last executing test programs:

17.903851409s ago: executing program 2 (id=239):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

17.765313301s ago: executing program 1 (id=243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

17.765203294s ago: executing program 1 (id=244):
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)

17.304161653s ago: executing program 1 (id=245):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044045}, 0x0)

17.30387483s ago: executing program 1 (id=247):
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4)
sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfcf5}, 0x10142)

17.234539284s ago: executing program 1 (id=249):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

17.234281617s ago: executing program 1 (id=250):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x3, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, 0x0, 0x0)
r4 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000001200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

17.125895593s ago: executing program 2 (id=251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

17.125512708s ago: executing program 2 (id=253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x12, 0x14, 0x0, 0x1, [@generic="100b2773abb0b381fe40d433476c"]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

17.045481672s ago: executing program 2 (id=256):
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x8, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000)

16.555416864s ago: executing program 2 (id=257):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0xbc)

16.555110222s ago: executing program 2 (id=258):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x800, 0x6, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc)
getpid()
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))

16.051298898s ago: executing program 0 (id=261):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

15.985893465s ago: executing program 0 (id=262):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.985625411s ago: executing program 0 (id=263):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e21, @empty}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @empty}}]}, 0x50}, 0x1, 0x400000000000000}, 0x0)

15.845308914s ago: executing program 0 (id=264):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd347dc959", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.703832917s ago: executing program 0 (id=265):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)

15.703642965s ago: executing program 0 (id=266):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001800000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

2.004816947s ago: executing program 32 (id=250):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x3, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, 0x0, 0x0)
r4 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r6, 0x40047459, &(0x7f0000001200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

42.613µs ago: executing program 33 (id=258):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x800, 0x6, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc)
getpid()
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))

