=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:24 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xfe860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) [ 1225.627536][T16725] hsr_slave_0: left promiscuous mode [ 1225.636993][T16725] hsr_slave_1: left promiscuous mode [ 1225.656703][T16725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.682861][T16725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.702255][T16725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.714601][T16725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.728578][T16725] bridge_slave_1: left allmulticast mode [ 1225.734469][T16725] bridge_slave_1: left promiscuous mode [ 1225.747921][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.766775][T16725] bridge_slave_0: left allmulticast mode [ 1225.772820][T16725] bridge_slave_0: left promiscuous mode [ 1225.779123][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.794593][T16725] veth1_macvtap: left promiscuous mode [ 1225.800992][T16725] veth0_macvtap: left promiscuous mode [ 1225.806827][T16725] veth1_vlan: left promiscuous mode [ 1225.812807][T16725] veth0_vlan: left promiscuous mode [ 1226.293368][T16725] team0 (unregistering): Port device team_slave_1 removed [ 1226.324369][T16725] team0 (unregistering): Port device team_slave_0 removed [ 1226.337288][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1226.347594][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1226.356509][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1226.364584][T16725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.364943][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1226.380858][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1226.412157][T16725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.494389][T16725] bond0 (unregistering): Released all slaves [ 1226.914404][ T6656] chnl_net:caif_netlink_parms(): no params data found [ 1227.052322][T23385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1227.062689][T23385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1227.071154][T23385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1227.079467][T23385] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1227.087027][T23385] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1227.095789][T23385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1227.142833][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.158925][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.166179][ T6656] bridge_slave_0: entered allmulticast mode [ 1227.189481][ T6656] bridge_slave_0: entered promiscuous mode [ 1227.239535][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.246665][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.277638][ T6656] bridge_slave_1: entered allmulticast mode [ 1227.289422][ T6656] bridge_slave_1: entered promiscuous mode [ 1227.379819][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.416348][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.496119][ T6656] team0: Port device team_slave_0 added [ 1227.589729][ T6656] team0: Port device team_slave_1 added [ 1227.661450][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.678077][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.741843][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.770856][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.777862][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.838119][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.866368][ T6671] chnl_net:caif_netlink_parms(): no params data found [ 1228.056442][ T6656] hsr_slave_0: entered promiscuous mode [ 1228.063744][ T6656] hsr_slave_1: entered promiscuous mode [ 1228.070574][ T6656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1228.092851][ T6656] Cannot create hsr debugfs directory [ 1228.238690][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.245905][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.262424][ T6671] bridge_slave_0: entered allmulticast mode [ 1228.269505][ T6671] bridge_slave_0: entered promiscuous mode [ 1228.294301][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.302367][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.318349][ T6671] bridge_slave_1: entered allmulticast mode [ 1228.325353][ T6671] bridge_slave_1: entered promiscuous mode [ 1228.399555][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.456200][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.468435][T23385] Bluetooth: hci2: command 0x0409 tx timeout [ 1228.640290][ T6671] team0: Port device team_slave_0 added [ 1228.685985][ T6671] team0: Port device team_slave_1 added [ 1228.848839][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.855843][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.913046][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.021468][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.040445][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.070641][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.186744][T16725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.197495][T23385] Bluetooth: hci3: command 0x0409 tx timeout [ 1229.274530][ T6671] hsr_slave_0: entered promiscuous mode [ 1229.300259][ T6671] hsr_slave_1: entered promiscuous mode [ 1229.318042][ T6671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.325687][ T6671] Cannot create hsr debugfs directory [ 1229.415956][T16725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.499060][ T6656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1229.538802][T16725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.565195][ T6656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1229.620814][T16725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.654309][ T6656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1229.713636][ T6656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1230.013934][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.093047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1230.101759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1230.111971][ T6656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.195271][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1230.204894][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1230.214099][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.221267][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.229902][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1230.322868][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1230.332239][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1230.341586][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.348739][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.356889][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1230.366653][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1230.420548][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1230.430576][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1230.440394][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1230.449552][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1230.458966][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1230.467497][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1230.481349][ T6656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1230.521566][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1230.548422][ T5112] Bluetooth: hci2: command 0x041b tx timeout [ 1230.556404][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1230.567746][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1230.576857][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1231.048060][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1231.055673][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1231.077585][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.114580][T16725] hsr_slave_0: left promiscuous mode [ 1231.135614][T16725] hsr_slave_1: left promiscuous mode [ 1231.150981][T16725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.158927][T16725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.168491][T16725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.176039][T16725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.186232][T16725] bridge_slave_1: left allmulticast mode [ 1231.192400][T16725] bridge_slave_1: left promiscuous mode [ 1231.198483][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.207095][T16725] bridge_slave_0: left allmulticast mode [ 1231.213223][T16725] bridge_slave_0: left promiscuous mode [ 1231.228215][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.250489][T16725] veth1_macvtap: left promiscuous mode [ 1231.256071][T16725] veth0_macvtap: left promiscuous mode [ 1231.268304][ T5112] Bluetooth: hci3: command 0x041b tx timeout [ 1231.277524][T16725] veth1_vlan: left promiscuous mode [ 1231.283498][T16725] veth0_vlan: left promiscuous mode [ 1231.545276][T16725] team0 (unregistering): Port device team_slave_1 removed [ 1231.557463][T16725] team0 (unregistering): Port device team_slave_0 removed [ 1231.574840][T16725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.590488][T16725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.655765][T16725] bond0 (unregistering): Released all slaves [ 1232.003721][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1232.013794][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1232.055781][ T6656] veth0_vlan: entered promiscuous mode [ 1232.064504][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1232.074290][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1232.083943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1232.101044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1232.118991][ T6656] veth1_vlan: entered promiscuous mode [ 1232.147467][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1232.156059][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1232.175053][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1232.184692][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1232.203393][ T6656] veth0_macvtap: entered promiscuous mode [ 1232.242055][ T6656] veth1_macvtap: entered promiscuous mode [ 1232.275375][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.298449][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.331494][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.343876][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.354807][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.365683][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.375856][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.406508][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.430566][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.439390][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1232.447667][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1232.469388][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1232.489701][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1232.507901][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.526416][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.542356][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.565240][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.578895][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.590343][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.600594][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.611421][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.623452][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.631315][ T5112] Bluetooth: hci2: command 0x040f tx timeout [ 1232.632417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1232.657659][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1232.696339][ T6656] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.714351][ T6656] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.731525][ T6656] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.744400][ T6656] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.871580][ T5374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.905141][ T5374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.929010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1232.938223][T16726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.967279][T16726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.995774][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1233.349021][ T5112] Bluetooth: hci3: command 0x040f tx timeout [ 1234.001634][ T6671] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1234.016296][ T6671] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1234.034604][ T6671] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1234.047086][ T6671] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1234.156127][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.172052][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1234.180596][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1234.195140][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.206562][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1234.216341][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1234.233608][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.240818][ T5264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.256909][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1234.289701][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1234.300423][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1234.318753][ T3089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.325902][ T3089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.342145][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1234.353585][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1234.367264][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1234.379881][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1234.407297][ T6671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1234.429408][ T6671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1234.448725][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1234.457404][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1234.473846][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1234.485775][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1234.503087][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1234.515441][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1234.528517][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1234.556776][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1234.708151][ T5112] Bluetooth: hci2: command 0x0419 tx timeout [ 1234.776452][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1234.784047][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1234.804396][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.834796][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1234.843714][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1234.870202][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1234.879112][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1234.896453][ T6671] veth0_vlan: entered promiscuous mode [ 1234.905555][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1234.915477][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.929089][ T6671] veth1_vlan: entered promiscuous mode [ 1234.954432][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1234.963386][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1234.972478][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.981738][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.994042][ T6671] veth0_macvtap: entered promiscuous mode [ 1235.017049][ T6671] veth1_macvtap: entered promiscuous mode [ 1235.054719][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.070367][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.085585][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.098771][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.122196][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.140491][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.156634][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.168561][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.185237][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.200034][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.219177][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.229779][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1235.245562][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1235.254027][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1235.271607][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1235.290739][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.301384][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.311970][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.323668][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.333858][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.344685][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.355400][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.374905][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.385077][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.397231][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.409477][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.419953][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1235.428685][ T5112] Bluetooth: hci3: command 0x0419 tx timeout [ 1235.436764][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1235.450926][ T6671] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.461925][ T6671] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.470982][ T6671] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.480634][ T6671] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.567197][T32074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.585803][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.597603][T32074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.612371][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.623604][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1235.648564][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:12:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x7fffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x20) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x3a) 