last executing test programs:

1.153702142s ago: executing program 2 (id=1034):
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40040)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRESHEX=r1], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
close(r0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xff60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe06)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4a}, 0x40010021)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x2000, 0x4, 0x0, 0x1, 0x0, 0x418f, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

757.140899ms ago: executing program 0 (id=1039):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f00000000c0)=[{}, {}, {}], 0xd, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000004000000008000000200000090000000", @ANYRES32=r0, @ANYBLOB="d8593f3300"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="040000000000000700000000000000003ef25fd16acf30fb0c0dcb1752c655cc00000000000000d6249125016786d59a7d01d319b4d1000010000019948bf6ab5e146786e37c7ea1db8b3a00c15bd8d667bff045427d33ac05eb7f103b5e033a8e749d48561d32de435487e2915312fb8544b1ea432d0225184c775d37e8ae11dbd03d4d67c55aede5fd04b3da692a3b6ee9d0e4f61efed0baa96dbe654e7001eb5b50340f772c4fc0e63c3b9a3c56922179ab4d728830389ba6ed97339017c9689eab0bd3d5843451ef"], 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="a40f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000004000000000000000000000000000000005ca4a7"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="ff0f0000000000000000000000e5ffffff000000", @ANYBLOB="db3a7459a794599e15551a41cb605b785e8a09f605ba0d5607c955d90f2ef215e4e477bf0b1ec2b73ad1ed3adfa91739284cc18f5636819d5190ff13280af88c6bd81ea8c7d1c8551016599bef4b3eccde00eb1963141cea63d6e892de5399d2f13d2b4144cf2e63993f024875aa38001fe291df516f4e15c4a2fe181a114e1018ccced2228a24eae331668ae357bacad07823730b86e9893f58b55f", @ANYRES32=r2, @ANYRESHEX=r1], 0x50)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000080)=0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x65580000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000380)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xffffb13d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x35, 0x4a, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa2258, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5210, 0x1}, 0x2, 0x0, 0x400000, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000080)='.^\'[[#%\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r10)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x10141)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0xc2028, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0xc208, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

641.648021ms ago: executing program 2 (id=1040):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x3, 0x8001}, 0xc040, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socket$kcm(0x23, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

549.947513ms ago: executing program 0 (id=1042):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000040122000b000000d5100400", @ANYRES32, @ANYBLOB="08000000871961666c1cfdc3d4af4a49c8b3c2e7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x100})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, 0x0})
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)}, 0x20)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r7 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

545.981109ms ago: executing program 0 (id=1043):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0080008a00010000000000", @ANYRES32, @ANYBLOB="0000d70008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc804, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x83, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c5000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000ba7b00001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x8000)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, 0x1402, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044040)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x55, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

480.801338ms ago: executing program 0 (id=1044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_USER(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000ed03000326bd7000fddbdf259d1e23481a76e3ce7ab801c095d99ea2e982472770a76bf528efe945db262369ed029036bfbc61a3838458d7b2bf116ae0c0b225751297004b27ca49630f4c5b62d755106c3e96deb716cbf05d6635fc08c283e4ce6d587ed7e6826d2fee850ef91594b48783ea142d1c47f32d3386cae03cd9daf46c461fbcfb2665a10cb678673e2227653fa1305a8994aafdaa47ceb27cd69b37f2f92aa1dcac3877fe9dc720d0bc25446468e84e821db176ec44afa2e796f1d7cc4357e30f2bb1d4f5e303f44a72cd2c91"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004)
recvmsg$unix(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4102, 0x1006}], 0x1}, 0x2100)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x80409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5) (async)
close(r5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, 0x0, 0x25, 0x8, @val=@netfilter={0x7, 0x0, 0x3, 0x1}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7) (async)
close(r7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000010}, 0x0, 0xffffffffffffffff, r8, 0x8) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000010}, 0x0, 0xffffffffffffffff, r8, 0x8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0xfffc, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0xfffc, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4)
recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async)
recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES8=r9], 0x9a) (async)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES8=r9], 0x9a)

480.296429ms ago: executing program 2 (id=1045):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180500000000000000000000000d0000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207a0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