0s ago: executing program 34 (id=266):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001800000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49194' (ED25519) to the list of known hosts.
syzkaller login: [   50.675154][ T5830] cgroup: Unknown subsys name 'net'
[   50.763709][ T5830] cgroup: Unknown subsys name 'cpuset'
[   50.768206][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.450394][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.466715][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.472022][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.475709][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.479893][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.483293][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.506882][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.510675][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.513629][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.518997][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.522711][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.526004][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.528738][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.532933][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.542377][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.557003][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.743410][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.840174][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.844917][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.848289][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.851165][ T5842] bridge_slave_0: entered allmulticast mode
[   56.854623][ T5842] bridge_slave_0: entered promiscuous mode
[   56.875923][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.878612][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.881285][ T5842] bridge_slave_1: entered allmulticast mode
[   56.884549][ T5842] bridge_slave_1: entered promiscuous mode
[   56.926305][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.934411][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.960791][ T5842] team0: Port device team_slave_0 added
[   56.966395][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.973223][ T5842] team0: Port device team_slave_1 added
[   57.010045][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.013153][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.015615][ T5846] bridge_slave_0: entered allmulticast mode
[   57.019070][ T5846] bridge_slave_0: entered promiscuous mode
[   57.023317][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.025767][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.035843][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.052968][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.055501][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.059341][ T5846] bridge_slave_1: entered allmulticast mode
[   57.062550][ T5846] bridge_slave_1: entered promiscuous mode
[   57.066087][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.068898][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.078296][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.120862][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.134846][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.191924][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.194337][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.197064][ T5848] bridge_slave_0: entered allmulticast mode
[   57.200192][ T5848] bridge_slave_0: entered promiscuous mode
[   57.204014][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.206484][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.209547][ T5848] bridge_slave_1: entered allmulticast mode
[   57.212554][ T5848] bridge_slave_1: entered promiscuous mode
[   57.234066][ T5842] hsr_slave_0: entered promiscuous mode
[   57.239188][ T5842] hsr_slave_1: entered promiscuous mode
[   57.243712][ T5846] team0: Port device team_slave_0 added
[   57.256982][ T5846] team0: Port device team_slave_1 added
[   57.318140][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.331384][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.334424][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.345825][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.352705][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.357228][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.360320][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.371217][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.456318][ T5848] team0: Port device team_slave_0 added
[   57.475831][ T5848] team0: Port device team_slave_1 added
[   57.495279][ T5846] hsr_slave_0: entered promiscuous mode
[   57.498863][ T5846] hsr_slave_1: entered promiscuous mode
[   57.502000][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   57.504559][ T5846] Cannot create hsr debugfs directory
[   57.524658][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.526991][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.536410][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.540991][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.543305][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.551864][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.646140][ T5848] hsr_slave_0: entered promiscuous mode
[   57.649622][ T5848] hsr_slave_1: entered promiscuous mode
[   57.652585][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.655165][ T5848] Cannot create hsr debugfs directory
