ 86.797778][ T1608] ? fput_many+0x160/0x1b0 [ 86.802032][ T1608] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 86.807241][ T1608] ? debug_smp_processor_id+0x17/0x20 [ 86.812446][ T1608] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 86.818349][ T1608] __x64_sys_bpf+0x7c/0x90 [ 86.822601][ T1608] do_syscall_64+0x3d/0xb0 [ 86.826853][ T1608] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.832582][ T1608] RIP: 0033:0x7fd4b9e01e79 [ 86.836836][ T1608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.856276][ T1608] RSP: 002b:00007fd4b8a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.864522][ T1608] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e01e79 [ 86.872333][ T1608] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 86.880143][ T1608] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.887955][ T1608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.895766][ T1608] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 86.903581][ T1608] [ 87.026488][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.033707][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.054226][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.084431][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.103493][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.110350][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.132142][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.147147][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.162690][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.169541][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.226703][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.241670][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.258095][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.331443][ T1575] device veth0_vlan entered promiscuous mode [ 87.382680][ T1575] device veth1_macvtap entered promiscuous mode [ 87.403170][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.444949][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.486008][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.493214][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.500508][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.784311][ T1638] FAULT_INJECTION: forcing a failure. [ 87.784311][ T1638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.925322][ T1638] CPU: 1 PID: 1638 Comm: syz.4.428 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 87.934957][ T1638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.944852][ T1638] Call Trace: [ 87.947975][ T1638] [ 87.950757][ T1638] dump_stack_lvl+0x151/0x1c0 [ 87.955272][ T1638] ? io_uring_drop_tctx_refs+0x190/0x190 [ 87.960734][ T1638] ? arch_stack_walk+0xf3/0x140 [ 87.965423][ T1638] dump_stack+0x15/0x20 [ 87.969415][ T1638] should_fail+0x3c6/0x510 [ 87.973666][ T1638] should_fail_alloc_page+0x5a/0x80 [ 87.978699][ T1638] prepare_alloc_pages+0x15c/0x700 [ 87.983646][ T1638] ? __stack_depot_save+0x34/0x470 [ 87.988593][ T1638] ? __alloc_pages_bulk+0xe40/0xe40 [ 87.993624][ T1638] ? ____kasan_kmalloc+0xed/0x110 [ 87.998483][ T1638] ? ____kasan_kmalloc+0xdb/0x110 [ 88.003345][ T1638] ? __kasan_kmalloc+0x9/0x10 [ 88.007855][ T1638] ? kmem_cache_alloc_trace+0x115/0x210 [ 88.013237][ T1638] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 88.018798][ T1638] __alloc_pages+0x18c/0x8f0 [ 88.023219][ T1638] ? prep_new_page+0x110/0x110 [ 88.027826][ T1638] new_slab+0x9a/0x4e0 [ 88.031726][ T1638] ___slab_alloc+0x39e/0x830 [ 88.036151][ T1638] ? __build_skb+0x2a/0x300 [ 88.040493][ T1638] ? __build_skb+0x2a/0x300 [ 88.044830][ T1638] __slab_alloc+0x4a/0x90 [ 88.048996][ T1638] ? __build_skb+0x2a/0x300 [ 88.053336][ T1638] kmem_cache_alloc+0x134/0x200 [ 88.058023][ T1638] ? __put_user_ns+0x60/0x60 [ 88.062455][ T1638] __build_skb+0x2a/0x300 [ 88.066616][ T1638] build_skb+0x25/0x1f0 [ 88.070607][ T1638] bpf_prog_test_run_skb+0x38e/0x1420 [ 88.075815][ T1638] ? __kasan_check_write+0x14/0x20 [ 88.080761][ T1638] ? proc_fail_nth_write+0x20b/0x290 [ 88.085883][ T1638] ? selinux_file_permission+0x2c4/0x570 [ 88.091351][ T1638] ? fsnotify_perm+0x6a/0x5d0 [ 88.095865][ T1638] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 88.101591][ T1638] ? __kasan_check_write+0x14/0x20 [ 88.106539][ T1638] ? fput_many+0x160/0x1b0 [ 88.110792][ T1638] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 88.116521][ T1638] bpf_prog_test_run+0x3b0/0x630 [ 88.121293][ T1638] ? bpf_prog_query+0x220/0x220 [ 88.125979][ T1638] ? selinux_bpf+0xd2/0x100 [ 88.130325][ T1638] ? security_bpf+0x82/0xb0 [ 88.134659][ T1638] __sys_bpf+0x525/0x760 [ 88.138738][ T1638] ? fput_many+0x160/0x1b0 [ 88.142991][ T1638] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 88.148201][ T1638] ? debug_smp_processor_id+0x17/0x20 [ 88.153405][ T1638] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 88.159308][ T1638] __x64_sys_bpf+0x7c/0x90 [ 88.163561][ T1638] do_syscall_64+0x3d/0xb0 [ 88.167814][ T1638] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.173541][ T1638] RIP: 0033:0x7fbea76a2e79 [ 88.177795][ T1638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.197234][ T1638] RSP: 002b:00007fbea6320038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.205481][ T1638] RAX: ffffffffffffffda RBX: 00007fbea783ef80 RCX: 00007fbea76a2e79 [ 88.213377][ T1638] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 88.221188][ T1638] RBP: 00007fbea6320090 R08: 0000000000000000 R09: 0000000000000000 [ 88.229000][ T1638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.236811][ T1638] R13: 0000000000000000 R14: 00007fbea783ef80 R15: 00007ffcbf6b9648 [ 88.244626][ T1638] [ 88.249020][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.262857][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.283472][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.302175][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.358020][ T1631] device syzkaller0 entered promiscuous mode [ 88.512784][ T1659] FAULT_INJECTION: forcing a failure. [ 88.512784][ T1659] name failslab, interval 1, probability 0, space 0, times 0 [ 88.535172][ T1659] CPU: 0 PID: 1659 Comm: syz.3.435 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 88.544803][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 88.554694][ T1659] Call Trace: [ 88.557819][ T1659] [ 88.560597][ T1659] dump_stack_lvl+0x151/0x1c0 [ 88.565262][ T1659] ? io_uring_drop_tctx_refs+0x190/0x190 [ 88.570729][ T1659] dump_stack+0x15/0x20 [ 88.574717][ T1659] should_fail+0x3c6/0x510 [ 88.578971][ T1659] __should_failslab+0xa4/0xe0 [ 88.583571][ T1659] should_failslab+0x9/0x20 [ 88.587910][ T1659] slab_pre_alloc_hook+0x37/0xd0 [ 88.592683][ T1659] ? tipc_buf_acquire+0x2b/0xe0 [ 88.597372][ T1659] __kmalloc_track_caller+0x6c/0x260 [ 88.602491][ T1659] ? tipc_buf_acquire+0x2b/0xe0 [ 88.607179][ T1659] ? tipc_buf_acquire+0x2b/0xe0 [ 88.611866][ T1659] __alloc_skb+0x10c/0x550 [ 88.616126][ T1659] tipc_buf_acquire+0x2b/0xe0 [ 88.620630][ T1659] tipc_msg_build+0x9cd/0x1230 [ 88.625233][ T1659] ? proc_tid_base_lookup+0x2b/0x30 [ 88.630264][ T1659] ? tipc_msg_fragment+0x760/0x760 [ 88.635210][ T1659] ? tipc_nametbl_lookup_mcast_nodes+0x424/0xa10 [ 88.641373][ T1659] __tipc_sendmsg+0x2203/0x3240 [ 88.646063][ T1659] ? avc_has_perm_noaudit+0x2dd/0x430 [ 88.651268][ T1659] ? local_bh_enable+0x30/0x30 [ 88.655869][ T1659] ? wait_woken+0x170/0x170 [ 88.660209][ T1659] ? avc_has_perm+0x16f/0x260 [ 88.664718][ T1659] ? __kernel_text_address+0x9b/0x110 [ 88.669929][ T1659] ? avc_has_perm_noaudit+0x430/0x430 [ 88.675133][ T1659] ? __kasan_check_write+0x14/0x20 [ 88.680081][ T1659] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 88.684941][ T1659] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 88.689976][ T1659] ? __local_bh_enable_ip+0x58/0x80 [ 88.695009][ T1659] ? lock_sock_nested+0x266/0x300 [ 88.699870][ T1659] ? sock_init_data+0xc0/0xc0 [ 88.704385][ T1659] ? _raw_spin_lock+0x1b0/0x1b0 [ 88.709069][ T1659] ? kasan_set_track+0x5d/0x70 [ 88.713668][ T1659] ? kasan_set_free_info+0x23/0x40 [ 88.718619][ T1659] ? check_stack_object+0x114/0x130 [ 88.723656][ T1659] tipc_sendmsg+0x55/0x70 [ 88.727816][ T1659] ? tipc_recvmsg+0x13b0/0x13b0 [ 88.732502][ T1659] ____sys_sendmsg+0x59e/0x8f0 [ 88.737106][ T1659] ? __sys_sendmsg_sock+0x40/0x40 [ 88.741964][ T1659] ? import_iovec+0xe5/0x120 [ 88.746392][ T1659] ___sys_sendmsg+0x252/0x2e0 [ 88.750904][ T1659] ? __sys_sendmsg+0x260/0x260 [ 88.755512][ T1659] ? __fdget+0x1bc/0x240 [ 88.759582][ T1659] __se_sys_sendmsg+0x19a/0x260 [ 88.764269][ T1659] ? __x64_sys_sendmsg+0x90/0x90 [ 88.769041][ T1659] ? ksys_write+0x260/0x2c0 [ 88.773384][ T1659] ? debug_smp_processor_id+0x17/0x20 [ 88.778591][ T1659] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 88.784491][ T1659] __x64_sys_sendmsg+0x7b/0x90 [ 88.789090][ T1659] do_syscall_64+0x3d/0xb0 [ 88.793344][ T1659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.799071][ T1659] RIP: 0033:0x7f6be3fcee79 [ 88.803326][ T1659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.822766][ T1659] RSP: 002b:00007f6be2c4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.831011][ T1659] RAX: ffffffffffffffda RBX: 00007f6be416af80 RCX: 00007f6be3fcee79 [ 88.838823][ T1659] RDX: 0000000000000000 RSI: 0000000020004440 RDI: 0000000000000007 [ 88.846634][ T1659] RBP: 00007f6be2c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 88.854443][ T1659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.862255][ T1659] R13: 0000000000000000 R14: 00007f6be416af80 R15: 00007ffe5db3a808 [ 88.870072][ T1659] [ 88.940486][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.947436][ T1654] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.954522][ T1654] device bridge_slave_0 entered promiscuous mode [ 88.961558][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.968535][ T1654] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.976234][ T1654] device bridge_slave_1 entered promiscuous mode [ 89.027070][ T30] audit: type=1400 audit(1723884651.724:142): avc: denied { cpu } for pid=1676 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.166128][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.172983][ T1654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.180086][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.186876][ T1654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.562406][ T1697] FAULT_INJECTION: forcing a failure. [ 89.562406][ T1697] name failslab, interval 1, probability 0, space 0, times 0 [ 89.574902][ T1697] CPU: 1 PID: 1697 Comm: syz.1.447 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 89.584444][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 89.594343][ T1697] Call Trace: [ 89.597465][ T1697] [ 89.600240][ T1697] dump_stack_lvl+0x151/0x1c0 [ 89.604755][ T1697] ? io_uring_drop_tctx_refs+0x190/0x190 [ 89.610220][ T1697] ? do_syscall_64+0x3d/0xb0 [ 89.614651][ T1697] dump_stack+0x15/0x20 [ 89.618639][ T1697] should_fail+0x3c6/0x510 [ 89.622895][ T1697] __should_failslab+0xa4/0xe0 [ 89.627492][ T1697] should_failslab+0x9/0x20 [ 89.631832][ T1697] slab_pre_alloc_hook+0x37/0xd0 [ 89.636604][ T1697] ? skb_ensure_writable+0x2d0/0x440 [ 89.641724][ T1697] __kmalloc_track_caller+0x6c/0x260 [ 89.646852][ T1697] ? skb_ensure_writable+0x2d0/0x440 [ 89.651969][ T1697] ? skb_ensure_writable+0x2d0/0x440 [ 89.657090][ T1697] pskb_expand_head+0x113/0x1240 [ 89.661861][ T1697] ? __kasan_check_write+0x14/0x20 [ 89.666813][ T1697] skb_ensure_writable+0x2d0/0x440 [ 89.671761][ T1697] bpf_clone_redirect+0x117/0x390 [ 89.676622][ T1697] bpf_prog_973cd02a7a0e8181+0x56/0xaec [ 89.682083][ T1697] ? swiotlb_bounce+0x410/0x460 [ 89.686772][ T1697] ? __stack_depot_save+0x34/0x470 [ 89.691719][ T1697] ? __kasan_slab_alloc+0xc3/0xe0 [ 89.694805][ T1654] device veth0_vlan entered promiscuous mode [ 89.696578][ T1697] ? __kasan_slab_alloc+0xb1/0xe0 [ 89.696597][ T1697] ? slab_post_alloc_hook+0x53/0x2c0 [ 89.708365][ T1654] device veth1_macvtap entered promiscuous mode [ 89.712373][ T1697] ? kmem_cache_alloc+0xf5/0x200 [ 89.712397][ T1697] ? __build_skb+0x2a/0x300 [ 89.727562][ T1697] ? build_skb+0x25/0x1f0 [ 89.731728][ T1697] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 89.737113][ T1697] ? bpf_prog_test_run+0x3b0/0x630 [ 89.742056][ T1697] ? __sys_bpf+0x525/0x760 [ 89.746308][ T1697] ? __x64_sys_bpf+0x7c/0x90 [ 89.750735][ T1697] ? do_syscall_64+0x3d/0xb0 [ 89.755163][ T1697] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.761070][ T1697] ? ktime_get+0x12f/0x160 [ 89.765315][ T1697] bpf_test_run+0x478/0xa10 [ 89.769656][ T1697] ? convert___skb_to_skb+0x570/0x570 [ 89.774861][ T1697] ? eth_type_trans+0x2c6/0x600 [ 89.779551][ T1697] ? eth_get_headlen+0x240/0x240 [ 89.784321][ T1697] ? convert___skb_to_skb+0x44/0x570 [ 89.789442][ T1697] bpf_prog_test_run_skb+0xb41/0x1420 [ 89.794650][ T1697] ? __kasan_check_write+0x14/0x20 [ 89.799600][ T1697] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 89.805324][ T1697] ? __kasan_check_write+0x14/0x20 [ 89.810271][ T1697] ? fput_many+0x160/0x1b0 [ 89.814525][ T1697] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 89.820253][ T1697] bpf_prog_test_run+0x3b0/0x630 [ 89.825027][ T1697] ? bpf_prog_query+0x220/0x220 [ 89.829713][ T1697] ? selinux_bpf+0xd2/0x100 [ 89.834053][ T1697] ? security_bpf+0x82/0xb0 [ 89.838391][ T1697] __sys_bpf+0x525/0x760 [ 89.842471][ T1697] ? fput_many+0x160/0x1b0 [ 89.846723][ T1697] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 89.851933][ T1697] ? debug_smp_processor_id+0x17/0x20 [ 89.857139][ T1697] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 89.863041][ T1697] __x64_sys_bpf+0x7c/0x90 [ 89.867294][ T1697] do_syscall_64+0x3d/0xb0 [ 89.871546][ T1697] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.877274][ T1697] RIP: 0033:0x7fd4b9e01e79 [ 89.881529][ T1697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.900968][ T1697] RSP: 002b:00007fd4b8a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.909213][ T1697] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e01e79 [ 89.917023][ T1697] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 89.924835][ T1697] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.932645][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.940459][ T1697] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 89.948272][ T1697] [ 90.002683][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.024554][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.055136][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.071241][ T30] audit: type=1400 audit(1723884652.764:143): avc: denied { create } for pid=1718 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.075774][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.249046][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.298731][ T30] audit: type=1400 audit(1723884652.994:144): avc: denied { create } for pid=1726 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.373163][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.426928][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.498117][ T30] audit: type=1400 audit(1723884653.144:145): avc: denied { create } for pid=1726 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.547783][ T1731] FAULT_INJECTION: forcing a failure. [ 90.547783][ T1731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.560805][ T1731] CPU: 0 PID: 1731 Comm: syz.1.456 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 90.570508][ T1731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 90.580403][ T1731] Call Trace: [ 90.583527][ T1731] [ 90.586303][ T1731] dump_stack_lvl+0x151/0x1c0 [ 90.590818][ T1731] ? io_uring_drop_tctx_refs+0x190/0x190 [ 90.596287][ T1731] ? kstrtouint_from_user+0x20a/0x2a0 [ 90.601493][ T1731] dump_stack+0x15/0x20 [ 90.605488][ T1731] should_fail+0x3c6/0x510 [ 90.609737][ T1731] should_fail_usercopy+0x1a/0x20 [ 90.614599][ T1731] _copy_to_user+0x20/0x90 [ 90.618938][ T1731] simple_read_from_buffer+0xc7/0x150 [ 90.624144][ T1731] proc_fail_nth_read+0x1a3/0x210 [ 90.629004][ T1731] ? proc_fault_inject_write+0x390/0x390 [ 90.634473][ T1731] ? fsnotify_perm+0x470/0x5d0 [ 90.639073][ T1731] ? security_file_permission+0x86/0xb0 [ 90.644453][ T1731] ? proc_fault_inject_write+0x390/0x390 [ 90.649925][ T1731] vfs_read+0x27d/0xd40 [ 90.653914][ T1731] ? kernel_read+0x1f0/0x1f0 [ 90.658344][ T1731] ? __kasan_check_write+0x14/0x20 [ 90.663285][ T1731] ? mutex_lock+0xb6/0x1e0 [ 90.667541][ T1731] ? wait_for_completion_killable_timeout+0x10/0x10 [ 90.673964][ T1731] ? __fdget_pos+0x2e7/0x3a0 [ 90.678388][ T1731] ? ksys_read+0x77/0x2c0 [ 90.682554][ T1731] ksys_read+0x199/0x2c0 [ 90.686634][ T1731] ? vfs_write+0x1110/0x1110 [ 90.691060][ T1731] ? debug_smp_processor_id+0x17/0x20 [ 90.696267][ T1731] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 90.702169][ T1731] __x64_sys_read+0x7b/0x90 [ 90.706625][ T1731] do_syscall_64+0x3d/0xb0 [ 90.710876][ T1731] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 90.716606][ T1731] RIP: 0033:0x7fd4b9e008bc [ 90.720855][ T1731] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 90.740298][ T1731] RSP: 002b:00007fd4b8a7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.748542][ T1731] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e008bc [ 90.756353][ T1731] RDX: 000000000000000f RSI: 00007fd4b8a7f0a0 RDI: 0000000000000006 [ 90.764164][ T1731] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.771975][ T1731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.779786][ T1731] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 90.787600][ T1731] [ 90.791589][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.799407][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.825465][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.832710][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.849667][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.856908][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.871795][ T45] device bridge_slave_1 left promiscuous mode [ 90.877809][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.885222][ T45] device bridge_slave_0 left promiscuous mode [ 90.893957][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.921348][ T1746] FAULT_INJECTION: forcing a failure. [ 90.921348][ T1746] name failslab, interval 1, probability 0, space 0, times 0 [ 90.933989][ T1746] CPU: 1 PID: 1746 Comm: syz.4.460 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 90.943602][ T1746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 90.953495][ T1746] Call Trace: [ 90.956618][ T1746] [ 90.959397][ T1746] dump_stack_lvl+0x151/0x1c0 [ 90.963910][ T1746] ? io_uring_drop_tctx_refs+0x190/0x190 [ 90.969379][ T1746] dump_stack+0x15/0x20 [ 90.973368][ T1746] should_fail+0x3c6/0x510 [ 90.977622][ T1746] __should_failslab+0xa4/0xe0 [ 90.982225][ T1746] should_failslab+0x9/0x20 [ 90.986565][ T1746] slab_pre_alloc_hook+0x37/0xd0 [ 90.991335][ T1746] __kmalloc+0x6d/0x270 [ 90.995328][ T1746] ? kvmalloc_node+0x1f0/0x4d0 [ 90.999927][ T1746] kvmalloc_node+0x1f0/0x4d0 [ 91.004354][ T1746] ? __kmalloc+0x13a/0x270 [ 91.008606][ T1746] ? vm_mmap+0xb0/0xb0 [ 91.012512][ T1746] ? bpf_map_kmalloc_node+0x118/0x160 [ 91.017720][ T1746] cpu_map_update_elem+0x65b/0xea0 [ 91.022667][ T1746] ? cpu_map_lookup_elem+0x100/0x100 [ 91.027787][ T1746] ? kvmalloc_node+0x281/0x4d0 [ 91.032390][ T1746] bpf_map_update_value+0x1a3/0x3c0 [ 91.037423][ T1746] map_update_elem+0x644/0x770 [ 91.042026][ T1746] __sys_bpf+0x405/0x760 [ 91.046099][ T1746] ? fput_many+0x160/0x1b0 [ 91.050353][ T1746] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 91.055564][ T1746] ? debug_smp_processor_id+0x17/0x20 [ 91.060767][ T1746] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 91.066670][ T1746] __x64_sys_bpf+0x7c/0x90 [ 91.070922][ T1746] do_syscall_64+0x3d/0xb0 [ 91.075175][ T1746] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.080904][ T1746] RIP: 0033:0x7fbea76a2e79 [ 91.085158][ T1746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.104598][ T1746] RSP: 002b:00007fbea6320038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.112843][ T1746] RAX: ffffffffffffffda RBX: 00007fbea783ef80 RCX: 00007fbea76a2e79 [ 91.120652][ T1746] RDX: 0000000000000020 RSI: 0000000020001540 RDI: 0000000000000002 [ 91.128467][ T1746] RBP: 00007fbea6320090 R08: 0000000000000000 R09: 0000000000000000 [ 91.136276][ T1746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.144087][ T1746] R13: 0000000000000000 R14: 00007fbea783ef80 R15: 00007ffcbf6b9648 [ 91.151902][ T1746] [ 91.155122][ T45] device veth1_macvtap left promiscuous mode [ 91.161026][ T45] device veth0_vlan left promiscuous mode [ 91.297332][ T1749] device pim6reg1 entered promiscuous mode [ 91.950342][ T1785] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.062233][ T1785] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.135662][ T1785] device bridge_slave_0 entered promiscuous mode [ 92.169520][ T1785] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.188403][ T1785] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.246596][ T1785] device bridge_slave_1 entered promiscuous mode [ 92.975014][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.015546][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.088292][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.114241][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.257034][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.263877][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.425194][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.567988][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.662996][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.669860][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.825385][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.875595][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.906929][ T1785] device veth0_vlan entered promiscuous mode [ 93.942883][ T45] device bridge_slave_1 left promiscuous mode [ 93.958429][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.029047][ T45] device bridge_slave_0 left promiscuous mode [ 94.034984][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.054119][ T45] device bridge_slave_1 left promiscuous mode [ 94.060649][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.076029][ T45] device bridge_slave_0 left promiscuous mode [ 94.116058][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.155503][ T45] device veth1_macvtap left promiscuous mode [ 94.161319][ T45] device veth0_vlan left promiscuous mode [ 94.191893][ T45] device veth1_macvtap left promiscuous mode [ 94.289038][ T45] device veth0_vlan left promiscuous mode [ 94.904880][ T1900] FAULT_INJECTION: forcing a failure. [ 94.904880][ T1900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.119236][ T1900] CPU: 0 PID: 1900 Comm: syz.4.505 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 95.128951][ T1900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 95.138848][ T1900] Call Trace: [ 95.141970][ T1900] [ 95.144747][ T1900] dump_stack_lvl+0x151/0x1c0 [ 95.149260][ T1900] ? io_uring_drop_tctx_refs+0x190/0x190 [ 95.154730][ T1900] ? __stack_depot_save+0x34/0x470 [ 95.159676][ T1900] ? __kasan_slab_alloc+0x63/0xe0 [ 95.164542][ T1900] dump_stack+0x15/0x20 [ 95.168539][ T1900] should_fail+0x3c6/0x510 [ 95.172780][ T1900] should_fail_alloc_page+0x5a/0x80 [ 95.177817][ T1900] prepare_alloc_pages+0x15c/0x700 [ 95.182764][ T1900] ? __alloc_pages_bulk+0xe40/0xe40 [ 95.187797][ T1900] __alloc_pages+0x18c/0x8f0 [ 95.192223][ T1900] ? prep_new_page+0x110/0x110 [ 95.196824][ T1900] ? __kasan_kmalloc+0x9/0x10 [ 95.201334][ T1900] ? __kmalloc+0x13a/0x270 [ 95.205588][ T1900] ? __vmalloc_node_range+0x2d6/0x8d0 [ 95.210795][ T1900] __vmalloc_node_range+0x482/0x8d0 [ 95.215829][ T1900] bpf_map_area_alloc+0xd9/0xf0 [ 95.220513][ T1900] ? htab_map_alloc+0xbb2/0x1650 [ 95.225287][ T1900] htab_map_alloc+0xbb2/0x1650 [ 95.229890][ T1900] map_create+0x411/0x2050 [ 95.234139][ T1900] __sys_bpf+0x296/0x760 [ 95.238218][ T1900] ? fput_many+0x160/0x1b0 [ 95.242470][ T1900] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 95.247682][ T1900] ? debug_smp_processor_id+0x17/0x20 [ 95.252885][ T1900] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 95.258788][ T1900] __x64_sys_bpf+0x7c/0x90 [ 95.263040][ T1900] do_syscall_64+0x3d/0xb0 [ 95.267295][ T1900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 95.273023][ T1900] RIP: 0033:0x7fbea76a2e79 [ 95.277275][ T1900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.296716][ T1900] RSP: 002b:00007fbea6320038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.304960][ T1900] RAX: ffffffffffffffda RBX: 00007fbea783ef80 RCX: 00007fbea76a2e79 [ 95.312771][ T1900] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 95.320582][ T1900] RBP: 00007fbea6320090 R08: 0000000000000000 R09: 0000000000000000 [ 95.328395][ T1900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.336205][ T1900] R13: 0000000000000000 R14: 00007fbea783ef80 R15: 00007ffcbf6b9648 [ 95.344021][ T1900] [ 95.460124][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.477548][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.531076][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.546568][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.564761][ T1923] FAULT_INJECTION: forcing a failure. [ 95.564761][ T1923] name failslab, interval 1, probability 0, space 0, times 0 [ 95.578783][ T1923] CPU: 1 PID: 1923 Comm: syz.0.513 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 95.588392][ T1923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 95.598286][ T1923] Call Trace: [ 95.601410][ T1923] [ 95.604188][ T1923] dump_stack_lvl+0x151/0x1c0 [ 95.608702][ T1923] ? io_uring_drop_tctx_refs+0x190/0x190 [ 95.614169][ T1923] dump_stack+0x15/0x20 [ 95.618161][ T1923] should_fail+0x3c6/0x510 [ 95.622421][ T1923] __should_failslab+0xa4/0xe0 [ 95.627013][ T1923] should_failslab+0x9/0x20 [ 95.631352][ T1923] slab_pre_alloc_hook+0x37/0xd0 [ 95.636252][ T1923] __kmalloc+0x6d/0x270 [ 95.640242][ T1923] ? kvmalloc_node+0x1f0/0x4d0 [ 95.644842][ T1923] kvmalloc_node+0x1f0/0x4d0 [ 95.649268][ T1923] ? __kmalloc+0x13a/0x270 [ 95.653516][ T1923] ? vm_mmap+0xb0/0xb0 [ 95.657558][ T1923] ? bpf_map_kmalloc_node+0x118/0x160 [ 95.662761][ T1923] cpu_map_update_elem+0x65b/0xea0 [ 95.667716][ T1923] ? cpu_map_lookup_elem+0x100/0x100 [ 95.672831][ T1923] ? kvmalloc_node+0x281/0x4d0 [ 95.677430][ T1923] bpf_map_update_value+0x1a3/0x3c0 [ 95.682468][ T1923] map_update_elem+0x644/0x770 [ 95.687064][ T1923] __sys_bpf+0x405/0x760 [ 95.691147][ T1923] ? fput_many+0x160/0x1b0 [ 95.695399][ T1923] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 95.700607][ T1923] ? debug_smp_processor_id+0x17/0x20 [ 95.705814][ T1923] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 95.711718][ T1923] __x64_sys_bpf+0x7c/0x90 [ 95.716219][ T1923] do_syscall_64+0x3d/0xb0 [ 95.720469][ T1923] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 95.726198][ T1923] RIP: 0033:0x7f9178d21e79 [ 95.730454][ T1923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.749893][ T1923] RSP: 002b:00007f917799f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.758225][ T1923] RAX: ffffffffffffffda RBX: 00007f9178ebdf80 RCX: 00007f9178d21e79 [ 95.766033][ T1923] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 95.773846][ T1923] RBP: 00007f917799f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.781656][ T1923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.789473][ T1923] R13: 0000000000000000 R14: 00007f9178ebdf80 R15: 00007ffdd0d32e68 [ 95.797295][ T1923] [ 95.800683][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.858345][ T1925] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.957454][ T1785] device veth1_macvtap entered promiscuous mode [ 95.965207][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.994951][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.049924][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.418442][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.446139][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.554942][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.569162][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.489290][ T1969] ªªªªªª: renamed from vlan0 [ 97.666218][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.747298][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.777504][ T30] audit: type=1400 audit(1723884660.474:146): avc: denied { create } for pid=1982 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.795902][ T1970] device bridge_slave_0 entered promiscuous mode [ 97.815205][ T1970] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.822209][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.830094][ T1970] device bridge_slave_1 entered promiscuous mode [ 97.846561][ T1985] FAULT_INJECTION: forcing a failure. [ 97.846561][ T1985] name failslab, interval 1, probability 0, space 0, times 0 [ 97.858969][ T1985] CPU: 1 PID: 1985 Comm: syz.0.533 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 97.868585][ T1985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.878482][ T1985] Call Trace: [ 97.881605][ T1985] [ 97.884383][ T1985] dump_stack_lvl+0x151/0x1c0 [ 97.888896][ T1985] ? io_uring_drop_tctx_refs+0x190/0x190 [ 97.894363][ T1985] ? smp_call_function_many_cond+0x8e8/0x9b0 [ 97.900181][ T1985] dump_stack+0x15/0x20 [ 97.904171][ T1985] should_fail+0x3c6/0x510 [ 97.908424][ T1985] __should_failslab+0xa4/0xe0 [ 97.913024][ T1985] ? dst_alloc+0x164/0x1e0 [ 97.917277][ T1985] should_failslab+0x9/0x20 [ 97.921614][ T1985] slab_pre_alloc_hook+0x37/0xd0 [ 97.926388][ T1985] ? dst_alloc+0x164/0x1e0 [ 97.930643][ T1985] kmem_cache_alloc+0x44/0x200 [ 97.935244][ T1985] dst_alloc+0x164/0x1e0 [ 97.939322][ T1985] ip_route_output_key_hash_rcu+0x129a/0x20b0 [ 97.945227][ T1985] ip_route_output_flow+0x144/0x310 [ 97.950260][ T1985] ? ipv4_sk_update_pmtu+0x1e00/0x1e00 [ 97.955553][ T1985] ip_tunnel_xmit+0xa6e/0x2760 [ 97.960152][ T1985] ? ip_tunnel_xmit+0x151/0x2760 [ 97.964927][ T1985] ? tnl_update_pmtu+0xba0/0xba0 [ 97.969697][ T1985] ? skb_push+0x3f/0x120 [ 97.973776][ T1985] ? skb_network_protocol+0x578/0x770 [ 97.978984][ T1985] ? gre_build_header+0x233/0x7a0 [ 97.983846][ T1985] ipgre_xmit+0x87a/0xc30 [ 97.988013][ T1985] dev_hard_start_xmit+0x228/0x620 [ 97.992960][ T1985] __dev_queue_xmit+0x18b4/0x2e70 [ 97.997822][ T1985] ? dev_queue_xmit+0x20/0x20 [ 98.002331][ T1985] ? __kasan_check_write+0x14/0x20 [ 98.007280][ T1985] ? skb_release_data+0x1c3/0xa80 [ 98.012138][ T1985] ? __kasan_check_write+0x14/0x20 [ 98.017083][ T1985] ? pskb_expand_head+0xc8f/0x1240 [ 98.022033][ T1985] dev_queue_xmit+0x17/0x20 [ 98.026372][ T1985] __bpf_redirect+0x690/0xe60 [ 98.030888][ T1985] bpf_clone_redirect+0x24d/0x390 [ 98.035748][ T1985] bpf_prog_208b094576c80b22+0x56/0xf40 [ 98.041126][ T1985] ? swiotlb_bounce+0x310/0x460 [ 98.045815][ T1985] ? __stack_depot_save+0x34/0x470 [ 98.050761][ T1985] ? __kasan_slab_alloc+0xc3/0xe0 [ 98.055618][ T1985] ? __kasan_slab_alloc+0xb1/0xe0 [ 98.060482][ T1985] ? slab_post_alloc_hook+0x53/0x2c0 [ 98.065602][ T1985] ? kmem_cache_alloc+0xf5/0x200 [ 98.070374][ T1985] ? __build_skb+0x2a/0x300 [ 98.074711][ T1985] ? build_skb+0x25/0x1f0 [ 98.078881][ T1985] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 98.084260][ T1985] ? bpf_prog_test_run+0x3b0/0x630 [ 98.089207][ T1985] ? __sys_bpf+0x525/0x760 [ 98.093462][ T1985] ? __x64_sys_bpf+0x7c/0x90 [ 98.097887][ T1985] ? do_syscall_64+0x3d/0xb0 [ 98.102313][ T1985] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.108231][ T1985] ? ktime_get+0x12f/0x160 [ 98.112476][ T1985] bpf_test_run+0x478/0xa10 [ 98.116817][ T1985] ? convert___skb_to_skb+0x570/0x570 [ 98.122017][ T1985] ? skb_header_pointer+0x98/0x120 [ 98.126974][ T1985] ? eth_type_trans+0x3b4/0x600 [ 98.131651][ T1985] ? eth_get_headlen+0x240/0x240 [ 98.136423][ T1985] ? convert___skb_to_skb+0x44/0x570 [ 98.141545][ T1985] bpf_prog_test_run_skb+0xb41/0x1420 [ 98.146750][ T1985] ? __kasan_check_write+0x14/0x20 [ 98.151700][ T1985] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 98.157427][ T1985] ? __kasan_check_write+0x14/0x20 [ 98.162375][ T1985] ? fput_many+0x160/0x1b0 [ 98.166625][ T1985] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 98.172353][ T1985] bpf_prog_test_run+0x3b0/0x630 [ 98.177130][ T1985] ? bpf_prog_query+0x220/0x220 [ 98.181815][ T1985] ? selinux_bpf+0xd2/0x100 [ 98.186153][ T1985] ? security_bpf+0x82/0xb0 [ 98.190494][ T1985] __sys_bpf+0x525/0x760 [ 98.194573][ T1985] ? fput_many+0x160/0x1b0 [ 98.198826][ T1985] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 98.204037][ T1985] ? debug_smp_processor_id+0x17/0x20 [ 98.209243][ T1985] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 98.215145][ T1985] __x64_sys_bpf+0x7c/0x90 [ 98.219396][ T1985] do_syscall_64+0x3d/0xb0 [ 98.223647][ T1985] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.229374][ T1985] RIP: 0033:0x7f9178d21e79 [ 98.233629][ T1985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.253070][ T1985] RSP: 002b:00007f917799f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.261314][ T1985] RAX: ffffffffffffffda RBX: 00007f9178ebdf80 RCX: 00007f9178d21e79 [ 98.269125][ T1985] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a [ 98.276940][ T1985] RBP: 00007f917799f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.284755][ T1985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.292559][ T1985] R13: 0000000000000000 R14: 00007f9178ebdf80 R15: 00007ffdd0d32e68 [ 98.300375][ T1985] [ 98.342251][ T30] audit: type=1400 audit(1723884661.034:147): avc: denied { create } for pid=1992 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.855312][ T45] device bridge_slave_1 left promiscuous mode [ 98.861282][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.930666][ T45] device bridge_slave_0 left promiscuous mode [ 99.060826][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.152098][ T45] device veth1_macvtap left promiscuous mode [ 99.198745][ T45] device veth0_vlan left promiscuous mode [ 99.346894][ T2029] FAULT_INJECTION: forcing a failure. [ 99.346894][ T2029] name failslab, interval 1, probability 0, space 0, times 0 [ 99.390459][ T2031] FAULT_INJECTION: forcing a failure. [ 99.390459][ T2031] name failslab, interval 1, probability 0, space 0, times 0 [ 99.402950][ T2029] CPU: 1 PID: 2029 Comm: syz.0.548 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 99.412489][ T2029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 99.422387][ T2029] Call Trace: [ 99.425508][ T2029] [ 99.428286][ T2029] dump_stack_lvl+0x151/0x1c0 [ 99.432800][ T2029] ? io_uring_drop_tctx_refs+0x190/0x190 [ 99.438268][ T2029] dump_stack+0x15/0x20 [ 99.442258][ T2029] should_fail+0x3c6/0x510 [ 99.446513][ T2029] __should_failslab+0xa4/0xe0 [ 99.451112][ T2029] ? copy_signal+0x55/0x610 [ 99.455450][ T2029] should_failslab+0x9/0x20 [ 99.459792][ T2029] slab_pre_alloc_hook+0x37/0xd0 [ 99.464563][ T2029] ? copy_signal+0x55/0x610 [ 99.468904][ T2029] kmem_cache_alloc+0x44/0x200 [ 99.473506][ T2029] copy_signal+0x55/0x610 [ 99.477671][ T2029] copy_process+0x1101/0x3290 [ 99.482186][ T2029] ? proc_fail_nth_write+0x20b/0x290 [ 99.487302][ T2029] ? fsnotify_perm+0x6a/0x5d0 [ 99.491817][ T2029] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 99.496764][ T2029] ? vfs_write+0x9ec/0x1110 [ 99.501102][ T2029] ? kmem_cache_free+0x2c3/0x2e0 [ 99.505877][ T2029] kernel_clone+0x21e/0x9e0 [ 99.510216][ T2029] ? file_end_write+0x1c0/0x1c0 [ 99.514902][ T2029] ? create_io_thread+0x1e0/0x1e0 [ 99.519762][ T2029] ? mutex_unlock+0xb2/0x260 [ 99.524189][ T2029] ? __mutex_lock_slowpath+0x10/0x10 [ 99.529327][ T2029] __x64_sys_clone+0x23f/0x290 [ 99.533914][ T2029] ? __do_sys_vfork+0x130/0x130 [ 99.538599][ T2029] ? ksys_write+0x260/0x2c0 [ 99.542939][ T2029] ? debug_smp_processor_id+0x17/0x20 [ 99.548144][ T2029] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 99.554045][ T2029] ? exit_to_user_mode_prepare+0x39/0xa0 [ 99.559515][ T2029] do_syscall_64+0x3d/0xb0 [ 99.563767][ T2029] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.569494][ T2029] RIP: 0033:0x7f9178d21e79 [ 99.573746][ T2029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.593188][ T2029] RSP: 002b:00007f917799efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 99.601434][ T2029] RAX: ffffffffffffffda RBX: 00007f9178ebdf80 RCX: 00007f9178d21e79 [ 99.609245][ T2029] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 99.617061][ T2029] RBP: 00007f917799f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.624868][ T2029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 99.632677][ T2029] R13: 0000000000000000 R14: 00007f9178ebdf80 R15: 00007ffdd0d32e68 [ 99.640495][ T2029] [ 99.675328][ T2031] CPU: 1 PID: 2031 Comm: syz.1.549 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 99.684950][ T2031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 99.694842][ T2031] Call Trace: [ 99.697965][ T2031] [ 99.700741][ T2031] dump_stack_lvl+0x151/0x1c0 [ 99.705256][ T2031] ? io_uring_drop_tctx_refs+0x190/0x190 [ 99.710726][ T2031] dump_stack+0x15/0x20 [ 99.714716][ T2031] should_fail+0x3c6/0x510 [ 99.718972][ T2031] __should_failslab+0xa4/0xe0 [ 99.723571][ T2031] should_failslab+0x9/0x20 [ 99.727911][ T2031] slab_pre_alloc_hook+0x37/0xd0 [ 99.732683][ T2031] kmem_cache_alloc_trace+0x48/0x210 [ 99.737807][ T2031] ? alloc_fdtable+0xaf/0x2a0 [ 99.742316][ T2031] alloc_fdtable+0xaf/0x2a0 [ 99.746656][ T2031] dup_fd+0x759/0xb00 [ 99.750472][ T2031] ? avc_has_perm+0x16f/0x260 [ 99.754993][ T2031] copy_files+0xe6/0x200 [ 99.759068][ T2031] ? perf_event_attrs+0x30/0x30 [ 99.763751][ T2031] ? dup_task_struct+0xc60/0xc60 [ 99.768527][ T2031] ? security_task_alloc+0xf9/0x130 [ 99.773561][ T2031] copy_process+0x1080/0x3290 [ 99.778076][ T2031] ? proc_fail_nth_write+0x20b/0x290 [ 99.783195][ T2031] ? fsnotify_perm+0x6a/0x5d0 [ 99.787708][ T2031] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 99.792654][ T2031] ? vfs_write+0x9ec/0x1110 [ 99.796992][ T2031] ? kmem_cache_free+0x2c3/0x2e0 [ 99.801771][ T2031] kernel_clone+0x21e/0x9e0 [ 99.806106][ T2031] ? file_end_write+0x1c0/0x1c0 [ 99.810795][ T2031] ? create_io_thread+0x1e0/0x1e0 [ 99.815660][ T2031] ? mutex_unlock+0xb2/0x260 [ 99.820083][ T2031] ? __mutex_lock_slowpath+0x10/0x10 [ 99.825199][ T2031] __x64_sys_clone+0x23f/0x290 [ 99.829800][ T2031] ? __do_sys_vfork+0x130/0x130 [ 99.834484][ T2031] ? ksys_write+0x260/0x2c0 [ 99.838826][ T2031] ? debug_smp_processor_id+0x17/0x20 [ 99.844031][ T2031] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 99.849934][ T2031] ? exit_to_user_mode_prepare+0x39/0xa0 [ 99.855405][ T2031] do_syscall_64+0x3d/0xb0 [ 99.859654][ T2031] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 99.865383][ T2031] RIP: 0033:0x7fd4b9e01e79 [ 99.869637][ T2031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.889078][ T2031] RSP: 002b:00007fd4b8a7efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 99.897322][ T2031] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e01e79 [ 99.905136][ T2031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 99.913203][ T2031] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.921014][ T2031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 99.928827][ T2031] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 99.936643][ T2031] [ 100.178170][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.185547][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.192891][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.201004][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.208950][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.215802][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.233232][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.276396][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.284694][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.291546][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.325384][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.355231][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.363067][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.415357][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.454195][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.404716][ T1970] device veth0_vlan entered promiscuous mode [ 101.423747][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.432276][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.440405][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.448465][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.595888][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.603124][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.808350][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.834360][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.916917][ T1970] device veth1_macvtap entered promiscuous mode [ 102.107113][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.125517][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.138701][ T2063] FAULT_INJECTION: forcing a failure. [ 102.138701][ T2063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.151675][ T2063] CPU: 1 PID: 2063 Comm: syz.3.558 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 102.152055][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.161280][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 102.161290][ T2063] Call Trace: [ 102.161295][ T2063] [ 102.161301][ T2063] dump_stack_lvl+0x151/0x1c0 [ 102.169407][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.179076][ T2063] ? io_uring_drop_tctx_refs+0x190/0x190 [ 102.179101][ T2063] dump_stack+0x15/0x20 [ 102.179118][ T2063] should_fail+0x3c6/0x510 [ 102.182780][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.184975][ T2063] should_fail_usercopy+0x1a/0x20 [ 102.223771][ T2063] _copy_to_user+0x20/0x90 [ 102.228021][ T2063] simple_read_from_buffer+0xc7/0x150 [ 102.233229][ T2063] proc_fail_nth_read+0x1a3/0x210 [ 102.238091][ T2063] ? proc_fault_inject_write+0x390/0x390 [ 102.243556][ T2063] ? fsnotify_perm+0x470/0x5d0 [ 102.248158][ T2063] ? security_file_permission+0x86/0xb0 [ 102.253537][ T2063] ? proc_fault_inject_write+0x390/0x390 [ 102.259006][ T2063] vfs_read+0x27d/0xd40 [ 102.263000][ T2063] ? kernel_read+0x1f0/0x1f0 [ 102.267425][ T2063] ? __kasan_check_write+0x14/0x20 [ 102.272372][ T2063] ? mutex_lock+0xb6/0x1e0 [ 102.276626][ T2063] ? wait_for_completion_killable_timeout+0x10/0x10 [ 102.283049][ T2063] ? __fdget_pos+0x2e7/0x3a0 [ 102.287475][ T2063] ? ksys_read+0x77/0x2c0 [ 102.291641][ T2063] ksys_read+0x199/0x2c0 [ 102.295720][ T2063] ? vfs_write+0x1110/0x1110 [ 102.300144][ T2063] ? __kasan_check_read+0x11/0x20 [ 102.305007][ T2063] __x64_sys_read+0x7b/0x90 [ 102.309346][ T2063] do_syscall_64+0x3d/0xb0 [ 102.313599][ T2063] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 102.319325][ T2063] RIP: 0033:0x7f6be3fcd8bc [ 102.323578][ T2063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 102.343021][ T2063] RSP: 002b:00007f6be2c4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.351264][ T2063] RAX: ffffffffffffffda RBX: 00007f6be416af80 RCX: 00007f6be3fcd8bc [ 102.359076][ T2063] RDX: 000000000000000f RSI: 00007f6be2c4c0a0 RDI: 0000000000000005 [ 102.366886][ T2063] RBP: 00007f6be2c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.374697][ T2063] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 102.382510][ T2063] R13: 0000000000000000 R14: 00007f6be416af80 R15: 00007ffe5db3a808 [ 102.390327][ T2063] [ 103.049591][ T2071] device pim6reg1 entered promiscuous mode [ 103.316347][ T2075] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.409858][ T2075] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.417128][ T2075] device bridge_slave_0 entered promiscuous mode [ 103.430174][ T2075] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.437081][ T2075] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.444254][ T2075] device bridge_slave_1 entered promiscuous mode [ 103.708785][ T45] device bridge_slave_1 left promiscuous mode [ 103.716954][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.796961][ T45] device bridge_slave_0 left promiscuous mode [ 103.860179][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.949101][ T45] device veth1_macvtap left promiscuous mode [ 104.005576][ T45] device veth0_vlan left promiscuous mode [ 104.574816][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.590568][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.657565][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.725805][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.733740][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.740588][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.818892][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.863963][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.914541][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.921408][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.985321][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.992672][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.001060][ T2122] FAULT_INJECTION: forcing a failure. [ 105.001060][ T2122] name failslab, interval 1, probability 0, space 0, times 0 [ 105.014941][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.023916][ T2122] CPU: 0 PID: 2122 Comm: syz.1.577 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 105.033526][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 105.043420][ T2122] Call Trace: [ 105.046544][ T2122] [ 105.049322][ T2122] dump_stack_lvl+0x151/0x1c0 [ 105.053837][ T2122] ? io_uring_drop_tctx_refs+0x190/0x190 [ 105.059307][ T2122] dump_stack+0x15/0x20 [ 105.063294][ T2122] should_fail+0x3c6/0x510 [ 105.067556][ T2122] __should_failslab+0xa4/0xe0 [ 105.072147][ T2122] should_failslab+0x9/0x20 [ 105.076489][ T2122] slab_pre_alloc_hook+0x37/0xd0 [ 105.081261][ T2122] __kmalloc+0x6d/0x270 [ 105.085254][ T2122] ? bpf_map_area_alloc+0x4c/0xf0 [ 105.090114][ T2122] ? __kasan_kmalloc+0x9/0x10 [ 105.094630][ T2122] bpf_map_area_alloc+0x4c/0xf0 [ 105.099314][ T2122] htab_map_alloc+0x3ed/0x1650 [ 105.103918][ T2122] map_create+0x411/0x2050 [ 105.108168][ T2122] __sys_bpf+0x296/0x760 [ 105.112252][ T2122] ? fput_many+0x160/0x1b0 [ 105.116499][ T2122] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 