409.676943ms ago: executing program 2 (id=1046):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c023f00040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000440)={0x2, 0xb, 0x9, 0x6, 0x5, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x3, 0x7, 0x2b, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}]}, 0x28}}, 0x4000040)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
r3 = gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r3, 0x12)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300eaff040000000c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000020000181200", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f0000000900), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x10000)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8)
ioctl$SIOCSIFHWADDR(r11, 0x5760, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="186100000100000000000000040000001800000009000000000000000900000085000000d000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800006000000007020000f8ffffffb70300645182764f00080000000000000000008500000082000000852000c40b00000000000000000000009f5064615ce594dd5f139bcffc9a6fe1a53a320873c57c074c40f390acfb9ec5d8d192ee64a0354980e391f585c57018da1adaff8530e7464a1319ef6239b5cbd139e812463758f6019e11b3e5bcdb2f2ef8bcca52ec0179cccc31ccedeb2b14f5ffe8559fc245bbf9b686aa571d9f8a1f1796240d0afa23ccc272467451d61334fa75c61cd07b4ac6c039c758fffe8a38f72c785a"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, &(0x7f0000000480), 0x41100, 0x62, '\x00', r6, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0xd, 0x0, 0x800}, 0x10, 0x75, r5, 0x8, 0x0, &(0x7f0000000b40)=[{0x2, 0x1, 0x5, 0x1}, {0x2, 0x1, 0x0, 0x7}, {0x2, 0x3, 0x0, 0x2}, {0x5, 0x4, 0x1, 0x9}, {0x3, 0x2, 0xf, 0x4}, {0x5, 0x2, 0x5, 0x7}, {0x4, 0x4, 0x5, 0x7}, {0x0, 0x1, 0xf, 0x8}], 0x10, 0x80}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdece, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94)

349.75242ms ago: executing program 0 (id=1048):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0xfc5f}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002340)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000280)={0x2, 0x4e22, @private=0x9}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000500)=""/19, 0x13}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000000b40)=""/116, 0x74}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000540)=""/12, 0xc}], 0x8, &(0x7f0000000e40)=[@cswp={0x58, 0x114, 0x7, {{0x1a8c, 0x2}, &(0x7f0000000640)=0x100, &(0x7f0000000740)=0x5, 0x100000001, 0x1000, 0x10001, 0x0, 0x4c, 0x7fff}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffb, 0x4}, &(0x7f00000008c0)=0x8, &(0x7f0000000bc0)=0x7, 0x6, 0x8001, 0x4, 0x85, 0x0, 0x4}}], 0xb0, 0x200000a0}, 0x240d0) (async)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000280)={0x2, 0x4e22, @private=0x9}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000500)=""/19, 0x13}, {&(0x7f0000000940)=""/223, 0xdf}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000000b40)=""/116, 0x74}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000540)=""/12, 0xc}], 0x8, &(0x7f0000000e40)=[@cswp={0x58, 0x114, 0x7, {{0x1a8c, 0x2}, &(0x7f0000000640)=0x100, &(0x7f0000000740)=0x5, 0x100000001, 0x1000, 0x10001, 0x0, 0x4c, 0x7fff}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffb, 0x4}, &(0x7f00000008c0)=0x8, &(0x7f0000000bc0)=0x7, 0x6, 0x8001, 0x4, 0x85, 0x0, 0x4}}], 0xb0, 0x200000a0}, 0x240d0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100008, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84) (async)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4d2d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4d2d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001280)={{}, 0x0, 0x0}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000), 0x8) (async)
setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000), 0x8)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) (async)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400f20000000000611188000000000006000000000000009500000600000000"], &(0x7f0000000f40)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400f20000000000611188000000000006000000000000009500000600000000"], &(0x7f0000000f40)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

290.457282ms ago: executing program 2 (id=1050):
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x4, &(0x7f0000001540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd319f4b325069ca1, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

240.997945ms ago: executing program 2 (id=1052):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x20000000000002bc, &(0x7f0000000300)=ANY=[@ANYBLOB="375d0000000000006110b000000000086301080000000000e5ec76829917df078d3597eb6ad12f0e5db3fac6648e0e0d129026c56c2a32"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, &(0x7f0000000000)={0x1, 0x1}, 0x85}, 0x52)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x40, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000001692352e6e4405f405a54bbfdfdf69f28ac18cbc9f70aa6963000000b1000000344cf8ad7af9560a7ef3a2c49ebb0cdfbf734b37bad988d803b1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x111001, 0x0)
ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x40000300}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0xfe}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

239.444014ms ago: executing program 1 (id=1053):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x40007600)

157.018146ms ago: executing program 1 (id=1054):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000001400000004"], 0x20)