[   57.836456][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.852301][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.858991][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.879870][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.940630][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.950001][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.972403][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.988666][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.026307][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.031671][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.045370][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.063560][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.171555][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.201689][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.213469][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.225660][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.228991][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.241759][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.244165][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.252372][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.274733][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.304909][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.308215][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.316852][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.342023][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.345211][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.350983][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.354109][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.373339][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.376599][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.520906][ T5234] Bluetooth: hci0: command tx timeout
[   58.582528][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.598583][   T55] Bluetooth: hci2: command tx timeout
[   58.601188][ T5234] Bluetooth: hci1: command tx timeout
[   58.644307][ T5842] veth0_vlan: entered promiscuous mode
[   58.661137][ T5842] veth1_vlan: entered promiscuous mode
[   58.684230][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.723993][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.731359][ T5842] veth0_macvtap: entered promiscuous mode
[   58.741166][ T5842] veth1_macvtap: entered promiscuous mode
[   58.772565][ T5848] veth0_vlan: entered promiscuous mode
[   58.792748][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.796377][ T5848] veth1_vlan: entered promiscuous mode
[   58.804089][ T5846] veth0_vlan: entered promiscuous mode
[   58.813663][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.826626][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.831602][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.835170][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.840115][ T5846] veth1_vlan: entered promiscuous mode
[   58.853728][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.893563][ T5848] veth0_macvtap: entered promiscuous mode
[   58.911198][ T5848] veth1_macvtap: entered promiscuous mode
[   58.920405][ T5846] veth0_macvtap: entered promiscuous mode
[   58.952045][ T5846] veth1_macvtap: entered promiscuous mode
[   58.958380][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.960433][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.966061][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.989937][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.004726][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.005186][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.011095][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.013613][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.025345][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.037493][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.040571][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.043695][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.063979][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.076146][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.083043][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.098281][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.115858][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.137033][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4'.
[   59.145567][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.153456][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.208656][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.215101][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.237871][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.241045][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.262796][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.265490][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.420930][ T5924] Illegal XDP return value 38 on prog  (id 3) dev N/A, expect packet loss!
[   60.597860][ T5234] Bluetooth: hci0: command tx timeout
[   60.677487][ T5234] Bluetooth: hci1: command tx timeout
[   60.679575][ T5234] Bluetooth: hci2: command tx timeout
[   61.012689][ T5972] netlink: 'syz.2.26': attribute type 4 has an invalid length.
[   61.015259][ T5972] netlink: 152 bytes leftover after parsing attributes in process `syz.2.26'.
[   61.027181][ T5972] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   61.059235][ T5972] syz.2.26 (5972) used greatest stack depth: 19560 bytes left
