last executing test programs: 4.815444238s ago: executing program 2 (id=172): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa4, 0xe, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffff81}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002f77030a89079f03b18000071c1c0300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 3.993921829s ago: executing program 3 (id=177): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xb061, 0x7ff, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.93484745s ago: executing program 1 (id=178): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x9, 0x0, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a7", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) 1.744095876s ago: executing program 2 (id=179): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x205, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa24, 0x4, @perf_bp={0x0}, 0x285a, 0x80000000009, 0xfffffffe, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x1e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.677742937s ago: executing program 1 (id=181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x5, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, 0x0, 0x20000001) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x40) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x803e}, 0x1001) 1.608104639s ago: executing program 3 (id=182): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x800000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.376055955s ago: executing program 0 (id=183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="9b0cb39bf267ce9b5ddf3432ca97", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.375735095s ago: executing program 2 (id=184): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 1.305918087s ago: executing program 3 (id=185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x80208, 0x0, 0x310c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) 1.268260248s ago: executing program 0 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'veth0_to_team\x00', 0x400}) 1.095667632s ago: executing program 3 (id=187): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc3, &(0x7f0000000340)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 916.423497ms ago: executing program 2 (id=188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="d8000000140081044e81ff82db44b9040a1d080201000000040000a118000200a6000000000000005bc13386aae236340bd6a40004000000000001a80016ea1f000840032e5f3dcd2011148ed08734843cb12b0000fd03600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c28c4dc50cfcc31be7d6feb9b3c0100000000000000cb090000001fb791643a5e835913b06218a07445d66118d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9f88c60d8bcc00400040fad95667e00600000000", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0xc010) 877.617148ms ago: executing program 0 (id=189): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x9, 0x0, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a7", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) 787.47801ms ago: executing program 3 (id=190): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xb061, 0x7ff, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 580.066775ms ago: executing program 1 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x13, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 574.997396ms ago: executing program 0 (id=192): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="8befa07b", 0x4}], 0x1}, 0x24008800) close(r0) 572.811156ms ago: executing program 2 (id=193): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x800000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 442.826229ms ago: executing program 1 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="9b0cb39bf267ce9b5ddf3432ca97", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 287.932823ms ago: executing program 0 (id=195): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x80208, 0x0, 0x310c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) 269.480813ms ago: executing program 1 (id=196): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 110.285427ms ago: executing program 2 (id=197): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 102.694827ms ago: executing program 0 (id=198): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc3, &(0x7f0000000340)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 63.585118ms ago: executing program 3 (id=199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x5, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, 0x0, 0x20000001) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x40) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x803e}, 0x1001) 0s ago: executing program 1 (id=200): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x9, 0x0, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a7", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.947431][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.958279][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 