last executing test programs: 2.605098109s ago: executing program 1 (id=226): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x31) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r2, @ANYBLOB="94f5fd075a9ecfd500"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b509000040020000dba8f8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r3, &(0x7f00000000c0)=0x100000000, 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xca4d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) 2.603243339s ago: executing program 2 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4104c0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth1_to_batadv\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x38}, 0x18) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xea, 0x3, 0xc, 0xe, 0x0, 0x8, 0x2011, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x300, 0xfffffffffffffff9, 0x1ff, 0x7, 0x3, 0xfffffff7, 0x7fff, 0x0, 0x5, 0x0, 0x800}, 0x0, 0x7, r2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x80000000, 0xf59, 0x208, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000400)) close(r6) write$cgroup_subtree(r4, &(0x7f0000000440)={[{0x2b, 'hugetlb'}]}, 0x9) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000480)=0x2) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000500)={'dvmrp0\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x1ff) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000580)) r8 = getpid() r9 = perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x2, 0x2, 0x8, 0x5, 0x0, 0x0, 0x100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0x6f1}, 0x18302, 0xa, 0x6, 0x4, 0x8000000000000001, 0x800, 0xa2d, 0x0, 0x7, 0x0, 0x6e8}, 0xffffffffffffffff, 0xb, r4, 0x8) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x1, 0x1, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f00000005c0), 0x4}, 0x4000, 0x6, 0x10, 0x8, 0x3, 0x0, 0x6, 0x0, 0xbfc, 0x0, 0x2}, r8, 0x10, r9, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000740)={0x2, 0x80, 0x4, 0x9, 0x0, 0xf8, 0x0, 0x100, 0x40, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xfff, 0x8000000000000000}, 0x102, 0x8000000000000001, 0xf, 0x0, 0x200, 0x4, 0x1000, 0x0, 0xd0, 0x0, 0xef0}, r7, 0x9, r9, 0x0) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f00000007c0)) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x198, 0x198, 0x9, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @union={0x10, 0x3, 0x0, 0x5, 0x0, 0xf, [{0xf, 0x3, 0x9}, {0x9, 0x3, 0x3ff}, {0xa, 0x3, 0xffff}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x10}}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x10, 0x1}, {0x2, 0x1}, {0xc, 0x3}]}, @union={0x10, 0x8, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x3}, {0xf, 0x1, 0x5}, {0xb, 0x2, 0x9}, {0x8, 0x0, 0x41e}, {0x1, 0x5, 0x9}, {0xa, 0x2, 0x7fff}, {0x5, 0x3, 0xfbcb7667}, {0x5, 0x3, 0x5}]}, @union={0xf, 0x9, 0x0, 0x5, 0x1, 0x9, [{0x6, 0x3, 0xffffff80}, {0xb, 0x2, 0x101}, {0x6, 0x5, 0x7}, {0x0, 0x2, 0x254}, {0x10, 0x1, 0x14b}, {0xa, 0x0, 0x3}, {0x1, 0x4}, {0x9, 0x1, 0xc}, {0x1, 0x3, 0x763}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x5}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f]}}, &(0x7f00000009c0)=""/132, 0x1b9, 0x84, 0x0, 0x80000000, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1f, 0xa, 0xa189, 0x7ff, 0x1000, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r11, 0x4, 0x2, 0x4}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/1, 0x1}, {&(0x7f0000001c40)=""/102, 0x66}, {&(0x7f0000001cc0)=""/97, 0x61}, {&(0x7f0000001d40)=""/120, 0x78}, {&(0x7f0000001dc0)=""/236, 0xec}], 0x7, &(0x7f0000001f40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40012040) 2.372716472s ago: executing program 2 (id=230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x8, 0x57, &(0x7f0000000140)="c162bd718f8e238e", &(0x7f0000000240)=""/87, 0x0, 0x0, 0x34, 0xf8, &(0x7f0000000340)="a65df487595935b210d9c59c7c76640f89609039be463752ad88e70da45df779e0af491c774640578966fef214d3b0609a7a948c", &(0x7f0000000380)="81f8828a7b6ccf7defd9f85f337fff6082f782f8139ad6f59c88b59a3b8fe55e562a12d64a36f5187a3dbca30cf3187daa98342ca20a6c9184a774a6f0338cb7eb6fb44e9868581839d3ca45aa7a396db0a4fbb0bff20783afcf4a521ad4d63d54efcb7a27d0a1f9b5e1d52437980f05900d29f9dde4ed5c39294bf475c8a691de5de3da08f592962e959c16bb877b4b2fc8bb79e53f75753b62b7e56d7b0b191ad9f78ab2a76b1c4cb5031510e74749de272973ce09d2744693646caab4182566e830512eb3b14bd67362a52f73f24e5acc458c9452470f153986a01c2f18602ab3ae9b86f808977b3bba9b48c1db6d8a567112d8ddcc28", 0x4, 0x0, 0x5}, 0x50) 2.176886074s ago: executing program 2 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c6c250000000000202020aaacbb30969ae4a4c8797a9e939d877b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000000800000000000000850000009b0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)=r0}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0xe, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x30, 0x2e, 0x2e, 0x0, 0x5f, 0x5f]}}, &(0x7f00000005c0)=""/6, 0x2d, 0x6, 0x1, 0x3, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0xf, 0x1, 0x5, 0x7, 0x800}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x801, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000400)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) sendmsg$kcm(r4, &(0x7f0000000e40)={&(0x7f0000000b40)=@l2tp={0x2, 0x0, @private=0xfffffff7, 0x401}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="4e82157b1963bb0fa71855371ab8f715e8cf82ace26a654f31a623410fcd37182af0c02b56def4137f507d8755dffd5ab0e2725d4febf14b405e5d17d62ab7532af52ab84bd42c1ab7751b134041ed308329184cdba94a80dfb8b869f7315125b4d9164fc1ddc741cb2cfbc2a95eeaed19fe70a3874de2337bf4c75b4fc12c36dfa5372143497e6d4fdaaed50ec6368f8deb59f48858414c4e7e4d420db7207bffff", 