last executing test programs: 5m26.02579857s ago: executing program 4 (id=7088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4m59.61520885s ago: executing program 4 (id=7100): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34029}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0) 4m59.296225896s ago: executing program 4 (id=7102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e04"], 0xffdd) 4m53.192691755s ago: executing program 0 (id=7107): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x7, 0x2020, 0x0, @link_id}, 0x20) 4m52.937889296s ago: executing program 0 (id=7109): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34029}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xdd88}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7fff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x100}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) 4m52.669152957s ago: executing program 0 (id=7111): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m51.944843747s ago: executing program 0 (id=7112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xfe, &(0x7f00000005c0)=""/254, 0x20880, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd449, r0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0x9, 0x5}], 0x10, 0x9}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xf1e}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000002a00000095000000000000009500a505000000005202ab5abe8a5dfcde2339c1166fa468aeba2ba50319fe44b089e53500bbf7f4ab4e5993ac6ae4b58b72bc1b98c33800b98ea69612f5d59bfeb22e79eec927c858639700fe238a2c3f36f1dce8d910feb42e7e5ef6cdbac92eb5d28d225e690e2637d190577cd2b7e0bc4597"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) write$cgroup_int(r1, &(0x7f0000000080), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m50.8053789s ago: executing program 0 (id=7113): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 4m50.408361973s ago: executing program 4 (id=7117): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x41, &(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f0000000640), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x10, 0x2}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={0x0}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r3, 0x0}, 0x48) 4m50.266436984s ago: executing program 1 (id=7119): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x69, 0x0, 0x0, 0xb9}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) 4m50.265933234s ago: executing program 1 (id=7120): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000200)=0x7fff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000900)=""/202, &(0x7f00000004c0), &(0x7f0000000840), 0x5}, 0x38) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m50.06862427s ago: executing program 1 (id=7121): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x9b, 0x10, 0xd, 0x4, 0x0, 0x5, 0x1002, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc17ef882372668fe, @perf_bp={&(0x7f0000000140)}, 0x800, 0x3, 0x5, 0x9, 0x3, 0x1, 0xa, 0x0, 0x3, 0x0, 0x885}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34029}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xdd88}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) 4m48.531662636s ago: executing program 1 (id=7124): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 4m48.531328396s ago: executing program 1 (id=7125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 4m47.354558132s ago: executing program 4 (id=7128): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_clone(0x8000200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @exit], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000800)=[{0x1, 0x2, 0x1, 0xb}], 0x10, 0x80}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40)=r4, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x80000000, 0x0, 0x1, 0x3}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x149540, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 4m45.445346318s ago: executing program 1 (id=7129): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x8) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4004662b, &(0x7f00000005c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c00b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="250a0000000000006111d0000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff8881f670effd, 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3m34.907236636s ago: executing program 2 (id=7137): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xfe, &(0x7f00000005c0)=""/254, 0x20880, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd449, r0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0x9, 0x5}], 0x10, 0x9}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0x18, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ldst={0x0, 0x3, 0x1, 0x9, 0xa, 0x4}, @generic={0xd1, 0xd, 0xf, 0x7, 0x81}, @tail_call, @map_fd={0x18, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x8f, &(0x7f0000000600)=""/143, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0xb, 0x98f, 0x9e}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000e40)=[{0x1, 0x4, 0xb, 0x7}, {0x4, 0x4, 0xc, 0x2}, {0x5, 0x2, 0x6, 0x5}, {0x5, 0x4, 0xc, 0x1}], 0x10, 0xe1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xf1e}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000002a00000095000000000000009500a505000000005202ab5abe8a5dfcde2339c1166fa468aeba2ba50319fe44b089e53500bbf7f4ab4e5993ac6ae4b58b72bc1b98c33800b98ea69612f5d59bfeb22e79eec927c858639700fe238a2c3f36f1dce8d910feb42e7e5ef6cdbac92eb5d28d225e690e2637d190577cd2b7e0bc4597"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) write$cgroup_int(r1, &(0x7f0000000080), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m33.894515609s ago: executing program 2 (id=7138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xfe, &(0x7f00000005c0)=""/254, 0x20880, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd449, r0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0x9, 0x5}], 0x10, 0x9}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xf1e}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000002a00000095000000000000009500a505000000005202ab5abe8a5dfcde2339c1166fa468aeba2ba50319fe44b089e53500bbf7f4ab4e5993ac6ae4b58b72bc1b98c33800b98ea69612f5d59bfeb22e79eec927c858639700fe238a2c3f36f1dce8d910feb42e7e5ef6cdbac92eb5d28d225e690e2637d190577cd2b7e0bc4597"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) write$cgroup_int(r1, &(0x7f0000000080), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m32.842217755s ago: executing program 2 (id=7139): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x1002, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m29.019565828s ago: executing program 0 (id=7130): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) r0 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x208, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x800, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3e) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x8}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x34, 0x0, 0x8, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) 2.670488691s ago: executing program 3 (id=7140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 2.669075511s ago: executing program 2 (id=7148): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100840, 0xca}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x78, 0x2, 0x0, 0x2, 0x0, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d000000000400000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001240)='ns/mnt\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8], 0x12) 2.243262806s ago: executing program 2 (id=7141): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x13, 0x4, 0xffffffffffffffff, @link_id}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0xffff, 0x0, 0x30, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000bc0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 1.965121679s ago: executing program 3 (id=7142): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000200)=0x7fff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000900)=""/202, &(0x7f00000004c0), &(0x7f0000000840), 0x5}, 0x38) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.59093303s ago: executing program 3 (id=7143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x523, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 1.3458289s ago: executing program 3 (id=7144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 1.34549888s ago: executing program 3 (id=7145): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, r0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xdd88}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x100}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000900)={'xfrm0\x00', @random='\x00\x00\x00 \x00'}) 70.075834ms ago: executing program 4 (id=7133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r1}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x4, 0x6, 0x21, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd52, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000140)="5b06", &(0x7f0000000400)=""/4096}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000300)={0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r7]}, 0x90) 28.409388ms ago: executing program 2 (id=7155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e040600bc"], 0xffdd) 0s ago: executing program 3 (id=7156): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x200000000000024b, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socketpair(0xa, 0xa, 0x5, &(0x7f0000000940)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4, 0x8}, 0x48) kernel console output (not intermixed with test programs): eth1_macvtap left promiscuous mode [ 986.282124][ T2057] device veth0_vlan left promiscuous mode [ 986.686393][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 986.694804][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.702814][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 986.711611][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.720320][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.727314][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.734908][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 986.743686][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 986.752291][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.759285][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.894787][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 986.902786][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 986.911702][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 986.920496][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 986.929388][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 986.995180][T14098] device veth0_vlan entered promiscuous mode [ 987.019311][T14098] device veth1_macvtap entered promiscuous mode [ 987.084542][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 987.093322][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 987.102460][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 987.111193][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 987.120494][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 987.129407][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 987.138271][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 987.146246][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 987.157406][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 987.166021][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.175164][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.184206][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 987.192877][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 987.368821][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 987.378078][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 987.399191][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 987.409791][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 987.439610][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.446970][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.564845][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 987.897102][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 987.905745][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 987.914969][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.922006][ T8640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.941086][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 988.001137][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 988.275553][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 988.284534][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.416735][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.425422][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.906374][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 988.961805][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.553399][T14120] device veth0_vlan entered promiscuous mode [ 990.163373][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 990.171430][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 990.227645][T14120] device veth1_macvtap entered promiscuous mode [ 990.271262][T14189] device pim6reg1 entered promiscuous mode [ 990.284903][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 990.294253][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 990.307696][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 990.315708][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 990.325970][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 990.335321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 990.344382][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 990.677879][T14200] device pim6reg1 entered promiscuous mode [ 991.454855][T14209] device pim6reg1 entered promiscuous mode [ 993.618487][T14238] device pim6reg1 entered promiscuous mode [ 996.432592][T14282] device pim6reg1 entered promiscuous mode [ 1000.197932][ T2057] device bridge_slave_1 left promiscuous mode [ 1000.204010][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.304740][ T2057] device bridge_slave_0 left promiscuous mode [ 1000.335716][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.359202][ T2057] device veth1_macvtap left promiscuous mode [ 1000.365183][ T2057] device veth0_vlan left promiscuous mode [ 1003.242583][T14336] FAULT_INJECTION: forcing a failure. [ 1003.242583][T14336] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.365942][T14336] CPU: 0 PID: 14336 Comm: syz.2.4306 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1003.375669][T14336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1003.385853][T14336] Call Trace: [ 1003.389149][T14336] [ 1003.392005][T14336] dump_stack_lvl+0x151/0x1b7 [ 1003.396825][T14336] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1003.402219][T14336] dump_stack+0x15/0x1c [ 1003.406307][T14336] should_fail_ex+0x3d0/0x520 [ 1003.410825][T14336] ? security_file_alloc+0x29/0x120 [ 1003.415965][T14336] __should_failslab+0xaf/0xf0 [ 1003.420749][T14336] should_failslab+0x9/0x20 [ 1003.425157][T14336] kmem_cache_alloc+0x3b/0x2c0 [ 1003.429843][T14336] ? __alloc_file+0x29/0x2a0 [ 1003.434370][T14336] security_file_alloc+0x29/0x120 [ 1003.439228][T14336] __alloc_file+0xb2/0x2a0 [ 1003.443479][T14336] alloc_empty_file+0x95/0x180 [ 1003.448249][T14336] alloc_file+0x5a/0x5e0 [ 1003.452331][T14336] alloc_file_pseudo+0x259/0x2f0 [ 1003.457104][T14336] ? alloc_empty_file_noaccount+0x80/0x80 [ 1003.462670][T14336] anon_inode_getfd+0xde/0x200 [ 1003.467259][T14336] bpf_map_new_fd+0x62/0x80 [ 1003.471594][T14336] map_create+0x99f/0xcf0 [ 1003.475767][T14336] __sys_bpf+0x2e6/0x7f0 [ 1003.479846][T14336] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1003.485072][T14336] ? __ia32_sys_read+0x90/0x90 [ 1003.489655][T14336] ? debug_smp_processor_id+0x17/0x20 [ 1003.494859][T14336] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1003.500871][T14336] __x64_sys_bpf+0x7c/0x90 [ 1003.505779][T14336] x64_sys_call+0x87f/0x9a0 [ 1003.510118][T14336] do_syscall_64+0x3b/0xb0 [ 1003.514368][T14336] ? clear_bhb_loop+0x55/0xb0 [ 1003.519103][T14336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1003.524845][T14336] RIP: 0033:0x7f8741379e79 [ 1003.529080][T14336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.548594][T14336] RSP: 002b:00007f87411ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1003.556904][T14336] RAX: ffffffffffffffda RBX: 00007f8741515f80 RCX: 00007f8741379e79 [ 1003.564716][T14336] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 1003.572557][T14336] RBP: 00007f87411ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.580452][T14336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.588240][T14336] R13: 0000000000000000 R14: 00007f8741515f80 R15: 00007ffc70c1bc18 [ 1003.596160][T14336] [ 1004.833887][T14352] device pim6reg1 entered promiscuous mode [ 1009.494101][T14416] device pim6reg1 entered promiscuous mode [ 1014.289530][T14475] device pim6reg1 entered promiscuous mode [ 1014.544337][T14483] device wg2 entered promiscuous mode [ 1019.208037][T14547] device pim6reg1 entered promiscuous mode [ 1023.376224][ T28] audit: type=1400 audit(1724082568.408:144): avc: denied { create } for pid=14602 comm="syz.1.