105.121713][ T2122] ? debug_smp_processor_id+0x17/0x20 [ 105.126912][ T2122] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 105.132816][ T2122] __x64_sys_bpf+0x7c/0x90 [ 105.137068][ T2122] do_syscall_64+0x3d/0xb0 [ 105.141322][ T2122] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.147049][ T2122] RIP: 0033:0x7fd4b9e01e79 [ 105.151302][ T2122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.170744][ T2122] RSP: 002b:00007fd4b8a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.178987][ T2122] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e01e79 [ 105.186798][ T2122] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 105.194608][ T2122] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.202420][ T2122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.210604][ T2122] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 105.218417][ T2122] [ 105.227051][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.234949][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.243227][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.251657][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.261828][ T2075] device veth0_vlan entered promiscuous mode [ 105.280845][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.292992][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.313338][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.324151][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.349619][ T2075] device veth1_macvtap entered promiscuous mode [ 105.376097][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.384848][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.392955][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.437782][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.510849][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.572063][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.677971][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.712494][ T2161] device veth0_vlan left promiscuous mode [ 106.778832][ T2161] device veth0_vlan entered promiscuous mode [ 106.833504][ T30] audit: type=1400 audit(1723884669.524:148): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.911454][ T2171] FAULT_INJECTION: forcing a failure. [ 106.911454][ T2171] name failslab, interval 1, probability 0, space 0, times 0 [ 106.924052][ T2171] CPU: 0 PID: 2171 Comm: syz.1.594 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 106.933657][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 106.943550][ T2171] Call Trace: [ 106.946674][ T2171] [ 106.949454][ T2171] dump_stack_lvl+0x151/0x1c0 [ 106.953964][ T2171] ? io_uring_drop_tctx_refs+0x190/0x190 [ 106.959433][ T2171] ? kmem_cache_free+0x116/0x2e0 [ 106.964205][ T2171] ? kasan_set_track+0x5d/0x70 [ 106.968811][ T2171] ? kasan_set_free_info+0x23/0x40 [ 106.973752][ T2171] ? ____kasan_slab_free+0x126/0x160 [ 106.978876][ T2171] ? __kasan_slab_free+0x11/0x20 [ 106.983646][ T2171] ? kmem_cache_free+0x116/0x2e0 [ 106.988421][ T2171] ? putname+0xfa/0x150 [ 106.992413][ T2171] dump_stack+0x15/0x20 [ 106.996406][ T2171] should_fail+0x3c6/0x510 [ 107.000660][ T2171] __should_failslab+0xa4/0xe0 [ 107.005259][ T2171] should_failslab+0x9/0x20 [ 107.010015][ T2171] slab_pre_alloc_hook+0x37/0xd0 [ 107.014788][ T2171] __kmalloc+0x6d/0x270 [ 107.018781][ T2171] ? bpf_test_init+0x101/0x1b0 [ 107.023381][ T2171] bpf_test_init+0x101/0x1b0 [ 107.027807][ T2171] bpf_prog_test_run_skb+0x268/0x1420 [ 107.033012][ T2171] ? __kasan_check_write+0x14/0x20 [ 107.037960][ T2171] ? proc_fail_nth_write+0x20b/0x290 [ 107.043081][ T2171] ? selinux_file_permission+0x2c4/0x570 [ 107.048548][ T2171] ? proc_fail_nth_read+0x210/0x210 [ 107.053582][ T2171] ? fsnotify_perm+0x6a/0x5d0 [ 107.058097][ T2171] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 107.063824][ T2171] ? __kasan_check_write+0x14/0x20 [ 107.068771][ T2171] ? fput_many+0x160/0x1b0 [ 107.073023][ T2171] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 107.078754][ T2171] bpf_prog_test_run+0x3b0/0x630 [ 107.083527][ T2171] ? bpf_prog_query+0x220/0x220 [ 107.088213][ T2171] ? selinux_bpf+0xd2/0x100 [ 107.092552][ T2171] ? security_bpf+0x82/0xb0 [ 107.096894][ T2171] __sys_bpf+0x525/0x760 [ 107.100972][ T2171] ? fput_many+0x160/0x1b0 [ 107.105224][ T2171] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 107.110772][ T2171] ? debug_smp_processor_id+0x17/0x20 [ 107.115978][ T2171] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 107.121878][ T2171] __x64_sys_bpf+0x7c/0x90 [ 107.126131][ T2171] do_syscall_64+0x3d/0xb0 [ 107.130385][ T2171] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 107.136112][ T2171] RIP: 0033:0x7fd4b9e01e79 [ 107.140367][ T2171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.159811][ T2171] RSP: 002b:00007fd4b8a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.168051][ T2171] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e01e79 [ 107.175863][ T2171] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 107.183674][ T2171] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.191485][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.199295][ T2171] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 107.207112][ T2171] [ 107.222646][ T2172] device pim6reg1 entered promiscuous mode [ 107.296418][ T2158] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.342645][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.395193][ T2158] device bridge_slave_0 entered promiscuous mode [ 107.420266][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.427283][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.434499][ T2158] device bridge_slave_1 entered promiscuous mode [ 107.499570][ T2177] FAULT_INJECTION: forcing a failure. [ 107.499570][ T2177] name failslab, interval 1, probability 0, space 0, times 0 [ 107.526642][ T2177] CPU: 1 PID: 2177 Comm: syz.3.596 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 107.536256][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 107.546148][ T2177] Call Trace: [ 107.549280][ T2177] [ 107.552052][ T2177] dump_stack_lvl+0x151/0x1c0 [ 107.556575][ T2177] ? io_uring_drop_tctx_refs+0x190/0x190 [ 107.562033][ T2177] dump_stack+0x15/0x20 [ 107.566024][ T2177] should_fail+0x3c6/0x510 [ 107.570284][ T2177] __should_failslab+0xa4/0xe0 [ 107.574878][ T2177] should_failslab+0x9/0x20 [ 107.579218][ T2177] slab_pre_alloc_hook+0x37/0xd0 [ 107.583991][ T2177] __kmalloc+0x6d/0x270 [ 107.587984][ T2177] ? kvmalloc_node+0x1f0/0x4d0 [ 107.592585][ T2177] kvmalloc_node+0x1f0/0x4d0 [ 107.597010][ T2177] ? vm_mmap+0xb0/0xb0 [ 107.600914][ T2177] ? __kasan_check_write+0x14/0x20 [ 107.605862][ T2177] pfifo_fast_init+0x110/0x7a0 [ 107.610461][ T2177] qdisc_create_dflt+0x144/0x3e0 [ 107.615235][ T2177] ? _raw_spin_lock+0xa4/0x1b0 [ 107.619836][ T2177] dev_activate+0x2e0/0x1140 [ 107.624264][ T2177] __dev_open+0x3bf/0x4e0 [ 107.628427][ T2177] ? dev_open+0x260/0x260 [ 107.632593][ T2177] ? _raw_spin_unlock_bh+0x51/0x60 [ 107.637540][ T2177] ? dev_set_rx_mode+0x245/0x2e0 [ 107.642312][ T2177] ? __kasan_check_read+0x11/0x20 [ 107.647175][ T2177] __dev_change_flags+0x1db/0x6e0 [ 107.652034][ T2177] ? avc_denied+0x1b0/0x1b0 [ 107.656375][ T2177] ? dev_get_flags+0x1e0/0x1e0 [ 107.660977][ T2177] dev_change_flags+0x8c/0x1a0 [ 107.665575][ T2177] dev_ifsioc+0x147/0x10c0 [ 107.669826][ T2177] ? dev_ioctl+0xe70/0xe70 [ 107.674079][ T2177] ? mutex_lock+0x135/0x1e0 [ 107.678420][ T2177] ? wait_for_completion_killable_timeout+0x10/0x10 [ 107.684846][ T2177] dev_ioctl+0x54d/0xe70 [ 107.688922][ T2177] sock_do_ioctl+0x34f/0x5a0 [ 107.693350][ T2177] ? sock_show_fdinfo+0xa0/0xa0 [ 107.698037][ T2177] ? selinux_file_ioctl+0x3cc/0x540 [ 107.703069][ T2177] sock_ioctl+0x455/0x740 [ 107.707235][ T2177] ? sock_poll+0x400/0x400 [ 107.711486][ T2177] ? __fget_files+0x31e/0x380 [ 107.716001][ T2177] ? security_file_ioctl+0x84/0xb0 [ 107.720946][ T2177] ? sock_poll+0x400/0x400 [ 107.725200][ T2177] __se_sys_ioctl+0x114/0x190 [ 107.729713][ T2177] __x64_sys_ioctl+0x7b/0x90 [ 107.734138][ T2177] do_syscall_64+0x3d/0xb0 [ 107.738391][ T2177] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 107.744121][ T2177] RIP: 0033:0x7f6be3fcee79 [ 107.748374][ T2177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.767814][ T2177] RSP: 002b:00007f6be2c4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.776060][ T2177] RAX: ffffffffffffffda RBX: 00007f6be416af80 RCX: 00007f6be3fcee79 [ 107.783871][ T2177] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000006 [ 107.791681][ T2177] RBP: 00007f6be2c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.799492][ T2177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.807303][ T2177] R13: 0000000000000000 R14: 00007f6be416af80 R15: 00007ffe5db3a808 [ 107.815122][ T2177] [ 107.818813][ T2177] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 107.826424][ T2177] device pim6reg1 entered promiscuous mode [ 107.832835][ T45] device bridge_slave_1 left promiscuous mode [ 107.846589][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.870753][ T45] device bridge_slave_0 left promiscuous mode [ 107.879324][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.887540][ T45] device veth1_macvtap left promiscuous mode [ 107.893384][ T45] device veth0_vlan left promiscuous mode [ 108.222638][ T2191] device pim6reg1 entered promiscuous mode [ 108.297260][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.314973][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.330960][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.339081][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.347505][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.354344][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.374309][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.402817][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.442570][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.449422][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.516842][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.556649][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.602786][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.622341][ T2158] device veth0_vlan entered promiscuous mode [ 108.637677][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.647380][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.655120][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.662979][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.677979][ T2158] device veth1_macvtap entered promiscuous mode [ 108.686671][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.698530][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.709761][ T1833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.435900][ T45] device bridge_slave_1 left promiscuous mode [ 109.441838][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.449082][ T45] device bridge_slave_0 left promiscuous mode [ 109.454978][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.462694][ T45] device veth1_macvtap left promiscuous mode [ 109.468526][ T45] device veth0_vlan left promiscuous mode [ 109.723534][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.730470][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.737888][ T2221] device bridge_slave_0 entered promiscuous mode [ 109.744668][ T2221] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.751950][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.759689][ T2221] device bridge_slave_1 entered promiscuous mode [ 109.886585][ T2221] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.893448][ T2221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.900542][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.907324][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.930692][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.944632][ T1830] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.952069][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.969114][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.978155][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.985005][ T1829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.995407][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.003400][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.010246][ T1829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.017441][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.042503][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.050872][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.076364][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.083554][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.090789][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.099071][ T2221] device veth0_vlan entered promiscuous mode [ 110.111105][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.146362][ T2221] device veth1_macvtap entered promiscuous mode [ 110.189351][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.214411][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.397007][ T2275] FAULT_INJECTION: forcing a failure. [ 111.397007][ T2275] name failslab, interval 1, probability 0, space 0, times 0 [ 111.410775][ T2275] CPU: 1 PID: 2275 Comm: syz.1.631 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 111.420391][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 111.430288][ T2275] Call Trace: [ 111.433411][ T2275] [ 111.436187][ T2275] dump_stack_lvl+0x151/0x1c0 [ 111.440699][ T2275] ? io_uring_drop_tctx_refs+0x190/0x190 [ 111.446168][ T2275] dump_stack+0x15/0x20 [ 111.450159][ T2275] should_fail+0x3c6/0x510 [ 111.454412][ T2275] __should_failslab+0xa4/0xe0 [ 111.459011][ T2275] should_failslab+0x9/0x20 [ 111.463350][ T2275] slab_pre_alloc_hook+0x37/0xd0 [ 111.468126][ T2275] ? perf_uprobe_init+0x66/0x1a0 [ 111.472897][ T2275] __kmalloc_track_caller+0x6c/0x260 [ 111.478019][ T2275] ? perf_uprobe_init+0x66/0x1a0 [ 111.482794][ T2275] strndup_user+0x76/0x150 [ 111.487044][ T2275] perf_uprobe_init+0x66/0x1a0 [ 111.491644][ T2275] perf_uprobe_event_init+0x106/0x190 [ 111.496852][ T2275] perf_try_init_event+0x143/0x410 [ 111.501809][ T2275] perf_event_alloc+0x1256/0x1b00 [ 111.506663][ T2275] __se_sys_perf_event_open+0xb27/0x3ce0 [ 111.512130][ T2275] ? file_end_write+0x1c0/0x1c0 [ 111.516814][ T2275] ? wait_for_completion_killable+0x1/0x30 [ 111.522454][ T2275] ? __mutex_lock_slowpath+0x10/0x10 [ 111.527579][ T2275] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 111.533043][ T2275] ? __kasan_check_write+0x14/0x20 [ 111.537992][ T2275] ? fput_many+0x160/0x1b0 [ 111.542247][ T2275] ? debug_smp_processor_id+0x17/0x20 [ 111.547451][ T2275] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 111.553354][ T2275] __x64_sys_perf_event_open+0xbf/0xd0 [ 111.558648][ T2275] do_syscall_64+0x3d/0xb0 [ 111.562900][ T2275] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 111.568628][ T2275] RIP: 0033:0x7fd4b9e01e79 [ 111.572881][ T2275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.592322][ T2275] RSP: 002b:00007fd4b8a7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 111.600567][ T2275] RAX: ffffffffffffffda RBX: 00007fd4b9f9df80 RCX: 00007fd4b9e01e79 [ 111.608379][ T2275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001080 [ 111.616189][ T2275] RBP: 00007fd4b8a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.624000][ T2275] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 111.631811][ T2275] R13: 0000000000000000 R14: 00007fd4b9f9df80 R15: 00007ffdfd8ec568 [ 111.639625][ T2275] [ 111.659579][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.667887][ T2264] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.675076][ T2264] device bridge_slave_0 entered promiscuous mode [ 111.695394][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.702256][ T2264] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.709674][ T2264] device bridge_slave_1 entered promiscuous mode [ 112.049085][ T45] device bridge_slave_1 left promiscuous mode [ 112.056134][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.078126][ T45] device bridge_slave_0 left promiscuous mode [ 112.093888][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.103579][ T45] device veth1_macvtap left promiscuous mode [ 112.109486][ T45] device veth0_vlan left promiscuous mode [ 112.179765][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.186621][ T2264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.193698][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.200512][ T2264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.234930][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.242472][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.249807][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.257196][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.277802][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.287456][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.294307][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.301629][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.309763][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.316625][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.334191][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.342250][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.350642][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.362320][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.370105][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.377381][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.388926][ T2264] device veth0_vlan entered promiscuous mode [ 112.420576][ T2264] device veth1_macvtap entered promiscuous mode [ 112.433002][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.441578][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.455717][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.489995][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.551516][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.638370][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.652482][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.691800][ T2323] device pim6reg1 entered promiscuous mode [ 113.788782][ T2343] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.795805][ T2343] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.802913][ T2343] device bridge_slave_0 entered promiscuous mode [ 113.848958][ T2343] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.855920][ T2343] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.866865][ T2343] device bridge_slave_1 entered promiscuous mode [ 113.966252][ T45] device bridge_slave_1 left promiscuous mode [ 113.972509][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.997662][ T45] device bridge_slave_0 left promiscuous mode [ 114.003566][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.012377][ T45] device veth1_macvtap left promiscuous mode [ 114.018217][ T45] device veth0_vlan left promiscuous mode [ 114.109994][ T2343] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.116846][ T2343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.123928][ T2343] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.130734][ T2343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.175771][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.183276][ T1829] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.196273][ T1829] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.216724][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.224649][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.231493][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.240129][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.249256][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.256113][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.264196][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.271983][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.255026][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.295559][ T2343] device veth0_vlan entered promiscuous mode [ 115.309009][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.354375][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.399098][ T2343] device veth1_macvtap entered promiscuous mode [ 115.434378][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.445502][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.463468][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.471531][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.490687][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.506430][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.525113][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.534049][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.546086][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.101642][ T2432] device veth1_macvtap left promiscuous mode [ 117.153123][ T45] device bridge_slave_1 left promiscuous mode [ 117.197402][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.238672][ T45] device bridge_slave_0 left promiscuous mode [ 117.315438][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.348521][ T45] device veth1_macvtap left promiscuous mode [ 117.375900][ T45] device veth0_vlan left promiscuous mode [ 117.739008][ T2425] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.763845][ T2425] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.775664][ T2425] device bridge_slave_0 entered promiscuous mode [ 117.814682][ T2425] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.825273][ T2425] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.832469][ T2425] device bridge_slave_1 entered promiscuous mode [ 118.031332][ T2425] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.038204][ T2425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.045385][ T2425] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.052163][ T2425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.075893][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.083472][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.099337][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.134916][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.148231][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.155076][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.177591][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.185736][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.192576][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.249565][ T2425] device veth0_vlan entered promiscuous mode [ 118.258157][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.272249][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.280789][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.288240][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.295482][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.303172][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.314573][ T2425] device veth1_macvtap entered promiscuous mode [ 118.326710][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.354371][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.362724][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.411473][ T2476] device syzkaller0 entered promiscuous mode [ 119.616569][ T2486] FAULT_INJECTION: forcing a failure. [ 119.616569][ T2486] name failslab, interval 1, probability 0, space 0, times 0 [ 119.635975][ T2486] CPU: 1 PID: 2486 Comm: syz.0.710 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 119.645599][ T2486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 119.655501][ T2486] Call Trace: [ 119.658620][ T2486] [ 119.661397][ T2486] dump_stack_lvl+0x151/0x1c0 [ 119.665909][ T2486] ? io_uring_drop_tctx_refs+0x190/0x190 [ 119.671376][ T2486] dump_stack+0x15/0x20 [ 119.675368][ T2486] should_fail+0x3c6/0x510 [ 119.679619][ T2486] __should_failslab+0xa4/0xe0 [ 119.684217][ T2486] should_failslab+0x9/0x20 [ 119.688557][ T2486] slab_pre_alloc_hook+0x37/0xd0 [ 119.693340][ T2486] kmem_cache_alloc_trace+0x48/0x210 [ 119.698460][ T2486] ? selinux_perf_event_alloc+0x51/0x140 [ 119.703926][ T2486] ? cpu_clock_event_init+0x1a0/0x2d0 [ 119.709131][ T2486] selinux_perf_event_alloc+0x51/0x140 [ 119.714423][ T2486] security_perf_event_alloc+0x62/0x90 [ 119.719717][ T2486] perf_event_alloc+0x17dd/0x1b00 [ 119.724580][ T2486] __se_sys_perf_event_open+0xb27/0x3ce0 [ 119.730047][ T2486] ? file_end_write+0x1c0/0x1c0 [ 119.734731][ T2486] ? wait_for_completion_killable+0x1/0x30 [ 119.740373][ T2486] ? __mutex_lock_slowpath+0x10/0x10 [ 119.745493][ T2486] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 119.750960][ T2486] ? __kasan_check_write+0x14/0x20 [ 119.755907][ T2486] ? fput_many+0x160/0x1b0 [ 119.760164][ T2486] ? debug_smp_processor_id+0x17/0x20 [ 119.765368][ T2486] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 119.771270][ T2486] __x64_sys_perf_event_open+0xbf/0xd0 [ 119.776564][ T2486] do_syscall_64+0x3d/0xb0 [ 119.780817][ T2486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 119.786545][ T2486] RIP: 0033:0x7f9178d21e79 [ 119.790798][ T2486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.810239][ T2486] RSP: 002b:00007f917799f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.818484][ T2486] RAX: ffffffffffffffda RBX: 00007f9178ebdf80 RCX: 00007f9178d21e79 [ 119.826295][ T2486] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 119.834106][ T2486] RBP: 00007f917799f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.841917][ T2486] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 119.849729][ T2486] R13: 0000000000000000 R14: 00007f9178ebdf80 R15: 00007ffdd0d32e68 [ 119.857544][ T2486] [ 119.888698][ T2501] device pim6reg1 entered promiscuous mode [ 119.974993][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.981873][ T2497] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.989592][ T2497] device bridge_slave_0 entered promiscuous mode [ 119.996629][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.003506][ T2497] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.010788][ T2497] device bridge_slave_1 entered promiscuous mode [ 120.214990][ T45] device bridge_slave_1 left promiscuous mode [ 120.221019][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.228794][ T45] device bridge_slave_0 left promiscuous mode [ 120.234826][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.242906][ T45] device veth1_macvtap left promiscuous mode [ 120.248946][ T45] device veth0_vlan left promiscuous mode [ 120.382574][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.389433][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.396525][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.403303][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.426569][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.434197][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.441719][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.467897][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.476792][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.484731][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.491574][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.499173][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.518002][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.524856][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.554784][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.568034][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.581405][ T2497] device veth0_vlan entered promiscuous mode [ 120.592341][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.605431][ T2497] device veth1_macvtap entered promiscuous mode [ 120.617752][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.663268][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.702540][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.730779][ T2538] device veth1_macvtap left promiscuous mode [ 120.737670][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.746065][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.772040][ T2541] device pim6reg1 entered promiscuous mode [ 120.936150][ T2548] device veth1_macvtap left promiscuous mode [ 122.137421][ T2569] FAULT_INJECTION: forcing a failure. [ 122.137421][ T2569] name failslab, interval 1, probability 0, space 0, times 0 [ 122.161322][ T2569] CPU: 0 PID: 2569 Comm: syz.4.740 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 122.170942][ T2569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 122.180836][ T2569] Call Trace: [ 122.183962][ T2569] [ 122.186738][ T2569] dump_stack_lvl+0x151/0x1c0 [ 122.191254][ T2569] ? io_uring_drop_tctx_refs+0x190/0x190 [ 122.196721][ T2569] dump_stack+0x15/0x20 [ 122.200713][ T2569] should_fail+0x3c6/0x510 [ 122.204967][ T2569] __should_failslab+0xa4/0xe0 [ 122.209563][ T2569] ? alloc_vmap_area+0x19e/0x1a80 [ 122.214425][ T2569] should_failslab+0x9/0x20 [ 122.218762][ T2569] slab_pre_alloc_hook+0x37/0xd0 [ 122.223538][ T2569] ? alloc_vmap_area+0x19e/0x1a80 [ 122.228397][ T2569] kmem_cache_alloc+0x44/0x200 [ 122.232997][ T2569] alloc_vmap_area+0x19e/0x1a80 [ 122.237689][ T2569] ? vm_map_ram+0xa90/0xa90 [ 122.242023][ T2569] ? kmem_cache_alloc_trace+0x115/0x210 [ 122.247405][ T2569] ? __get_vm_area_node+0x117/0x360 [ 122.252439][ T2569] __get_vm_area_node+0x158/0x360 [ 122.257302][ T2569] __vmalloc_node_range+0xe2/0x8d0 [ 122.262250][ T2569] ? copy_process+0x5c4/0x3290 [ 122.266849][ T2569] ? slab_post_alloc_hook+0x72/0x2c0 [ 122.271971][ T2569] ? dup_task_struct+0x53/0xc60 [ 122.276662][ T2569] dup_task_struct+0x416/0xc60 [ 122.281252][ T2569] ? copy_process+0x5c4/0x3290 [ 122.285856][ T2569] ? __kasan_check_write+0x14/0x20 [ 122.290802][ T2569] copy_process+0x5c4/0x3290 [ 122.295231][ T2569] ? __kasan_check_write+0x14/0x20 [ 122.300174][ T2569] ? proc_fail_nth_write+0x20b/0x290 [ 122.305295][ T2569] ? selinux_file_permission+0x2c4/0x570 [ 122.310764][ T2569] ? fsnotify_perm+0x6a/0x5d0 [ 122.315276][ T2569] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 122.320225][ T2569] ? vfs_write+0x9ec/0x1110 [ 122.324563][ T2569] ? kmem_cache_free+0x116/0x2e0 [ 122.329336][ T2569] kernel_clone+0x21e/0x9e0 [ 122.333675][ T2569] ? create_io_thread+0x1e0/0x1e0 [ 122.338534][ T2569] ? mutex_unlock+0xb2/0x260 [ 122.342959][ T2569] ? __mutex_lock_slowpath+0x10/0x10 [ 122.348083][ T2569] __x64_sys_clone+0x23f/0x290 [ 122.352680][ T2569] ? __do_sys_vfork+0x130/0x130 [ 122.357366][ T2569] ? ksys_write+0x260/0x2c0 [ 122.361707][ T2569] ? debug_smp_processor_id+0x17/0x20 [ 122.366914][ T2569] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 122.372815][ T2569] ? exit_to_user_mode_prepare+0x39/0xa0 [ 122.378283][ T2569] do_syscall_64+0x3d/0xb0 [ 122.382534][ T2569] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 122.388179][ T2569] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.393905][ T2569] RIP: 0033:0x7fbea76a2e79 [ 122.398159][ T2569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.417601][ T2569] RSP: 002b:00007fbea631ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 122.425845][ T2569] RAX: ffffffffffffffda RBX: 00007fbea783ef80 RCX: 00007fbea76a2e79 [ 122.433657][ T2569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020000 [ 122.441466][ T2569] RBP: 00007fbea6320090 R08: 0000000000000000 R09: 0000000000000000 [ 122.449278][ T2569] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 122.457089][ T2569] R13: 0000000000000000 R14: 00007fbea783ef80 R15: 00007ffcbf6b9648 [ 122.464907][ T2569] [ 122.492223][ T2569] syz.4.740: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 122.515518][ T2569] CPU: 1 PID: 2569 Comm: syz.4.740 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 122.525134][ T2569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 122.535026][ T2569] Call Trace: [ 122.538150][ T2569] [ 122.540927][ T2569] dump_stack_lvl+0x151/0x1c0 [ 122.545441][ T2569] ? io_uring_drop_tctx_refs+0x190/0x190 [ 122.550912][ T2569] ? __rcu_read_unlock+0x7e/0xd0 [ 122.555682][ T2569] dump_stack+0x15/0x20 [ 122.559674][ T2569] warn_alloc+0x21a/0x390 [ 122.563841][ T2569] ? zone_watermark_ok_safe+0x270/0x270 [ 122.569361][ T2569] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 122.575342][ T2569] ? __vmalloc_node_range+0x2ab/0x8d0 [ 122.580551][ T2569] __vmalloc_node_range+0x2c1/0x8d0 [ 122.585583][ T2569] ? slab_post_alloc_hook+0x72/0x2c0 [ 122.590706][ T2569] ? dup_task_struct+0x53/0xc60 [ 122.595395][ T2569] dup_task_struct+0x416/0xc60 [ 122.599991][ T2569] ? copy_process+0x5c4/0x3290 [ 122.604590][ T2569] ? __kasan_check_write+0x14/0x20 [ 122.609539][ T2569] copy_process+0x5c4/0x3290 [ 122.613967][ T2569] ? __kasan_check_write+0x14/0x20 [ 122.618911][ T2569] ? proc_fail_nth_write+0x20b/0x290 [ 122.624030][ T2569] ? selinux_file_permission+0x2c4/0x570 [ 122.629502][ T2569] ? fsnotify_perm+0x6a/0x5d0 [ 122.634013][ T2569] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 122.638960][ T2569] ? vfs_write+0x9ec/0x1110 [ 122.643299][ T2569] ? kmem_cache_free+0x116/0x2e0 [ 122.648074][ T2569] kernel_clone+0x21e/0x9e0 [ 122.652413][ T2569] ? create_io_thread+0x1e0/0x1e0 [ 122.657271][ T2569] ? mutex_unlock+0xb2/0x260 [ 122.661698][ T2569] ? __mutex_lock_slowpath+0x10/0x10 [ 122.666822][ T2569] __x64_sys_clone+0x23f/0x290 [ 122.671419][ T2569] ? __do_sys_vfork+0x130/0x130 [ 122.676105][ T2569] ? ksys_write+0x260/0x2c0 [ 122.680446][ T2569] ? debug_smp_processor_id+0x17/0x20 [ 122.685656][ T2569] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 122.691554][ T2569] ? exit_to_user_mode_prepare+0x39/0xa0 [ 122.697024][ T2569] do_syscall_64+0x3d/0xb0 [ 122.701281][ T2569] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 122.706918][ T2569] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.712646][ T2569] RIP: 0033:0x7fbea76a2e79 [ 122.716899][ T2569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.736338][ T2569] RSP: 002b:00007fbea631ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 122.744583][ T2569] RAX: ffffffffffffffda RBX: 00007fbea783ef80 RCX: 00007fbea76a2e79 [ 122.752395][ T2569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020000 [ 122.760206][ T2569] RBP: 00007fbea6320090 R08: 0000000000000000 R09: 0000000000000000 [ 122.768017][ T2569] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 122.775828][ T2569] R13: 0000000000000000 R14: 00007fbea783ef80 R15: 00007ffcbf6b9648 [ 122.783645][ T2569] [ 122.816234][ T2569] Mem-Info: [ 122.819779][ T2569] active_anon:99 inactive_anon:3093 isolated_anon:0 [ 122.819779][ T2569] active_file:13125 inactive_file:8116 isolated_file:0 [ 122.819779][ T2569] unevictable:0 dirty:623 writeback:0 [ 122.819779][ T2569] slab_reclaimable:6903 slab_unreclaimable:81353 [ 122.819779][ T2569] mapped:21082 shmem:160 pagetables:484 bounce:0 [ 122.819779][ T2569] kernel_misc_reclaimable:0 [ 122.819779][ T2569] free:1552486 free_pcp:25782 free_cma:0 [ 122.866625][ T2569] Node 0 active_anon:396kB inactive_anon:12372kB active_file:52500kB inactive_file:32464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84328kB dirty:2492kB writeback:0kB shmem:640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7184kB pagetables:1936kB all_unreclaimable? no [ 122.899706][ T2569] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978996kB mlocked:0kB bounce:0kB free_pcp:4320kB local_pcp:0kB free_cma:0kB [ 123.109330][ T2569] lowmem_reserve[]: 0 3941 3941 [ 123.114051][ T2569] Normal free:3234500kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:412kB inactive_anon:12424kB active_file:52512kB inactive_file:32464kB unevictable:0kB writepending:2508kB present:5242880kB managed:4035584kB mlocked:0kB bounce:0kB free_pcp:97872kB local_pcp:46892kB free_cma:0kB [ 123.143088][ T2569] lowmem_reserve[]: 0 0 0 [ 123.147326][ T2569] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 123.162872][ T2569] Normal: 1059*4kB (UME) 521*8kB (ME) 1857*16kB (UME) 541*32kB (UME) 123*64kB (UME) 127*128kB (UME) 18*256kB (UME) 5*512kB (UME) 6*1024kB (ME) 2*2048kB (UM) 766*4096kB (UM) = 3234500kB [ 123.181014][ T2569] 21408 total pagecache pages [ 123.186256][ T2569] 0 pages in swap cache [ 123.190251][ T2569] Swap cache stats: add 0, delete 0, find 0/0 [ 123.229427][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.236797][ T2573] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.249416][ T2569] Free swap = 124996kB [ 123.253375][ T2569] Total swap = 124996kB [ 123.257504][ T2569] 2097051 pages RAM [ 123.261109][ T2569] 0 pages HighMem/MovableOnly [ 123.265836][ T2569] 343406 pages reserved [ 123.268449][ T2573] device bridge_slave_0 entered promiscuous mode [ 123.271169][ T2569] 0 pages cma reserved [ 123.317454][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.324369][ T2573] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.380270][ T2573] device bridge_slave_1 entered promiscuous mode [ 123.401603][ T2629] device pim6reg1 entered promiscuous mode [ 123.770119][ T45] device bridge_slave_1 left promiscuous mode [ 123.778133][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.786423][ T45] device bridge_slave_0 left promiscuous mode [ 123.792322][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.800045][ T45] device veth1_macvtap left promiscuous mode [ 123.805989][ T45] device veth0_vlan left promiscuous mode [ 123.815219][ T2657] FAULT_INJECTION: forcing a failure. [ 123.815219][ T2657] name failslab, interval 1, probability 0, space 0, times 0 [ 123.827781][ T2657] CPU: 0 PID: 2657 Comm: syz.1.761 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 123.837316][ T2657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 123.847211][ T2657] Call Trace: [ 123.850333][ T2657] [ 123.853111][ T2657] dump_stack_lvl+0x151/0x1c0 [ 123.857625][ T2657] ? io_uring_drop_tctx_refs+0x190/0x190 [ 123.863093][ T2657] dump_stack+0x15/0x20 [ 123.867085][ T2657] should_fail+0x3c6/0x510 [ 123.871339][ T2657] __should_failslab+0xa4/0xe0 [ 123.875936][ T2657] should_failslab+0x9/0x20 [ 123.880278][ T2657] slab_pre_alloc_hook+0x37/0xd0 [ 123.885049][ T2657] ? __request_module+0x2ad/0x8e0 [ 123.889914][ T2657] __kmalloc_track_caller+0x6c/0x260 [ 123.895034][ T2657] ? __request_module+0x2ad/0x8e0 [ 123.899891][ T2657] ? __kasan_kmalloc+0x9/0x10 [ 123.904405][ T2657] kstrdup+0x34/0x70 [ 123.908136][ T2657] __request_module+0x2ad/0x8e0 [ 123.912823][ T2657] ? capable+0x78/0xe0 [ 123.916730][ T2657] ? _trace_android_vh_delayacct_thrashing_end+0x120/0x120 [ 123.923762][ T2657] ? security_capable+0x87/0xb0 [ 123.928447][ T2657] dev_load+0x5b/0xb0 [ 123.932265][ T2657] dev_ioctl+0x30f/0xe70 [ 123.936345][ T2657] sock_do_ioctl+0x34f/0x5a0 [ 123.940771][ T2657] ? sock_show_fdinfo+0xa0/0xa0 [ 123.945459][ T2657] ? selinux_file_ioctl+0x3cc/0x540 [ 123.950490][ T2657] sock_ioctl+0x455/0x740 [ 123.954657][ T2657] ? sock_poll+0x400/0x400 [ 123.958908][ T2657] ? __fget_files+0x31e/0x380 [ 123.963424][ T2657] ? security_file_ioctl+0x84/0xb0 [ 123.968369][ T2657] ? sock_poll+0x400/0x400 [ 123.972622][ T2657] __se_sys_ioctl+0x114/0x190 [ 123.977137][ T2657] __x64_sys_ioctl+0x7b/0x90 [ 123.981561][ T2657] do_syscall_64+0x3d/0xb0 [ 123.985814][ T2657] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.991543][ T2657] RIP: 0033:0x7fd4b9e01e79 [ 123.995797][ T2657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.015236][ T2657] RSP: 002b:00007fd4b8a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.023481][ T2657] RAX: ffffffffffffffda RBX: 00007fd4b9f9e058 RCX: 00007fd4b9e01e79 [ 124.031292][ T2657] RDX: 0000000020000800 RSI: 0000000000008923 RDI: 0000000000000005 [ 124.039104][ T2657] RBP: 00007fd4b8a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 124.046914][ T2657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.054726][ T2657] R13: 0000000000000000 R14: 00007fd4b9f9e058 R15: 00007ffdfd8ec568 [ 124.062542][ T2657] [ 124.066293][ T30] audit: type=1400 audit(1723884686.764:149): avc: denied { sys_module } for pid=2651 comm="syz.1.761" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.160287][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.167144][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.181065][ T2657] ¯Ê®¸}p: renamed from pim6reg1 [ 124.193359][ T1829] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.229667][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.239710][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.271504][ T2666] ¯Ê®¸}p: renamed from pim6reg1 [ 124.295586][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.303803][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.323906][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.330759][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.338309][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.346420][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.354320][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.361075][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.368989][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.376978][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.384692][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.392806][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.400726][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.412786][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.422341][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.430072][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.438961][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.446247][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.463546][ T2573] device veth0_vlan entered promiscuous mode [ 124.495036][ T2677] ¯Ê®¸}p: renamed from pim6reg1 [ 124.553167][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.639101][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.667902][ T2573] device veth1_macvtap entered promiscuous mode [ 124.699663][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.742425][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.791797][ T1829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.017655][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.033750][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.059236][ T2699] device veth1_macvtap left promiscuous mode [ 125.860320][ C0] ------------[ cut here ]------------ [ 125.865582][ C0] WARNING: CPU: 0 PID: 1831 at kernel/softirq.c:358 __local_bh_enable_ip+0x6c/0x80 [ 125.874693][ C0] Modules linked in: [ 125.878424][ C0] CPU: 0 PID: 1831 Comm: kworker/0:53 Not tainted 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 125.888319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 125.898214][ C0] Workqueue: events bpf_prog_free_deferred [ 125.903855][ C0] RIP: 0010:__local_bh_enable_ip+0x6c/0x80 [ 125.909496][ C0] Code: 66 8b 05 47 80 c0 7e 66 85 c0 75 22 bf 01 00 00 00 e8 38 44 09 00 65 8b 05 b9 7d bf 7e 85 c0 74 02 5d c3 e8 ba 91 bd ff 5d c3 <0f> 0b eb a2 e8 0b 00 00 00 eb d7 66 0f 1f 84 00 00 00 00 00 55 48 [ 125.928937][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00010006 [ 125.934839][ C0] RAX: 0000000000010205 RBX: ffff88810004f358 RCX: dffffc0000000000 [ 125.942649][ C0] RDX: 0000000000010205 RSI: 0000000000000201 RDI: ffffffff83ff4292 [ 125.950461][ C0] RBP: ffffc90000007ae0 R08: dffffc0000000000 R09: 0000000000000003 [ 125.958273][ C0] R10: fffff52000000f50 R11: dffffc0000000001 R12: 0000000000000000 [ 125.966082][ C0] R13: dffffc0000000000 R14: 00000000fffffffe R15: ffff88810004f340 [ 125.973980][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 125.982745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.989170][ C0] CR2: 0000000020264000 CR3: 0000000126439000 CR4: 00000000003506b0 [ 125.996982][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.004790][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 126.012603][ C0] Call Trace: [ 126.015727][ C0] [ 126.018429][ C0] ? show_regs+0x58/0x60 [ 126.022496][ C0] ? __warn+0x160/0x2f0 [ 126.026488][ C0] ? __local_bh_enable_ip+0x6c/0x80 [ 126.031526][ C0] ? report_bug+0x3d9/0x5b0 [ 126.035866][ C0] ? __local_bh_enable_ip+0x6c/0x80 [ 126.040897][ C0] ? handle_bug+0x41/0x70 [ 126.045063][ C0] ? exc_invalid_op+0x1b/0x50 [ 126.049576][ C0] ? asm_exc_invalid_op+0x1b/0x20 [ 126.054438][ C0] ? sock_hash_delete_elem+0x2a2/0x2f0 [ 126.059730][ C0] ? __local_bh_enable_ip+0x6c/0x80 [ 126.064763][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 126.069537][ C0] sock_hash_delete_elem+0x2a2/0x2f0 [ 126.074660][ C0] bpf_prog_586ab708469db861+0x41/0xd04 [ 126.080039][ C0] bpf_trace_run3+0x11e/0x250 [ 126.084552][ C0] ? __kasan_check_write+0x14/0x20 [ 126.089500][ C0] ? bpf_trace_run2+0x210/0x210 [ 126.094187][ C0] __bpf_trace_timer_start+0x2b/0x40 [ 126.099307][ C0] enqueue_timer+0x351/0x4c0 [ 126.103734][ C0] add_timer_on+0x3f3/0x560 [ 126.108074][ C0] ? add_timer+0x80/0x80 [ 126.112154][ C0] ? __handle_irq_event_percpu+0x6c5/0x730 [ 126.117795][ C0] add_interrupt_randomness+0x40d/0x480 [ 126.123176][ C0] handle_irq_event+0x124/0x2b0 [ 126.127863][ C0] ? handle_irq_event_percpu+0x1a0/0x1a0 [ 126.133332][ C0] ? apic_ack_edge+0x10e/0x1b0 [ 126.137930][ C0] handle_edge_irq+0x2ea/0xda0 [ 126.142532][ C0] __common_interrupt+0x97/0x1b0 [ 126.147305][ C0] common_interrupt+0xaf/0xd0 [ 126.151817][ C0] [ 126.154593][ C0] [ 126.157371][ C0] asm_common_interrupt+0x27/0x40 [ 126.162231][ C0] RIP: 0010:smp_call_function_many_cond+0x843/0x9b0 [ 126.168655][ C0] Code: 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 f6 a8 0a 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 07 e8 31 a5 0a 00 eb 38 f3 90 <42> 0f b6 04 3b 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 a5 [ 126.188094][ C0] RSP: 0018:ffffc9000224f860 EFLAGS: 00000293 [ 126.193996][ C0] RAX: ffffffff8165a5cb RBX: 1ffff1103ee2784d RCX: ffff888112bd4f00 [ 126.201807][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.209619][ C0] RBP: ffffc9000224f968 R08: ffffffff8165a59a R09: ffffc9000224f7a0 [ 126.217430][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 126.225241][ C0] R13: ffff8881f713c268 R14: ffff8881f7038e80 R15: dffffc0000000000 [ 126.233055][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 126.238866][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 126.244686][ C0] ? flush_tlb_all+0x30/0x30 [ 126.249110][ C0] ? smp_call_function_many+0x40/0x40 [ 126.254317][ C0] ? flush_tlb_all+0x30/0x30 [ 126.258743][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 126.263690][ C0] flush_tlb_kernel_range+0x49/0x210 [ 126.268810][ C0] kasan_release_vmalloc+0xa5/0xb0 [ 126.273760][ C0] __purge_vmap_area_lazy+0x154a/0x1690 [ 126.279142][ C0] ? purge_fragmented_blocks_allcpus+0x920/0x920 [ 126.285329][ C0] _vm_unmap_aliases+0x339/0x3b0 [ 126.290074][ C0] __vunmap+0x617/0x8f0 [ 126.294068][ C0] vfree+0x7f/0xb0 [ 126.297628][ C0] module_memfree+0x17/0x30 [ 126.301964][ C0] bpf_jit_free_exec+0x15/0x20 [ 126.306565][ C0] bpf_jit_free+0x98/0x240 [ 126.310820][ C0] bpf_prog_free_deferred+0x61e/0x730 [ 126.316025][ C0] process_one_work+0x6bb/0xc10 [ 126.320714][ C0] worker_thread+0xad5/0x12a0 [ 126.325229][ C0] kthread+0x421/0x510 [ 126.329130][ C0] ? worker_clr_flags+0x180/0x180 [ 126.333990][ C0] ? kthread_blkcg+0xd0/0xd0 [ 126.338417][ C0] ret_from_fork+0x1f/0x30 [ 126.342672][ C0] [ 126.345533][ C0] ---[ end trace 1bd5a44aca87740a ]--- [ 225.095193][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 225.101602][ C0] rcu: 0-...!: (9951 ticks this GP) idle=537/1/0x4000000000000000 softirq=16223/16223 fqs=0 last_accelerate: bb10/e272 dyntick_enabled: 1 [ 225.115568][ C0] (t=10000 jiffies g=15465 q=304) [ 225.120517][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g15465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 225.131712][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 225.141518][ C0] rcu: RCU grace-period kthread stack dump: [ 225.147251][ C0] task:rcu_preempt state:I stack:28328 pid: 14 ppid: 2 flags:0x00004000 [ 225.156298][ C0] Call Trace: [ 225.159400][ C0] [ 225.162177][ C0] ? __mod_timer+0x8d3/0xcf0 [ 225.166615][ C0] ? mod_timer_pending+0x30/0x30 [ 225.171377][ C0] ? __kasan_check_write+0x14/0x20 [ 225.176323][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 225.181617][ C0] ? schedule_timeout+0x187/0x370 [ 225.186476][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 225.191511][ C0] ? console_conditional_schedule+0x30/0x30 [ 225.197239][ C0] ? update_process_times+0x200/0x200 [ 225.202450][ C0] ? prepare_to_swait_event+0x308/0x320 [ 225.207829][ C0] ? rcu_gp_fqs_loop+0x2af/0xf80 [ 225.212602][ C0] ? debug_smp_processor_id+0x17/0x20 [ 225.217807][ C0] ? __note_gp_changes+0x4ab/0x920 [ 225.222756][ C0] ? rcu_gp_init+0xc30/0xc30 [ 225.227182][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 225.232215][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 225.236644][ C0] ? rcu_gp_kthread+0xa4/0x350 [ 225.241240][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 225.245929][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 225.250444][ C0] ? __kasan_check_read+0x11/0x20 [ 225.255302][ C0] ? __kthread_parkme+0xb2/0x200 [ 225.260077][ C0] ? kthread+0x421/0x510 [ 225.264154][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 225.268670][ C0] ? kthread_blkcg+0xd0/0xd0 [ 225.273094][ C0] ? ret_from_fork+0x1f/0x30 [ 225.277521][ C0] [ 225.280388][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 225.286555][ C0] Sending NMI from CPU 0 to CPUs 1: [ 225.291630][ C1] NMI backtrace for cpu 1 [ 225.291643][ C1] CPU: 1 PID: 14 Comm: rcu_preempt Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 225.291662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 225.291674][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 225.291700][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d ea fc 12 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 225.291715][ C1] RSP: 0000:ffffc900001d0600 EFLAGS: 00000046 [ 225.291730][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a0c4 RCX: ffffffff81550ddf [ 225.291742][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127900 [ 225.291754][ C1] RBP: ffffc900001d06b0 R08: dffffc0000000000 R09: ffffed103ee24f21 [ 225.291767][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 225.291779][ C1] R13: ffff8881f7127900 R14: 0000000000000003 R15: 1ffff9200003a0c8 [ 225.291792][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 225.291806][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.291818][ C1] CR2: 00007fd4b9f70178 CR3: 0000000119b65000 CR4: 00000000003506a0 [ 225.291833][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.291843][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 225.291854][ C1] Call Trace: [ 225.291860][ C1] [ 225.291867][ C1] ? show_regs+0x58/0x60 [ 225.291902][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 225.291944][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 225.291988][ C1] ? kvm_wait+0x117/0x180 [ 225.292020][ C1] ? kvm_wait+0x117/0x180 [ 225.292053][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 225.292091][ C1] ? nmi_handle+0xa8/0x280 [ 225.292128][ C1] ? kvm_wait+0x117/0x180 [ 225.292160][ C1] ? default_do_nmi+0x69/0x160 [ 225.292193][ C1] ? exc_nmi+0xad/0x100 [ 225.292223][ C1] ? end_repeat_nmi+0x16/0x31 [ 225.292258][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 225.292299][ C1] ? kvm_wait+0x117/0x180 [ 225.292333][ C1] ? kvm_wait+0x117/0x180 [ 225.292366][ C1] ? kvm_wait+0x117/0x180 [ 225.292398][ C1] [ 225.292408][ C1] [ 225.292418][ C1] ? update_stack_state+0x15d/0x460 [ 225.292458][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 225.292498][ C1] ? pv_hash+0x86/0x150 [ 225.292515][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 225.292535][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 225.292553][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 225.292570][ C1] ? arch_stack_walk+0x10d/0x140 [ 225.292589][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 225.292608][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 225.292624][ C1] ? stack_trace_save+0x113/0x1c0 [ 225.292641][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 225.292658][ C1] ? __stack_depot_save+0x34/0x470 [ 225.292674][ C1] lock_timer_base+0x12f/0x270 [ 225.292689][ C1] __mod_timer+0x1c9/0xcf0 [ 225.292703][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 225.292718][ C1] ? kmem_cache_free+0x116/0x2e0 [ 225.292735][ C1] ? file_free_rcu+0x9f/0xb0 [ 225.292752][ C1] ? rcu_do_batch+0x57a/0xc10 [ 225.292769][ C1] ? rcu_core+0x517/0x1020 [ 225.292785][ C1] ? do_softirq+0xf6/0x150 [ 225.292801][ C1] ? __local_bh_enable_ip+0x75/0x80 [ 225.292818][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 225.292835][ C1] ? bpf_prog_586ab708469db861+0x41/0xd04 [ 225.292848][ C1] ? bpf_trace_run3+0x11e/0x250 [ 225.292866][ C1] ? mod_timer_pending+0x30/0x30 [ 225.292880][ C1] ? kthread+0x421/0x510 [ 225.292895][ C1] ? ret_from_fork+0x1f/0x30 [ 225.292911][ C1] ? longest_prefix_match+0x4b8/0x650 [ 225.292929][ C1] add_timer+0x68/0x80 [ 225.292943][ C1] __queue_delayed_work+0x16d/0x1f0 [ 225.292961][ C1] queue_delayed_work_on+0x10f/0x180 [ 225.292980][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 225.292998][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 225.293014][ C1] ? srcu_gp_start+0x136/0x1c0 [ 225.293030][ C1] srcu_gp_start_if_needed+0x5e3/0x950 [ 225.293050][ C1] ? rcu_free_old_probes+0x30/0x30 [ 225.293065][ C1] call_srcu+0x46/0x50 [ 225.293080][ C1] ? android_rvh_probe_register+0x430/0x430 [ 225.293096][ C1] rcu_free_old_probes+0x23/0x30 [ 225.293112][ C1] rcu_do_batch+0x57a/0xc10 [ 225.293133][ C1] ? local_bh_enable+0x20/0x20 [ 225.293151][ C1] ? __napi_poll+0xfb/0x5a0 [ 225.293170][ C1] rcu_core+0x517/0x1020 [ 225.293190][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 225.293207][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 225.293225][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 225.293243][ C1] rcu_core_si+0x9/0x10 [ 225.293258][ C1] __do_softirq+0x26d/0x5bf [ 225.293276][ C1] do_softirq+0xf6/0x150 [ 225.293292][ C1] [ 225.293297][ C1] [ 225.293302][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 225.293319][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 225.293336][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 225.293353][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 225.293372][ C1] __local_bh_enable_ip+0x75/0x80 [ 225.293390][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 225.293407][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 225.293427][ C1] bpf_prog_586ab708469db861+0x41/0xd04 [ 225.293440][ C1] bpf_trace_run3+0x11e/0x250 [ 225.293457][ C1] ? __kasan_check_write+0x14/0x20 [ 225.293475][ C1] ? bpf_trace_run2+0x210/0x210 [ 225.293497][ C1] ? debug_smp_processor_id+0x17/0x20 [ 225.293513][ C1] ? get_nohz_timer_target+0x79/0x750 [ 225.293532][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 225.293551][ C1] enqueue_timer+0x351/0x4c0 [ 225.293567][ C1] __mod_timer+0x8d3/0xcf0 [ 225.293585][ C1] ? mod_timer_pending+0x30/0x30 [ 225.293601][ C1] ? __kasan_check_write+0x14/0x20 [ 225.293618][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 225.293637][ C1] schedule_timeout+0x187/0x370 [ 225.293654][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 225.293672][ C1] ? console_conditional_schedule+0x30/0x30 [ 225.293690][ C1] ? update_process_times+0x200/0x200 [ 225.293706][ C1] ? prepare_to_swait_event+0x308/0x320 [ 225.293725][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 225.293745][ C1] ? debug_smp_processor_id+0x17/0x20 [ 225.293760][ C1] ? __note_gp_changes+0x4ab/0x920 [ 225.293778][ C1] ? rcu_gp_init+0xc30/0xc30 [ 225.293795][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 225.293813][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 225.293831][ C1] rcu_gp_kthread+0xa4/0x350 [ 225.293848][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 225.293866][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 225.293884][ C1] ? __kasan_check_read+0x11/0x20 [ 225.293901][ C1] ? __kthread_parkme+0xb2/0x200 [ 225.293919][ C1] kthread+0x421/0x510 [ 225.293935][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 225.293952][ C1] ? kthread_blkcg+0xd0/0xd0 [ 225.293968][ C1] ret_from_fork+0x1f/0x30 [ 225.293987][ C1] [ 225.294596][ C0] NMI backtrace for cpu 0 [ 225.942272][ C0] CPU: 0 PID: 1831 Comm: kworker/0:53 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 225.953549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 225.963447][ C0] Workqueue: events bpf_prog_free_deferred [ 225.969084][ C0] Call Trace: [ 225.972211][ C0] [ 225.974902][ C0] dump_stack_lvl+0x151/0x1c0 [ 225.979412][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 225.984881][ C0] ? tracing_record_taskinfo+0x7b/0x230 [ 225.990263][ C0] dump_stack+0x15/0x20 [ 225.994252][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 225.999028][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 226.005016][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 226.010310][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 226.014997][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 226.020897][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 226.026713][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 226.032617][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 226.038344][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 226.043291][ C0] print_cpu_stall+0x315/0x5f0 [ 226.047890][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 226.052935][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 226.058914][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 226.063949][ C0] update_process_times+0x198/0x200 [ 226.068981][ C0] tick_sched_timer+0x188/0x240 [ 226.073668][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 226.079049][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 226.084083][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 226.089029][ C0] ? clockevents_program_event+0x22f/0x300 [ 226.094673][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 226.100573][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 226.105350][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 226.111075][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 226.116545][ C0] [ 226.119322][ C0] [ 226.122097][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 226.127913][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 226.133901][ C0] Code: 90 22 92 7e 65 8b 15 91 22 92 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 <83> fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c [ 226.153341][ C0] RSP: 0018:ffffc9000224f850 EFLAGS: 00000246 [ 226.159243][ C0] RAX: ffffffff8165a5cb RBX: 1ffff1103ee2784d RCX: ffff888112bd4f00 [ 226.167053][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 226.174865][ C0] RBP: ffffc9000224f850 R08: ffffffff8165a59a R09: ffffc9000224f7a0 [ 226.182678][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 226.190487][ C0] R13: ffff8881f713c268 R14: ffff8881f7038e80 R15: dffffc0000000000 [ 226.198302][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 226.204120][ C0] ? smp_call_function_many_cond+0x85b/0x9b0 [ 226.209936][ C0] smp_call_function_many_cond+0x85b/0x9b0 [ 226.215572][ C0] ? flush_tlb_all+0x30/0x30 [ 226.219996][ C0] ? smp_call_function_many+0x40/0x40 [ 226.225206][ C0] ? flush_tlb_all+0x30/0x30 [ 226.229631][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 226.234582][ C0] flush_tlb_kernel_range+0x49/0x210 [ 226.239699][ C0] kasan_release_vmalloc+0xa5/0xb0 [ 226.244646][ C0] __purge_vmap_area_lazy+0x154a/0x1690 [ 226.250029][ C0] ? purge_fragmented_blocks_allcpus+0x920/0x920 [ 226.256192][ C0] _vm_unmap_aliases+0x339/0x3b0 [ 226.260964][ C0] __vunmap+0x617/0x8f0 [ 226.264957][ C0] vfree+0x7f/0xb0 [ 226.268514][ C0] module_memfree+0x17/0x30 [ 226.272853][ C0] bpf_jit_free_exec+0x15/0x20 [ 226.277455][ C0] bpf_jit_free+0x98/0x240 [ 226.281706][ C0] bpf_prog_free_deferred+0x61e/0x730 [ 226.286914][ C0] process_one_work+0x6bb/0xc10 [ 226.291602][ C0] worker_thread+0xad5/0x12a0 [ 226.296117][ C0] kthread+0x421/0x510 [ 226.300019][ C0] ? worker_clr_flags+0x180/0x180 [ 226.304880][ C0] ? kthread_blkcg+0xd0/0xd0 [ 226.309305][ C0] ret_from_fork+0x1f/0x30 [ 226.313567][ C0] [ 226.316428][ C0] Sending NMI from CPU 0 to CPUs 1: [ 226.321496][ C1] NMI backtrace for cpu 1 [ 226.321507][ C1] CPU: 1 PID: 14 Comm: rcu_preempt Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 226.321526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 226.321537][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 226.321557][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d ea fc 12 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 226.321571][ C1] RSP: 0000:ffffc900001d0600 EFLAGS: 00000046 [ 226.321586][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a0c4 RCX: ffffffff81550ddf [ 226.321599][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127900 [ 226.321611][ C1] RBP: ffffc900001d06b0 R08: dffffc0000000000 R09: ffffed103ee24f21 [ 226.321624][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 226.321635][ C1] R13: ffff8881f7127900 R14: 0000000000000003 R15: 1ffff9200003a0c8 [ 226.321648][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 226.321662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.321675][ C1] CR2: 00007fd4b9f70178 CR3: 0000000119b65000 CR4: 00000000003506a0 [ 226.321690][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.321700][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 226.321711][ C1] Call Trace: [ 226.321717][ C1] [ 226.321723][ C1] ? show_regs+0x58/0x60 [ 226.321740][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 226.321761][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 226.321782][ C1] ? kvm_wait+0x117/0x180 [ 226.321796][ C1] ? kvm_wait+0x117/0x180 [ 226.321811][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 226.321829][ C1] ? nmi_handle+0xa8/0x280 [ 226.321846][ C1] ? kvm_wait+0x117/0x180 [ 226.321860][ C1] ? kvm_wait+0x117/0x180 [ 226.321875][ C1] ? default_do_nmi+0x69/0x160 [ 226.321891][ C1] ? exc_nmi+0xad/0x100 [ 226.321905][ C1] ? end_repeat_nmi+0x16/0x31 [ 226.321921][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 226.321942][ C1] ? kvm_wait+0x117/0x180 [ 226.321957][ C1] ? kvm_wait+0x117/0x180 [ 226.321972][ C1] ? kvm_wait+0x117/0x180 [ 226.321987][ C1] [ 226.321992][ C1] [ 226.321997][ C1] ? update_stack_state+0x15d/0x460 [ 226.322015][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 226.322032][ C1] ? pv_hash+0x86/0x150 [ 226.322048][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 226.322069][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 226.322087][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 226.322105][ C1] ? arch_stack_walk+0x10d/0x140 [ 226.322124][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 226.322143][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 226.322160][ C1] ? stack_trace_save+0x113/0x1c0 [ 226.322177][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 226.322194][ C1] ? __stack_depot_save+0x34/0x470 [ 226.322210][ C1] lock_timer_base+0x12f/0x270 [ 226.322225][ C1] __mod_timer+0x1c9/0xcf0 [ 226.322239][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 226.322254][ C1] ? kmem_cache_free+0x116/0x2e0 [ 226.322271][ C1] ? file_free_rcu+0x9f/0xb0 [ 226.322288][ C1] ? rcu_do_batch+0x57a/0xc10 [ 226.322305][ C1] ? rcu_core+0x517/0x1020 [ 226.322322][ C1] ? do_softirq+0xf6/0x150 [ 226.322338][ C1] ? __local_bh_enable_ip+0x75/0x80 [ 226.322355][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 226.322372][ C1] ? bpf_prog_586ab708469db861+0x41/0xd04 [ 226.322396][ C1] ? bpf_trace_run3+0x11e/0x250 [ 226.322414][ C1] ? mod_timer_pending+0x30/0x30 [ 226.322428][ C1] ? kthread+0x421/0x510 [ 226.322443][ C1] ? ret_from_fork+0x1f/0x30 [ 226.322459][ C1] ? longest_prefix_match+0x4b8/0x650 [ 226.322478][ C1] add_timer+0x68/0x80 [ 226.322492][ C1] __queue_delayed_work+0x16d/0x1f0 [ 226.322511][ C1] queue_delayed_work_on+0x10f/0x180 [ 226.322529][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 226.322547][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 226.322564][ C1] ? srcu_gp_start+0x136/0x1c0 [ 226.322580][ C1] srcu_gp_start_if_needed+0x5e3/0x950 [ 226.322599][ C1] ? rcu_free_old_probes+0x30/0x30 [ 226.322616][ C1] call_srcu+0x46/0x50 [ 226.322630][ C1] ? android_rvh_probe_register+0x430/0x430 [ 226.322647][ C1] rcu_free_old_probes+0x23/0x30 [ 226.322662][ C1] rcu_do_batch+0x57a/0xc10 [ 226.322682][ C1] ? local_bh_enable+0x20/0x20 [ 226.322701][ C1] ? __napi_poll+0xfb/0x5a0 [ 226.322719][ C1] rcu_core+0x517/0x1020 [ 226.322738][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 226.322755][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 226.322774][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 226.322791][ C1] rcu_core_si+0x9/0x10 [ 226.322807][ C1] __do_softirq+0x26d/0x5bf [ 226.322823][ C1] do_softirq+0xf6/0x150 [ 226.322839][ C1] [ 226.322844][ C1] [ 226.322849][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 226.322866][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 226.322883][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 226.322900][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 226.322920][ C1] __local_bh_enable_ip+0x75/0x80 [ 226.322937][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 226.322953][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 226.322974][ C1] bpf_prog_586ab708469db861+0x41/0xd04 [ 226.322987][ C1] bpf_trace_run3+0x11e/0x250 [ 226.323004][ C1] ? __kasan_check_write+0x14/0x20 [ 226.323021][ C1] ? bpf_trace_run2+0x210/0x210 [ 226.323039][ C1] ? debug_smp_processor_id+0x17/0x20 [ 226.323054][ C1] ? get_nohz_timer_target+0x79/0x750 [ 226.323073][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 226.323091][ C1] enqueue_timer+0x351/0x4c0 [ 226.323107][ C1] __mod_timer+0x8d3/0xcf0 [ 226.323124][ C1] ? mod_timer_pending+0x30/0x30 [ 226.323140][ C1] ? __kasan_check_write+0x14/0x20 [ 226.323156][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 226.323175][ C1] schedule_timeout+0x187/0x370 [ 226.323191][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 226.323209][ C1] ? console_conditional_schedule+0x30/0x30 [ 226.323227][ C1] ? update_process_times+0x200/0x200 [ 226.323242][ C1] ? prepare_to_swait_event+0x308/0x320 [ 226.323261][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 226.323280][ C1] ? debug_smp_processor_id+0x17/0x20 [ 226.323295][ C1] ? __note_gp_changes+0x4ab/0x920 [ 226.323313][ C1] ? rcu_gp_init+0xc30/0xc30 [ 226.323330][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 226.323347][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 226.323365][ C1] rcu_gp_kthread+0xa4/0x350 [ 226.323386][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 226.323404][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 226.323421][ C1] ? __kasan_check_read+0x11/0x20 [ 226.323438][ C1] ? __kthread_parkme+0xb2/0x200 [ 226.323455][ C1] kthread+0x421/0x510 [ 226.323470][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 226.323487][ C1] ? kthread_blkcg+0xd0/0xd0 [ 226.323504][ C1] ret_from_fork+0x1f/0x30 [ 226.323522][ C1] [ 375.017750][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/0:53:1831] [ 375.025974][ C0] Modules linked in: [ 375.029708][ C0] CPU: 0 PID: 1831 Comm: kworker/0:53 Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 375.040989][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 375.051020][ C0] Workqueue: events bpf_prog_free_deferred [ 375.056620][ C0] RIP: 0010:smp_call_function_many_cond+0x848/0x9b0 [ 375.063042][ C0] Code: 89 fe 83 e6 01 31 ff e8 f6 a8 0a 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 07 e8 31 a5 0a 00 eb 38 f3 90 42 0f b6 04 3b <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 a5 0a 00 eb e4 44 [ 375.082917][ C0] RSP: 0018:ffffc9000224f860 EFLAGS: 00000293 [ 375.088818][ C0] RAX: 0000000000000000 RBX: 1ffff1103ee2784d RCX: ffff888112bd4f00 [ 375.096630][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 375.104441][ C0] RBP: ffffc9000224f968 R08: ffffffff8165a59a R09: ffffc9000224f7a0 [ 375.112254][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 375.120063][ C0] R13: ffff8881f713c268 R14: ffff8881f7038e80 R15: dffffc0000000000 [ 375.127876][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 375.136640][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.143062][ C0] CR2: 0000000020264000 CR3: 0000000126439000 CR4: 00000000003506b0 [ 375.150879][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.158685][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 375.166496][ C0] Call Trace: [ 375.169623][ C0] [ 375.172316][ C0] ? show_regs+0x58/0x60 [ 375.176392][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 375.181350][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 375.186460][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 375.191668][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 375.196613][ C0] ? clockevents_program_event+0x22f/0x300 [ 375.202258][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 375.208158][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 375.213107][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 375.219006][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 375.224647][ C0] [ 375.227425][ C0] [ 375.230203][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 375.236194][ C0] ? smp_call_function_many_cond+0x82a/0x9b0 [ 375.242007][ C0] ? smp_call_function_many_cond+0x848/0x9b0 [ 375.247825][ C0] ? flush_tlb_all+0x30/0x30 [ 375.252247][ C0] ? smp_call_function_many+0x40/0x40 [ 375.257454][ C0] ? flush_tlb_all+0x30/0x30 [ 375.261882][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 375.266829][ C0] flush_tlb_kernel_range+0x49/0x210 [ 375.271949][ C0] kasan_release_vmalloc+0xa5/0xb0 [ 375.276898][ C0] __purge_vmap_area_lazy+0x154a/0x1690 [ 375.282280][ C0] ? purge_fragmented_blocks_allcpus+0x920/0x920 [ 375.288441][ C0] _vm_unmap_aliases+0x339/0x3b0 [ 375.293213][ C0] __vunmap+0x617/0x8f0 [ 375.297212][ C0] vfree+0x7f/0xb0 [ 375.300764][ C0] module_memfree+0x17/0x30 [ 375.305103][ C0] bpf_jit_free_exec+0x15/0x20 [ 375.309703][ C0] bpf_jit_free+0x98/0x240 [ 375.313956][ C0] bpf_prog_free_deferred+0x61e/0x730 [ 375.319163][ C0] process_one_work+0x6bb/0xc10 [ 375.323853][ C0] worker_thread+0xad5/0x12a0 [ 375.328367][ C0] kthread+0x421/0x510 [ 375.332268][ C0] ? worker_clr_flags+0x180/0x180 [ 375.337128][ C0] ? kthread_blkcg+0xd0/0xd0 [ 375.341556][ C0] ret_from_fork+0x1f/0x30 [ 375.345812][ C0] [ 375.348675][ C0] Sending NMI from CPU 0 to CPUs 1: [ 375.353753][ C1] NMI backtrace for cpu 1 [ 375.353765][ C1] CPU: 1 PID: 14 Comm: rcu_preempt Tainted: G W 5.15.153-syzkaller-00623-gda92e689a0c3 #0 [ 375.353784][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 375.353794][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 375.353814][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d ea fc 12 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 375.353828][ C1] RSP: 0000:ffffc900001d0600 EFLAGS: 00000046 [ 375.353843][ C1] RAX: 0000000000000003 RBX: 1ffff9200003a0c4 RCX: ffffffff81550ddf [ 375.353855][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127900 [ 375.353868][ C1] RBP: ffffc900001d06b0 R08: dffffc0000000000 R09: ffffed103ee24f21 [ 375.353880][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 375.353892][ C1] R13: ffff8881f7127900 R14: 0000000000000003 R15: 1ffff9200003a0c8 [ 375.353904][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 375.353919][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.353931][ C1] CR2: 00007fd4b9f70178 CR3: 0000000119b65000 CR4: 00000000003506a0 [ 375.353946][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.353956][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 375.353967][ C1] Call Trace: [ 375.353973][ C1] [ 375.353980][ C1] ? show_regs+0x58/0x60 [ 375.354017][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 375.354060][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 375.354105][ C1] ? kvm_wait+0x117/0x180 [ 375.354137][ C1] ? kvm_wait+0x117/0x180 [ 375.354178][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 375.354196][ C1] ? nmi_handle+0xa8/0x280 [ 375.354213][ C1] ? kvm_wait+0x117/0x180 [ 375.354227][ C1] ? kvm_wait+0x117/0x180 [ 375.354242][ C1] ? default_do_nmi+0x69/0x160 [ 375.354258][ C1] ? exc_nmi+0xad/0x100 [ 375.354272][ C1] ? end_repeat_nmi+0x16/0x31 [ 375.354288][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 375.354308][ C1] ? kvm_wait+0x117/0x180 [ 375.354323][ C1] ? kvm_wait+0x117/0x180 [ 375.354339][ C1] ? kvm_wait+0x117/0x180 [ 375.354353][ C1] [ 375.354359][ C1] [ 375.354364][ C1] ? update_stack_state+0x15d/0x460 [ 375.354382][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 375.354398][ C1] ? pv_hash+0x86/0x150 [ 375.354415][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 375.354435][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 375.354453][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 375.354470][ C1] ? arch_stack_walk+0x10d/0x140 [ 375.354489][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 375.354508][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 375.354524][ C1] ? stack_trace_save+0x113/0x1c0 [ 375.354541][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 375.354558][ C1] ? __stack_depot_save+0x34/0x470 [ 375.354574][ C1] lock_timer_base+0x12f/0x270 [ 375.354590][ C1] __mod_timer+0x1c9/0xcf0 [ 375.354603][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 375.354618][ C1] ? kmem_cache_free+0x116/0x2e0 [ 375.354635][ C1] ? file_free_rcu+0x9f/0xb0 [ 375.354652][ C1] ? rcu_do_batch+0x57a/0xc10 [ 375.354669][ C1] ? rcu_core+0x517/0x1020 [ 375.354686][ C1] ? do_softirq+0xf6/0x150 [ 375.354702][ C1] ? __local_bh_enable_ip+0x75/0x80 [ 375.354719][ C1] ? _raw_spin_unlock_bh+0x51/0x60 [ 375.354736][ C1] ? bpf_prog_586ab708469db861+0x41/0xd04 [ 375.354760][ C1] ? bpf_trace_run3+0x11e/0x250 [ 375.354778][ C1] ? mod_timer_pending+0x30/0x30 [ 375.354792][ C1] ? kthread+0x421/0x510 [ 375.354807][ C1] ? ret_from_fork+0x1f/0x30 [ 375.354823][ C1] ? longest_prefix_match+0x4b8/0x650 [ 375.354842][ C1] add_timer+0x68/0x80 [ 375.354855][ C1] __queue_delayed_work+0x16d/0x1f0 [ 375.354874][ C1] queue_delayed_work_on+0x10f/0x180 [ 375.354893][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 375.354911][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 375.354928][ C1] ? srcu_gp_start+0x136/0x1c0 [ 375.354944][ C1] srcu_gp_start_if_needed+0x5e3/0x950 [ 375.354964][ C1] ? rcu_free_old_probes+0x30/0x30 [ 375.354980][ C1] call_srcu+0x46/0x50 [ 375.354994][ C1] ? android_rvh_probe_register+0x430/0x430 [ 375.355011][ C1] rcu_free_old_probes+0x23/0x30 [ 375.355026][ C1] rcu_do_batch+0x57a/0xc10 [ 375.355047][ C1] ? local_bh_enable+0x20/0x20 [ 375.355065][ C1] ? __napi_poll+0xfb/0x5a0 [ 375.355084][ C1] rcu_core+0x517/0x1020 [ 375.355103][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 375.355121][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 375.355139][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 375.355157][ C1] rcu_core_si+0x9/0x10 [ 375.355176][ C1] __do_softirq+0x26d/0x5bf [ 375.355193][ C1] do_softirq+0xf6/0x150 [ 375.355209][ C1] [ 375.355214][ C1] [ 375.355219][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 375.355236][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 375.355253][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 375.355270][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 375.355290][ C1] __local_bh_enable_ip+0x75/0x80 [ 375.355307][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 375.355324][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 375.355346][ C1] bpf_prog_586ab708469db861+0x41/0xd04 [ 375.355359][ C1] bpf_trace_run3+0x11e/0x250 [ 375.355376][ C1] ? __kasan_check_write+0x14/0x20 [ 375.355394][ C1] ? bpf_trace_run2+0x210/0x210 [ 375.355412][ C1] ? debug_smp_processor_id+0x17/0x20 [ 375.355428][ C1] ? get_nohz_timer_target+0x79/0x750 [ 375.355448][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 375.355466][ C1] enqueue_timer+0x351/0x4c0 [ 375.355483][ C1] __mod_timer+0x8d3/0xcf0 [ 375.355500][ C1] ? mod_timer_pending+0x30/0x30 [ 375.355515][ C1] ? __kasan_check_write+0x14/0x20 [ 375.355531][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 375.355551][ C1] schedule_timeout+0x187/0x370 [ 375.355567][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 375.355585][ C1] ? console_conditional_schedule+0x30/0x30 [ 375.355602][ C1] ? update_process_times+0x200/0x200 [ 375.355618][ C1] ? prepare_to_swait_event+0x308/0x320 [ 375.355637][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 375.355656][ C1] ? debug_smp_processor_id+0x17/0x20 [ 375.355672][ C1] ? __note_gp_changes+0x4ab/0x920 [ 375.355689][ C1] ? rcu_gp_init+0xc30/0xc30 [ 375.355706][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 375.355723][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 375.355741][ C1] rcu_gp_kthread+0xa4/0x350 [ 375.355758][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 375.355775][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 375.355793][ C1] ? __kasan_check_read+0x11/0x20 [ 375.355810][ C1] ? __kthread_parkme+0xb2/0x200 [ 375.355828][ C1] kthread+0x421/0x510 [ 375.355844][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 375.355860][ C1] ? kthread_blkcg+0xd0/0xd0 [ 375.355877][ C1] ret_from_fork+0x1f/0x30 [ 375.355895][ C1]