0xa2}, {&(0x7f0000000c80)="a7d823bc40892b807aca7244f085acacc63c5e0fafbcea6457d1a80436323fe8fc215e4f4cf0360a43d2232e70010a1a2b28afc15bf7e64cbc213c1b7c6d866f8f6105be2aca8909574be328ef67b7e2bd3402e0af47d1bb3a276c2f2839ea9dfc1603008b73075f5629cf44905b7dbaae37af904b749baeecb5a019888bfe65df69f2197fa1b74f04283dbd5e827f87d5ab452b937acd04cfc83a6f0eab76f45ef43ef266e0fd28f08c2c236d6b1ccb4eb2369aafe3f5a1ccf287ab0dd250153231fec73fd93ec2712eb237", 0xcc}], 0x2, &(0x7f0000000dc0)=[{0x48, 0x115, 0x3, "29e8474e65be7c4b00bc2d09fbc6f012f9d4bf04981004b7c57e186f1d2cc930d3184c1837b878ff675fe6c98b78ea858c7aa9097a21e078"}, {0x38, 0x115, 0x1ff, "64e350e6c029022bdee63f261f530ff1f34cc6898eedaa45bbca024416135312fe2f014b"}], 0x80}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x6, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x10, &(0x7f00000000c0)=""/16, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x1c, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x3, 0x3, 0x7, 0x8, 0x30, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xb, 0x1, 0x1, 0xfffffffffffffff0, 0x1}, @call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa5, &(0x7f00000004c0)=""/165, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x13, r2, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xa, 0x10001, 0xa25d}, 0x10, r3, r1, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xb, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="911094000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) 2.08003313s ago: executing program 1 (id=234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{}, {0x6, 0x0, 0x5, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.049064261s ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="16230fd7d63061b8569f92b37ac22fd4ad361ddb49c81e96f4723f12a28800cabcfc668f93486c63d2ae4e39d426bcc8f400000000fad807eb6ba3c57cc7", &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18abcfb8031cc3f41d8a57000000000000002300edffffffffff17310000bb0991f8c268096489aa922723316d89ae19516bbde87ec2", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000280), 0x4) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0xfca804a0, 0xe, 0x5f, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0xfe33) 1.947106687s ago: executing program 0 (id=236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2000}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.945852197s ago: executing program 3 (id=237): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf0900000000000000007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb290000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x88a8ffffffffffff) 1.849252753s ago: executing program 1 (id=238): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100008400060000000000000300000000000000000000000000000d00000000000000000000000902"], 0x0, 0x4a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.847148963s ago: executing program 3 (id=239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000fe00000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.705895521s ago: executing program 2 (id=240): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b28, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r0, r1, 0x1, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x401}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a001e0008000699e3ffffff1e000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014000000001208000400", 0x2c}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.695138412s ago: executing program 1 (id=241): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa20000000f000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 1.637177435s ago: executing program 3 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18001b04000000000000c9a71d3e7e000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.558593449s ago: executing program 0 (id=243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xffd4}, 0x80) 1.402153848s ago: executing program 3 (id=244): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x18, 0x110}}], 0x38}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xff) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000640), 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6000800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="895935f6b5d1ae3ca88d7d18be8f3453b2b3fde78905000000050000ffff000000c200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r5}, &(0x7f0000000200), &(0x7f0000000240), 0x2}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000800890f6762359aa30a000000000000000000000000006f341cdd7aacab59112abaef8748e4aed47f2c0459bbe2dfa563c244fdfdecc27296d1a5a61baff81abfc3462a5b6c56ae32368adc25bc23b6035e8480a4c9700e9461f73609ac4cb9"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.313057364s ago: executing program 0 (id=245): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.201284681s ago: executing program 0 (id=246): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x1000}, 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x8000000, 0x10000}, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r2, r0}) (async) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7c, &(0x7f0000000000)=r7, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000640)=r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c33, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0xffffffff}, {0x3d}, {0x2}, {0x6}]}) close(r3) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6238758b35d0ad05, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 64) 420.422656ms ago: executing program 1 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000019000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 369.190719ms ago: executing program 0 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x10000007}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value=0x90}, 