[   61.327821][ T5984] netlink: 'syz.2.33': attribute type 21 has an invalid length.
[   61.359776][    C1] hrtimer: interrupt took 50611 ns
[   62.430250][ T6001] netlink: 'syz.1.38': attribute type 1 has an invalid length.
[   62.677692][ T5234] Bluetooth: hci0: command tx timeout
[   62.758885][ T5234] Bluetooth: hci2: command tx timeout
[   62.761367][   T55] Bluetooth: hci1: command tx timeout
[   62.847010][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'.
[   62.852425][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   62.856025][ T6035] netlink: 33 bytes leftover after parsing attributes in process `syz.1.55'.
[   62.862076][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   62.865731][ T6035] netlink: 33 bytes leftover after parsing attributes in process `syz.1.55'.
[   63.434127][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.441508][ T6041] netlink: 'syz.2.57': attribute type 13 has an invalid length.
[   63.445412][ T6041] netlink: 'syz.2.57': attribute type 17 has an invalid length.
[   64.445474][ T6041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.645125][ T6067] : renamed from vlan0 (while UP)
[   64.758180][ T5234] Bluetooth: hci0: command tx timeout
[   64.837646][   T55] Bluetooth: hci1: command tx timeout
[   64.839752][ T5234] Bluetooth: hci2: command tx timeout
[   65.352472][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   65.449107][ T6120] =======================================================
[   65.449107][ T6120] WARNING: The mand mount option has been deprecated and
[   65.449107][ T6120]          and is ignored by this kernel. Remove the mand
[   65.449107][ T6120]          option from the mount to silence this warning.
[   65.449107][ T6120] =======================================================
[   69.315254][ T6158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.109'.
[   70.063004][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.086304][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.091203][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.359010][ T6172] netlink: 'syz.0.114': attribute type 1 has an invalid length.
[   71.362758][ T6172] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.114'.
[   71.365898][ T6174] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.115'.
[   71.369442][ T6174] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   71.444404][ T6180] netlink: 22 bytes leftover after parsing attributes in process `syz.1.119'.
[   71.706264][ T6192] option changes via remount are deprecated (pid=6181 comm=syz.2.118)
[   72.511983][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.336349][ T6197] infiniband syz1: set active
[   73.339849][ T6197] infiniband syz1: added team_slave_0
[   73.363934][   T52] cfg80211: failed to load regulatory.db
[   73.401421][ T6197] RDS/IB: syz1: added
[   73.412463][ T6197] smc: adding ib device syz1 with port count 1
[   73.415992][ T6197] smc:    ib device syz1 port 1 has pnetid 
[   73.934710][ T6197] syz.2.125 (6197) used greatest stack depth: 19064 bytes left
[   74.072428][ T6248] netlink: 'syz.2.147': attribute type 41 has an invalid length.
[   74.136969][ T6254] netlink: 76 bytes leftover after parsing attributes in process `syz.2.150'.
[   74.217810][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'.
[   74.328993][ T6273] netlink: 'syz.0.159': attribute type 1 has an invalid length.
[   74.446024][ T6281] netlink: 8153 bytes leftover after parsing attributes in process `syz.1.164'.
[   74.450098][ T6281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.610016][ T6302] syz.2.173 uses obsolete (PF_INET,SOCK_PACKET)
[   74.821685][ T6325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.184'.
[   74.937816][ T6339] netlink: 'syz.1.191': attribute type 97 has an invalid length.
[   74.941312][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'.
[   74.946724][ T6339] netlink: 'syz.1.191': attribute type 97 has an invalid length.
[   74.954231][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'.
[   74.969589][ T6341] netlink: 'syz.2.192': attribute type 9 has an invalid length.
[   75.666509][ T6391] netlink: 'syz.0.217': attribute type 10 has an invalid length.
[   76.009835][ T6391] syz.0.217 (6391) used greatest stack depth: 18768 bytes left
[   76.094376][ T6407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.290076][ T6414] warning: `syz.2.225' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.758946][ T6442] netlink: 'syz.1.238': attribute type 21 has an invalid length.
[   76.761577][ T6442] __nla_validate_parse: 3 callbacks suppressed
[   76.761598][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'.
[   76.837801][ T5234] Bluetooth: hci2: unexpected event 0x31 length: 82 > 6
[   77.563462][ T6476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.291410][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1283024102 wd_nsec: 1283024243
[   83.787377][    C0] sched: DL replenish lagged too much
[   92.788938][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.798515][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.801766][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.805135][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.808271][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.871819][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.875710][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.880056][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.883706][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.886830][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.838199][   T55] Bluetooth: hci3: command tx timeout
