last executing test programs: 7m8.679463101s ago: executing program 4 (id=2584): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r0, 0x26, &(0x7f0000002040)}, 0x6d) 7m8.566621301s ago: executing program 4 (id=2587): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x81\x02\x00\x00\x01\x04\x00!\x10\xd3\x16\x9f\xf8\xf8\xf5\x00p\x9aB\xa1-\x00') openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x0) 7m8.452219911s ago: executing program 3 (id=2590): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 7m8.378332161s ago: executing program 4 (id=2593): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00dq_'], 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271d", 0x8}], 0x4}, 0x0) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="9343000052"], 0xfe33) 7m8.208958079s ago: executing program 3 (id=2594): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9fd}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 7m8.136105159s ago: executing program 4 (id=2598): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7054, 0x6}, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x2018, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 7m7.936101969s ago: executing program 3 (id=2602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m7.909954528s ago: executing program 4 (id=2603): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, 0x0, 0x8000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x5c1}, {0x0}], 0x2}, 0x0) 7m7.760224398s ago: executing program 3 (id=2605): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c1", 0x20}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) close(0x3) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100), 0x120) 7m7.651999778s ago: executing program 3 (id=2607): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x47, &(0x7f0000003fc0)}, 0xe) 7m7.522075867s ago: executing program 4 (id=2610): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x7}], 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000040)}, 0x0) recvmsg$kcm(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001600)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x40000060) 7m7.318609356s ago: executing program 32 (id=2610): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x7}], 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000040)}, 0x0) recvmsg$kcm(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001600)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x40000060) 7m7.207694116s ago: executing program 3 (id=2614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m6.954555965s ago: executing program 33 (id=2614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.382375808s ago: executing program 6 (id=6087): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 7.313260658s ago: executing program 5 (id=6089): socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x1, 0xfffffff0, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bfb85fd0c8e9033f1ff098212bc2d77871172674fb233bcf95f10af441439e367edbc8c3dcbc6a30e5214903e263023fe492d6210de05946e6e991d9fafa675a0b0553474e579f04180ee4fe246a1bbd5e5bb3dd19d2", 0x56}, {&(0x7f0000000400)="bcf4d5f1de4fd09507a5e74055a989ae5656b943def3663fee9c9d774a0d896a607c4640013ade95090bcbbbcdfc50e0c9122e97", 0x34}, {&(0x7f0000000440)="fb4799522044e408634c1f6576e9ba809c3377e25cd007aebad90d25d1436ff13e6745bad963eca2ba079df4143c051496c8c333a67c1b8531043124b3ba7964cd3a9b79dd70", 0x46}], 0x3}, 0x40000) close(0x3) 7.312132747s ago: executing program 0 (id=6091): socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x15, 0x5, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) close(r4) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000001c0)) 7.073538957s ago: executing program 6 (id=6093): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x651}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000fc0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r5, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) 6.750066135s ago: executing program 5 (id=6094): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x1, 0xfffffff0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bfb85fd0c8e9033f1ff098212bc2d77871172674fb233bcf95f10af441439e367edbc8c3dcbc6a30e5214903e263023fe492d6210de05946e6e991d9fafa675a0b0553474e579f04180ee4fe246a1bbd5e5bb3dd19d2", 0x56}, {&(0x7f0000000400)="bcf4d5f1de4fd09507a5e74055a989ae5656b943def3663fee9c9d774a0d896a607c4640013ade95090bcbbbcdfc50e0c9122e97", 0x34}, {&(0x7f0000000440)="fb4799522044e408634c1f6576e9ba809c3377e25cd007aebad90d25d1436ff13e6745bad963eca2ba079df4143c051496c8c333a67c1b8531043124b3ba7964cd3a9b79dd70", 0x46}], 0x3}, 0x40000) close(0x3) 6.677375585s ago: executing program 0 (id=6096): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYRES64=r1], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000200)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000000)=@framed={{}, [@map_val, @map_val]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 6.676823275s ago: executing program 6 (id=6097): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x1, 0xfffffff0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bfb85fd0c8e9033f1ff098212bc2d77871172674fb233bcf95f10af441439e367edbc8c3dcbc6a30e5214903e263023fe492d6210de05946e6e991d9fafa675a0b0553474e579f04180ee4fe246a1bbd5e5bb3dd19d2", 0x56}, {&(0x7f0000000400)="bcf4d5f1de4fd09507a5e74055a989ae5656b943def3663fee9c9d774a0d896a607c4640013ade95090bcbbbcdfc50e0c9122e97", 0x34}, {&(0x7f0000000440)="fb4799522044e408634c1f6576e9ba809c3377e25cd007aebad90d25d1436ff13e6745bad963eca2ba079df4143c051496c8c333a67c1b8531043124b3ba7964cd3a9b79dd70", 0x46}], 0x3}, 0x40000) close(0x3) 6.344077744s ago: executing program 1 (id=6100): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 6.326812924s ago: executing program 5 (id=6101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8907, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 6.289452624s ago: executing program 2 (id=6102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000000000000000000000000000180100007e38000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0, 0x0, 0xc00000000000000}, 0x10) 5.911233722s ago: executing program 1 (id=6103): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0xfe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000000)="b9e403c6631e39", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.909284932s ago: executing program 2 (id=6104): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b02000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.854248082s ago: executing program 2 (id=6105): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?r\x00&\x00\x00\x00\x00\x00\x00\x00'], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000020000000000000000000000cbdfd8de6cb920dc0bd56386e1128561db07e3790324b9c4b6d3142c8bec3ac5a7730a84274f1ccd12880733e38a349c96dabea2d2967b9edcec882d7f9c461acab32d969c2892a6dadc2fb9b315c370f87cd620ba1aae4eb10641f97f14b2b739ee926bde3698f2eb7921ab72"], 0x48) r1 = perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a4", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000b9e9a878f0bb6b17b50e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r8}, 0x18) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 5.639084691s ago: executing program 5 (id=6106): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x7, 0x40, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x66, 0x0, &(0x7f00000004c0)="5ae96176eff97868edc587a1de79809c0583e7031478218e8b17a0c866e8bd57518bfe739c65167644832a7262be3aa3ea5e52efd0ef4146ecdbf33deab043dde713f7c05082d76fcffdfd517fe5c6f30907db0116182293229919f5294488eea38974ddccc7", 0x0, 0x0, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x3a, 0x0, &(0x7f0000000440)="e460cdfbef2408002900119386dd6a000000000700eb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c108906", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r2}, 0x38) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000020000007e83d5e92f65ad3c0000000000000000f34178de74877e71a2d21c5d1485b8fd085bd0db4db0e3312ed7658a3afda85c3339d8cc160105c0e14ce8b81885aa831f42227bda35f253330d71b209cc2ecc82ad222a8d9cf657f2a1cd42cb3228e2945074f72b2095d2e062dc85c6b7876cf91732dfd0adca1771e43d8e91120f1ec37d2cf76fba3d2a787ed145d58437f12259576b32b92fb4543432e7a5759a01f0ffff2373b340a27c5accea9973a03b961975df3958870da36cb3c836ce48b7b61b9cab33ea8689319c42b4feffd129e16309005644ba6be2e346bbe054847f1baf1988000000000000000000"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r7, &(0x7f0000000380), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 5.636848491s ago: executing program 1 (id=6116): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0xfe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000000)="b9e403c6631e39", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.628400811s ago: executing program 0 (id=6107): socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x15, 0x5, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) close(r4) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000001c0)) 5.559782001s ago: executing program 6 (id=6108): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19de000040f744460a83cb28aa23653a5e99cdf7afac650fd606356c65cb68bf312a5360c006aa27809ba241bf248f2b25ec4a943ed48f8e59e670ddb05444fece0bb3382dfea4435a3e75e9926d38501c40ee5879bcdd9b9bea8a852eac0ed01754c9c9acb988dc224a0baeafb4c0a317b93729b723e7c88bb80589a585cc5b4768f92c34133d4935f0a89d44beab042b65a906cd0391fa2c39dd02db3ec9f922f1f9127a55dc14e4fdb889eb565cb8e96d83d66bf95840590b3a7145f56bdf27f5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x2f, 0x0, 0x5, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x1f, 0x4, 0x0, @void, @value, @void, @void, r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010100000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r4, &(0x7f0000000740), 0x0}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="00000000000000006b001800000000009500004218000000b476ab9686048964c0e90300000000000000972fd7ec1be9e49fd113fd263d97e6cc2a4f8102f6806d6c2c0aad7d6d4de65f3b0831f520415a8f01461d93666657740272f9f688818a21f6df024375cac5960c3165ef72dab4918786b94178c9838da395be407ca5ed7a37c1b3a889e7c736252648bc4a6d2834e77988904b355e76de1dfd1b9bd34e7c66ab8310442e6f298601277f12a594c4a9efc62c84ea71dc8199a45d73a12ea23d8b11a4ea9b559b4109f7a75e64717694d46d2341c561"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xf19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.395705771s ago: executing program 2 (id=6109): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x651}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000fc0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r5, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) 4.854599898s ago: executing program 1 (id=6110): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000117274b74000000", @ANYRES32, @ANYBLOB="92000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91b, 0x0, @perf_config_ext, 0x0, 0x40000000000c8, 0x9d3, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x1, 0x6, 0x6, 0xffffffffffffffc0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xf, 0xa5, &(0x7f0000000280)=""/165, 0x41000, 0x2, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xb5b7, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r0, r4, r0, r0, r0, r4, r0, r4, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x79757a16278d6515}, 0x32140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, 0x0, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4004044) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0x52) socket$kcm(0xa, 0x2, 0x88) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0xa, 0x5, 0x0) 4.401761577s ago: executing program 6 (id=6111): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x1, 0xfffffff0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bfb85fd0c8e9033f1ff098212bc2d77871172674fb233bcf95f10af441439e367edbc8c3dcbc6a30e5214903e263023fe492d6210de05946e6e991d9fafa675a0b0553474e579f04180ee4fe246a1bbd5e5bb3dd19d2", 0x56}, {&(0x7f0000000400)="bcf4d5f1de4fd09507a5e74055a989ae5656b943def3663fee9c9d774a0d896a607c4640013ade95090bcbbbcdfc50e0c9122e97", 0x34}, {&(0x7f0000000440)="fb4799522044e408634c1f6576e9ba809c3377e25cd007aebad90d25d1436ff13e6745bad963eca2ba079df4143c051496c8c333a67c1b8531043124b3ba7964cd3a9b79dd70", 0x46}], 0x3}, 0x40000) close(0x3) 4.339912446s ago: executing program 0 (id=6112): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) close(0xffffffffffffffff) 3.914564485s ago: executing program 0 (id=6113): socket$kcm(0x22, 0x2, 0x21) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x1100000, 0x3, 0xdc3, 0x0, 0x204}, 0x0, 0x5, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500), 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x20000000001, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fb, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1896f1ea4e9f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000c0000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061113c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0xffffffffffffff6f) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000ce850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc078, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.600245934s ago: executing program 1 (id=6114): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63178e6203c229"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 3.500005453s ago: executing program 5 (id=6115): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b02000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.441776073s ago: executing program 2 (id=6117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe54a1180015000600142603600e1208000f0000000401a8001600a4000140a0000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffffffff4274}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) (async) openat$cgroup_devices(r6, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) 3.127517742s ago: executing program 5 (id=6118): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1f, 0x9, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x4040800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x10000002, 0x4}], 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6b, &(0x7f0000000000)=r6, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x4, @perf_config_ext={0xdc0, 0x7}, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r10, 0x58, &(0x7f0000000280)}, 0x10) 103.25808ms ago: executing program 1 (id=6119): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYRES64=r1], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000200)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000000)=@framed={{}, [@map_val, @map_val]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 69.182ms ago: executing program 2 (id=6120): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000040), 0x4) r1 = syz_clone(0x11000, &(0x7f0000000140)="18e6fa7743de3aa3dcb33d6dfaa95d9d597690f357da5f77ab9b9e3ad5562faafcd762aea0c45231fc49c07599d3e9240fc1d8cd12febfd74ba73253650081a5f5efb28986bd567b06449a17be6abf9a9c6474a5b87bce2a5114f2867f689482e359428915755f27ceb72cac0b1a1f36c5c6f7e6d8bb58a82b0b69583ad3901c9c7727864f092d59ea26255ac1e131d055a438b7e4051e8f37394afaf5141a253ef25cf7f253e9e7c64dab9c90fe5e6a119d418a000b55cbbdc9a5e6928607f22e2d3d", 0xc3, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="3ab7417cea6aad42ddbfaa986f86a43a76e38b4674ead5f1b6a3970fd1282285fd38495b729376a8f65cabb12718f64785e4fae5f99d4dc4db8fe68a0b4e0e2ea67e78910c003e5576efa4fd8e195778ec008525002f33740ccb5714b41d49a95dac945c881aa56693a03f83291a205d463b7f99dd041621654b95cc994467a18b1169f11fc57fc1f598c3888b1ff7b31a7cb8e9d5ce61bdda42a87bb8c8b6f4b976174ca3") syz_open_procfs$namespace(r1, &(0x7f0000000380)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200003f00ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.19922ms ago: executing program 0 (id=6121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 6 (id=6122): socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x1, 0xfffffff0, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bfb85fd0c8e9033f1ff098212bc2d77871172674fb233bcf95f10af441439e367edbc8c3dcbc6a30e5214903e263023fe492d6210de05946e6e991d9fafa675a0b0553474e579f04180ee4fe246a1bbd5e5bb3dd19d2", 0x56}, {&(0x7f0000000400)="bcf4d5f1de4fd09507a5e74055a989ae5656b943def3663fee9c9d774a0d896a607c4640013ade95090bcbbbcdfc50e0c9122e97", 