last executing test programs: 1.838628878s ago: executing program 2 (id=3): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000001c850000001f000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x653988b496406357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c18601aa1d1ad5fe150396000000", 0x0, 0x778e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffff1f5, 0xfffffffffffffff9}, 0x100010, 0x4, 0xfffffffe, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.357465179s ago: executing program 0 (id=1): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0x85, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x156, 0x156, 0x3, [@enum64={0x5, 0x6, 0x0, 0x13, 0x1, 0x0, [{0xf, 0x3, 0x7}, {0xd, 0x7f, 0x6}, {0xd, 0xfe, 0x7}, {0x9, 0xf0b, 0x1}, {0xd, 0xd7, 0x7}, {0xc, 0x1, 0xc}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x34}}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x7, 0x4}, {0x10, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0xc, 0x2}, {}, {0xc}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @datasec={0x3, 0x8, 0x0, 0xf, 0x2, [{0x1, 0x7fffffff, 0xfb3}, {0x4, 0x4, 0x5580}, {0x3, 0xfffff460}, {0x1, 0x73000000, 0x7}, {0x5, 0x8, 0x8001}, {0x5, 0x6, 0x1000}, {0x5, 0xf, 0x77}, {0x5, 0x6, 0x1}], "bf0c"}]}, {0x0, [0x30]}}, &(0x7f0000000b00)=""/150, 0x173, 0x96, 0x0, 0x28b}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback=0x25, r1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xb50bb, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b86, 0x2, @perf_config_ext={0x9, 0x4}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x4000000, 0x0, 0x1}, r2, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = socket$kcm(0xa, 0x3, 0x73) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x41, 0xfffffffd}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff90, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x4c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xfffffffffffff24b) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x4d1c681d, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x8621, 0x0, r11, 0x2, '\x00', r0, r10, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0x1, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7ff}}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x4}, {0xc, 0x9}, {0x6, 0x5}]}, @enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0xb, [{0x3, 0x5, 0x4}, {0x2, 0x5, 0x9852}, {0x9, 0x7fffffff, 0xe5}, {0xf, 0x2, 0x4}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000680)=""/58, 0xf7, 0x3a, 0x0, 0x90d5}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 1.244067292s ago: executing program 2 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYBLOB="d6b476b48a455fa04b4a0ed2528f78ada1224011b744530362c8e350e5471d5232b47367a252146946d470b13d32b651ab3c2ec10137d7859c56c05ca0bb5168c66350e42dbb71db32165e3243c68845bd86fb3eacaa63af75ed8b47829777249b87ad84d626c063caab014553172d68ccead3b5b6d11f8be0a073cc264990ae834ccf84074885e55c4df4732048076714f22bc0046114a68ec95b1e5d245c633f901c86d9e83ed985cbd17b0fa2f6e9faef8dd47ff73d2fad5d97e25b142ea6eef31e24d92794a16484594ada2a72465dac410d3514e61cba7b8444f68c2a5a13"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000000c0)={0x4, 0x80, 0x9, 0x7, 0x9, 0x8e, 0x0, 0x8, 0x4000, 0x16, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0xffffffff, 0xf6b9, 0x2, 0x800, 0x6, 0x0, 0x0, 0x9, 0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) close(r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000a40)=""/199, 0xc7, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000070e131a5410927f446adf2fb12c00000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r10], &(0x7f00000008c0)='syzkaller\x00', 0xffff0000, 0xae, &(0x7f0000000500)=""/174, 0x41100, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0x2, 0x3, 0xb9}, 0x10, r11, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x9, 0x2}, {0x5, 0x3, 0xc, 0xa}, {0x5, 0x5, 0x0, 0xc}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x1, 0x5, 0x9}, {0x0, 0x4, 0xf, 0xb}, {0x1, 0x4, 0xe, 0x8}], 0x10, 0x6ce1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r11, @ANYBLOB="f09f57a241b85758626c449ba0df15b0e64a42dde5b50b93f4c5ba19466e3dd606b5173bacbfacf453555b29d0cc1b95e3dc92903b48664aef414b4fde7e8cc4cab9c7bb2a58ad5abe71959db61153bf9997a1936b1c597f54a06976d516b400369f38f6b365c58d8a9f8f03614dcfbc5d11", @ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 844.546341ms ago: executing program 0 (id=6): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a000140f9bf7948f940ea0313070dcc5cdc1f19580077f49081eb06000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edd57cc3e8", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, 0x0}, 0x24040040) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000034000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x6, 0x1, 0x10201, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x8, @void, @value, @value=r8}, 0x50) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200070019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000005e00b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13, r12}, 0xc) setsockopt$sock_attach_bpf(r9, 0x84, 0x10, &(0x7f0000000000)=r11, 0xc) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r11}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r14, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 0s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x5, 0x2, 0x7, 0x100, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0xff, 0x2004932, 0x7f, 0x1, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r5, r1, 0xa, 0x4, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000791220000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8971, &(0x7f0000000000)={'dummy0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x9006, 0xa, 