[   94.903710][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.908870][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.912382][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.915542][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.919627][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.958594][ T5234] Bluetooth: hci4: command tx timeout
[   96.917598][ T5234] Bluetooth: hci3: command tx timeout
[   96.997584][ T5234] Bluetooth: hci5: command tx timeout
[   98.037456][ T5234] Bluetooth: hci4: command tx timeout
[   98.997535][ T5234] Bluetooth: hci3: command tx timeout
[   99.077815][ T5234] Bluetooth: hci5: command tx timeout
[  100.117456][ T5234] Bluetooth: hci4: command tx timeout
[  101.077424][ T5234] Bluetooth: hci3: command tx timeout
[  101.157483][ T5234] Bluetooth: hci5: command tx timeout
[  102.198145][ T5234] Bluetooth: hci4: command tx timeout
[  103.237444][ T5234] Bluetooth: hci5: command tx timeout
[  106.188766][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 21460432300 wd_nsec: 21460432939
[  132.522964][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.525805][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  153.497748][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  153.501065][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  153.503725][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  153.506462][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  153.515772][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  154.455489][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  154.459208][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  154.461846][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  154.464720][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  154.470259][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  155.558875][ T5234] Bluetooth: hci6: command tx timeout
[  155.567136][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  155.573175][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  155.576206][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  155.584451][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  155.587137][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  156.521766][ T5234] Bluetooth: hci7: command tx timeout
[  157.657407][ T5234] Bluetooth: hci8: command tx timeout
[  157.659747][ T5234] Bluetooth: hci6: command tx timeout
[  158.607445][   T55] Bluetooth: hci7: command tx timeout
[  159.717536][   T55] Bluetooth: hci6: command tx timeout
[  159.719899][   T55] Bluetooth: hci8: command tx timeout
[  160.837413][ T5234] Bluetooth: hci7: command tx timeout
[  161.797567][ T5234] Bluetooth: hci8: command tx timeout
[  161.800043][ T5234] Bluetooth: hci6: command tx timeout
[  162.919642][   T55] Bluetooth: hci7: command tx timeout
[  163.877519][   T55] Bluetooth: hci8: command tx timeout
[  180.686945][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  180.689875][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  180.692543][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  188.807302][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  188.809796][    C1] rcu: 	1-....: (10497 ticks this GP) idle=6964/1/0x4000000000000000 softirq=17450/17451 fqs=4550
[  188.815548][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  188.817996][    C1] rcu: 	 number:   738680          0            0
[  188.820240][    C1] rcu: 	cputime:    37853      14636           63   ==> 52500(ms)
[  188.823092][    C1] rcu: 	(t=10502 jiffies g=9153 q=2671 ncpus=2)
[  188.825426][    C1] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) 
[  188.825436][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.825441][    C1] RIP: 0010:__kmalloc_noprof+0xd5/0x4f0
[  188.825457][    C1] Code: 48 c7 c7 75 1e a3 8d be 41 01 00 00 e8 74 3b 79 ff 2e 2e 2e 31 c0 4c 89 e7 89 de e8 e5 6b 0b 00 31 db 85 c0 0f 85 91 01 00 00 <4d> 85 e4 0f 84 88 01 00 00 4c 89 3c 24 0f 1f 44 00 00 48 c7 44 24
[  188.825463][    C1] RSP: 0018:ffffc900001dfe48 EFLAGS: 00000246
[  188.825470][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  188.825474][    C1] RDX: 0000000000000000 RSI: 0000000000000400 RDI: ffffffff8e2598e0
[  188.825479][    C1] RBP: 0000000000000920 R08: ffffc900001e001f R09: 0000000000000000
[  188.825483][    C1] R10: ffffc900001dffe0 R11: fffff5200003c004 R12: ffff88801a441dc0
[  188.825487][    C1] R13: 1ffff9200003c004 R14: 0000000000000000 R15: 00000000000003b8
[  188.825491][    C1] FS:  00007f845739d6c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  188.825497][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.825501][    C1] CR2: 00007f9c25a0fb53 CR3: 0000000033474000 CR4: 00000000000006f0
[  188.825526][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  188.825531][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000f0602
[  188.825535][    C1] Call Trace:
[  188.825539][    C1]  <IRQ>
[  188.825543][    C1]  ? ieee802_11_parse_elems_full+0x152/0x2ab0
[  188.825557][    C1]  ieee802_11_parse_elems_full+0x152/0x2ab0
[  188.825567][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  188.825575][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  188.825586][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  188.825595][    C1]  ? sched_clock+0x3f/0x60
[  188.825606][    C1]  ? sched_clock_cpu+0x74/0x430
[  188.825613][    C1]  ? lapic_next_event+0x11/0x20