06:12:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xfdfdffff, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:36 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:36 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:36 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x7fffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x20) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x3a) 06:12:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:37 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:37 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:37 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xfb860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xfb860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r4, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:12:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xfb860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:38 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:38 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) [ 1238.710093][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.716554][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 06:12:38 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:38 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x30, 0x4, 0x1, 0x8, 0xc0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1c, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:38 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:38 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:39 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf8860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:39 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x30, 0x4, 0x1, 0x8, 0xc0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1c, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf6860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:40 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x30, 0x4, 0x1, 0x8, 0xc0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1c, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:40 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x0, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:41 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x30, 0x4, 0x1, 0x8, 0xc0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1c, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf5ffffff, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:41 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x0, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf4ffffff, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf3860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf2860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf0ffffff, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:42 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x0, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:42 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf0860000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:43 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x99070000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:43 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1e, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0x2}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5d020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:43 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x3, 0x80000000, 0x10, @local, @private2, 0x40, 0x87, 0x9e09}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r4}, 0x8) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r6, r8, &(0x7f00000002c0)=0x3, 0x7fffffff) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bond\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{}, {0x20, '.r-@:(,!'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syztnl0\x00'}, {0x20, 'sys_exit\x00'}, {0x20, '\x00'}], 0xa, "bb3c379ca9546ef70d750dc9c6ec9d7b8d7193e8335a6664d5c4125cde47301a034d26341bbca016b1a47974c2d5f98743b035fbcf245e1abbba828aeddf28f948c660681efdb37208d6b6565a9b94d7e16d7ad4e5d1c87b8c18afd004d1b35265bf0ed533c89e8addfa2235c0d2bd1b4c9ee1bcd899ed913cd230e51489b9b4a9e150e21c2c7832ceace323c673453f03d3bbcf14609a1bbf9976a9b5770831f32b1a67f7b431b5ca4adfb1ed96f4dbfe3d124f3c12f312ab2c4b9e03c6"}, 0xf4) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff8100000086dd60199f23d61cb100"/25], 0x3a) 06:12:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5d020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5d020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:44 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x3, 0x80000000, 0x10, @local, @private2, 0x40, 0x87, 0x9e09}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r4}, 0x8) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r6, r8, &(0x7f00000002c0)=0x3, 0x7fffffff) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bond\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{}, {0x20, '.r-@:(,!'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syztnl0\x00'}, {0x20, 'sys_exit\x00'}, {0x20, '\x00'}], 0xa, "bb3c379ca9546ef70d750dc9c6ec9d7b8d7193e8335a6664d5c4125cde47301a034d26341bbca016b1a47974c2d5f98743b035fbcf245e1abbba828aeddf28f948c660681efdb37208d6b6565a9b94d7e16d7ad4e5d1c87b8c18afd004d1b35265bf0ed533c89e8addfa2235c0d2bd1b4c9ee1bcd899ed913cd230e51489b9b4a9e150e21c2c7832ceace323c673453f03d3bbcf14609a1bbf9976a9b5770831f32b1a67f7b431b5ca4adfb1ed96f4dbfe3d124f3c12f312ab2c4b9e03c6"}, 0xf4) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff8100000086dd60199f23d61cb100"/25], 0x3a) 06:12:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5c020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5c020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:44 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:44 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:44 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1e, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0x2}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:44 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:44 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x3, 0x80000000, 0x10, @local, @private2, 0x40, 0x87, 0x9e09}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r4}, 0x8) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r6, r8, &(0x7f00000002c0)=0x3, 0x7fffffff) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bond\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{}, {0x20, '.r-@:(,!'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syztnl0\x00'}, {0x20, 'sys_exit\x00'}, {0x20, '\x00'}], 0xa, "bb3c379ca9546ef70d750dc9c6ec9d7b8d7193e8335a6664d5c4125cde47301a034d26341bbca016b1a47974c2d5f98743b035fbcf245e1abbba828aeddf28f948c660681efdb37208d6b6565a9b94d7e16d7ad4e5d1c87b8c18afd004d1b35265bf0ed533c89e8addfa2235c0d2bd1b4c9ee1bcd899ed913cd230e51489b9b4a9e150e21c2c7832ceace323c673453f03d3bbcf14609a1bbf9976a9b5770831f32b1a67f7b431b5ca4adfb1ed96f4dbfe3d124f3c12f312ab2c4b9e03c6"}, 0xf4) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff8100000086dd60199f23d61cb100"/25], 0x3a) 06:12:45 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1e, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0x2}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x43020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:45 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x40020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) [ 1245.908346][T23385] Bluetooth: hci4: command 0x0406 tx timeout 06:12:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x40000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x40000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:46 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x24, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0x8, "1390c8cbb305"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:46 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:46 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x24, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0x8, "1390c8cbb305"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:47 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xf000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:47 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x24, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0x8, "1390c8cbb305"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xe000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xe000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:48 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x27, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xb, "1390c8cbb305e90f58"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xe000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:49 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:49 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x27, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xb, "1390c8cbb305e90f58"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:50 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x27, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xb, "1390c8cbb305e90f58"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:50 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xb000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xb000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x9820200, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) shutdown(r0, 0x0) 06:12:51 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xd, "1390c8cbb305e90f5870e2"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:51 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) shutdown(r0, 0x0) 06:12:51 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) [ 1251.561004][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 06:12:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:52 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xd, "1390c8cbb305e90f5870e2"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:52 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5820200, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:53 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xd, "1390c8cbb305e90f5870e2"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) shutdown(r0, 0x0) 06:12:53 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:53 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x4000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3820200, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:54 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:54 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xd, "1390c8cbb305e90f5870e2"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:54 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:54 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:54 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) shutdown(r0, 0x0) 06:12:55 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:55 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:55 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:55 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:56 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:56 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:56 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x0, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:57 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r6, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 06:12:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x1020000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:57 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x0, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x1000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x1000000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:58 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:58 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:58 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x0, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:58 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x100000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x100000, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:12:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r5, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 06:12:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:12:59 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r5, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 06:12:59 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:59 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x0, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:12:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820e, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r5, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 06:13:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:00 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820e, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:01 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:01 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100000086dd60178d50fec02f"], 0x3a) 06:13:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x2820d, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100000086dd60178d500bb82f"], 0x3a) 06:13:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r8, 0x0, &(0x7f0000001700)=[r9]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x793, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100000086dd60178d5000122f"], 0x3a) 06:13:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x600, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:02 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:02 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:02 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:02 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r8, 0x0, &(0x7f0000001700)=[r9]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:03 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:03 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:03 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:03 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:03 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:04 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r8, 0x0, &(0x7f0000001700)=[r9]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:04 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:04 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1264.944841][T16724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:13:04 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1265.134209][T16724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:13:05 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x28, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x9, "ca575792b3c364"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1265.315034][T16724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:13:05 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1265.557258][T16724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:13:05 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:05 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x7, "ca575792b3"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x300, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:06 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x28, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x9, "ca575792b3c364"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x240, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x240, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) [ 1266.942041][T16724] hsr_slave_0: left promiscuous mode [ 1266.955761][T16724] hsr_slave_1: left promiscuous mode [ 1266.970695][T16724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.978282][T16724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.990374][T16724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.997832][T16724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.012876][T16724] bridge_slave_1: left allmulticast mode [ 1267.018813][T16724] bridge_slave_1: left promiscuous mode [ 1267.024625][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.034097][T16724] bridge_slave_0: left allmulticast mode [ 1267.047265][T16724] bridge_slave_0: left promiscuous mode [ 1267.060623][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.080616][T16724] veth1_macvtap: left promiscuous mode [ 1267.086332][T16724] veth0_macvtap: left promiscuous mode [ 1267.099839][T16724] veth1_vlan: left promiscuous mode [ 1267.105335][T16724] veth0_vlan: left promiscuous mode [ 1267.579397][T16724] team0 (unregistering): Port device team_slave_1 removed [ 1267.607576][T16724] team0 (unregistering): Port device team_slave_0 removed [ 1267.620563][T23385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1267.630286][T23385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1267.638527][T23385] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1267.648459][T23385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1267.656928][T23385] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1267.665612][T23385] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1267.665705][T16724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.702162][T16724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.773308][T16724] bond0 (unregistering): Released all slaves [ 1268.041054][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 1268.126678][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.142933][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.155541][ T8060] bridge_slave_0: entered allmulticast mode [ 1268.172375][ T8060] bridge_slave_0: entered promiscuous mode [ 1268.185234][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.197601][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.208289][ T8060] bridge_slave_1: entered allmulticast mode [ 1268.215265][ T8060] bridge_slave_1: entered promiscuous mode [ 1268.281961][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.302828][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.355940][ T8060] team0: Port device team_slave_0 added [ 1268.370477][ T8060] team0: Port device team_slave_1 added [ 1268.432548][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.448144][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.508269][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.522748][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.542108][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.599115][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.682553][ T8060] hsr_slave_0: entered promiscuous mode [ 1268.699187][ T8060] hsr_slave_1: entered promiscuous mode [ 1268.713906][ T8060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1268.737719][ T8060] Cannot create hsr debugfs directory [ 1269.748298][ T5112] Bluetooth: hci5: command 0x0409 tx timeout [ 1269.990063][ T8060] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1270.000825][ T8060] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1270.011170][ T8060] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1270.023244][ T8060] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.106093][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.120869][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1270.129727][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1270.150217][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.172609][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1270.189057][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1270.197614][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.204810][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.235543][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1270.244904][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1270.254565][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1270.263866][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.271026][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.279367][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1270.312154][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1270.323868][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1270.334213][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1270.344904][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1270.354178][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1270.374439][ T8060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1270.387753][ T8060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.402330][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1270.417250][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1270.433791][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1270.445920][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1270.459837][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1270.476862][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1270.768588][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1270.776138][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1270.800761][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.837113][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1270.848894][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1270.893435][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1270.909345][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1270.927285][ T8060] veth0_vlan: entered promiscuous mode [ 1270.937237][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1270.946371][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1270.964700][ T8060] veth1_vlan: entered promiscuous mode [ 1270.991571][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1271.000618][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1271.010178][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1271.019695][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1271.031128][ T8060] veth0_macvtap: entered promiscuous mode [ 1271.045880][ T8060] veth1_macvtap: entered promiscuous mode [ 1271.083147][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.097634][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.111694][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.122856][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.132823][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.143332][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.153446][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.164501][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.174456][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.184932][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.196286][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.205617][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1271.213978][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1271.222193][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1271.232008][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1271.244101][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.254760][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.265725][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.277116][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.287046][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.297542][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.307431][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.317903][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.327771][ T8060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.339410][ T8060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.351412][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.367408][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1271.376115][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1271.387786][ T8060] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.396692][ T8060] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.408795][ T8060] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.417532][ T8060] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.526403][ T5670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.542743][ T5670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.556151][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1271.581731][T16725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.596891][T16725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.615360][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1271.836398][ T5112] Bluetooth: hci5: command 0x041b tx timeout 06:13:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x23f, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x240, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x240, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x240, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r8, 0x0, &(0x7f0000001700)=[r9]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r7, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:12 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x28, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x9, "ca575792b3c364"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:12 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x22e, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100003686dd60178d5000002f"], 0x3a) 06:13:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100003686dd60178d5000002f"], 0x3a) 06:13:13 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xa, "ca575792b3c36415"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x102, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100002886dd60178d5000002f"], 0x3a) 06:13:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xb, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) [ 1273.908170][ T5112] Bluetooth: hci5: command 0x040f tx timeout 06:13:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:13 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:13 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100b80b86dd60178d5000002f"], 0x3a) 06:13:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100000786dd60178d5000002f"], 0x3a) 06:13:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100000686dd60178d5000002f"], 0x3a) 06:13:14 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xa, "ca575792b3c36415"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x8, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x8, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x8, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x5, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100030086dd60178d5000002f"], 0x3a) 06:13:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100280086dd60178d5000002f"], 0x3a) 06:13:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100060086dd60178d5000002f"], 0x3a) 06:13:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:15 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xa, "ca575792b3c36415"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:15 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xa, "ca575792b3c36415"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb8100020086dd60178d5000002f"], 0x3a) 06:13:15 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb81fec00086dd60178d5000002f"], 0x3a) [ 1275.988115][T23385] Bluetooth: hci5: command 0x0419 tx timeout 06:13:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0406619, &(0x7f0000000040)={0x0, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:16 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaeabb81003f0086dd60178d5000002f"], 0x3a) [ 1276.638487][T23385] Bluetooth: hci0: command 0x0406 tx timeout 06:13:16 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028665d, &(0x7f0000000040)={0x0, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028665d, &(0x7f0000000040)={0x0, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000001c0)=""/125, 0xffffff26}, {&(0x7f0000000500)=""/274, 0x112}], 0x3, 0x0, 0x0) 06:13:16 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) setsockopt$inet_group_source_req(r11, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) 06:13:17 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:17 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:17 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:17 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:18 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:18 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x5, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r3]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', r8, 0x0, r6, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)=[r6, r6]}, 0x80) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000009c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}]}, 0x590) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r8, 0x40, 0x10, 0x1, 0x80, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x42, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x11, "ef98a1349e7ca823d998607dc30774"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 06:13:18 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:18 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:18 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (fail_nth: 1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:13:18 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1278.952974][ T8427] FAULT_INJECTION: forcing a failure. [ 1278.952974][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.981977][ T8427] CPU: 1 PID: 8427 Comm: syz-executor.3 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1278.992388][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1279.002480][ T8427] Call Trace: [ 1279.005793][ T8427] [ 1279.008763][ T8427] dump_stack_lvl+0x136/0x150 [ 1279.013496][ T8427] should_fail_ex+0x4a3/0x5b0 [ 1279.018236][ T8427] should_failslab+0x9/0x20 [ 1279.022787][ T8427] __kmem_cache_alloc_node+0x5b/0x320 [ 1279.028219][ T8427] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1279.033990][ T8427] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1279.039755][ T8427] __kmalloc+0x4e/0x190 [ 1279.043950][ T8427] ? rcu_is_watching+0x12/0xb0 [ 1279.048770][ T8427] tomoyo_realpath_from_path+0xc3/0x600 [ 1279.054370][ T8427] ? tomoyo_profile+0x46/0x60 [ 1279.059106][ T8427] tomoyo_path_number_perm+0x217/0x570 [ 1279.064621][ T8427] ? tomoyo_path_number_perm+0x1c1/0x570 [ 1279.070322][ T8427] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1279.076195][ T8427] ? find_held_lock+0x2d/0x110 [ 1279.081042][ T8427] ? lock_downgrade+0x690/0x690 [ 1279.085963][ T8427] ? wait_for_completion_io_timeout+0x20/0x20 [ 1279.092098][ T8427] ? __fget_files+0x26a/0x480 [ 1279.096850][ T8427] security_file_ioctl+0x54/0xb0 [ 1279.101844][ T8427] __x64_sys_ioctl+0xb7/0x210 [ 1279.106583][ T8427] do_syscall_64+0x39/0xb0 [ 1279.111042][ T8427] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1279.116997][ T8427] RIP: 0033:0x7fde04e8c0f9 [ 1279.121463][ T8427] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1279.141131][ T8427] RSP: 002b:00007fde039dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.149600][ T8427] RAX: ffffffffffffffda RBX: 00007fde04fac050 RCX: 00007fde04e8c0f9 [ 1279.157617][ T8427] RDX: 00000000200007c0 RSI: 0000000040305828 RDI: 0000000000000008 [ 1279.165629][ T8427] RBP: 00007fde039dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.173644][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.181654][ T8427] R13: 00007ffd5974195f R14: 00007fde039dd300 R15: 0000000000022000 [ 1279.189689][ T8427] 06:13:19 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1279.247287][ T8427] ERROR: Out of memory at tomoyo_realpath_from_path. 06:13:19 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:19 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:19 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:19 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (fail_nth: 2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) [ 1279.848467][ T8454] FAULT_INJECTION: forcing a failure. [ 1279.848467][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.878127][ T8454] CPU: 0 PID: 8454 Comm: syz-executor.3 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1279.888544][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 06:13:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 1) [ 1279.898632][ T8454] Call Trace: [ 1279.901947][ T8454] [ 1279.904921][ T8454] dump_stack_lvl+0x136/0x150 [ 1279.909663][ T8454] should_fail_ex+0x4a3/0x5b0 [ 1279.914406][ T8454] should_failslab+0x9/0x20 [ 1279.918976][ T8454] __kmem_cache_alloc_node+0x5b/0x320 [ 1279.924409][ T8454] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1279.929837][ T8454] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1279.935265][ T8454] __kmalloc+0x4e/0x190 [ 1279.939468][ T8454] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 1279.945165][ T8454] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1279.950409][ T8454] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1279.956179][ T8454] ? rcu_is_watching+0x12/0xb0 [ 1279.960999][ T8454] tomoyo_encode+0x2c/0x50 [ 1279.965458][ T8454] tomoyo_realpath_from_path+0x185/0x600 [ 1279.971151][ T8454] tomoyo_path_number_perm+0x217/0x570 [ 1279.976675][ T8454] ? tomoyo_path_number_perm+0x1c1/0x570 [ 1279.982392][ T8454] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1279.988269][ T8454] ? find_held_lock+0x2d/0x110 [ 1279.993120][ T8454] ? lock_downgrade+0x690/0x690 [ 1279.998033][ T8454] ? wait_for_completion_io_timeout+0x20/0x20 [ 1280.004170][ T8454] ? __fget_files+0x26a/0x480 [ 1280.008918][ T8454] security_file_ioctl+0x54/0xb0 [ 1280.013950][ T8454] __x64_sys_ioctl+0xb7/0x210 [ 1280.018690][ T8454] do_syscall_64+0x39/0xb0 [ 1280.023164][ T8454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1280.029111][ T8454] RIP: 0033:0x7fde04e8c0f9 [ 1280.033596][ T8454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1280.053257][ T8454] RSP: 002b:00007fde039dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.061727][ T8454] RAX: ffffffffffffffda RBX: 00007fde04fac050 RCX: 00007fde04e8c0f9 [ 1280.069747][ T8454] RDX: 00000000200007c0 RSI: 0000000040305828 RDI: 0000000000000008 [ 1280.077760][ T8454] RBP: 00007fde039dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.085777][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:13:19 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1280.093787][ T8454] R13: 00007ffd5974195f R14: 00007fde039dd300 R15: 0000000000022000 [ 1280.097263][ T8456] FAULT_INJECTION: forcing a failure. [ 1280.097263][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.101785][ T8454] [ 1280.122416][ T8454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.129649][ T8456] CPU: 0 PID: 8456 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 06:13:20 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1280.140036][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1280.150127][ T8456] Call Trace: [ 1280.153434][ T8456] [ 1280.156395][ T8456] dump_stack_lvl+0x136/0x150 [ 1280.161134][ T8456] should_fail_ex+0x4a3/0x5b0 [ 1280.165896][ T8456] _copy_from_user+0x2e/0x180 [ 1280.170695][ T8456] copy_msghdr_from_user+0x89/0x150 [ 1280.175965][ T8456] ? __copy_msghdr+0x4b0/0x4b0 [ 1280.180792][ T8456] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1280.186821][ T8456] ? find_held_lock+0x2d/0x110 [ 1280.191650][ T8456] ___sys_sendmsg+0xdd/0x1b0 [ 1280.196306][ T8456] ? do_recvmmsg+0x6e0/0x6e0 [ 1280.200960][ T8456] ? __fget_files+0x248/0x480 [ 1280.205707][ T8456] ? lock_downgrade+0x690/0x690 [ 1280.210600][ T8456] ? find_held_lock+0x2d/0x110 [ 1280.215435][ T8456] ? ksys_write+0x210/0x250 [ 1280.219985][ T8456] ? __fget_files+0x26a/0x480 [ 1280.224729][ T8456] ? __fget_light+0xe5/0x270 [ 1280.229386][ T8456] __sys_sendmsg+0xf7/0x1c0 [ 1280.233951][ T8456] ? __sys_sendmsg_sock+0x40/0x40 [ 1280.239041][ T8456] ? fput+0x2f/0x1a0 [ 1280.242964][ T8456] ? ksys_write+0x1a3/0x250 [ 1280.247487][ T8456] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1280.253668][ T8456] ? lockdep_hardirqs_on+0x7d/0x100 [ 1280.258898][ T8456] do_syscall_64+0x39/0xb0 [ 1280.263333][ T8456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1280.269268][ T8456] RIP: 0033:0x7f017dc8c0f9 [ 1280.273715][ T8456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1280.293344][ T8456] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.301824][ T8456] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1280.309808][ T8456] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1280.317792][ T8456] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.325774][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.333801][ T8456] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1280.341847][ T8456] 06:13:20 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 2) 06:13:20 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1280.505842][ T8471] FAULT_INJECTION: forcing a failure. [ 1280.505842][ T8471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.550262][ T8471] CPU: 1 PID: 8471 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1280.560668][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1280.570756][ T8471] Call Trace: [ 1280.574062][ T8471] [ 1280.577024][ T8471] dump_stack_lvl+0x136/0x150 [ 1280.581754][ T8471] should_fail_ex+0x4a3/0x5b0 [ 1280.586484][ T8471] _copy_from_user+0x2e/0x180 [ 1280.591211][ T8471] iovec_from_user+0x14d/0x3a0 [ 1280.596031][ T8471] ? __might_fault+0xd9/0x180 [ 1280.600764][ T8471] __import_iovec+0x69/0x610 [ 1280.605426][ T8471] import_iovec+0x110/0x160 [ 1280.609993][ T8471] copy_msghdr_from_user+0xed/0x150 [ 1280.615241][ T8471] ? __copy_msghdr+0x4b0/0x4b0 [ 1280.620049][ T8471] ? find_held_lock+0x2d/0x110 [ 1280.624861][ T8471] ___sys_sendmsg+0xdd/0x1b0 [ 1280.629482][ T8471] ? do_recvmmsg+0x6e0/0x6e0 [ 1280.634107][ T8471] ? __fget_files+0x248/0x480 [ 1280.638816][ T8471] ? lock_downgrade+0x690/0x690 [ 1280.643701][ T8471] ? find_held_lock+0x2d/0x110 [ 1280.648500][ T8471] ? ksys_write+0x210/0x250 [ 1280.653032][ T8471] ? __fget_files+0x26a/0x480 [ 1280.657746][ T8471] ? __fget_light+0xe5/0x270 [ 1280.662392][ T8471] __sys_sendmsg+0xf7/0x1c0 [ 1280.666929][ T8471] ? __sys_sendmsg_sock+0x40/0x40 [ 1280.671991][ T8471] ? fput+0x2f/0x1a0 [ 1280.675907][ T8471] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1280.681825][ T8471] ? lockdep_hardirqs_on+0x7d/0x100 [ 1280.687049][ T8471] do_syscall_64+0x39/0xb0 [ 1280.691480][ T8471] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1280.697399][ T8471] RIP: 0033:0x7f017dc8c0f9 [ 1280.701828][ T8471] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1280.721449][ T8471] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.729888][ T8471] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1280.737898][ T8471] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1280.745899][ T8471] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.753878][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.761857][ T8471] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1280.769856][ T8471] 06:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 3) 06:13:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (fail_nth: 3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) [ 1280.963395][ T8482] FAULT_INJECTION: forcing a failure. [ 1280.963395][ T8482] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.976798][ T8482] CPU: 0 PID: 8482 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1280.987168][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1280.997225][ T8482] Call Trace: [ 1281.000515][ T8482] [ 1281.003468][ T8482] dump_stack_lvl+0x136/0x150 [ 1281.008192][ T8482] should_fail_ex+0x4a3/0x5b0 [ 1281.012916][ T8482] should_failslab+0x9/0x20 [ 1281.017476][ T8482] kmem_cache_alloc_node+0x5c/0x3e0 [ 1281.022705][ T8482] __alloc_skb+0x288/0x330 [ 1281.027184][ T8482] ? __napi_build_skb+0x50/0x50 [ 1281.032042][ T8482] ? __netlink_dump_start+0x910/0x910 [ 1281.037486][ T8482] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 1281.043714][ T8482] netlink_sendmsg+0x9b0/0xe30 [ 1281.048526][ T8482] ? netlink_unicast+0x7f0/0x7f0 [ 1281.053499][ T8482] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1281.058799][ T8482] ? netlink_unicast+0x7f0/0x7f0 [ 1281.063782][ T8482] sock_sendmsg+0xde/0x190 [ 1281.068246][ T8482] ____sys_sendmsg+0x71c/0x900 [ 1281.073046][ T8482] ? copy_msghdr_from_user+0xfc/0x150 [ 1281.078436][ T8482] ? kernel_sendmsg+0x50/0x50 [ 1281.083165][ T8482] ? find_held_lock+0x2d/0x110 [ 1281.087984][ T8482] ___sys_sendmsg+0x110/0x1b0 [ 1281.092712][ T8482] ? do_recvmmsg+0x6e0/0x6e0 [ 1281.097337][ T8482] ? __fget_files+0x248/0x480 [ 1281.102032][ T8482] ? lock_downgrade+0x690/0x690 [ 1281.106905][ T8482] ? find_held_lock+0x2d/0x110 [ 1281.111686][ T8482] ? ksys_write+0x210/0x250 [ 1281.116201][ T8482] ? __fget_files+0x26a/0x480 [ 1281.120915][ T8482] ? __fget_light+0xe5/0x270 [ 1281.125554][ T8482] __sys_sendmsg+0xf7/0x1c0 [ 1281.130066][ T8482] ? __sys_sendmsg_sock+0x40/0x40 [ 1281.135128][ T8482] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1281.141065][ T8482] ? lockdep_hardirqs_on+0x7d/0x100 [ 1281.146317][ T8482] do_syscall_64+0x39/0xb0 [ 1281.150761][ T8482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1281.156683][ T8482] RIP: 0033:0x7f017dc8c0f9 [ 1281.161103][ T8482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1281.180748][ T8482] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.189200][ T8482] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1281.197211][ T8482] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1281.205183][ T8482] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.213173][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.221153][ T8482] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1281.229170][ T8482] [ 1281.253422][ T8484] FAULT_INJECTION: forcing a failure. 06:13:21 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1281.253422][ T8484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.270165][ T8484] CPU: 1 PID: 8484 Comm: syz-executor.3 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1281.280554][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1281.290642][ T8484] Call Trace: [ 1281.293946][ T8484] [ 1281.296904][ T8484] dump_stack_lvl+0x136/0x150 [ 1281.301631][ T8484] should_fail_ex+0x4a3/0x5b0 [ 1281.306363][ T8484] _copy_from_user+0x2e/0x180 06:13:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 4) 06:13:21 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1281.311098][ T8484] ioctl_preallocate+0x9f/0x200 [ 1281.316003][ T8484] ? fiemap_prep+0x220/0x220 [ 1281.320649][ T8484] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1281.326516][ T8484] ? find_held_lock+0x2d/0x110 [ 1281.331345][ T8484] do_vfs_ioctl+0x12e9/0x1670 [ 1281.336079][ T8484] ? vfs_fileattr_set+0xc40/0xc40 [ 1281.341172][ T8484] ? wait_for_completion_io_timeout+0x20/0x20 [ 1281.347302][ T8484] ? __fget_files+0x26a/0x480 [ 1281.352040][ T8484] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1281.357045][ T8484] __x64_sys_ioctl+0x10c/0x210 06:13:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 5) [ 1281.361879][ T8484] do_syscall_64+0x39/0xb0 [ 1281.366343][ T8484] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1281.372291][ T8484] RIP: 0033:0x7fde04e8c0f9 [ 1281.376741][ T8484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1281.396382][ T8484] RSP: 002b:00007fde039dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.405107][ T8484] RAX: ffffffffffffffda RBX: 00007fde04fac050 RCX: 00007fde04e8c0f9 [ 1281.410541][ T8494] FAULT_INJECTION: forcing a failure. [ 1281.410541][ T8494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.413089][ T8484] RDX: 00000000200007c0 RSI: 0000000040305828 RDI: 0000000000000008 [ 1281.413111][ T8484] RBP: 00007fde039dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.413130][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.413147][ T8484] R13: 00007ffd5974195f R14: 00007fde039dd300 R15: 0000000000022000 [ 1281.458100][ T8484] [ 1281.461141][ T8494] CPU: 0 PID: 8494 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1281.471511][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1281.481602][ T8494] Call Trace: [ 1281.484912][ T8494] [ 1281.487874][ T8494] dump_stack_lvl+0x136/0x150 [ 1281.492596][ T8494] should_fail_ex+0x4a3/0x5b0 [ 1281.497329][ T8494] copyin+0x19/0x120 [ 1281.501276][ T8494] _copy_from_iter+0x379/0x1060 [ 1281.506189][ T8494] ? __build_skb_around+0x276/0x3a0 06:13:21 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1281.511440][ T8494] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 1281.517125][ T8494] ? __napi_build_skb+0x50/0x50 [ 1281.522029][ T8494] ? __netlink_dump_start+0x820/0x910 [ 1281.527449][ T8494] ? __virt_addr_valid+0x61/0x2e0 [ 1281.532524][ T8494] ? __phys_addr+0xc8/0x140 [ 1281.537090][ T8494] ? __phys_addr_symbol+0x30/0x70 [ 1281.542175][ T8494] ? __check_object_size+0x333/0x6e0 [ 1281.547512][ T8494] netlink_sendmsg+0x883/0xe30 [ 1281.552338][ T8494] ? netlink_unicast+0x7f0/0x7f0 [ 1281.557332][ T8494] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1281.562657][ T8494] ? netlink_unicast+0x7f0/0x7f0 [ 1281.567645][ T8494] sock_sendmsg+0xde/0x190 [ 1281.572108][ T8494] ____sys_sendmsg+0x71c/0x900 [ 1281.576914][ T8494] ? copy_msghdr_from_user+0xfc/0x150 [ 1281.582334][ T8494] ? kernel_sendmsg+0x50/0x50 [ 1281.587047][ T8494] ? find_held_lock+0x2d/0x110 [ 1281.591850][ T8494] ___sys_sendmsg+0x110/0x1b0 [ 1281.596564][ T8494] ? do_recvmmsg+0x6e0/0x6e0 [ 1281.601201][ T8494] ? __fget_files+0x248/0x480 [ 1281.605922][ T8494] ? lock_downgrade+0x690/0x690 [ 1281.610793][ T8494] ? find_held_lock+0x2d/0x110 [ 1281.615609][ T8494] ? ksys_write+0x210/0x250 [ 1281.620149][ T8494] ? __fget_files+0x26a/0x480 [ 1281.624879][ T8494] ? __fget_light+0xe5/0x270 [ 1281.629549][ T8494] __sys_sendmsg+0xf7/0x1c0 [ 1281.634091][ T8494] ? __sys_sendmsg_sock+0x40/0x40 [ 1281.639160][ T8494] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1281.645076][ T8494] ? lockdep_hardirqs_on+0x7d/0x100 [ 1281.650294][ T8494] do_syscall_64+0x39/0xb0 [ 1281.654739][ T8494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1281.660745][ T8494] RIP: 0033:0x7f017dc8c0f9 [ 1281.665174][ T8494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1281.684792][ T8494] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.693217][ T8494] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1281.701198][ T8494] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 06:13:21 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x1f, 0x3, [{0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1281.709437][ T8494] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.717428][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.725412][ T8494] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1281.733406][ T8494] 06:13:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 6) 06:13:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (fail_nth: 4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) [ 1281.969544][ T8508] FAULT_INJECTION: forcing a failure. [ 1281.969544][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.015163][ T8508] CPU: 0 PID: 8508 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1282.025573][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1282.035694][ T8508] Call Trace: [ 1282.039001][ T8508] [ 1282.041960][ T8508] dump_stack_lvl+0x136/0x150 [ 1282.046688][ T8508] should_fail_ex+0x4a3/0x5b0 [ 1282.051412][ T8508] ? lock_release+0x670/0x670 [ 1282.056133][ T8508] should_failslab+0x9/0x20 [ 1282.060687][ T8508] kmem_cache_alloc+0x63/0x3b0 [ 1282.065513][ T8508] skb_clone+0x172/0x3c0 [ 1282.069815][ T8508] netlink_deliver_tap+0xb31/0xcf0 [ 1282.074993][ T8508] netlink_unicast+0x5f9/0x7f0 [ 1282.079816][ T8508] ? netlink_attachskb+0x890/0x890 [ 1282.084975][ T8508] ? __virt_addr_valid+0x61/0x2e0 [ 1282.090053][ T8508] ? __phys_addr_symbol+0x30/0x70 [ 1282.095129][ T8508] ? __check_object_size+0x333/0x6e0 [ 1282.100465][ T8508] netlink_sendmsg+0x925/0xe30 [ 1282.105285][ T8508] ? netlink_unicast+0x7f0/0x7f0 [ 1282.110265][ T8508] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1282.115598][ T8508] ? netlink_unicast+0x7f0/0x7f0 [ 1282.120588][ T8508] sock_sendmsg+0xde/0x190 [ 1282.125058][ T8508] ____sys_sendmsg+0x71c/0x900 [ 1282.129873][ T8508] ? copy_msghdr_from_user+0xfc/0x150 [ 1282.135311][ T8508] ? kernel_sendmsg+0x50/0x50 [ 1282.140046][ T8508] ? find_held_lock+0x2d/0x110 [ 1282.144875][ T8508] ___sys_sendmsg+0x110/0x1b0 [ 1282.149619][ T8508] ? do_recvmmsg+0x6e0/0x6e0 [ 1282.154275][ T8508] ? __fget_files+0x248/0x480 [ 1282.159010][ T8508] ? lock_downgrade+0x690/0x690 [ 1282.163905][ T8508] ? find_held_lock+0x2d/0x110 [ 1282.168734][ T8508] ? ksys_write+0x210/0x250 [ 1282.173280][ T8508] ? __fget_files+0x26a/0x480 [ 1282.178019][ T8508] ? __fget_light+0xe5/0x270 [ 1282.182666][ T8508] __sys_sendmsg+0xf7/0x1c0 [ 1282.187226][ T8508] ? __sys_sendmsg_sock+0x40/0x40 [ 1282.192328][ T8508] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1282.198272][ T8508] ? lockdep_hardirqs_on+0x7d/0x100 [ 1282.203526][ T8508] do_syscall_64+0x39/0xb0 [ 1282.207981][ T8508] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1282.213941][ T8508] RIP: 0033:0x7f017dc8c0f9 [ 1282.218392][ T8508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1282.238042][ T8508] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.246759][ T8508] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1282.254770][ T8508] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1282.262779][ T8508] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.270787][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.278791][ T8508] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1282.286997][ T8508] [ 1282.306252][ T8514] FAULT_INJECTION: forcing a failure. 06:13:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 7) 06:13:22 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0x2}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1282.306252][ T8514] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.323123][ T8514] CPU: 0 PID: 8514 Comm: syz-executor.3 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1282.333513][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1282.343694][ T8514] Call Trace: [ 1282.347005][ T8514] [ 1282.349963][ T8514] dump_stack_lvl+0x136/0x150 [ 1282.354693][ T8514] should_fail_ex+0x4a3/0x5b0 [ 1282.359431][ T8514] should_failslab+0x9/0x20 [ 1282.363978][ T8514] kmem_cache_alloc+0x63/0x3b0 [ 1282.368804][ T8514] jbd2__journal_start+0x190/0x850 [ 1282.374044][ T8514] __ext4_journal_start_sb+0x411/0x5d0 [ 1282.379604][ T8514] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xb80 [ 1282.385820][ T8514] ext4_alloc_file_blocks.isra.0+0x2a2/0xb80 [ 1282.391869][ T8514] ? mode_strip_sgid+0x1c0/0x1c0 [ 1282.396868][ T8514] ? ext4_ext_correct_indexes+0x440/0x440 [ 1282.402657][ T8514] ? iunique+0x370/0x370 [ 1282.406957][ T8514] ? up_write+0x1b4/0x520 [ 1282.411353][ T8514] ext4_fallocate+0x4b4/0x3d90 [ 1282.416253][ T8514] ? ext4_ext_truncate+0x400/0x400 [ 1282.421433][ T8514] ? ext4_ext_truncate+0x400/0x400 [ 1282.425203][ T8516] FAULT_INJECTION: forcing a failure. [ 1282.425203][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.426665][ T8514] vfs_fallocate+0x48b/0xe40 [ 1282.443905][ T8514] ioctl_preallocate+0x18e/0x200 [ 1282.448906][ T8514] ? fiemap_prep+0x220/0x220 [ 1282.453568][ T8514] do_vfs_ioctl+0x12e9/0x1670 [ 1282.458307][ T8514] ? vfs_fileattr_set+0xc40/0xc40 06:13:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 1) [ 1282.463395][ T8514] ? wait_for_completion_io_timeout+0x20/0x20 [ 1282.469526][ T8514] ? __fget_files+0x26a/0x480 [ 1282.474261][ T8514] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1282.479254][ T8514] __x64_sys_ioctl+0x10c/0x210 [ 1282.484242][ T8514] do_syscall_64+0x39/0xb0 [ 1282.488690][ T8514] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1282.494638][ T8514] RIP: 0033:0x7fde04e8c0f9 [ 1282.499085][ T8514] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1282.518731][ T8514] RSP: 002b:00007fde039dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.527174][ T8514] RAX: ffffffffffffffda RBX: 00007fde04fac050 RCX: 00007fde04e8c0f9 [ 1282.535194][ T8514] RDX: 00000000200007c0 RSI: 0000000040305828 RDI: 0000000000000008 [ 1282.543204][ T8514] RBP: 00007fde039dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.551243][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.559235][ T8514] R13: 00007ffd5974195f R14: 00007fde039dd300 R15: 0000000000022000 [ 1282.567243][ T8514] [ 1282.570286][ T8516] CPU: 1 PID: 8516 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1282.580652][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1282.590722][ T8516] Call Trace: [ 1282.594019][ T8516] [ 1282.596957][ T8516] dump_stack_lvl+0x136/0x150 [ 1282.601660][ T8516] should_fail_ex+0x4a3/0x5b0 [ 1282.606368][ T8516] should_failslab+0x9/0x20 [ 1282.610902][ T8516] __kmem_cache_alloc_node+0x5b/0x320 [ 1282.616300][ T8516] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1282.623632][ T8516] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1282.630948][ T8516] __kmalloc+0x4e/0x190 [ 1282.635123][ T8516] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1282.642260][ T8516] ? genl_cmd_full_to_split+0x371/0x650 [ 1282.647840][ T8516] genl_family_rcv_msg_doit.isra.0+0x9f/0x2d0 [ 1282.653936][ T8516] ? genl_start+0x660/0x660 [ 1282.658464][ T8516] ? apparmor_capable+0x1dc/0x460 [ 1282.663512][ T8516] ? bpf_lsm_capable+0x9/0x10 [ 1282.668213][ T8516] ? security_capable+0x93/0xc0 [ 1282.673099][ T8516] ? ns_capable+0xe0/0x110 [ 1282.677542][ T8516] genl_rcv_msg+0x4ff/0x7e0 [ 1282.682076][ T8516] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1282.688434][ T8516] ? validate_beacon_tx_rate+0x790/0x790 [ 1282.694133][ T8516] ? cfg80211_probe_status+0x710/0x710 [ 1282.699638][ T8516] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0 [ 1282.705472][ T8516] netlink_rcv_skb+0x165/0x440 [ 1282.710280][ T8516] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1282.716639][ T8516] ? netlink_ack+0x1360/0x1360 [ 1282.721455][ T8516] genl_rcv+0x28/0x40 [ 1282.725464][ T8516] netlink_unicast+0x547/0x7f0 [ 1282.730258][ T8516] ? netlink_attachskb+0x890/0x890 [ 1282.735403][ T8516] ? __virt_addr_valid+0x61/0x2e0 [ 1282.740455][ T8516] ? __phys_addr_symbol+0x30/0x70 [ 1282.745506][ T8516] ? __check_object_size+0x333/0x6e0 [ 1282.750816][ T8516] netlink_sendmsg+0x925/0xe30 [ 1282.755613][ T8516] ? netlink_unicast+0x7f0/0x7f0 [ 1282.760593][ T8516] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1282.765901][ T8516] ? netlink_unicast+0x7f0/0x7f0 [ 