0x94) 368.381089ms ago: executing program 2 (id=249): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000070000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 280.008864ms ago: executing program 3 (id=250): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000800000000000000000000850000004100000085000000c400000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.6956ms ago: executing program 1 (id=251): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 214.45µs ago: executing program 3 (id=252): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x26, 0x1, 0x10000, &(0x7f0000001580), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0), &(0x7f0000001640)=[0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) sendmsg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)='x', 0x1}], 0x1}, 0x4) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10020) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000016c0)={@fallback=r0, 0xffffffffffffffff, 0x2e, 0x19, 0xffffffffffffffff, @void, @value=r4, @void, @void, r1}, 0x20) r5 = socket$kcm(0x28, 0x5, 0x0) close(r5) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000005000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 0s ago: executing program 0 (id=253): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x6, 0x35, 0x3, 0x7, 0x0, 0x0, 0x40, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff910c, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x24, 0x7, 0xf3, 0x1, 0x7, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0xfffffffffffff801}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0xfd, 0xa, 0x2, 0x0, 0x3, 0x22a75, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x1, 0xfffffffffffffc00, 0xd0f, 0x6, 0x0, 0x7, 0xc, 0x0, 0x5, 0x0, 0xb}, r0, 0xf, r1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 81.999875][ T5756] cgroup: Unknown subsys name 'net' [ 82.137039][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.805925][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.409746][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.418271][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.426387][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.436438][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.444346][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.452006][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.459923][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.470091][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.477491][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.485624][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.494481][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.503796][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.511028][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.519085][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.526239][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.534894][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.543252][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.551344][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.559874][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.585055][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.592557][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.601265][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.610408][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.617863][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.031878][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.182720][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.232502][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.244368][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.253645][ T5770] bridge_slave_0: entered allmulticast mode [ 86.262583][ T5770] bridge_slave_0: entered promiscuous mode [ 86.275881][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.283691][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.291802][ T5770] bridge_slave_1: entered allmulticast mode [ 86.300111][ T5770] bridge_slave_1: entered promiscuous mode [ 86.381190][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.410936][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.424318][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.439520][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.446757][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.455743][ T5769] bridge_slave_0: entered allmulticast mode [ 86.462980][ T5769] bridge_slave_0: entered promiscuous mode [ 86.471809][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.479330][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.486492][ T5769] bridge_slave_1: entered allmulticast mode [ 86.493731][ T5769] bridge_slave_1: entered promiscuous mode [ 86.527096][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 86.587701][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.617632][ T5770] team0: Port device team_slave_0 added [ 86.637076][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.655366][ T5770] team0: Port device team_slave_1 added [ 86.737459][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.744630][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.771175][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.799548][ T5769] team0: Port device team_slave_0 added [ 86.816494][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.823748][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.850142][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.873892][ T5769] team0: Port device team_slave_1 added [ 86.889157][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.898367][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.905530][ T5768] bridge_slave_0: entered