0x34}, {&(0x7f0000000440)="fb4799522044e408634c1f6576e9ba809c3377e25cd007aebad90d25d1436ff13e6745bad963eca2ba079df4143c051496c8c333a67c1b8531043124b3ba7964cd3a9b79dd70", 0x46}], 0x3}, 0x40000) close(0x3) kernel console output (not intermixed with test programs): tcp_handle_invalid+0x642/0x642 [ 545.709440][T17729] ? panic+0x764/0x764 [ 545.713544][T17729] ? __might_sleep+0xb0/0xb0 [ 545.718147][T17729] ? __alloc_pages+0x36f/0x770 [ 545.722930][T17729] should_fail_ex+0x3a6/0x4d0 [ 545.727641][T17729] should_failslab+0x5/0x20 [ 545.732167][T17729] slab_pre_alloc_hook+0x59/0x300 [ 545.737212][T17729] ? alloc_pages+0x50c/0x770 [ 545.741821][T17729] ? sctp_auth_asoc_copy_shkeys+0x13a/0x580 [ 545.747722][T17729] __kmem_cache_alloc_node+0x47/0x260 [ 545.753103][T17729] ? __genradix_ptr_alloc+0x345/0x380 [ 545.758499][T17729] ? sctp_auth_asoc_copy_shkeys+0x13a/0x580 [ 545.764401][T17729] kmalloc_trace+0x26/0xe0 [ 545.768831][T17729] sctp_auth_asoc_copy_shkeys+0x13a/0x580 [ 545.774571][T17729] sctp_association_new+0x15b8/0x2360 [ 545.779975][T17729] sctp_connect_new_asoc+0x2ca/0x6a0 [ 545.785286][T17729] ? __sctp_connect+0xe10/0xe10 [ 545.790152][T17729] ? sctp_sendmsg+0xb21/0x3370 [ 545.794941][T17729] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 545.800614][T17729] ? security_sctp_bind_connect+0x86/0xb0 [ 545.806372][T17729] sctp_sendmsg+0x1cd9/0x3370 [ 545.811089][T17729] ? sctp_getsockopt+0x7f0/0x7f0 [ 545.816044][T17729] ? aa_af_perm+0x350/0x350 [ 545.820574][T17729] ? __import_iovec+0x316/0x4c0 [ 545.825462][T17729] ? inet_sendmsg+0xfc/0x310 [ 545.830074][T17729] ? inet_send_prepare+0x250/0x250 [ 545.835214][T17729] ____sys_sendmsg+0x5a5/0x8f0 [ 545.840017][T17729] ? __sys_sendmsg_sock+0x30/0x30 [ 545.845093][T17729] __sys_sendmsg+0x2a9/0x390 [ 545.849714][T17729] ? ____sys_sendmsg+0x8f0/0x8f0 [ 545.854680][T17729] ? vfs_write+0x6cf/0xbc0 [ 545.859167][T17729] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 545.865203][T17729] ? syscall_enter_from_user_mode+0x2e/0x230 [ 545.871220][T17729] ? lockdep_hardirqs_on+0x94/0x130 [ 545.876445][T17729] ? syscall_enter_from_user_mode+0x2e/0x230 [ 545.882449][T17729] do_syscall_64+0x3b/0xb0 [ 545.886906][T17729] ? clear_bhb_loop+0x45/0xa0 [ 545.891602][T17729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.897526][T17729] RIP: 0033:0x7faf4a385d19 [ 545.901958][T17729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.921676][T17729] RSP: 002b:00007faf4b10a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.930109][T17729] RAX: ffffffffffffffda RBX: 00007faf4a575fa0 RCX: 00007faf4a385d19 [ 545.938099][T17729] RDX: 0000000006000085 RSI: 0000000020000740 RDI: 0000000000000004 [ 545.946087][T17729] RBP: 00007faf4b10a090 R08: 0000000000000000 R09: 0000000000000000 [ 545.954066][T17729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.962054][T17729] R13: 0000000000000000 R14: 00007faf4a575fa0 R15: 00007ffdcb59fee8 [ 545.970066][T17729] [ 546.033770][T17731] netlink: 'syz.6.5289': attribute type 10 has an invalid length. [ 546.058329][T17731] netlink: 'syz.6.5289': attribute type 4 has an invalid length. [ 546.114823][T17731] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5289'. [ 546.155307][T17731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 546.234390][T17735] netlink: 'syz.5.5290': attribute type 10 has an invalid length. [ 546.268896][T17748] netlink: 'syz.1.5296': attribute type 4 has an invalid length. [ 546.286101][T17735] netlink: 'syz.5.5290': attribute type 4 has an invalid length. [ 546.296140][T17748] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5296'. [ 546.300987][T17735] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5290'. [ 546.361756][T17735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 546.562905][T17758] netlink: 'syz.0.5299': attribute type 3 has an invalid length. [ 546.577666][T17758] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5299'. [ 547.045577][T17771] netlink: 35347 bytes leftover after parsing attributes in process `syz.6.5303'. [ 547.406584][T17781] netlink: 'syz.1.5308': attribute type 10 has an invalid length. [ 547.429518][T17781] netlink: 'syz.1.5308': attribute type 4 has an invalid length. [ 547.495735][T17781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5308'. [ 547.608083][T17781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.731807][T17788] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5310'. [ 548.034151][T17795] netlink: 'syz.6.5312': attribute type 4 has an invalid length. [ 548.055000][T17796] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5311'. [ 548.086332][T17795] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5312'. [ 548.526309][T17805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 548.770513][T17815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.793811][T17815] team0: Port device bond0 added [ 549.123311][T17824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 549.318886][T17828] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 550.360987][T17857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.393619][T17857] team0: Port device bond0 added [ 550.582426][T17863] __nla_validate_parse: 5 callbacks suppressed [ 550.582446][T17863] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5337'. [ 550.768921][T17865] validate_nla: 11 callbacks suppressed [ 550.768941][T17865] netlink: 'syz.0.5336': attribute type 10 has an invalid length. [ 550.796820][T17865] netlink: 'syz.0.5336': attribute type 4 has an invalid length. [ 550.809933][T17865] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5336'. [ 550.845241][T17865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 550.913564][T17875] netlink: 'syz.2.5341': attribute type 3 has an invalid length. [ 551.228021][T17875] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5341'. [ 551.361198][T17870] netlink: 'syz.1.5340': attribute type 10 has an invalid length. [ 551.391346][T17870] netlink: 'syz.1.5340': attribute type 4 has an invalid length. [ 551.416060][T17870] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5340'. [ 551.463271][T17870] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 551.588153][T17889] netlink: 'syz.5.5344': attribute type 4 has an invalid length. [ 551.596073][T17889] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5344'. [ 552.024373][T17891] netlink: 'syz.6.5345': attribute type 30 has an invalid length. [ 552.344755][T17904] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5349'. [ 552.732795][T17908] device syzkaller0 entered promiscuous mode [ 552.743850][T17915] netlink: 'syz.2.5354': attribute type 3 has an invalid length. [ 552.787001][T17915] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5354'. [ 553.022845][T17927] netlink: 'syz.1.5358': attribute type 29 has an invalid length. [ 555.210035][T17926] netlink: 'syz.6.5357': attribute type 10 has an invalid length. [ 555.230175][T17926] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5357'. [ 555.258151][T17926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 555.413991][T17934] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5361'. [ 555.931534][T17950] validate_nla: 3 callbacks suppressed [ 555.931556][T17950] netlink: 'syz.0.5364': attribute type 30 has an invalid length. [ 556.120944][T17959] netlink: 'syz.2.5369': attribute type 3 has an invalid length. [ 556.140599][T17959] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5369'. [ 556.228576][T17958] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5368'. [ 556.764197][T17971] netlink: 'syz.1.5374': attribute type 10 has an invalid length. [ 556.795063][T17971] netlink: 'syz.1.5374': attribute type 4 has an invalid length. [ 556.813229][T17981] netlink: 'syz.5.5376': attribute type 4 has an invalid length. [ 556.833695][T17981] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5376'. [ 556.850458][T17971] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5374'. [ 556.893983][T17971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 557.723490][T17999] netlink: 'syz.6.5383': attribute type 3 has an invalid length. [ 557.896493][T17999] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5383'. [ 558.827941][T18023] netlink: 'syz.6.5391': attribute type 4 has an invalid length. [ 558.850651][T18023] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5391'. [ 559.310519][T18034] netlink: 'syz.6.5397': attribute type 3 has an invalid length. [ 559.359885][T18034] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5397'. [ 559.444561][T18038] FAULT_INJECTION: forcing a failure. [ 559.444561][T18038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.516621][T18038] CPU: 0 PID: 18038 Comm: syz.5.5399 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 559.528048][T18038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 559.538138][T18038] Call Trace: [ 559.541440][T18038] [ 559.544392][T18038] dump_stack_lvl+0x1e3/0x2cb [ 559.549116][T18038] ? nf_tcp_handle_invalid+0x642/0x642 [ 559.554621][T18038] ? panic+0x764/0x764 [ 559.558723][T18038] ? snprintf+0xd6/0x120 [ 559.562997][T18038] should_fail_ex+0x3a6/0x4d0 [ 559.567711][T18038] _copy_to_user+0x2b/0x130 [ 559.572258][T18038] simple_read_from_buffer+0xc6/0x150 [ 559.577675][T18038] proc_fail_nth_read+0x1a3/0x210 [ 559.582741][T18038] ? proc_fault_inject_write+0x390/0x390 [ 559.588413][T18038] ? fsnotify_perm+0x439/0x590 [ 559.593202][T18038] ? proc_fault_inject_write+0x390/0x390 [ 559.598871][T18038] vfs_read+0x2ed/0xbf0 [ 559.603147][T18038] ? __fdget_pos+0x2ba/0x360 [ 559.607764][T18038] ? kernel_read+0x1f0/0x1f0 [ 559.612386][T18038] ? __fget_files+0x28/0x4a0 [ 559.617000][T18038] ? __fget_files+0x435/0x4a0 [ 559.621716][T18038] ? __fdget_pos+0x2ba/0x360 [ 559.626346][T18038] ? ksys_read+0x77/0x2c0 [ 559.630702][T18038] ksys_read+0x19c/0x2c0 [ 559.634970][T18038] ? print_irqtrace_events+0x210/0x210 [ 559.640474][T18038] ? vfs_write+0xbc0/0xbc0 [ 559.644920][T18038] ? syscall_enter_from_user_mode+0x2e/0x230 [ 559.650929][T18038] ? lockdep_hardirqs_on+0x94/0x130 [ 559.656168][T18038] ? syscall_enter_from_user_mode+0x2e/0x230 [ 559.662189][T18038] do_syscall_64+0x3b/0xb0 [ 559.666643][T18038] ? clear_bhb_loop+0x45/0xa0 [ 559.671344][T18038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.677274][T18038] RIP: 0033:0x7fe47058472c [ 559.681711][T18038] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 559.701347][T18038] RSP: 002b:00007fe471328030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.709793][T18038] RAX: ffffffffffffffda RBX: 00007fe470775fa0 RCX: 00007fe47058472c [ 559.717883][T18038] RDX: 000000000000000f RSI: 00007fe4713280a0 RDI: 0000000000000006 [ 559.725879][T18038] RBP: 00007fe471328090 R08: 0000000000000000 R09: 0000000000000000 [ 559.733873][T18038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.741862][T18038] R13: 0000000000000000 R14: 00007fe470775fa0 R15: 00007fff9a393b28 [ 559.749959][T18038] [ 561.108027][T18074] netlink: 'syz.5.5410': attribute type 3 has an invalid length. [ 561.130450][T18074] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5410'. [ 561.172834][T18072] syz.1.5409 (18072) used obsolete PPPIOCDETACH ioctl [ 562.982289][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.988748][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.276718][T18088] FAULT_INJECTION: forcing a failure. [ 563.276718][T18088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.377683][T18088] CPU: 0 PID: 18088 Comm: syz.6.5415 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 563.389120][T18088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 563.399194][T18088] Call Trace: [ 563.402484][T18088] [ 563.405424][T18088] dump_stack_lvl+0x1e3/0x2cb [ 563.410123][T18088] ? nf_tcp_handle_invalid+0x642/0x642 [ 563.415597][T18088] ? panic+0x764/0x764 [ 563.419675][T18088] ? __lock_acquire+0x1f80/0x1f80 [ 563.424731][T18088] should_fail_ex+0x3a6/0x4d0 [ 563.429422][T18088] _copy_from_user+0x2b/0x170 [ 563.434116][T18088] generic_map_update_batch+0x4cb/0x920 [ 563.439688][T18088] ? rcu_read_unlock+0xa0/0xa0 [ 563.444470][T18088] ? __fdget+0x182/0x210 [ 563.448720][T18088] ? rcu_read_unlock+0xa0/0xa0 [ 563.453498][T18088] bpf_map_do_batch+0x4d0/0x620 [ 563.458356][T18088] __sys_bpf+0x658/0x6c0 [ 563.462610][T18088] ? __fget_files+0x435/0x4a0 [ 563.467294][T18088] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 563.472677][T18088] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 563.478854][T18088] ? print_irqtrace_events+0x210/0x210 [ 563.484327][T18088] ? print_irqtrace_events+0x210/0x210 [ 563.489799][T18088] ? syscall_enter_from_user_mode+0x2e/0x230 [ 563.495784][T18088] ? lockdep_hardirqs_on+0x94/0x130 [ 563.500990][T18088] __x64_sys_bpf+0x78/0x90 [ 563.505419][T18088] do_syscall_64+0x3b/0xb0 [ 563.509847][T18088] ? clear_bhb_loop+0x45/0xa0 [ 563.514529][T18088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.520434][T18088] RIP: 0033:0x7f1c28d85d19 [ 563.524892][T18088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.544503][T18088] RSP: 002b:00007f1c29c44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.552925][T18088] RAX: ffffffffffffffda RBX: 00007f1c28f75fa0 RCX: 00007f1c28d85d19 [ 563.560899][T18088] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 000000000000001a [ 563.568872][T18088] RBP: 00007f1c29c44090 R08: 0000000000000000 R09: 0000000000000000 [ 563.576846][T18088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.584818][T18088] R13: 0000000000000000 R14: 00007f1c28f75fa0 R15: 00007ffc3c0f3af8 [ 563.592804][T18088] [ 563.626396][T18094] sock: sock_set_timeout: `syz.0.5417' (pid 18094) tries to set negative timeout [ 564.860127][T18115] netlink: 'syz.2.5424': attribute type 3 has an invalid length. [ 564.983737][T18115] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5424'. [ 565.977937][T18125] FAULT_INJECTION: forcing a failure. [ 565.977937][T18125] name failslab, interval 1, probability 0, space 0, times 0 [ 566.101558][T18125] CPU: 0 PID: 18125 Comm: syz.2.5430 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 566.112990][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 566.123073][T18125] Call Trace: [ 566.126389][T18125] [ 566.129339][T18125] dump_stack_lvl+0x1e3/0x2cb [ 566.134069][T18125] ? nf_tcp_handle_invalid+0x642/0x642 [ 566.139576][T18125] ? panic+0x764/0x764 [ 566.143682][T18125] ? __might_sleep+0xb0/0xb0 [ 566.148485][T18125] should_fail_ex+0x3a6/0x4d0 [ 566.153202][T18125] should_failslab+0x5/0x20 [ 566.157738][T18125] slab_pre_alloc_hook+0x59/0x300 [ 566.162800][T18125] kmem_cache_alloc+0x4e/0x2d0 [ 566.167579][T18125] ? security_file_alloc+0x24/0x120 [ 566.172790][T18125] security_file_alloc+0x24/0x120 [ 566.177821][T18125] __alloc_file+0xc3/0x230 [ 566.182252][T18125] alloc_empty_file+0x92/0x180 [ 566.187031][T18125] path_openat+0xf6/0x2e60 [ 566.191461][T18125] ? trace_call_bpf+0x5d9/0x6a0 [ 566.196340][T18125] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 566.202278][T18125] ? perf_trace_run_bpf_submit+0x12c/0x1d0 [ 566.208094][T18125] ? do_filp_open+0x480/0x480 [ 566.212780][T18125] ? perf_trace_preemptirq_template+0x2d1/0x3d0 [ 566.219034][T18125] ? irqentry_enter+0x33/0x50 [ 566.223729][T18125] do_filp_open+0x230/0x480 [ 566.228241][T18125] ? vfs_tmpfile+0x4a0/0x4a0 [ 566.232856][T18125] ? _raw_spin_unlock+0x24/0x40 [ 566.237713][T18125] ? alloc_fd+0x5a0/0x640 [ 566.242054][T18125] do_sys_openat2+0x13b/0x4f0 [ 566.246746][T18125] ? do_sys_open+0x220/0x220 [ 566.251357][T18125] ? rcu_is_watching+0x11/0xb0 [ 566.256129][T18125] __x64_sys_openat+0x243/0x290 [ 566.260999][T18125] ? __ia32_sys_open+0x270/0x270 [ 566.265955][T18125] ? syscall_enter_from_user_mode+0x37/0x230 [ 566.272028][T18125] ? syscall_enter_from_user_mode+0x2e/0x230 [ 566.278012][T18125] do_syscall_64+0x3b/0xb0 [ 566.282439][T18125] ? clear_bhb_loop+0x45/0xa0 [ 566.287120][T18125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.293024][T18125] RIP: 0033:0x7fa1d0f84680 [ 566.297477][T18125] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 566.317084][T18125] RSP: 002b:00007fa1d1d9bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 566.325507][T18125] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa1d0f84680 [ 566.333481][T18125] RDX: 0000000000000002 RSI: 00007fa1d1d9bfa0 RDI: 00000000ffffff9c [ 566.341455][T18125] RBP: 