[  188.825620][    C1]  ? clockevents_program_event+0x24d/0x360
[  188.825629][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  188.825637][    C1]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  188.825650][    C1]  ieee80211_inform_bss+0x10c/0x10a0
[  188.825660][    C1]  ? irqentry_exit+0x74/0x90
[  188.825670][    C1]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  188.825681][    C1]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  188.825689][    C1]  cfg80211_inform_single_bss_data+0xd05/0x1ac0
[  188.825701][    C1]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  188.825717][    C1]  ? cfg80211_inform_bss_data+0x1e8/0x3b30
[  188.825726][    C1]  cfg80211_inform_bss_data+0x1fb/0x3b30
[  188.825733][    C1]  ? ktime_get+0x3e/0x1f0
[  188.825740][    C1]  ? ktime_get+0x3e/0x1f0
[  188.825747][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  188.825755][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  188.825766][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  188.825773][    C1]  ? sched_clock+0x3f/0x60
[  188.825782][    C1]  ? sched_clock_cpu+0x74/0x430
[  188.825787][    C1]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  188.825794][    C1]  ? lapic_next_event+0x11/0x20
[  188.825800][    C1]  ? clockevents_program_event+0x24d/0x360
[  188.825809][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  188.825814][    C1]  ? hrtimer_interrupt+0x889/0xaa0
[  188.825824][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  188.825833][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  188.825841][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.825849][    C1]  ? irqentry_exit+0x74/0x90
[  188.825861][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  188.825872][    C1]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  188.825881][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  188.825890][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  188.825899][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  188.825911][    C1]  ? ieee80211_scan_rx+0x181/0xa20
[  188.825919][    C1]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  188.825927][    C1]  ieee80211_scan_rx+0x593/0xa20
[  188.825937][    C1]  ieee80211_rx_list+0x201c/0x2a90
[  188.825951][    C1]  ? irqentry_exit+0x74/0x90
[  188.825960][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  188.825972][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  188.825980][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  188.825993][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  188.826002][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  188.826010][    C1]  ieee80211_rx_napi+0x1a8/0x3d0
[  188.826019][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  188.826031][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  188.826041][    C1]  tasklet_action_common+0x36c/0x580
[  188.826051][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  188.826061][    C1]  ? _raw_spin_unlock_irq+0x29/0x50
[  188.826071][    C1]  handle_softirqs+0x286/0x870
[  188.826078][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  188.826086][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  188.826094][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  188.826103][    C1]  __irq_exit_rcu+0xca/0x1f0
[  188.826109][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.826119][    C1]  irq_exit_rcu+0x9/0x30
[  188.826124][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  188.826133][    C1]  </IRQ>
[  188.826135][    C1]  <TASK>
[  188.826138][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.826145][    C1] RIP: 0010:__schedule+0x4/0x4cc0
[  188.826153][    C1] Code: f8 89 d9 48 8b 5c 24 08 e9 ee fe ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 01
[  188.826158][    C1] RSP: 0018:ffffc90006c47b98 EFLAGS: 00000286
[  188.826164][    C1] RAX: 00d5c7e3d277b300 RBX: 0000000000000000 RCX: 00d5c7e3d277b300
[  188.826168][    C1] RDX: 0000000000000006 RSI: ffffffff8d9b7034 RDI: 0000000000000001
[  188.826172][    C1] RBP: ffffc90006c47c40 R08: ffffffff8fa38237 R09: 1ffffffff1f47046
[  188.826176][    C1] R10: dffffc0000000000 R11: fffffbfff1f47047 R12: 0000000000000000
[  188.826180][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000d88f74
[  188.826190][    C1]  preempt_schedule_irq+0xb5/0x150
[  188.826199][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  188.826210][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  188.826218][    C1]  irqentry_exit+0x6f/0x90
[  188.826227][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.826234][    C1] RIP: 0010:__se_sys_perf_event_open+0x193a/0x1d70
[  188.826242][    C1] Code: 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 1a 03 00 00 48 8b 74 24 10 8b 96 0c 03 00 00 48 8b 5c 24 28 48 89 df e8 26 49 00 00 <48> 89 df e8 6e 22 ff ff 48 8b 7c 24 60 e8 84 e0 8a 09 80 7c 24 20
[  188.826247][    C1] RSP: 0018:ffffc90006c47d00 EFLAGS: 00000246
[  188.826252][    C1] RAX: 00d5c7e3d277b300 RBX: ffff888032c70800 RCX: 0000000000080000
[  188.826256][    C1] RDX: ffffc90003cc2000 RSI: 0000000000002813 RDI: 0000000000002814
[  188.826260][    C1] RBP: ffffc90006c47ee0 R08: ffffffff8fa38237 R09: 1ffffffff1f47046
[  188.826264][    C1] R10: dffffc0000000000 R11: fffffbfff1f47047 R12: ffff888032c70950
[  188.826268][    C1] R13: ffff88810f6144c0 R14: ffff888022551cc0 R15: 1ffff92000d88fb0
[  188.826283][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  188.826294][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  188.826303][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  188.826311][    C1]  ? irqentry_exit_to_user_mode+0xd1/0x120