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1023.578178][T14612] device pim6reg1 entered promiscuous mode [ 1026.977100][T14667] device pim6reg1 entered promiscuous mode [ 1031.810038][T14736] device pim6reg1 entered promiscuous mode [ 1033.818761][ T8] device bridge_slave_1 left promiscuous mode [ 1033.824931][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.834172][ T8] device bridge_slave_0 left promiscuous mode [ 1033.840789][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.850145][ T8] device veth1_macvtap left promiscuous mode [ 1033.856057][ T8] device veth0_vlan left promiscuous mode [ 1035.123155][T14803] device pim6reg1 entered promiscuous mode [ 1037.840701][T14858] device pim6reg1 entered promiscuous mode [ 1040.448120][T14918] device pim6reg1 entered promiscuous mode [ 1043.156283][ C1] sched: RT throttling activated [ 1043.798941][T14977] device pim6reg1 entered promiscuous mode [ 1045.787719][ T367] device bridge_slave_1 left promiscuous mode [ 1045.793779][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.810326][ T367] device bridge_slave_0 left promiscuous mode [ 1045.816675][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.826375][ T367] device veth1_macvtap left promiscuous mode [ 1045.832441][ T367] device veth0_vlan left promiscuous mode [ 1046.094371][T15014] device pim6reg1 entered promiscuous mode [ 1046.777123][T15015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.784137][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.795640][T15015] device bridge_slave_0 entered promiscuous mode [ 1046.803715][T15015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.810922][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.819180][T15015] device bridge_slave_1 entered promiscuous mode [ 1046.825975][T15010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.834105][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.842642][T15010] device bridge_slave_0 entered promiscuous mode [ 1047.096490][T15010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.103594][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.379682][T15010] device bridge_slave_1 entered promiscuous mode [ 1047.705886][T15011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.714630][T15011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.723954][T15011] device bridge_slave_0 entered promiscuous mode [ 1047.796507][T15049] device pim6reg1 entered promiscuous mode [ 1047.821045][T15011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.834306][T15011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.842857][T15011] device bridge_slave_1 entered promiscuous mode [ 1047.954890][T15059] device pim6reg1 entered promiscuous mode [ 1049.033530][T15082] device pim6reg1 entered promiscuous mode [ 1049.091278][ T367] device bridge_slave_1 left promiscuous mode [ 1049.098073][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.107469][ T367] device bridge_slave_0 left promiscuous mode [ 1049.113627][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.186425][ T367] device bridge_slave_1 left promiscuous mode [ 1049.192730][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.248647][ T367] device bridge_slave_0 left promiscuous mode [ 1049.258512][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.416776][ T367] device veth1_macvtap left promiscuous mode [ 1049.426529][ T367] device veth0_vlan left promiscuous mode [ 1050.014458][ T367] device veth1_macvtap left promiscuous mode [ 1050.021500][ T367] device veth0_vlan left promiscuous mode [ 1050.628863][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1050.648565][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1050.760481][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1050.769671][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.778548][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.785496][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.806104][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1050.829876][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1050.842863][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.849899][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.931528][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1050.976367][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.984693][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.993448][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1051.001798][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.056511][T15111] device pim6reg1 entered promiscuous mode [ 1051.065597][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.074988][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.084882][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.093741][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.104492][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.111633][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.119655][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.128391][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.137304][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.144304][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.274529][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1051.282871][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1051.308892][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.372164][T15015] device veth0_vlan entered promiscuous mode [ 1051.388822][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.400751][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.408930][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1051.418446][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.438195][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1051.467068][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.484078][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.503013][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.515227][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.522290][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.537144][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1051.558871][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.609033][T15015] device veth1_macvtap entered promiscuous mode [ 1051.632846][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1051.642311][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.650188][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.659787][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.668507][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.677102][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.684090][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.692512][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1051.701296][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.710498][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.746403][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.755383][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.797223][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1051.805751][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.817470][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1051.827741][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.836033][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.844645][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.867124][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1051.876027][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1051.897424][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.913658][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.941273][T15011] device veth0_vlan entered promiscuous mode [ 1051.966878][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1051.975245][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.045590][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1052.054554][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1052.077206][T15011] device veth1_macvtap entered promiscuous mode [ 1052.107210][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1052.115733][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1052.124902][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1052.235079][T15010] device veth0_vlan entered promiscuous mode [ 1052.259865][T15010] device veth1_macvtap entered promiscuous mode [ 1052.363707][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1052.378122][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1052.395548][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1052.410778][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1052.424512][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1052.432790][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1052.441374][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1052.450529][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1052.459152][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1052.468995][T15136] device pim6reg1 entered promiscuous mode [ 1052.497268][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1052.507526][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1052.566107][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1052.595254][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1053.083460][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1053.107030][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.667152][T15181] device pim6reg1 entered promiscuous mode [ 1054.977652][T15194] device veth1_macvtap left promiscuous mode [ 1055.027183][T15195] device veth1_macvtap entered promiscuous mode [ 1055.412521][T15195] device macsec0 entered promiscuous mode [ 1057.146907][T15238] device pim6reg1 entered promiscuous mode [ 1059.373319][T15294] device pim6reg1 entered promiscuous mode [ 1062.568454][T15376] device pim6reg1 entered promiscuous mode [ 1065.278516][ T28] audit: type=1400 audit(1724082610.198:145): avc: denied { create } for pid=15391 comm="syz.0.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1065.499561][T15423] device pim6reg1 entered promiscuous mode [ 1067.530165][T15483] device pim6reg1 entered promiscuous mode [ 1069.161661][T15520] device pim6reg1 entered promiscuous mode [ 1071.832045][T15575] device pim6reg1 entered promiscuous mode [ 1074.284185][T15628] device pim6reg1 entered promiscuous mode [ 1078.137389][T15690] device pim6reg1 entered promiscuous mode [ 1080.241624][T15718] device pim6reg1 entered promiscuous mode [ 1085.437999][T15764] device pim6reg1 entered promiscuous mode [ 1089.105403][T15826] device pim6reg1 entered promiscuous mode [ 1089.178475][T15811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.185479][T15811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.410054][T15811] device bridge_slave_0 entered promiscuous mode [ 1089.936230][T15811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.953381][T15811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.987678][T15811] device bridge_slave_1 entered promiscuous mode [ 1090.520848][T15852] device pim6reg1 entered promiscuous mode [ 1091.547104][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1091.554758][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1091.598521][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1091.607957][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1091.616848][T14236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.623850][T14236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.631797][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1091.641657][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1091.650744][T14236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.657772][T14236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.680846][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1091.689529][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1091.698625][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1091.731153][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1091.753127][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1091.762435][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1091.770753][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1091.780810][T15811] device veth0_vlan entered promiscuous mode [ 1091.803889][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1091.816097][T15811] device veth1_macvtap entered promiscuous mode [ 1091.837746][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1091.847289][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1092.191194][T15868] device pim6reg1 entered promiscuous mode [ 1092.600343][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1093.236715][T15884] device pim6reg1 entered promiscuous mode [ 1096.552565][T15942] device pim6reg1 entered promiscuous mode [ 1097.848420][T15954] device pim6reg1 entered promiscuous mode [ 1103.930901][T16030] device pim6reg1 entered promiscuous mode [ 1108.914035][T16115] device pim6reg1 entered promiscuous mode [ 1109.533111][T16125] device pim6reg1 entered promiscuous mode [ 1112.808752][T16182] device pim6reg1 entered promiscuous mode [ 1115.939113][T16234] device pim6reg1 entered promiscuous mode [ 1119.848956][T16289] device pim6reg1 entered promiscuous mode [ 1123.055820][T16340] device pim6reg1 entered promiscuous mode [ 1126.742296][T16393] device pim6reg1 entered promiscuous mode [ 1127.353129][T16400] device pim6reg1 entered promiscuous mode [ 1131.253087][T16468] device pim6reg1 entered promiscuous mode [ 1134.122584][T16514] device pim6reg1 entered promiscuous mode [ 1137.958040][T16577] device pim6reg1 entered promiscuous mode [ 1142.439618][T16635] device pim6reg1 entered promiscuous mode [ 1146.064554][T16697] device pim6reg1 entered promiscuous mode [ 1149.867795][T16755] device pim6reg1 entered promiscuous mode [ 1154.386023][T16816] device pim6reg1 entered promiscuous mode [ 1156.411566][T16858] device pim6reg1 entered promiscuous mode [ 1156.938256][T16869] device pim6reg1 entered promiscuous mode [ 1156.988233][ T8] device bridge_slave_1 left promiscuous mode [ 1156.994320][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.017237][ T8] device bridge_slave_0 left promiscuous mode [ 1157.042780][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.062918][ T8] device veth1_macvtap left promiscuous mode [ 1157.069172][ T8] device veth0_vlan left promiscuous mode [ 1158.484779][T16902] device pim6reg1 entered promiscuous mode [ 1161.175016][T16954] device pim6reg1 entered promiscuous mode [ 1163.534025][T17005] device pim6reg1 entered promiscuous mode [ 1166.471659][T17077] device pim6reg1 entered promiscuous mode [ 1168.495029][T17125] device pim6reg1 entered promiscuous mode [ 1170.087760][T17164] device pim6reg1 entered promiscuous mode [ 1170.782989][T17179] device pim6reg1 entered promiscuous mode [ 1172.600699][T17223] device pim6reg1 entered promiscuous mode [ 1173.191961][T17232] device pim6reg1 entered promiscuous mode [ 1175.873056][T17286] device pim6reg1 entered promiscuous mode [ 1176.142083][T17291] device pim6reg1 entered promiscuous mode [ 1177.020563][T17315] device pim6reg1 entered promiscuous mode [ 1178.184175][T17336] device pim6reg1 entered promiscuous mode [ 1179.271556][T17364] device pim6reg1 entered promiscuous mode [ 1180.442438][T17388] device pim6reg1 entered promiscuous mode [ 1182.469345][T17426] device pim6reg1 entered promiscuous mode [ 1183.092545][T17443] device pim6reg1 entered promiscuous mode [ 1185.746821][T17487] device pim6reg1 entered promiscuous mode [ 1187.995876][T17537] device pim6reg1 entered promiscuous mode [ 1189.585694][T17564] device pim6reg1 entered promiscuous mode [ 1192.035155][T17617] device pim6reg1 entered promiscuous mode [ 1194.309050][T17662] device pim6reg1 entered promiscuous mode [ 1196.530942][T17712] device pim6reg1 entered promiscuous mode [ 1199.641309][T17770] device pim6reg1 entered promiscuous mode [ 1202.707016][T17819] device pim6reg1 entered promiscuous mode [ 1215.794574][T18110] device pim6reg1 entered promiscuous mode [ 1218.460019][T18162] device pim6reg1 entered promiscuous mode [ 1221.058510][T18220] device pim6reg1 entered promiscuous mode [ 1222.807062][T18262] device pim6reg1 entered promiscuous mode [ 1225.197845][T18320] device pim6reg1 entered promiscuous mode [ 1227.676469][T18371] device pim6reg1 entered promiscuous mode [ 1231.090016][T18452] device pim6reg1 entered promiscuous mode [ 1233.168522][T18497] device pim6reg1 entered promiscuous mode [ 1234.656148][T18551] device pim6reg1 entered promiscuous mode [ 1255.440106][T18962] FAULT_INJECTION: forcing a failure. [ 1255.440106][T18962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.476715][T18962] CPU: 1 PID: 18962 Comm: syz.1.5660 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1255.486443][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1255.496427][T18962] Call Trace: [ 1255.499548][T18962] [ 1255.502324][T18962] dump_stack_lvl+0x151/0x1b7 [ 1255.506853][T18962] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1255.512232][T18962] ? __kasan_check_write+0x14/0x20 [ 1255.517440][T18962] dump_stack+0x15/0x1c [ 1255.521520][T18962] should_fail_ex+0x3d0/0x520 [ 1255.526206][T18962] should_fail+0xb/0x10 [ 1255.530366][T18962] should_fail_usercopy+0x1a/0x20 [ 1255.535396][T18962] _copy_from_user+0x1e/0xc0 [ 1255.539832][T18962] copy_msghdr_from_user+0xaa/0x670 [ 1255.545059][T18962] ? __kasan_check_write+0x14/0x20 [ 1255.550408][T18962] ? proc_fail_nth_write+0x20b/0x290 [ 1255.555522][T18962] ? sendmsg_copy_msghdr+0x70/0x70 [ 1255.560480][T18962] __sys_recvmsg+0x24b/0x3d0 [ 1255.565075][T18962] ? ____sys_recvmsg+0x530/0x530 [ 1255.569942][T18962] ? __kasan_check_write+0x14/0x20 [ 1255.574971][T18962] ? __ia32_sys_read+0x90/0x90 [ 1255.579659][T18962] ? debug_smp_processor_id+0x17/0x20 [ 1255.585467][T18962] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1255.592241][T18962] __x64_sys_recvmsg+0x7f/0x90 [ 1255.597102][T18962] x64_sys_call+0x171/0x9a0 [ 1255.601518][T18962] do_syscall_64+0x3b/0xb0 [ 1255.606114][T18962] ? clear_bhb_loop+0x55/0xb0 [ 1255.610821][T18962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1255.616645][T18962] RIP: 0033:0x7fdf1e579e79 [ 1255.620889][T18962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.640682][T18962] RSP: 002b:00007fdf1f30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1255.649450][T18962] RAX: ffffffffffffffda RBX: 00007fdf1e715f80 RCX: 00007fdf1e579e79 [ 1255.657269][T18962] RDX: 0000000000001f00 RSI: 0000000020000500 RDI: 0000000000000003 [ 1255.665239][T18962] RBP: 00007fdf1f30f090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.673885][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.681846][T18962] R13: 0000000000000000 R14: 00007fdf1e715f80 R15: 00007ffef9625c58 [ 1255.689854][T18962] [ 1273.540934][T19356] device pim6reg1 entered promiscuous