last executing test programs: 6.226126337s ago: executing program 0 (id=254): close(0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x209, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x23e, 0x2}, 0x120, 0x400000, 0xb9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, r0, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000d80)={r0, r1}, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000780)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x40, &(0x7f00000001c0)=""/64, 0x41000, 0x84, '\x00', r4, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r5, r3, r0, r0, r0], 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x32, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000700)='cgroup.threads\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r7}, 0x8) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r9}, &(0x7f0000000400), &(0x7f0000000440)=r9}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r9, &(0x7f0000000a80), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x19, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bd150001ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000008acba5a41a107e607e36f70a053d015d4ecc9d00788c878077706d896419504c7ab54977fd1233a3cbf6b2367d8c1617d6c79c302eff2db63198651e5f389a10468752d83b9663e6243168fb11727f64c35ce8977c2432633f5ca1cfe0e87fd75ecf8b5e"], &(0x7f0000000800)='GPL\x00', 0x9d, 0x83, &(0x7f0000000840)=""/131, 0x41000, 0x0, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000900)={0xa, 0xfffffff7}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x10, 0x7, 0x2d}, 0x10, 0x168b9, r8, 0x0, &(0x7f0000000c80)=[r9, r0], 0x0, 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) 6.023451602s ago: executing program 0 (id=256): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000004000000080000000600000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ec822dbea297fa8934eda10713434f85c2023c53f320868ff46f6d3adbf01f32ff1d471c8a4d7f94ecf768300d2e6f6d8695ca480a7965046366ca99b4b6df85e20704ff566d9976000a884fdbd168bc16a28a047ea82051e5ef8ac2019a"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%pK \x00'}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x77, 0x1, 0x8}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x7}]}}}], 0x18}, 0x200040c4) socket$kcm(0x10, 0x2, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = syz_clone(0x62200300, &(0x7f00000001c0)="3622796c3d296bb197226067d7979fef3010f2fb468ffdb54c9881777878d651b953c71913b0d6175e5d2ee5712a2a0e71055f9bf0c5c069beb8bb5dac7729f688f1ee9c60c4f6eb2b9fb03cceec30159276cbcd9b146780ea", 0x59, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="e14523e620c6d2527f76f8be87552d9c98cd0cfb5fb5abf61a18201d") r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3, 0x6, 0xc, 0x1, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xf}, 0x4182, 0x9, 0x0, 0x3, 0x8000000000000000, 0x2c5a, 0x2, 0x0, 0xd11, 0x0, 0x24cc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r4, 0xb, r5, 0x0) (async) perf_event_open(0x0, r4, 0xb, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffbfffffffff, r8, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffbfffffffff, r8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 5.004624887s ago: executing program 0 (id=265): socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8000, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8000, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x4}]}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x45) (async) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x45) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffcbd, 0x0, 0xffffffffffffff3a, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010000) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) close(r4) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f38", 0xed}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000009c0)="a484d15488fb016289fa4e2b0b25648e7abf5a74ab5e75516b79103a9b0711dd70d5a141294998c249dda70370b7f076f3ec132111d4866784da73cd0f18993549e7b185584053fb7b48d2b271af8a14858473eb1edd82f3f4cd1150bee83bf4f624d8f873ec45fe60bb431221e35526a58313e39813e83be21f2834bbf6fc621f6d9894eb03b4c8690635c5ce509de10000000000000004d8d8550dc3763f779ad276b6f32236b8534ab6701184dac56e1af78c6013715d94b4d6cd59821581983f7e3b6c5369cda3f0bc763bdda2ec97d4542041be5568230b1a9b24e1d5efff9226066adcdfd53abc7078ff74aca53708cb4e62ed", 0xf6}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r7, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8922, &(0x7f0000000080)) 4.614015267s ago: executing program 0 (id=269): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0x1, [@empty]}) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b33, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.301818475s ago: executing program 2 (id=271): perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.296389284s ago: executing program 1 (id=272): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r2}, 0xc) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) sendmsg$kcm(r3, &(0x7f0000001cc0)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)="fdfba206ef83baefcb6455d998513f5c51d7e3d75a2d57cfd816e6d1c110495ae61f42df8334345fcc429e8abab5a9ba66ae55e3a11faf3ca49f4aa2f0068f0c605cf551f76042bbe75476a1d0585d2b07385d95bba115e06192b7f10d5c8e0b7ae30659850c37fce1203f85752ef4a2a7f8cb9aff6c99", 0x77}], 0x2, &(0x7f0000000700)}, 0x804) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x11010000ff010000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000000001a0000f7"], 0x50) 4.244402026s ago: executing program 0 (id=273): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4480}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff4305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a8", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x13) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.117098949s ago: executing program 2 (id=274): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x800}, 0x40800) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xca}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 3.994579982s ago: executing program 1 (id=275): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80000001, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x3, [@union={0x6, 0x6, 0x0, 0x5, 0x1, 0xfffffffb, [{0x7, 0x2}, {0x5, 0x1, 0x7a}, {0xf, 0x1, 0x3}, {0x0, 0x2, 0x5}, {0x7, 0x5, 0x6}, {0x4, 0x0, 0x84}]}, @enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0x4, [{0xf, 0x3, 0x5}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x1, [{0xc, 0x2, 0x3}, {0x5, 0x0, 0x3}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @const={0xa}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/40, 0xe7, 0x28, 0x0, 0x100}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/46, 0x2e, 0x0, &(0x7f0000000700)=""/149, 0x95}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0xde, 0xa, 0x9, 0x7, 0x5}, @func, @exit, @alu={0x4, 0x1, 0x4, 0xa, 0x6, 0x30}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xa17, 0x9d, &(0x7f0000000400)=""/157, 0x41100, 0x43, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000640)={0x1000, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x7, 0x7fffffff}, 0x10, r6, 0x0, 0x6, 0x0, &(0x7f0000000840)=[{0x4, 0x3, 0x10, 0x8}, {0x2, 0x1, 0xb, 0x7}, {0x3, 0x1, 0x7, 0x7}, {0x0, 0x3, 0x5, 0xc}, {0x0, 0x3, 0xc, 0x2}, {0x1, 0x5, 0x9, 0xd}], 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r7, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00)={0x0, r7}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x9, 0x4, 0xb, 0x10540, r2, 0x5, '\x00', r8, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x2, @void, @value, @value=r10}, 0x50) r12 = gettid() r13 = syz_open_procfs$namespace(r12, &(0x7f0000000d40)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x1c, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x6}}, @union={0xc, 0x2, 0x0, 0x5, 0x0, 0x3, [{0x9, 0x2, 0xeb}, {0x3, 0x2, 0x200}]}, @fwd={0x2}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x2f, 0x7}, @typedef={0x6, 0x0, 0x0, 0x8, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000e40)=""/2, 0x9c, 0x2, 0x1, 0x10}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002f80)={&(0x7f0000000ec0)="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", &(0x7f0000001ec0)=""/4096, &(0x7f0000002ec0)="04609de274b5e326eee9a463918bfbc39a643423ab91eed019876f403981", &(0x7f0000002f00)="6afe07a13a6d7e59f39bea7faa8471240a411eb842ec578e599c19cda15895d532231f355e7a75f6da6edefeae3481568aee7446e5a14ea7a09b1579b98c2ae15405fac38b7f3ba4acc47d5b5762e011aa00fd8517c363064f1cf7da", 0x8, r2}, 0x38) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002fc0)={r7, r11}, 0xc) r14 = perf_event_open(&(0x7f0000003080)={0x52272da8006a596b, 0x80, 0xb, 0x1, 0x6c, 0x5, 0x0, 0xffffffffffffbb05, 0x82000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x0, 0x3}, 0x90, 0x6, 0xbb, 0x5, 0x5, 0x9, 0x6de, 0x0, 0x3, 0x0, 0x5}, r12, 0xc, 0xffffffffffffffff, 0x15) r15 = perf_event_open(&(0x7f0000003000)={0x2, 0x80, 0x5, 0x6, 0x3, 0x4, 0x0, 0x0, 0x2048, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1f, 0xffffffff}, 0x8000, 0xffffffff, 0x2, 0x6, 0x2, 0x1, 0x5, 0x0, 0xfab, 0x0, 0xa8}, r12, 0xa, r14, 0x2) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003300)={0x18, 0xd, &(0x7f0000003100)=@raw=[@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}], &(0x7f0000003180)='syzkaller\x00', 