allmulticast mode [ 86.915198][ T5768] bridge_slave_0: entered promiscuous mode [ 86.929627][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.936797][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.944353][ T5768] bridge_slave_1: entered allmulticast mode [ 86.951830][ T5768] bridge_slave_1: entered promiscuous mode [ 86.959170][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.966470][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.974066][ T5771] bridge_slave_0: entered allmulticast mode [ 86.981477][ T5771] bridge_slave_0: entered promiscuous mode [ 86.990262][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.997465][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.004744][ T5771] bridge_slave_1: entered allmulticast mode [ 87.012315][ T5771] bridge_slave_1: entered promiscuous mode [ 87.031815][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.039105][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.065202][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.082619][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.092080][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.123972][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.240179][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.260011][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.364572][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.427707][ T5769] hsr_slave_0: entered promiscuous mode [ 87.435432][ T5769] hsr_slave_1: entered promiscuous mode [ 87.471055][ T5770] hsr_slave_0: entered promiscuous mode [ 87.483103][ T5770] hsr_slave_1: entered promiscuous mode [ 87.489881][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.497826][ T5770] Cannot create hsr debugfs directory [ 87.510605][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.541593][ T5768] team0: Port device team_slave_0 added [ 87.587803][ T5768] team0: Port device team_slave_1 added [ 87.599399][ T5774] Bluetooth: hci1: command tx timeout [ 87.654888][ T5771] team0: Port device team_slave_0 added [ 87.678373][ T5774] Bluetooth: hci0: command tx timeout [ 87.683512][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.688829][ T5774] Bluetooth: hci2: command tx timeout [ 87.691327][ T5775] Bluetooth: hci3: command tx timeout [ 87.702655][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.729038][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.755725][ T5771] team0: Port device team_slave_1 added [ 87.775579][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.785445][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.811881][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.903112][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.910460][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.937124][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.950716][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.957839][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.984690][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.112498][ T5768] hsr_slave_0: entered promiscuous mode [ 88.120036][ T5768] hsr_slave_1: entered promiscuous mode [ 88.126497][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.134766][ T5768] Cannot create hsr debugfs directory [ 88.263881][ T5771] hsr_slave_0: entered promiscuous mode [ 88.271286][ T5771] hsr_slave_1: entered promiscuous mode [ 88.277646][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.285447][ T5771] Cannot create hsr debugfs directory [ 88.362741][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.415526][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.456094][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.470555][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.613877][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.655788][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.667308][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.701330][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.774833][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.787375][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.819878][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.850380][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.940125][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.951614][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.964327][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.975646][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.997072][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.102343][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.127574][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.145177][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.152629][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.181290][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.188616][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.215830][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.285284][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.292553][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.320480][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.327601][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.351519][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.439799][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.453666][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.493134][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.500377][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.534390][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.546546][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.553796][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.593160][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.600337][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.644592][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.651835][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.678546][ T5775] Bluetooth: hci1: command tx timeout [ 89.760270][ T5775] Bluetooth: hci2: command tx timeout [ 89.765766][ T5775] Bluetooth: hci0: command tx timeout [ 89.772106][ T5780] Bluetooth: hci3: command tx timeout [ 89.938056][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.077673][ T5770] veth0_vlan: entered promiscuous mode [ 90.121129][ T5770] veth1_vlan: entered promiscuous mode [ 90.220530][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.249340][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.296752][ T5770] veth0_macvtap: entered promiscuous mode [ 90.358038][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.368136][ T5770] veth1_macvtap: entered promiscuous mode [ 90.406197][ T5768] veth0_vlan: entered promiscuous mode [ 90.429469][ T5769] veth0_vlan: entered promiscuous mode [ 90.454896][ T5768] veth1_vlan: entered promiscuous mode [ 90.470540][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.481425][ T5769] veth1_vlan: entered promiscuous mode [ 90.506613][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.532731][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.544671][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.553882][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562990][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.636072][ T5768] veth0_macvtap: entered promiscuous mode [ 90.657941][ T5769] veth0_macvtap: entered promiscuous mode [ 90.691932][ T5768] veth1_macvtap: entered promiscuous mode [ 90.711055][ T5769] veth1_macvtap: entered promiscuous mode [ 90.740740][ T5771] veth0_vlan: entered promiscuous mode [ 90.784250][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.797266][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.811584][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.823022][ T5771] veth1_vlan: entered promiscuous mode [ 90.839944][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.854166][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.865167][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.869670][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.885792][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.896617][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.910836][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.921158][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.933255][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.944698][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.992794][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.004350][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.016250][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.031131][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.043022][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.056608][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.065512][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074506][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083359][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.098923][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.107244][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.120151][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.129405][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.144022][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.153335][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.261920][ T5771] veth0_macvtap: entered promiscuous mode [ 91.305683][ T5771] veth1_macvtap: entered promiscuous mode [ 91.412042][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.422611][ T5860] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.434014][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.444281][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.456020][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.470872][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.482861][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.494851][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.513901][ C1] hrtimer: interrupt took 55242 ns [ 91.556844][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.571818][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.584441][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.597099][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.611576][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.623048][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.634344][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.645826][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.659582][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.734678][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.747041][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.759946][ T5774] Bluetooth: hci1: command tx timeout [ 91.772436][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.794634][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.804321][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.817661][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.833694][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.838822][ T5774] Bluetooth: hci3: command tx timeout [ 91.848684][ T5775] Bluetooth: hci2: command tx timeout [ 91.854216][ T5780] Bluetooth: hci0: command tx timeout [ 91.870356][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044946][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.074080][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.226985][ T8] cfg80211: failed to load regulatory.db [ 