mode [ 1277.417947][T19439] sit0: mtu less than device minimum [ 1279.871953][T19496] sit0: mtu less than device minimum [ 1298.078846][T19916] syz.3.5960[19916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1298.079011][T19916] syz.3.5960[19916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1300.873056][T19948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.972179][T19948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.069710][T19948] device bridge_slave_0 entered promiscuous mode [ 1301.160339][T19948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.167457][T19948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.175534][T19948] device bridge_slave_1 entered promiscuous mode [ 1304.237699][ T10] device bridge_slave_1 left promiscuous mode [ 1304.247602][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.263590][ T10] device bridge_slave_0 left promiscuous mode [ 1304.286937][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.977281][ T10] device veth1_macvtap left promiscuous mode [ 1306.713201][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1306.723400][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1306.923531][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1306.938709][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1306.991318][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.998434][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.046652][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1307.060179][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1307.086903][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.094059][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.109978][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1307.125235][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1307.139319][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1307.154428][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1307.168698][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1307.245348][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1307.258116][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1307.301278][T19948] device veth0_vlan entered promiscuous mode [ 1307.310109][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1307.319323][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1307.338122][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1307.346056][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1307.744291][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1307.767302][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1307.854412][T19948] device veth1_macvtap entered promiscuous mode [ 1308.007275][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1308.015313][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1308.077106][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1308.246533][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1308.266843][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1371.119252][T21175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.129135][T21175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.138276][T21175] device bridge_slave_0 entered promiscuous mode [ 1371.272193][T21175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.353095][T21175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.406577][T21175] device bridge_slave_1 entered promiscuous mode [ 1375.399942][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1375.421279][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1375.497674][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1375.646234][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1375.839253][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.846214][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.854905][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1375.864349][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1376.196347][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.203452][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.359288][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1376.367543][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1376.376093][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1376.387617][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1376.396183][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1376.405083][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1376.414570][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1376.490886][T21175] device veth0_vlan entered promiscuous mode [ 1376.498565][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1376.507295][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1376.527347][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1376.535042][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1376.619375][T21175] device veth1_macvtap entered promiscuous mode [ 1376.626693][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1376.635215][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1376.644337][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1376.666564][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1376.675198][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1376.685142][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1376.694179][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1439.868210][ T337] device bridge_slave_1 left promiscuous mode [ 1439.874377][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.921522][ T337] device bridge_slave_0 left promiscuous mode [ 1439.930352][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.965431][ T337] device veth1_macvtap left promiscuous mode [ 1439.971501][ T337] device veth0_vlan left promiscuous mode [ 1504.722715][T23258] device syzkaller0 entered promiscuous mode [ 1509.904590][T23353] bond_slave_1: mtu less than device minimum [ 1513.691635][T23419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.926034][T23419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.097116][T23419] device bridge_slave_0 entered promiscuous mode [ 1514.527401][T23419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.728892][T23419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.808743][T23419] device bridge_slave_1 entered promiscuous mode [ 1515.515024][T23463] FAULT_INJECTION: forcing a failure. [ 1515.515024][T23463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1515.637855][T23463] CPU: 0 PID: 23463 Comm: syz.3.7014 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1515.647598][T23463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1515.657484][T23463] Call Trace: [ 1515.660599][T23463] [ 1515.663731][T23463] dump_stack_lvl+0x151/0x1b7 [ 1515.668243][T23463] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1515.673535][T23463] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1515.679441][T23463] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1515.685093][T23463] dump_stack+0x15/0x1c [ 1515.689089][T23463] should_fail_ex+0x3d0/0x520 [ 1515.693598][T23463] should_fail_alloc_page+0x68/0x90 [ 1515.698628][T23463] __alloc_pages+0x1f4/0x780 [ 1515.703062][T23463] ? prep_new_page+0x110/0x110 [ 1515.707979][T23463] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1515.714406][T23463] ? wp_page_copy+0x1f7/0x1690 [ 1515.719271][T23463] __folio_alloc+0x15/0x40 [ 1515.723624][T23463] wp_page_copy+0x261/0x1690 [ 1515.728062][T23463] ? preempt_schedule+0xd9/0xe0 [ 1515.732988][T23463] ? __kasan_check_read+0x11/0x20 [ 1515.737838][T23463] ? preempt_schedule_common+0xbe/0xf0 [ 1515.743130][T23463] ? preempt_schedule+0xd9/0xe0 [ 1515.747816][T23463] ? fault_dirty_shared_page+0x300/0x300 [ 1515.753378][T23463] ? preempt_schedule_thunk+0x16/0x18 [ 1515.758600][T23463] do_wp_page+0xc5c/0xf30 [ 1515.762957][T23463] handle_mm_fault+0x15e0/0x30e0 [ 1515.767734][T23463] ? numa_migrate_prep+0xe0/0xe0 [ 1515.772485][T23463] ? __rcu_read_unlock+0x7e/0xd0 [ 1515.777259][T23463] ? lock_vma_under_rcu+0x4aa/0x590 [ 1515.782313][T23463] ? debug_smp_processor_id+0x17/0x20 [ 1515.787500][T23463] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1515.793497][T23463] exc_page_fault+0x3b3/0x700 [ 1515.798639][T23463] asm_exc_page_fault+0x27/0x30 [ 1515.803437][T23463] RIP: 0033:0x7f81728498cf [ 1515.807692][T23463] Code: c4 0f 85 7b 03 00 00 48 8b 04 24 89 5c 24 14 c6 80 d0 00 00 00 01 80 3d 1a be df 00 00 74 10 48 8b 04 24 48 8d b8 98 00 00 00 4c a9 ff ff 48 8b 04 24 48 c7 80 88 00 00 00 ff ff ff ff e8 d8 [ 1515.827834][T23463] RSP: 002b:00007f8173748060 EFLAGS: 00010202 [ 1515.833747][T23463] RAX: 00007f8172b15f80 RBX: 0000000000000009 RCX: 0000000000000000 [ 1515.841739][T23463] RDX: 00007f8173748090 RSI: 00007f8173748090 RDI: 00007f8172b16018 [ 1515.850505][T23463] RBP: 00007f8173748090 R08: 0000000000000000 R09: 00007f8173747df7 [ 1515.858488][T23463] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1515.866398][T23463] R13: 0000000000000000 R14: 00007f8172b15f80 R15: 00007fff13110de8 [ 1515.874233][T23463] [ 1516.160693][T23463] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1516.707787][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1516.716226][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1516.733682][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1516.742415][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1516.750977][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.757897][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.765499][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1516.775627][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1516.785371][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.792325][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.865718][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1516.945669][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1516.964504][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1516.975365][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1516.984484][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1517.091632][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1517.117697][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1517.173785][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1517.187471][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1517.537896][T23419] device veth0_vlan entered promiscuous mode [ 1517.568213][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1517.575943][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1517.615351][T23419] device veth1_macvtap entered promiscuous mode [ 1517.710763][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1517.719300][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1517.730250][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1517.749653][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1517.758705][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1517.777453][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1517.796561][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1517.807451][ T2057] device bridge_slave_1 left promiscuous mode [ 1517.819809][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.850441][ T2057] device bridge_slave_0 left promiscuous mode [ 1517.860940][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.914630][ T2057] device veth1_macvtap left promiscuous mode [ 1518.805874][T23521] FAULT_INJECTION: forcing a failure. [ 1518.805874][T23521] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.840657][T23521] CPU: 1 PID: 23521 Comm: syz.2.7031 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1518.850687][T23521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1518.861190][T23521] Call Trace: [ 1518.864397][T23521] [ 1518.867177][T23521] dump_stack_lvl+0x151/0x1b7 [ 1518.871791][T23521] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1518.877187][T23521] dump_stack+0x15/0x1c [ 1518.881165][T23521] should_fail_ex+0x3d0/0x520 [ 1518.885682][T23521] ? __alloc_file+0x29/0x2a0 [ 1518.890106][T23521] __should_failslab+0xaf/0xf0 [ 1518.894727][T23521] should_failslab+0x9/0x20 [ 1518.899044][T23521] kmem_cache_alloc+0x3b/0x2c0 [ 1518.903657][T23521] ? _raw_spin_trylock_bh+0x190/0x190 [ 1518.908955][T23521] __alloc_file+0x29/0x2a0 [ 1518.913197][T23521] alloc_empty_file+0x95/0x180 [ 1518.917894][T23521] alloc_file+0x5a/0x5e0 [ 1518.922157][T23521] alloc_file_pseudo+0x259/0x2f0 [ 1518.926921][T23521] ? alloc_empty_file_noaccount+0x80/0x80 [ 1518.932476][T23521] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1518.937357][T23521] anon_inode_getfile+0xa7/0x180 [ 1518.942206][T23521] bpf_link_prime+0xed/0x250 [ 1518.946855][T23521] bpf_raw_tp_link_attach+0x2e6/0x6b0 [ 1518.952156][T23521] ? bpf_insn_prepare_dump+0x950/0x950 [ 1518.957476][T23521] ? __kasan_check_write+0x14/0x20 [ 1518.962395][T23521] ? fput+0x15b/0x1b0 [ 1518.966220][T23521] bpf_raw_tracepoint_open+0x22d/0x4a0 [ 1518.971615][T23521] ? bpf_obj_get_info_by_fd+0x3e60/0x3e60 [ 1518.977161][T23521] ? selinux_bpf+0xd2/0x100 [ 1518.981582][T23521] ? security_bpf+0x82/0xb0 [ 1518.986017][T23521] __sys_bpf+0x4f5/0x7f0 [ 1518.990096][T23521] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1518.995315][T23521] ? __ia32_sys_read+0x90/0x90 [ 1519.000002][T23521] ? debug_smp_processor_id+0x17/0x20 [ 1519.005204][T23521] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1519.011109][T23521] __x64_sys_bpf+0x7c/0x90 [ 1519.015358][T23521] x64_sys_call+0x87f/0x9a0 [ 1519.019709][T23521] do_syscall_64+0x3b/0xb0 [ 1519.024123][T23521] ? clear_bhb_loop+0x55/0xb0 [ 1519.028646][T23521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1519.034372][T23521] RIP: 0033:0x7f4414779e79 [ 1519.038625][T23521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.058156][T23521] RSP: 002b:00007f44155f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1519.066395][T23521] RAX: ffffffffffffffda RBX: 00007f4414915f80 RCX: 00007f4414779e79 [ 1519.074305][T23521] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011 [ 1519.082109][T23521] RBP: 00007f44155f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.090017][T23521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.097906][T23521] R13: 0000000000000000 R14: 00007f4414915f80 R15: 00007fffbf8329e8 [ 1519.106017][T23521] [ 1528.061958][T23674] device veth1_macvtap left promiscuous mode [ 1528.245978][T23677] device veth1_macvtap entered promiscuous mode [ 1528.400755][T23677] device macsec0 entered promiscuous mode [ 1529.203400][T23697] device pim6reg1 entered promiscuous mode [ 1529.412805][T23708] device pim6reg1 entered promiscuous mode [ 1530.670648][T23733] device pim6reg1 entered promiscuous mode [ 1530.727910][T23729] device syzkaller0 entered promiscuous mode [ 1552.594557][T23760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.601744][T23760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.610197][T23760] device bridge_slave_0 entered promiscuous mode [ 1552.684459][T21175] syz-executor (21175) used greatest stack depth: 20536 bytes left [ 1552.695717][T23760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.702845][T23760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.711405][T23760] device bridge_slave_1 entered promiscuous mode [ 1552.824944][T23775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.832804][T23775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.841547][T23775] device bridge_slave_0 entered promiscuous mode [ 1552.849652][T23775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.856829][T23775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.864991][T23775] device bridge_slave_1 entered promiscuous mode [ 1552.904135][T23761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.911162][T23761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.919860][T23761] device bridge_slave_0 entered promiscuous mode [ 1552.949808][T23776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.957179][T23776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.965301][T23776] device bridge_slave_0 entered promiscuous mode [ 1552.973228][T23776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.980244][T23776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.988402][T23776] device bridge_slave_1 entered promiscuous mode [ 1553.032980][T23761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.040229][T23761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.048915][T23761] device bridge_slave_1 entered promiscuous mode [ 1553.068943][T23771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.075858][T23771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.084615][T23771] device bridge_slave_0 entered promiscuous mode [ 1553.210980][T23771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.218752][T23771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.227120][T23771] device bridge_slave_1 entered promiscuous mode [ 1554.456316][T23761] device veth0_vlan entered promiscuous mode [ 1554.481224][T23761] device veth1_macvtap entered promiscuous mode [ 