00007fa1d1d9bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 566.349436][T18125] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 566.357666][T18125] R13: 0000000000000000 R14: 00007fa1d1175fa0 R15: 00007fffc3cf2988 [ 566.365657][T18125] [ 567.061573][T18148] netlink: 'syz.2.5446': attribute type 29 has an invalid length. [ 567.152477][T18148] netlink: 'syz.2.5446': attribute type 29 has an invalid length. [ 567.230125][T18147] netlink: 'syz.2.5446': attribute type 29 has an invalid length. [ 568.125699][T18163] netlink: 'syz.2.5440': attribute type 3 has an invalid length. [ 568.188149][T18163] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5440'. [ 569.543420][T18190] netlink: 'syz.0.5451': attribute type 29 has an invalid length. [ 569.652129][T18190] netlink: 'syz.0.5451': attribute type 29 has an invalid length. [ 569.802883][T18191] netlink: 'syz.5.5452': attribute type 10 has an invalid length. [ 569.902962][T18191] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.935012][T18191] bond0: (slave team0): Enslaving as an active interface with an up link [ 570.114993][T18199] netlink: 'syz.2.5455': attribute type 3 has an invalid length. [ 570.198307][T18199] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5455'. [ 570.527197][T18202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 570.534086][T18202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.858938][T18209] netlink: 'syz.5.5459': attribute type 4 has an invalid length. [ 570.890666][T18209] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5459'. [ 571.387545][T18218] netlink: 'syz.5.5464': attribute type 29 has an invalid length. [ 573.543148][T18247] validate_nla: 1 callbacks suppressed [ 573.543173][T18247] netlink: 'syz.1.5473': attribute type 3 has an invalid length. [ 573.660504][T18247] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5473'. [ 573.875734][T18254] netlink: 'syz.6.5475': attribute type 4 has an invalid length. [ 573.915169][T18254] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5475'. [ 574.170047][T18261] netlink: 'syz.0.5477': attribute type 29 has an invalid length. [ 574.236515][T18261] netlink: 'syz.0.5477': attribute type 29 has an invalid length. [ 574.649694][T18270] netlink: 'syz.1.5480': attribute type 10 has an invalid length. [ 574.836456][T18270] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.442589][T18302] netlink: 'syz.5.5491': attribute type 3 has an invalid length. [ 576.470347][T18302] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5491'. [ 576.855055][T18308] netlink: 'syz.5.5494': attribute type 4 has an invalid length. [ 576.870439][T18308] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5494'. [ 576.899430][T18311] FAULT_INJECTION: forcing a failure. [ 576.899430][T18311] name failslab, interval 1, probability 0, space 0, times 0 [ 576.939758][T18311] CPU: 0 PID: 18311 Comm: syz.2.5495 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 576.951200][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 576.961286][T18311] Call Trace: [ 576.964592][T18311] [ 576.967549][T18311] dump_stack_lvl+0x1e3/0x2cb [ 576.972273][T18311] ? nf_tcp_handle_invalid+0x642/0x642 [ 576.977773][T18311] ? panic+0x764/0x764 [ 576.981877][T18311] ? __might_sleep+0xb0/0xb0 [ 576.986508][T18311] should_fail_ex+0x3a6/0x4d0 [ 576.991226][T18311] should_failslab+0x5/0x20 [ 576.995762][T18311] slab_pre_alloc_hook+0x59/0x300 [ 577.000820][T18311] ? __local_bh_enable_ip+0x164/0x1f0 [ 577.006238][T18311] ? lockdep_hardirqs_on+0x94/0x130 [ 577.011473][T18311] kmem_cache_alloc_node+0x52/0x310 [ 577.016711][T18311] ? __alloc_skb+0xde/0x670 [ 577.021256][T18311] __alloc_skb+0xde/0x670 [ 577.025640][T18311] kcm_sendmsg+0x20de/0x24e0 [ 577.030273][T18311] ? __might_sleep+0xb0/0xb0 [ 577.034893][T18311] ? __lock_acquire+0x1f80/0x1f80 [ 577.039978][T18311] ? aa_sk_perm+0x92d/0xa60 [ 577.044530][T18311] ? aa_af_perm+0x350/0x350 [ 577.049073][T18311] ? kcm_getsockopt+0x2c0/0x2c0 [ 577.053959][T18311] ? aa_sock_msg_perm+0x91/0x150 [ 577.058938][T18311] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 577.064262][T18311] ? security_socket_sendmsg+0x7d/0xa0 [ 577.069757][T18311] ? kcm_getsockopt+0x2c0/0x2c0 [ 577.074652][T18311] ____sys_sendmsg+0x5a5/0x8f0 [ 577.079469][T18311] ? __sys_sendmsg_sock+0x30/0x30 [ 577.084555][T18311] __sys_sendmsg+0x2a9/0x390 [ 577.089187][T18311] ? ____sys_sendmsg+0x8f0/0x8f0 [ 577.094162][T18311] ? vfs_write+0x6cf/0xbc0 [ 577.098645][T18311] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 577.104683][T18311] ? syscall_enter_from_user_mode+0x2e/0x230 [ 577.110690][T18311] ? lockdep_hardirqs_on+0x94/0x130 [ 577.115913][T18311] ? syscall_enter_from_user_mode+0x2e/0x230 [ 577.121922][T18311] do_syscall_64+0x3b/0xb0 [ 577.126372][T18311] ? clear_bhb_loop+0x45/0xa0 [ 577.131072][T18311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.136998][T18311] RIP: 0033:0x7fa1d0f85d19 [ 577.141434][T18311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.161062][T18311] RSP: 002b:00007fa1d1d7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.169500][T18311] RAX: ffffffffffffffda RBX: 00007fa1d1176080 RCX: 00007fa1d0f85d19 [ 577.177495][T18311] RDX: 0000000000000000 RSI: 0000000020002080 RDI: 0000000000000003 [ 577.185487][T18311] RBP: 00007fa1d1d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 577.193474][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.201464][T18311] R13: 0000000000000000 R14: 00007fa1d1176080 R15: 00007fffc3cf2988 [ 577.209471][T18311] [ 577.901158][T18332] netlink: 'syz.1.5504': attribute type 3 has an invalid length. [ 577.908960][T18332] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5504'. [ 578.150131][T18338] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.5505'. [ 578.166482][T18338] netlink: 'syz.0.5505': attribute type 10 has an invalid length. [ 578.886433][T18338] device geneve1 entered promiscuous mode [ 578.922310][T18338] team0: Port device geneve1 added [ 578.933070][T18354] netlink: 'syz.2.5510': attribute type 4 has an invalid length. [ 578.952594][T18354] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5510'. [ 579.369591][T18361] netlink: 'syz.6.5513': attribute type 46 has an invalid length. [ 579.378402][T18361] netlink: 212868 bytes leftover after parsing attributes in process `syz.6.5513'. [ 579.407417][T18361] tun0: tun_chr_ioctl cmd 1074025677 [ 579.413435][T18361] tun0: linktype set to 1 [ 579.614414][T18370] FAULT_INJECTION: forcing a failure. [ 579.614414][T18370] name failslab, interval 1, probability 0, space 0, times 0 [ 579.653663][T18370] CPU: 0 PID: 18370 Comm: syz.1.5516 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 579.665180][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 579.675252][T18370] Call Trace: [ 579.678535][T18370] [ 579.681470][T18370] dump_stack_lvl+0x1e3/0x2cb [ 579.686166][T18370] ? nf_tcp_handle_invalid+0x642/0x642 [ 579.691641][T18370] ? panic+0x764/0x764 [ 579.695716][T18370] ? __might_sleep+0xb0/0xb0 [ 579.700325][T18370] should_fail_ex+0x3a6/0x4d0 [ 579.705012][T18370] should_failslab+0x5/0x20 [ 579.709521][T18370] slab_pre_alloc_hook+0x59/0x300 [ 579.714570][T18370] ? __local_bh_enable_ip+0x164/0x1f0 [ 579.719971][T18370] ? lockdep_hardirqs_on+0x94/0x130 [ 579.725195][T18370] kmem_cache_alloc_node+0x52/0x310 [ 579.730424][T18370] ? __alloc_skb+0xde/0x670 [ 579.734964][T18370] __alloc_skb+0xde/0x670 [ 579.739314][T18370] kcm_sendmsg+0x20de/0x24e0 [ 579.743927][T18370] ? __might_sleep+0xb0/0xb0 [ 579.748529][T18370] ? __lock_acquire+0x1f80/0x1f80 [ 579.753583][T18370] ? aa_sk_perm+0x92d/0xa60 [ 579.758112][T18370] ? aa_af_perm+0x350/0x350 [ 579.762629][T18370] ? kcm_getsockopt+0x2c0/0x2c0 [ 579.767578][T18370] ? aa_sock_msg_perm+0x91/0x150 [ 579.772527][T18370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 579.777821][T18370] ? security_socket_sendmsg+0x7d/0xa0 [ 579.783330][T18370] ? kcm_getsockopt+0x2c0/0x2c0 [ 579.788205][T18370] ____sys_sendmsg+0x5a5/0x8f0 [ 579.793006][T18370] ? __sys_sendmsg_sock+0x30/0x30 [ 579.798063][T18370] __sys_sendmsg+0x2a9/0x390 [ 579.802682][T18370] ? ____sys_sendmsg+0x8f0/0x8f0 [ 579.807640][T18370] ? vfs_write+0x6cf/0xbc0 [ 579.812081][T18370] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 579.817832][T18370] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 579.823843][T18370] ? syscall_enter_from_user_mode+0x2e/0x230 [ 579.829834][T18370] ? lockdep_hardirqs_on+0x94/0x130 [ 579.835043][T18370] ? syscall_enter_from_user_mode+0x2e/0x230 [ 579.841034][T18370] do_syscall_64+0x3b/0xb0 [ 579.845548][T18370] ? clear_bhb_loop+0x45/0xa0 [ 579.850229][T18370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.856152][T18370] RIP: 0033:0x7faf4a385d19 [ 579.860574][T18370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.880184][T18370] RSP: 002b:00007faf4b10a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.888604][T18370] RAX: ffffffffffffffda RBX: 00007faf4a575fa0 RCX: 00007faf4a385d19 [ 579.896578][T18370] RDX: 0000000000000000 RSI: 0000000020002080 RDI: 0000000000000005 [ 579.904550][T18370] RBP: 00007faf4b10a090 R08: 0000000000000000 R09: 0000000000000000 [ 579.912524][T18370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.920498][T18370] R13: 0000000000000000 R14: 00007faf4a575fa0 R15: 00007ffdcb59fee8 [ 579.928483][T18370] [ 580.695033][T18376] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5517'. [ 581.487750][T18391] FAULT_INJECTION: forcing a failure. [ 581.487750][T18391] name failslab, interval 1, probability 0, space 0, times 0 [ 581.506906][T18391] CPU: 0 PID: 18391 Comm: syz.0.5522 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 581.518324][T18391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 581.528401][T18391] Call Trace: [ 581.531700][T18391] [ 581.534658][T18391] dump_stack_lvl+0x1e3/0x2cb [ 581.539375][T18391] ? nf_tcp_handle_invalid+0x642/0x642 [ 581.544870][T18391] ? panic+0x764/0x764 [ 581.548992][T18391] ? __might_sleep+0xb0/0xb0 [ 581.553616][T18391] should_fail_ex+0x3a6/0x4d0 [ 581.558336][T18391] should_failslab+0x5/0x20 [ 581.562866][T18391] slab_pre_alloc_hook+0x59/0x300 [ 581.567919][T18391] ? __might_fault+0xa1/0x110 [ 581.572620][T18391] ? __might_sleep+0xb0/0xb0 [ 581.577239][T18391] ? sk_prot_alloc+0xe0/0x200 [ 581.581941][T18391] __kmem_cache_alloc_node+0x47/0x260 [ 581.587348][T18391] ? sk_prot_alloc+0xe0/0x200 [ 581.592047][T18391] __kmalloc+0xa1/0x230 [ 581.596228][T18391] ? __might_fault+0xa1/0x110 [ 581.600932][T18391] sk_prot_alloc+0xe0/0x200 [ 581.605452][T18391] ? sk_alloc+0x23/0x350 [ 581.609701][T18391] sk_alloc+0x36/0x350 [ 581.613778][T18391] bpf_prog_test_run_skb+0x384/0x13a0 [ 581.619173][T18391] ? cpu_online+0xb0/0xb0 [ 581.623513][T18391] ? cpu_online+0xb0/0xb0 [ 581.627859][T18391] bpf_prog_test_run+0x32f/0x3a0 [ 581.632821][T18391] __sys_bpf+0x3eb/0x6c0 [ 581.637077][T18391] ? __fget_files+0x435/0x4a0 [ 581.641760][T18391] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 581.647142][T18391] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 581.653319][T18391] ? print_irqtrace_events+0x210/0x210 [ 581.658796][T18391] ? print_irqtrace_events+0x210/0x210 [ 581.664283][T18391] ? syscall_enter_from_user_mode+0x2e/0x230 [ 581.670275][T18391] ? lockdep_hardirqs_on+0x94/0x130 [ 581.675481][T18391] __x64_sys_bpf+0x78/0x90 [ 581.679912][T18391] do_syscall_64+0x3b/0xb0 [ 581.684341][T18391] ? clear_bhb_loop+0x45/0xa0 [ 581.689023][T18391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.694929][T18391] RIP: 0033:0x7ff852785d19 [ 581.699381][T18391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.719078][T18391] RSP: 002b:00007ff85350a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.727498][T18391] RAX: ffffffffffffffda RBX: 00007ff852975fa0 RCX: 00007ff852785d19 [ 581.735488][T18391] RDX: 0000000000000050 RSI: 0000000020000100 RDI: 000000000000000a [ 581.743476][T18391] RBP: 00007ff85350a090 R08: 0000000000000000 R09: 0000000000000000 [ 581.751453][T18391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.759439][T18391] R13: 0000000000000000 R14: 00007ff852975fa0 R15: 00007ffc0fdfe9f8 [ 581.767435][T18391] [ 582.186262][T18402] netlink: 'syz.2.5527': attribute type 10 has an invalid length. [ 582.228432][T18402] netlink: 'syz.2.5527': attribute type 4 has an invalid length. [ 582.276126][T18402] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5527'. [ 582.290704][T18411] FAULT_INJECTION: forcing a failure. [ 582.290704][T18411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.322736][T18402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 582.347212][T18411] CPU: 1 PID: 18411 Comm: syz.0.5530 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 582.358630][T18411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 582.368719][T18411] Call Trace: [ 582.372022][T18411] [ 582.374976][T18411] dump_stack_lvl+0x1e3/0x2cb [ 582.379706][T18411] ? nf_tcp_handle_invalid+0x642/0x642 [ 582.385209][T18411] ? panic+0x764/0x764 [ 582.389326][T18411] should_fail_ex+0x3a6/0x4d0 [ 582.394043][T18411] _copy_from_user+0x2b/0x170 [ 582.398760][T18411] sctp_setsockopt+0xcb/0x10d0 [ 582.403569][T18411] ? sock_common_recvmsg+0x240/0x240 [ 582.408889][T18411] __sys_setsockopt+0x57e/0xa00 [ 582.413788][T18411] ? __ia32_sys_recv+0xb0/0xb0 [ 582.418605][T18411] ? syscall_enter_from_user_mode+0x2e/0x230 [ 582.424628][T18411] __x64_sys_setsockopt+0xb1/0xc0 [ 582.429692][T18411] do_syscall_64+0x3b/0xb0 [ 582.434146][T18411] ? clear_bhb_loop+0x45/0xa0 [ 582.438857][T18411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.444791][T18411] RIP: 0033:0x7ff852785d19 [ 582.449234][T18411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.468874][T18411] RSP: 002b:00007ff85350a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 582.477326][T18411] RAX: ffffffffffffffda RBX: 00007ff852975fa0 RCX: 00007ff852785d19 [ 582.485331][T18411] RDX: 0000000000000025 RSI: 0000000000000084 RDI: 0000000000000003 [ 582.493337][T18411] RBP: 00007ff85350a090 R08: 0000000020000010 R09: 0000000000000000 [ 582.501341][T18411] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.509342][T18411] R13: 0000000000000000 R14: 00007ff852975fa0 R15: 00007ffc0fdfe9f8 [ 582.517362][T18411] [ 582.639193][T18413] ip6_vti0: mtu greater than device maximum [ 582.908834][T18426] netlink: 'syz.1.5534': attribute type 4 has an invalid length. [ 582.945757][T18426] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5534'. [ 583.175684][T18438] netlink: 'syz.5.5538': attribute type 3 has an invalid length. [ 583.189827][T18438] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5538'. [ 583.349858][T18441] netlink: 'syz.6.5539': attribute type 4 has an invalid length. [ 583.362589][T18441] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5539'. [ 583.984372][T18455] : renamed from ipvlan1 [ 584.277136][T18466] FAULT_INJECTION: forcing a failure. [ 584.277136][T18466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.423665][T18466] CPU: 1 PID: 18466 Comm: syz.1.5550 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 584.435103][T18466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 584.445186][T18466] Call Trace: [ 584.448486][T18466] [ 584.451438][T18466] dump_stack_lvl+0x1e3/0x2cb [ 584.456157][T18466] ? nf_tcp_handle_invalid+0x642/0x642 [ 584.461657][T18466] ? panic+0x764/0x764 [ 584.465766][T18466] ? snprintf+0xd6/0x120 [ 584.470040][T18466] should_fail_ex+0x3a6/0x4d0 [ 584.474760][T18466] _copy_to_user+0x2b/0x130 [ 584.479304][T18466] simple_read_from_buffer+0xc6/0x150 [ 584.484721][T18466] proc_fail_nth_read+0x1a3/0x210 [ 584.489790][T18466] ? proc_fault_inject_write+0x390/0x390 [ 584.495470][T18466] ? fsnotify_perm+0x439/0x590 [ 584.500259][T18466] ? proc_fault_inject_write+0x390/0x390 [ 584.505944][T18466] vfs_read+0x2ed/0xbf0 [ 584.510138][T18466] ? __fdget_pos+0x2ba/0x360 [ 584.514762][T18466] ? kernel_read+0x1f0/0x1f0 [ 584.519380][T18466] ? __fget_files+0x28/0x4a0 [ 584.523998][T18466] ? __fget_files+0x435/0x4a0 [ 584.528719][T18466] ? __fdget_pos+0x2ba/0x360 [ 584.533340][T18466] ? ksys_read+0x77/0x2c0 [ 584.537702][T18466] ksys_read+0x19c/0x2c0 [ 584.541979][T18466] ? print_irqtrace_events+0x210/0x210 [ 584.547480][T18466] ? vfs_write+0xbc0/0xbc0 [ 584.551928][T18466] ? syscall_enter_from_user_mode+0x2e/0x230 [ 584.557942][T18466] ? lockdep_hardirqs_on+0x94/0x130 [ 