92.277391][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 356.357242][ T5803] cgroup: Unknown subsys name 'net' [ 356.494074][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 358.196212][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 360.146538][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.160141][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.169185][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.177944][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.187271][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.195600][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.203209][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.215210][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.224426][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.248859][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.264136][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.285321][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.320860][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.329946][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.338487][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.349131][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.375385][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 360.383214][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.416976][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.426415][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.434432][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.443169][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.479003][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 360.487617][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.899713][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 360.987614][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 361.104491][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 361.126161][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.134086][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.144485][ T5815] bridge_slave_0: entered allmulticast mode [ 361.153193][ T5815] bridge_slave_0: entered promiscuous mode [ 361.195915][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.203185][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.212035][ T5815] bridge_slave_1: entered allmulticast mode [ 361.219284][ T5815] bridge_slave_1: entered promiscuous mode [ 361.283357][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.293731][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 361.320545][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.327962][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.335465][ T5819] bridge_slave_0: entered allmulticast mode [ 361.343684][ T5819] bridge_slave_0: entered promiscuous mode [ 361.358968][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.393966][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.402153][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.409636][ T5819] bridge_slave_1: entered allmulticast mode [ 361.417055][ T5819] bridge_slave_1: entered promiscuous mode [ 361.469832][ T5815] team0: Port device team_slave_0 added [ 361.523280][ T5815] team0: Port device team_slave_1 added [ 361.531673][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.546552][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.553980][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.562317][ T5826] bridge_slave_0: entered allmulticast mode [ 361.570043][ T5826] bridge_slave_0: entered promiscuous mode [ 361.603965][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.639441][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.646797][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.654037][ T5826] bridge_slave_1: entered allmulticast mode [ 361.662051][ T5826] bridge_slave_1: entered promiscuous mode [ 361.681062][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.688685][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.696857][ T5823] bridge_slave_0: entered allmulticast mode [ 361.703970][ T5823] bridge_slave_0: entered promiscuous mode [ 361.714832][ T5819] team0: Port device team_slave_0 added [ 361.732760][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.740654][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.767101][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.781233][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.788437][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.814835][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.827390][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.834592][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.845235][ T5823] bridge_slave_1: entered allmulticast mode [ 361.852308][ T5823] bridge_slave_1: entered promiscuous mode [ 361.861244][ T5819] team0: Port device team_slave_1 added [ 