1554.776972][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1554.786241][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1554.800190][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1554.809291][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1554.817533][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1554.825750][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1554.837963][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1554.845886][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1554.854308][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1554.864048][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.873105][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.880039][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.888901][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1554.897696][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1554.906208][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.913157][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.921207][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1554.929693][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1554.938675][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1554.946729][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1554.954475][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1554.964048][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.973033][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.979998][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.987960][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1554.997257][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.005770][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.012718][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.020623][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1555.028496][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1555.168573][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1555.177107][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1555.185918][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1555.196421][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1555.205555][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1555.214728][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1555.223833][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1555.232586][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1555.241283][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1555.250303][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1555.259055][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.265966][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.273782][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1555.283369][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.292357][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.299384][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.307448][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1555.678334][T23775] device veth0_vlan entered promiscuous mode [ 1555.703394][T23775] device veth1_macvtap entered promiscuous mode [ 1555.781119][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1555.790109][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1555.798447][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1555.806262][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1555.814146][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1555.823061][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1555.831988][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.838995][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.846758][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1555.855626][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.864335][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.871289][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.878910][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1555.887708][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1555.896886][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1555.905540][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1555.916122][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1555.925300][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1555.934860][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1555.943488][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1555.952640][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1555.961539][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1555.970486][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1555.978883][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1555.987977][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1555.997573][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1556.006625][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1556.147091][T23771] device veth0_vlan entered promiscuous mode [ 1556.171453][T23771] device veth1_macvtap entered promiscuous mode [ 1556.345318][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1556.361648][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1556.369908][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1556.377867][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1556.386208][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1556.395313][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1556.404154][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1556.412729][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1556.420680][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1556.428850][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1556.437739][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1556.446641][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.453532][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.461549][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1556.470109][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1556.479087][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.485977][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.493877][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1556.502212][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1556.510912][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1556.519577][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1556.528180][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1556.537106][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1556.545779][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1556.554411][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1556.563563][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1556.572256][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1556.580954][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1556.589493][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1556.600643][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1556.609617][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1556.619015][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1556.782263][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1556.795844][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1556.804092][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1556.812486][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1556.837271][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1556.872057][T23776] device veth0_vlan entered promiscuous mode [ 1556.912089][T23776] device veth1_macvtap entered promiscuous mode [ 1557.092784][T23760] device veth0_vlan entered promiscuous mode [ 1557.117880][T23760] device veth1_macvtap entered promiscuous mode [ 1557.407445][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1557.416762][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1557.425560][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1557.433996][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1557.442985][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1557.452005][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1557.460887][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1557.470905][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1557.480174][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1557.489378][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1557.499054][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1557.508320][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1557.517286][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1557.526690][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1557.535464][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1557.544719][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1557.554210][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1557.563573][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1557.572980][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1557.582181][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1563.552178][ T28] audit: type=1400 audit(1724083108.588:146): avc: denied { ioctl } for pid=23835 comm="syz.2.7108" path="pid:[4026533100]" dev="nsfs" ino=4026533100 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1563.653261][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1563.677955][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1563.685689][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1564.029791][ T1048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1565.967178][T23845] device sit0 entered promiscuous mode [ 1566.162906][ T28] audit: type=1400 audit(1724083111.118:147): avc: denied { create } for pid=23869 comm="syz.2.7116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1634.267939][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 6320 jiffies s: 80565 root: 0x2/. [ 1634.279747][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 1634.286712][ T16] Sending NMI from CPU 0 to CPUs 1: [ 1634.291823][ C1] NMI backtrace for cpu 1 [ 1634.291847][ C1] CPU: 1 PID: 23913 Comm: syz.1.7129 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1634.291900][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1634.291928][ C1] RIP: 0010:preempt_count_sub+0xec/0x160 [ 1634.291996][ C1] Code: b6 04 30 84 c0 75 6f 83 3d f8 2f 23 06 00 75 94 48 c7 c7 e0 7d 69 85 48 c7 c6 c0 7e 69 85 e8 cb 19 f5 ff 0f 0b e9 7a ff ff ff <48> c7 c1 60 10 97 87 80 e1 07 80 c1 03 38 c1 0f 8c 2a ff ff ff 48 [ 1634.292048][ C1] RSP: 0000:ffffc900001b0358 EFLAGS: 00000002 [ 1634.292087][ C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1634.292121][ C1] RDX: 0000000000010102 RSI: 0000000000000046 RDI: 0000000000000001 [ 1634.292154][ C1] RBP: ffffc900001b0368 R08: ffffffff816726e1 R09: ffff8881284bcf78 [ 1634.292193][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7129c80 [ 1634.292231][ C1] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff8881f7129d78 [ 1634.292267][ C1] FS: 00007fae0b8a96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1634.292315][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1634.292351][ C1] CR2: 00007fae0b8a8f98 CR3: 00000001281b5000 CR4: 00000000003506a0 [ 1634.292392][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1634.292424][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1634.292457][ C1] Call Trace: [ 1634.292472][ C1] [ 1634.292490][ C1] ? show_regs+0x58/0x60 [ 1634.292540][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 1634.292602][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 1634.292670][ C1] ? preempt_count_sub+0xec/0x160 [ 1634.292727][ C1] ? preempt_count_sub+0xec/0x160 [ 1634.292786][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1634.292845][ C1] ? nmi_handle+0xa7/0x280 [ 1634.292900][ C1] ? preempt_count_sub+0xec/0x160 [ 1634.292960][ C1] ? default_do_nmi+0x69/0x160 [ 1634.293021][ C1] ? exc_nmi+0xad/0x100 [ 1634.293069][ C1] ? end_repeat_nmi+0x16/0x31 [ 1634.293128][ C1] ? hrtimer_interrupt+0x561/0xaa0 [ 1634.293205][ C1] ? preempt_count_sub+0xec/0x160 [ 1634.293264][ C1] ? preempt_count_sub+0xec/0x160 [ 1634.293324][ C1] ? preempt_count_sub+0xec/0x160 [ 1634.293384][ C1] [ 1634.293398][ C1] [ 1634.293416][ C1] _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1634.293497][ C1] hrtimer_interrupt+0x61b/0xaa0 [ 1634.293591][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1634.293675][ C1] sysvec_apic_timer_interrupt+0x44/0xc0 [ 1634.293731][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1634.293786][ C1] RIP: 0010:unwind_next_frame+0x4b/0x700 [ 1634.293848][ C1] Code: 49 c1 ef 03 41 0f b6 04 17 84 c0 0f 85 82 05 00 00 41 83 3e 00 0f 84 67 05 00 00 49 8d 5e 58 48 89 d8 48 c1 e8 03 48 89 45 a8 <80> 3c 10 00 74 12 48 89 df e8 c7 f6 84 00 48 ba 00 00 00 00 00 fc [ 1634.293889][ C1] RSP: 0000:ffffc900001b05b8 EFLAGS: 00000a02 [ 1634.293928][ C1] RAX: 1ffff920000360d3 RBX: ffffc900001b0698 RCX: ffffffff877a1000 [ 1634.293967][ C1] RDX: dffffc0000000000 RSI: ffffffff814615f0 RDI: ffffc900001b0640 [ 1634.294006][ C1] RBP: ffffc900001b0630 R08: ffffc900001b0728 R09: 000000000000000a [ 1634.294049][ C1] R10: ffffc900001b0730 R11: dffffc0000000001 R12: ffff88812e986540 [ 1634.294089][ C1] R13: ffffffff8165c3e0 R14: ffffc900001b0640 R15: 1ffff920000360c8 [ 1634.294129][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1634.294185][ C1] ? __init_begin+0x3a000/0x3a000 [ 1634.294270][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 1634.294338][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1634.294391][ C1] arch_stack_walk+0x10d/0x140 [ 1634.294460][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 1634.294523][ C1] stack_trace_save+0x113/0x1c0 [ 1634.294577][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1634.294629][ C1] ? perf_trace_kmalloc+0x4b/0x140 [ 1634.294689][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 1634.294768][ C1] ? __kasan_kmalloc+0x9c/0xb0 [ 1634.294838][ C1] ? kmalloc_trace+0x44/0xa0 [ 1634.294903][ C1] ref_tracker_alloc+0x175/0x450 [ 1634.294972][ C1] ? ref_tracker_dir_print+0x160/0x160 [ 1634.295045][ C1] ? dst_init+0xe1/0x400 [ 1634.295193][ C1] ? dst_alloc+0x18a/0x1e0 [ 1634.295260][ C1] ? icmp6_dst_alloc+0xf8/0x510 [ 1634.295385][ C1] ? ndisc_send_skb+0x28b/0xdc0 [ 1634.295442][ C1] ? ndisc_send_rs+0x47d/0x5f0 [ 1634.295499][ C1] ? addrconf_rs_timer+0x2d1/0x600 [ 1634.295558][ C1] ? call_timer_fn+0x3b/0x2d0 [ 1634.295626][ C1] ? __run_timers+0x72a/0xa10 [ 1634.295695][ C1] ? run_timer_softirq+0x69/0xf0 [ 1634.295762][ C1] ? __do_softirq+0x1d8/0x661 [ 1634.295818][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 1634.295880][ C1] ? dst_alloc+0x164/0x1e0 [ 1634.295954][ C1] dst_init+0xe1/0x400 [ 1634.296030][ C1] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 1634.296082][ C1] dst_alloc+0x18a/0x1e0 [ 1634.296154][ C1] icmp6_dst_alloc+0xf8/0x510 [ 1634.296224][ C1] ? icmpv6_flow_init+0xce/0x130 [ 1634.296333][ C1] ndisc_send_skb+0x28b/0xdc0 [ 1634.296401][ C1] ? ndisc_mc_map+0x920/0x920 [ 1634.296456][ C1] ? perf_trace_kmalloc+0x4b/0x140 [ 1634.296531][ C1] ? memcpy+0x56/0x70 [ 1634.296577][ C1] ? __ndisc_fill_addr_option+0xdb/0x130 [ 1634.296642][ C1] ndisc_send_rs+0x47d/0x5f0 [ 1634.296706][ C1] addrconf_rs_timer+0x2d1/0x600 [ 1634.296772][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1634.296837][ C1] ? __run_timers+0x6ff/0xa10 [ 1634.296905][ C1] ? call_timer_fn+0x2e/0x2d0 [ 1634.296975][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1634.297048][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1634.297113][ C1] call_timer_fn+0x3b/0x2d0 [ 1634.297183][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1634.297248][ C1] __run_timers+0x72a/0xa10 [ 1634.297330][ C1] ? calc_index+0x270/0x270 [ 1634.297414][ C1] run_timer_softirq+0x69/0xf0 [ 1634.297483][ C1] __do_softirq+0x1d8/0x661 [ 1634.297543][ C1] ? irqtime_account_irq+0xdc/0x260 [ 1634.297622][ C1] __irq_exit_rcu+0x50/0xf0 [ 1634.297679][ C1] irq_exit_rcu+0x9/0x10 [ 1634.297733][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1634.297791][ C1] [ 1634.297805][ C1] [ 1634.297823][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1634.297877][ C1] RIP: 0010:__schedule+0xcaf/0x1550 [ 1634.297938][ C1] Code: 44 24 68 42 0f b6 04 28 84 c0 0f 85 83 02 00 00 41 80 24 24 fc 4c 89 f7 48 8b 74 24 20 e8 29 b5 e2 fb 48 89 c7 e8 01 c8 32 fc <48> 8b 44 24 70 48 c7 84 24 80 00 00 00 0e 36 e0 45 49 c7 44 05 00 [ 1634.297980][ C1] RSP: 0000:ffffc90000a07d80 EFLAGS: 00000282 [ 1634.298025][ C1] RAX: 0000000080000001 RBX: 1ffff1103ee270fc RCX: 0000000000000002 [ 1634.298060][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 1634.298091][ C1] RBP: ffffc90000a07e90 R08: dffffc0000000000 R09: ffffed1025d30ca9 [ 1634.298130][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88812e986540 [ 1634.298166][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881f71387e0 [ 1634.298227][ C1] ? release_firmware_map_entry+0x191/0x191 [ 1634.298299][ C1] schedule+0xc3/0x180 [ 1634.298356][ C1] exit_to_user_mode_loop+0x4e/0xa0 [ 1634.298419][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1634.298483][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1634.298540][ C1] irqentry_exit+0x12/0x40 [ 1634.298591][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 1634.298649][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1634.298704][ C1] RIP: 0033:0x7fae0ab79e79 [ 1634.298741][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.298785][ C1] RSP: 002b:00007fae0b8a90e8 EFLAGS: 00000246 [ 1634.298824][ C1] RAX: 0000000000000001 RBX: 00007fae0ad16060 RCX: 00007fae0ab79e79 [ 1634.298859][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae0ad16064 [ 1634.298894][ C1] RBP: 00007fae0ad16058 R08: 00007fffba9e70b0 R09: 0000000000000000 [ 1634.298930][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fae0ad16064 [ 1634.298965][ C1] R13: 0000000000000000 R14: 00007fffba8decd0 R15: 00007fffba8dedb8 [ 1634.299021][ C1] [ 1637.766949][T23922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.773868][T23922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.782109][T23922] device bridge_slave_0 entered promiscuous mode [ 1637.789972][T23922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.816358][T23922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.824974][T23922] device bridge_slave_1 entered promiscuous mode [ 1638.478175][T23918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.485118][T23918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.493737][T23918] device bridge_slave_0 entered promiscuous mode [ 1638.579485][T23918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.587718][T23918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.595923][T23918] device bridge_slave_1 entered promiscuous mode [ 1638.855838][T23920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.863517][T23920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.871677][T23920] device bridge_slave_0 entered promiscuous mode [ 1638.879720][T23920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.886709][T23920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.894814][T23920] device