0x0, 0x6, 0x0, 0x0, 0x3000, 0x0, 0x17e, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffd53) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. [ 76.222853][ T5761] cgroup: Unknown subsys name 'net' [ 76.353320][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.829185][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.255389][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.286872][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.307288][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.307394][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.315789][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.332357][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.332668][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.341502][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.350263][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.357557][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.365183][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.371895][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.386177][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.393896][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.402460][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.411112][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.420713][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.426657][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.431614][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.447039][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.453574][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.455066][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.469737][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.481068][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.912784][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 79.982533][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.041508][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.081715][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.205490][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.215314][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.223709][ T5773] bridge_slave_0: entered allmulticast mode [ 80.231758][ T5773] bridge_slave_0: entered promiscuous mode [ 80.240886][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.249045][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.256737][ T5772] bridge_slave_0: entered allmulticast mode [ 80.264003][ T5772] bridge_slave_0: entered promiscuous mode [ 80.272637][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.280521][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.288700][ T5772] bridge_slave_1: entered allmulticast mode [ 80.296571][ T5772] bridge_slave_1: entered promiscuous mode [ 80.330085][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.337641][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.344935][ T5773] bridge_slave_1: entered allmulticast mode [ 80.352881][ T5773] bridge_slave_1: entered promiscuous mode [ 80.380859][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.389599][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.399391][ T5775] bridge_slave_0: entered allmulticast mode [ 80.406843][ T5775] bridge_slave_0: entered promiscuous mode [ 80.423897][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.431598][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.439368][ T5775] bridge_slave_1: entered allmulticast mode [ 80.447013][ T5775] bridge_slave_1: entered promiscuous mode [ 80.464838][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.505229][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.526434][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.560119][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.568153][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.577535][ T5774] bridge_slave_0: entered allmulticast mode [ 80.584669][ T5774] bridge_slave_0: entered promiscuous mode [ 80.597624][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.625535][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.639645][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.660458][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.668444][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.676941][ T5774] bridge_slave_1: entered allmulticast mode [ 80.685136][ T5774] bridge_slave_1: entered promiscuous mode [ 80.697016][ T5773] team0: Port device team_slave_0 added [ 80.716546][ T5772] team0: Port device team_slave_0 added [ 80.736439][ T5773] team0: Port device team_slave_1 added [ 80.759483][ T5772] team0: Port device team_slave_1 added [ 80.780378][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.807896][ T5775] team0: Port device team_slave_0 added [ 80.820271][ T5775] team0: Port device team_slave_1 added [ 80.841713][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.899634][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.907647][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.938283][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.962997][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.971049][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.004893][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.019802][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.027510][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.055059][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.076304][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.083987][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.113998][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.126680][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.134417][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.161837][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.181120][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.189376][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.219822][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.235181][ T5774] team0: Port device team_slave_0 added [ 81.254604][ T5774] team0: Port device team_slave_1 added [ 81.340149][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.348175][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.378747][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.394914][ T5772] hsr_slave_0: entered promiscuous mode [ 81.401822][ T5772] hsr_slave_1: entered promiscuous mode [ 81.425231][ T5773] hsr_slave_0: entered promiscuous mode [ 81.432595][ T5773] hsr_slave_1: entered promiscuous mode [ 81.439539][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.447977][ T5773] Cannot create hsr debugfs directory [ 81.454437][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.461978][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.489882][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.502188][ T5781] Bluetooth: hci2: command tx timeout [ 81.530406][ T5775] hsr_slave_0: entered promiscuous mode [ 81.539404][ T5775] hsr_slave_1: entered promiscuous mode [ 81.546469][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.555250][ T5775] Cannot create hsr debugfs directory [ 81.576977][ T5084] Bluetooth: hci1: command tx timeout [ 81.583018][ T5783] Bluetooth: hci3: command tx timeout [ 81.589464][ T5781] Bluetooth: hci0: command tx timeout [ 81.654514][ T5774] hsr_slave_0: entered promiscuous mode [ 81.662969][ T5774] hsr_slave_1: entered promiscuous mode [ 81.670316][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.680162][ T5774] Cannot create hsr debugfs directory [ 82.040941][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.072795][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.083797][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.122570][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.143067][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.158224][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.173341][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.204508][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.279298][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.300570][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.313459][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.325957][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.439711][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.451446][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.464336][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.481666][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.574177][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.595940][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.633752][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.656070][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.673939][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.681716][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.726271][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.734530][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.747963][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.755588][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.785065][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.795194][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.803202][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.886981][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.903761][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.911133][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.934776][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.942652][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.963662][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.045251][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.124367][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.142162][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.184812][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.193320][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.259137][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.266436][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.364675][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.515850][ T5775] veth0_vlan: entered promiscuous mode [ 83.556408][ T5775] veth1_vlan: entered promiscuous mode [ 83.575462][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.577223][ T5783] Bluetooth: hci2: command tx timeout [ 83.656514][ T5783] Bluetooth: hci3: command tx timeout [ 83.663968][ T5783] Bluetooth: hci0: command tx timeout [ 83.668545][ T5781] Bluetooth: hci1: command tx timeout [ 83.688756][ T5775] veth0_macvtap: entered promiscuous mode [ 83.714952][ T5775] veth1_macvtap: entered promiscuous mode [ 83.741263][ T5772] veth0_vlan: entered promiscuous mode [ 83.783229][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.809993][ T5772] veth1_vlan: entered promiscuous mode [ 83.834590][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.862243][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.874422][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.884590][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.893961][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.903769][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.964265][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.008808][ T5772] veth0_macvtap: entered promiscuous mode [ 84.044315][ T5772] veth1_macvtap: entered promiscuous mode [ 84.054086][ T5773] veth0_vlan: entered promiscuous mode [ 