155.782673ms ago: executing program 0 (id=1055):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c023a02000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xb, 0x6, 0x30, 0x0, 0x25, 0x51161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
close(r8)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x9d38)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000001740)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000020)
r11 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x8, 0x3, 0xf8, 0x6, 0x0, 0x4, 0xc0b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xfe00000000000000, 0x487}, 0x2810, 0x2, 0x1, 0x7, 0xd72, 0xd6, 0x1, 0x0, 0x6, 0x0, 0xc}, r8, 0x4, r2, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r1)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a2043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

155.375665ms ago: executing program 1 (id=1056):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x5, 0xd4e, 0x4400, 0x1, 0x1, '\x00', 0x0, r1, 0x5, 0x1, 0x5}, 0x50)
close(r0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40007600)

83.708807ms ago: executing program 1 (id=1057):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3506}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x8, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x4, 0x9, 0x0, 0xa0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0xfdff, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x8000)

509.888µs ago: executing program 1 (id=1058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x200})
fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)
r2 = socket$netlink(0x10, 0x3, 0x6)
r3 = socket$kcm(0x29, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x8800)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x3c, 0x1002, 0x70bd2d, 0x25dfdbfe, {0x1d}, [@nested={0xc, 0x63, 0x0, 0x1, [@typed={0x8, 0xc9, 0x0, 0x0, @fd=r4}]}, @nested={0x4, 0xf9, 0x0, 0x1, [@generic]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000300))
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x4, 0xff, 0x80, r5, 0xe, '\x00', 0x0, r6, 0x1, 0x0, 0x0, 0x4}, 0x50)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x140f, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40041)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x8, 0x8, 0x2, 0x48, r5, 0xfffff91e, '\x00', 0x0, r6, 0x1, 0x1, 0x5}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x3, <r10=>0x0}, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={r5, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xf, 0x1a, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x3, 0x0, 0x2, 0xe, 0x9, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @jmp={0x5, 0x1, 0x6, 0xb, 0x1, 0x30, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000880)='GPL\x00', 0x7, 0x85, &(0x7f00000008c0)=""/133, 0x40f00, 0x20, '\x00', 0x0, @cgroup_device, r6, 0x8, &(0x7f0000000980)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x2, 0xd5e9, 0x100}, 0x10, r10, 0xffffffffffffffff, 0x6, &(0x7f0000000b40)=[r7, r11, r5, r5, r12, r7, r7, r5, r5, r5], &(0x7f0000000b80)=[{0x3, 0x5, 0xe, 0xd}, {0x3, 0x5, 0x5, 0xb}, {0x0, 0x3, 0xe, 0xc}, {0x0, 0x4, 0x6, 0xb}, {0x0, 0x2, 0x0, 0x8}, {0x5, 0x5, 0x7, 0x1}], 0x10, 0x1}, 0x94)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0xa, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4c000)
recvmsg$kcm(r3, &(0x7f0000001180)={&(0x7f0000000ec0)=@hci, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/214, 0xd6}], 0x1, &(0x7f0000001080)=""/203, 0xcb}, 0x141)
socket$kcm(0x29, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', r7}, 0x18)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001240)={0x6}, 0x8)
close(r4)