bridge_slave_1 entered promiscuous mode [ 1638.988793][T23925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.995822][T23925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.004104][T23925] device bridge_slave_0 entered promiscuous mode [ 1639.013021][T23925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.020071][T23925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.028231][T23925] device bridge_slave_1 entered promiscuous mode [ 1639.805482][T23927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.812816][T23927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.821052][T23927] device bridge_slave_0 entered promiscuous mode [ 1639.828902][T23927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.835802][T23927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.844082][T23927] device bridge_slave_1 entered promiscuous mode [ 1640.398205][T23922] device veth0_vlan entered promiscuous mode [ 1640.422668][T23922] device veth1_macvtap entered promiscuous mode [ 1640.473904][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1640.482907][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1640.492588][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1640.501557][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1640.509348][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1640.517254][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1640.798750][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1640.806615][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1640.814334][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1640.823011][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1640.831735][T12122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.838659][T12122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.846130][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1640.854756][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1640.863225][T12122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.870146][T12122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.877572][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1640.885955][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1640.894269][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1640.903380][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1640.912123][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1640.920658][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1640.929301][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1641.205483][ T2057] device bridge_slave_1 left promiscuous mode [ 1641.214128][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.283498][ T2057] device bridge_slave_0 left promiscuous mode [ 1641.291612][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.431387][ T2057] device bridge_slave_1 left promiscuous mode [ 1641.438969][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.261157][ T2057] device bridge_slave_0 left promiscuous mode [ 1644.267324][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.293869][ T2057] device bridge_slave_1 left promiscuous mode [ 1644.300773][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.339144][ T2057] device bridge_slave_0 left promiscuous mode [ 1644.345320][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.374260][ T2057] device bridge_slave_1 left promiscuous mode [ 1644.380373][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.400225][ T2057] device bridge_slave_0 left promiscuous mode [ 1644.406414][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.421210][ T2057] device veth1_macvtap left promiscuous mode [ 1644.427296][ T2057] device veth0_vlan left promiscuous mode [ 1644.507531][ T2057] device veth1_macvtap left promiscuous mode [ 1644.513616][ T2057] device veth0_vlan left promiscuous mode [ 1644.521196][ T2057] device veth1_macvtap left promiscuous mode [ 1644.527220][ T2057] device veth0_vlan left promiscuous mode [ 1644.540791][ T2057] device veth1_macvtap left promiscuous mode [ 1644.547026][ T2057] device veth0_vlan left promiscuous mode [ 1646.344574][T23918] device veth0_vlan entered promiscuous mode [ 1646.483780][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1646.492237][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1646.500074][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1646.508977][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1646.517483][ T2755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.524645][ T2755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.532347][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1646.541196][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1646.549695][ T2755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.556621][ T2755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.564093][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1646.572513][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1646.580820][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1646.589193][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1646.597554][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1646.606488][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1646.615201][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1646.623567][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1646.641245][T23918] device veth1_macvtap entered promiscuous mode [ 1646.668146][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1646.676103][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1646.687635][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1646.695337][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1646.704110][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1646.713123][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1646.840561][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1646.849599][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1646.857491][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1646.866101][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1646.874920][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.881844][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.889353][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1646.898002][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1646.907167][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.914072][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.921495][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1646.930001][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1646.938327][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1646.946790][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1647.126621][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1647.134412][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1647.148008][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1647.156836][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1647.165415][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1670.979750][T23927] device veth0_vlan entered promiscuous mode [ 1671.066815][T23927] device veth1_macvtap entered promiscuous mode [ 1692.239691][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2106 jiffies s: 81617 root: 0x2/. [ 1692.251521][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 1692.258426][ T16] Sending NMI from CPU 0 to CPUs 1: [ 1692.263447][ C1] NMI backtrace for cpu 1 [ 1692.263470][ C1] CPU: 1 PID: 23976 Comm: syz.0.7130 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1692.263522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1692.263550][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 1692.263615][ C1] Code: 40 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 04 e1 fc 05 48 89 de e8 44 68 46 00 5b 5d c3 cc 55 48 89 e5 48 8b 45 08 <65> 48 8b 0d 00 cb 8c 7e 65 8b 15 01 cb 8c 7e f7 c2 00 01 ff 00 74 [ 1692.263658][ C1] RSP: 0000:ffffc900001afeb0 EFLAGS: 00000046 [ 1692.263698][ C1] RAX: ffffffff819f7dfa RBX: ffff8881284bdf00 RCX: 0000000000000000 [ 1692.263735][ C1] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff8881284bdea0 [ 1692.263769][ C1] RBP: ffffc900001afeb0 R08: dffffc0000000000 R09: ffffc900001aff60 [ 1692.263815][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000035fe8 [ 1692.263852][ C1] R13: dffffc0000000000 R14: ffff8881284bdc20 R15: 0000000000000008 [ 1692.263888][ C1] FS: 00007f508d7a06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1692.263934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1692.263969][ C1] CR2: 000055d4b5cda0c0 CR3: 000000012013c000 CR4: 00000000003506a0 [ 1692.264008][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1692.264041][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1692.264074][ C1] Call Trace: [ 1692.264089][ C1] [ 1692.264105][ C1] ? show_regs+0x58/0x60 [ 1692.264155][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 1692.264216][ C1] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 1692.264283][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1692.264338][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1692.264394][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1692.264453][ C1] ? nmi_handle+0xa7/0x280 [ 1692.264507][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1692.264563][ C1] ? default_do_nmi+0x69/0x160 [ 1692.264616][ C1] ? exc_nmi+0xad/0x100 [ 1692.264664][ C1] ? end_repeat_nmi+0x16/0x31 [ 1692.264723][ C1] ? perf_output_begin_forward+0x65a/0x9b0 [ 1692.264807][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1692.264864][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1692.264921][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 1692.264977][ C1] [ 1692.264992][ C1] [ 1692.265007][ C1] perf_output_begin_forward+0x65a/0x9b0 [ 1692.265084][ C1] ? perf_prepare_sample+0x179f/0x1ca0 [ 1692.265137][ C1] ? perf_reboot+0xc0/0xc0 [ 1692.265215][ C1] perf_event_output_forward+0x10b/0x1b0 [ 1692.265265][ C1] ? find_next_clump8+0x1c0/0x1c0 [ 1692.265318][ C1] ? perf_get_page_size+0x4c0/0x4c0 [ 1692.265369][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 1692.265419][ C1] ? arch_irq_work_raise+0xc7/0xd0 [ 1692.265483][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 1692.265541][ C1] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 1692.265600][ C1] __perf_event_overflow+0x458/0x630 [ 1692.265656][ C1] perf_swevent_hrtimer+0x38e/0x4f0 [ 1692.265727][ C1] ? __raise_softirq_irqoff+0xe0/0xe0 [ 1692.265791][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1692.265889][ C1] ? timerqueue_add+0x250/0x270 [ 1692.265966][ C1] ? timerqueue_del+0xb4/0x100 [ 1692.266035][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1692.266107][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 1692.266193][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1692.266267][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1692.266323][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 1692.266415][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1692.266497][ C1] sysvec_apic_timer_interrupt+0x44/0xc0 [ 1692.266553][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1692.266608][ C1] RIP: 0010:__stack_depot_save+0x151/0x480 [ 1692.266676][ C1] Code: 41 29 cc 44 31 e0 44 89 e1 c1 c1 04 29 c8 31 c6 c1 c0 0e 29 c6 41 31 f4 c1 c6 18 41 29 f4 eb 03 45 89 f0 48 8b 05 f7 d7 fc 04 <8b> 0d ed d7 fc 04 44 21 e1 48 89 45 a8 48 89 4d b0 4c 8b 2c c8 45 [ 1692.266718][ C1] RSP: 0000:ffffc900001b0740 EFLAGS: 00000296 [ 1692.266756][ C1] RAX: ffff8881f5c00000 RBX: 0000000000000000 RCX: 00000000ab23c375 [ 1692.266792][ C1] RDX: ffffc900001b0848 RSI: 0000000020855d39 RDI: 0000000000000001 [ 1692.266834][ C1] RBP: ffffc900001b07a0 R08: 0000000000000a20 R09: 0000000000000000 [ 1692.266867][ C1] R10: 000000000000000a R11: dffffc0000000001 R12: 00000000bf69a7de [ 1692.266902][ C1] R13: 0000000000000001 R14: 0000000000000a20 R15: ffffc900001b0800 [ 1692.266948][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 1692.267026][ C1] ? __kasan_kmalloc+0x9c/0xb0 [ 1692.267099][ C1] stack_depot_save+0x13/0x20 [ 1692.267161][ C1] ref_tracker_alloc+0x182/0x450 [ 1692.267228][ C1] ? ref_tracker_dir_print+0x160/0x160 [ 1692.267293][ C1] ? dst_init+0xe1/0x400 [ 1692.267358][ C1] ? dst_alloc+0x18a/0x1e0 [ 1692.267425][ C1] ? icmp6_dst_alloc+0xf8/0x510 [ 1692.267492][ C1] ? ndisc_send_skb+0x28b/0xdc0 [ 1692.267549][ C1] ? ndisc_send_rs+0x47d/0x5f0 [ 1692.267606][ C1] ? addrconf_rs_timer+0x2d1/0x600 [ 1692.267665][ C1] ? call_timer_fn+0x3b/0x2d0 [ 1692.267732][ C1] ? __run_timers+0x72a/0xa10 [ 1692.267806][ C1] ? run_timer_softirq+0x69/0xf0 [ 1692.267873][ C1] ? __do_softirq+0x1d8/0x661 [ 1692.267929][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 1692.267985][ C1] ? irq_exit_rcu+0x9/0x10 [ 1692.268041][ C1] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1692.268095][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1692.268152][ C1] ? preempt_schedule_irq+0xc2/0x140 [ 1692.268211][ C1] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1692.268277][ C1] ? dst_alloc+0x164/0x1e0 [ 1692.268350][ C1] dst_init+0xe1/0x400 [ 1692.268418][ C1] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 1692.268469][ C1] dst_alloc+0x18a/0x1e0 [ 1692.268540][ C1] icmp6_dst_alloc+0xf8/0x510 [ 1692.268609][ C1] ? icmpv6_flow_init+0xce/0x130 [ 1692.268687][ C1] ndisc_send_skb+0x28b/0xdc0 [ 1692.268755][ C1] ? ndisc_mc_map+0x920/0x920 [ 1692.268832][ C1] ? memcpy+0x56/0x70 [ 1692.268876][ C1] ? __ndisc_fill_addr_option+0xdb/0x130 [ 1692.268939][ C1] ndisc_send_rs+0x47d/0x5f0 [ 1692.269002][ C1] addrconf_rs_timer+0x2d1/0x600 [ 1692.269065][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1692.269129][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1692.269204][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1692.269283][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1692.269346][ C1] call_timer_fn+0x3b/0x2d0 [ 1692.269417][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 1692.269479][ C1] __run_timers+0x72a/0xa10 [ 1692.269559][ C1] ? calc_index+0x270/0x270 [ 1692.269640][ C1] run_timer_softirq+0x69/0xf0 [ 1692.269710][ C1] __do_softirq+0x1d8/0x661 [ 1692.269769][ C1] ? irqtime_account_irq+0xdc/0x260 [ 1692.269853][ C1] __irq_exit_rcu+0x50/0xf0 [ 1692.269910][ C1] irq_exit_rcu+0x9/0x10 [ 1692.269965][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1692.270020][ C1] [ 1692.270035][ C1] [ 1692.270052][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1692.270109][ C1] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 1692.270172][ C1] Code: 4c 89 e7 e8 00 1e 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 b4 d5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 3e d7 31 fc 65 48 8b 1d d6 c3 [ 1692.270212][ C1] RSP: 0000:ffffc90000c67d40 EFLAGS: 00000246 [ 1692.270251][ C1] RAX: 1ffff11023f1b669 RBX: 1ffff9200018cfac RCX: ffffffff851fa900 [ 1692.270289][ C1] RDX: 1ffffffff0f2d208 RSI: 0000000000000000 RDI: 0000000000000001 [ 1692.270321][ C1] RBP: ffffc90000c67dd8 R08: ffffffff87969040 R09: ffffffff87969048 [ 1692.270361][ C1] R10: ffffffff87969058 R11: ffffffff87969050 R12: ffffc90000c67d60 [ 1692.270398][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200018cfa8 [ 1692.270440][ C1] ? queued_write_lock_slowpath+0x4e0/0x547 [ 1692.270495][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 1692.270556][ C1] ? clockevents_program_event+0x22f/0x300 [ 1692.270611][ C1] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1692.270674][ C1] irqentry_exit+0x30/0x40 [ 1692.270726][ C1] sysvec_irq_work+0x52/0xb0 [ 1692.270776][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 1692.270834][ C1] RIP: 0010:exit_to_user_mode_loop+0x47/0xa0 [ 1692.270899][ C1] Code: 0c 00 00 e8 db 2f 5d 00 e8 a6 83 02 01 fa e8 60 6b b5 03 65 48 8b 05 88 bf 9e 7e 48 8b 18 f7 c3 0e 30 02 00 74 53 fb f6 c3 08 <74> 05 e8 82 f5 b9 03 f7 c3 00 10 00 00 74 08 4c 89 f7 e8 92 f4 3c [ 1692.270941][ C1] RSP: 0000:ffffc90000c67ed0 EFLAGS: 00000202 [ 1692.270979][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000010000 [ 1692.271011][ C1] RDX: 1ffffffff0f2d208 RSI: 0000000000000008 RDI: ffffc90000c67f58 [ 1692.271048][ C1] RBP: ffffc90000c67ee0 R08: ffffffff87969040 R09: ffffffff87969048 [ 1692.271087][ C1] R10: ffffffff87969058 R11: ffffffff87969050 R12: 0000000000000000 [ 1692.271123][ C1] R13: 0000000000000000 R14: ffffc90000c67f58 R15: ffff88811f8da880 [ 1692.271174][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1692.271238][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1692.271293][ C1] irqentry_exit+0x12/0x40 [ 1692.271349][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 1692.271404][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1692.271459][ C1] RIP: 0033:0x7f508c979e79 [ 1692.271494][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1692.271535][ C1] RSP: 002b:00007f508d7a0038 EFLAGS: 00000246 [ 1692.271573][ C1] RAX: 0000000000000000 RBX: 00007f508cb15f80 RCX: 00007f508c979e79 [ 1692.271608][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 1692.271640][ C1] RBP: 00007f508c9e7916 R08: 0000000000000000 R09: 0000000000000000 [ 1692.271673][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.271705][ C1] R13: 0000000000000000 R14: 00007f508cb15f80 R15: 00007ffdaf6ba7b8 [ 1692.271752][ C1] [ 1716.825649][T23925] device veth0_vlan entered promiscuous mode [ 1717.039927][T23925] device veth1_macvtap entered promiscuous mode [ 1720.151164][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2162 jiffies s: 81621 root: 0x1/. [ 1720.162874][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 1720.169816][ T16] Sending NMI from CPU 1 to CPUs 0: [ 1720.174835][ C0] NMI backtrace for cpu 0 [ 1720.174861][ C0] CPU: 0 PID: 23976 Comm: syz.0.7130 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1720.174913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1720.174940][ C0] RIP: 0010:__rcu_read_unlock+0x6/0xd0 [ 1720.175017][ C0] Code: 4c 89 ff e8 ac 4f 5b 00 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 7c d0 4c 89 ff e8 35 50 5b 00 eb c6 0f 1f 