584.563172][T18466] ? syscall_enter_from_user_mode+0x2e/0x230 [ 584.569186][T18466] do_syscall_64+0x3b/0xb0 [ 584.573638][T18466] ? clear_bhb_loop+0x45/0xa0 [ 584.578341][T18466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.584271][T18466] RIP: 0033:0x7faf4a38472c [ 584.588712][T18466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 584.608346][T18466] RSP: 002b:00007faf4b10a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.616794][T18466] RAX: ffffffffffffffda RBX: 00007faf4a575fa0 RCX: 00007faf4a38472c [ 584.624792][T18466] RDX: 000000000000000f RSI: 00007faf4b10a0a0 RDI: 0000000000000004 [ 584.632787][T18466] RBP: 00007faf4b10a090 R08: 0000000000000000 R09: 0000000000000000 [ 584.640874][T18466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.648877][T18466] R13: 0000000000000000 R14: 00007faf4a575fa0 R15: 00007ffdcb59fee8 [ 584.656898][T18466] [ 584.899321][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.912323][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.922547][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.925118][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.951738][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.959863][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 584.967681][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.051416][T18477] netlink: 'syz.1.5552': attribute type 3 has an invalid length. [ 585.059681][T18477] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5552'. [ 585.106318][T18478] netlink: 'syz.2.5553': attribute type 4 has an invalid length. [ 585.129712][T18478] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5553'. [ 585.836285][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.169500][T18486] netlink: 'syz.0.5555': attribute type 10 has an invalid length. [ 586.324083][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.488801][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.682926][T18497] : renamed from ipvlan1 [ 586.924888][T18503] FAULT_INJECTION: forcing a failure. [ 586.924888][T18503] name failslab, interval 1, probability 0, space 0, times 0 [ 586.952723][T18471] chnl_net:caif_netlink_parms(): no params data found [ 587.016689][T18503] CPU: 1 PID: 18503 Comm: syz.1.5560 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 587.028126][T18503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 587.038209][T18503] Call Trace: [ 587.041512][T18503] [ 587.044466][T18503] dump_stack_lvl+0x1e3/0x2cb [ 587.049189][T18503] ? nf_tcp_handle_invalid+0x642/0x642 [ 587.054686][T18503] ? panic+0x764/0x764 [ 587.058771][T18503] ? __might_sleep+0xb0/0xb0 [ 587.063367][T18503] ? __lock_acquire+0x125b/0x1f80 [ 587.068427][T18503] should_fail_ex+0x3a6/0x4d0 [ 587.073116][T18503] should_failslab+0x5/0x20 [ 587.077626][T18503] slab_pre_alloc_hook+0x59/0x300 [ 587.082665][T18503] ? dev_exception_add+0x90/0x480 [ 587.087696][T18503] __kmem_cache_alloc_node+0x47/0x260 [ 587.093085][T18503] ? dev_exception_add+0x90/0x480 [ 587.098117][T18503] __kmalloc_node_track_caller+0xa0/0x220 [ 587.103850][T18503] kmemdup+0x26/0x60 [ 587.107752][T18503] ? devcgroup_access_write+0x1bb6/0x2ff0 [ 587.113474][T18503] dev_exception_add+0x90/0x480 [ 587.118334][T18503] ? devcgroup_access_write+0x1bb6/0x2ff0 [ 587.124060][T18503] devcgroup_access_write+0x207f/0x2ff0 [ 587.129612][T18503] ? devcgroup_access_write+0x1bb6/0x2ff0 [ 587.135340][T18503] ? dev_exceptions_copy+0x3e0/0x3e0 [ 587.140664][T18503] ? trace_contention_end+0x61/0x170 [ 587.145960][T18503] ? read_lock_is_recursive+0x10/0x10 [ 587.151377][T18503] ? dev_exceptions_copy+0x3e0/0x3e0 [ 587.156670][T18503] cgroup_file_write+0x2c6/0x6c0 [ 587.161616][T18503] ? kernfs_fop_write_iter+0x1e7/0x4f0 [ 587.167093][T18503] ? cgroup_seqfile_stop+0xd0/0xd0 [ 587.172213][T18503] ? __virt_addr_valid+0x17f/0x530 [ 587.177346][T18503] ? cgroup_seqfile_stop+0xd0/0xd0 [ 587.182466][T18503] kernfs_fop_write_iter+0x3a2/0x4f0 [ 587.187767][T18503] vfs_write+0x857/0xbc0 [ 587.192022][T18503] ? file_end_write+0x250/0x250 [ 587.197331][T18503] ? __fget_files+0x28/0x4a0 [ 587.201937][T18503] ? __fget_files+0x435/0x4a0 [ 587.206629][T18503] ? __fdget_pos+0x2ba/0x360 [ 587.211223][T18503] ? ksys_write+0x77/0x2c0 [ 587.215651][T18503] ksys_write+0x19c/0x2c0 [ 587.219988][T18503] ? print_irqtrace_events+0x210/0x210 [ 587.225476][T18503] ? __ia32_sys_read+0x80/0x80 [ 587.230248][T18503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 587.236252][T18503] ? lockdep_hardirqs_on+0x94/0x130 [ 587.241463][T18503] ? syscall_enter_from_user_mode+0x2e/0x230 [ 587.247453][T18503] do_syscall_64+0x3b/0xb0 [ 587.251978][T18503] ? clear_bhb_loop+0x45/0xa0 [ 587.256662][T18503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.262568][T18503] RIP: 0033:0x7faf4a385d19 [ 587.266987][T18503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.286605][T18503] RSP: 002b:00007faf4b10a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.295027][T18503] RAX: ffffffffffffffda RBX: 00007faf4a575fa0 RCX: 00007faf4a385d19 [ 587.303009][T18503] RDX: 0000000000000009 RSI: 0000000020000280 RDI: 0000000000000004 [ 587.310986][T18503] RBP: 00007faf4b10a090 R08: 0000000000000000 R09: 0000000000000000 [ 587.318978][T18503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.326958][T18503] R13: 0000000000000000 R14: 00007faf4a575fa0 R15: 00007ffdcb59fee8 [ 587.334949][T18503] [ 587.338148][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 587.753734][T18505] netlink: 'syz.0.5561': attribute type 10 has an invalid length. [ 587.816106][T18505] netlink: 'syz.0.5561': attribute type 4 has an invalid length. [ 587.824560][T18505] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5561'. [ 587.835876][T18505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 587.890090][T18511] netlink: 'syz.5.5563': attribute type 10 has an invalid length. [ 587.914218][T18511] netlink: 'syz.5.5563': attribute type 4 has an invalid length. [ 587.947627][T18511] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5563'. [ 587.957166][T18511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 588.879968][T18471] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.887308][T18471] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.895674][T18471] device bridge_slave_0 entered promiscuous mode [ 588.903861][T18471] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.912145][T18471] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.922234][T18471] device bridge_slave_1 entered promiscuous mode [ 589.026495][T18471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.103071][T18471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.380495][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 589.413045][T18533] ip6_vti0: mtu greater than device maximum [ 589.423914][T18471] team0: Port device team_slave_0 added [ 589.482216][T18471] team0: Port device team_slave_1 added [ 589.613876][T18471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.652183][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.749634][T18471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.811827][T18471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.818810][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.845311][T18471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.061502][T18471] device hsr_slave_0 entered promiscuous mode [ 590.069410][T18471] device hsr_slave_1 entered promiscuous mode [ 590.085534][T18471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.096720][T18471] Cannot create hsr debugfs directory [ 590.255254][ T37] bond0: (slave wlan1): Releasing backup interface [ 590.572875][T18562] netlink: 'syz.1.5577': attribute type 10 has an invalid length. [ 590.585537][T18562] netlink: 'syz.1.5577': attribute type 4 has an invalid length. [ 590.610547][T18562] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5577'. [ 590.678121][T18562] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 590.766870][T18568] netlink: 'syz.0.5579': attribute type 4 has an invalid length. [ 590.800221][T18568] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5579'. [ 590.864182][ T37] device hsr_slave_0 left promiscuous mode [ 590.881562][ T37] device hsr_slave_1 left promiscuous mode [ 590.908449][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.920472][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.952832][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.970053][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.980166][ T37] device bridge_slave_1 left promiscuous mode [ 591.026205][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.039184][ T37] device bridge_slave_0 left promiscuous mode [ 591.052280][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.081292][T18577] netlink: 'syz.2.5581': attribute type 4 has an invalid length. [ 591.089085][T18577] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5581'. [ 591.107810][ T37] device veth1_macvtap left promiscuous mode [ 591.114068][ T37] device veth0_macvtap left promiscuous mode [ 591.120203][ T37] device veth1_vlan left promiscuous mode [ 591.126811][ T37] device veth0_vlan left promiscuous mode [ 591.259048][ T37] team0 (unregistering): Port device geneve1 removed [ 591.462066][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 591.617887][ T37] team0 (unregistering): Port device team_slave_1 removed [ 591.659833][ T37] team0 (unregistering): Port device team_slave_0 removed [ 591.697814][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.737853][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.902354][ T37] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 592.030570][ T37] team0 (unregistering): Port device bond0 removed [ 592.142915][ T37] bond0 (unregistering): Released all slaves [ 592.548670][T18582] netlink: 'syz.0.5583': attribute type 1 has an invalid length. [ 593.186985][T18471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.218390][T18471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.266344][T18471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.298358][T18471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.538276][T18471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.545408][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 593.634613][T18609] netlink: 'syz.0.5592': attribute type 29 has an invalid length. [ 593.660690][T18609] netlink: 'syz.0.5592': attribute type 29 has an invalid length. [ 593.668913][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 593.679271][T18613] netlink: 'syz.1.5594': attribute type 4 has an invalid length. [ 593.690083][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 593.741757][T18613] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5594'. [ 593.765917][T18471] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.787566][T18605] netlink: 'syz.2.5593': attribute type 10 has an invalid length. [ 593.813175][T18605] netlink: 'syz.2.5593': attribute type 4 has an invalid length. [ 593.832324][T18605] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5593'. [ 593.848643][T18605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 593.899314][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 593.992438][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 594.065754][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.072932][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.095457][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 594.104515][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.114205][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.121401][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.129712][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.161051][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 594.187128][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.220673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.247766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.293349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.316585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.346240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.379412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 594.405321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.435394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 594.571238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.651675][T18471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 595.586373][T18712] netlink: 'syz.5.5604': attribute type 29 has an invalid length. [ 595.611357][T18712] netlink: 'syz.5.5604': attribute type 29 has an invalid length. [ 595.775564][T18720] netlink: 'syz.0.5607': attribute type 4 has an invalid length. [ 595.795728][T18720] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5607'. [ 595.893178][T18685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 595.932305][T18685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.942774][T18730] netlink: 'syz.1.5608': attribute type 10 has an invalid length. [ 595.951025][T18730] netlink: 'syz.1.5608': attribute type 4 has an invalid length. [ 595.958969][T18730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5608'. [ 595.969605][T18730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 595.992998][T18471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.232759][T18760] netlink: 'syz.2.5619': attribute type 29 has an invalid length. [ 597.461834][T18760] netlink: 'syz.2.5619': attribute type 29 has an invalid length. [ 597.478820][T18691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 597.503395][T18691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 597.615531][T18691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 597.643224][T18691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.658222][T18691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 597.704748][T18691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 597.833852][T18471] device veth0_vlan entered promiscuous mode [ 597.988179][T18471] device veth1_vlan entered promiscuous mode [ 598.035668][T18805] netlink: 'syz.2.5621': attribute type 4 has an invalid length. [ 598.089378][T18805] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5621'. [ 598.364370][T18471] device veth0_macvtap entered promiscuous mode [ 598.414027][T18471] device veth1_macvtap entered promiscuous mode [ 598.460428][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 598.471085][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 598.479862][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 598.488062][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 598.528195][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.547234][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.568883][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.603993][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.626441][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.650621][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.666728][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.678612][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.695081][T18471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.706346][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.719201][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.730194][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.745036][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.761853][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.772638][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.782843][T18471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.793480][T18471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.806642][T18471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.814121][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 598.838920][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 598.849856][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 598.860091][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 598.878336][T18471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.897613][T18471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.913144][T18471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.922263][T18471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.953692][T18817] netlink: 'syz.5.5626': attribute type 10 has an invalid length. [ 598.999273][T18817] netlink: 'syz.5.5626': attribute