92.301011][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.321521][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.535328][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.575347][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.642426][ T5881] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.6'. [ 93.838884][ T5780] Bluetooth: hci1: command tx timeout [ 93.918818][ T5775] Bluetooth: hci3: command tx timeout [ 93.920538][ T5774] Bluetooth: hci2: command tx timeout [ 93.924463][ T5780] Bluetooth: hci0: command tx timeout [ 95.087434][ T5897] netlink: 'syz.1.9': attribute type 21 has an invalid length. [ 95.123236][ T5897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9'. [ 95.819114][ T5906] Zero length message leads to an empty skb [ 95.904742][ T5910] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.15'. [ 97.542932][ T5925] netlink: 'syz.0.20': attribute type 21 has an invalid length. [ 97.550911][ T5925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.682008][ T5928] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.19'. [ 98.129660][ T5936] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.23'. [ 99.782809][ T5947] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.24'. [ 100.143522][ T5951] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.25'. [ 100.832535][ T5956] delete_channel: no stack [ 100.844611][ T5956] delete_channel: no stack [ 101.153025][ T5954] delete_channel: no stack [ 101.180474][ T5961] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.27'. [ 101.859355][ T5971] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.30'. [ 103.515441][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.885710][ T5988] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 103.897564][ T5988] netlink: 2 bytes leftover after parsing attributes in process `syz.0.34'. [ 103.912634][ T5990] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.35'. [ 103.924636][ T5988] bond0: entered promiscuous mode [ 103.937297][ T5988] bond_slave_0: entered promiscuous mode [ 103.970520][ T5995] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.36'. [ 103.981826][ T5994] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.37'. [ 103.987236][ T5988] bond_slave_1: entered promiscuous mode [ 104.005041][ T5988] bridge0: port 3(bond0) entered blocking state [ 104.013037][ T5988] bridge0: port 3(bond0) entered disabled state [ 104.022926][ T5988] bond0: entered allmulticast mode [ 104.028941][ T5988] bond_slave_0: entered allmulticast mode [ 104.039394][ T5988] bond_slave_1: entered allmulticast mode [ 104.081054][ T5988] bridge0: port 3(bond0) entered blocking state [ 104.088820][ T5988] bridge0: port 3(bond0) entered forwarding state [ 104.169718][ T5988] syz.0.34 (5988) used greatest stack depth: 20520 bytes left [ 104.769908][ T6005] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.38'. [ 105.710981][ T6017] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.310368][ T6025] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.43'. [ 106.376095][ T6028] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.44'. [ 108.535728][ T6046] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.48'. [ 108.714257][ T6049] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.50'. [ 108.923511][ T6053] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 109.116659][ T6053] delete_channel: no stack [ 109.132596][ T6053] delete_channel: no stack [ 109.364348][ T6051] delete_channel: no stack [ 109.640440][ T6059] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.51'. [ 110.823456][ T6074] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.55'. [ 111.266053][ T6082] netlink: 'syz.2.56': attribute type 21 has an invalid length. [ 111.277701][ T6082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.56'. [ 111.326282][ T6081] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.65'. [ 112.037587][ T6091] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.57'. [ 113.460495][ T6097] delete_channel: no stack [ 113.470226][ T6097] delete_channel: no stack [ 113.599066][ T6099] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.62'. [ 113.742365][ T6096] delete_channel: no stack [ 114.380468][ T6109] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.63'. [ 116.108723][ T6131] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.69'. [ 116.386406][ T6133] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 116.395645][ T6133] netlink: 2 bytes leftover after parsing attributes in process `syz.2.70'. [ 116.405939][ T6133] bond0: entered promiscuous mode [ 116.412046][ T6133] bond_slave_0: entered promiscuous mode [ 116.432441][ T6133] bond_slave_1: entered promiscuous mode [ 116.466169][ T6133] bridge0: port 3(bond0) entered blocking state [ 116.600575][ T6133] bridge0: port 3(bond0) entered disabled state [ 116.625436][ T6133] bond0: entered allmulticast mode [ 116.642808][ T6133] bond_slave_0: entered allmulticast mode [ 116.657127][ T6133] bond_slave_1: entered allmulticast mode [ 116.757949][ T6133] bridge0: port 3(bond0) entered blocking state [ 116.765482][ T6133] bridge0: port 3(bond0) entered forwarding state [ 117.217623][ T6143] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.82'. [ 117.304726][ T6147] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.74'. [ 117.736356][ T6155] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.76'. [ 119.248108][ T6173] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.79'. [ 119.906334][ T6182] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.80'. [ 120.113391][ T6186] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.83'. [ 121.370579][ T5780] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 121.761161][ T6212] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.91'. [ 121.820570][ T6210] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 121.981077][ T6210] team0: Port device dummy0 added [ 122.032949][ T6210] warning: `syz.0.