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 4c 8b 35 a1 [ 1720.175059][ C0] RSP: 0018:ffffc90000007230 EFLAGS: 00000046 [ 1720.175101][ C0] RAX: ffffffff81ca9ab5 RBX: ffff888123f6fd58 RCX: ffff88811f8da880 [ 1720.175140][ C0] RDX: 0000000000010101 RSI: 0000000000000004 RDI: 0000000000000001 [ 1720.175172][ C0] RBP: ffffc90000007238 R08: dffffc0000000000 R09: ffffed10247edfa9 [ 1720.175210][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000046 [ 1720.175244][ C0] R13: ffff888112737580 R14: dffffc0000000000 R15: 0000000000000000 [ 1720.175281][ C0] FS: 00007f508d7a06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1720.175326][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1720.175362][ C0] CR2: 000055d4b5ce0e38 CR3: 000000012013c000 CR4: 00000000003506b0 [ 1720.175402][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1720.175433][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1720.175466][ C0] Call Trace: [ 1720.175480][ C0] [ 1720.175497][ C0] ? show_regs+0x58/0x60 [ 1720.175546][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 1720.175607][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 1720.175676][ C0] ? __rcu_read_unlock+0x6/0xd0 [ 1720.175741][ C0] ? __rcu_read_unlock+0x6/0xd0 [ 1720.175809][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1720.175909][ C0] ? nmi_handle+0xa7/0x280 [ 1720.175963][ C0] ? __rcu_read_unlock+0x6/0xd0 [ 1720.176031][ C0] ? default_do_nmi+0x69/0x160 [ 1720.176083][ C0] ? exc_nmi+0xad/0x100 [ 1720.176130][ C0] ? end_repeat_nmi+0x16/0x31 [ 1720.176189][ C0] ? kill_fasync+0x215/0x250 [ 1720.176255][ C0] ? __rcu_read_unlock+0x6/0xd0 [ 1720.176321][ C0] ? __rcu_read_unlock+0x6/0xd0 [ 1720.176389][ C0] ? __rcu_read_unlock+0x6/0xd0 [ 1720.176456][ C0] [ 1720.176471][ C0] [ 1720.176486][ C0] kill_fasync+0x221/0x250 [ 1720.176554][ C0] perf_pending_irq+0x2b2/0x7a0 [ 1720.176617][ C0] ? sched_clock+0x9/0x10 [ 1720.176693][ C0] irq_work_run_list+0x1d8/0x2f0 [ 1720.176739][ C0] ? irq_work_run+0xf0/0xf0 [ 1720.176830][ C0] irq_work_run+0x69/0xf0 [ 1720.176905][ C0] __sysvec_irq_work+0x63/0x1b0 [ 1720.176966][ C0] sysvec_irq_work+0x41/0xb0 [ 1720.177016][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 1720.177068][ C0] RIP: 0010:ref_tracker_alloc+0x341/0x450 [ 1720.177136][ C0] Code: 00 e8 d3 c2 d4 fe 31 c0 4d 89 e6 48 8b 5c 24 08 48 c7 44 24 20 0e 36 e0 45 41 c7 04 1e 00 00 00 00 41 c7 44 1e 14 00 00 00 00 <65> 48 8b 0c 25 28 00 00 00 48 3b 8c 24 e0 00 00 00 0f 85 e9 00 00 [ 1720.177179][ C0] RSP: 0018:ffffc900000074c0 EFLAGS: 00000246 [ 1720.177218][ C0] RAX: 0000000000000000 RBX: 1ffff92000000e9c RCX: 0000000000000102 [ 1720.177253][ C0] RDX: 0000000000000102 RSI: 0000000000000246 RDI: 0000000000000001 [ 1720.177285][ C0] RBP: ffffc90000007600 R08: dffffc0000000000 R09: 0000000000000003 [ 1720.177321][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810ffa24f8 [ 1720.177360][ C0] R13: 0000000000000246 R14: dffffc0000000000 R15: ffff88811f6a09c0 [ 1720.177412][ C0] ? ref_tracker_dir_print+0x160/0x160 [ 1720.177478][ C0] ? ___neigh_create+0xb6e/0x1db0 [ 1720.177552][ C0] ? __neigh_create+0x32/0x40 [ 1720.177622][ C0] ? ip6_finish_output2+0x9d0/0x1840 [ 1720.177778][ C0] ? ip6_finish_output+0x50f/0xa60 [ 1720.177859][ C0] ? ip6_output+0x1f7/0x4d0 [ 1720.177927][ C0] ? ndisc_send_skb+0x7cf/0xdc0 [ 1720.177984][ C0] ? ndisc_send_rs+0x47d/0x5f0 [ 1720.178040][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 1720.178098][ C0] ? call_timer_fn+0x3b/0x2d0 [ 1720.178166][ C0] ? __run_timers+0x72a/0xa10 [ 1720.178233][ C0] ? run_timer_softirq+0x69/0xf0 [ 1720.178300][ C0] ? __do_softirq+0x1d8/0x661 [ 1720.178354][ C0] ? __irq_exit_rcu+0x50/0xf0 [ 1720.178411][ C0] ? irq_exit_rcu+0x9/0x10 [ 1720.178465][ C0] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1720.178519][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1720.178575][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 1720.178700][ C0] ? __kasan_kmalloc+0x9c/0xb0 [ 1720.178775][ C0] ___neigh_create+0xb6e/0x1db0 [ 1720.178855][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 1720.178912][ C0] ? irqentry_exit+0x30/0x40 [ 1720.178971][ C0] ? sk_mc_loop+0x71/0x220 [ 1720.179058][ C0] __neigh_create+0x32/0x40 [ 1720.179132][ C0] ip6_finish_output2+0x9d0/0x1840 [ 1720.179224][ C0] ? ip6_make_skb+0x7a0/0x7a0 [ 1720.179299][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 1720.179355][ C0] ? nf_hook_slow+0xd1/0x200 [ 1720.179457][ C0] ? ip6_finish_output+0x369/0xa60 [ 1720.179535][ C0] ip6_finish_output+0x50f/0xa60 [ 1720.179617][ C0] ip6_output+0x1f7/0x4d0 [ 1720.179691][ C0] ? ac6_seq_show+0xf0/0xf0 [ 1720.179764][ C0] ? ip6_output+0x4d0/0x4d0 [ 1720.179851][ C0] ndisc_send_skb+0x7cf/0xdc0 [ 1720.179918][ C0] ? ndisc_mc_map+0x920/0x920 [ 1720.179975][ C0] ? ndisc_send_skb+0xdc0/0xdc0 [ 1720.180041][ C0] ? __kasan_check_write+0x14/0x20 [ 1720.180088][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 1720.180137][ C0] ? skb_put+0x11e/0x210 [ 1720.180203][ C0] ndisc_send_rs+0x47d/0x5f0 [ 1720.180265][ C0] addrconf_rs_timer+0x2d1/0x600 [ 1720.180329][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 1720.180393][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1720.180469][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1720.180548][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 1720.180611][ C0] call_timer_fn+0x3b/0x2d0 [ 1720.180680][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 1720.180744][ C0] __run_timers+0x72a/0xa10 [ 1720.180849][ C0] ? calc_index+0x270/0x270 [ 1720.180916][ C0] ? __irq_exit_rcu+0x5c/0xf0 [ 1720.180975][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 1720.181037][ C0] run_timer_softirq+0x69/0xf0 [ 1720.181106][ C0] __do_softirq+0x1d8/0x661 [ 1720.181165][ C0] ? irqtime_account_irq+0xdc/0x260 [ 1720.181243][ C0] __irq_exit_rcu+0x50/0xf0 [ 1720.181300][ C0] irq_exit_rcu+0x9/0x10 [ 1720.181355][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1720.181411][ C0] [ 1720.181425][ C0] [ 1720.181442][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1720.181498][ C0] RIP: 0010:finish_task_switch+0x16f/0x7b0 [ 1720.181570][ C0] Code: 74 08 4c 89 ff e8 31 63 6c 00 49 8b 1f 48 85 db 4c 8b 6d c0 0f 85 ce 00 00 00 4c 89 e7 e8 b9 0e cf 03 fb 49 8d 9d 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 [ 1720.181612][ C0] RSP: 0018:ffffc90000c67bc0 EFLAGS: 00000282 [ 1720.181652][ C0] RAX: 0000000080000001 RBX: ffff88811f8db3c8 RCX: 0000000000000002 [ 1720.181687][ C0] RDX: 0000000040000002 RSI: 0000000000000000 RDI: 0000000000000001 [ 1720.181719][ C0] RBP: ffffc90000c67c10 R08: ffffffff819b54a0 R09: fffffbfff0ee5127 [ 1720.181758][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7037c80 [ 1720.181795][ C0] R13: ffff88811f8da880 R14: 1ffff1103ee070fc R15: ffff8881f70387e0 [ 1720.181847][ C0] ? __perf_event_task_sched_in+0x180/0x1f0 [ 1720.181937][ C0] __schedule+0xcaf/0x1550 [ 1720.182003][ C0] ? release_firmware_map_entry+0x191/0x191 [ 1720.182067][ C0] ? queued_write_lock_slowpath+0x4e0/0x547 [ 1720.182120][ C0] preempt_schedule_irq+0xc7/0x140 [ 1720.182179][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 1720.182240][ C0] ? clockevents_program_event+0x22f/0x300 [ 1720.182296][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1720.182360][ C0] irqentry_exit+0x30/0x40 [ 1720.182411][ C0] sysvec_irq_work+0x52/0xb0 [ 1720.182462][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 1720.182513][ C0] RIP: 0010:exit_to_user_mode_loop+0x47/0xa0 [ 1720.182578][ C0] Code: 0c 00 00 e8 db 2f 5d 00 e8 a6 83 02 01 fa e8 60 6b b5 03 65 48 8b 05 88 bf 9e 7e 48 8b 18 f7 c3 0e 30 02 00 74 53 fb f6 c3 08 <74> 05 e8 82 f5 b9 03 f7 c3 00 10 00 00 74 08 4c 89 f7 e8 92 f4 3c [ 1720.182619][ C0] RSP: 0000:ffffc90000c67ed0 EFLAGS: 00000202 [ 1720.182658][ C0] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000010000 [ 1720.182689][ C0] RDX: 1ffffffff0f2d208 RSI: 0000000000000008 RDI: ffffc90000c67f58 [ 1720.182726][ C0] RBP: ffffc90000c67ee0 R08: ffffffff87969040 R09: ffffffff87969048 [ 1720.182764][ C0] R10: ffffffff87969058 R11: ffffffff87969050 R12: 0000000000000000 [ 1720.182800][ C0] R13: 0000000000000000 R14: ffffc90000c67f58 R15: ffff88811f8da880 [ 1720.182857][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 1720.182921][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 1720.182976][ C0] irqentry_exit+0x12/0x40 [ 1720.183028][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 1720.183084][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1720.183139][ C0] RIP: 0033:0x7f508c979e79 [ 1720.183175][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1720.183216][ C0] RSP: 002b:00007f508d7a0038 EFLAGS: 00000246 [ 1720.183254][ C0] RAX: 0000000000000000 RBX: 00007f508cb15f80 RCX: 00007f508c979e79 [ 1720.183289][ C0] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 1720.183322][ C0] RBP: 00007f508c9e7916 R08: 0000000000000000 R09: 0000000000000000 [ 1720.183356][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1720.183387][ C0] R13: 0000000000000000 R14: 00007f508cb15f80 R15: 00007ffdaf6ba7b8 [ 1720.183434][ C0] [ 1752.130372][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1752.138366][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1752.146096][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1752.154735][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1752.163125][T12122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.170051][T12122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.177564][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1752.186148][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1752.194521][T12122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.201469][T12122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1752.208900][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1752.217329][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1752.225606][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1752.233983][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1752.242277][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1752.250887][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1752.259589][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1752.267928][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1752.276757][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1752.285207][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1752.293673][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1752.302211][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1752.310826][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1752.319396][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1752.328005][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1752.336642][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1752.345368][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1752.353672][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1752.362522][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1752.371013][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1752.379460][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1752.387418][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1752.396119][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1752.404760][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1752.413313][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1752.422956][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1752.431035][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1752.438818][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1752.446621][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1752.454333][T12122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1848.537119][T24025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.544142][T24025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.557542][T24025] device bridge_slave_0 entered promiscuous mode [ 1851.697675][T24053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.704598][T24053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.712856][T24053] device bridge_slave_0 entered promiscuous mode [ 1851.720961][T24053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.728121][T24053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.736229][T24053] device bridge_slave_1 entered promiscuous mode [ 1851.910869][T24054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.918482][T24054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.926655][T24054] device bridge_slave_0 entered promiscuous mode [ 1851.952696][T24054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.973919][T24054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.982309][T24054] device bridge_slave_1 entered promiscuous mode [ 1852.391328][T24056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.398754][T24056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.406888][T24056] device bridge_slave_0 entered promiscuous mode [ 1852.493912][T24056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.500941][T24056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.509106][T24056] device bridge_slave_1 entered promiscuous mode [ 1852.853487][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1852.864123][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1852.872196][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1852.882094][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1852.890503][T14236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.897435][T14236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.904815][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1852.913578][T14236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1852.922106][T14236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.929065][T14236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.989107][T24053] device veth0_vlan entered promiscuous mode [ 1853.013345][T24053] device veth1_macvtap entered promiscuous mode [ 1853.140633][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1853.149452][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1853.158437][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1853.167676][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1853.175941][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1853.184507][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1853.192974][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1853.201815][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1853.210647][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1853.218934][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1853.227842][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1853.236637][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1853.245554][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1853.254397][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1853.629479][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1853.637377][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1853.897745][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1853.905581][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1853.913419][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1853.922419][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1853.930919][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.937836][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.945237][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1853.954153][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1853.962752][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.970022][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.977639][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1853.987613][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1854.046107][T24074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1854.059020][T24074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1854.067804][T24074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1854.111957][T24054] device veth0_vlan entered promiscuous mode [ 1854.347383][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1854.356129][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1854.365026][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1854.376198][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1854.544615][T24088] tun0: tun_chr_ioctl cmd 1074025675 [ 1854.550018][T24088] tun0: persist enabled [ 1854.563004][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1854.571077][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1854.587596][T24054] device veth1_macvtap entered promiscuous mode [ 1855.427505][T24056] device veth0_vlan entered promiscuous mode [ 1855.453405][T24056] device veth1_macvtap entered promiscuous mode [ 1855.607955][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1855.664875][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1855.723737][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1855.736706][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1855.788755][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1855.797471][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1855.806025][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1855.870259][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1855.879071][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1855.886939][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1855.896748][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1855.905180][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.912731][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1855.920201][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1855.929568][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1855.938049][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.945524][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.953051][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1855.961579][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1855.970160][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1855.978766][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1855.987494][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1855.996131][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1856.005016][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1856.013761][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1856.022518][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1856.031187][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1856.203848][T24079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.211135][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.219358][T24079] device