0x400, 0xb7, &(0x7f00000031c0)=""/183, 0x41000, 0x58, '\x00', r8, 0x0, r5, 0x8, &(0x7f0000003280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000032c0)={0x5, 0xd, 0x6, 0x800000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000036c0)=@bpf_tracing={0x1a, 0x14, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x0, 0x0, 0x0, 0x2, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @ldst={0x2, 0x1, 0x6, 0xb, 0x1, 0x20, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x9, 0xc, 0xa, 0x7, 0x5}]}, &(0x7f0000003480)='GPL\x00', 0x5, 0xfb, &(0x7f00000034c0)=""/251, 0x40f00, 0x10, '\x00', r8, 0x18, r5, 0x8, &(0x7f00000035c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000003600)={0x2, 0xf, 0x80000000, 0x4}, 0x10, 0x26f84, r16, 0x3, &(0x7f0000003640)=[r1], &(0x7f0000003680)=[{0x1, 0x4, 0x8, 0x7}, {0x2, 0x1, 0xf, 0x7}, {0x2, 0x1, 0xb, 0x3}], 0x10, 0x81}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003800)={r4, 0x58, &(0x7f0000003780)={0x0, 0x0}}, 0x10) socketpair(0x25, 0x6, 0x2c, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003dc0)=r9, 0x4) r22 = gettid() r23 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003e00)={r18, 0x2, 0x30}, 0xc) r24 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000003e40), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003e80)={0xffffffffffffffff}) sendmsg$unix(r20, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003880)="66fa878057d60489fd750ea79c24854c7e852f3f850b859bbd8db56ebefdd337ed2cfa1478c5bc822c5cf5f11647542e40a0cd5085b83887321490666f09d2be18eac45a27b06149a3ad769f5aa7a204da26b431aeaf81b423186201614d9162b071d7b72d0246dff82e4108be8571fa16955fa014086d5872d0379c7f5e8d0d20cebd64d1cd16f827be032db752b0bd428a3af71c73bdde9e", 0x99}, {&(0x7f0000003940)="6cd99a0b046cd2713ca3fc6d52fb7632f9bd632c4e2a30793bd86f69e930f287db7c22c20045dd14182d225ce48e36b530364e0af6e0a8a994308ff059530f8b6617535731531714594ce4a40482b40da451be2a", 0x54}, {&(0x7f00000039c0)="8cc1cd92b46f66ec1a3251c89a224efb9382eec32d0002af0c3fbabef332c2fe84f3b90655860c58a8c2b052224a6ef5bdf5a5ac087238e49f27ec0f91242026f59d86d154253fea1940708bd3fa83a810a349d8c5b03899cdeebad24377dac3f9bd5ebf2aa08757367b14ea8b7c53dc94e4ff6f5099d865edd5fe3acd005f926635dc2b026133b2350b911fe23f956f2a5eda24f2fe118b47de3e49a7f043e9fb3cf562e7513fc25d2f", 0xaa}, {&(0x7f0000003a80)="2e614f2c40caa77ea7c379d6e97e7827cdf290f94330b29639b133e500737e205d9984777cda3d8e313b1fa2113925552b51a2dc9314c1", 0x37}, {&(0x7f0000003ac0)="0cbda1c6765b89a3d073e86538fa115ec783a754951a8ad7379e2583b0f9ed678135794afbe3f59feacc1aa8", 0x2c}, {&(0x7f0000003b00)="887e13a141308d599ce13e8f862a08fb185205c03f6edb48d19158d617b5beece44c8d412196c88527d84b684f5dd153b6247330444ddbfb0efe", 0x3a}, {&(0x7f0000003b40)="ca7a1b34ecd4b9b469d82732180e45e4fa56781380c546f654383efe5b1bd0c1e8bda0af2ff45a01606811ab92619f6a9a2ddd4e4724eaa93527f9fa730a2bf25f585e5624c87c60c05f820de6f5e2976256078e78fb50b0fc6291b49e10ab9d3f0594c8de1d05d183595de293fddbc27fcb9709c4db237be12998a4aabefb8a0faac57ab9f26a726d94b5bd3a9980ea33af5e68d89f009f464524e8b674aaaa0ce9965d5ac30f5284b8e6c39aece6a643d626d0b2335d41609a865d48744222f103f4649a7bf2dd77490e261825a4891286262c0f5990c40431d236b0fa6cb1e30f9731cd833b0e4a64bbf17b258866080f11fb6fb3a5", 0xf7}, {&(0x7f0000003c40)="1c9d3c32974df4625408c3c9c4ef6e46c0a59bbf5122ab3ae1074e1e25824f8c2623c69bfc0811fa59271fbf8005ea86fa3c824ed4d6176fc9f957f2a4ad23aad7066988074c730d66c2ee6f10fa3a5a4820ef1091fd468598486f65390833bae32a1e893eba5d128fa05c66b622f3733c55ae5b6f6bc7e08debfe5a31ef5d00ac3a7777fd4b1218a3fcf69ada5e48e1882b0ae09b268d71de77b0c5848954ad2a25e79973a4dc31c1eaafb6dd494637890de4f26a0c915d2858ba89438e8ab21a35f0dbb78e24ea", 0xc8}], 0x8, &(0x7f0000003ec0)=[@rights={{0x1c, 0x1, 0x1, [r17, 0xffffffffffffffff, r4]}}, @rights={{0x34, 0x1, 0x1, [r2, r17, r15, r7, r4, r14, 0xffffffffffffffff, r17, r13]}}, @rights={{0x28, 0x1, 0x1, [r0, r5, r15, r2, r21, r7]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r14, r23, r4, r24, r1, r4, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, r10, r17, r5, r17, r16, r15]}}, @rights={{0x2c, 0x1, 0x1, [r16, r13, r25, r5, r7, r1, r10]}}], 0x150, 0x8005}, 0x4040840) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004100)={0xffffffffffffffff, 0x58, &(0x7f0000004080)}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000004180)=@o_path={&(0x7f0000004140)='./file0\x00', 0x0, 0x8, r19}, 0x18) 3.800993567s ago: executing program 1 (id=277): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4", 0x4a}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x200}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8001) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg(0xffffffffffffffff, 0x0, 0x40001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0xa, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES8=r6], &(0x7f00000007c0)=""/125, 0x50, 0x7d, 0x801, 0x0, 0x10000}, 0x28) 3.607528372s ago: executing program 3 (id=278): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 3.300587439s ago: executing program 3 (id=279): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x101, 0x32, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x4, 0x0, 0x1, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x15, 0x5, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, &(0x7f0000000100), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000040) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x2, 0x0, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1e00000000000000040000000400000002480000", @ANYRES32, @ANYBLOB="13280000000000000000000000000036d1000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000000000000700"/28], 0x50) r8 = socket$kcm(0x2a, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES8=r2, @ANYRES8=r8], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014080000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000000db845da56b223ac9e8191925b"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r10}, 0x94) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x2, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)}, 0x20002800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f00000005c0)={r11, 0xffffffffffffffff, 0x29}, 0x1) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, 0x0, 0x0) 2.883381999s ago: executing program 1 (id=280): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000810000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 2.748035112s ago: executing program 3 (id=281): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0x1, [@empty]}) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b33, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.4314718s ago: executing program 1 (id=282): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0001500808178a8001500030001400200000901ac040000d69b6f94007100a007a290457f0189b316277ce06bbace8017cbec4c0000001fb791643a5ee4b11602b2a10c11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000000000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8040150) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000600)={'tunl0\x00', @local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000079478a808706630000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="050000000000000000000000a29c5bba834260be1de3692fc5d627ed878cd97035409c70cd0b7a6b4d6ca309eeca23047f2d089c7bdff741db60a3995aaf97c799ca7346768dd63573a6cb3160ee17fcc8e3ea680601cf76894ce9b9c53e4d19062157f3925ab2c9563cd6ba4d2626bdd113ba9ae5439cf1f29aab51b45300de147c062fae4a7204ef597e98c58391109c3825a0ee61d57d80c51f00f9a6c97ed3296e1fc6c61195497535e19c432f0e37f952239b6df2d816fe870c891f7e83e01cfda66f124bc0894d691562728805c81bb8d023cb85c79a32b0b2cff08deb509508", @ANYRES32, @ANYBLOB="4b1862cfdf15f5a85dee81ca3eabd470389a98b8b6dd2f06eb0ac5ce86112e808622a2f3a08ff29565c515d1f40f7a309a181b7a3a0372eda4827c2218e8ade40f3a3311237015da7056c9378c", @ANYRES64=0x0], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fd3f0000000085000000d00000001801000000646c2500000000002020205f1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000c000000000a00000085002000060000009500000000000000000000000000e11fefdfeb470700710fd1ac5fcd892091b52c6dcd728d69ddd3104f"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x3ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000300), &(0x7f0000000700)=r4}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4, 0x200}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x80, 0x0}, 0x40884) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) syz_clone(0x8000, &(0x7f0000000100)="fa388e410dac78d96ab62676c3f3a4396bcc267f509321fe12fc797fefea3032936374354806359b32c42fc1244a5fe3a3efd471299b9af7029c11c1f95ff09feae1b7071b031299c986537a94b71692151895d85961ba8b945d02bae3365f277d5009eb18f72bce403e061bb3010608fe1123c9f54aa294a42ad8f04c113d88c937c0bff91421813148cdeaf7af0616f784da7ff45c2a1d3da497a57e977848e63599fa8a20bcce3d0ec6a15a08e510ef5a889ec456b06593f2f660d79e", 0xbe, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000780)="2950ca7e450fc4fc8186acfde8911b0e104a9d54ee29952a286c393accbc9a0e3e618e368bef9b2a71feec4f537c622c222724598e560da6d9d08a15be64abaab212facc5b076eeec8bd") r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) 2.41094433s ago: executing program 3 (id=283): perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 529.306456ms ago: executing