type 4 has an invalid length. [ 599.032708][T18817] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5626'. [ 599.136139][T18817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 599.471373][T18706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.479795][T18706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.589554][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 599.600074][T18838] FAULT_INJECTION: forcing a failure. [ 599.600074][T18838] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 599.616665][T18682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.624437][T18838] CPU: 0 PID: 18838 Comm: syz.0.5633 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 599.636073][T18838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.638952][T18682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.646133][T18838] Call Trace: [ 599.646146][T18838] [ 599.646157][T18838] dump_stack_lvl+0x1e3/0x2cb [ 599.646205][T18838] ? nf_tcp_handle_invalid+0x642/0x642 [ 599.646244][T18838] ? panic+0x764/0x764 [ 599.646297][T18838] should_fail_ex+0x3a6/0x4d0 [ 599.678654][T18838] prepare_alloc_pages+0x1d9/0x5b0 [ 599.683812][T18838] __alloc_pages+0x16a/0x770 [ 599.688447][T18838] ? zone_statistics+0x160/0x160 [ 599.693392][T18838] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 599.699401][T18838] ? alloc_pages+0x50c/0x770 [ 599.703996][T18838] ? copy_page_from_iter+0xe4/0x100 [ 599.709207][T18838] pipe_write+0x5fb/0x1af0 [ 599.713683][T18838] ? pipe_read+0x12a0/0x12a0 [ 599.718279][T18838] ? end_current_label_crit_section+0x147/0x170 [ 599.724540][T18838] ? common_file_perm+0x17d/0x1d0 [ 599.729607][T18838] vfs_write+0x857/0xbc0 [ 599.733880][T18838] ? file_end_write+0x250/0x250 [ 599.738748][T18838] ? __fget_files+0x28/0x4a0 [ 599.743348][T18838] ? __fget_files+0x435/0x4a0 [ 599.748050][T18838] ? __fdget_pos+0x1db/0x360 [ 599.752664][T18838] ? ksys_write+0x77/0x2c0 [ 599.757096][T18838] ksys_write+0x19c/0x2c0 [ 599.761443][T18838] ? print_irqtrace_events+0x210/0x210 [ 599.766927][T18838] ? __ia32_sys_read+0x80/0x80 [ 599.771708][T18838] ? syscall_enter_from_user_mode+0x2e/0x230 [ 599.777701][T18838] ? lockdep_hardirqs_on+0x94/0x130 [ 599.782916][T18838] ? syscall_enter_from_user_mode+0x2e/0x230 [ 599.788919][T18838] do_syscall_64+0x3b/0xb0 [ 599.793356][T18838] ? clear_bhb_loop+0x45/0xa0 [ 599.798044][T18838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.803955][T18838] RIP: 0033:0x7ff852785d19 [ 599.808379][T18838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.827995][T18838] RSP: 002b:00007ff85350a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.836437][T18838] RAX: ffffffffffffffda RBX: 00007ff852975fa0 RCX: 00007ff852785d19 [ 599.844417][T18838] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 0000000000000000 [ 599.852395][T18838] RBP: 00007ff85350a090 R08: 0000000000000000 R09: 0000000000000000 [ 599.860372][T18838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.868348][T18838] R13: 0000000000000000 R14: 00007ff852975fa0 R15: 00007ffc0fdfe9f8 [ 599.876468][T18838] [ 599.905252][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 600.344884][T18853] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5647'. [ 600.396800][T18853] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 601.137765][T18867] validate_nla: 4 callbacks suppressed [ 601.137786][T18867] netlink: 'syz.2.5645': attribute type 21 has an invalid length. [ 601.180059][T18867] netlink: 'syz.2.5645': attribute type 20 has an invalid length. [ 601.213428][T18868] netlink: 'syz.0.5640': attribute type 4 has an invalid length. [ 601.239928][T18868] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5640'. [ 601.277885][T18872] netlink: 'syz.6.5641': attribute type 29 has an invalid length. [ 601.302060][T18872] netlink: 'syz.6.5641': attribute type 29 has an invalid length. [ 602.705248][T18901] device syzkaller0 entered promiscuous mode [ 602.905103][T18914] netlink: 'syz.6.5659': attribute type 4 has an invalid length. [ 602.948572][T18914] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5659'. [ 606.196327][T18970] netlink: 'syz.2.5671': attribute type 10 has an invalid length. [ 606.236290][T18970] netlink: 'syz.2.5671': attribute type 4 has an invalid length. [ 606.280862][T18970] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5671'. [ 606.338513][T18970] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 607.153381][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.165843][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.173874][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.190819][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.200127][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 607.207832][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.220497][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 609.719312][T18698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.847674][T18698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.862868][T18991] chnl_net:caif_netlink_parms(): no params data found [ 610.139646][T18698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.351880][T18698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.619169][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.629270][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.690570][T18991] device bridge_slave_0 entered promiscuous mode [ 610.983150][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.063036][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.082322][T18991] device bridge_slave_1 entered promiscuous mode [ 611.311905][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 611.379915][T19028] device syzkaller0 entered promiscuous mode [ 613.380550][ T4265] Bluetooth: hci5: command 0x040f tx timeout [ 613.412026][T18991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.485752][T18991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.736569][T18991] team0: Port device team_slave_0 added [ 613.868526][T18991] team0: Port device team_slave_1 added [ 613.984010][T18991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.002671][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.053492][T18991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.185118][T18991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.207501][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.362999][T18991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.531570][T18991] device hsr_slave_0 entered promiscuous mode [ 614.548691][T18991] device hsr_slave_1 entered promiscuous mode [ 614.556676][T18991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.574556][T18991] Cannot create hsr debugfs directory [ 615.460552][ T4265] Bluetooth: hci5: command 0x0419 tx timeout [ 615.632698][T18698] bond0: (slave wlan1): Releasing backup interface [ 616.252086][T18698] device hsr_slave_0 left promiscuous mode [ 616.290474][T18698] device hsr_slave_1 left promiscuous mode [ 616.297157][T18698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.310525][T18698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.325199][T18698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.341729][T18698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.358681][T18698] batman_adv: batadv0: Interface deactivated: vlan1 [ 616.385339][T18698] batman_adv: batadv0: Removing interface: vlan1 [ 616.405428][T18698] device bridge_slave_1 left promiscuous mode [ 616.418692][T18698] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.454237][T18698] device veth1_macvtap left promiscuous mode [ 616.460402][T18698] device veth0_macvtap left promiscuous mode [ 616.466568][T18698] device veth1_vlan left promiscuous mode [ 616.473202][T18698] device veth0_vlan left promiscuous mode [ 617.241674][T18698] team0 (unregistering): Port device team_slave_1 removed [ 617.284019][T18698] team0 (unregistering): Port device team_slave_0 removed [ 617.324663][T18698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.366228][T18698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.543395][T18698] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 617.678006][T18698] team0 (unregistering): Port device bond0 removed [ 617.795007][T18698] bond0 (unregistering): Released all slaves [ 618.199368][T18991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 618.211367][T18991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 618.230666][T18991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 618.284004][T18991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 618.359606][T19129] netlink: 'syz.6.5726': attribute type 10 has an invalid length. [ 618.449607][T19129] netlink: 'syz.6.5726': attribute type 4 has an invalid length. [ 618.489114][T19129] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5726'. [ 619.117741][T19129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 619.401075][T18991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.430032][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 619.453457][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 619.484320][T18991] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.557001][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 619.607975][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 619.632402][T18698] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.639605][T18698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.670873][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 619.679487][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.731197][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.757246][T18698] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.764427][T18698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.802633][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.861098][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.870064][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.881947][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 619.891621][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.900957][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.909703][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.938202][T18991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.967636][T18991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.985140][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.001101][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.020001][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.055541][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.071809][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 620.256200][T19173] netlink: 'syz.6.5742': attribute type 10 has an invalid length. [ 620.286921][T19173] netlink: 'syz.6.5742': attribute type 4 has an invalid length. [ 620.324065][T19173] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5742'. [ 620.351849][T19173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 620.395508][T19183] netlink: 'syz.5.5746': attribute type 10 has an invalid length. [ 620.416873][T19183] device wlan1 entered promiscuous mode [ 620.526665][T19185] netlink: 'syz.0.5745': attribute type 10 has an invalid length. [ 620.550706][T19185] netlink: 'syz.0.5745': attribute type 4 has an invalid length. [ 620.558480][T19185] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5745'. [ 620.572485][T19185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 620.617763][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.638162][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.717793][T18991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.812006][T18693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.837093][T18693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.938459][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.961797][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.995263][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 621.032260][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 621.095751][T18991] device veth0_vlan entered promiscuous mode [ 621.189360][T18991] device veth1_vlan entered promiscuous mode [ 621.233492][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 621.299718][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.317266][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.361506][T18991] device veth0_macvtap entered promiscuous mode [ 621.411122][T18991] device veth1_macvtap entered promiscuous mode [ 621.473697][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.515831][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.525741][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.542402][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.565184][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.577264][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.590125][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.604498][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.615864][T18991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.638475][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 621.681518][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.741753][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.781206][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.802437][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.859767][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.898265][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.929792][T19222] netlink: 'syz.0.5759': attribute type 4 has an invalid length. [ 621.938839][T19225] FAULT_INJECTION: forcing a failure. [ 621.938839][T19225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.940022][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.970483][T19222] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5759'. [ 621.976174][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.979983][T19225] CPU: 0 PID: 19225 Comm: syz.5.5758 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 621.993361][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.001565][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 622.001582][T19225] Call Trace: [ 622.001592][T19225] [ 622.001603][T19225] dump_stack_lvl+0x1e3/0x2cb [ 622.013117][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.021460][T19225] ? nf_tcp_handle_invalid+0x642/0x642 [ 622.021504][T19225] ? panic+0x764/0x764 [ 622.021535][T19225] ? __lock_acquire+0x1f80/0x1f80 [ 622.021588][T19225] should_fail_ex+0x3a6/0x4d0 [ 622.021628][T19225] _copy_from_user+0x2b/0x170 [ 622.021666][T19225] iovec_from_user+0x13d/0x380 [ 622.021693][T19225] ? __might_fault+0xa1/0x110 [ 622.076326][T19225] __import_iovec+0x72/0x4c0 [ 622.080973][T19225] import_iovec+0xe6/0x120 [ 622.085423][T19225] copy_msghdr_from_user+0x527/0x670 [ 622.090731][T19225] ? sendmsg_copy_msghdr+0x70/0x70 [ 622.095886][T19225] __sys_sendmsg+0x236/0x390 [ 622.100499][T19225] ? ____sys_sendmsg+0x8f0/0x8f0 [ 622.105452][T19225] ? vfs_write+0x6cf/0xbc0 [ 622.109928][T19225] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 622.115952][T19225] ? syscall_enter_from_user_mode+0x2e/0x230 [ 622.121958][T19225] ? lockdep_hardirqs_on+0x94/0x130 [ 622.127178][T19225] ? syscall_enter_from_user_mode+0x2e/0x230 [ 622.133178][T19225] do_syscall_64+0x3b/0xb0 [ 622.137613][T19225] ? clear_bhb_loop+0x45/0xa0 [ 622.142301][T19225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.148213][T19225] RIP: 0033:0x7fe470585d19 [ 622.152638][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.172279][T19225] RSP: 002b:00007fe471328038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.180708][T19225] RAX: ffffffffffffffda RBX: 00007fe470775fa0 RCX: 00007fe470585d19 [ 622.188690][T19225] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 622.196676][T19225] RBP: 00007fe471328090 R08: 0000000000000000 R09: 0000000000000000 [ 622.204656][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.212635][T19225] R13: 0000000000000000 R14: 00007fe470775fa0 R15: 00007fff9a393b28 [ 622.220645][T19225] [ 622.245171][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.264193][T18991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.294646][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.303715][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.315844][T18991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.325393][T18991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.334508][T18991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.385616][T18991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.539959][T19234] netlink: 