0s ago: executing program 1 (id=1059):
socket$kcm(0x10, 0x2, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/246, 0x1a, 0xf6, 0x1}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x100}, 0x12020)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17345' (ED25519) to the list of known hosts.
syzkaller login: [   56.501350][ T5831] cgroup: Unknown subsys name 'net'
[   56.607937][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.614408][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.828137][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.893291][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.904454][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.907977][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.911225][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.914301][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.028729][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.032520][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.035925][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.039654][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.042944][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.068283][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.072172][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.076090][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.080156][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.083784][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.273856][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.454273][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.456954][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.459208][ T5845] bridge_slave_0: entered allmulticast mode
[   64.461977][ T5845] bridge_slave_0: entered promiscuous mode
[   64.467073][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.469731][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.472382][ T5845] bridge_slave_1: entered allmulticast mode
[   64.475961][ T5845] bridge_slave_1: entered promiscuous mode
[   64.502832][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.521116][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.529353][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.579889][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.592167][ T5845] team0: Port device team_slave_0 added
[   64.596842][ T5845] team0: Port device team_slave_1 added
[   64.657469][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.659564][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.668076][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.673060][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.675911][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.683968][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.739035][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.741387][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.744303][ T5852] bridge_slave_0: entered allmulticast mode
[   64.747129][ T5852] bridge_slave_0: entered promiscuous mode
[   64.750743][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.753034][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.756339][ T5852] bridge_slave_1: entered allmulticast mode
[   64.759203][ T5852] bridge_slave_1: entered promiscuous mode
[   64.805289][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.807620][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.810527][ T5850] bridge_slave_0: entered allmulticast mode
[   64.815009][ T5850] bridge_slave_0: entered promiscuous mode
[   64.836508][ T5845] hsr_slave_0: entered promiscuous mode
[   64.838802][ T5845] hsr_slave_1: entered promiscuous mode
[   64.842814][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.846301][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.849143][ T5850] bridge_slave_1: entered allmulticast mode
[   64.852888][ T5850] bridge_slave_1: entered promiscuous mode
[   64.859744][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.875392][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.921334][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.925896][ T5852] team0: Port device team_slave_0 added
[   64.938325][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.946330][ T5852] team0: Port device team_slave_1 added
[   64.986720][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.989116][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.997245][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.010654][ T5850] team0: Port device team_slave_0 added
[   65.018855][ T5850] team0: Port device team_slave_1 added
[   65.039416][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.042113][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.051088][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.095971][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.098521][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.107309][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.133291][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.135913][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.145475][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.207047][ T5852] hsr_slave_0: entered promiscuous mode
[   65.210047][ T5852] hsr_slave_1: entered promiscuous mode
[   65.212792][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.216153][ T5852] Cannot create hsr debugfs directory
[   65.237922][ T5850] hsr_slave_0: entered promiscuous mode
[   65.241064][ T5850] hsr_slave_1: entered promiscuous mode
[   65.245077][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.247476][ T5850] Cannot create hsr debugfs directory