bridge_slave_0 entered promiscuous mode [ 1856.285470][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1856.307025][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1856.315725][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1856.324791][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1856.333946][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1856.346669][T24079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.353582][T24079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.363331][T24079] device bridge_slave_1 entered promiscuous mode [ 1956.846298][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1956.853568][ C1] (detected by 1, t=10002 jiffies, g=92089, q=264 ncpus=2) [ 1956.860766][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295132894-4295122891), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1956.874478][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g92089 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1956.885555][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1956.895461][ C1] rcu: RCU grace-period kthread stack dump: [ 1956.901216][ C1] task:rcu_preempt state:R running task stack:27496 pid:14 ppid:2 flags:0x00004000 [ 1956.912023][ C1] Call Trace: [ 1956.915110][ C1] [ 1956.917876][ C1] __schedule+0xca7/0x1550 [ 1956.922305][ C1] ? release_firmware_map_entry+0x191/0x191 [ 1956.928025][ C1] ? __kasan_check_write+0x14/0x20 [ 1956.932975][ C1] schedule+0xc3/0x180 [ 1956.936979][ C1] schedule_timeout+0x18c/0x380 [ 1956.941787][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 1956.946822][ C1] ? console_conditional_schedule+0x10/0x10 [ 1956.952548][ C1] ? update_process_times+0x1b0/0x1b0 [ 1956.957860][ C1] ? prepare_to_swait_event+0x308/0x320 [ 1956.963347][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 1956.968018][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 1956.973141][ C1] ? rcu_gp_init+0xc7f/0xfa0 [ 1956.977563][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 1956.982004][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1956.988212][ C1] ? finish_swait+0x17d/0x1b0 [ 1956.992996][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 1956.997577][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 1957.003035][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 1957.008079][ C1] ? __kasan_check_read+0x11/0x20 [ 1957.013022][ C1] ? __kthread_parkme+0x12d/0x180 [ 1957.018097][ C1] kthread+0x26d/0x300 [ 1957.021958][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 1957.027432][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1957.031862][ C1] ret_from_fork+0x1f/0x30 [ 1957.036201][ C1] [ 1957.039054][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1957.045313][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1957.050490][ C0] NMI backtrace for cpu 0 [ 1957.050522][ C0] CPU: 0 PID: 24116 Comm: syz.3.7156 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1957.050588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1957.050618][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.050690][ C0] Code: 11 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 <48> 89 e5 4c 8b 45 08 65 48 8b 15 50 c7 8c 7e 65 8b 05 51 c7 8c 7e [ 1957.050734][ C0] RSP: 0018:ffffc90000006ae0 EFLAGS: 00000082 [ 1957.050777][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88810eea1440 [ 1957.050811][ C0] RDX: 0000000000010301 RSI: 0000000000000000 RDI: 0000000000000008 [ 1957.050874][ C0] RBP: ffffc90000006b08 R08: ffffffff87969000 R09: ffffffff87969008 [ 1957.050914][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: 0000000000000000 [ 1957.050960][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1957.050992][ C0] FS: 00007f69b8d0f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1957.051038][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1957.051074][ C0] CR2: 0000000000000000 CR3: 0000000130a80000 CR4: 00000000003506b0 [ 1957.051113][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1957.051144][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1957.051276][ C0] Call Trace: [ 1957.051291][ C0] [ 1957.051310][ C0] ? show_regs+0x58/0x60 [ 1957.051362][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 1957.051423][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 1957.051488][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.051547][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.051608][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1957.051668][ C0] ? nmi_handle+0xa7/0x280 [ 1957.051721][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.051781][ C0] ? default_do_nmi+0x69/0x160 [ 1957.051834][ C0] ? exc_nmi+0xad/0x100 [ 1957.051882][ C0] ? end_repeat_nmi+0x16/0x31 [ 1957.051946][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.052006][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.052079][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 1957.052139][ C0] [ 1957.052155][ C0] [ 1957.052169][ C0] ? irq_work_run+0x24/0xf0 [ 1957.052266][ C0] __sysvec_irq_work+0x63/0x1b0 [ 1957.052329][ C0] sysvec_irq_work+0x41/0xb0 [ 1957.052379][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 1957.052432][ C0] RIP: 0010:stack_trace_consume_entry+0xfb/0x290 [ 1957.052563][ C0] Code: 00 fc ff df 4c 8b 33 41 8d 59 01 41 0f b6 04 17 84 c0 0f 85 38 01 00 00 41 89 1a 4b 8d 1c ce 48 89 d8 48 c1 e8 03 80 3c 10 00 <74> 1e 48 89 df 49 89 d6 49 89 f7 4d 89 c5 e8 62 03 57 00 4d 89 e8 [ 1957.052609][ C0] RSP: 0018:ffffc90000006c08 EFLAGS: 00000246 [ 1957.052653][ C0] RAX: 1ffff92000000dda RBX: ffffc90000006ed0 RCX: ffffffff877a1000 [ 1957.052696][ C0] RDX: dffffc0000000000 RSI: ffffffff851912d0 RDI: ffffc90000006d4c [ 1957.052738][ C0] RBP: ffffc90000006c50 R08: ffffc90000006d48 R09: 000000000000001c [ 1957.052778][ C0] R10: ffffc90000006d50 R11: dffffc0000000001 R12: 1ffff92000000da9 [ 1957.052829][ C0] R13: 1ffff92000000da9 R14: ffffc90000006df0 R15: 1ffff92000000daa [ 1957.052877][ C0] ? __init_begin+0x3a000/0x3a000 [ 1957.052930][ C0] ? irqentry_exit+0x30/0x40 [ 1957.053049][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 1957.053102][ C0] arch_stack_walk+0x101/0x140 [ 1957.053170][ C0] ? irqentry_exit+0x30/0x40 [ 1957.053227][ C0] stack_trace_save+0x113/0x1c0 [ 1957.053279][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1957.053337][ C0] ? kfree+0x7a/0xf0 [ 1957.053396][ C0] ? kfree+0x7a/0xf0 [ 1957.053455][ C0] kasan_set_track+0x4b/0x70 [ 1957.053519][ C0] ? kasan_set_track+0x4b/0x70 [ 1957.053582][ C0] ? kasan_save_free_info+0x2b/0x40 [ 1957.053659][ C0] ? ____kasan_slab_free+0x131/0x180 [ 1957.053727][ C0] ? __kasan_slab_free+0x11/0x20 [ 1957.053793][ C0] ? __kmem_cache_free+0x218/0x3b0 [ 1957.053844][ C0] ? kfree+0x7a/0xf0 [ 1957.053903][ C0] ? skb_release_data+0x616/0x840 [ 1957.053963][ C0] ? kfree_skb_reason+0xd3/0x250 [ 1957.054030][ C0] ? xfrmi_xmit+0xa9c/0x14b0 [ 1957.054081][ C0] ? dev_hard_start_xmit+0x1de/0x630 [ 1957.054155][ C0] ? __dev_queue_xmit+0x18a4/0x36e0 [ 1957.054231][ C0] ? neigh_connected_output+0x449/0x4d0 [ 1957.054308][ C0] ? ip6_finish_output2+0x122b/0x1840 [ 1957.054385][ C0] ? ip6_finish_output+0x50f/0xa60 [ 1957.054456][ C0] ? ip6_output+0x1f7/0x4d0 [ 1957.054525][ C0] ? ndisc_send_skb+0x7cf/0xdc0 [ 1957.054582][ C0] ? ndisc_send_rs+0x47d/0x5f0 [ 1957.054637][ C0] ? addrconf_rs_timer+0x2d1/0x600 [ 1957.054696][ C0] ? call_timer_fn+0x3b/0x2d0 [ 1957.054777][ C0] ? __run_timers+0x72a/0xa10 [ 1957.054845][ C0] ? run_timer_softirq+0x69/0xf0 [ 1957.054910][ C0] ? __do_softirq+0x1d8/0x661 [ 1957.054966][ C0] ? __irq_exit_rcu+0x50/0xf0 [ 1957.055029][ C0] ? irq_exit_rcu+0x9/0x10 [ 1957.055084][ C0] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1957.055139][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1957.055193][ C0] ? preempt_schedule_irq+0xc2/0x140 [ 1957.055253][ C0] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1957.055339][ C0] kasan_save_free_info+0x2b/0x40 [ 1957.055416][ C0] ____kasan_slab_free+0x131/0x180 [ 1957.055488][ C0] __kasan_slab_free+0x11/0x20 [ 1957.055555][ C0] __kmem_cache_free+0x218/0x3b0 [ 1957.055606][ C0] ? skb_release_data+0x616/0x840 [ 1957.055671][ C0] ? skb_release_data+0x616/0x840 [ 1957.055731][ C0] kfree+0x7a/0xf0 [ 1957.055791][ C0] skb_release_data+0x616/0x840 [ 1957.055858][ C0] ? xfrmi_xmit+0xa9c/0x14b0 [ 1957.055909][ C0] kfree_skb_reason+0xd3/0x250 [ 1957.055968][ C0] ? xfrmi_xmit+0x9b1/0x14b0 [ 1957.056025][ C0] ? ip6_negative_advice+0x4e0/0x4e0 [ 1957.056074][ C0] xfrmi_xmit+0xa9c/0x14b0 [ 1957.056142][ C0] ? skb_crc32c_csum_help+0x550/0x550 [ 1957.056220][ C0] ? xfrmi_dev_uninit+0x1c0/0x1c0 [ 1957.056289][ C0] dev_hard_start_xmit+0x1de/0x630 [ 1957.056374][ C0] __dev_queue_xmit+0x18a4/0x36e0 [ 1957.056459][ C0] ? ref_tracker_alloc+0x2b1/0x450 [ 1957.056532][ C0] ? __dev_queue_xmit+0x2a6/0x36e0 [ 1957.056608][ C0] ? netdev_core_pick_tx+0x350/0x350 [ 1957.056686][ C0] ? memcpy+0x56/0x70 [ 1957.056731][ C0] ? __kasan_check_write+0x14/0x20 [ 1957.056777][ C0] ? _raw_write_lock_bh+0xa4/0x170 [ 1957.056822][ C0] ? _raw_write_lock_irq+0x170/0x170 [ 1957.056868][ C0] ? ndisc_constructor+0x6c0/0x8f0 [ 1957.056941][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 1957.057006][ C0] ? ___neigh_create+0x1836/0x1db0 [ 1957.057086][ C0] neigh_connected_output+0x449/0x4d0 [ 1957.057173][ C0] ip6_finish_output2+0x122b/0x1840 [ 1957.057262][ C0] ? ip6_make_skb+0x7a0/0x7a0 [ 1957.057338][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1957.057390][ C0] ? sched_clock+0x9/0x10 [ 1957.057472][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 1957.057531][ C0] ip6_finish_output+0x50f/0xa60 [ 1957.057611][ C0] ip6_output+0x1f7/0x4d0 [ 1957.057686][ C0] ? ac6_seq_show+0xf0/0xf0 [ 1957.057759][ C0] ? ip6_output+0x4d0/0x4d0 [ 1957.057837][ C0] ndisc_send_skb+0x7cf/0xdc0 [ 1957.057904][ C0] ? ndisc_mc_map+0x920/0x920 [ 1957.057968][ C0] ? ndisc_send_skb+0xdc0/0xdc0 [ 1957.058039][ C0] ? __kasan_check_write+0x14/0x20 [ 1957.058087][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 1957.058135][ C0] ? skb_put+0x11e/0x210 [ 1957.058201][ C0] ndisc_send_rs+0x47d/0x5f0 [ 1957.058264][ C0] addrconf_rs_timer+0x2d1/0x600 [ 1957.058328][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 1957.058393][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1957.058467][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1957.058546][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 1957.058609][ C0] call_timer_fn+0x3b/0x2d0 [ 1957.058678][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 1957.058741][ C0] __run_timers+0x72a/0xa10 [ 1957.058821][ C0] ? calc_index+0x270/0x270 [ 1957.058901][ C0] run_timer_softirq+0x69/0xf0 [ 1957.058969][ C0] __do_softirq+0x1d8/0x661 [ 1957.059035][ C0] ? irqtime_account_irq+0xdc/0x260 [ 1957.059113][ C0] __irq_exit_rcu+0x50/0xf0 [ 1957.059171][ C0] irq_exit_rcu+0x9/0x10 [ 1957.059231][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1957.059288][ C0] [ 1957.059303][ C0] [ 1957.059319][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1957.059375][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 1957.059439][ C0] Code: 4c 89 e7 e8 00 1e 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 b4 d5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 3e d7 31 fc 65 48 8b 1d d6 c3 [ 1957.059481][ C0] RSP: 0018:ffffc90000e6f8a0 EFLAGS: 00000246 [ 1957.059520][ C0] RAX: 1ffff11021dd43e1 RBX: 1ffff920001cdf18 RCX: ffffffff851fa900 [ 1957.059559][ C0] RDX: 1ffffffff0f2d200 RSI: 0000000000000000 RDI: 0000000000000001 [ 1957.059593][ C0] RBP: ffffc90000e6f928 R08: ffffffff87969000 R09: ffffffff87969008 [ 1957.059632][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90000e6f8c0 [ 1957.059671][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001cdf14 [ 1957.059714][ C0] ? queued_write_lock_slowpath+0x4e0/0x547 [ 1957.059780][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 1957.059849][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1957.059913][ C0] irqentry_exit+0x30/0x40 [ 1957.059964][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 1957.060027][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1957.060082][ C0] RIP: 0010:perf_fasync+0x93/0xa0 [ 1957.060149][ C0] Code: 00 00 4c 89 e7 e8 4d 80 7f 03 44 89 ff 4c 89 ee 44 89 f2 48 89 d9 e8 ac 86 2b 00 89 c3 4c 89 e7 e8 22 82 b9 ff 89 d8 c1 f8 1f <21> d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 55 48 89 e5 41 57 41 56 41 [ 1957.060190][ C0] RSP: 0018:ffffc90000e6fa28 EFLAGS: 00000246 [ 1957.060229][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 1957.060260][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 1957.060291][ C0] RBP: ffffc90000e6fa50 R08: dffffc0000000000 R09: ffffed10200f52ed [ 1957.060329][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881007a9760 [ 1957.060365][ C0] R13: ffff8881154ced80 R14: 0000000008e53b02 R15: 0000000000000008 [ 1957.060412][ C0] ? perf_fasync+0x8e/0xa0 [ 1957.060477][ C0] do_vfs_ioctl+0x122a/0x29a0 [ 1957.060545][ C0] ? plist_del+0x40e/0x420 [ 1957.060600][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1957.060669][ C0] ? __x64_compat_sys_ioctl+0x90/0x90 [ 1957.060749][ C0] ? irqentry_exit+0x30/0x40 [ 1957.060801][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1957.060857][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1957.060922][ C0] ? file_has_perm+0x11c/0x6c0 [ 1957.061009][ C0] ? file_has_perm+0x512/0x6c0 [ 1957.061076][ C0] ? match_file+0x140/0x140 [ 1957.061135][ C0] ? __hrtimer_run_queues+0xa72/0xad0 [ 1957.061226][ C0] ? selinux_file_ioctl+0x21a/0x540 [ 1957.061275][ C0] ? selinux_file_alloc_security+0x120/0x120 [ 1957.061333][ C0] ? __fget_files+0x2cb/0x330 [ 1957.061410][ C0] ? security_file_ioctl+0x84/0xb0 [ 1957.061460][ C0] __se_sys_ioctl+0x99/0x190 [ 1957.061529][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1957.061596][ C0] x64_sys_call+0x98/0x9a0 [ 1957.061652][ C0] do_syscall_64+0x3b/0xb0 [ 1957.061725][ C0] ? clear_bhb_loop+0x55/0xb0 [ 1957.061780][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1957.061832][ C0] RIP: 0033:0x7f69b7f79e79 [ 1957.061868][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1957.061911][ C0] RSP: 002b:00007f69b8d0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1957.061958][ C0] RAX: ffffffffffffffda RBX: 00007f69b8116058 RCX: 00007f69b7f79e79 [ 1957.062004][ C0] RDX: 0000000020000780 RSI: 0000000000005452 RDI: 0000000000000008 [ 1957.062037][ C0] RBP: 00007f69b7fe7916 R08: 0000000000000000 R09: 0000000000000000 [ 1957.062070][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1957.062101][ C0] R13: 0000000000000000 R14: 00007f69b8116058 R15: 00007ffc0a6bb308 [ 1957.062148][ C0] [ 2091.190547][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [syz.0.7130:23976] [ 2091.198880][ C1] Modules linked in: [ 2091.202700][ C1] CPU: 1 PID: 23976 Comm: syz.0.7130 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 2091.212429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2091.222334][ C1] RIP: 0010:update_stack_state+0x0/0x460 [ 2091.227794][ C1] Code: ff 4c 89 e7 e8 11 f0 84 00 e9 69 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 48 8b 07 5d c3 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 90 00 00 00 48 89 [ 2091.248129][ C1] RSP: 0018:ffffc900001afb10 EFLAGS: 00000246 [ 2091.254007][ C1] RAX: ffffc900001b0170 RBX: ffffc900001b0138 RCX: ffffffff877a1000 [ 2091.261998][ C1] RDX: dffffc0000000000 RSI: ffffc900001b0170 RDI: ffffc900001afba0 [ 2091.270071][ C1] RBP: ffffc900001afb90 R08: ffffc900001afc88 R09: 0000000000000005 [ 2091.278092][ C1] R10: ffffc900001afc90 R11: dffffc0000000001 R12: 0000000000000000 [ 2091.286776][ C1] R13: ffffc900001afbf0 R14: ffffc900001afba0 R15: 1ffff92000035f74 [ 2091.296200][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2091.305370][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2091.312249][ C1] CR2: 0000000100000002 CR3: 0000000131f81000 CR4: 00000000003506a0 [ 2091.320406][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2091.328567][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2091.336901][ C1] Call Trace: [ 2091.340053][ C1] [ 2091.342718][ C1] ? show_regs+0x58/0x60 [ 2091.347057][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 2091.352179][ C1] ? proc_watchdog_cpumask+0xf0/0xf0 [ 2091.357708][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 2091.363193][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 2091.368413][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 2091.374548][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 2091.379620][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2091.385617][ C1] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 2091.391248][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2091.397353][ C1] ? __init_begin+0x3a000/0x3a000 [ 2091.402483][ C1] ? __read_once_word_nocheck+0x10/0x10 [ 2091.408078][ C1] ? unwind_next_frame+0x3cb/0x700 [ 2091.413190][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2091.418649][ C1] arch_stack_walk+0x10d/0x140 [ 2091.423254][ C1] ? skb_release_head_state+0x74/0x240 [ 2091.428734][ C1] stack_trace_save+0x113/0x1c0 [ 2091.433669][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2091.438619][ C1] kasan_save_stack+0x3b/0x60 [ 2091.444052][ C1] ? kasan_save_stack+0x3b/0x60 [ 2091.448733][ C1] ? __kasan_record_aux_stack+0xb4/0xc0 [ 2091.454202][ C1] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 2091.460212][ C1] ? call_rcu+0xee/0x1340 [ 2091.464484][ C1] ? dst_release+0x9b/0xe0 [ 2091.468818][ C1] ? skb_release_head_state+0x74/0x240 [ 2091.474615][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 2091.479989][ C1] ? dst_release+0xe0/0xe0 [ 2091.484631][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2091.490378][ C1] call_rcu+0xee/0x1340 [ 2091.494706][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2091.499943][ C1] ? irqtime_account_irq+0xdc/0x260 [ 2091.505385][ C1] ? icmpv6_push_pending_frames+0x490/0x490 [ 2091.511551][ C1] ? rcu_force_quiescent_state+0x170/0x170 [ 2091.517443][ C1] ? xfrm_lookup_with_ifid+0x1cb6/0x22b0 [ 2091.523415][ C1] ? __xfrm_sk_clone_policy+0x970/0x970 [ 2091.529334][ C1] dst_release+0x9b/0xe0 [ 2091.533772][ C1] skb_release_head_state+0x74/0x240 [ 2091.539679][ C1] ? vti6_tnl_xmit+0x1099/0x1aa0 [ 2091.544706][ C1] kfree_skb_reason+0xa2/0x250 [ 2091.549408][ C1] vti6_tnl_xmit+0x1099/0x1aa0 [ 2091.554036][ C1] ? vti6_dev_uninit+0x3c0/0x3c0 [ 2091.558987][ C1] dev_hard_start_xmit+0x1de/0x630 [ 2091.564127][ C1] __dev_queue_xmit+0x18a4/0x36e0 [ 2091.569245][ C1] ? ref_tracker_alloc+0x2b1/0x450 [ 2091.574191][ C1] ? __dev_queue_xmit+0x2a6/0x36e0 [ 2091.579147][ C1] ? netdev_core_pick_tx+0x350/0x350 [ 2091.584346][ C1] ? memcpy+0x56/0x70 [ 2091.588507][ C1] ? __kasan_check_write+0x14/0x20 [ 2091.593625][ C1] ? _raw_write_lock_bh+0xa4/0x170 [ 2091.598673][ C1] ? _raw_write_lock_irq+0x170/0x170 [ 2091.603793][ C1] ? ndisc_constructor+0x6c0/0x8f0 [ 2091.608752][ C1] ? __local_bh_enable_ip+0x58/0x80 [ 2091.613785][ C1] ? ___neigh_create+0x1836/0x1db0 [ 2091.619084][ C1] neigh_connected_output+0x449/0x4d0 [ 2091.624492][ C1] ip6_finish_output2+0x122b/0x1840 [ 2091.630035][ C1] ? ip6_make_skb+0x7a0/0x7a0 [ 2091.634746][ C1] ? get_signal+0x169d/0x1820 [ 2091.639284][ C1] ? arch_do_signal_or_restart+0xb0/0x16f0 [ 2091.645018][ C1] ? exit_to_user_mode_loop+0x74/0xa0 [ 2091.650553][ C1] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 2091.656559][ C1] ? irqentry_exit_to_user_mode+0x9/0x10 [ 2091.662194][ C1] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2091.667830][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2091.673915][ C1] ip6_finish_output+0x50f/0xa60 [ 2091.678693][ C1] ip6_output+0x1f7/0x4d0 [ 2091.682938][ C1] ? ac6_seq_show+0xf0/0xf0 [ 2091.687477][ C1] ? ip6_output+0x4d0/0x4d0 [ 2091.691808][ C1] ndisc_send_skb+0x7cf/0xdc0 [ 2091.696335][ C1] ? ndisc_mc_map+0x920/0x920 [ 2091.700846][ C1] ? ndisc_send_skb+0xdc0/0xdc0 [ 2091.705599][ C1] ? sysvec_irq_work+0x52/0xb0 [ 2091.710209][ C1] ? memset+0x35/0x40 [ 2091.714035][ C1] ? __ndisc_fill_addr_option+0xd4/0x130 [ 2091.719495][ C1] ndisc_send_rs+0x47d/0x5f0 [ 2091.724554][ C1] addrconf_rs_timer+0x2d1/0x600 [ 2091.730717][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 2091.736760][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2091.742022][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2091.748018][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 2091.754701][ C1] call_timer_fn+0x3b/0x2d0 [ 2091.759297][ C1] ? addrconf_disable_policy_idev+0x360/0x360 [ 2091.765279][ C1] __run_timers+0x72a/0xa10 [ 2091.769977][ C1] ? calc_index+0x270/0x270 [ 2091.774482][ C1] ? __irq_exit_rcu+0x5c/0xf0 [ 2091.779008][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 2091.783957][ C1] run_timer_softirq+0x69/0xf0 [ 2091.788811][ C1] __do_softirq+0x1d8/0x661 [ 2091.793148][ C1] ? irqtime_account_irq+0xdc/0x260 [ 2091.798277][ C1] __irq_exit_rcu+0x50/0xf0 [ 2091.803220][ C1] irq_exit_rcu+0x9/0x10 [ 2091.807356][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 2091.812946][ C1] [ 2091.815712][ C1] [ 2091.818749][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2091.824740][ C1] RIP: 0010:finish_task_switch+0x16f/0x7b0 [ 2091.831095][ C1] Code: 74 08 4c 89 ff e8 31 63 6c 00 49 8b 1f 48 85 db 4c 8b 6d c0 0f 85 ce 00 00 00 4c 89 e7 e8 b9 0e cf 03 fb 49 8d 9d 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 [ 2091.851844][ C1] RSP: 0018:ffffc90000c67020 EFLAGS: 00000282 [ 2091.858087][ C1] RAX: 0000000080000001 RBX: ffff88811f8db3c8 RCX: 0000000000000002 [ 2091.867142][ C1] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2091.875299][ C1] RBP: ffffc90000c67070 R08: ffffffff819b54a0 R09: fffffbfff0ee5127 [ 2091.883196][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7137c80 [ 2091.891092][ C1] R13: ffff88811f8da880 R14: 1ffff1103ee270fc R15: ffff8881f71387e0 [ 2091.899185][ C1] ? __perf_event_task_sched_in+0x180/0x1f0 [ 2091.904934][ C1] __schedule+0xcaf/0x1550 [ 2091.910063][ C1] ? __perf_event_task_sched_in+0x180/0x1f0 [ 2091.915990][ C1] ? release_firmware_map_entry+0x191/0x191 [ 2091.922109][ C1] preempt_schedule_irq+0xc7/0x140 [ 2091.927318][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 2091.933252][ C1] ? preempt_schedule+0xd9/0xe0 [ 2091.937939][ C1] ? __kasan_check_read+0x11/0x20 [ 2091.943004][ C1] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 2091.948899][ C1] irqentry_exit+0x30/0x40 [ 2091.953506][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 2091.959270][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2091.965876][ C1] RIP: 0010:unmap_page_range+0xab7/0x2480 [ 2091.971960][ C1] Code: 48 89 94 24 38 01 00 00 4c 8b 64 24 08 eb 20 e8 cf 2b c5 ff 48 8b bc 24 f8 00 00 00 e8 62 fc 6e 03 4d 39 fc 0f 84 90 fb ff ff b4 2b c5 ff ba 10 00 00 00 48 8d bc 24 e0 01 00 00 31 f6 e8 c0 [ 2091.992291][ C1] RSP: 0018:ffffc90000c67320 EFLAGS: 00000287 [ 2091.998163][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2092.006675][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2092.014674][ C1] RBP: ffffc90000c67570 R08: ffffffff81b08dae R09: ffffed1021f7d37f [ 2092.022589][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 00007f508bc64000 [ 2092.030493][ C1] R13: ffffc90000c67630 R14: dffffc0000000000 R15: 00007f508bdfb000 [ 2092.038305][ C1] ? unmap_page_range+0x216e/0x2480 [ 2092.043374][ C1] ? copy_page_range+0x2ed0/0x2ed0 [ 2092.048471][ C1] ? unmap_vmas+0x50d/0x660 [ 2092.052806][ C1] ? unmap_vmas+0x3f1/0x660 [ 2092.057232][ C1] ? uprobe_munmap+0x1f/0x450 [ 2092.061849][ C1] ? audit_tree_destroy_watch+0x20/0x20 [ 2092.067220][ C1] ? uprobe_munmap+0x18d/0x450 [ 2092.072215][ C1] unmap_vmas+0x4e4/0x660 [ 2092.076363][ C1] ? unmap_page_range+0x2480/0x2480 [ 2092.081665][ C1] ? preempt_schedule_common+0xbe/0xf0 [ 2092.087209][ C1] ? folio_add_lru_vma+0x80/0x80 [ 2092.091979][ C1] ? __kasan_check_write+0x14/0x20 [ 2092.097239][ C1] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 2092.102501][ C1] exit_mmap+0x2d1/0x940 [ 2092.106684][ C1] ? vm_brk+0x30/0x30 [ 2092.110728][ C1] ? kiocb_set_cancel_fn+0x230/0x230 [ 2092.116190][ C1] ? uprobe_clear_state+0x2cd/0x320 [ 2092.121405][ C1] __mmput+0x95/0x310 [ 2092.125522][ C1] mmput+0x56/0x170 [ 2092.129329][ C1] do_exit+0xb29/0x2b80 [ 2092.133522][ C1] ? put_task_struct+0x80/0x80 [ 2092.138643][ C1] ? ctx_flexible_sched_in+0x100/0x100 [ 2092.145369][ C1] ? __kasan_check_write+0x14/0x20 [ 2092.151407][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2092.156522][ C1] do_group_exit+0x21a/0x2d0 [ 2092.161113][ C1] ? __kasan_check_write+0x14/0x20 [ 2092.166177][ C1] get_signal+0x169d/0x1820 [ 2092.170961][ C1] ? ptrace_notify+0x350/0x350 [ 2092.175723][ C1] arch_do_signal_or_restart+0xb0/0x16f0 [ 2092.181755][ C1] ? __perf_event_task_sched_in+0x180/0x1f0 [ 2092.187479][ C1] ? __kasan_check_write+0x14/0x20 [ 2092.192427][ C1] ? finish_task_switch+0x207/0x7b0 [ 2092.197468][ C1] ? get_sigframe_size+0x10/0x10 [ 2092.202252][ C1] exit_to_user_mode_loop+0x74/0xa0 [ 2092.207313][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 2092.212675][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 2092.218107][ C1] irqentry_exit+0x12/0x40 [ 2092.222611][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 2092.228373][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2092.234172][ C1] RIP: 0033:0x7f508c979e79 [ 2092.238438][ C1] Code: Unable to access opcode bytes at 0x7f508c979e4f. [ 2092.245727][ C1] RSP: 002b:00007f508d7a0038 EFLAGS: 00000246 [ 2092.252200][ C1] RAX: 0000000000000000 RBX: 00007f508cb15f80 RCX: 00007f508c979e79 [ 2092.260012][ C1] RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 2092.268313][ C1] RBP: 00007f508c9e7916 R08: 0000000000000000 R09: 0000000000000000 [ 2092.276230][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2092.284558][ C1] R13: 0000000000000000 R14: 00007f508cb15f80 R15: 00007ffdaf6ba7b8 [ 2092.292716][ C1] [ 2092.295821][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2092.301213][ C0] NMI backtrace for cpu 0 [ 2092.301246][ C0] CPU: 0 PID: 24116 Comm: syz.3.7156 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 2092.301311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2092.301340][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 2092.301423][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 4a de 6a 01 5d c3 0f 1f 84 00 00 00 00 [ 2092.301466][ C0] RSP: 0018:ffffc90000006e88 EFLAGS: 00000046 [ 2092.301510][ C0] RAX: 000000000000012b RBX: ffffffff86541a40 RCX: 0000000000000838 [ 2092.301545][ C0] RDX: 0000000000000000 RSI: 000000000000012b RDI: 0000000000000838 [ 2092.301577][ C0] RBP: ffffc90000006e88 R08: ffffffff816a14fb R09: ffffffff816a13ed [ 2092.301616][ C0] R10: 0000000000000002 R11: ffff88810eea1440 R12: 0000000000000020 [ 2092.301650][ C0] R13: dffffc0000000000 R14: 000000000000012b R15: dffffc0000000000 [ 2092.301688][ C0] FS: 00007f69b8d0f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2092.301734][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2092.301770][ C0] CR2: 0000000000000000 CR3: 0000000130a80000 CR4: 00000000003506b0 [ 2092.301808][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2092.301848][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2092.301882][ C0] Call Trace: [ 2092.301897][ C0] [ 2092.301915][ C0] ? show_regs+0x58/0x60 [ 2092.301966][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 2092.302031][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 2092.302099][ C0] ? native_apic_msr_write+0x39/0x50 [ 2092.302165][ C0] ? native_apic_msr_write+0x39/0x50 [ 2092.302234][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2092.302343][ C0] ? nmi_handle+0xa7/0x280 [ 2092.302398][ C0] ? native_apic_msr_write+0x39/0x50 [ 2092.302463][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 2092.302524][ C0] ? default_do_nmi+0x69/0x160 [ 2092.302577][ C0] ? exc_nmi+0xad/0x100 [ 2092.302625][ C0] ? end_repeat_nmi+0x16/0x31 [ 2092.302693][ C0] ? clockevents_program_event+0x7d/0x300 [ 2092.302742][ C0] ? clockevents_program_event+0x18b/0x300 [ 2092.302795][ C0] ? native_apic_msr_write+0x39/0x50 [ 2092.302864][ C0] ? native_apic_msr_write+0x39/0x50 [ 2092.302933][ C0] ? native_apic_msr_write+0x39/0x50 [ 2092.303002][ C0] [ 2092.303016][ C0] [ 2092.303031][ C0] lapic_next_event+0x5f/0x70 [ 2092.303083][ C0] clockevents_program_event+0x1c1/0x300 [ 2092.303136][ C0] tick_program_event+0x9f/0x120 [ 2092.303195][ C0] hrtimer_interrupt+0x625/0xaa0 [ 2092.303293][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 2092.303377][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 2092.303433][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2092.303489][ C0] RIP: 0010:arch_stack_walk+0x0/0x140 [ 2092.303570][ C0] Code: 31 c0 e6 8a eb 8c 31 c0 e6 d4 48 c7 c7 c0 7f 99 87 4c 89 c6 e8 71 41 ed 03 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 68 49 89 cf 49 89 [ 2092.303613][ C0] RSP: 0018:ffffc90000007158 EFLAGS: 00000246 [ 2092.303655][ C0] RAX: 0000000000000000 RBX: ffffc900000071b0 RCX: 0000000000000000 [ 2092.303688][ C0] RDX: ffff88810eea1440 RSI: ffffc900000071a0 RDI: ffffffff8165c3e0 [ 2092.303734][ C0] RBP: ffffc90000007230 R08: dffffc0000000000 R09: ffffc90000007240 [ 2092.303778][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000007240 [ 2092.303814][ C0] R13: dffffc0000000000 R14: ffffc900000071a0 R15: 1ffff92000000e30 [ 2092.303861][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 2092.303916][ C0] ? stack_trace_save+0x113/0x1c0 [ 2092.303969][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2092.304023][ C0] ? kasan_set_track+0x60/0x70 [ 2092.304089][ C0] ? kasan_set_track+0x4b/0x70 [ 2092.304163][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 2092.304247][ C0] kasan_set_track+0x4b/0x70 [ 2092.304358][ C0] kasan_save_alloc_info+0x1f/0x30 [ 2092.304436][ C0] __kasan_kmalloc+0x9c/0xb0 [ 2092.304504][ C0] ? __neigh_notify+0x7d/0x130 [ 2092.304550][ C0] __kmalloc_node_track_caller+0xb3/0x1e0 [ 2092.304620][ C0] ? __neigh_notify+0x7d/0x130 [ 2092.304667][ C0] __alloc_skb+0x125/0x2d0 [ 2092.304729][ C0] __neigh_notify+0x7d/0x130 [ 2092.304778][ C0] neigh_cleanup_and_release+0x2c/0x1b0 [ 2092.304827][ C0] neigh_remove_one+0x4d5/0x560 [ 2092.304905][ C0] ___neigh_create+0x447/0x1db0 [ 2092.304978][ C0] ? selinux_ip_postroute+0x2d5/0x13d0 [ 2092.305060][ C0] __neigh_create+0x32/0x40 [ 2092.305144][ C0] ip6_finish_output2+0x9d0/0x1840 [ 2092.305235][ C0] ? ip6_make_skb+0x7a0/0x7a0 [ 2092.305323][ C0] ? ip6t_do_table+0x1643/0x1830 [ 2092.305391][ C0] ? ip6table_mangle_hook+0x246/0x790 [ 2092.305467][ C0] ip6_finish_output+0x50f/0xa60 [ 2092.305633][ C0] ip6_output+0x1f7/0x4d0 [ 2092.305711][ C0] ? ac6_seq_show+0xf0/0xf0 [ 2092.305792][ C0] ? ip6_output+0x4d0/0x4d0 [ 2092.305871][ C0] ndisc_send_skb+0x7cf/0xdc0 [ 2092.305940][ C0] ? ndisc_mc_map+0x920/0x920 [ 2092.305998][ C0] ? ndisc_send_skb+0xdc0/0xdc0 [ 2092.306066][ C0] ? memset+0x35/0x40 [ 2092.306117][ C0] ? __ndisc_fill_addr_option+0xd4/0x130 [ 2092.306182][ C0] ndisc_send_rs+0x47d/0x5f0 [ 2092.306244][ C0] addrconf_rs_timer+0x2d1/0x600 [ 2092.306309][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 2092.306375][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2092.306452][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2092.306549][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 2092.306615][ C0] call_timer_fn+0x3b/0x2d0 [ 2092.306687][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 2092.306750][ C0] __run_timers+0x72a/0xa10 [ 2092.306851][ C0] ? calc_index+0x270/0x270 [ 2092.306939][ C0] run_timer_softirq+0x69/0xf0 [ 2092.307009][ C0] __do_softirq+0x1d8/0x661 [ 2092.307076][ C0] ? irqtime_account_irq+0xdc/0x260 [ 2092.307156][ C0] __irq_exit_rcu+0x50/0xf0 [ 2092.307214][ C0] irq_exit_rcu+0x9/0x10 [ 2092.307270][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 2092.307326][ C0] [ 2092.307341][ C0] [ 2092.307358][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2092.307414][ C0] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 2092.307480][ C0] Code: 4c 89 e7 e8 00 1e 9f fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 b4 d5 31 fc fb bf 01 00 00 00 a9 e4 ff ff fa bf 01 00 00 00 e8 3e d7 31 fc 65 48 8b 1d d6 c3 [ 2092.307533][ C0] RSP: 0018:ffffc90000e6f8a0 EFLAGS: 00000246 [ 2092.307576][ C0] RAX: 1ffff11021dd43e1 RBX: 1ffff920001cdf18 RCX: ffffffff851fa900 [ 2092.307615][ C0] RDX: 1ffffffff0f2d200 RSI: 0000000000000000 RDI: 0000000000000001 [ 2092.307649][ C0] RBP: ffffc90000e6f928 R08: ffffffff87969000 R09: ffffffff87969008 [ 2092.307688][ C0] R10: ffffffff87969018 R11: ffffffff87969010 R12: ffffc90000e6f8c0 [ 2092.307727][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001cdf14 [ 2092.307770][ C0] ? queued_write_lock_slowpath+0x4e0/0x547 [ 2092.307826][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 2092.307905][ C0] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 2092.307969][ C0] irqentry_exit+0x30/0x40 [ 2092.308021][ C0] sysvec_apic_timer_interrupt+0x55/0xc0 [ 2092.308078][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2092.308133][ C0] RIP: 0010:perf_fasync+0x93/0xa0 [ 2092.308208][ C0] Code: 00 00 4c 89 e7 e8 4d 80 7f 03 44 89 ff 4c 89 ee 44 89 f2 48 89 d9 e8 ac 86 2b 00 89 c3 4c 89 e7 e8 22 82 b9 ff 89 d8 c1 f8 1f <21> d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 55 48 89 e5 41 57 41 56 41 [ 2092.308324][ C0] RSP: 0018:ffffc90000e6fa28 EFLAGS: 00000246 [ 2092.308402][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 2092.308434][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 2092.308465][ C0] RBP: ffffc90000e6fa50 R08: dffffc0000000000 R09: ffffed10200f52ed [ 2092.308505][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881007a9760 [ 2092.308541][ C0] R13: ffff8881154ced80 R14: 0000000008e53b02 R15: 0000000000000008 [ 2092.308593][ C0] ? perf_fasync+0x8e/0xa0 [ 2092.308663][ C0] do_vfs_ioctl+0x122a/0x29a0 [ 2092.308733][ C0] ? plist_del+0x40e/0x420 [ 2092.308794][ C0] ? cpu_clock_event_read+0x50/0x50 [ 2092.308870][ C0] ? __x64_compat_sys_ioctl+0x90/0x90 [ 2092.308957][ C0] ? irqentry_exit+0x30/0x40 [ 2092.309014][ C0] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2092.309070][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2092.309135][ C0] ? file_has_perm+0x11c/0x6c0 [ 2092.309198][ C0] ? file_has_perm+0x512/0x6c0 [ 2092.309265][ C0] ? match_file+0x140/0x140 [ 2092.309325][ C0] ? __hrtimer_run_queues+0xa72/0xad0 [ 2092.309419][ C0] ? selinux_file_ioctl+0x21a/0x540 [ 2092.309468][ C0] ? selinux_file_alloc_security+0x120/0x120 [ 2092.309526][ C0] ? __fget_files+0x2cb/0x330 [ 2092.309605][ C0] ? security_file_ioctl+0x84/0xb0 [ 2092.309654][ C0] __se_sys_ioctl+0x99/0x190 [ 2092.309725][ C0] __x64_sys_ioctl+0x7b/0x90 [ 2092.309793][ C0] x64_sys_call+0x98/0x9a0 [ 2092.309849][ C0] do_syscall_64+0x3b/0xb0 [ 2092.309923][ C0] ? clear_bhb_loop+0x55/0xb0 [ 2092.309980][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2092.310032][ C0] RIP: 0033:0x7f69b7f79e79 [ 2092.310068][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2092.310111][ C0] RSP: 002b:00007f69b8d0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2092.310158][ C0] RAX: ffffffffffffffda RBX: 00007f69b8116058 RCX: 00007f69b7f79e79 [ 2092.310196][ C0] RDX: 0000000020000780 RSI: 0000000000005452 RDI: 0000000000000008 [ 2092.310228][ C0] RBP: 00007f69b7fe7916 R08: 0000000000000000 R09: 0000000000000000 [ 2092.310261][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2092.310294][ C0] R13: 0000000000000000 R14: 00007f69b8116058 R15: 00007ffc0a6bb308 [ 2092.310340][ C0]