361.920758][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.933327][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.982664][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.989782][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.016179][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.058576][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.071772][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.103175][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.110350][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.139731][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.158166][ T5815] hsr_slave_0: entered promiscuous mode [ 362.164888][ T5815] hsr_slave_1: entered promiscuous mode [ 362.175951][ T5826] team0: Port device team_slave_0 added [ 362.184774][ T5826] team0: Port device team_slave_1 added [ 362.212372][ T5823] team0: Port device team_slave_0 added [ 362.236372][ T5823] team0: Port device team_slave_1 added [ 362.286094][ T5820] Bluetooth: hci0: command tx timeout [ 362.297887][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.307407][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.335056][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.353574][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.360720][ T5820] Bluetooth: hci1: command tx timeout [ 362.368615][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.395721][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.430582][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.438074][ T5820] Bluetooth: hci2: command tx timeout [ 362.443821][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.470395][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.519687][ T5819] hsr_slave_0: entered promiscuous mode [ 362.525594][ T5820] Bluetooth: hci3: command tx timeout [ 362.533324][ T5819] hsr_slave_1: entered promiscuous mode [ 362.539909][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.548002][ T5819] Cannot create hsr debugfs directory [ 362.554279][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.561624][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.587849][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.726979][ T5823] hsr_slave_0: entered promiscuous mode [ 362.733437][ T5823] hsr_slave_1: entered promiscuous mode [ 362.742742][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.750437][ T5823] Cannot create hsr debugfs directory [ 362.789902][ T5826] hsr_slave_0: entered promiscuous mode [ 362.796980][ T5826] hsr_slave_1: entered promiscuous mode [ 362.803402][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.811775][ T5826] Cannot create hsr debugfs directory [ 363.115672][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.137418][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.159092][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.194301][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.305995][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.319730][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.345380][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.359735][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.438683][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.457490][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.474242][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.489655][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.582096][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.592439][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.621055][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.639291][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.659128][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.702441][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.750488][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.757936][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.791347][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.798555][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.891823][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.912734][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.960745][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.994764][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.001995][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.012666][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.019919][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.042493][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.094316][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.101755][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.169517][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.176783][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.274186][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.366452][ T5820] Bluetooth: hci0: command tx timeout [ 364.399776][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.436947][ T5820] Bluetooth: hci1: command tx timeout [ 364.471173][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.478464][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.515131][ T5820] Bluetooth: hci2: command tx timeout [ 364.532977][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.540317][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.575855][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.596344][ T5820] Bluetooth: hci3: command tx timeout [ 364.793654][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.806692][ T5815] veth0_vlan: entered promiscuous mode [ 364.847801][ T5815] veth1_vlan: entered promiscuous mode [ 364.881660][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.990604][ T5815] veth0_macvtap: entered promiscuous mode [ 365.040635][ T5815] veth1_macvtap: entered promiscuous mode [ 365.079175][ T5823] veth0_vlan: entered promiscuous mode [ 365.100673][ T5819] veth0_vlan: entered promiscuous mode [ 365.125130][ T5823] veth1_vlan: entered promiscuous mode [ 365.146795][ T5819] veth1_vlan: entered promiscuous mode [ 365.158335][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.198906][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.211901][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.223899][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.233782][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.243826][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.279537][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.311762][ T5823] veth0_macvtap: entered promiscuous mode [ 365.326086][ T5823] veth1_macvtap: entered promiscuous mode [ 365.356156][ T5819] veth0_macvtap: entered promiscuous mode [ 365.401124][ T5819] veth1_macvtap: entered promiscuous mode [ 365.479545][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.492769][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.506748][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.522597][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.533520][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.544375][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.557347][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.569744][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.589780][ T5826] veth0_vlan: entered promiscuous mode [ 365.604074][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.619288][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.631136][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.646072][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.654844][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.663871][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.672963][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.696626][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.707711][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.718696][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.729406][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.741533][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.752177][ T5864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.769497][ T5864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.801629][ T5826] veth1_vlan: entered promiscuous mode [ 365.817483][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.827302][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.836377][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.845253][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.932281][ T5854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.942046][ T5854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.014440][ T5854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.049497][ T5854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.111404][ T5826] veth0_macvtap: entered promiscuous mode [ 366.168830][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.178838][ T5826] veth1_macvtap: entered promiscuous mode [ 366.228288][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.303876][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.306989][ C1] hrtimer: interrupt took 133239 ns [ 366.319790][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.332165][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.349930][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.371649][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.382195][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.396959][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.407845][ T5854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.430920][ T5854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.440621][ T5820] Bluetooth: hci0: command tx timeout [ 366.462238][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.477857][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.493571][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.504273][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.514267][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.525815][ T5820] Bluetooth: hci1: command tx timeout [ 366.531393][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.543353][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.595141][ T5820] Bluetooth: hci2: command tx timeout [ 