1282.770862][ T8516] sock_sendmsg+0xde/0x190 [ 1282.775338][ T8516] ____sys_sendmsg+0x71c/0x900 [ 1282.780148][ T8516] ? copy_msghdr_from_user+0xfc/0x150 [ 1282.785571][ T8516] ? kernel_sendmsg+0x50/0x50 [ 1282.790465][ T8516] ? find_held_lock+0x2d/0x110 [ 1282.795269][ T8516] ___sys_sendmsg+0x110/0x1b0 [ 1282.799986][ T8516] ? do_recvmmsg+0x6e0/0x6e0 [ 1282.804609][ T8516] ? __fget_files+0x248/0x480 [ 1282.809319][ T8516] ? lock_downgrade+0x690/0x690 [ 1282.814189][ T8516] ? find_held_lock+0x2d/0x110 [ 1282.819000][ T8516] ? ksys_write+0x210/0x250 [ 1282.823521][ T8516] ? __fget_files+0x26a/0x480 [ 1282.828232][ T8516] ? __fget_light+0xe5/0x270 [ 1282.832858][ T8516] __sys_sendmsg+0xf7/0x1c0 [ 1282.837392][ T8516] ? __sys_sendmsg_sock+0x40/0x40 [ 1282.842463][ T8516] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1282.848385][ T8516] ? lockdep_hardirqs_on+0x7d/0x100 [ 1282.853610][ T8516] do_syscall_64+0x39/0xb0 [ 1282.858042][ T8516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1282.863975][ T8516] RIP: 0033:0x7f017dc8c0f9 [ 1282.868406][ T8516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1282.888046][ T8516] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.896474][ T8516] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1282.904459][ T8516] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 06:13:22 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (fail_nth: 1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1282.912439][ T8516] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.920433][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.928414][ T8516] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1282.936410][ T8516] 06:13:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) (fail_nth: 1) [ 1282.981384][ T8521] FAULT_INJECTION: forcing a failure. [ 1282.981384][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.014504][ T8521] CPU: 0 PID: 8521 Comm: syz-executor.4 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1283.024939][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1283.035025][ T8521] Call Trace: [ 1283.038332][ T8521] [ 1283.041298][ T8521] dump_stack_lvl+0x136/0x150 [ 1283.046026][ T8521] should_fail_ex+0x4a3/0x5b0 [ 1283.050762][ T8521] _copy_from_user+0x2e/0x180 [ 1283.053257][ T8524] FAULT_INJECTION: forcing a failure. [ 1283.053257][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.055469][ T8521] copy_msghdr_from_user+0x89/0x150 [ 1283.055525][ T8521] ? __copy_msghdr+0x4b0/0x4b0 [ 1283.078542][ T8521] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1283.084576][ T8521] ? find_held_lock+0x2d/0x110 [ 1283.089416][ T8521] ___sys_sendmsg+0xdd/0x1b0 [ 1283.094069][ T8521] ? do_recvmmsg+0x6e0/0x6e0 [ 1283.098726][ T8521] ? __fget_files+0x248/0x480 [ 1283.103486][ T8521] ? lock_downgrade+0x690/0x690 [ 1283.108376][ T8521] ? find_held_lock+0x2d/0x110 [ 1283.113215][ T8521] ? ksys_write+0x210/0x250 [ 1283.117766][ T8521] ? __fget_files+0x26a/0x480 [ 1283.122510][ T8521] ? __fget_light+0xe5/0x270 [ 1283.127158][ T8521] __sys_sendmsg+0xf7/0x1c0 [ 1283.131715][ T8521] ? __sys_sendmsg_sock+0x40/0x40 [ 1283.136820][ T8521] ? fput+0x2f/0x1a0 [ 1283.140760][ T8521] ? ksys_write+0x1a3/0x250 [ 1283.145305][ T8521] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1283.148037][ T8527] FAULT_INJECTION: forcing a failure. [ 1283.148037][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.151222][ T8521] ? lockdep_hardirqs_on+0x7d/0x100 [ 1283.151268][ T8521] do_syscall_64+0x39/0xb0 [ 1283.173756][ T8521] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1283.179710][ T8521] RIP: 0033:0x7f20c628c0f9 [ 1283.184154][ T8521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1283.203811][ T8521] RSP: 002b:00007f20c6f9b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.212264][ T8521] RAX: ffffffffffffffda RBX: 00007f20c63abf80 RCX: 00007f20c628c0f9 [ 1283.220268][ T8521] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1283.228274][ T8521] RBP: 00007f20c6f9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.236281][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.244289][ T8521] R13: 00007ffea826432f R14: 00007f20c6f9b300 R15: 0000000000022000 [ 1283.252314][ T8521] [ 1283.260911][ T8527] CPU: 1 PID: 8527 Comm: syz-executor.1 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1283.271300][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1283.281387][ T8527] Call Trace: [ 1283.284670][ T8527] [ 1283.287609][ T8527] dump_stack_lvl+0x136/0x150 [ 1283.292311][ T8527] should_fail_ex+0x4a3/0x5b0 [ 1283.297017][ T8527] should_failslab+0x9/0x20 [ 1283.301539][ T8527] __kmem_cache_alloc_node+0x5b/0x320 [ 1283.306940][ T8527] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1283.312681][ T8527] ? tomoyo_realpath_from_path+0xc3/0x600 [ 1283.318429][ T8527] __kmalloc+0x4e/0x190 [ 1283.322600][ T8527] ? rcu_is_watching+0x12/0xb0 [ 1283.327390][ T8527] tomoyo_realpath_from_path+0xc3/0x600 [ 1283.332956][ T8527] ? tomoyo_profile+0x46/0x60 [ 1283.337665][ T8527] tomoyo_path_number_perm+0x217/0x570 [ 1283.343168][ T8527] ? tomoyo_path_number_perm+0x1c1/0x570 [ 1283.348840][ T8527] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1283.354684][ T8527] ? find_held_lock+0x2d/0x110 [ 1283.359506][ T8527] ? lock_downgrade+0x690/0x690 [ 1283.364393][ T8527] ? wait_for_completion_io_timeout+0x20/0x20 [ 1283.370496][ T8527] ? __fget_files+0x26a/0x480 [ 1283.375218][ T8527] security_file_ioctl+0x54/0xb0 [ 1283.380203][ T8527] __x64_sys_ioctl+0xb7/0x210 [ 1283.384914][ T8527] do_syscall_64+0x39/0xb0 [ 1283.389346][ T8527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1283.395268][ T8527] RIP: 0033:0x7f40d088c0f9 [ 1283.399698][ T8527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1283.419322][ T8527] RSP: 002b:00007f40d1553168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.427765][ T8527] RAX: ffffffffffffffda RBX: 00007f40d09abf80 RCX: 00007f40d088c0f9 [ 1283.435745][ T8527] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1283.443726][ T8527] RBP: 00007f40d15531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.451707][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.459685][ T8527] R13: 00007ffd8ccda8af R14: 00007f40d1553300 R15: 0000000000022000 [ 1283.467684][ T8527] [ 1283.486168][ T8524] CPU: 1 PID: 8524 Comm: syz-executor.5 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1283.496575][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1283.506658][ T8524] Call Trace: [ 1283.509969][ T8524] [ 1283.512929][ T8524] dump_stack_lvl+0x136/0x150 [ 1283.517651][ T8524] should_fail_ex+0x4a3/0x5b0 [ 1283.518525][ T8527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1283.522355][ T8524] _copy_from_user+0x2e/0x180 [ 1283.522400][ T8524] copy_msghdr_from_user+0x89/0x150 [ 1283.538982][ T8524] ? __copy_msghdr+0x4b0/0x4b0 [ 1283.543792][ T8524] ? find_held_lock+0x2d/0x110 [ 1283.548609][ T8524] ___sys_recvmsg+0xbc/0x180 [ 1283.553234][ T8524] ? copy_msghdr_from_user+0x150/0x150 [ 1283.558833][ T8524] ? ksys_write+0x210/0x250 [ 1283.563354][ T8524] ? __fget_files+0x26a/0x480 [ 1283.568066][ T8524] ? __fget_light+0xe5/0x270 [ 1283.572949][ T8524] __sys_recvmsg+0xf4/0x1c0 [ 1283.577464][ T8524] ? __sys_recvmsg_sock+0x50/0x50 [ 1283.582506][ T8524] ? fput+0x2f/0x1a0 [ 1283.586416][ T8524] ? ksys_write+0x1a3/0x250 [ 1283.590933][ T8524] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1283.596941][ T8524] ? lockdep_hardirqs_on+0x7d/0x100 [ 1283.602165][ T8524] do_syscall_64+0x39/0xb0 [ 1283.606612][ T8524] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1283.612550][ T8524] RIP: 0033:0x7ff5aae8c0f9 [ 1283.616995][ T8524] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1283.636627][ T8524] RSP: 002b:00007ff5abcc4168 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1283.645057][ T8524] RAX: ffffffffffffffda RBX: 00007ff5aafabf80 RCX: 00007ff5aae8c0f9 [ 1283.653039][ T8524] RDX: 0000000000001f00 RSI: 0000000020000500 RDI: 0000000000000003 [ 1283.661019][ T8524] RBP: 00007ff5abcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.669018][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.676999][ T8524] R13: 00007ffe5ca673bf R14: 00007ff5abcc4300 R15: 0000000000022000 06:13:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 8) 06:13:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 2) 06:13:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) (fail_nth: 2) [ 1283.685006][ T8524] [ 1283.756289][ T8535] FAULT_INJECTION: forcing a failure. [ 1283.756289][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.775334][ T8535] CPU: 1 PID: 8535 Comm: syz-executor.4 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1283.785736][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1283.795827][ T8535] Call Trace: [ 1283.799137][ T8535] [ 1283.802101][ T8535] dump_stack_lvl+0x136/0x150 [ 1283.806828][ T8535] should_fail_ex+0x4a3/0x5b0 [ 1283.811564][ T8535] _copy_from_user+0x2e/0x180 [ 1283.816292][ T8535] iovec_from_user+0x14d/0x3a0 [ 1283.821109][ T8535] __import_iovec+0x69/0x610 [ 1283.825749][ T8535] import_iovec+0x110/0x160 [ 1283.830296][ T8535] copy_msghdr_from_user+0xed/0x150 [ 1283.835536][ T8535] ? __copy_msghdr+0x4b0/0x4b0 [ 1283.840361][ T8535] ? find_held_lock+0x2d/0x110 [ 1283.845183][ T8535] ___sys_sendmsg+0xdd/0x1b0 [ 1283.849817][ T8535] ? do_recvmmsg+0x6e0/0x6e0 [ 1283.854447][ T8535] ? __fget_files+0x248/0x480 [ 1283.859173][ T8535] ? lock_downgrade+0x690/0x690 [ 1283.864071][ T8535] ? find_held_lock+0x2d/0x110 [ 1283.868886][ T8535] ? ksys_write+0x210/0x250 [ 1283.873416][ T8535] ? __fget_files+0x26a/0x480 [ 1283.878132][ T8535] ? __fget_light+0xe5/0x270 [ 1283.882765][ T8535] __sys_sendmsg+0xf7/0x1c0 [ 1283.887301][ T8535] ? __sys_sendmsg_sock+0x40/0x40 [ 1283.892366][ T8535] ? fput+0x2f/0x1a0 [ 1283.896293][ T8535] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1283.902213][ T8535] ? lockdep_hardirqs_on+0x7d/0x100 [ 1283.907609][ T8535] do_syscall_64+0x39/0xb0 [ 1283.912043][ T8535] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1283.917966][ T8535] RIP: 0033:0x7f20c628c0f9 [ 1283.922397][ T8535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1283.942118][ T8535] RSP: 002b:00007f20c6f9b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:13:23 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0x2}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (fail_nth: 5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) [ 1283.950563][ T8535] RAX: ffffffffffffffda RBX: 00007f20c63abf80 RCX: 00007f20c628c0f9 [ 1283.958549][ T8535] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1283.966530][ T8535] RBP: 00007f20c6f9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.974510][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.982494][ T8535] R13: 00007ffea826432f R14: 00007f20c6f9b300 R15: 0000000000022000 [ 1283.990496][ T8535] 06:13:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) (fail_nth: 3) 06:13:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 3) [ 1284.150486][ T8549] FAULT_INJECTION: forcing a failure. [ 1284.150486][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.153993][ T8546] FAULT_INJECTION: forcing a failure. [ 1284.153993][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.169989][ T8548] FAULT_INJECTION: forcing a failure. [ 1284.169989][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.181323][ T8543] FAULT_INJECTION: forcing a failure. 06:13:24 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1284.181323][ T8543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.216229][ T8549] CPU: 1 PID: 8549 Comm: syz-executor.3 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1284.226631][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1284.236720][ T8549] Call Trace: [ 1284.240019][ T8549] [ 1284.242973][ T8549] dump_stack_lvl+0x136/0x150 [ 1284.247694][ T8549] should_fail_ex+0x4a3/0x5b0 [ 1284.252417][ T8549] should_failslab+0x9/0x20 [ 1284.256958][ T8549] __kmem_cache_alloc_node+0x5b/0x320 [ 1284.262376][ T8549] ? ext4_find_extent+0xa3c/0xd20 [ 1284.267451][ T8549] ? ext4_find_extent+0xa3c/0xd20 [ 1284.272520][ T8549] __kmalloc+0x4e/0x190 [ 1284.276708][ T8549] ext4_find_extent+0xa3c/0xd20 [ 1284.281606][ T8549] ? __lock_acquire+0x18bc/0x5d40 [ 1284.286683][ T8549] ext4_ext_map_blocks+0x1e1/0x5be0 [ 1284.291943][ T8549] ? __lock_acquire+0x18bc/0x5d40 [ 1284.297016][ T8549] ? ext4_ext_release+0x10/0x10 [ 1284.301915][ T8549] ? find_held_lock+0x2d/0x110 [ 1284.306742][ T8549] ? __down_read_common+0x884/0xf30 [ 1284.311994][ T8549] ? _down_write_nest_lock+0x200/0x200 [ 1284.317503][ T8549] ? lock_release+0x670/0x670 [ 1284.322213][ T8549] ? lockdep_hardirqs_on+0x7d/0x100 [ 1284.327471][ T8549] ext4_map_blocks+0xa7f/0x18d0 [ 1284.332373][ T8549] ? ext4_issue_zeroout+0x200/0x200 [ 1284.337611][ T8549] ? rcu_is_watching+0x12/0xb0 [ 1284.342417][ T8549] ? jbd2__journal_start+0xf7/0x850 [ 1284.347666][ T8549] ? __ext4_journal_start_sb+0x411/0x5d0 [ 1284.353342][ T8549] ? __ext4_journal_start_sb+0x1fc/0x5d0 [ 1284.359017][ T8549] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xb80 [ 1284.365229][ T8549] ext4_alloc_file_blocks.isra.0+0x2df/0xb80 [ 1284.371258][ T8549] ? mode_strip_sgid+0x1c0/0x1c0 [ 1284.376255][ T8549] ? ext4_ext_correct_indexes+0x440/0x440 [ 1284.382026][ T8549] ? iunique+0x370/0x370 [ 1284.386305][ T8549] ? up_write+0x1b4/0x520 [ 1284.390683][ T8549] ext4_fallocate+0x4b4/0x3d90 [ 1284.395516][ T8549] ? ext4_ext_truncate+0x400/0x400 [ 1284.400675][ T8549] ? ext4_ext_truncate+0x400/0x400 [ 1284.405916][ T8549] vfs_fallocate+0x48b/0xe40 [ 1284.410567][ T8549] ioctl_preallocate+0x18e/0x200 [ 1284.415552][ T8549] ? fiemap_prep+0x220/0x220 [ 1284.420202][ T8549] do_vfs_ioctl+0x12e9/0x1670 [ 1284.424929][ T8549] ? vfs_fileattr_set+0xc40/0xc40 [ 1284.430025][ T8549] ? wait_for_completion_io_timeout+0x20/0x20 [ 1284.436155][ T8549] ? __fget_files+0x26a/0x480 [ 1284.440885][ T8549] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1284.445882][ T8549] __x64_sys_ioctl+0x10c/0x210 [ 1284.451922][ T8549] do_syscall_64+0x39/0xb0 [ 1284.456376][ T8549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1284.463719][ T8549] RIP: 0033:0x7fde04e8c0f9 [ 1284.468163][ T8549] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1284.487805][ T8549] RSP: 002b:00007fde039dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.496258][ T8549] RAX: ffffffffffffffda RBX: 00007fde04fac050 RCX: 00007fde04e8c0f9 [ 1284.504264][ T8549] RDX: 00000000200007c0 RSI: 0000000040305828 RDI: 0000000000000008 [ 1284.512266][ T8549] RBP: 00007fde039dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.520261][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.528261][ T8549] R13: 00007ffd5974195f R14: 00007fde039dd300 R15: 0000000000022000 [ 1284.536282][ T8549] [ 1284.539318][ T8546] CPU: 0 PID: 8546 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1284.549692][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1284.559783][ T8546] Call Trace: [ 1284.563089][ T8546] [ 1284.566054][ T8546] dump_stack_lvl+0x136/0x150 [ 1284.570778][ T8546] should_fail_ex+0x4a3/0x5b0 [ 1284.575490][ T8546] should_failslab+0x9/0x20 [ 1284.580013][ T8546] kmem_cache_alloc_node+0x5c/0x3e0 [ 1284.586890][ T8546] ? lock_downgrade+0x690/0x690 [ 1284.591762][ T8546] __alloc_skb+0x288/0x330 [ 1284.596204][ T8546] ? __napi_build_skb+0x50/0x50 [ 1284.601081][ T8546] ? nl80211_tx_control_port+0x3a4/0xcd0 [ 1284.606741][ T8546] ? lock_downgrade+0x690/0x690 [ 1284.611608][ T8546] ? rcu_is_watching+0x12/0xb0 [ 1284.616399][ T8546] ? __mutex_lock+0x231/0x1350 [ 1284.621191][ T8546] __netdev_alloc_skb+0x74/0x410 [ 1284.626163][ T8546] ieee80211_tx_control_port+0x1ac/0xd80 [ 1284.631920][ T8546] ? ieee80211_tx_skb_tid+0x4b0/0x4b0 [ 1284.637307][ T8546] ? __rtnl_unlock+0x68/0xe0 [ 1284.641958][ T8546] ? netdev_run_todo+0x775/0x1100 [ 1284.647014][ T8546] nl80211_tx_control_port+0x669/0xcd0 [ 1284.652503][ T8546] ? cfg80211_probe_status+0x710/0x710 [ 1284.657995][ T8546] ? nl80211_pre_doit+0x120/0xab0 [ 1284.663040][ T8546] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 1284.669225][ T8546] ? genl_start+0x660/0x660 [ 1284.673766][ T8546] ? ns_capable+0xe0/0x110 [ 1284.678213][ T8546] genl_rcv_msg+0x4ff/0x7e0 [ 1284.682749][ T8546] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1284.689109][ T8546] ? validate_beacon_tx_rate+0x790/0x790 [ 1284.694759][ T8546] ? cfg80211_probe_status+0x710/0x710 [ 1284.700240][ T8546] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0 [ 1284.706073][ T8546] netlink_rcv_skb+0x165/0x440 [ 1284.710866][ T8546] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1284.717228][ T8546] ? netlink_ack+0x1360/0x1360 [ 1284.722046][ T8546] genl_rcv+0x28/0x40 [ 1284.726052][ T8546] netlink_unicast+0x547/0x7f0 [ 1284.730843][ T8546] ? netlink_attachskb+0x890/0x890 [ 1284.735973][ T8546] ? __virt_addr_valid+0x61/0x2e0 [ 1284.741026][ T8546] ? __phys_addr_symbol+0x30/0x70 [ 1284.746076][ T8546] ? __check_object_size+0x333/0x6e0 [ 1284.751384][ T8546] netlink_sendmsg+0x925/0xe30 [ 1284.756177][ T8546] ? netlink_unicast+0x7f0/0x7f0 [ 1284.761165][ T8546] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1284.766489][ T8546] ? netlink_unicast+0x7f0/0x7f0 [ 1284.771486][ T8546] sock_sendmsg+0xde/0x190 [ 1284.775943][ T8546] ____sys_sendmsg+0x71c/0x900 [ 1284.780736][ T8546] ? copy_msghdr_from_user+0xfc/0x150 [ 1284.786154][ T8546] ? kernel_sendmsg+0x50/0x50 [ 1284.790875][ T8546] ? find_held_lock+0x2d/0x110 [ 1284.795676][ T8546] ___sys_sendmsg+0x110/0x1b0 [ 1284.800388][ T8546] ? do_recvmmsg+0x6e0/0x6e0 [ 1284.805008][ T8546] ? __fget_files+0x248/0x480 [ 1284.809712][ T8546] ? lock_downgrade+0x690/0x690 [ 1284.814579][ T8546] ? find_held_lock+0x2d/0x110 [ 1284.819378][ T8546] ? ksys_write+0x210/0x250 [ 1284.823916][ T8546] ? __fget_files+0x26a/0x480 [ 1284.828651][ T8546] ? __fget_light+0xe5/0x270 [ 1284.833295][ T8546] __sys_sendmsg+0xf7/0x1c0 [ 1284.837837][ T8546] ? __sys_sendmsg_sock+0x40/0x40 [ 1284.842911][ T8546] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1284.848831][ T8546] ? lockdep_hardirqs_on+0x7d/0x100 [ 1284.854054][ T8546] do_syscall_64+0x39/0xb0 [ 1284.858487][ T8546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1284.864406][ T8546] RIP: 0033:0x7f017dc8c0f9 [ 1284.868836][ T8546] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1284.888456][ T8546] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1284.896969][ T8546] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1284.904951][ T8546] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1284.912929][ T8546] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.920910][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.928888][ T8546] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1284.936887][ T8546] [ 1284.962383][ T8543] CPU: 1 PID: 8543 Comm: syz-executor.1 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1284.972782][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1284.982859][ T8543] Call Trace: [ 1284.986159][ T8543] [ 1284.989118][ T8543] dump_stack_lvl+0x136/0x150 [ 1284.993828][ T8543] should_fail_ex+0x4a3/0x5b0 [ 1284.998536][ T8543] _copy_from_user+0x2e/0x180 [ 1285.003237][ T8543] __ext4_ioctl+0x324b/0x4b00 [ 1285.007940][ T8543] ? tomoyo_path_number_perm+0x166/0x570 [ 1285.013619][ T8543] ? ext4_reset_inode_seed+0x450/0x450 [ 1285.019142][ T8543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1285.025146][ T8543] ? do_vfs_ioctl+0x132/0x1670 [ 1285.029964][ T8543] ? vfs_fileattr_set+0xc40/0xc40 [ 1285.035046][ T8543] ? wait_for_completion_io_timeout+0x20/0x20 [ 1285.041154][ T8543] ? __fget_files+0x26a/0x480 [ 1285.045875][ T8543] ? ext4_fileattr_set+0x1a50/0x1a50 [ 1285.051193][ T8543] __x64_sys_ioctl+0x197/0x210 [ 1285.055997][ T8543] do_syscall_64+0x39/0xb0 [ 1285.060436][ T8543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1285.066359][ T8543] RIP: 0033:0x7f40d088c0f9 [ 1285.070795][ T8543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1285.090436][ T8543] RSP: 002b:00007f40d1553168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.098876][ T8543] RAX: ffffffffffffffda RBX: 00007f40d09abf80 RCX: 00007f40d088c0f9 [ 1285.106862][ T8543] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1285.114865][ T8543] RBP: 00007f40d15531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.122868][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.130876][ T8543] R13: 00007ffd8ccda8af R14: 00007f40d1553300 R15: 0000000000022000 [ 1285.138883][ T8543] [ 1285.141912][ T8548] CPU: 0 PID: 8548 Comm: syz-executor.4 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1285.152272][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1285.162360][ T8548] Call Trace: [ 1285.165664][ T8548] [ 1285.168610][ T8548] dump_stack_lvl+0x136/0x150 [ 1285.173332][ T8548] should_fail_ex+0x4a3/0x5b0 [ 1285.178061][ T8548] should_failslab+0x9/0x20 [ 1285.182601][ T8548] kmem_cache_alloc_node+0x5c/0x3e0 [ 1285.187859][ T8548] __alloc_skb+0x288/0x330 [ 1285.192332][ T8548] ? __napi_build_skb+0x50/0x50 [ 1285.197243][ T8548] ? __netlink_dump_start+0x910/0x910 [ 1285.202671][ T8548] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 1285.208873][ T8548] netlink_sendmsg+0x9b0/0xe30 [ 1285.213698][ T8548] ? netlink_unicast+0x7f0/0x7f0 [ 1285.218698][ T8548] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1285.224028][ T8548] ? netlink_unicast+0x7f0/0x7f0 [ 1285.229010][ T8548] sock_sendmsg+0xde/0x190 [ 1285.233509][ T8548] ____sys_sendmsg+0x71c/0x900 [ 1285.238322][ T8548] ? copy_msghdr_from_user+0xfc/0x150 [ 1285.243737][ T8548] ? kernel_sendmsg+0x50/0x50 [ 1285.248443][ T8548] ? find_held_lock+0x2d/0x110 [ 1285.253247][ T8548] ___sys_sendmsg+0x110/0x1b0 [ 1285.257979][ T8548] ? do_recvmmsg+0x6e0/0x6e0 [ 1285.262608][ T8548] ? __fget_files+0x248/0x480 [ 1285.267316][ T8548] ? lock_downgrade+0x690/0x690 [ 1285.272179][ T8548] ? find_held_lock+0x2d/0x110 [ 1285.276976][ T8548] ? ksys_write+0x210/0x250 [ 1285.281496][ T8548] ? __fget_files+0x26a/0x480 [ 1285.286203][ T8548] ? __fget_light+0xe5/0x270 [ 1285.290827][ T8548] __sys_sendmsg+0xf7/0x1c0 [ 1285.295364][ T8548] ? __sys_sendmsg_sock+0x40/0x40 [ 1285.300435][ T8548] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1285.306354][ T8548] ? lockdep_hardirqs_on+0x7d/0x100 [ 1285.311579][ T8548] do_syscall_64+0x39/0xb0 [ 1285.316009][ T8548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1285.321926][ T8548] RIP: 0033:0x7f20c628c0f9 [ 1285.326351][ T8548] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1285.345970][ T8548] RSP: 002b:00007f20c6f9b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.354396][ T8548] RAX: ffffffffffffffda RBX: 00007f20c63abf80 RCX: 00007f20c628c0f9 06:13:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 9) 06:13:25 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x21, 0x3, [{0x1, 0x2}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1285.362376][ T8548] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1285.370355][ T8548] RBP: 00007f20c6f9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.378347][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.386328][ T8548] R13: 00007ffea826432f R14: 00007f20c6f9b300 R15: 0000000000022000 [ 1285.394323][ T8548] 06:13:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:25 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:13:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 10) 06:13:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:25 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 1285.633258][ T8574] FAULT_INJECTION: forcing a failure. [ 1285.633258][ T8574] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.646531][ T8574] CPU: 1 PID: 8574 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1285.656912][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1285.667001][ T8574] Call Trace: [ 1285.670305][ T8574] [ 1285.673267][ T8574] dump_stack_lvl+0x136/0x150 [ 1285.677997][ T8574] should_fail_ex+0x4a3/0x5b0 [ 1285.682730][ T8574] should_failslab+0x9/0x20 [ 1285.687279][ T8574] kmem_cache_alloc+0x63/0x3b0 [ 1285.692103][ T8574] skb_clone+0x172/0x3c0 [ 1285.696411][ T8574] ieee80211_store_ack_skb+0x17c/0x1e0 [ 1285.702000][ T8574] ieee80211_build_hdr+0x181b/0x29d0 [ 1285.707349][ T8574] ? ieee80211_tx_dequeue+0x1d50/0x1d50 [ 1285.712948][ T8574] ? lock_release+0x670/0x670 [ 1285.717674][ T8574] ? ieee80211_downgrade_queue+0x3da/0x580 [ 1285.723568][ T8574] __ieee80211_subif_start_xmit+0x8d6/0x1180 [ 1285.729615][ T8574] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 1285.735481][ T8574] ieee80211_tx_control_port+0x5e3/0xd80 [ 1285.741173][ T8574] ? ieee80211_tx_skb_tid+0x4b0/0x4b0 [ 1285.746598][ T8574] ? __rtnl_unlock+0x68/0xe0 [ 1285.751246][ T8574] ? netdev_run_todo+0x775/0x1100 [ 1285.756334][ T8574] nl80211_tx_control_port+0x669/0xcd0 [ 1285.761908][ T8574] ? cfg80211_probe_status+0x710/0x710 [ 1285.767428][ T8574] ? nl80211_pre_doit+0x120/0xab0 [ 1285.772518][ T8574] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 1285.778741][ T8574] ? genl_start+0x660/0x660 [ 1285.783448][ T8574] ? ns_capable+0xe0/0x110 [ 1285.787932][ T8574] genl_rcv_msg+0x4ff/0x7e0 [ 1285.792514][ T8574] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1285.798907][ T8574] ? validate_beacon_tx_rate+0x790/0x790 [ 1285.804591][ T8574] ? cfg80211_probe_status+0x710/0x710 [ 1285.810110][ T8574] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0 [ 1285.815974][ T8574] netlink_rcv_skb+0x165/0x440 [ 1285.820797][ T8574] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1285.827193][ T8574] ? netlink_ack+0x1360/0x1360 [ 1285.832043][ T8574] genl_rcv+0x28/0x40 [ 1285.836077][ T8574] netlink_unicast+0x547/0x7f0 [ 1285.840900][ T8574] ? netlink_attachskb+0x890/0x890 [ 1285.846069][ T8574] ? __virt_addr_valid+0x61/0x2e0 [ 1285.851148][ T8574] ? __phys_addr_symbol+0x30/0x70 [ 1285.856228][ T8574] ? __check_object_size+0x333/0x6e0 [ 1285.861568][ T8574] netlink_sendmsg+0x925/0xe30 [ 1285.866400][ T8574] ? netlink_unicast+0x7f0/0x7f0 [ 1285.871408][ T8574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1285.876752][ T8574] ? netlink_unicast+0x7f0/0x7f0 [ 1285.881744][ T8574] sock_sendmsg+0xde/0x190 [ 1285.886214][ T8574] ____sys_sendmsg+0x71c/0x900 [ 1285.891035][ T8574] ? copy_msghdr_from_user+0xfc/0x150 [ 1285.896482][ T8574] ? kernel_sendmsg+0x50/0x50 [ 1285.901226][ T8574] ? find_held_lock+0x2d/0x110 [ 1285.906060][ T8574] ___sys_sendmsg+0x110/0x1b0 [ 1285.910800][ T8574] ? do_recvmmsg+0x6e0/0x6e0 [ 1285.915452][ T8574] ? __fget_files+0x248/0x480 [ 1285.920197][ T8574] ? lock_downgrade+0x690/0x690 [ 1285.925094][ T8574] ? find_held_lock+0x2d/0x110 [ 1285.929922][ T8574] ? ksys_write+0x210/0x250 [ 1285.934477][ T8574] ? __fget_files+0x26a/0x480 [ 1285.939219][ T8574] ? __fget_light+0xe5/0x270 [ 1285.943876][ T8574] __sys_sendmsg+0xf7/0x1c0 [ 1285.948441][ T8574] ? __sys_sendmsg_sock+0x40/0x40 [ 1285.953549][ T8574] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1285.959500][ T8574] ? lockdep_hardirqs_on+0x7d/0x100 [ 1285.964754][ T8574] do_syscall_64+0x39/0xb0 [ 1285.969215][ T8574] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1285.975163][ T8574] RIP: 0033:0x7f017dc8c0f9 [ 1285.979611][ T8574] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1285.999261][ T8574] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.007716][ T8574] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1286.015728][ T8574] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1286.023733][ T8574] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 06:13:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 11) [ 1286.031745][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.039751][ T8574] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1286.047784][ T8574] 06:13:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x2, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) [ 1286.110877][ T8594] FAULT_INJECTION: forcing a failure. [ 1286.110877][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.124201][ T8594] CPU: 1 PID: 8594 Comm: syz-executor.2 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1286.134567][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1286.144655][ T8594] Call Trace: [ 1286.148000][ T8594] [ 1286.150964][ T8594] dump_stack_lvl+0xd9/0x150 [ 1286.155605][ T8594] should_fail_ex+0x4a3/0x5b0 [ 1286.160346][ T8594] should_failslab+0x9/0x20 [ 1286.164897][ T8594] kmem_cache_alloc+0x63/0x3b0 [ 1286.169724][ T8594] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1286.176006][ T8594] idr_get_free+0x553/0xa80 [ 1286.180572][ T8594] idr_alloc_u32+0x174/0x2d0 [ 1286.185190][ T8594] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 1286.190763][ T8594] ? lock_release+0x670/0x670 [ 1286.195469][ T8594] idr_alloc+0xc6/0x130 [ 1286.199646][ T8594] ? idr_alloc_u32+0x2d0/0x2d0 [ 1286.204426][ T8594] ? __skb_clone+0x597/0x780 [ 1286.209049][ T8594] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1286.214464][ T8594] ieee80211_store_ack_skb+0xa8/0x1e0 [ 1286.219880][ T8594] ieee80211_build_hdr+0x181b/0x29d0 [ 1286.225201][ T8594] ? ieee80211_tx_dequeue+0x1d50/0x1d50 [ 1286.230773][ T8594] ? lock_release+0x670/0x670 [ 1286.235466][ T8594] ? ieee80211_downgrade_queue+0x3da/0x580 [ 1286.241318][ T8594] __ieee80211_subif_start_xmit+0x8d6/0x1180 [ 1286.247325][ T8594] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 1286.253159][ T8594] ieee80211_tx_control_port+0x5e3/0xd80 [ 1286.258816][ T8594] ? ieee80211_tx_skb_tid+0x4b0/0x4b0 [ 1286.264206][ T8594] ? __rtnl_unlock+0x68/0xe0 [ 1286.268823][ T8594] ? netdev_run_todo+0x775/0x1100 [ 1286.273905][ T8594] nl80211_tx_control_port+0x669/0xcd0 [ 1286.279401][ T8594] ? cfg80211_probe_status+0x710/0x710 [ 1286.284895][ T8594] ? nl80211_pre_doit+0x120/0xab0 [ 1286.289938][ T8594] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 1286.296124][ T8594] ? genl_start+0x660/0x660 [ 1286.300669][ T8594] ? ns_capable+0xe0/0x110 [ 1286.305132][ T8594] genl_rcv_msg+0x4ff/0x7e0 [ 1286.309669][ T8594] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1286.316030][ T8594] ? validate_beacon_tx_rate+0x790/0x790 [ 1286.321679][ T8594] ? cfg80211_probe_status+0x710/0x710 [ 1286.327160][ T8594] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0 [ 1286.332993][ T8594] netlink_rcv_skb+0x165/0x440 [ 1286.337783][ T8594] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 1286.344157][ T8594] ? netlink_ack+0x1360/0x1360 [ 1286.348975][ T8594] genl_rcv+0x28/0x40 [ 1286.352984][ T8594] netlink_unicast+0x547/0x7f0 [ 1286.357778][ T8594] ? netlink_attachskb+0x890/0x890 [ 1286.362910][ T8594] ? __virt_addr_valid+0x61/0x2e0 [ 1286.367965][ T8594] ? __phys_addr_symbol+0x30/0x70 [ 1286.373017][ T8594] ? __check_object_size+0x333/0x6e0 [ 1286.378327][ T8594] netlink_sendmsg+0x925/0xe30 [ 1286.383122][ T8594] ? netlink_unicast+0x7f0/0x7f0 [ 1286.388090][ T8594] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1286.393398][ T8594] ? netlink_unicast+0x7f0/0x7f0 [ 1286.398365][ T8594] sock_sendmsg+0xde/0x190 [ 1286.402812][ T8594] ____sys_sendmsg+0x71c/0x900 [ 1286.407600][ T8594] ? copy_msghdr_from_user+0xfc/0x150 [ 1286.413005][ T8594] ? kernel_sendmsg+0x50/0x50 [ 1286.417713][ T8594] ? find_held_lock+0x2d/0x110 [ 1286.422517][ T8594] ___sys_sendmsg+0x110/0x1b0 [ 1286.427231][ T8594] ? do_recvmmsg+0x6e0/0x6e0 [ 1286.431853][ T8594] ? __fget_files+0x248/0x480 [ 1286.436560][ T8594] ? lock_downgrade+0x690/0x690 [ 1286.441428][ T8594] ? find_held_lock+0x2d/0x110 [ 1286.446228][ T8594] ? ksys_write+0x210/0x250 [ 1286.450749][ T8594] ? __fget_files+0x26a/0x480 [ 1286.455465][ T8594] ? __fget_light+0xe5/0x270 [ 1286.460100][ T8594] __sys_sendmsg+0xf7/0x1c0 [ 1286.464632][ T8594] ? __sys_sendmsg_sock+0x40/0x40 [ 1286.469716][ T8594] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1286.475634][ T8594] ? lockdep_hardirqs_on+0x7d/0x100 [ 1286.480859][ T8594] do_syscall_64+0x39/0xb0 [ 1286.485289][ T8594] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1286.491221][ T8594] RIP: 0033:0x7f017dc8c0f9 [ 1286.495646][ T8594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1286.515272][ T8594] RSP: 002b:00007f017ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.523699][ T8594] RAX: ffffffffffffffda RBX: 00007f017ddabf80 RCX: 00007f017dc8c0f9 [ 1286.531680][ T8594] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1286.539746][ T8594] RBP: 00007f017ea481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.547742][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:13:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) [ 1286.555720][ T8594] R13: 00007fff90b3cd6f R14: 00007f017ea48300 R15: 0000000000022000 [ 1286.563720][ T8594] 06:13:26 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0x7, "4464089972"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 12) 06:13:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x10, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:26 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = accept$phonet_pipe(r4, &(0x7f0000000100), &(0x7f00000002c0)=0x10) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="dc039ee52f42f772ab23a98b8cab2c1b2b768fad5c0f7775e6dde99ca0b15777cb4e96782e5d3c817b506ddc98d10ec85a4c2a44595520fbfba0d84d81c4786f9997e4499fff395b204458b142158861e15587b8ed36e8ba400a", 0x5a}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000001a00)="f0d35dc78cb19d6104e60d5db5e365500fd08df0cadfc747a30e3227f0eac56e9dbb59267928620eaae4737ba502f73845b88d40c59deed2fa2d20d63fe4c7b8c61bc0f264b6870fc9d686e63aa4fe2a9fbb3f78ddf91a8ef02b457c7064571ff1858b46fffee8bf5a395ad83d2707bb560f7f8409f7f5c7f849c43e677973efa2abcec72aae466e42ef88551af5cf1038cc36ad3791876dcd9ef10dfef86c138e93983822539eb5c7526b35d74ddb22ec862918bd0c5aeddf2ccf5cb1da6c7e438343b4d2350c00f63c765131c55e1872b2084b3c8e827be3f0140024fa86c0a1c9cd607baa74149e7f6b7aafeee411b56c304e46d6dac50dbb43409b174d8c64f2612083220ca56b10d9314dd7adfaf71cef883d1b5ff9717b5bf43a9f8005016647583e6158f5a4e090ae775ec75e3fab84b472a46cbb64cbe06f1c7e4f78fcbe2826d8a9e78ed23489401a97950ace4e7da147ec6f7545b291c7f11949fb6856faa3e6acf8784eb8d19755f50e62f60c683d7d9569488cab90ff1134de15ba5f44897911b25e4e7d6b381e14b75aaec25b417b1e59289d9fbd90095bd64f238accdd095cc75b191270562b6b630f4b6e7907426cc70ed136e9ffda8a9085a68aba9cbdaa169d7e002c783a00a9f2c0696df1f4a9d6d5b6b99b4a064cd15fb9bed0012b82a7bb92cda9c7bb1b126a61ced6b651bdb9f820ac05ad36c397b12d2a2365e8e7c5e288465732d9ce89fc56534374d0ec8faf1ab872aa1d1c756b36a33366ba97c6cc6e7a7a679cf8dee5e2f359ea271d122f3badf416d786efec489ec6968120e70ee51c005c946284837f403eac4c4dd201f5585eb76288e486dd2b160953e44e735b530f46ab566a58cbf646c483adf49b8680e0c2821b63ab1d5032e265dfa4142d00273502096c23ce48a0092767e4ac8c6e53aa1de5cc7d766eb5c0f8032d23fe2486f7340786750b6203aad624eab8875e8fe0ba828a5594d7b578052a2c22482b0f2626e145e695260ec394b3720fe7433e94f2aef04b9e8e3098a03b1819c43f0eb53fd65d092cef6b0793b3f0745a84daa8c0282ea1fdf907f909f073804b8ce1ddfb11e583385743e07242d4a50f57a2080d464dcc7f9a0716a9ddec86eb9009a46f7b35e81d3eef6ff43d13aabd837a9f6123b97faeb053d5959b31b0aea727a305bb97a45978ec0d6d5be5f4c9295c9c74e1eee875e060c1ce58f23e11ce89ac8f1083dca2ccb35425b3dec0efb7474ae62b5c6cbf124f8525dca3987b172e5820497aa357a204a587d29a09e00d6f43b3528168e1f66e78b30ff6b6e015af6e42b3ef9bccf310fcad677973d590eb77107e02efcb0506e957ce9c387159f6e5d5c8e58162fd15320e6f72b8cdd82b205b04f6ff45d9b088d54612c18c527c5ca8a9089e0ef9cfacb7fa63b5b981cf171115258094f8cd75635b0e0986cada06142438791077004966d1ff44b7358bbb678b978b0df3f4008b88e053a53ccfdd09b6380d36ed8bfbbf80b2a33f86db10f140dbeea6ed3f1af19bf9a677664a36ba738d1a4e8566a5924e94525db3555d669c6dc4ce7dddd5f4323e6e3a215c366bfdde443bb95531ad5e070df68478a6c9057bb97fd6326eebeb7f4c3a691ee442c4103e5f19fd76a2380bdf45702d05de1036c2411d3885c56ee18025e16903a538d501a91fa2bbc68510ec0f3fcd12f72739cdc7e2fc63e1fbdbd5c7e5d796cd7bd6cde512c989964b6a23b8511b7800397403d195e07b12b283a0b8f50e2d2ac728c448e5e3d7efb9f39e2fe0fd994275277e0dc3bac8b0e51d62d93f79041f978b30e397a3a3994e13956716ab95889e79cc51c5ef067492f4476fc75cb29cac712db11cb688b4fd98c797e3d0c28cf901d69c67862b37d79a77e24e3c1ae64e4a07de12f4d2cde110532a520f0a5ee8158b13557e709505cfdfde3e90506f4c1fa61c115e5018c9d84dc6dd2a697cb8ca5dde43cfff0e99e4f39e0028e822feed99f76e4527abff963ccfb4088007fb43beefb2ee9211d4e9ba866d1432c175b48f3a2e2aa5e1ab62abaa827ddee594214ae209e17114b9c321ba98eb5d227a03dc997a362116bfbbca8c0e2fbdc22ae796e03498ef653ae3e53be7a93cc27bddcca5d63a674dacbc64ad2839c280ab3009bab65e97e6e66fd4b4df4e3f4c3111f4721ebf672f2958f3f2c4b78a8222865736e980fa72358684ee5efb815e6e20dbca66f8fd75e74bc2209be7b7b792acb70661a48bcec6be241a1340796c949810d06c133d259a8d