[   65.402062][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.422478][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.442251][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.459077][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.600838][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.606478][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.610922][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.620291][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.706765][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.721963][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.730697][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.748415][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.781382][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.800141][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.813459][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.832290][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.838086][  T465] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.841116][  T465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.859611][  T465] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.862338][  T465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.867911][  T465] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.870136][  T465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.884431][  T465] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.887179][  T465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.949666][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.988218][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.999656][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.001812][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.017282][   T54] Bluetooth: hci0: command tx timeout
[   66.017588][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.022039][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.041743][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.047653][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.085998][   T54] Bluetooth: hci1: command tx timeout
[   66.129545][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.176855][   T54] Bluetooth: hci2: command tx timeout
[   66.192012][ T5845] veth0_vlan: entered promiscuous mode
[   66.208356][ T5845] veth1_vlan: entered promiscuous mode
[   66.227396][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.253088][ T5845] veth0_macvtap: entered promiscuous mode
[   66.276291][ T5845] veth1_macvtap: entered promiscuous mode
[   66.292668][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.322609][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.330493][ T5850] veth0_vlan: entered promiscuous mode
[   66.334442][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.349972][ T5894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.354356][ T5894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.358024][ T5894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.367691][ T5894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.376997][ T5850] veth1_vlan: entered promiscuous mode
[   66.438708][ T5852] veth0_vlan: entered promiscuous mode
[   66.460764][ T5852] veth1_vlan: entered promiscuous mode
[   66.497042][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.500081][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.518565][ T5850] veth0_macvtap: entered promiscuous mode
[   66.527978][ T5852] veth0_macvtap: entered promiscuous mode
[   66.544507][ T5850] veth1_macvtap: entered promiscuous mode
[   66.559686][ T5852] veth1_macvtap: entered promiscuous mode
[   66.584594][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.587710][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.591332][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.609587][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.624680][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.636369][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.654676][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.658897][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.670525][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.675409][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.687962][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.699825][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.712768][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.718152][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.721571][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.856389][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.859552][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.904486][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.907261][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.942189][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.954050][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.969311][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.973795][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.068132][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.072282][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.078703][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.093247][ T5918] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   67.096808][ T5919] =======================================================
[   67.096808][ T5919] WARNING: The mand mount option has been deprecated and
[   67.096808][ T5919]          and is ignored by this kernel. Remove the mand
[   67.096808][ T5919]          option from the mount to silence this warning.
[   67.096808][ T5919] =======================================================
[   67.110979][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.114949][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.138733][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.141624][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.145286][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.148156][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.159173][ T5918] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   67.225910][ T5923] Zero length message leads to an empty skb
[   67.240891][ T5919] tap0: tun_chr_ioctl cmd 21731
[   67.566009][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9'.
[   67.582195][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.582304][ T5934] netlink: 'syz.2.9': attribute type 1 has an invalid length.
[   67.598801][ T5934] netlink: 'syz.2.9': attribute type 2 has an invalid length.
[   67.601092][ T5934] netlink: 'syz.2.9': attribute type 4 has an invalid length.
[   67.603340][ T5934] netlink: 'syz.2.9': attribute type 1 has an invalid length.
[   67.615059][ T5934] netlink: 'syz.2.9': attribute type 2 has an invalid length.
[   67.617820][ T5934] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.9'.
[   67.621203][ T5934] netlink: 'syz.2.9': attribute type 1 has an invalid length.
[   67.645124][ T5934] netlink: 'syz.2.9': attribute type 2 has an invalid length.