366.639775][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.649957][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.659331][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.668941][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.680433][ T5820] Bluetooth: hci3: command tx timeout [ 366.707459][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.743007][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.011205][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.038134][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.154513][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.186277][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.526717][ T5820] Bluetooth: hci0: command tx timeout [ 368.595598][ T5820] Bluetooth: hci1: command tx timeout [ 368.686378][ T5820] Bluetooth: hci2: command tx timeout [ 368.755942][ T5820] Bluetooth: hci3: command tx timeout [ 379.005860][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.012689][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.123367][ T6162] macvlan0: entered promiscuous mode [ 389.146109][ T6162] macvlan0: entered allmulticast mode [ 389.165266][ T6162] veth1_vlan: entered allmulticast mode [ 389.994779][ T6170] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 397.374148][ T6230] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 397.852469][ T6249] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 399.950876][ T6275] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 402.494104][ T6286] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 402.521525][ T6286] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 402.549717][ T6286] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 402.572776][ T6286] netlink: 'syz.0.180': attribute type 29 has an invalid length. [ 403.337581][ T6303] netlink: 160 bytes leftover after parsing attributes in process `syz.2.188'. [ 404.162864][ T6327] ================================================================== [ 404.171205][ T6327] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 404.179344][ T6327] Write of size 48 at addr ffff88802e8ab990 by task syz.2.197/6327 [ 404.187541][ T6327] [ 404.190096][ T6327] CPU: 0 PID: 6327 Comm: syz.2.197 Not tainted syzkaller #0 [ 404.197954][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.209332][ T6327] Call Trace: [ 404.213111][ T6327] [ 404.216496][ T6327] dump_stack_lvl+0x18c/0x250 [ 404.221767][ T6327] ? read_lock_is_recursive+0x20/0x20 [ 404.227364][ T6327] ? show_regs_print_info+0x20/0x20 [ 404.233135][ T6327] ? load_image+0x420/0x420 [ 404.238953][ T6327] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 404.244649][ T6327] ? __virt_addr_valid+0x10c/0x380 [ 404.249931][ T6327] ? __virt_addr_valid+0x10c/0x380 [ 404.255188][ T6327] ? __virt_addr_valid+0x10c/0x380 [ 404.260434][ T6327] print_report+0xa8/0x210 [ 404.264888][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 404.270065][ T6327] kasan_report+0x117/0x150 [ 404.274606][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 404.279758][ T6327] kasan_check_range+0x241/0x290 [ 404.284729][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 404.289875][ T6327] __asan_memcpy+0x40/0x70 [ 404.294409][ T6327] __bpf_get_stackid+0x6c7/0x900 [ 404.299403][ T6327] bpf_get_stackid_pe+0x343/0x410 [ 404.304554][ T6327] bpf_prog_9f7ee0cc743aa62b+0x29/0x3e [ 404.310100][ T6327] bpf_overflow_handler+0x1fc/0x510 [ 404.315345][ T6327] ? bpf_overflow_handler+0xde/0x510 [ 404.320673][ T6327] ? tp_perf_event_destroy+0x20/0x20 [ 404.326012][ T6327] ? verify_lock_unused+0x140/0x140 [ 404.331242][ T6327] ? __perf_event_account_interrupt+0x187/0x280 [ 404.337819][ T6327] __perf_event_overflow+0x461/0x660 [ 404.343154][ T6327] ? is_bpf_text_address+0x28f/0x2a0 [ 404.348595][ T6327] perf_swevent_overflow+0x274/0x340 [ 404.353951][ T6327] ? __kernel_text_address+0xd/0x30 [ 404.359220][ T6327] ? unwind_get_return_address+0x91/0xc0 [ 404.364899][ T6327] ? perf_event_switch_output+0x790/0x790 [ 404.370689][ T6327] ? rcu_is_watching+0x15/0xb0 [ 404.375489][ T6327] perf_swevent_event+0x45c/0x570 [ 404.380642][ T6327] ? perf_tp_event+0x1550/0x1550 [ 404.385723][ T6327] ? check_noncircular+0x18a/0x400 [ 404.390906][ T6327] ___perf_sw_event+0x4ab/0x730 [ 404.395801][ T6327] ? ___perf_sw_event+0x19e/0x730 [ 404.400860][ T6327] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 404.407307][ T6327] ? __lock_acquire+0x357f/0x7d80 [ 404.412389][ T6327] ? mark_lock+0x94/0x320 [ 404.417396][ T6327] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.423716][ T6327] ? lock_chain_count+0x20/0x20 [ 404.428638][ T6327] __perf_sw_event+0x139/0x270 [ 404.433460][ T6327] do_user_addr_fault+0x1242/0x12d0 [ 404.438745][ T6327] ? rcu_is_watching+0x15/0xb0 [ 404.443669][ T6327] exc_page_fault+0x64/0x100 [ 404.448323][ T6327] asm_exc_page_fault+0x26/0x30 [ 404.453580][ T6327] RIP: 0010:__get_user_4+0x11/0x20 [ 404.458882][ T6327] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 404.478785][ T6327] RSP: 0018:ffffc9000f7e7d98 EFLAGS: 00050206 [ 404.485567][ T6327] RAX: 000000110e22fff6 RBX: ffff8880303c8000 RCX: 79ec404df5be7d00 [ 404.493578][ T6327] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 404.501665][ T6327] RBP: ffffc9000f7e7ed8 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 404.509669][ T6327] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 00000000c004743e [ 404.517692][ T6327] R13: ffff8880303c80d8 R14: ffff88807fa27680 R15: 1ffff1100ff44f06 [ 404.525797][ T6327] ppp_ioctl+0x5f9/0x1bc0 [ 404.530257][ T6327] ? ppp_poll+0x250/0x250 [ 404.534634][ T6327] ? __fget_files+0x28/0x460 [ 404.539331][ T6327] ? bpf_lsm_file_ioctl+0x9/0x10 [ 404.544488][ T6327] ? security_file_ioctl+0x80/0xa0 [ 404.549655][ T6327] ? ppp_poll+0x250/0x250 [ 404.554041][ T6327] __se_sys_ioctl+0xfd/0x170 [ 404.558715][ T6327] do_syscall_64+0x55/0xb0 [ 404.563174][ T6327] ? clear_bhb_loop+0x40/0x90 [ 404.567896][ T6327] ? clear_bhb_loop+0x40/0x90 [ 404.572625][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.578569][ T6327] RIP: 0033:0x7feb43d9e0d9 [ 404.583028][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.602764][ T6327] RSP: 002b:00007feb44cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.611318][ T6327] RAX: ffffffffffffffda RBX: 00007feb44025fa0 RCX: 00007feb43d9e0d9 [ 404.619328][ T6327] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000006 [ 404.627333][ T6327] RBP: 00007feb43e35024 R08: 0000000000000000 R09: 0000000000000000 [ 404.635538][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.643651][ T6327] R13: 00007feb44026038 R14: 00007feb44025fa0 R15: 00007fffe8d59668 [ 404.651660][ T6327] [ 404.654699][ T6327] [ 404.657128][ T6327] Allocated by task 6327: [ 404.661563][ T6327] kasan_set_track+0x4e/0x70 [ 404.666302][ T6327] __kasan_kmalloc+0x8f/0xa0 [ 404.670927][ T6327] __kmalloc_node+0xb6/0x240 [ 404.675543][ T6327] bpf_map_area_alloc+0x5e/0x110 [ 404.680544][ T6327] prealloc_elems_and_freelist+0x86/0x1c0 [ 404.686318][ T6327] stack_map_alloc+0x32b/0x4b0 [ 404.691173][ T6327] map_create+0x877/0x12f0 [ 404.695977][ T6327] __sys_bpf+0x651/0x890 [ 404.700625][ T6327] __x64_sys_bpf+0x7c/0x90 [ 404.705788][ T6327] do_syscall_64+0x55/0xb0 [ 404.710328][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.716262][ T6327] [ 404.718873][ T6327] The buggy address belongs to the object at ffff88802e8ab980 [ 404.718873][ T6327] which belongs to the cache kmalloc-cg-64 of size 64 [ 404.733241][ T6327] The buggy address is located 16 bytes inside of [ 404.733241][ T6327] allocated 40-byte region [ffff88802e8ab980, ffff88802e8ab9a8) [ 404.747434][ T6327] [ 404.749782][ T6327] The buggy address belongs to the physical page: [ 404.756316][ T6327] page:ffffea0000ba2ac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e8ab [ 404.766601][ T6327] memcg:ffff888060993601 [ 404.770880][ T6327] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 404.778947][ T6327] page_type: 0xffffffff() [ 404.783503][ T6327] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 404.792401][ T6327] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888060993601 [ 404.801373][ T6327] page dumped because: kasan: bad access detected [ 404.807882][ T6327] page_owner tracks the page as allocated [ 404.813769][ T6327] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5823, tgid 5823 (syz-executor), ts 399262567491, free_ts 399262108377 [ 404.832579][ T6327] post_alloc_hook+0x1c1/0x200 [ 404.837448][ T6327] get_page_from_freelist+0x2181/0x22a0 [ 404.843030][ T6327] __alloc_pages+0x1f0/0x460 [ 404.847644][ T6327] alloc_slab_page+0x5d/0x180 [ 404.852345][ T6327] new_slab+0x87/0x2d0 [ 404.856459][ T6327] ___slab_alloc+0xc5c/0x12f0 [ 404.861172][ T6327] __kmem_cache_alloc_node+0x11f/0x250 [ 404.866702][ T6327] kmalloc_trace+0x2a/0xe0 [ 404.871265][ T6327] alloc_fdtable+0xca/0x2c0 [ 404.875839][ T6327] dup_fd+0x747/0xa20 [ 404.879893][ T6327] copy_files+0xaf/0x110 [ 404.884624][ T6327] copy_process+0x157d/0x3da0 [ 404.889331][ T6327] kernel_clone+0x24b/0x8a0 [ 404.894178][ T6327] __x64_sys_clone+0x1b7/0x230 [ 404.899167][ T6327] do_syscall_64+0x55/0xb0 [ 404.903626][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.909583][ T6327] page last free stack trace: [ 404.914280][ T6327] free_unref_page_prepare+0x7d7/0x8f0 [ 404.920046][ T6327] free_unref_page+0x32/0x2e0 [ 404.924764][ T6327] vfree+0x1a7/0x340 [ 404.928787][ T6327] __do_replace+0x878/0x9b0 [ 404.933319][ T6327] do_ip6t_set_ctl+0xb41/0xe10 [ 404.938129][ T6327] nf_setsockopt+0x263/0x280 [ 404.942865][ T6327] do_sock_setsockopt+0x175/0x1a0 [ 404.947917][ T6327] __x64_sys_setsockopt+0x182/0x200 [ 404.953142][ T6327] do_syscall_64+0x55/0xb0 [ 404.957583][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.963542][ T6327] [ 404.966243][ T6327] Memory state around the buggy address: [ 404.972212][ T6327] ffff88802e8ab880: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 404.980556][ T6327] ffff88802e8ab900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 404.989193][ T6327] >ffff88802e8ab980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 