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.289524][ T6221] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.92'. [ 122.863244][ T6210] syz.0.90 (6210) used greatest stack depth: 19496 bytes left [ 123.038784][ T6232] netlink: 'syz.0.94': attribute type 21 has an invalid length. [ 123.102100][ T6232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.94'. [ 123.727438][ T6236] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.95'. [ 123.992475][ T6241] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.96'. [ 125.826937][ T6260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.102'. [ 125.961500][ T6262] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.105'. [ 126.052649][ T6266] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.106'. [ 126.491888][ T6273] syzkaller0: entered promiscuous mode [ 126.514117][ T6273] syzkaller0: entered allmulticast mode [ 127.386523][ T6281] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.109'. [ 127.805198][ T6293] netlink: 'syz.3.113': attribute type 21 has an invalid length. [ 127.830210][ T6293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.113'. [ 127.929132][ T6298] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.114'. [ 129.137489][ T6317] syzkaller0: entered promiscuous mode [ 129.154734][ T6317] syzkaller0: entered allmulticast mode [ 129.325379][ T6323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 129.433150][ T6326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 129.583750][ T6323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 129.594250][ T6326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 129.607047][ T6328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 130.485844][ T6344] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.130'. [ 130.808623][ T6354] netlink: 188 bytes leftover after parsing attributes in process `syz.0.133'. [ 132.812831][ T6406] netlink: 'syz.1.151': attribute type 21 has an invalid length. [ 132.836886][ T6406] __nla_validate_parse: 1 callbacks suppressed [ 132.836903][ T6406] netlink: 164 bytes leftover after parsing attributes in process `syz.1.151'. [ 133.147561][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.154517][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.537516][ T6435] netlink: 'syz.0.160': attribute type 21 has an invalid length. [ 133.549554][ T6435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.160'. [ 133.903198][ T6442] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.163'. [ 134.016771][ T6442] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 134.796664][ T6469] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.176'. [ 134.872192][ T6470] netlink: 'syz.0.175': attribute type 16 has an invalid length. [ 136.966081][ T6514] netlink: 'syz.3.193': attribute type 2 has an invalid length. [ 136.981630][ T6514] netlink: 'syz.3.193': attribute type 8 has an invalid length. [ 137.008362][ T6514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.193'. [ 137.066731][ T6519] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.195'. [ 138.450498][ T6550] raw_sendmsg: syz.0.205 forgot to set AF_INET. Fix it! [ 139.485263][ T6574] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.213'. [ 139.542653][ T6578] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.216'. [ 141.972937][ T6644] netlink: 'syz.2.240': attribute type 30 has an invalid length. [ 143.687231][ T6686] netlink: zone id is out of range [ 143.692690][ T6686] netlink: set zone limit has 8 unknown bytes [ 212.722193][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 212.728614][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.734674][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 248.228165][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 248.235021][ C1] rcu: 1-....: (10500 ticks this GP) idle=2ae4/1/0x4000000000000000 softirq=14477/14477 fqs=5160 [ 248.246520][ C1] rcu: hardirqs softirqs csw/system [ 248.252960][ C1] rcu: number: 1326403 0 0 [ 248.259374][ C1] rcu: cputime: 15882 36597 72 ==> 52490(ms) [ 248.267206][ C1] rcu: (t=10501 jiffies g=16141 q=1328 ncpus=2) [ 248.273609][ C1] CPU: 1 PID: 6670 Comm: syz.2.249 Not tainted syzkaller #0 [ 248.280932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.291116][ C1] RIP: 0010:lock_release+0x594/0x8c0 [ 248.296436][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 248.316075][ C1] RSP: 0018:ffffc900001f0380 EFLAGS: 00000206 [ 248.322185][ C1] RAX: 0000000000000001 RBX: d6e151b2eb713226 RCX: 9cf0c8a7cd781700 [ 248.330183][ C1] RDX: 0000000000000003 RSI: ffffffff8acada80 RDI: ffffffff8b1c81e0 [ 248.338182][ C1] RBP: ffffc900001f0498 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 248.346183][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: ffff88802cd2e558 [ 248.354206][ C1] R13: dffffc0000000000 R14: ffff88802cd2e4d0 R15: 1ffff9200003e07c [ 248.362204][ C1] FS: 00007f2f79dcf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 248.371157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.377753][ C1] CR2: 0000000000000000 CR3: 000000005f365000 CR4: 00000000003506e0 [ 248.385745][ C1] Call Trace: [ 248.389054][ C1] [ 248.391922][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 248.397141][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 248.402187][ C1] ? deref_stack_reg+0x1bd/0x240 [ 248.407200][ C1] is_bpf_text_address+0x28f/0x2a0 [ 248.412351][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 248.417581][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.423687][ C1] kernel_text_address+0xa0/0xd0 [ 248.428663][ C1] __kernel_text_address+0xd/0x30 [ 248.433721][ C1] unwind_get_return_address+0x5d/0xc0 [ 