[   67.801813][ T5945] Driver unsupported XDP return value 0 on prog  (id 8) dev N/A, expect packet loss!
[   67.803261][    C1] hrtimer: interrupt took 33637 ns
[   68.084101][   T54] Bluetooth: hci0: command tx timeout
[   68.163813][   T54] Bluetooth: hci1: command tx timeout
[   68.257583][   T54] Bluetooth: hci2: command tx timeout
[   68.741271][ T5970] netlink: 'syz.0.21': attribute type 1 has an invalid length.
[   68.752792][ T5970] syzkaller0: entered promiscuous mode
[   68.758731][ T5970] syzkaller0: entered allmulticast mode
[   68.791336][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20'.
[   68.800224][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.819056][ T5972] bridge_slave_0 (unregistering): left allmulticast mode
[   68.821919][ T5972] bridge_slave_0 (unregistering): left promiscuous mode
[   68.824991][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.911175][ T5974] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.460779][ T5990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.464654][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.477207][ T5989] netlink: 'syz.1.28': attribute type 1 has an invalid length.
[   69.494694][ T5989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.499071][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.997608][ T6002] openvswitch: netlink: IP tunnel TTL not specified.
[   70.166389][   T54] Bluetooth: hci0: command tx timeout
[   70.272045][   T54] Bluetooth: hci1: command tx timeout
[   70.473712][   T54] Bluetooth: hci2: command tx timeout
[   71.126666][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.130439][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.738370][ T6038] openvswitch: netlink: Message has 24 unknown bytes.
[   72.244047][   T54] Bluetooth: hci0: command tx timeout
[   72.323782][   T54] Bluetooth: hci1: command tx timeout
[   72.401678][ T6060] __nla_validate_parse: 6 callbacks suppressed
[   72.401693][ T6060] netlink: 76 bytes leftover after parsing attributes in process `syz.0.50'.
[   72.486540][   T54] Bluetooth: hci2: command tx timeout
[   72.668062][ T6070] validate_nla: 1 callbacks suppressed
[   72.668124][ T6070] netlink: 'syz.2.52': attribute type 9 has an invalid length.
[   72.684406][ T6077] netlink: 104 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.701887][ T6077] IPv6: Can't replace route, no match found
[   72.710133][ T6070] netlink: 211924 bytes leftover after parsing attributes in process `syz.2.52'.
[   72.757548][ T6070] netlink: 'syz.2.52': attribute type 39 has an invalid length.
[   73.088889][ T6088] netlink: 'syz.1.59': attribute type 10 has an invalid length.
[   73.108551][ T6088] netlink: 55 bytes leftover after parsing attributes in process `syz.1.59'.
[   73.180370][ T6092] delete_channel: no stack
[   73.540603][ T6104] netlink: 'syz.2.63': attribute type 10 has an invalid length.
[   73.545400][ T6104] netlink: 55 bytes leftover after parsing attributes in process `syz.2.63'.
[   73.612231][ T6105] delete_channel: no stack
[   73.769454][ T6093] netlink: 'syz.0.60': attribute type 28 has an invalid length.
[   73.773285][ T6093] netlink: 2 bytes leftover after parsing attributes in process `syz.0.60'.
[   74.366601][ T6107] syz.0.64 (6107) used greatest stack depth: 18232 bytes left
[   74.456201][ T6112] netlink: 56 bytes leftover after parsing attributes in process `syz.0.65'.
[   74.732830][ T6125] netlink: 'syz.2.68': attribute type 2 has an invalid length.
[   74.741538][ T6125] netlink: 'syz.2.68': attribute type 3 has an invalid length.
[   74.747015][ T6125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.68'.
[   74.886905][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.71'.
[   74.890800][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.71'.
[   74.921495][ T6129] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   75.014926][   T33] audit: type=1107 audit(1758753833.227:2): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   75.216091][ T6158] netlink: 'syz.1.81': attribute type 28 has an invalid length.
[   75.571982][ T6166] syzkaller0: entered promiscuous mode
[   75.574240][ T6166] syzkaller0: entered allmulticast mode
[   78.469980][ T6178] __nla_validate_parse: 5 callbacks suppressed
[   78.469995][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'.
[   78.482044][ T6178] netlink: 108 bytes leftover after parsing attributes in process `syz.2.88'.
[   78.494517][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'.
[   78.497535][ T6178] netlink: 108 bytes leftover after parsing attributes in process `syz.2.88'.
[   78.500254][ T6178] netlink: 84 bytes leftover after parsing attributes in process `syz.2.88'.
[   79.800393][ T6200] netlink: 348 bytes leftover after parsing attributes in process `syz.2.95'.
[   79.809517][ T6195] netlink: 'syz.0.93': attribute type 21 has an invalid length.
[   80.396535][ T6209] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   80.411991][ T6209] netlink: 'syz.2.97': attribute type 2 has an invalid length.
[   80.478109][ T6214] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[   80.481262][ T6214] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   80.486537][ T6214] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   80.489509][ T6214] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   83.367318][ T6280] netlink: 'syz.2.119': attribute type 1 has an invalid length.
[   83.375380][ T6280] netlink: 'syz.2.119': attribute type 2 has an invalid length.
[   83.378807][ T6280] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.119'.
[   83.389495][ T6279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.494433][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.123'.
[   83.497998][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.123'.
[   83.990221][   T54] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[   84.701919][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.130'.
[   84.705812][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.130'.
[   84.747439][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[   84.751457][ T6318] netlink: 116 bytes leftover after parsing attributes in process `syz.0.129'.
[   85.165334][ T6326] netlink: 'syz.1.135': attribute type 29 has an invalid length.
[   85.169352][ T6326] netlink: 'syz.1.135': attribute type 29 has an invalid length.