404.997294][ T6327] ^ [ 405.002778][ T6327] ffff88802e8aba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 405.010983][ T6327] ffff88802e8aba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 405.019637][ T6327] ================================================================== [ 405.028005][ T6327] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 405.035233][ T6327] CPU: 0 PID: 6327 Comm: syz.2.197 Not tainted syzkaller #0 [ 405.042561][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.052652][ T6327] Call Trace: [ 405.055955][ T6327] [ 405.058923][ T6327] dump_stack_lvl+0x18c/0x250 [ 405.063883][ T6327] ? show_regs_print_info+0x20/0x20 [ 405.069216][ T6327] ? load_image+0x420/0x420 [ 405.073772][ T6327] panic+0x2ca/0x720 [ 405.077713][ T6327] ? __lock_acquire+0x7d80/0x7d80 [ 405.082778][ T6327] ? bpf_jit_dump+0xd0/0xd0 [ 405.087622][ T6327] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 405.093745][ T6327] ? _raw_spin_unlock+0x40/0x40 [ 405.098642][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 405.103804][ T6327] check_panic_on_warn+0x84/0xa0 [ 405.108828][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 405.114194][ T6327] end_report+0x6f/0x130 [ 405.118855][ T6327] kasan_report+0x128/0x150 [ 405.123411][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 405.128774][ T6327] kasan_check_range+0x241/0x290 [ 405.133838][ T6327] ? __bpf_get_stackid+0x6c7/0x900 [ 405.138985][ T6327] __asan_memcpy+0x40/0x70 [ 405.143436][ T6327] __bpf_get_stackid+0x6c7/0x900 [ 405.148408][ T6327] bpf_get_stackid_pe+0x343/0x410 [ 405.153471][ T6327] bpf_prog_9f7ee0cc743aa62b+0x29/0x3e [ 405.159050][ T6327] bpf_overflow_handler+0x1fc/0x510 [ 405.164380][ T6327] ? bpf_overflow_handler+0xde/0x510 [ 405.170069][ T6327] ? tp_perf_event_destroy+0x20/0x20 [ 405.175407][ T6327] ? verify_lock_unused+0x140/0x140 [ 405.180669][ T6327] ? __perf_event_account_interrupt+0x187/0x280 [ 405.187496][ T6327] __perf_event_overflow+0x461/0x660 [ 405.192833][ T6327] ? is_bpf_text_address+0x28f/0x2a0 [ 405.198250][ T6327] perf_swevent_overflow+0x274/0x340 [ 405.203761][ T6327] ? __kernel_text_address+0xd/0x30 [ 405.209102][ T6327] ? unwind_get_return_address+0x91/0xc0 [ 405.215049][ T6327] ? perf_event_switch_output+0x790/0x790 [ 405.221643][ T6327] ? rcu_is_watching+0x15/0xb0 [ 405.226545][ T6327] perf_swevent_event+0x45c/0x570 [ 405.231691][ T6327] ? perf_tp_event+0x1550/0x1550 [ 405.236738][ T6327] ? check_noncircular+0x18a/0x400 [ 405.241980][ T6327] ___perf_sw_event+0x4ab/0x730 [ 405.247132][ T6327] ? ___perf_sw_event+0x19e/0x730 [ 405.252209][ T6327] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 405.258676][ T6327] ? __lock_acquire+0x357f/0x7d80 [ 405.263750][ T6327] ? mark_lock+0x94/0x320 [ 405.268203][ T6327] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 405.274216][ T6327] ? lock_chain_count+0x20/0x20 [ 405.279191][ T6327] __perf_sw_event+0x139/0x270 [ 405.283995][ T6327] do_user_addr_fault+0x1242/0x12d0 [ 405.289223][ T6327] ? rcu_is_watching+0x15/0xb0 [ 405.294111][ T6327] exc_page_fault+0x64/0x100 [ 405.298734][ T6327] asm_exc_page_fault+0x26/0x30 [ 405.303633][ T6327] RIP: 0010:__get_user_4+0x11/0x20 [ 405.308784][ T6327] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 405.328428][ T6327] RSP: 0018:ffffc9000f7e7d98 EFLAGS: 00050206 [ 405.334519][ T6327] RAX: 000000110e22fff6 RBX: ffff8880303c8000 RCX: 79ec404df5be7d00 [ 405.342513][ T6327] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 405.350510][ T6327] RBP: ffffc9000f7e7ed8 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 405.358681][ T6327] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 00000000c004743e [ 405.366765][ T6327] R13: ffff8880303c80d8 R14: ffff88807fa27680 R15: 1ffff1100ff44f06 [ 405.375032][ T6327] ppp_ioctl+0x5f9/0x1bc0 [ 405.379404][ T6327] ? ppp_poll+0x250/0x250 [ 405.383756][ T6327] ? __fget_files+0x28/0x460 [ 405.388383][ T6327] ? bpf_lsm_file_ioctl+0x9/0x10 [ 405.393340][ T6327] ? security_file_ioctl+0x80/0xa0 [ 405.398482][ T6327] ? ppp_poll+0x250/0x250 [ 405.402843][ T6327] __se_sys_ioctl+0xfd/0x170 [ 405.407491][ T6327] do_syscall_64+0x55/0xb0 [ 405.411940][ T6327] ? clear_bhb_loop+0x40/0x90 [ 405.416646][ T6327] ? clear_bhb_loop+0x40/0x90 [ 405.421438][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.427356][ T6327] RIP: 0033:0x7feb43d9e0d9 [ 405.431790][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.451536][ T6327] RSP: 002b:00007feb44cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.459976][ T6327] RAX: ffffffffffffffda RBX: 00007feb44025fa0 RCX: 00007feb43d9e0d9 [ 405.467976][ T6327] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000006 [ 405.476065][ T6327] RBP: 00007feb43e35024 R08: 0000000000000000 R09: 0000000000000000 [ 405.484170][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.492251][ T6327] R13: 00007feb44026038 R14: 00007feb44025fa0 R15: 00007fffe8d59668 [ 405.500363][ T6327] [ 405.504075][ T6327] Kernel Offset: disabled [ 405.508435][ T6327] Rebooting in 86400 seconds..