[  188.826323][    C1]  ? do_syscall_64+0xbe/0x3b0
[  188.826332][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  188.826340][    C1]  do_syscall_64+0xfa/0x3b0
[  188.826349][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.826355][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.826401][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.826412][    C1] RIP: 0033:0x7f845658ebe9
[  188.826419][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.826424][    C1] RSP: 002b:00007f845739d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  188.826431][    C1] RAX: ffffffffffffffda RBX: 00007f84567c5fa0 RCX: 00007f845658ebe9
[  188.826435][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  188.826439][    C1] RBP: 00007f8456611e19 R08: 0000000000000000 R09: 0000000000000000
[  188.826443][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  188.826447][    C1] R13: 00007f84567c6038 R14: 00007f84567c5fa0 R15: 00007ffddb9c0858
[  188.826457][    C1]  </TASK>
[  189.218686][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 82491307753 wd_nsec: 82491309527
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  190.281314][ T5874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.363621][ T5874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.439638][ T5874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.518652][ T5874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.630305][ T5874] bridge_slave_1: left allmulticast mode
[  190.632984][ T5874] bridge_slave_1: left promiscuous mode
[  190.635951][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.645801][ T5874] bridge_slave_0: left allmulticast mode
[  190.649945][ T5874] bridge_slave_0: left promiscuous mode
[  190.652543][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.901124][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.906858][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.911518][ T5874] bond0 (unregistering): Released all slaves
[  191.247659][ T5874] hsr_slave_0: left promiscuous mode
[  191.258249][ T5874] hsr_slave_1: left promiscuous mode
[  191.260566][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.263643][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.267882][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.271107][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.288923][ T5874] veth1_macvtap: left promiscuous mode
[  191.291519][ T5874] veth0_macvtap: left promiscuous mode
[  191.293932][ T5874] veth1_vlan: left promiscuous mode
[  191.296116][ T5874] veth0_vlan: left promiscuous mode
[  191.620956][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  191.645973][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  192.134902][ T5874] ------------[ cut here ]------------
[  192.136863][ T5874] WARNING: CPU: 0 PID: 5874 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  192.141053][ T5874] Modules linked in:
[  192.142552][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  192.145607][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.149383][ T5874] Workqueue: netns cleanup_net
[  192.151139][ T5874] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  192.153446][ T5874] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 fa e1 f7 e8 e1 a0 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d3 a0 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  192.160184][ T5874] RSP: 0018:ffffc9000456f898 EFLAGS: 00010293
[  192.162211][ T5874] RAX: ffffffff8a221ccf RBX: ffff88810df3a440 RCX: ffff88801eda3980
[  192.164720][ T5874] RDX: 0000000000000000 RSI: ffffffff8dba631f RDI: ffff88801eda3980
[  192.167260][ T5874] RBP: ffffc9000456f9b0 R08: ffffffff8fa38237 R09: 1ffffffff1f47046
[  192.169975][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47047 R12: ffffffff8f630ea0
[  192.173099][ T5874] R13: 1ffff920008adf40 R14: ffff88810df3b8c0 R15: dffffc0000000000
[  192.175738][ T5874] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  192.179629][ T5874] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.182326][ T5874] CR2: 0000564f4aee8f20 CR3: 000000002a1a2000 CR4: 00000000000006f0
[  192.185629][ T5874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  192.188994][ T5874] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  192.192005][ T5874] Call Trace:
[  192.193200][ T5874]  <TASK>
[  192.194220][ T5874]  xfrm_net_exit+0x2d/0x70
[  192.195686][ T5874]  ops_undo_list+0x49a/0x990
[  192.197646][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[  192.199768][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[  192.201881][ T5874]  cleanup_net+0x4c5/0x800
[  192.203728][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[  192.205485][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.207410][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  192.209698][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  192.211925][ T5874]  process_scheduled_works+0xae1/0x17b0
[  192.213882][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[  192.215796][ T5874]  worker_thread+0x8a0/0xda0
[  192.217256][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.219624][ T5874]  ? __kthread_parkme+0x7b/0x200
[  192.221290][ T5874]  kthread+0x711/0x8a0
[  192.222999][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  192.225098][ T5874]  ? __pfx_kthread+0x10/0x10
[  192.226998][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.229505][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.231819][ T5874]  ? __pfx_kthread+0x10/0x10