[   85.182559][ T6326] netlink: 'syz.1.135': attribute type 29 has an invalid length.
[   85.213367][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'.
[   85.226940][ T6326] netlink: 10 bytes leftover after parsing attributes in process `syz.1.135'.
[   85.229855][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[   85.238338][ T6326] netlink: 'syz.1.135': attribute type 13 has an invalid length.
[   85.243155][ T6326] netlink: 'syz.1.135': attribute type 17 has an invalid length.
[   85.253448][ T6330] netlink: 84 bytes leftover after parsing attributes in process `syz.2.134'.
[   85.394245][ T6326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.176229][ T6353] netlink: 'syz.0.140': attribute type 11 has an invalid length.
[   86.310676][ T6346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.489388][   T95] cfg80211: failed to load regulatory.db
[   88.135348][ T6393] netlink: 'syz.1.155': attribute type 21 has an invalid length.
[   89.259132][ T6431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.310703][ T6440] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.681810][ T6456] syzkaller0: entered promiscuous mode
[   89.687793][ T6456] syzkaller0: entered allmulticast mode
[   90.102018][ T6482] netlink: 'syz.2.184': attribute type 4 has an invalid length.
[   90.105568][ T6482] __nla_validate_parse: 7 callbacks suppressed
[   90.105580][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   90.505236][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   90.658932][ T6502] netlink: 84 bytes leftover after parsing attributes in process `syz.2.190'.
[   91.216459][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'.
[   91.223246][ T6524] netlink: 84 bytes leftover after parsing attributes in process `syz.2.197'.
[   91.285794][ T6530] netlink: 'syz.0.198': attribute type 10 has an invalid length.
[   91.289138][ T6530] netlink: 55 bytes leftover after parsing attributes in process `syz.0.198'.
[   91.307237][   T33] audit: type=1107 audit(1758753849.527:3): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='(k*Ԫ;>8bgdybY[O+J+@<fadPRy)ܖ,He'
[   91.353445][ T6537] delete_channel: no stack
[   91.610655][ T6548] openvswitch: netlink: Flow actions attr not present in new flow.
[   92.228041][ T6559] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   92.230749][ T6559] netlink: 17 bytes leftover after parsing attributes in process `syz.0.208'.
[   92.231288][ T6561] netlink: 124 bytes leftover after parsing attributes in process `syz.2.209'.
[   92.238283][ T6561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.209'.
[   92.342236][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[   93.023246][ T6587] netlink: 'syz.0.218': attribute type 1 has an invalid length.
[   93.027105][ T6587] netlink: 'syz.0.218': attribute type 2 has an invalid length.
[   93.441942][ T6599] bond_slave_1: mtu less than device minimum
[   93.577146][ T6611] erspan0 speed is unknown, defaulting to 1000
[   93.580203][ T6611] erspan0 speed is unknown, defaulting to 1000
[   93.587323][ T6613] rdma_rxe: rxe_newlink: failed to add erspan0
[   93.593031][ T6611] erspan0 speed is unknown, defaulting to 1000
[   93.740667][   T10] erspan0 speed is unknown, defaulting to 1000
[   93.743402][ T6611] infiniband syz2: set active
[   93.747643][ T6611] infiniband syz2: added erspan0
[   93.752010][ T6611] syz2: rxe_create_cq: returned err = -12
[   93.756056][ T6611] infiniband syz2: Couldn't create ib_mad CQ
[   93.758147][ T6611] infiniband syz2: Couldn't open port 1
[   93.781774][ T6611] RDS/IB: syz2: added
[   93.786205][ T6611] smc: adding ib device syz2 with port count 1
[   93.788410][ T6611] smc:    ib device syz2 port 1 has pnetid 
[   93.791195][ T2205] erspan0 speed is unknown, defaulting to 1000
[   93.800703][ T6611] erspan0 speed is unknown, defaulting to 1000
[   94.015109][ T6611] erspan0 speed is unknown, defaulting to 1000
[   94.156559][ T6611] erspan0 speed is unknown, defaulting to 1000
[   94.600264][   T33] audit: type=1107 audit(1758753852.817:4): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='
[   94.600264][   T33] 
[   94.600264][   T33] zieTUPkXdI0AǹRD˹A)73}5QHP.jZΩϔ+DX&;֫䮫E}.H5a5A=ĉoMwS=[V7-eXGW0*}:$KL~/8S^Na	qx/ZJOCׂ͞2,WS]`Y'
[   94.698164][ T6659] syz.0.240 uses obsolete (PF_INET,SOCK_PACKET)
[   95.408732][ T6705] __nla_validate_parse: 11 callbacks suppressed
[   95.408742][ T6705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.255'.
[   95.415684][ T6705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.255'.
[   95.419627][ T6705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.255'.
[   95.573674][ T6708] netlink: 56 bytes leftover after parsing attributes in process `syz.1.256'.
[   96.072123][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'.
[   96.076555][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'.
[   96.080228][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.257'.
[   96.295232][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'.
[   96.621298][ T6734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'.
[   96.788046][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.267'.
[   97.065591][ T6751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.571974][ T6765] netlink: 'syz.1.275': attribute type 11 has an invalid length.
[   97.666428][ T6754] syz.0.272 (6754) used greatest stack depth: 18088 bytes left
[   97.674485][ T6764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.748077][ T6774] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   98.012061][ T6784] netlink: 'syz.0.279': attribute type 3 has an invalid length.
[   98.017672][ T6784] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[   98.049332][ T6784] netlink: 'syz.0.279': attribute type 8 has an invalid length.
[   98.065977][ T6784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.138163][ T6795] sit0: entered allmulticast mode
[   98.191812][ T6795] sit0: entered promiscuous mode
[  100.068667][ T6826] netlink: 'syz.0.291': attribute type 3 has an invalid length.
[  100.071528][ T6826] netlink: 'syz.0.291': attribute type 16 has an invalid length.
[  100.355933][   T54] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  100.706067][ T6837] __nla_validate_parse: 20 callbacks suppressed
[  100.706084][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'.
[  100.712561][ T6836] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'.