program 1 (id=284): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4, 0x200}], 0x10, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="e909000000747a9bab1ccbda126d1d347f32977d0fca647cd8921ba460d8eb0a5612a6ecdb0000000000000000005400dd4da300e021f5767186799af720b27ef5ddc50180008b6c2ff74ec4bffc57504e3df152b5c421bc9aaeaac4b96faa8cbf2e40137d0d7de6fe3a2bef44da6cbfc054356adcf7f0a2", 0x78}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720", 0x21}], 0x2, 0x0, 0x0, 0x400c884}, 0x4000000) close(r2) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5253}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5], 0x20) close(0x3) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0xfffffffe}, 0x80, 0x0}, 0x0) 528.944127ms ago: executing program 2 (id=285): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r2}, 0xc) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) sendmsg$kcm(r3, &(0x7f0000001cc0)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)="fdfba206ef83baefcb6455d998513f5c51d7e3d75a2d57cfd816e6d1c110495ae61f42df8334345fcc429e8abab5a9ba66ae55e3a11faf3ca49f4aa2f0068f0c605cf551f76042bbe75476a1d0585d2b07385d95bba115e06192b7f10d5c8e0b7ae30659850c37fce1203f85752ef4a2a7f8cb9aff6c99", 0x77}], 0x2, &(0x7f0000000700)}, 0x804) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x11010000ff020000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000000001a0000f7"], 0x50) 528.021027ms ago: executing program 3 (id=286): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)='?', 0xfdef}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xa, 0x0, &(0x7f0000000080)="0069c2704ade28eddb00", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12) socket$kcm(0x29, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x1, 0x9c, &(0x7f00000005c0)=""/156, 0x41100, 0x20, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x3, 0x1360, 0xd2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r8], &(0x7f00000007c0)=[{0x3, 0x3, 0x1, 0xb}, {0x2, 0x1, 0xd}, {0x4, 0x2, 0x7, 0x6}], 0x10, 0x45}, 0x94) 391.146699ms ago: executing program 2 (id=287): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 388.21444ms ago: executing program 0 (id=288): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4", 0x4a}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x200}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8001) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg(0xffffffffffffffff, 0x0, 0x40001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0xa, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES8=r6], &(0x7f00000007c0)=""/125, 0x50, 0x7d, 0x801, 0x0, 0x10000}, 0x28) 252.978893ms ago: executing program 3 (id=289): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4222, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000000)=@raw=[@tail_call, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x26}, @ringbuf_query, @alu={0x7, 0x1, 0x2, 0x7, 0x7, 0x40}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @generic={0xd2, 0xb, 0x0, 0x5, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0x88, &(0x7f00000000c0)=""/136, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x511}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x5, 0x4}, {0x5, 0x3, 0x1, 0x1}, {0x0, 0x5, 0xf, 0x7}]}, 0x94) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x22, 0x3a0, 0x5, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r1, 0x0, 0x500}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20805, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) close(0xffffffffffffffff) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 252.344413ms ago: executing program 2 (id=290): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x21, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25, 0x0, 0x0, 0x98000000}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x180a2, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000002000000000000000000000007f00000000000000180000000000002000000000000000009500000000000000540300000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x2, 0x0, 0xfffffffffffffcfb}, 0x30040805) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 0s ago: executing program 2 (id=291): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0x1, [@empty]}) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b33, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 79.402054][ T5762] cgroup: Unknown subsys name 'net' [ 79.514572][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.303108][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.958280][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.966935][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.976626][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.984737][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.992212][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.017400][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.045570][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.053401][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.057358][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.068832][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.077214][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.096330][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.104208][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.111674][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.121246][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.136672][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.137118][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.145747][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.152997][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.159914][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.173054][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.178335][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.193794][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.201358][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.659726][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.743663][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.862450][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.874000][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.882374][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.889947][ T5774] bridge_slave_0: entered allmulticast mode [ 83.897411][ T5774] bridge_slave_0: entered promiscuous mode [ 83.907466][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.960012][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.969421][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.976740][ T5774] bridge_slave_1: entered allmulticast mode [ 83.983787][ T5774] bridge_slave_1: entered promiscuous mode [ 84.027343][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.034589][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.044823][ T5776] bridge_slave_0: entered allmulticast mode [ 84.052014][ T5776] bridge_slave_0: entered promiscuous mode [ 84.070979][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.078370][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.086119][ T5776] bridge_slave_1: entered allmulticast mode [ 84.093320][ T5776] bridge_slave_1: entered promiscuous mode [ 84.177132][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.194976][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.214457][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.237502][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.244674][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.252711][ T5775] bridge_slave_0: entered allmulticast mode [ 84.260354][ T5775] bridge_slave_0: entered promiscuous mode [ 84.270083][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.299361][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.307410][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.314626][ T5775] bridge_slave_1: entered allmulticast mode [ 84.322171][ T5775] bridge_slave_1: entered promiscuous mode [ 84.403783][ T5774] team0: Port device team_slave_0 added [ 84.414512][ T5776] team0: Port device team_slave_0 added [ 84.424878][ T5776] team0: Port device team_slave_1 added [ 84.441936][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.449898][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.457633][ T5778] bridge_slave_0: entered allmulticast mode [ 84.465194][ T5778] bridge_slave_0: entered promiscuous mode [ 84.474782][ T5774] team0: Port device team_slave_1 added [ 84.506074][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.515534][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.522713][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.531000][ T5778] bridge_slave_1: entered allmulticast mode [ 84.538755][ T5778] bridge_slave_1: entered promiscuous mode [ 84.578827][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.585872][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.612187][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.640131][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.663617][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.683028][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.690226][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.716883][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.729129][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.736816][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.763171][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.787044][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.820967][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.828233][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.854840][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.869289][ T5775] team0: Port device team_slave_0 added [ 84.878371][ T5775] team0: Port device team_slave_1 added [ 84.917184][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.924200][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.950366][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.974589][ T5778] team0: Port device team_slave_0 added [ 84.985095][ T5778] team0: Port device team_slave_1 added [ 84.991544][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.998915][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.025546][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.098914][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.106047][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.132363][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.164363][ T5774] hsr_slave_0: entered promiscuous mode [ 85.172062][ T5774] hsr_slave_1: entered promiscuous mode [ 85.201079][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.209341][ T5780] Bluetooth: hci2: command tx timeout [ 85.215134][ T5791] Bluetooth: hci0: command tx timeout [ 85.221683][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.248256][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.285144][ T5780] Bluetooth: hci3: command tx timeout [ 85.285372][ T5791] Bluetooth: hci1: command tx timeout [ 85.296740][ T5776] hsr_slave_0: entered promiscuous mode [ 85.304300][ T5776] hsr_slave_1: entered promiscuous mode [ 85.312605][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.320740][ T5776] Cannot create hsr debugfs directory [ 85.373120][ T5775] hsr_slave_0: entered promiscuous mode [ 85.383355][ T5775] hsr_slave_1: entered promiscuous mode [ 85.390086][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.398484][ T5775] Cannot create hsr debugfs directory [ 85.462594][ T5778] hsr_slave_0: entered promiscuous mode [ 85.470197][ T5778] hsr_slave_1: entered promiscuous mode [ 85.477418][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.485211][ T5778] Cannot create hsr debugfs directory [ 85.907359][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.924426][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.936216][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.947782][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.018720][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.032634][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.050103][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.061351][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.175097][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.187559][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.199824][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.210409][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.312526][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.324079][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.334705][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.363847][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.422365][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.447367][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.505963][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.530384][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.540124][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.547668][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.566679][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.592008][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.599245][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.610647][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.617894][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.644137][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.651352][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.709689][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.734811][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.742105][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.789213][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.796387][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.830382][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.854120][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.950334][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.957597][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.004812][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.012098][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.149687][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.285264][ T5791] Bluetooth: hci2: command tx timeout [ 87.285285][ T5780] Bluetooth: hci0: command tx timeout [ 87.361014][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.369811][ T5780] Bluetooth: hci1: command tx timeout [ 87.376610][ T5791] Bluetooth: hci3: command tx timeout [ 87.482268][ T5776] veth0_vlan: entered promiscuous mode [ 87.531864][ T5776] veth1_vlan: entered promiscuous mode [ 87.609379][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.701295][ T5776] veth0_macvtap: entered promiscuous mode [ 87.724761][ T5776] veth1_macvtap: entered promiscuous mode [ 87.834668][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.862984][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.909139][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.951706][ T5775] veth0_vlan: entered promiscuous mode [ 87.963351][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.974583][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.984629][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.993702][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.011052][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.052429][ T5775] veth1_vlan: entered promiscuous mode [ 88.199269][ T5774] veth0_vlan: entered promiscuous mode [ 88.232046][ T5775] veth0_macvtap: entered promiscuous mode [ 88.273619][ T5774] veth1_vlan: entered promiscuous mode [ 88.286444][ T5775] veth1_macvtap: entered promiscuous mode [ 88.332157][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.342430][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.404875][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.416616][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.442022][ T5778] veth0_vlan: entered promiscuous mode [ 88.479938][ T5774] veth0_macvtap: entered promiscuous mode [ 88.500589][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.517050][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.531716][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.554184][ T5774] veth1_macvtap: entered promiscuous mode [ 88.563641][ T5778] veth1_vlan: entered promiscuous mode [ 88.579712][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.591089][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.602622][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.617627][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.629013][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.639344][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.649362][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.767449][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.781233][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.793814][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.804740][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.819232][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.821102][ C1] hrtimer: interrupt took 136876 ns [ 88.844096][ T5778] veth0_macvtap: entered promiscuous mode [ 88.884036][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.906596][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.917516][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.929539][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.947731][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.978585][ T5778] veth1_macvtap: entered promiscuous mode [ 89.029810][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.043835][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.053655][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.071744][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.144866][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.162607][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.174237][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.187626][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.197676][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.209313][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.221686][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.280257][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.294459][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.304626][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.325113][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.335124][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.352986][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.366020][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.370836][ T5791] Bluetooth: hci2: command tx timeout [ 89.383240][ T5780] Bluetooth: hci0: command tx timeout [ 89.400014][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.425148][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.446340][ T5791] Bluetooth: hci1: command tx timeout [ 89.447096][ T5780] Bluetooth: hci3: command tx timeout [ 89.522300][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.543852][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560828][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.570330][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603859][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.630594][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.790776][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.816084][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.021259][ T5845] syzkaller0: entered promiscuous mode [ 90.028795][ T5845] syzkaller0: entered allmulticast mode [ 90.182009][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.205088][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.446062][ T5780] Bluetooth: hci2: command tx timeout [ 91.456376][ T5780] Bluetooth: hci0: command tx timeout [ 91.469348][ T5853] syzkaller0: entered promiscuous mode [ 91.477041][ T5853] syzkaller0: entered allmulticast mode [ 91.525133][ T5780] Bluetooth: hci3: command tx timeout [ 91.530601][ T5780] Bluetooth: hci1: command tx timeout [ 92.102887][ T28] cfg80211: failed to load regulatory.db [ 92.869331][ T5862] syzkaller0: entered promiscuous mode [ 92.874893][ T5862] syzkaller0: entered allmulticast mode [ 93.023429][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.060903][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.331831][ T5875] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.430927][ T5878] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.9'. [ 94.151162][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 95.090575][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.151474][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.599927][ T5900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.608396][ T5900] IPv6: NLM_F_CREATE should be set when creating new route [ 95.618154][ T5900] IPv6: NLM_F_CREATE should be set when creating new route [ 95.626432][ T5900] IPv6: NLM_F_CREATE should be set when creating new route [ 95.699641][ T5905] netlink: 'syz.1.16': attribute type 9 has an invalid length. [ 95.765592][ T5905] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.818206][ T5902] veth1_to_bond: entered allmulticast mode [ 96.042105][ T5904] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.132111][ T5910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.139507][ T5910] IPv6: NLM_F_CREATE should be set when creating new route [ 96.146937][ T5910] IPv6: NLM_F_CREATE should be set when creating new route [ 96.154259][ T5910] IPv6: NLM_F_CREATE should be set when creating new route [ 96.205234][ T5908] netlink: 'syz.2.17': attribute type 17 has an invalid length. [ 96.287266][ T5900] netlink: 'syz.1.16': attribute type 9 has an invalid length. [ 96.349538][ T5900] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.16'. [ 96.748674][ T5907] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14'. [ 97.218377][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 97.227391][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 97.235562][ T5791] Bluetooth: hci1: hardware error 0x00 [ 97.668642][ T5926] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.834235][ T5930] Zero length message leads to an empty skb [ 98.267797][ T5934] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 98.306654][ T5934] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 98.716960][ T5939] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.25'. [ 98.902614][ T5943] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.27'. [ 99.316127][ T5791] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 100.752639][ T5962] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.33'. [ 100.769696][ T5966] veth1_to_bond: entered allmulticast mode [ 100.969964][ T5969] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 100.985735][ T5969] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 101.042711][ T5964] netlink: 'syz.3.34': attribute type 17 has an invalid length. [ 101.297301][ T5972] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.36'. [ 101.832276][ T5983] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.39'. [ 101.957335][ T5981] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 101.964896][ T5981] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 102.477883][ T5990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.41'. [ 102.899205][ T6001] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.44'. [ 104.088836][ T6014] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.50'. [ 104.540753][ T6019] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.51'. [ 104.921882][ T6030] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.53'. [ 105.544298][ T6036] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.56'. [ 106.644421][ T6054] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.61'. [ 106.776011][ T6052] syzkaller0: entered promiscuous mode [ 106.814481][ T6052] syzkaller0: entered allmulticast mode [ 106.867189][ T6064] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.64'. [ 107.159856][ T6070] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.66'. [ 107.824269][ T6082] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.69'. [ 108.690101][ T6098] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.75'. [ 108.718351][ T6100] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.76'. [ 108.932087][ T6107] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 109.604632][ T6107] netlink: 'syz.0.78': attribute type 21 has an invalid length. [ 109.614151][ T6107] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 109.631411][ T6105] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 109.710592][ T6105] __nla_validate_parse: 1 callbacks suppressed [ 109.710607][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'. [ 109.727467][ T6105] batman_adv: batadv0: Adding interface: veth0_vlan [ 109.738047][ T6105] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.765818][ T6105] batman_adv: batadv0: Interface activated: veth0_vlan [ 110.245601][ T5791] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 110.254183][ T5791] Bluetooth: hci0: Injecting HCI hardware error event [ 110.262525][ T5780] Bluetooth: hci0: hardware error 0x00 [ 110.334669][ T6124] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.86'. [ 111.703580][ T6148] syzkaller0: entered promiscuous mode [ 111.735408][ T6146] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.94'. [ 111.843076][ T6148] syzkaller0: entered allmulticast mode [ 112.043591][ T6154] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.95'. [ 112.095226][ T5791] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 112.104042][ T5791] Bluetooth: hci2: Injecting HCI hardware error event [ 112.112293][ T5084] Bluetooth: hci2: hardware error 0x00 [ 112.441161][ T6160] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.97'. [ 112.495278][ T5780] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.051314][ T6180] FAULT_INJECTION: forcing a failure. [ 113.051314][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.086394][ T6179] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.104'. [ 113.096193][ T6180] CPU: 0 PID: 6180 Comm: syz.2.103 Not tainted syzkaller #0 [ 113.103565][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.113711][ T6180] Call Trace: [ 113.117069][ T6180] [ 113.120067][ T6180] dump_stack_lvl+0x18c/0x250 [ 113.124848][ T6180] ? show_regs_print_info+0x20/0x20 [ 113.130129][ T6180] ? load_image+0x420/0x420 [ 113.134731][ T6180] ? __lock_acquire+0x7d80/0x7d80 [ 113.139838][ T6180] ? __lock_acquire+0x7d80/0x7d80 [ 113.144957][ T6180] should_fail_ex+0x394/0x4c0 [ 113.149742][ T6180] _copy_from_user+0x2f/0xe0 [ 113.154420][ T6180] perf_copy_attr+0x16a/0x820 [ 113.159206][ T6180] __se_sys_perf_event_open+0x11b/0x1c60 [ 113.164905][ T6180] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 113.170598][ T6180] ? mutex_unlock+0x10/0x10 [ 113.175154][ T6180] ? __fget_files+0x3fc/0x460 [ 113.179886][ T6180] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 113.185714][ T6180] ? lock_chain_count+0x20/0x20 [ 113.190632][ T6180] ? lockdep_hardirqs_on+0x98/0x150 [ 113.195880][ T6180] ? __x64_sys_perf_event_open+0x20/0xc0 [ 113.201567][ T6180] do_syscall_64+0x55/0xb0 [ 113.206040][ T6180] ? clear_bhb_loop+0x40/0x90 [ 113.210779][ T6180] ? clear_bhb_loop+0x40/0x90 [ 113.215514][ T6180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.221491][ T6180] RIP: 0033:0x7ff898b9e019 [ 113.226504][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.246191][ T6180] RSP: 002b:00007ff8999c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 113.254684][ T6180] RAX: ffffffffffffffda RBX: 00007ff898e25fa0 RCX: 00007ff898b9e019 [ 113.262711][ T6180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 113.270725][ T6180] RBP: 00007ff8999c6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.278739][ T6180] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 113.286754][ T6180] R13: 00007ff898e26038 R14: 00007ff898e25fa0 R15: 00007fffa46f4158 [ 113.294811][ T6180] [ 113.304010][ T6179] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 113.459825][ T6183] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.105'. [ 113.680457][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.705829][ T6190] netlink: 'syz.3.107': attribute type 17 has an invalid length. [ 113.714127][ T6190] netlink: 'syz.3.107': attribute type 16 has an invalid length. [ 113.724220][ T6190] netlink: 152 bytes leftover after parsing attributes in process `syz.3.107'. [ 113.948179][ T6196] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.110'. [ 114.187090][ T6208] netlink: 'syz.2.112': attribute type 3 has an invalid length. [ 114.205209][ T6208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.112'. [ 114.313857][ T6210] FAULT_INJECTION: forcing a failure. [ 114.313857][ T6210] name failslab, interval 1, probability 0, space 0, times 1 [ 114.344479][ T6210] CPU: 0 PID: 6210 Comm: syz.3.114 Not tainted syzkaller #0 [ 114.351871][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.362008][ T6210] Call Trace: [ 114.365348][ T6210] [ 114.368317][ T6210] dump_stack_lvl+0x18c/0x250 [ 114.373063][ T6210] ? show_regs_print_info+0x20/0x20 [ 114.378315][ T6210] ? load_image+0x420/0x420 [ 114.382887][ T6210] ? __might_sleep+0xe0/0xe0 [ 114.387540][ T6210] ? __lock_acquire+0x7d80/0x7d80 [ 114.392630][ T6210] should_fail_ex+0x394/0x4c0 [ 114.397388][ T6210] should_failslab+0x9/0x20 [ 114.401952][ T6210] slab_pre_alloc_hook+0x59/0x300 [ 114.407057][ T6210] kmem_cache_alloc_node+0x5e/0x310 [ 114.412414][ T6210] ? perf_event_alloc+0x146/0x2150 [ 114.417591][ T6210] perf_event_alloc+0x146/0x2150 [ 114.422678][ T6210] ? _raw_spin_unlock+0x28/0x40 [ 114.427967][ T6210] ? find_lively_task_by_vpid+0x19/0x290 [ 114.433663][ T6210] ? find_lively_task_by_vpid+0x19/0x290 [ 114.439380][ T6210] __se_sys_perf_event_open+0x740/0x1c60 [ 114.445078][ T6210] ? mutex_unlock+0x10/0x10 [ 114.449648][ T6210] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 114.455351][ T6210] ? lock_chain_count+0x20/0x20 [ 114.460296][ T6210] ? lockdep_hardirqs_on+0x98/0x150 [ 114.465566][ T6210] ? __x64_sys_perf_event_open+0x20/0xc0 [ 114.471375][ T6210] do_syscall_64+0x55/0xb0 [ 114.475849][ T6210] ? clear_bhb_loop+0x40/0x90 [ 114.480581][ T6210] ? clear_bhb_loop+0x40/0x90 [ 114.485339][ T6210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.491296][ T6210] RIP: 0033:0x7fa90c19e019 [ 114.495762][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.515422][ T6210] RSP: 002b:00007fa90d065028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 114.523902][ T6210] RAX: ffffffffffffffda RBX: 00007fa90c425fa0 RCX: 00007fa90c19e019 [ 114.531927][ T6210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 114.539963][ T6210] RBP: 00007fa90d065090 R08: 0000000000000000 R09: 0000000000000000 [ 114.548077][ T6210] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 114.556099][ T6210] R13: 00007fa90c426038 R14: 00007fa90c425fa0 R15: 00007fffbe8db698 [ 114.564169][ T6210] [ 114.582548][ T5084] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.304432][ T6221] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.118'. [ 115.681883][ T6229] syzkaller0: entered promiscuous mode [ 115.728760][ T6229] syzkaller0: entered allmulticast mode [ 116.237717][ T6255] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.129'. [ 116.478880][ T6264] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 116.487126][ T6264] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.131'. [ 117.856636][ T6265] ip6gre0: entered allmulticast mode [ 117.876607][ T6268] netlink: 'syz.3.131': attribute type 39 has an invalid length. [ 118.309020][ T6274] syzkaller0: entered promiscuous mode [ 118.322315][ T6274] syzkaller0: entered allmulticast mode [ 118.457670][ T6286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.137'. [ 118.540156][ T6290] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.139'. [ 120.070808][ T6297] syzkaller0: entered promiscuous mode [ 120.083458][ T6297] syzkaller0: entered allmulticast mode [ 120.315854][ T6306] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.142'. [ 121.148667][ T6324] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.149'. [ 123.089598][ T6361] netlink: 'syz.3.155': attribute type 21 has an invalid length. [ 123.101103][ T6361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.155'. [ 123.193307][ T6361] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.155'. [ 123.521470][ T6374] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.159'. [ 124.396208][ T6382] syzkaller0: entered promiscuous mode [ 124.496547][ T6382] syzkaller0: entered allmulticast mode [ 126.744407][ T6405] delete_channel: no stack [ 126.953389][ T6416] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.170'. [ 128.318367][ T6410] warning: `syz.2.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.584662][ T6430] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.173'. [ 128.912556][ T6444] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.179'. [ 133.050093][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059530][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243063][ T6450] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 133.265047][ T6450] netlink: 2 bytes leftover after parsing attributes in process `syz.0.180'. [ 133.273902][ T6450] batadv_slave_1: entered promiscuous mode [ 133.295422][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.302900][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.462408][ T6455] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 133.488331][ T6455] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.181'. [ 134.077772][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.187'. [ 134.114371][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.187'. [ 134.177538][ T6474] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.188'. [ 134.199178][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.187'. [ 134.249554][ T6472] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.187'. [ 134.531194][ T6480] syz.0.190: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 134.618147][ T6480] CPU: 1 PID: 6480 Comm: syz.0.190 Not tainted syzkaller #0 [ 134.625526][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.635737][ T6480] Call Trace: [ 134.639064][ T6480] [ 134.642030][ T6480] dump_stack_lvl+0x18c/0x250 [ 134.646786][ T6480] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.653024][ T6480] ? show_regs_print_info+0x20/0x20 [ 134.658366][ T6480] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.664671][ T6480] warn_alloc+0x246/0x340 [ 134.669055][ T6480] ? stack_trace_save+0xaa/0x100 [ 134.674048][ T6480] ? zone_watermark_ok_safe+0x230/0x230 [ 134.679644][ T6480] ? kasan_set_track+0x5f/0x70 [ 134.684466][ T6480] ? kasan_set_track+0x4e/0x70 [ 134.689364][ T6480] ? __kasan_kmalloc+0x8f/0xa0 [ 134.694209][ T6480] ? xsk_init_queue+0xad/0x100 [ 134.699043][ T6480] ? xsk_setsockopt+0x4c9/0x750 [ 134.703953][ T6480] ? do_sock_setsockopt+0x175/0x1a0 [ 134.709198][ T6480] ? __x64_sys_setsockopt+0x182/0x200 [ 134.714627][ T6480] __vmalloc_node_range+0x129/0x1320 [ 134.720010][ T6480] ? free_vm_area+0x50/0x50 [ 134.724590][ T6480] vmalloc_user+0x74/0x80 [ 134.728995][ T6480] ? xskq_create+0xbf/0x170 [ 134.733559][ T6480] xskq_create+0xbf/0x170 [ 134.737959][ T6480] xsk_init_queue+0xad/0x100 [ 134.742621][ T6480] xsk_setsockopt+0x4c9/0x750 [ 134.747367][ T6480] ? xsk_poll+0x670/0x670 [ 134.751771][ T6480] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.757989][ T6480] ? xsk_poll+0x670/0x670 [ 134.762391][ T6480] ? do_sock_setsockopt+0x15e/0x1a0 [ 134.768008][ T6480] ? xsk_poll+0x670/0x670 [ 134.772407][ T6480] do_sock_setsockopt+0x175/0x1a0 [ 134.777503][ T6480] ? __fdget+0x180/0x210 [ 134.781816][ T6480] __x64_sys_setsockopt+0x182/0x200 [ 134.787104][ T6480] do_syscall_64+0x55/0xb0 [ 134.791580][ T6480] ? clear_bhb_loop+0x40/0x90 [ 134.796309][ T6480] ? clear_bhb_loop+0x40/0x90 [ 134.801035][ T6480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.806996][ T6480] RIP: 0033:0x7f1b2379e019 [ 134.811470][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.831484][ T6480] RSP: 002b:00007f1b2467d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.840050][ T6480] RAX: ffffffffffffffda RBX: 00007f1b23a25fa0 RCX: 00007f1b2379e019 [ 134.848163][ T6480] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 134.856183][ T6480] RBP: 00007f1b2383500c R08: 0000000000000004 R09: 0000000000000000 [ 134.864205][ T6480] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 134.872233][ T6480] R13: 00007f1b23a26038 R14: 00007f1b23a25fa0 R15: 00007ffe3bdfa958 [ 134.880280][ T6480] [ 134.891959][ T6482] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.191'. [ 134.914289][ T6480] Mem-Info: [ 134.922318][ T6480] active_anon:5132 inactive_anon:0 isolated_anon:0 [ 134.922318][ T6480] active_file:11398 inactive_file:39968 isolated_file:0 [ 134.922318][ T6480] unevictable:768 dirty:122 writeback:0 [ 134.922318][ T6480] slab_reclaimable:9648 slab_unreclaimable:93570 [ 134.922318][ T6480] mapped:24171 shmem:1361 pagetables:550 [ 