84.129960][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.143065][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.159032][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.186166][ T5773] veth1_vlan: entered promiscuous mode [ 84.213902][ T276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.231275][ T276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.240727][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.253249][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.270433][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.284103][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.301389][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.316058][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.329864][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.364566][ T5774] veth0_vlan: entered promiscuous mode [ 84.407854][ T5773] veth0_macvtap: entered promiscuous mode [ 84.415963][ T276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.437567][ T5774] veth1_vlan: entered promiscuous mode [ 84.448821][ T276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.467102][ T5773] veth1_macvtap: entered promiscuous mode [ 84.530516][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.559192][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.608567][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.620326][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.637601][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.652402][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.667509][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.758745][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.770718][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.784008][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.796224][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.813145][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.826062][ T5774] veth0_macvtap: entered promiscuous mode [ 84.837606][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.842579][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.857227][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869424][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.888573][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.898623][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.917853][ T5774] veth1_macvtap: entered promiscuous mode [ 84.938168][ C0] hrtimer: interrupt took 28088 ns [ 85.007117][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.021213][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.034746][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.047172][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.063837][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.076585][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.090577][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.119041][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.146526][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.162254][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.175581][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.199279][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.216022][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.236705][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.286574][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.315216][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.333406][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.343205][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.364107][ T5838] sit0: entered allmulticast mode [ 85.615971][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.658039][ T5781] Bluetooth: hci2: command tx timeout [ 85.715038][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.730652][ T5845] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6'. [ 85.742769][ T5781] Bluetooth: hci0: command tx timeout [ 85.742959][ T5084] Bluetooth: hci3: command tx timeout [ 85.748560][ T5781] Bluetooth: hci1: command tx timeout [ 85.751335][ T5845] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6'. [ 85.913113][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.942728][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.987589][ T5845] netlink: 'syz.0.6': attribute type 27 has an invalid length. [ 86.008906][ T5845] netlink: 'syz.0.6': attribute type 25 has an invalid length. [ 86.059712][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.141684][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.428351][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.460613][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.548149][ T5842] ------------[ cut here ]------------ [ 86.554143][ T5842] WARNING: CPU: 1 PID: 5842 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 86.564973][ T5842] Modules linked in: [ 86.569419][ T5842] CPU: 1 PID: 5842 Comm: syz.2.5 Not tainted syzkaller #0 [ 86.577443][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 86.589111][ T5842] RIP: 0010:perf_pending_task+0x357/0x480 [ 86.596917][ T5842] Code: e8 9e d0 d5 ff 84 db 75 10 e8 05 ce d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cd d5 ff e8 b0 85 4f ff eb e9 e8 e9 cd d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 86.618614][ T5842] RSP: 0018:ffffc9000492f9c8 EFLAGS: 00010293 [ 86.625341][ T5842] RAX: ffffffff81b11787 RBX: ffff88801b67a2e0 RCX: ffff88802c358000 [ 86.635875][ T5842] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 86.647409][ T5842] RBP: ffff88801b67a0a0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 86.656840][ T5842] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff88802c358000 [ 86.666347][ T5842] R13: ffff88802e45a930 R14: 0000000000000000 R15: 1ffff110036cf414 [ 86.675938][ T5842] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 86.686893][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.695353][ T5842] CR2: 00007fdc00e00020 CR3: 0000000030b0d000 CR4: 00000000003506e0 [ 86.707058][ T5842] Call Trace: [ 86.711351][ T5842] [ 86.714669][ T5842] task_work_run+0x1d4/0x260 [ 86.720906][ T5842] ? task_work_cancel+0x220/0x220 [ 86.729114][ T5842] do_exit+0x986/0x2530 [ 86.734217][ T5842] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 86.743268][ T5842] ? put_task_struct+0xc0/0xc0 [ 86.749799][ T5842] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.758692][ T5842] ? lockdep_hardirqs_on+0x98/0x150 [ 86.764460][ T5842] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.771817][ T5842] do_group_exit+0x22d/0x2f0 [ 86.778142][ T5842] ? _raw_spin_unlock_irq+0x29/0x50 [ 86.784096][ T5842] get_signal+0x12a6/0x1390 [ 86.791336][ T5842] arch_do_signal_or_restart+0xc2/0x7b0 [ 86.798370][ T5842] ? lock_chain_count+0x20/0x20 [ 86.805179][ T5842] ? get_sigframe_size+0x20/0x20 [ 86.814612][ T5842] exit_to_user_mode_loop+0x70/0x110 [ 86.814807][ T5853] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.821625][ T5842] exit_to_user_mode_prepare+0xee/0x180 [ 86.821666][ T5842] syscall_exit_to_user_mode+0x1a/0x50 [ 86.821685][ T5842] do_syscall_64+0x61/0xb0 [ 86.821707][ T5842] ? clear_bhb_loop+0x40/0x90 [ 86.821724][ T5842] ? clear_bhb_loop+0x40/0x90 [ 86.821740][ T5842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.821764][ T5842] RIP: 0033:0x7f0955f9de59 [ 86.821789][ T5842] Code: Unable to access opcode bytes at 0x7f0955f9de2f. [ 86.821798][ T5842] RSP: 002b:00007f09541f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.821820][ T5842] RAX: fffffffffffffe00 RBX: 00007f0956226098 RCX: 00007f0955f9de59 [ 86.821835][ T5842] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0956226098 [ 86.821847][ T5842] RBP: 00007f0956226090 R08: 0000000000000000 R09: 0000000000000000 [ 86.821859][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.821869][ T5842] R13: 00007f0956226128 R14: 00007ffd35a7d140 R15: 00007ffd35a7d228 [ 86.821894][ T5842] [ 86.821904][ T5842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.821912][ T5842] CPU: 1 PID: 5842 Comm: syz.2.5 Not tainted syzkaller #0 [ 86.821929][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 86.821939][ T5842] Call Trace: [ 86.821945][ T5842] [ 86.821951][ T5842] dump_stack_lvl+0x18c/0x250 [ 86.821976][ T5842] ? show_regs_print_info+0x20/0x20 [ 86.821998][ T5842] ? load_image+0x420/0x420 [ 86.822025][ T5842] panic+0x2ca/0x720 [ 86.822046][ T5842] ? bpf_jit_dump+0xd0/0xd0 [ 86.822074][ T5842] __warn+0x2e0/0x470 [ 86.822091][ T5842] ? perf_pending_task+0x357/0x480 [ 86.822116][ T5842] ? perf_pending_task+0x357/0x480 [ 86.822137][ T5842] report_bug+0x2be/0x4f0 [ 86.822154][ T5842] ? perf_pending_task+0x357/0x480 [ 86.822175][ T5842] ? perf_pending_task+0x357/0x480 [ 86.822196][ T5842] ? perf_pending_task+0x359/0x480 [ 86.822217][ T5842] handle_bug+0xcf/0x120 [ 86.822233][ T5842] exc_invalid_op+0x1a/0x50 [ 86.822250][ T5842] asm_exc_invalid_op+0x1a/0x20 [ 86.822270][ T5842] RIP: 0010:perf_pending_task+0x357/0x480 [ 86.822292][ T5842] Code: e8 9e d0 d5 ff 84 db 75 10 e8 05 ce d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cd d5 ff e8 b0 85 4f ff eb e9 e8 e9 cd d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 86.822305][ T5842] RSP: 0018:ffffc9000492f9c8 EFLAGS: 00010293 [ 86.822321][ T5842] RAX: ffffffff81b11787 RBX: ffff88801b67a2e0 RCX: ffff88802c358000 [ 86.822333][ T5842] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 86.822343][ T5842] RBP: ffff88801b67a0a0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 86.822355][ T5842] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff88802c358000 [ 86.822367][ T5842] R13: ffff88802e45a930 R14: 0000000000000000 R15: 1ffff110036cf414 [ 86.822385][ T5842] ? perf_pending_task+0x357/0x480 [ 86.822412][ T5842] ? perf_pending_task+0x357/0x480 [ 86.822442][ T5842] task_work_run+0x1d4/0x260 [ 86.822467][ T5842] ? task_work_cancel+0x220/0x220 [ 86.822496][ T5842] do_exit+0x986/0x2530 [ 86.822520][ T5842] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 86.822545][ T5842] ? put_task_struct+0xc0/0xc0 [ 86.822568][ T5842] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.822591][ T5842] ? lockdep_hardirqs_on+0x98/0x150 [ 86.822610][ T5842] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.822639][ T5842] do_group_exit+0x22d/0x2f0 [ 86.822661][ T5842] ? _raw_spin_unlock_irq+0x29/0x50 [ 86.822683][ T5842] get_signal+0x12a6/0x1390 [ 86.822716][ T5842] arch_do_signal_or_restart+0xc2/0x7b0 [ 86.822740][ T5842] ? lock_chain_count+0x20/0x20 [ 86.822758][ T5842] ? get_sigframe_size+0x20/0x20 [ 86.822804][ T5842] exit_to_user_mode_loop+0x70/0x110 [ 86.822826][ T5842] exit_to_user_mode_prepare+0xee/0x180 [ 86.823069][ T5842] syscall_exit_to_user_mode+0x1a/0x50 [ 86.823091][ T5842] do_syscall_64+0x61/0xb0 [ 86.823114][ T5842] ? clear_bhb_loop+0x40/0x90 [ 86.823130][ T5842] ? clear_bhb_loop+0x40/0x90 [ 86.823147][ T5842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.823399][ T5842] RIP: 0033:0x7f0955f9de59 [ 86.823418][ T5842] Code: Unable to access opcode bytes at 0x7f0955f9de2f. [ 86.823426][ T5842] RSP: 002b:00007f09541f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.823445][ T5842] RAX: fffffffffffffe00 RBX: 00007f0956226098 RCX: 00007f0955f9de59 [ 86.823458][ T5842] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0956226098 [ 86.823469][ T5842] RBP: 00007f0956226090 R08: 0000000000000000 R09: 0000000000000000 [ 86.823479][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.823489][ T5842] R13: 00007f0956226128 R14: 00007ffd35a7d140 R15: 00007ffd35a7d228 [ 86.823514][ T5842] [ 86.838002][ T5842] Kernel Offset: disabled