'syz.2.5761': attribute type 29 has an invalid length. [ 622.596727][T19234] netlink: 'syz.2.5761': attribute type 29 has an invalid length. [ 622.613036][T19231] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5760'. [ 622.639094][T19231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 622.760849][T18679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.786036][T18679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.840693][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.863244][T18698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.880473][T18698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.906105][T18693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 623.632396][T19266] validate_nla: 2 callbacks suppressed [ 623.632417][T19266] netlink: 'syz.6.5773': attribute type 4 has an invalid length. [ 623.670462][T19266] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5773'. [ 623.699064][T19268] netlink: 'syz.0.5774': attribute type 29 has an invalid length. [ 623.735231][T19268] netlink: 'syz.0.5774': attribute type 29 has an invalid length. [ 624.194355][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.201061][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.235401][T19286] FAULT_INJECTION: forcing a failure. [ 624.235401][T19286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.255368][T19286] CPU: 1 PID: 19286 Comm: syz.6.5779 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 624.266833][T19286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 624.277123][T19286] Call Trace: [ 624.280536][T19286] [ 624.283566][T19286] dump_stack_lvl+0x1e3/0x2cb [ 624.288350][T19286] ? nf_tcp_handle_invalid+0x642/0x642 [ 624.294312][T19286] ? panic+0x764/0x764 [ 624.298446][T19286] ? __lock_acquire+0x1f80/0x1f80 [ 624.303552][T19286] should_fail_ex+0x3a6/0x4d0 [ 624.308296][T19286] _copy_from_user+0x2b/0x170 [ 624.313062][T19286] iovec_from_user+0x13d/0x380 [ 624.317890][T19286] ? __might_fault+0xa1/0x110 [ 624.322721][T19286] __import_iovec+0x72/0x4c0 [ 624.327415][T19286] import_iovec+0xe6/0x120 [ 624.331908][T19286] copy_msghdr_from_user+0x527/0x670 [ 624.337272][T19286] ? sendmsg_copy_msghdr+0x70/0x70 [ 624.342497][T19286] __sys_sendmsg+0x236/0x390 [ 624.347160][T19286] ? ____sys_sendmsg+0x8f0/0x8f0 [ 624.352176][T19286] ? vfs_write+0x6cf/0xbc0 [ 624.356916][T19286] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 624.363523][T19286] ? syscall_enter_from_user_mode+0x2e/0x230 [ 624.369970][T19286] ? lockdep_hardirqs_on+0x94/0x130 [ 624.375506][T19286] ? syscall_enter_from_user_mode+0x2e/0x230 [ 624.381683][T19286] do_syscall_64+0x3b/0xb0 [ 624.386206][T19286] ? clear_bhb_loop+0x45/0xa0 [ 624.391361][T19286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.397584][T19286] RIP: 0033:0x7f96cbd85d19 [ 624.402122][T19286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.421911][T19286] RSP: 002b:00007f96ccc4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.430376][T19286] RAX: ffffffffffffffda RBX: 00007f96cbf75fa0 RCX: 00007f96cbd85d19 [ 624.439257][T19286] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 624.445939][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 624.447343][T19286] RBP: 00007f96ccc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 624.447366][T19286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.447380][T19286] R13: 0000000000000000 R14: 00007f96cbf75fa0 R15: 00007fff6c23fbb8 [ 624.447412][T19286] [ 624.457324][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 624.493119][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 624.542950][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.553318][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 624.561176][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.570918][T18693] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.649429][T19289] netlink: 'syz.1.5780': attribute type 10 has an invalid length. [ 624.696936][T19289] netlink: 'syz.1.5780': attribute type 4 has an invalid length. [ 624.793998][T19289] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5780'. [ 624.894190][T19289] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.578115][T18693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.774951][T18693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.861164][T19311] netlink: 'syz.6.5787': attribute type 29 has an invalid length. [ 625.977284][T18693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.043314][T19311] netlink: 'syz.6.5787': attribute type 29 has an invalid length. [ 626.113838][T19317] netlink: 'syz.1.5789': attribute type 4 has an invalid length. [ 626.153128][T19317] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5789'. [ 626.661586][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 626.896191][T19287] chnl_net:caif_netlink_parms(): no params data found [ 627.086319][T19334] netlink: 'syz.0.5802': attribute type 4 has an invalid length. [ 627.105566][T19334] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5802'. [ 627.518832][T19344] netlink: 'syz.1.5797': attribute type 29 has an invalid length. [ 627.848049][T19287] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.876688][T19287] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.893016][T19287] device bridge_slave_0 entered promiscuous mode [ 627.990129][T19352] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5798'. [ 628.136185][T19352] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 628.421839][T19287] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.433288][T19287] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.459152][T19287] device bridge_slave_1 entered promiscuous mode [ 628.780670][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 629.206968][T19287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.311294][T19287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.406108][T19389] validate_nla: 6 callbacks suppressed [ 629.406126][T19389] netlink: 'syz.2.5811': attribute type 4 has an invalid length. [ 629.430986][T19387] netlink: 'syz.6.5810': attribute type 33 has an invalid length. [ 629.447525][T19387] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5810'. [ 629.458969][T19389] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5811'. [ 629.484226][T19287] team0: Port device team_slave_0 added [ 629.541813][T18693] bond0: (slave wlan1): Releasing backup interface [ 629.572371][T19287] team0: Port device team_slave_1 added [ 629.578318][T19393] netlink: 'syz.1.5812': attribute type 10 has an invalid length. [ 629.597824][T19393] team0: Port device netdevsim0 added [ 629.604873][T19394] netlink: 'syz.1.5812': attribute type 10 has an invalid length. [ 629.666262][T19394] team0: Port device netdevsim0 removed [ 629.686100][T19394] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 629.691324][T19397] netlink: 'syz.0.5813': attribute type 29 has an invalid length. [ 629.728080][T19397] netlink: 'syz.0.5813': attribute type 29 has an invalid length. [ 629.845524][T19287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.852895][T19287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.892873][T19287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.934383][T18693] device hsr_slave_0 left promiscuous mode [ 629.949498][T18693] device hsr_slave_1 left promiscuous mode [ 629.979870][T18693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.000429][T18693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.058091][T18693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.075731][T18693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.099219][T18693] device dummy0 left promiscuous mode [ 630.115227][T18693] bridge0: port 3(dummy0) entered disabled state [ 630.129029][T18693] device bridge_slave_1 left promiscuous mode [ 630.135393][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.144395][T18693] device bridge_slave_0 left promiscuous mode [ 630.150803][T18693] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.232474][T18693] device veth1_macvtap left promiscuous mode [ 630.238646][T18693] device veth0_macvtap left promiscuous mode [ 630.290142][T19416] netlink: 'syz.0.5820': attribute type 29 has an invalid length. [ 630.290543][T18693] device veth1_vlan left promiscuous mode [ 630.328357][T18693] device veth0_vlan left promiscuous mode [ 630.820627][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 630.882309][T18693] team0 (unregistering): Port device team_slave_1 removed [ 630.918538][T18693] team0 (unregistering): Port device team_slave_0 removed [ 630.955243][T18693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.994094][T18693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.139505][T18693] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 631.252931][T18693] bond0 (unregistering): (slave team0): Releasing backup interface [ 631.358074][T18693] bond0 (unregistering): Released all slaves [ 631.419929][T19287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.428345][T19287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.455233][T19287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.478381][T19411] netlink: 'syz.1.5817': attribute type 10 has an invalid length. [ 631.487567][T19411] netlink: 'syz.1.5817': attribute type 4 has an invalid length. [ 631.495811][T19411] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5817'. [ 631.517355][T19411] bond0: (slave netdevsim0): Releasing backup interface [ 631.525736][T19411] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 631.545778][T19416] netlink: 'syz.0.5820': attribute type 29 has an invalid length. [ 631.664929][T19287] device hsr_slave_0 entered promiscuous mode [ 631.691172][T19287] device hsr_slave_1 entered promiscuous mode [ 632.041907][T19436] device netdevsim0 entered promiscuous mode [ 632.070012][T19436] team0: Port device netdevsim0 added [ 632.128342][T19441] device netdevsim0 left promiscuous mode [ 632.237521][T19441] team0: Port device netdevsim0 removed [ 632.271087][T19441] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 632.518376][T19450] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5832'. [ 632.659465][T19453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5833'. [ 632.805110][T19453] bond0: (slave netdevsim0): Releasing backup interface [ 632.847857][T19453] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 632.868911][T19287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 632.887968][T19287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 632.897751][T19287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 632.900638][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 632.913236][T19287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.117952][T19287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.158836][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.183508][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.206326][T19287] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.235510][T18693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.258678][T18693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.284712][T18693] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.291953][T18693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.300153][T18693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.369300][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.383233][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.423057][T18679] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.430293][T18679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.471772][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.518285][T19489] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 633.553996][T19486] bond0: (slave netdevsim0): Releasing backup interface [ 633.574807][T19486] device netdevsim0 entered promiscuous mode [ 633.582994][T19486] team0: Port device netdevsim0 added [ 633.615504][T19487] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5845'. [ 633.698659][T19487] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 633.733913][T19287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 633.771057][T19287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.815286][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.832907][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.879246][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.889450][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.901943][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.913091][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 633.929171][T19499] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5848'. [ 633.939546][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 633.948619][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 633.958287][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 633.985107][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.993141][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.295080][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.320796][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.333750][T19287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.752060][T19532] validate_nla: 26 callbacks suppressed [ 634.752079][T19532] netlink: 'syz.0.5856': attribute type 29 has an invalid length. [ 634.788150][T19532] netlink: 'syz.0.5856': attribute type 29 has an invalid length. [ 634.818107][T19536] netlink: 'syz.0.5856': attribute type 29 has an invalid length. [ 634.882399][T19532] netlink: 'syz.0.5856': attribute type 29 has an invalid length. [ 635.061779][T19535] netlink: 'syz.6.5858': attribute type 10 has an invalid length. [ 635.098987][T19535] netlink: 'syz.6.5858': attribute type 4 has an invalid length. [ 635.132355][T19535] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5858'. [ 635.145999][T19547] netlink: 'syz.1.5860': attribute type 29 has an invalid length. [ 635.162281][T19535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 635.217441][T19549] netlink: 'syz.2.5861': attribute type 4 has an invalid length. [ 635.238981][T19549] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5861'. [ 635.262216][T19547] netlink: 'syz.1.5860': attribute type 29 has an invalid length. [ 635.281840][T19550] netlink: 'syz.1.5860': attribute type 29 has an invalid length. [ 635.339593][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.352577][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.497410][T19287] device veth0_vlan entered promiscuous mode [ 635.536884][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.582846][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.599943][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.610721][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.659530][T19287] device veth1_vlan entered promiscuous mode [ 635.695649][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 635.714420][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 635.731406][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 635.741280][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 635.755651][T19287] device veth0_macvtap entered promiscuous mode [ 635.770196][T19287] device veth1_macvtap entered promiscuous mode [ 