134.922318][ T6480] sec_pagetables:0 bounce:0 [ 134.922318][ T6480] kernel_misc_reclaimable:0 [ 134.922318][ T6480] free:1349958 free_pcp:11571 free_cma:0 [ 135.077141][ T6480] Node 0 active_anon:21180kB inactive_anon:0kB active_file:45592kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96724kB dirty:504kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10680kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 135.165246][ T6480] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 135.285762][ T6480] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.355408][ T6480] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 135.372753][ T6480] Node 0 DMA32 free:1490296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21892kB inactive_anon:0kB active_file:45592kB inactive_file:158848kB unevictable:1536kB writepending:592kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:25204kB local_pcp:11188kB free_cma:0kB [ 135.432071][ T6480] lowmem_reserve[]: 0 0 0 0 0 [ 135.438417][ T6480] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 135.508477][ T6480] lowmem_reserve[]: 0 0 0 0 0 [ 135.513320][ T6480] Node 1 Normal free:3893036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20940kB local_pcp:11212kB free_cma:0kB [ 135.552697][ T6480] lowmem_reserve[]: 0 0 0 0 0 [ 135.558125][ T6480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.601793][ T6480] Node 0 DMA32: 1797*4kB (UE) 1084*8kB (UE) 984*16kB (UME) 2115*32kB (UME) 835*64kB (UME) 119*128kB (UME) 42*256kB (UME) 17*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 313*4096kB (M) = 1487892kB [ 135.628978][ T6480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 135.655078][ T6480] Node 1 Normal: 293*4kB (UE) 67*8kB (UE) 38*16kB (UE) 47*32kB (UE) 11*64kB (UME) 7*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 949*4096kB (ME) = 3893036kB [ 135.705063][ T6480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.714705][ T6480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.767166][ T6480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.780267][ T6480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.794270][ T6480] 52727 total pagecache pages [ 135.802735][ T6480] 0 pages in swap cache [ 135.813745][ T6480] Free swap = 124996kB [ 135.821199][ T6480] Total swap = 124996kB [ 135.835154][ T6480] 2097051 pages RAM [ 135.839049][ T6480] 0 pages HighMem/MovableOnly [ 135.862134][ T6480] 416955 pages reserved [ 135.878988][ T6480] 0 pages cma reserved [ 136.310795][ T6515] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.199'. [ 136.702644][ T6528] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.200'. [ 139.466675][ T6571] __nla_validate_parse: 1 callbacks suppressed [ 139.466727][ T6571] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.220'. [ 140.044808][ T6587] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 140.058448][ T6587] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.218'. [ 141.694366][ T6603] syzkaller0: entered promiscuous mode [ 141.700739][ T6603] syzkaller0: entered allmulticast mode [ 141.818131][ T6610] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.225'. [ 141.916387][ T6610] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 141.934218][ T6610] veth0_macvtap: left promiscuous mode [ 143.632870][ T6616] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.228'. [ 143.672241][ T6614] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.226'. [ 143.832942][ T6627] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.232'. [ 144.433299][ T6642] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.235'. [ 144.726708][ T5084] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 144.945257][ T6651] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.240'. [ 145.233643][ T6668] tap0: tun_chr_ioctl cmd 1074025677 [ 145.265254][ T6668] tap0: linktype set to 768 [ 145.282913][ T6668] tap0: tun_chr_ioctl cmd 1074025672 [ 145.289801][ T6668] tap0: ignored: set checksum disabled [ 145.346915][ T6671] syz.2.245[6671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.369094][ T6673] netlink: 'syz.3.247': attribute type 4 has an invalid length. [ 145.405179][ T6673] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.247'. [ 146.142444][ T6695] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.253'. [ 146.358792][ T6706] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.256'. [ 146.560335][ T6719] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 146.599594][ T6719] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.261'. [ 147.722850][ T6746] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.269'. [ 148.445363][ T6759] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.274'. [ 149.636420][ T6779] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.281'. [ 152.043883][ T6802] netlink: 'syz.3.289': attribute type 3 has an invalid length. [ 152.117838][ T6802] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.289'. [ 152.485439][ T6806] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.291'. [ 152.514339][ T6807] ================================================================== [ 152.522497][ T6807] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 152.530682][ T6807] Write of size 72 at addr ffff88802ea14d90 by task syz.3.289/6807 [ 152.538705][ T6807] [ 152.541073][ T6807] CPU: 1 PID: 6807 Comm: syz.3.289 Not tainted syzkaller #0 [ 152.548410][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.558570][ T6807] Call Trace: [ 152.561907][ T6807] [ 152.564889][ T6807] dump_stack_lvl+0x18c/0x250 [ 152.569619][ T6807] ? read_lock_is_recursive+0x20/0x20 [ 152.575039][ T6807] ? show_regs_print_info+0x20/0x20 [ 152.580280][ T6807] ? load_image+0x420/0x420 [ 152.584822][ T6807] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 152.590409][ T6807] ? __virt_addr_valid+0x10c/0x380 [ 152.595552][ T6807] ? __virt_addr_valid+0x10c/0x380 [ 152.600689][ T6807] ? __virt_addr_valid+0x10c/0x380 [ 152.605825][ T6807] print_report+0xa8/0x210 [ 152.610268][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 152.615411][ T6807] kasan_report+0x117/0x150 [ 152.619950][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 152.625098][ T6807] kasan_check_range+0x241/0x290 [ 152.630081][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 152.635221][ T6807] __asan_memcpy+0x40/0x70 [ 152.639674][ T6807] __bpf_get_stackid+0x6c7/0x900 [ 152.644646][ T6807] bpf_get_stackid_pe+0x343/0x410 [ 152.649701][ T6807] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 152.655188][ T6807] bpf_overflow_handler+0x1fc/0x510 [ 152.660431][ T6807] ? bpf_overflow_handler+0xde/0x510 [ 152.665743][ T6807] ? tp_perf_event_destroy+0x20/0x20 [ 152.671072][ T6807] ? perf_trace_preemptirq_template+0xac/0x330 [ 152.677282][ T6807] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 152.684516][ T6807] ? __perf_event_account_interrupt+0x187/0x280 [ 152.690878][ T6807] __perf_event_overflow+0x461/0x660 [ 152.696198][ T6807] perf_swevent_event+0x319/0x570 [ 152.701263][ T6807] ? perf_tp_event+0x1550/0x1550 [ 152.706231][ T6807] ? perf_trace_preemptirq_template+0xac/0x330 [ 152.712423][ T6807] ___perf_sw_event+0x4ab/0x730 [ 152.717302][ T6807] ? ___perf_sw_event+0x19e/0x730 [ 152.722349][ T6807] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 152.728789][ T6807] ? __lock_acquire+0x1336/0x7d80 [ 152.733838][ T6807] ? rep_movs_alternative+0x4a/0x90 [ 152.739081][ T6807] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 152.745108][ T6807] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 152.752342][ T6807] ? lock_chain_count+0x20/0x20 [ 152.757220][ T6807] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 152.763160][ T6807] __perf_sw_event+0x139/0x270 [ 152.767955][ T6807] do_user_addr_fault+0x1242/0x12d0 [ 152.773188][ T6807] ? rcu_is_watching+0x15/0xb0 [ 152.778000][ T6807] exc_page_fault+0x64/0x100 [ 152.782627][ T6807] asm_exc_page_fault+0x26/0x30 [ 152.787507][ T6807] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 152.793344][ T6807] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 152.812978][ T6807] RSP: 0018:ffffc9000bd87bd0 EFLAGS: 00050206 [ 152.819074][ T6807] RAX: ffffffff8431f301 RBX: 000000000000056d RCX: 00000000000004aa [ 152.827165][ T6807] RDX: 0000000000000001 RSI: 000020000008a000 RDI: ffff8880239360c3 [ 152.835184][ T6807] RBP: ffffc9000bd87d20 R08: 0000000000000004 R09: 0000000000000005 [ 152.843175][ T6807] R10: dffffc0000000000 R11: ffffed1004726cad R12: 000020000008a4aa [ 152.851171][ T6807] R13: 1ffff920017b0fbd R14: ffff888023936000 R15: 0000200000089f3d [ 152.859175][ T6807] ? rcuref_put_slowpath+0x101/0x150 [ 152.864501][ T6807] _copy_from_user+0x8b/0xe0 [ 152.869116][ T6807] generic_map_update_batch+0x58c/0x800 [ 152.874700][ T6807] ? rcu_read_unlock+0xa0/0xa0 [ 152.879536][ T6807] ? __fdget+0x180/0x210 [ 152.883814][ T6807] ? rcu_read_unlock+0xa0/0xa0 [ 152.888613][ T6807] bpf_map_do_batch+0x3f2/0x600 [ 152.893498][ T6807] ? bpf_lsm_key_alloc+0x10/0x10 [ 152.898487][ T6807] __sys_bpf+0x381/0x890 [ 152.902769][ T6807] ? bpf_link_show_fdinfo+0x390/0x390 [ 152.908269][ T6807] ? lock_chain_count+0x20/0x20 [ 152.913149][ T6807] __x64_sys_bpf+0x7c/0x90 [ 152.917592][ T6807] do_syscall_64+0x55/0xb0 [ 152.922035][ T6807] ? clear_bhb_loop+0x40/0x90 [ 152.926743][ T6807] ? clear_bhb_loop+0x40/0x90 [ 