[  192.233946][ T5874]  ret_from_fork+0x3fc/0x770
[  192.235869][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  192.238067][ T5874]  ? __switch_to_asm+0x39/0x70
[  192.239748][ T5874]  ? __switch_to_asm+0x33/0x70
[  192.241387][ T5874]  ? __pfx_kthread+0x10/0x10
[  192.243352][ T5874]  ret_from_fork_asm+0x1a/0x30
[  192.245106][ T5874]  </TASK>
[  192.246249][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  192.248828][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  192.251984][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.255454][ T5874] Workqueue: netns cleanup_net
[  192.257480][ T5874] Call Trace:
[  192.258926][ T5874]  <TASK>
[  192.260123][ T5874]  dump_stack_lvl+0x99/0x250
[  192.262020][ T5874]  ? __asan_memcpy+0x40/0x70
[  192.263951][ T5874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.266130][ T5874]  ? __pfx__printk+0x10/0x10
[  192.268027][ T5874]  vpanic+0x281/0x750
[  192.269611][ T5874]  ? __pfx__printk+0x10/0x10
[  192.271289][ T5874]  ? __pfx_vpanic+0x10/0x10
[  192.273256][ T5874]  ? is_bpf_text_address+0x292/0x2b0
[  192.275570][ T5874]  panic+0xb9/0xc0
[  192.277208][ T5874]  ? __pfx_panic+0x10/0x10
[  192.279185][ T5874]  __warn+0x31b/0x4b0
[  192.280977][ T5874]  ? xfrm_state_fini+0x270/0x2f0
[  192.283090][ T5874]  ? xfrm_state_fini+0x270/0x2f0
[  192.285092][ T5874]  report_bug+0x2be/0x4f0
[  192.286959][ T5874]  ? xfrm_state_fini+0x270/0x2f0
[  192.289053][ T5874]  ? xfrm_state_fini+0x270/0x2f0
[  192.291155][ T5874]  ? xfrm_state_fini+0x272/0x2f0
[  192.293289][ T5874]  handle_bug+0x84/0x160
[  192.295156][ T5874]  exc_invalid_op+0x1a/0x50
[  192.297135][ T5874]  asm_exc_invalid_op+0x1a/0x20
[  192.299195][ T5874] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  192.301609][ T5874] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 fa e1 f7 e8 e1 a0 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d3 a0 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  192.309444][ T5874] RSP: 0018:ffffc9000456f898 EFLAGS: 00010293
[  192.311864][ T5874] RAX: ffffffff8a221ccf RBX: ffff88810df3a440 RCX: ffff88801eda3980
[  192.315263][ T5874] RDX: 0000000000000000 RSI: ffffffff8dba631f RDI: ffff88801eda3980
[  192.318628][ T5874] RBP: ffffc9000456f9b0 R08: ffffffff8fa38237 R09: 1ffffffff1f47046
[  192.322029][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47047 R12: ffffffff8f630ea0
[  192.325454][ T5874] R13: 1ffff920008adf40 R14: ffff88810df3b8c0 R15: dffffc0000000000
[  192.328847][ T5874]  ? xfrm_state_fini+0x26f/0x2f0
[  192.330940][ T5874]  ? xfrm_state_fini+0x26f/0x2f0
[  192.333011][ T5874]  xfrm_net_exit+0x2d/0x70
[  192.334973][ T5874]  ops_undo_list+0x49a/0x990
[  192.336991][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[  192.339156][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[  192.341382][ T5874]  cleanup_net+0x4c5/0x800
[  192.343223][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[  192.345397][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.347642][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  192.350121][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  192.352584][ T5874]  process_scheduled_works+0xae1/0x17b0
[  192.354851][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[  192.357429][ T5874]  worker_thread+0x8a0/0xda0
[  192.359432][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.362101][ T5874]  ? __kthread_parkme+0x7b/0x200
[  192.364248][ T5874]  kthread+0x711/0x8a0
[  192.365967][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  192.368154][ T5874]  ? __pfx_kthread+0x10/0x10
[  192.370178][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.372454][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.374708][ T5874]  ? __pfx_kthread+0x10/0x10
[  192.376702][ T5874]  ret_from_fork+0x3fc/0x770
[  192.378711][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  192.380905][ T5874]  ? __switch_to_asm+0x39/0x70
[  192.382959][ T5874]  ? __switch_to_asm+0x33/0x70
[  192.384979][ T5874]  ? __pfx_kthread+0x10/0x10
[  192.386994][ T5874]  ret_from_fork_asm+0x1a/0x30
[  192.389090][ T5874]  </TASK>
[  192.391257][ T5874] Kernel Offset: disabled
[  192.393157][ T5874] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:13:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81c76878 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa38230 RBP=ffffc90000127c70 RSP=ffffc90000127b28
R8 =ffffffff8fa38237 R9 =1ffffffff1f47046 R10=dffffc0000000000 R11=fffffbfff1f47047
R12=0000000000000008 R13=0000000000000000 R14=ffff888121ac9e18 R15=ffff88801c6c3980
RIP=ffffffff822341f9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564f258e7028 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f9c27d97d20
XMM02=0000000500000007 080002a800000001 XMM03=ffffffffffe50802 b40304020002b203
XMM04=0000000000000000 0000000000000013 XMM05=0000000000000000 000000000003bf12
XMM06=4480a0100001e480 0401000000000007 XMM07=0168ce0000000000 e00350100001e4d0
XMM08=0300020002ce0300 0000000000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df170
R8 =ffff888106088237 R9 =1ffff11020c11046 R10=dffffc0000000000 R11=ffffffff854f33b0
R12=dffffc0000000000 R13=ffffffff99afa946 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f342c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f845739d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c25a0fb53 CR3=0000000033474000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000000f0602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