635.788092][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.800921][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.820890][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.845699][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.860494][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.880447][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.895081][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.906838][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.929765][T19287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.946305][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.957505][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.967596][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.977259][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.993162][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.048973][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.078115][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.121715][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.196210][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.298147][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.419563][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.440282][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.453446][T19287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.464940][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.474948][T18679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.496827][T19287] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.516816][T19287] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.534939][T19287] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.554139][T19287] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.660581][T18693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.679430][T18693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.709533][T18698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.776076][T18693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.804490][T18693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.837519][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 637.516072][T19612] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5884'. [ 638.528406][T19642] FAULT_INJECTION: forcing a failure. [ 638.528406][T19642] name failslab, interval 1, probability 0, space 0, times 0 [ 638.602343][T19642] CPU: 0 PID: 19642 Comm: syz.0.5898 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 638.613777][T19642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.623853][T19642] Call Trace: [ 638.627141][T19642] [ 638.630089][T19642] dump_stack_lvl+0x1e3/0x2cb [ 638.634813][T19642] ? nf_tcp_handle_invalid+0x642/0x642 [ 638.640296][T19642] ? panic+0x764/0x764 [ 638.644393][T19642] ? __might_sleep+0xb0/0xb0 [ 638.649013][T19642] should_fail_ex+0x3a6/0x4d0 [ 638.653717][T19642] should_failslab+0x5/0x20 [ 638.658263][T19642] slab_pre_alloc_hook+0x59/0x300 [ 638.663309][T19642] ? is_bpf_text_address+0x289/0x2a0 [ 638.668618][T19642] ? is_bpf_text_address+0x22/0x2a0 [ 638.673846][T19642] ? kvmalloc_node+0x6e/0x180 [ 638.678544][T19642] __kmem_cache_alloc_node+0x47/0x260 [ 638.683939][T19642] ? __kernel_text_address+0x9/0x40 [ 638.689174][T19642] ? kvmalloc_node+0x6e/0x180 [ 638.693876][T19642] __kmalloc_node+0xa2/0x230 [ 638.698490][T19642] kvmalloc_node+0x6e/0x180 [ 638.703014][T19642] bpf_test_run_xdp_live+0x251/0x1ea0 [ 638.708406][T19642] ? stack_trace_save+0x113/0x1c0 [ 638.713466][T19642] ? stack_trace_snprint+0xe0/0xe0 [ 638.718618][T19642] ? __stack_depot_save+0x36/0x470 [ 638.723747][T19642] ? mark_lock+0x9a/0x340 [ 638.728106][T19642] ? __lock_acquire+0x125b/0x1f80 [ 638.733166][T19642] ? xdp_convert_md_to_buff+0x330/0x330 [ 638.738785][T19642] ? __might_fault+0xa1/0x110 [ 638.743484][T19642] ? __might_sleep+0xb0/0xb0 [ 638.748126][T19642] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 638.754420][T19642] ? __might_fault+0xa1/0x110 [ 638.759118][T19642] ? __might_fault+0xbd/0x110 [ 638.763812][T19642] ? _copy_from_user+0x109/0x170 [ 638.768773][T19642] ? bpf_test_init+0x15a/0x180 [ 638.773572][T19642] ? xdp_convert_md_to_buff+0x5b/0x330 [ 638.779068][T19642] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 638.784473][T19642] ? dev_put+0x80/0x80 [ 638.788571][T19642] ? dev_put+0x80/0x80 [ 638.792652][T19642] bpf_prog_test_run+0x32f/0x3a0 [ 638.797634][T19642] __sys_bpf+0x3eb/0x6c0 [ 638.801923][T19642] ? __fget_files+0x435/0x4a0 [ 638.806630][T19642] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 638.812040][T19642] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 638.818227][T19642] ? print_irqtrace_events+0x210/0x210 [ 638.823706][T19642] ? print_irqtrace_events+0x210/0x210 [ 638.829194][T19642] ? syscall_enter_from_user_mode+0x2e/0x230 [ 638.835195][T19642] ? lockdep_hardirqs_on+0x94/0x130 [ 638.840505][T19642] __x64_sys_bpf+0x78/0x90 [ 638.844959][T19642] do_syscall_64+0x3b/0xb0 [ 638.849419][T19642] ? clear_bhb_loop+0x45/0xa0 [ 638.854120][T19642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.860049][T19642] RIP: 0033:0x7ff852785d19 [ 638.864488][T19642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.884115][T19642] RSP: 002b:00007ff85350a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.892547][T19642] RAX: ffffffffffffffda RBX: 00007ff852975fa0 RCX: 00007ff852785d19 [ 638.900537][T19642] RDX: 0000000000000069 RSI: 0000000020000500 RDI: 000000000000000a [ 638.908527][T19642] RBP: 00007ff85350a090 R08: 0000000000000000 R09: 0000000000000000 [ 638.916508][T19642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.924487][T19642] R13: 0000000000000000 R14: 00007ff852975fa0 R15: 00007ffc0fdfe9f8 [ 638.932486][T19642] [ 639.205202][T19653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5901'. [ 639.256818][T19655] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5902'. [ 639.504748][T19660] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5905'. [ 639.632759][T19660] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 640.060491][T19680] validate_nla: 45 callbacks suppressed [ 640.060515][T19680] netlink: 'syz.5.5912': attribute type 29 has an invalid length. [ 640.084046][T19680] netlink: 'syz.5.5912': attribute type 29 has an invalid length. [ 641.177619][T19711] FAULT_INJECTION: forcing a failure. [ 641.177619][T19711] name failslab, interval 1, probability 0, space 0, times 0 [ 641.197739][T19711] CPU: 1 PID: 19711 Comm: syz.5.5924 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 641.209165][T19711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.219246][T19711] Call Trace: [ 641.222552][T19711] [ 641.225503][T19711] dump_stack_lvl+0x1e3/0x2cb [ 641.230225][T19711] ? nf_tcp_handle_invalid+0x642/0x642 [ 641.235718][T19711] ? panic+0x764/0x764 [ 641.239821][T19711] ? __might_sleep+0xb0/0xb0 [ 641.244435][T19711] ? __lock_acquire+0x125b/0x1f80 [ 641.249497][T19711] should_fail_ex+0x3a6/0x4d0 [ 641.254209][T19711] should_failslab+0x5/0x20 [ 641.258738][T19711] slab_pre_alloc_hook+0x59/0x300 [ 641.263795][T19711] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 641.269540][T19711] __kmem_cache_alloc_node+0x47/0x260 [ 641.274955][T19711] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 641.280708][T19711] __kmalloc+0xa1/0x230 [ 641.284898][T19711] ? rcu_is_watching+0x11/0xb0 [ 641.289694][T19711] tomoyo_realpath_from_path+0xcb/0x5d0 [ 641.295279][T19711] tomoyo_path_number_perm+0x21f/0x7f0 [ 641.300795][T19711] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 641.306469][T19711] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 641.311983][T19711] ? __fget_files+0x28/0x4a0 [ 641.316618][T19711] ? __fget_files+0x28/0x4a0 [ 641.321228][T19711] ? __fget_files+0x435/0x4a0 [ 641.325940][T19711] ? __fget_files+0x28/0x4a0 [ 641.330573][T19711] security_file_ioctl+0x6d/0xa0 [ 641.335545][T19711] __se_sys_ioctl+0x47/0x160 [ 641.340158][T19711] do_syscall_64+0x3b/0xb0 [ 641.344610][T19711] ? clear_bhb_loop+0x45/0xa0 [ 641.349313][T19711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.355240][T19711] RIP: 0033:0x7fd70b185d19 [ 641.359711][T19711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.379327][T19711] RSP: 002b:00007fd70c00a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.387775][T19711] RAX: ffffffffffffffda RBX: 00007fd70b375fa0 RCX: 00007fd70b185d19 [ 641.395770][T19711] RDX: 0000000000000000 RSI: 000000004004743b RDI: 0000000000000003 [ 641.403739][T19711] RBP: 00007fd70c00a090 R08: 0000000000000000 R09: 0000000000000000 [ 641.411795][T19711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.419770][T19711] R13: 0000000000000000 R14: 00007fd70b375fa0 R15: 00007fff06e60328 [ 641.427754][T19711] [ 641.470159][T19715] netlink: 'syz.1.5923': attribute type 29 has an invalid length. [ 641.505559][T19715] netlink: 'syz.1.5923': attribute type 29 has an invalid length. [ 641.526218][T19711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.674435][T19718] netlink: 'syz.6.5926': attribute type 4 has an invalid length. [ 641.687741][T19718] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.5926'. [ 643.107166][T19753] netlink: 'syz.0.5936': attribute type 29 has an invalid length. [ 643.150426][T19753] netlink: 'syz.0.5936': attribute type 29 has an invalid length. [ 643.320473][T19760] netlink: 'syz.2.5939': attribute type 11 has an invalid length. [ 643.354800][T19760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5939'. [ 643.455147][T19759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.567216][T19785] netlink: 'syz.2.5947': attribute type 1 has an invalid length. [ 644.578092][T19776] netlink: 'syz.6.5943': attribute type 7 has an invalid length. [ 644.604613][T19785] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5947'. [ 644.806346][T19788] netlink: 'syz.5.5949': attribute type 29 has an invalid length. [ 645.024485][T19805] FAULT_INJECTION: forcing a failure. [ 645.024485][T19805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.065008][T19805] CPU: 1 PID: 19805 Comm: syz.1.5956 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 645.076430][T19805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 645.086501][T19805] Call Trace: [ 645.089798][T19805] [ 645.092749][T19805] dump_stack_lvl+0x1e3/0x2cb [ 645.097466][T19805] ? nf_tcp_handle_invalid+0x642/0x642 [ 645.102959][T19805] ? panic+0x764/0x764 [ 645.107049][T19805] ? __lock_acquire+0x1f80/0x1f80 [ 645.112102][T19805] should_fail_ex+0x3a6/0x4d0 [ 645.116783][T19805] _copy_from_user+0x2b/0x170 [ 645.121469][T19805] iovec_from_user+0x13d/0x380 [ 645.126235][T19805] ? __might_fault+0xa1/0x110 [ 645.130925][T19805] __import_iovec+0x72/0x4c0 [ 645.135522][T19805] import_iovec+0xe6/0x120 [ 645.139942][T19805] copy_msghdr_from_user+0x527/0x670 [ 645.145243][T19805] ? sendmsg_copy_msghdr+0x70/0x70 [ 645.150372][T19805] __sys_sendmsg+0x236/0x390 [ 645.154971][T19805] ? ____sys_sendmsg+0x8f0/0x8f0 [ 645.159912][T19805] ? vfs_write+0x6cf/0xbc0 [ 645.164349][T19805] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 645.170343][T19805] ? syscall_enter_from_user_mode+0x2e/0x230 [ 645.176324][T19805] ? lockdep_hardirqs_on+0x94/0x130 [ 645.181522][T19805] ? syscall_enter_from_user_mode+0x2e/0x230 [ 645.187503][T19805] do_syscall_64+0x3b/0xb0 [ 645.191919][T19805] ? clear_bhb_loop+0x45/0xa0 [ 645.196587][T19805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.202482][T19805] RIP: 0033:0x7f3492585d19 [ 645.206893][T19805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.226492][T19805] RSP: 002b:00007f349331c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.234910][T19805] RAX: ffffffffffffffda RBX: 00007f3492775fa0 RCX: 00007f3492585d19 [ 645.242883][T19805] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 645.250866][T19805] RBP: 00007f349331c090 R08: 0000000000000000 R09: 0000000000000000 [ 645.258835][T19805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.266801][T19805] R13: 0000000000000000 R14: 00007f3492775fa0 R15: 00007ffcaa1f4048 [ 645.274779][T19805] [ 646.080411][T19825] validate_nla: 1 callbacks suppressed [ 646.080432][T19825] netlink: 'syz.1.5962': attribute type 1 has an invalid length. [ 646.094398][T19825] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5962'. [ 646.108114][T19813] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5960'. [ 646.416398][T19829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.435132][T19829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.487554][T19834] netlink: 'syz.5.5966': attribute type 29 has an invalid length. [ 646.544381][T19829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.559248][T19829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.630172][T19829] batman_adv: batadv0: Interface deactivated: vlan1 [ 646.640266][T19829] batman_adv: batadv0: Removing interface: vlan1 [ 646.823391][T19829] bond0: (slave batadv0): Releasing backup interface [ 646.899379][T19837] netlink: 'syz.0.5973': attribute type 21 has an invalid length. [ 646.907870][T19837] IPv6: NLM_F_CREATE should be specified when creating new route [ 646.994727][T19834] netlink: 'syz.5.5966': attribute type 29 has an invalid length. [ 647.049570][T19843] netlink: 'syz.2.5968': attribute type 10 has an invalid length. [ 647.137756][T19843] netlink: 'syz.2.5968': attribute type 4 has an invalid length. [ 647.202875][T19843] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5968'. [ 647.265868][T19843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 647.331878][T19854] netlink: 'syz.5.5970': attribute type 1 has an invalid length. [ 647.334975][T19847] netlink: 'syz.6.5969': attribute type 13 has an invalid length. [ 647.345497][T19854] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5970'. [ 647.387486][T19847] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5969'. [ 647.579709][T19864] netlink: 'syz.0.5975': attribute type 10 has an invalid length. [ 647.609947][T19864] device bridge_slave_0 left promiscuous mode [ 647.639279][T19864] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.807695][T19871] netlink: 'syz.6.5978': attribute type 29 has an invalid length. [ 647.901295][T19876] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5979'. [ 648.160988][T19884] FAULT_INJECTION: forcing a failure. [ 648.160988][T19884] name failslab, interval 1, probability 0, space 0, times 0 [ 648.192053][T19884] CPU: 0 PID: 19884 Comm: syz.2.5983 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 648.203509][T19884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 648.213586][T19884] Call Trace: [ 648.216893][T19884] [ 648.219845][T19884] dump_stack_lvl+0x1e3/0x2cb [ 648.224561][T19884] ? nf_tcp_handle_invalid+0x642/0x642 [ 648.230052][T19884] ? panic+0x764/0x764 [ 648.234152][T19884] ? __might_sleep+0xb0/0xb0 [ 648.238772][T19884] should_fail_ex+0x3a6/0x4d0 [ 648.243479][T19884] should_failslab+0x5/0x20 [ 648.248001][T19884] slab_pre_alloc_hook+0x59/0x300 [ 648.253036][T19884] ? allocate_cgrp_cset_links+0xc5/0x320 [ 648.258671][T19884] __kmem_cache_alloc_node+0x47/0x260 [ 648.264053][T19884] ? allocate_cgrp_cset_links+0xc5/0x320 [ 648.269687][T19884] kmalloc_trace+0x26/0xe0 [ 648.274112][T19884] allocate_cgrp_cset_links+0xc5/0x320 [ 648.279573][T19884] find_css_set+0xb23/0x1710 [ 648.284175][T19884] ? cgroup_migrate_prepare_dst+0x680/0x680 [ 648.290087][T19884] ? ct_nmi_exit+0x13f/0x1c0 [ 648.294695][T19884] cgroup_migrate_prepare_dst+0x120/0x680 [ 648.300423][T19884] ? lockdep_hardirqs_on+0x94/0x130 [ 648.305628][T19884] cgroup_attach_task+0x5e3/0x970 [ 648.310655][T19884] ? cgroup_attach_task+0x2ae/0x970 [ 648.315860][T19884] ? cgroup_migrate_execute+0x1060/0x1060 [ 648.321602][T19884] ? get_task_cred+0x22/0x3a0 [ 648.326283][T19884] ? get_task_cred+0x362/0x3a0 [ 648.331055][T19884] ? get_task_cred+0x22/0x3a0 [ 648.335736][T19884] __cgroup1_procs_write+0x2ef/0x460 [ 648.341024][T19884] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 648.347272][T19884] ? read_lock_is_recursive+0x10/0x10 [ 648.352647][T19884] ? cgroup_sane_behavior_show+0x20/0x20 [ 648.358286][T19884] cgroup_file_write+0x2c6/0x6c0 [ 648.363229][T19884] ? kernfs_fop_write_iter+0x1e7/0x4f0 [ 648.368698][T19884] ? cgroup_seqfile_stop+0xd0/0xd0 [ 648.373818][T19884] ? __virt_addr_valid+0x17f/0x530 [ 648.378945][T19884] ? cgroup_seqfile_stop+0xd0/0xd0 [ 648.384058][T19884] kernfs_fop_write_iter+0x3a2/0x4f0 [ 648.389354][T19884] vfs_write+0x857/0xbc0 [ 648.393603][T19884] ? file_end_write+0x250/0x250 [ 648.398459][T19884] ? __fget_files+0x28/0x4a0 [ 648.403051][T19884] ? __fget_files+0x435/0x4a0 [ 648.407737][T19884] ? __fdget_pos+0x2ba/0x360 [ 648.412323][T19884] ? ksys_write+0x77/0x2c0 [ 648.416766][T19884] ksys_write+0x19c/0x2c0 [ 648.421090][T19884] ? print_irqtrace_events+0x210/0x210 [ 648.426554][T19884] ? __ia32_sys_read+0x80/0x80 [ 648.431318][T19884] ? syscall_enter_from_user_mode+0x2e/0x230 [ 648.437302][T19884] ? lockdep_hardirqs_on+0x94/0x130 [ 648.442497][T19884] ? syscall_enter_from_user_mode+0x2e/0x230 [ 648.448477][T19884] do_syscall_64+0x3b/0xb0 [ 648.452901][T19884] ? clear_bhb_loop+0x45/0xa0 [ 648.457579][T19884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.463476][T19884] RIP: 0033:0x7fa1d0f85d19 [ 648.467887][T19884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.487485][T19884] RSP: 