152.931532][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.937447][ T6807] RIP: 0033:0x7fa90c19e019 [ 152.941883][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.961533][ T6807] RSP: 002b:00007fa90d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.969984][ T6807] RAX: ffffffffffffffda RBX: 00007fa90c426090 RCX: 00007fa90c19e019 [ 152.977986][ T6807] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 152.985985][ T6807] RBP: 00007fa90c23500c R08: 0000000000000000 R09: 0000000000000000 [ 152.994004][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.002006][ T6807] R13: 00007fa90c426128 R14: 00007fa90c426090 R15: 00007fffbe8db698 [ 153.010028][ T6807] [ 153.013344][ T6807] [ 153.015683][ T6807] Allocated by task 6802: [ 153.020028][ T6807] kasan_set_track+0x4e/0x70 [ 153.024667][ T6807] __kasan_kmalloc+0x8f/0xa0 [ 153.029391][ T6807] __kmalloc_node+0xb6/0x240 [ 153.034122][ T6807] bpf_map_area_alloc+0x5e/0x110 [ 153.039105][ T6807] prealloc_elems_and_freelist+0x86/0x1c0 [ 153.044861][ T6807] stack_map_alloc+0x32b/0x4b0 [ 153.049668][ T6807] map_create+0x877/0x12f0 [ 153.054112][ T6807] __sys_bpf+0x651/0x890 [ 153.058399][ T6807] __x64_sys_bpf+0x7c/0x90 [ 153.062950][ T6807] do_syscall_64+0x55/0xb0 [ 153.067400][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.073322][ T6807] [ 153.075679][ T6807] The buggy address belongs to the object at ffff88802ea14d80 [ 153.075679][ T6807] which belongs to the cache kmalloc-cg-64 of size 64 [ 153.089869][ T6807] The buggy address is located 16 bytes inside of [ 153.089869][ T6807] allocated 40-byte region [ffff88802ea14d80, ffff88802ea14da8) [ 153.103881][ T6807] [ 153.106225][ T6807] The buggy address belongs to the physical page: [ 153.112673][ T6807] page:ffffea0000ba8500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ea14 [ 153.122847][ T6807] memcg:ffff88802e0b4601 [ 153.127106][ T6807] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 153.134668][ T6807] page_type: 0xffffffff() [ 153.139022][ T6807] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 153.147632][ T6807] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802e0b4601 [ 153.156232][ T6807] page dumped because: kasan: bad access detected [ 153.162669][ T6807] page_owner tracks the page as allocated [ 153.168397][ T6807] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5774, tgid 5774 (syz-executor), ts 145159995012, free_ts 145159528817 [ 153.186918][ T6807] post_alloc_hook+0x1c1/0x200 [ 153.191717][ T6807] get_page_from_freelist+0x2181/0x22a0 [ 153.197282][ T6807] __alloc_pages+0x1f0/0x460 [ 153.201890][ T6807] alloc_slab_page+0x5d/0x180 [ 153.206587][ T6807] new_slab+0x87/0x2d0 [ 153.210682][ T6807] ___slab_alloc+0xc5c/0x12f0 [ 153.215407][ T6807] __kmem_cache_alloc_node+0x11f/0x250 [ 153.220896][ T6807] kmalloc_trace+0x2a/0xe0 [ 153.225515][ T6807] alloc_fdtable+0xca/0x2c0 [ 153.230049][ T6807] dup_fd+0x747/0xa20 [ 153.234057][ T6807] copy_files+0xaf/0x110 [ 153.238411][ T6807] copy_process+0x157d/0x3da0 [ 153.243110][ T6807] kernel_clone+0x24b/0x8a0 [ 153.247645][ T6807] __x64_sys_clone+0x1b7/0x230 [ 153.252432][ T6807] do_syscall_64+0x55/0xb0 [ 153.256882][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.262806][ T6807] page last free stack trace: [ 153.267512][ T6807] free_unref_page_prepare+0x7d7/0x8f0 [ 153.273002][ T6807] free_unref_page+0x32/0x2e0 [ 153.277701][ T6807] vfree+0x1a7/0x340 [ 153.281621][ T6807] __do_replace+0x878/0x9b0 [ 153.286156][ T6807] do_ip6t_set_ctl+0xb41/0xe10 [ 153.290948][ T6807] nf_setsockopt+0x263/0x280 [ 153.295568][ T6807] do_sock_setsockopt+0x175/0x1a0 [ 153.300632][ T6807] __x64_sys_setsockopt+0x182/0x200 [ 153.305945][ T6807] do_syscall_64+0x55/0xb0 [ 153.310382][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.316308][ T6807] [ 153.318647][ T6807] Memory state around the buggy address: [ 153.324295][ T6807] ffff88802ea14c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 153.332386][ T6807] ffff88802ea14d00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 153.340474][ T6807] >ffff88802ea14d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 153.348568][ T6807] ^ [ 153.354058][ T6807] ffff88802ea14e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.362156][ T6807] ffff88802ea14e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.370243][ T6807] ================================================================== [ 153.378339][ T6807] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.385550][ T6807] CPU: 1 PID: 6807 Comm: syz.3.289 Not tainted syzkaller #0 [ 153.392863][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.402940][ T6807] Call Trace: [ 153.406276][ T6807] [ 153.409263][ T6807] dump_stack_lvl+0x18c/0x250 [ 153.413980][ T6807] ? show_regs_print_info+0x20/0x20 [ 153.419208][ T6807] ? load_image+0x420/0x420 [ 153.423777][ T6807] panic+0x2ca/0x720 [ 153.427807][ T6807] ? __lock_acquire+0x7d80/0x7d80 [ 153.432955][ T6807] ? bpf_jit_dump+0xd0/0xd0 [ 153.437497][ T6807] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 153.443427][ T6807] ? _raw_spin_unlock+0x40/0x40 [ 153.448326][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 153.453477][ T6807] check_panic_on_warn+0x84/0xa0 [ 153.458458][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 153.463604][ T6807] end_report+0x6f/0x130 [ 153.467880][ T6807] kasan_report+0x128/0x150 [ 153.472424][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 153.477633][ T6807] kasan_check_range+0x241/0x290 [ 153.482633][ T6807] ? __bpf_get_stackid+0x6c7/0x900 [ 153.487805][ T6807] __asan_memcpy+0x40/0x70 [ 153.492255][ T6807] __bpf_get_stackid+0x6c7/0x900 [ 153.497233][ T6807] bpf_get_stackid_pe+0x343/0x410 [ 153.502323][ T6807] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 153.507807][ T6807] bpf_overflow_handler+0x1fc/0x510 [ 153.513056][ T6807] ? bpf_overflow_handler+0xde/0x510 [ 153.518385][ T6807] ? tp_perf_event_destroy+0x20/0x20 [ 153.523704][ T6807] ? perf_trace_preemptirq_template+0xac/0x330 [ 153.529908][ T6807] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 153.537141][ T6807] ? __perf_event_account_interrupt+0x187/0x280 [ 153.543409][ T6807] __perf_event_overflow+0x461/0x660 [ 153.548728][ T6807] perf_swevent_event+0x319/0x570 [ 153.553782][ T6807] ? perf_tp_event+0x1550/0x1550 [ 153.558748][ T6807] ? perf_trace_preemptirq_template+0xac/0x330 [ 153.564967][ T6807] ___perf_sw_event+0x4ab/0x730 [ 153.569861][ T6807] ? ___perf_sw_event+0x19e/0x730 [ 153.574913][ T6807] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 153.581388][ T6807] ? __lock_acquire+0x1336/0x7d80 [ 153.586455][ T6807] ? rep_movs_alternative+0x4a/0x90 [ 153.591702][ T6807] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 153.597721][ T6807] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 153.604954][ T6807] ? lock_chain_count+0x20/0x20 [ 153.609857][ T6807] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 153.615791][ T6807] __perf_sw_event+0x139/0x270 [ 153.620582][ T6807] do_user_addr_fault+0x1242/0x12d0 [ 153.626074][ T6807] ? rcu_is_watching+0x15/0xb0 [ 153.630870][ T6807] exc_page_fault+0x64/0x100 [ 153.635495][ T6807] asm_exc_page_fault+0x26/0x30 [ 153.640381][ T6807] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 153.646232][ T6807] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 153.665858][ T6807] RSP: 0018:ffffc9000bd87bd0 EFLAGS: 00050206 [ 153.671946][ T6807] RAX: ffffffff8431f301 RBX: 000000000000056d RCX: 00000000000004aa [ 153.679947][ T6807] RDX: 0000000000000001 RSI: 000020000008a000 RDI: ffff8880239360c3 [ 153.687939][ T6807] RBP: ffffc9000bd87d20 R08: 0000000000000004 R09: 0000000000000005 [ 153.695934][ T6807] R10: dffffc0000000000 R11: ffffed1004726cad R12: 000020000008a4aa [ 153.703930][ T6807] R13: 1ffff920017b0fbd R14: ffff888023936000 R15: 0000200000089f3d [ 153.711932][ T6807] ? rcuref_put_slowpath+0x101/0x150 [ 153.717254][ T6807] _copy_from_user+0x8b/0xe0 [ 153.721875][ T6807] generic_map_update_batch+0x58c/0x800 [ 153.727467][ T6807] ? rcu_read_unlock+0xa0/0xa0 [ 153.732262][ T6807] ? __fdget+0x180/0x210 [ 153.736537][ T6807] ? rcu_read_unlock+0xa0/0xa0 [ 153.741358][ T6807] bpf_map_do_batch+0x3f2/0x600 [ 153.746234][ T6807] ? bpf_lsm_key_alloc+0x10/0x10 [ 153.751204][ T6807] __sys_bpf+0x381/0x890 [ 153.755469][ T6807] ? bpf_link_show_fdinfo+0x390/0x390 [ 153.760869][ T6807] ? lock_chain_count+0x20/0x20 [ 153.765753][ T6807] __x64_sys_bpf+0x7c/0x90 [ 153.770199][ T6807] do_syscall_64+0x55/0xb0 [ 153.774642][ T6807] ? clear_bhb_loop+0x40/0x90 [ 153.779342][ T6807] ? clear_bhb_loop+0x40/0x90 [ 153.784046][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.790055][ T6807] RIP: 0033:0x7fa90c19e019 [ 153.794518][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.814242][ T6807] RSP: 002b:00007fa90d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.822682][ T6807] RAX: ffffffffffffffda RBX: 00007fa90c426090 RCX: 00007fa90c19e019 [ 153.830680][ T6807] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 153.838760][ T6807] RBP: 00007fa90c23500c R08: 0000000000000000 R09: 0000000000000000 [ 153.846756][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.854746][ T6807] R13: 00007fa90c426128 R14: 00007fa90c426090 R15: 00007fffbe8db698 [ 153.862862][ T6807] [ 153.866470][ T6807] Kernel Offset: disabled [ 153.870823][ T6807] Rebooting in 86400 seconds..