248.439204][ C1] ? stack_trace_save+0x100/0x100 [ 248.444259][ C1] arch_stack_walk+0x11d/0x190 [ 248.449067][ C1] stack_trace_save+0xaa/0x100 [ 248.453854][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 248.459001][ C1] ? stack_trace_save+0xaa/0x100 [ 248.463978][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 248.469122][ C1] kasan_set_track+0x4e/0x70 [ 248.473772][ C1] ? kasan_set_track+0x4e/0x70 [ 248.478570][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 248.483627][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 248.488968][ C1] ? kmem_cache_alloc_node+0x14c/0x320 [ 248.494457][ C1] ? kmalloc_reserve+0x95/0x240 [ 248.499333][ C1] ? __alloc_skb+0x138/0x2c0 [ 248.503943][ C1] ? ndisc_alloc_skb+0xa6/0x450 [ 248.508817][ C1] ? ndisc_send_rs+0x2a6/0x610 [ 248.513594][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 248.518732][ C1] ? call_timer_fn+0x189/0x540 [ 248.523518][ C1] ? __run_timers+0x542/0x800 [ 248.528229][ C1] ? run_timer_softirq+0x67/0xf0 [ 248.533199][ C1] ? handle_softirqs+0x280/0x820 [ 248.538170][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 248.542964][ C1] ? irq_exit_rcu+0x9/0x20 [ 248.547402][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 248.553232][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.559411][ C1] ? generic_exec_single+0x481/0x4f0 [ 248.564722][ C1] ? smp_call_function_single+0x36d/0x5a0 [ 248.570464][ C1] ? perf_install_in_context+0x5be/0x920 [ 248.576123][ C1] ? __se_sys_perf_event_open+0x1836/0x1c50 [ 248.582040][ C1] ? do_syscall_64+0x55/0xa0 [ 248.586658][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.592774][ C1] __kasan_slab_alloc+0x6c/0x80 [ 248.597658][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 248.602799][ C1] kmem_cache_alloc_node+0x14c/0x320 [ 248.608124][ C1] ? kmalloc_reserve+0x95/0x240 [ 248.613013][ C1] kmalloc_reserve+0x95/0x240 [ 248.617718][ C1] __alloc_skb+0x138/0x2c0 [ 248.622173][ C1] ndisc_alloc_skb+0xa6/0x450 [ 248.626872][ C1] ndisc_send_rs+0x2a6/0x610 [ 248.631480][ C1] addrconf_rs_timer+0x2d5/0x630 [ 248.636447][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 248.642539][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 248.648554][ C1] call_timer_fn+0x189/0x540 [ 248.653172][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 248.659268][ C1] ? call_timer_fn+0xd2/0x540 [ 248.663963][ C1] ? __run_timers+0x800/0x800 [ 248.668666][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 248.674761][ C1] __run_timers+0x542/0x800 [ 248.679289][ C1] ? detach_timer+0x2b0/0x2b0 [ 248.684016][ C1] run_timer_softirq+0x67/0xf0 [ 248.688811][ C1] handle_softirqs+0x280/0x820 [ 248.693644][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 248.698432][ C1] ? do_softirq+0x1a0/0x1a0 [ 248.702965][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 248.708200][ C1] __irq_exit_rcu+0xd3/0x190 [ 248.712814][ C1] ? irq_exit_rcu+0x20/0x20 [ 248.717364][ C1] irq_exit_rcu+0x9/0x20 [ 248.721634][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 248.727380][ C1] [ 248.730334][ C1] [ 248.733288][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.739292][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 248.745211][ C1] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 0c 29 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 248.764855][ C1] RSP: 0018:ffffc90004affa00 EFLAGS: 00000246 [ 248.770943][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 248.778934][ C1] RDX: ffffc9000d14a000 RSI: 0000000000005036 RDI: 0000000000005037 [ 248.786922][ C1] RBP: ffffc90004affad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 248.794938][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff9200095ff44 [ 248.802932][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200095ff65 [ 248.810944][ C1] ? event_function+0x300/0x300 [ 248.815821][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 248.821560][ C1] ? percpu_counter_add_batch+0x24f/0x2a0 [ 248.827307][ C1] ? percpu_counter_add_batch+0x259/0x2a0 [ 248.833085][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 248.838767][ C1] smp_call_function_single+0x36d/0x5a0 [ 248.844339][ C1] ? event_function+0x300/0x300 [ 248.849217][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 248.855395][ C1] ? event_function+0x300/0x300 [ 248.860287][ C1] perf_install_in_context+0x5be/0x920 [ 248.865786][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 248.871792][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 248.877027][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 248.882251][ C1] ? perf_event__header_size+0x165/0x220 [ 248.887912][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 248.893674][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 248.899349][ C1] ? lock_chain_count+0x20/0x20 [ 248.904219][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 248.910256][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 248.915473][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 248.921132][ C1] do_syscall_64+0x55/0xa0 [ 248.925592][ C1] ? clear_bhb_loop+0x40/0x90 [ 248.930294][ C1] ? clear_bhb_loop+0x40/0x90 [ 248.934996][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.940918][ C1] RIP: 0033:0x7f2f78f9aeb9 [ 248.945365][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.965088][ C1] RSP: 002b:00007f2f79dcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 248.973529][ C1] RAX: ffffffffffffffda RBX: 00007f2f79215fa0 RCX: 00007f2f78f9aeb9 [ 248.981525][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 248.989518][ C1] RBP: 00007f2f79008c1f R08: 0000000000000002 R09: 0000000000000000 [ 248.997501][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 249.005487][ C1] R13: 00007f2f79216038 R14: 00007f2f79215fa0 R15: 00007fffd8a2b6f8 [ 249.013493][ C1]