002b:00007fa1d1d9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.495910][T19884] RAX: ffffffffffffffda RBX: 00007fa1d1175fa0 RCX: 00007fa1d0f85d19 [ 648.503893][T19884] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000005 [ 648.511882][T19884] RBP: 00007fa1d1d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 648.519942][T19884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.527912][T19884] R13: 0000000000000000 R14: 00007fa1d1175fa0 R15: 00007fffc3cf2988 [ 648.535890][T19884] [ 648.544271][T19886] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5980'. [ 649.013387][T19895] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5985'. [ 649.080087][T19896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.126320][T19896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.265062][T19896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.275290][T19896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.430001][T19896] bond0: (slave batadv0): Releasing backup interface [ 649.894293][T19918] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5994'. [ 649.910039][T19898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5987'. [ 649.941602][T19909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5990'. [ 650.235977][T19925] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5996'. [ 650.824883][T19948] FAULT_INJECTION: forcing a failure. [ 650.824883][T19948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.844643][T19948] CPU: 0 PID: 19948 Comm: syz.0.6004 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 650.856096][T19948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 650.866197][T19948] Call Trace: [ 650.869501][T19948] [ 650.872476][T19948] dump_stack_lvl+0x1e3/0x2cb [ 650.877284][T19948] ? nf_tcp_handle_invalid+0x642/0x642 [ 650.882782][T19948] ? panic+0x764/0x764 [ 650.886879][T19948] ? __lock_acquire+0x1f80/0x1f80 [ 650.891965][T19948] ? __kasan_slab_alloc+0x65/0x70 [ 650.897018][T19948] should_fail_ex+0x3a6/0x4d0 [ 650.901733][T19948] strncpy_from_user+0x32/0x360 [ 650.906614][T19948] ? getname_flags+0xb8/0x4f0 [ 650.911316][T19948] getname_flags+0xf5/0x4f0 [ 650.915844][T19948] __x64_sys_mkdirat+0x78/0x90 [ 650.920640][T19948] do_syscall_64+0x3b/0xb0 [ 650.925091][T19948] ? clear_bhb_loop+0x45/0xa0 [ 650.929877][T19948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.935807][T19948] RIP: 0033:0x7ff852785d19 [ 650.940250][T19948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.959884][T19948] RSP: 002b:00007ff85350a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 650.968320][T19948] RAX: ffffffffffffffda RBX: 00007ff852975fa0 RCX: 00007ff852785d19 [ 650.976296][T19948] RDX: 00000000000001ff RSI: 0000000020000040 RDI: 000000000000000b [ 650.984267][T19948] RBP: 00007ff85350a090 R08: 0000000000000000 R09: 0000000000000000 [ 650.992240][T19948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.000215][T19948] R13: 0000000000000000 R14: 00007ff852975fa0 R15: 00007ffc0fdfe9f8 [ 651.008221][T19948] [ 651.282892][T19969] validate_nla: 18 callbacks suppressed [ 651.282909][T19969] netlink: 'syz.0.6011': attribute type 4 has an invalid length. [ 651.306194][T19967] netlink: 'syz.6.6010': attribute type 29 has an invalid length. [ 651.318715][T19967] netlink: 'syz.6.6010': attribute type 29 has an invalid length. [ 651.332898][T19970] netlink: 'syz.5.6012': attribute type 29 has an invalid length. [ 651.346223][T19973] netlink: 'syz.1.6013': attribute type 29 has an invalid length. [ 651.367177][T19970] netlink: 'syz.5.6012': attribute type 29 has an invalid length. [ 651.396128][T19973] netlink: 'syz.1.6013': attribute type 29 has an invalid length. [ 651.542692][T19978] netlink: 'syz.2.6015': attribute type 1 has an invalid length. [ 652.929129][T20015] netlink: 'syz.0.6027': attribute type 29 has an invalid length. [ 652.939800][T20015] netlink: 'syz.0.6027': attribute type 29 has an invalid length. [ 653.158781][T20020] __nla_validate_parse: 4 callbacks suppressed [ 653.158800][T20020] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.6030'. [ 653.172462][T20024] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6031'. [ 653.606269][T20034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.629088][T20034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.573828][T20034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.590479][T20034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.688265][T20044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.705302][T20044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.715006][T20044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.723883][T20044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.807875][T20059] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6044'. [ 654.817555][T20048] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6040'. [ 654.827708][T20048] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 655.048818][T20063] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6045'. [ 655.213013][T20066] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6047'. [ 655.555887][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.569765][T20083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.588009][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.592796][T20086] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6053'. [ 655.609834][T20083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.765209][T20094] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6052'. [ 656.840234][T20105] validate_nla: 9 callbacks suppressed [ 656.858974][T20105] netlink: 'syz.1.6059': attribute type 10 has an invalid length. [ 656.879885][T20105] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6059'. [ 657.253284][T20110] netlink: 'syz.6.6060': attribute type 10 has an invalid length. [ 657.270344][T20110] netlink: 'syz.6.6060': attribute type 4 has an invalid length. [ 657.278169][T20110] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6060'. [ 657.290552][T20110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 657.637564][T20127] netlink: 'syz.6.6066': attribute type 10 has an invalid length. [ 657.673058][T20129] netlink: 'syz.2.6067': attribute type 10 has an invalid length. [ 658.676351][T20156] netlink: 'syz.2.6077': attribute type 10 has an invalid length. [ 658.686579][T20157] netlink: 'syz.1.6078': attribute type 4 has an invalid length. [ 658.694590][T20156] netlink: 'syz.2.6077': attribute type 4 has an invalid length. [ 658.704717][T20157] __nla_validate_parse: 2 callbacks suppressed [ 658.704731][T20157] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6078'. [ 658.715031][T20156] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6077'. [ 658.756186][T20156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 658.938313][T20169] netlink: 'syz.6.6080': attribute type 10 has an invalid length. [ 658.958616][T20169] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6080'. [ 659.045115][T20174] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6081'. [ 659.056843][T20171] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6081'. [ 659.364481][T20188] netlink: 'syz.6.6087': attribute type 10 has an invalid length. [ 659.396804][T20188] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6087'. [ 659.534892][T20199] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6090'. [ 659.777483][T20196] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6090'. [ 660.002043][T20211] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6094'. [ 660.022195][T20211] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 660.101810][T20218] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6095'. [ 660.311128][T20228] FAULT_INJECTION: forcing a failure. [ 660.311128][T20228] name failslab, interval 1, probability 0, space 0, times 0 [ 660.351114][T20228] CPU: 0 PID: 20228 Comm: syz.1.6100 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 660.362522][T20228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.372594][T20228] Call Trace: [ 660.375892][T20228] [ 660.378840][T20228] dump_stack_lvl+0x1e3/0x2cb [ 660.383557][T20228] ? nf_tcp_handle_invalid+0x642/0x642 [ 660.389050][T20228] ? panic+0x764/0x764 [ 660.393131][T20228] ? __might_sleep+0xb0/0xb0 [ 660.397821][T20228] should_fail_ex+0x3a6/0x4d0 [ 660.402592][T20228] should_failslab+0x5/0x20 [ 660.407104][T20228] slab_pre_alloc_hook+0x59/0x300 [ 660.412150][T20228] ? __lock_acquire+0x1f80/0x1f80 [ 660.417200][T20228] ? security_prepare_creds+0x48/0x130 [ 660.422660][T20228] __kmem_cache_alloc_node+0x47/0x260 [ 660.428042][T20228] ? security_prepare_creds+0x48/0x130 [ 660.433498][T20228] __kmalloc+0xa1/0x230 [ 660.437656][T20228] ? rcu_is_watching+0x11/0xb0 [ 660.442425][T20228] security_prepare_creds+0x48/0x130 [ 660.447715][T20228] prepare_creds+0x459/0x610 [ 660.452321][T20228] copy_creds+0x149/0xcf0 [ 660.456661][T20228] copy_process+0x9c4/0x4060 [ 660.461271][T20228] ? idle_dummy+0x10/0x10 [ 660.465611][T20228] kernel_clone+0x222/0x920 [ 660.470121][T20228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.476382][T20228] ? create_io_thread+0x180/0x180 [ 660.481424][T20228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.487603][T20228] __x64_sys_clone+0x231/0x280 [ 660.492375][T20228] ? __do_sys_vfork+0x110/0x110 [ 660.497225][T20228] ? lockdep_hardirqs_on+0x94/0x130 [ 660.502431][T20228] ? syscall_enter_from_user_mode+0x37/0x230 [ 660.508417][T20228] ? syscall_enter_from_user_mode+0x2e/0x230 [ 660.514403][T20228] do_syscall_64+0x3b/0xb0 [ 660.518826][T20228] ? clear_bhb_loop+0x45/0xa0 [ 660.523497][T20228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.529395][T20228] RIP: 0033:0x7f3492585d19 [ 660.533815][T20228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.553416][T20228] RSP: 002b:00007f349331bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 660.561843][T20228] RAX: ffffffffffffffda RBX: 00007f3492775fa0 RCX: 00007f3492585d19 [ 660.569819][T20228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.577788][T20228] RBP: 00007f349331c090 R08: 0000000000000000 R09: 0000000000000000 [ 660.585770][T20228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.593741][T20228] R13: 0000000000000000 R14: 00007f3492775fa0 R15: 00007ffcaa1f4048 [ 660.601743][T20228] [ 661.962653][T20246] validate_nla: 4 callbacks suppressed [ 661.962760][T20246] netlink: 'syz.5.6106': attribute type 10 has an invalid length. [ 662.094664][T20263] netlink: 'syz.2.6109': attribute type 1 has an invalid length. [ 663.033744][T20271] netlink: 'syz.6.6111': attribute type 10 has an invalid length. [ 663.041919][T20271] netlink: 'syz.6.6111': attribute type 4 has an invalid length. [ 663.049921][T20271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 666.529219][T20273] delete_channel: no stack [ 666.631127][T20297] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 666.642915][T20297] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 666.651439][T20297] CPU: 0 PID: 20297 Comm: syz.2.6120 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 666.662830][T20297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 666.672894][T20297] RIP: 0010:dev_map_enqueue+0x2d/0x340 [ 666.678393][T20297] Code: 41 56 41 55 41 54 53 48 83 ec 10 49 89 d5 49 89 f7 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 aa 5a df ff 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 ef e8 04 e4 36 00 4c 8b 75 00 48 83 c5 [ 666.698116][T20297] RSP: 0018:ffffc9000c82f6c0 EFLAGS: 00010246 [ 666.704205][T20297] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000080000 [ 666.712189][T20297] RDX: ffffc90004e4a000 RSI: 0000000000000948 RDI: 0000000000000949 [ 666.720262][T20297] RBP: 0000000000000000 R08: ffffffff88b083a3 R09: ffffffff88b082bb [ 666.728244][T20297] R10: 0000000000000004 R11: ffff88805fdb9dc0 R12: dffffc0000000000 [ 666.736226][T20297] R13: ffff888026bfc000 R14: ffff8880b8e39258 R15: ffff8880568af070 [ 666.744230][T20297] FS: 00007fa1d1d9c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 666.753175][T20297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.759858][T20297] CR2: 000000110c2f229e CR3: 000000005f33f000 CR4: 00000000003506f0 [ 666.767842][T20297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 666.775822][T20297] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 666.783804][T20297] Call Trace: [ 666.787113][T20297] [ 666.790055][T20297] ? __die_body+0x5e/0xa0 [ 666.794417][T20297] ? die_addr+0x95/0xc0 [ 666.798594][T20297] ? exc_general_protection+0x3ae/0x590 [ 666.804193][T20297] ? asm_exc_general_protection+0x22/0x30 [ 666.809959][T20297] ? xdp_do_redirect_frame+0x21b/0x660 [ 666.815462][T20297] ? xdp_do_redirect_frame+0x303/0x660 [ 666.820953][T20297] ? dev_map_enqueue+0x2d/0x340 [ 666.825832][T20297] xdp_do_redirect_frame+0x323/0x660 [ 666.831147][T20297] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 666.836569][T20297] ? 0xffffffffa0003b40 [ 666.840739][T20297] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 666.846302][T20297] ? xdp_convert_md_to_buff+0x330/0x330 [ 666.851863][T20297] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 666.857778][T20297] ? 0xffffffffa0003b40 [ 666.861979][T20297] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 666.868255][T20297] ? __might_fault+0xbd/0x110 [ 666.872975][T20297] ? _copy_from_user+0x109/0x170 [ 666.877963][T20297] ? bpf_test_init+0x15a/0x180 [ 666.882747][T20297] ? xdp_convert_md_to_buff+0x5b/0x330 [ 666.888228][T20297] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 666.893677][T20297] ? dev_put+0x80/0x80 [ 666.897784][T20297] ? dev_put+0x80/0x80 [ 666.901882][T20297] bpf_prog_test_run+0x32f/0x3a0 [ 666.906947][T20297] __sys_bpf+0x3eb/0x6c0 [ 666.911223][T20297] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 666.916632][T20297] ? print_irqtrace_events+0x210/0x210 [ 666.922125][T20297] ? print_irqtrace_events+0x210/0x210 [ 666.927608][T20297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 666.933601][T20297] ? lockdep_hardirqs_on+0x94/0x130 [ 666.938817][T20297] __x64_sys_bpf+0x78/0x90 [ 666.943254][T20297] do_syscall_64+0x3b/0xb0 [ 666.947687][T20297] ? clear_bhb_loop+0x45/0xa0 [ 666.952461][T20297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.958372][T20297] RIP: 0033:0x7fa1d0f85d19 [ 666.962799][T20297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.982415][T20297] RSP: 002b:00007fa1d1d9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.990844][T20297] RAX: ffffffffffffffda RBX: 00007fa1d1175fa0 RCX: 00007fa1d0f85d19 [ 666.998821][T20297] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 667.006801][T20297] RBP: 00007fa1d1001a20 R08: 0000000000000000 R09: 0000000000000000 [ 667.014781][T20297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.022758][T20297] R13: 0000000000000000 R14: 00007fa1d1175fa0 R15: 00007fffc3cf2988 [ 667.030757][T20297] [ 667.033779][T20297] Modules linked in: [ 667.037853][T20297] ---[ end trace 0000000000000000 ]--- [ 667.043403][T20297] RIP: 0010:dev_map_enqueue+0x2d/0x340 [ 667.048917][T20297] Code: 41 56 41 55 41 54 53 48 83 ec 10 49 89 d5 49 89 f7 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 aa 5a df ff 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 ef e8 04 e4 36 00 4c 8b 75 00 48 83 c5 [ 667.068634][T20297] RSP: 0018:ffffc9000c82f6c0 EFLAGS: 00010246 [ 667.074801][T20297] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000080000 [ 667.082923][T20297] RDX: ffffc90004e4a000 RSI: 0000000000000948 RDI: 0000000000000949 [ 667.090982][T20297] RBP: 0000000000000000 R08: ffffffff88b083a3 R09: ffffffff88b082bb [ 667.098996][T20297] R10: 0000000000000004 R11: ffff88805fdb9dc0 R12: dffffc0000000000 [ 667.107047][T20297] R13: ffff888026bfc000 R14: ffff8880b8e39258 R15: ffff8880568af070 [ 667.115133][T20297] FS: 00007fa1d1d9c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 667.124360][T20297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.131011][T20297] CR2: 000000110c2f229e CR3: 000000005f33f000 CR4: 00000000003506f0 [ 667.139048][T20297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 667.147124][T20297] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 667.155184][T20297] Kernel panic - not syncing: Fatal exception in interrupt [ 667.162719][T20297] Kernel Offset: disabled [ 667.167140][T20297] Rebooting in 86400 seconds..