53f9b2654d300ccede00ab87582ddceb961e0558232f96622502139ee5429549871569faf7db07d82c991012e9d9f81c7d8996ba3320b4c5004b6a3e8f7fc13c237a79101929feed9487378937c3a5a50da319eac3f495159144555781e1a627466ddccb7bcf2e3a830d18031fd81f199dcc07b8e9dbc4d95d04373a8ecf1bc6baa6333fb4629e3482b2cce9220d960bf633abf37281d26846afddab3b277119295668ec874cf83d1ee9dd5c00d52f2de246172cdefa55acd9295d72241cf7d27e1381f2466685ffd8d76f81a1630afe1fd8c95b850559ef6c6aff731745dc593fd60ad7fcbad371f270aae10ab0f98703b72fc9117fdf57f49cea399445c264ee0517ad82ef9313a6d38a34c42243fc669372b785e5bb3db176a44f21a6417153acca9ae1c1a863b3ebf21a127736ddb94e721c96a34d3489484f98c6e771c0b3615a58462d218a6267d195756719381f71b694f7677306cca77c095719d3f9d05fb22449ab092128e6c2c6ed87b0850584fe2c3bc7eed456956b681ce8b06ddf7bf77035a1a621b8a0d4364928b30f65bace1c62b350382cf1f7f39521a3d2daaa3c2cfb6ec49158f89d70bd10112b9f976a9badfd0088784d14823dab38dbd864c4f511731ca08ee20acf86dde0198d17ffde15c06a6198530e9198601ed48b2e08861dafecefd0a102efd95129c194267f469977979f17c8ab112fb76c5e342cf0f149bdafe911aafb81207ab59619ce5456f9b4008886c493f264ed7b36ef2b4afc39a76c13739af69ec1572dc660b1a84bf94fe2842d1ae3ef8ff9c2f8fe553629d3294f053bebeddb668da695dac7a2d4c4dbc5315bce7b0eba10f46d31d2d704c403365206782fd43733046917d5b8d553e00e2e243c85a80882d0389b6f7ff608429f1b6d66a8554114042ef675362a91e967a66c22df63b60a65d789dfcbe84561a1e5bf637a2eb63ac7b176f495ff20908355d5ad501f51633757997b62e66adc3784959050335a5dc4d6a7df1dadd1d54c79a4c61d999ea2a49abfc157b341b3f4ed13643c309e2e6c140836227a07f017339fae4c3d174a6a5218fd13079292b4b689f425abe75fe44fa44b58cfec9e6a88126f1c1f9e174d34aa9ac09abd7fb3d85ff54634556eeb9b0fb887cf019397d87d730d0ee49db06c9c6a88a406ccc0d4f5d8fbeea08981c6af2d1f48a8b28043a22625812029f1959bf17425c358ef6b05e5023f31fd0d5b00a4895cea8040e7c8aac7507b78a55716e2709997fc44c1191656981f3f608a860d8b169a55772963bdfe6e3cb2d5b89051cd7c57b274c90e3eb755cbcf4384494073c250b8676d8c3b6dd248893397112818dfaa29b2ac3c98743da602e93cdc97a89dad59b08d1a00f96d1c0bcaa4519f50524e77f7041a78fc66c252b10a558eddba6791eb21de0b58d152420146bf44631de9cc82702b3d1e094d28750aea8299c105931b2c039d776356203abcb368416942093ff96b1d3fa3fd7e30db4ba979d55a27e14c2c6d86de95744376ca173fa57eee8267797f62e75f0d5f45931cb0211b9d6bd79da0ea2ba50de7b5f2a01f6805589c92ee9da745fcd5bf0b63ef486edac3e0753098d8662cad34fc874aa0c3045694b482bf4989a7a83e0508bf2d69e8798171dbfd06e692e2375ee0bc375f3fe95ab215519965fce348af80322591581de4cf97894c7265c03d7557204538c5870b6ee5bb0fa4054cf34b6cc9fe6cbfb958d6e9c1407dc0773a84ac5b8db0e04d741ef3c2563b812039c11a87c9e13cb51e6427f9dcb27127293ae92077221b0876ab84593a0f0c19f3783b554383ae6c22581e7c5c706d85800e864d68049d3c17b1bd54d1d1c01bf6e29bd115123f8f82e3bf88b7dd45a219f09ca35dbb894f15f5b1689e250d01894badec92479696212215c6bd7a31ca607842a72442b4cf54f4ccc24cd18a8a5c8b014a6f0c0770e0ae020bbc465d490a6aa6248906ee8e9c406a76cd2dd5184843b50e19a2569b2f112790ce2d275715db6f90633336a94e764ad7eca66f13a9e78cff04e012c02dfcd93ad2ba8eee78e3a1f457e8ea4889eab59ac97e70721c3d19e07d2fb9066fd319ad0c8b1daaa30a2ddc629669047b72ec405960bc2101c092387128065877d8dcf23192ee57d9c912e7042094b07e2ca2df4ea882b5ac727b5de2c7db837603e6f12b82993fb005a05434eead60195ef192b9027256c25ca62eea165d4eca32b1b6c1eddc8ac04781eb24638a37949d5cbcef792ff6ac6e7e7a5ec44c7570f3010a3af1670f48498f110a7b1318064d5f34d00ba2a7d54afbdb6829d6cffc57924325a3f2c44610f342b4b215466a4bcc41aebac58e2556131ff9e32ecfdac8adf15462a2188f135bf4b49890d902a9918a772d3b869ca9f720b27ed1a281eb17340291b457c89c87ab670a38ae531c9a8080ce904ef9dcd2ea6331accabdb9828d01f62ba56ea388b9a381864dbbf1936236b3345cafacc95b464b0feb76576ff226eb43f37fe27dc997b112610b8c2976572d76360659fb37795d3d787f16b6ef51b469bf2a0392c095a84ee6f15cbff69631cf8d8a1dce9fc1f4a705360320320f7a79acda6eb734dfcb64d26dbdf408f1430e164cdacf4acd6018a89cbb96396f61a15931968ff59d7accc320f54d3b19460b5b87839ed394b8e8367024c9bba43d9022b55b9763e00565ee80b9ab6415e6bee8a6e2e20955f441982a2ad4831ff45cde7ec2f970da833343c58c314c1662632c643d00ee3c4a2eb2fb186f4f04a9f89bfedf501b63674e25974dae64068d1b11e2c9e7f7b86f7b195d562856c7de189ab89f005cf051bf490a282f4fbbd70e74e824b2a25bf91cb55ee28261905d0b49371f3d2d8f7df45e62c02e5b9996feecdb0ce182aaa972405ee4c7fb30e61bee1aa84e532063a5c76335b17f6ec22785fd44e310f04eafbdba0a09cb81b4db7398b8fa31352af8227722437a92cb9b7b6d6ca6295ce623dbaa49b0259ae09ae8df5ec2d36b611097d53e9ae5e2f1164dcbadf372bd78fd42c606e779beb386bb6027d7d2c24118029462b683bd1693537f5c8a827a3e542f2032706d51f2717f3027ce066cdf2cd53587e6c3fd4feb094dfd3c583527f8a437c6966b3d7d71ab75f44e0a694f6234ff5a4c3f5aa750cde6f9bbb84439374b7d2991d407f8516221d60c9ca9cdb6e5652998d7118c6c3df0ccbefa3f1e209a12b81984b25ef09e884418673aecd21f5ff06dfa8fcbe4a8f32e3ff0ab601f754a79f531ed4eedc78962b8498ce258c55cf86548cac03414caed92b185cd2e6380e5c2b2759967962986fe8791769c6baf4e6d407fb5108b1f6113417c45156e79e7156a66d6bf1b5deb363eda6e472f68d4bf08521116a142db963c30a9d990ae8b2eec9a4bb141505e6d891b0c5fef9f86fc7daa8d4010d92fc798c769464f05b594c6fe37c36ec13790694ede10c1ed143a", 0x1000}], 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:13:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 13) 06:13:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x541b, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:26 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x82, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) (fail_nth: 14) 06:13:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5421, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:26 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0x7, "4464089972"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = accept$phonet_pipe(r4, &(0x7f0000000100), &(0x7f00000002c0)=0x10) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="dc039ee52f42f772ab23a98b8cab2c1b2b768fad5c0f7775e6dde99ca0b15777cb4e96782e5d3c817b506ddc98d10ec85a4c2a44595520fbfba0d84d81c4786f9997e4499fff395b204458b142158861e15587b8ed36e8ba400a", 0x5a}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000001a00)="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", 0x1000}], 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r1, 0x0, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) accept$phonet_pipe(r4, &(0x7f0000000100), &(0x7f00000002c0)=0x10) (async) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="dc039ee52f42f772ab23a98b8cab2c1b2b768fad5c0f7775e6dde99ca0b15777cb4e96782e5d3c817b506ddc98d10ec85a4c2a44595520fbfba0d84d81c4786f9997e4499fff395b204458b142158861e15587b8ed36e8ba400a", 0x5a}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000001a00)="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", 0x1000}], 0x3) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) 06:13:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5450, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5451, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x101d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x26, 0x3, [{0x1, 0x7, "4464089972"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5452, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:36 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = accept$phonet_pipe(r4, &(0x7f0000000100), &(0x7f00000002c0)=0x10) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="dc039ee52f42f772ab23a98b8cab2c1b2b768fad5c0f7775e6dde99ca0b15777cb4e96782e5d3c817b506ddc98d10ec85a4c2a44595520fbfba0d84d81c4786f9997e4499fff395b204458b142158861e15587b8ed36e8ba400a", 0x5a}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000001a00)="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", 0x1000}], 0x3) (async) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000300)="dc039ee52f42f772ab23a98b8cab2c1b2b768fad5c0f7775e6dde99ca0b15777cb4e96782e5d3c817b506ddc98d10ec85a4c2a44595520fbfba0d84d81c4786f9997e4499fff395b204458b142158861e15587b8ed36e8ba400a", 0x5a}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000001a00)="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", 0x1000}], 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:13:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xd, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5460, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:36 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x28, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:36 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x203a0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x660c, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) [ 1300.160655][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.167010][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 06:13:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6611, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:44 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x28, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:44 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x30570}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6612, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x25f, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6628, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x100, 0x3, 0x1902, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xfff, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000006c0)='GPL\x00', 0x446, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xe, 0x2, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x7fff}, 0x10, r6, r7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x3, 0xc, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0xc, 0x1ff, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000540)={r0, 0xfff, 0x6, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000400000000000000040950000000000000018390000020073d3000e00000000000000000000001800000002000000000000008219ffff1857000010000000000000000000000018420000feffffff00"/104], &(0x7f0000000100)='GPL\x00', 0x56, 0xfb, &(0x7f0000000340)=""/251, 0x41000, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x5, 0x7d630452}, 0x10, r6, r0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r0, r8, 0x1, r9, r10]}, 0x80) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@local, @initdev={0xac, 0x1e, 0x3, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) 06:13:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x28, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8933, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xd, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x400448c9, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x100, 0x3, 0x1902, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xfff, 0x10}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xfff, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000006c0)='GPL\x00', 0x446, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xe, 0x2, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x7fff}, 0x10, r6, r7}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x7fff}, 0x10, r6, r7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x3, 0xc, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0xc, 0x1ff, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000540)={r0, 0xfff, 0x6, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000400000000000000040950000000000000018390000020073d3000e00000000000000000000001800000002000000000000008219ffff1857000010000000000000000000000018420000feffffff00"/104], &(0x7f0000000100)='GPL\x00', 0x56, 0xfb, &(0x7f0000000340)=""/251, 0x41000, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x5, 0x7d630452}, 0x10, r6, r0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r0, r8, 0x1, r9, r10]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000400000000000000040950000000000000018390000020073d3000e00000000000000000000001800000002000000000000008219ffff1857000010000000000000000000000018420000feffffff00"/104], &(0x7f0000000100)='GPL\x00', 0x56, 0xfb, &(0x7f0000000340)=""/251, 0x41000, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x5, 0x7d630452}, 0x10, r6, r0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r0, r8, 0x1, r9, r10]}, 0x80) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@local, @initdev={0xac, 0x1e, 0x3, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@local, @initdev={0xac, 0x1e, 0x3, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) 06:13:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xa, "4464089972d3bc2b"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xc00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x400448dd, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xd00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x400454ca, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:46 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x50910}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x100, 0x3, 0x1902, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xfff, 0x10}, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000006c0)='GPL\x00', 0x446, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xe, 0x2, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x0}}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x7fff}, 0x10, r6, r7}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x3, 0xc, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0xc, 0x1ff, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x7, 0x1eb, 0x1, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000540)={r0, 0xfff, 0x6, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000400000000000000040950000000000000018390000020073d3000e00000000000000000000001800000002000000000000008219ffff1857000010000000000000000000000018420000feffffff00"/104], &(0x7f0000000100)='GPL\x00', 0x56, 0xfb, &(0x7f0000000340)=""/251, 0x41000, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x5, 0x7d630452}, 0x10, r6, r0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r0, r8, 0x1, r9, r10]}, 0x80) (async) recvmsg(r1, 0x0, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@local, @initdev={0xac, 0x1e, 0x3, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) 06:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xa, "4464089972d3bc2b"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40046629, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:54 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4004662b, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x66e, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtclass={0x2c, 0x28, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r7, 0x20, 0x20, 0x35, 0x9, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x64, 0x0, 0x20, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local, {[@generic={0x86, 0x4, "5986"}, @ssrr={0x89, 0x7, 0xcc, [@dev={0xac, 0x14, 0x14, 0x34}]}, @rr={0x7, 0x7, 0xcb, [@dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) 06:13:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x4000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40049409, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:54 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x29, 0x3, [{0x1, 0xa, "4464089972d3bc2b"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x5f02, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086602, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:54 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xc00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xd00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtclass={0x2c, 0x28, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r7, 0x20, 0x20, 0x35, 0x9, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x64, 0x0, 0x20, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local, {[@generic={0x86, 0x4, "5986"}, @ssrr={0x89, 0x7, 0xcc, [@dev={0xac, 0x14, 0x14, 0x34}]}, @rr={0x7, 0x7, 0xcb, [@dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) 06:13:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086604, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:13:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) [ 1315.587565][T16726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.693523][T16726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.789850][T16726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.885402][T16726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:13:55 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x80e80}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:13:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:13:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) [ 1317.121504][T16726] hsr_slave_0: left promiscuous mode [ 1317.137197][T16726] hsr_slave_1: left promiscuous mode [ 1317.146503][T16726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.165865][T16726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.174972][T16726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.189433][T16726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.197883][T16726] bridge_slave_1: left allmulticast mode [ 1317.204336][T16726] bridge_slave_1: left promiscuous mode [ 1317.211315][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.221058][T16726] bridge_slave_0: left allmulticast mode [ 1317.226723][T16726] bridge_slave_0: left promiscuous mode [ 1317.232719][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.247097][T16726] veth1_macvtap: left promiscuous mode [ 1317.252707][T16726] veth0_macvtap: left promiscuous mode [ 1317.258433][T16726] veth1_vlan: left promiscuous mode [ 1317.263705][T16726] veth0_vlan: left promiscuous mode [ 1317.416649][T16726] team0 (unregistering): Port device team_slave_1 removed [ 1317.431138][T16726] team0 (unregistering): Port device team_slave_0 removed [ 1317.450145][T16726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.465487][T16726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.527264][T16726] bond0 (unregistering): Released all slaves [ 1317.938715][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1317.947599][ T5112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.958330][ T5112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.966252][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.973995][ T4399] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1317.988458][ T4399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1318.288396][ T8930] chnl_net:caif_netlink_parms(): no params data found [ 1318.429502][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.436634][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.481894][ T8930] bridge_slave_0: entered allmulticast mode [ 1318.507397][ T8930] bridge_slave_0: entered promiscuous mode [ 1318.523292][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.534320][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.562654][ T8930] bridge_slave_1: entered allmulticast mode [ 1318.589187][ T8930] bridge_slave_1: entered promiscuous mode [ 1318.653819][ T8930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.676172][ T8930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.725264][ T8930] team0: Port device team_slave_0 added [ 1318.750318][ T8930] team0: Port device team_slave_1 added [ 1318.825494][ T8930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.848058][ T8930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.898718][ T8930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.920059][ T8930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.927051][ T8930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.993125][ T8930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.079476][ T8930] hsr_slave_0: entered promiscuous mode [ 1319.086660][ T8930] hsr_slave_1: entered promiscuous mode [ 1319.093012][ T8930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.100824][ T8930] Cannot create hsr debugfs directory [ 1319.842215][ T8930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1319.852244][ T8930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.862758][ T8930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.872891][ T8930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1319.972230][ T8930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.986622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1319.997210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1320.016494][ T8930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.041007][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1320.050739][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1320.064230][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.071420][ T6574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.088125][T23385] Bluetooth: hci3: command 0x0409 tx timeout [ 1320.123804][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1320.133885][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1320.149106][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1320.157692][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.164875][ T6574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.172875][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1320.181881][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1320.190912][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1320.200212][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1320.223236][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1320.231588][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1320.240479][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1320.249841][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1320.258654][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1320.267119][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1320.275749][ T2494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1320.299791][ T8930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1320.516046][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1320.523754][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1320.534440][ T8930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.567736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.577349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.605536][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.614881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1320.634334][ T8930] veth0_vlan: entered promiscuous mode [ 1320.648472][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1320.656409][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1320.673523][ T8930] veth1_vlan: entered promiscuous mode [ 1320.680722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1320.705726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1320.715503][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1320.727723][ T8930] veth0_macvtap: entered promiscuous mode [ 1320.740504][ T8930] veth1_macvtap: entered promiscuous mode [ 1320.757107][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.771798][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.782108][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.793012][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.803293][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.814100][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.825051][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.835940][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.846479][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.864449][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.877526][ T8930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.895700][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1320.907146][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1320.915885][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1320.927114][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1320.939065][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.950741][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.961653][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.972509][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.982672][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.993591][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.005633][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.016497][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.027754][ T8930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.038913][ T8930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.050783][ T8930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.060309][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1321.069976][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1321.081763][ T8930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.091604][ T8930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.101315][ T8930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.118851][ T8930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.193937][T16726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.208614][T16726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.230942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1321.252036][T16726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.261392][T16726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.273952][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1321.367110][ T9000] EXT4-fs warning (device sda1): __ext4_ioctl:1239: Setting inode version is not supported with metadata_csum enabled. [ 1322.149042][T23385] Bluetooth: hci3: command 0x041b tx timeout 06:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x4, "2698"}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtclass={0x2c, 0x28, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r7, 0x20, 0x20, 0x35, 0x9, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x64, 0x0, 0x20, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @local, {[@generic={0x86, 0x4, "5986"}, @ssrr={0x89, 0x7, 0xcc, [@dev={0xac, 0x14, 0x14, 0x34}]}, @rr={0x7, 0x7, 0xcb, [@dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) 06:14:03 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:14:03 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x91050}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:14:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086607, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x6e06, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) [ 1324.228214][T23385] Bluetooth: hci3: command 0x040f tx timeout [ 1326.308182][T23385] Bluetooth: hci3: command 0x0419 tx timeout 06:14:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4008662c, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:14:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:11 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:14:12 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xa1220}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:14:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x8, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5776f"}, {0x1, 0x4, "2698"}, {0x5, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@multicast2, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:14:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40087602, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:14:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x400c6615, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) [ 1332.410566][ T9160] EXT4-fs warning (device sda1): __ext4_ioctl:1239: Setting inode version is not supported with metadata_csum enabled. 06:14:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40106614, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:14:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) [ 1332.737907][ T5374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.826309][ T5374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.907922][ T5374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:14:12 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x0, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0xb, "ca575792b3c36415c8"}, {0x6, 0xe, "1390c8cbb305e90f5870e2ab"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x6, "65e5ab43"}, {0x1, 0x2}, {0x2, 0xa, "7c13c0a1c4345b52"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@broadcast, @multicast2, @remote]}, @cipso={0x86, 0x3e, 0x0, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0xd, "ef98a1349e7ca823d99860"}, {0x0, 0x3, "1b"}, {0x0, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) [ 1333.001967][ T5374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:14:12 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xb13f0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0x80, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x9, "4464089972d3bc"}, {0x6, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1a, 0x0, [{0x0, 0x6, "65e5ab43"}, {0x1, 0x3, '&'}, {0x2, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xb, 0x0, [@broadcast, @remote]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x0, 0x2}, {0x5, 0x3, "1b"}, {0x7, 0x5, 'XQu'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 06:14:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', 0x0, 0x8, 0x10, 0x1, 0x80, {{0x35, 0x4, 0x1, 0x8, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x6}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xb, "4464089972d3bc2bf2"}, {0x6, 0x2}, {0x0, 0xf, "1390c8cbb305e90f5870e2abe0"}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x6, "65e5776f"}, {0x1, 0x4, "2698"}, {0x5, 0xb, "7c13c0a1c4345b52b8"}]}, @noop, @ssrr={0x89, 0xf, 0x28, [@multicast2, @multicast2, @remote]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x2, 0xa, "0745e8edfdb7cb15"}, {0x2, 0x5, "bff093"}, {0x0, 0x10, "ef98a1349e7ca823d998607dc307"}, {0x5, 0x3, "1b"}, {0x1, 0xf, "83e099bfe4df7dd60d739132db"}, {0x7, 0xa, "58517559508b1a58"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1d, [@broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @end]}}}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 06:14:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40186366, &(0x7f0000000040)={0x0, r1, 0xfffffffb}) 06:14:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) 06:14:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0xc000000, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{}, [], {0x0, 0x0, {}, "4c76c691a2937625"}}}}]}, 0x54}}, 0x0) [ 1334.162032][ T5374] ------------[ cut here ]------------ [ 1334.167588][ T5374] Have pending ack frames! [ 1334.174950][ T5374] WARNING: CPU: 0 PID: 5374 at net/mac80211/main.c:1509 ieee80211_free_ack_frame+0x51/0x60 [ 1334.185350][ T5374] Modules linked in: [ 1334.189330][ T5374] CPU: 0 PID: 5374 Comm: kworker/u4:7 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1334.199551][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1334.209676][ T5374] Workqueue: netns cleanup_net [ 1334.214493][ T5374] RIP: 0010:ieee80211_free_ack_frame+0x51/0x60 [ 1334.220737][ T5374] Code: 48 89 ef be 02 00 00 00 e8 cc 42 88 fe 31 c0 5b 5d c3 e8 12 27 0b f8 48 c7 c7 80 cb 7c 8b c6 05 eb 8a ea 04 01 e8 af a0 d3 f7 <0f> 0b eb cd 66 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 [ 1334.240419][ T5374] RSP: 0018:ffffc90005e979d8 EFLAGS: 00010286 [ 1334.246527][ T5374] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1334.254584][ T5374] RDX: ffff88804862d7c0 RSI: ffffffff814b6037 RDI: 0000000000000001 [ 1334.262628][ T5374] RBP: ffff88802171ddc0 R08: 0000000000000001 R09: 0000000000000000 [ 1334.270685][ T5374] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1334.278719][ T5374] R13: ffffffff8977bdb0 R14: 0000000000000000 R15: 0000000000000000 [ 1334.286722][ T5374] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1334.295746][ T5374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1334.302402][ T5374] CR2: 00007f222d0440a0 CR3: 000000005fc70000 CR4: 00000000003506f0 [ 1334.310471][ T5374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1334.318501][ T5374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1334.326506][ T5374] Call Trace: [ 1334.329855][ T5374] [ 1334.332814][ T5374] idr_for_each+0x117/0x230 [ 1334.337361][ T5374] ? idr_find+0x50/0x50 [ 1334.341627][ T5374] ieee80211_free_hw+0xa1/0x2f0 [ 1334.346529][ T5374] hwsim_exit_net+0x463/0x840 [ 1334.351388][ T5374] ? __rhashtable_remove_fast.constprop.0.isra.0+0xf20/0xf20 [ 1334.358846][ T5374] ? stop_sync_thread+0x37a/0x8d0 [ 1334.364012][ T5374] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 1334.369473][ T5374] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 1334.375245][ T5374] ? __rhashtable_remove_fast.constprop.0.isra.0+0xf20/0xf20 [ 1334.382722][ T5374] ops_exit_list+0xb0/0x170 [ 1334.387300][ T5374] cleanup_net+0x4ee/0xb10 [ 1334.391814][ T5374] ? unregister_pernet_device+0x80/0x80 [ 1334.397404][ T5374] ? __schedule+0xc99/0x5770 [ 1334.402089][ T5374] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.407345][ T5374] process_one_work+0x991/0x15c0 [ 1334.412459][ T5374] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1334.417883][ T5374] ? spin_bug+0x1c0/0x1c0 [ 1334.422304][ T5374] ? _raw_spin_lock_irq+0x45/0x50 [ 1334.427400][ T5374] worker_thread+0x669/0x1090 [ 1334.432216][ T5374] ? process_one_work+0x15c0/0x15c0 [ 1334.437469][ T5374] kthread+0x2e8/0x3a0 [ 1334.441620][ T5374] ? kthread_complete_and_exit+0x40/0x40 [ 1334.447307][ T5374] ret_from_fork+0x1f/0x30 [ 1334.451837][ T5374] [ 1334.454887][ T5374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1334.462309][ T5374] CPU: 0 PID: 5374 Comm: kworker/u4:7 Not tainted 6.3.0-rc3-syzkaller-00156-g33189f0a94b9 #0 [ 1334.472495][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1334.482587][ T5374] Workqueue: netns cleanup_net [ 1334.487405][ T5374] Call Trace: [ 1334.490707][ T5374] [ 1334.493663][ T5374] dump_stack_lvl+0xd9/0x150 [ 1334.498303][ T5374] panic+0x688/0x730 [ 1334.502235][ T5374] ? panic_smp_self_stop+0x90/0x90 [ 1334.507389][ T5374] ? show_trace_log_lvl+0x285/0x390 [ 1334.512655][ T5374] ? ieee80211_free_ack_frame+0x51/0x60 [ 1334.518251][ T5374] check_panic_on_warn+0xb1/0xc0 [ 1334.523239][ T5374] __warn+0xf2/0x390 [ 1334.527189][ T5374] ? preempt_schedule_notrace+0x5f/0xd0 [ 1334.532789][ T5374] ? ieee80211_free_ack_frame+0x51/0x60 [ 1334.538388][ T5374] report_bug+0x2da/0x500 [ 1334.542757][ T5374] handle_bug+0x3c/0x70 [ 1334.546951][ T5374] exc_invalid_op+0x18/0x50 [ 1334.551498][ T5374] asm_exc_invalid_op+0x1a/0x20 [ 1334.556401][ T5374] RIP: 0010:ieee80211_free_ack_frame+0x51/0x60 [ 1334.562606][ T5374] Code: 48 89 ef be 02 00 00 00 e8 cc 42 88 fe 31 c0 5b 5d c3 e8 12 27 0b f8 48 c7 c7 80 cb 7c 8b c6 05 eb 8a ea 04 01 e8 af a0 d3 f7 <0f> 0b eb cd 66 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 [ 1334.582231][ T5374] RSP: 0018:ffffc90005e979d8 EFLAGS: 00010286 [ 1334.588315][ T5374] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1334.596303][ T5374] RDX: ffff88804862d7c0 RSI: ffffffff814b6037 RDI: 0000000000000001 [ 1334.604289][ T5374] RBP: ffff88802171ddc0 R08: 0000000000000001 R09: 0000000000000000 [ 1334.612266][ T5374] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 1334.620251][ T5374] R13: ffffffff8977bdb0 R14: 0000000000000000 R15: 0000000000000000 [ 1334.628238][ T5374] ? ieee80211_free_hw+0x2f0/0x2f0 [ 1334.633390][ T5374] ? __warn_printk+0x187/0x310 [ 1334.638184][ T5374] ? ieee80211_free_ack_frame+0x51/0x60 [ 1334.643752][ T5374] idr_for_each+0x117/0x230 [ 1334.648284][ T5374] ? idr_find+0x50/0x50 [ 1334.652468][ T5374] ieee80211_free_hw+0xa1/0x2f0 [ 1334.657349][ T5374] hwsim_exit_net+0x463/0x840 [ 1334.662054][ T5374] ? __rhashtable_remove_fast.constprop.0.isra.0+0xf20/0xf20 [ 1334.669470][ T5374] ? stop_sync_thread+0x37a/0x8d0 [ 1334.674517][ T5374] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 1334.679906][ T5374] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 1334.685660][ T5374] ? __rhashtable_remove_fast.constprop.0.isra.0+0xf20/0xf20 [ 1334.693064][ T5374] ops_exit_list+0xb0/0x170 [ 1334.697587][ T5374] cleanup_net+0x4ee/0xb10 [ 1334.702022][ T5374] ? unregister_pernet_device+0x80/0x80 [ 1334.707584][ T5374] ? __schedule+0xc99/0x5770 [ 1334.712191][ T5374] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.717416][ T5374] process_one_work+0x991/0x15c0 [ 1334.722383][ T5374] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1334.727779][ T5374] ? spin_bug+0x1c0/0x1c0 [ 1334.732123][ T5374] ? _raw_spin_lock_irq+0x45/0x50 [ 1334.737193][ T5374] worker_thread+0x669/0x1090 [ 1334.741899][ T5374] ? process_one_work+0x15c0/0x15c0 [ 1334.747118][ T5374] kthread+0x2e8/0x3a0 [ 1334.751197][ T5374] ? kthread_complete_and_exit+0x40/0x40 [ 1334.756846][ T5374] ret_from_fork+0x1f/0x30 [ 1334.761303][ T5374] [ 1334.764485][ T5374] Kernel Offset: disabled [ 1334.769005][ T5374] Rebooting in 86400 seconds..