[  100.716776][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'.
[  102.054463][ T6847] delete_channel: no stack
[  104.612224][ T6870] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  104.927731][ T6892] netlink: 124 bytes leftover after parsing attributes in process `syz.2.311'.
[  104.930407][ T6892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.311'.
[  104.962455][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.312'.
[  104.967771][ T6895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.312'.
[  104.970969][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.312'.
[  105.269851][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'.
[  105.347174][ T6915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  105.816260][ T6920] netlink: 200 bytes leftover after parsing attributes in process `syz.2.320'.
[  106.304237][ T6920] erspan0 speed is unknown, defaulting to 1000
[  107.696055][ T6936] erspan0 speed is unknown, defaulting to 1000
[  108.714245][ T6939] netlink: 'syz.1.327': attribute type 10 has an invalid length.
[  109.010976][ T6945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.329'.
[  109.036478][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.329'.
[  109.053019][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.329'.
[  109.415749][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'.
[  109.471241][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'.
[  109.518665][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'.
[  109.740828][ T6954] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.333'.
[  109.922213][ T6961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.336'.
[  109.934016][ T6961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.336'.
[  111.611427][ T6994] __nla_validate_parse: 2 callbacks suppressed
[  111.611443][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.346'.
[  111.659203][ T6996] netlink: 64 bytes leftover after parsing attributes in process `syz.1.347'.
[  112.035395][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[  112.318863][ T7017] cgroup2: Unknown parameter 'u'
[  112.322488][ T7017] netlink: 'syz.0.353': attribute type 2 has an invalid length.
[  112.328006][ T7018] netlink: 'syz.0.353': attribute type 2 has an invalid length.
[  112.420533][ T7024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.354'.
[  112.426220][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.354'.
[  112.432778][ T7024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.354'.
[  112.538402][ T7033] netlink: 'syz.0.360': attribute type 21 has an invalid length.
[  112.541523][ T7033] netlink: 128 bytes leftover after parsing attributes in process `syz.0.360'.
[  112.545818][ T7033] netlink: 'syz.0.360': attribute type 4 has an invalid length.
[  112.548714][ T7033] netlink: 'syz.0.360': attribute type 3 has an invalid length.
[  112.551818][ T7033] netlink: 3 bytes leftover after parsing attributes in process `syz.0.360'.
[  113.662151][ T7066] netlink: 14 bytes leftover after parsing attributes in process `syz.0.370'.
[  113.751624][ T7068] openvswitch: netlink: EtherType 50a is less than min 600
[  113.816616][ T7073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.372'.
[  113.985580][ T7077] netlink: 'syz.1.374': attribute type 40 has an invalid length.
[  114.545836][ T7110] netlink: 'syz.1.386': attribute type 1 has an invalid length.
[  115.046022][ T7105] netlink: 'syz.2.384': attribute type 9 has an invalid length.
[  115.170773][ T7139] netlink: 'syz.2.398': attribute type 10 has an invalid length.
[  116.717735][ T7152] __nla_validate_parse: 16 callbacks suppressed
[  116.717775][ T7152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'.
[  116.831171][   T54] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  116.834921][   T54] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  117.052525][ T7169] netlink: 148 bytes leftover after parsing attributes in process `syz.2.408'.
[  117.281556][ T7181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.287165][ T7181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.436844][ T7185] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.413'.
[  117.518378][ T7187] netlink: 'syz.2.414': attribute type 10 has an invalid length.
[  117.970322][ T7189] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.415'.
[  118.549501][   T33] audit: type=1107 audit(1758753876.767:5): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  123.567139][ T7245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.430'.
[  123.573956][ T7241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.430'.
[  123.580533][ T7245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.430'.
[  124.090779][ T7254] netlink: 10 bytes leftover after parsing attributes in process `syz.1.434'.
[  124.616988][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'.
[  124.620967][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'.
[  124.830236][ T7304] netlink: 'syz.0.445': attribute type 10 has an invalid length.
[  124.833773][ T7304] netlink: 55 bytes leftover after parsing attributes in process `syz.0.445'.
[  124.935521][ T7304] delete_channel: no stack
[  124.942206][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'.
[  124.985422][ T7310] netlink: 'syz.1.449': attribute type 31 has an invalid length.
[  125.115756][ T7317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.450'.
[  125.119697][ T7316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.450'.
[  125.219201][ T7321] netlink: 'syz.1.452': attribute type 10 has an invalid length.
[  125.221339][ T7326] netlink: 'syz.2.453': attribute type 21 has an invalid length.
[  125.229370][ T7321] veth1_macvtap: left promiscuous mode
[  125.281287][ T7326] netlink: 'syz.2.453': attribute type 4 has an invalid length.
[  125.526467][ T7339] netlink: 'syz.1.457': attribute type 11 has an invalid length.
[  125.713346][ T7349] netlink: 'syz.0.459': attribute type 3 has an invalid length.
[  125.717256][ T7349] netlink: 'syz.0.459': attribute type 1 has an invalid length.
[  126.411525][ T7381] netlink: 'syz.1.471': attribute type 13 has an invalid length.
[  126.415274][ T7383] netlink: 'syz.1.471': attribute type 13 has an invalid length.
[  127.731004][ T7410] xt_socket: unknown flags 0x6
[  127.781665][ T7410] openvswitch: netlink: Invalid VLAN frame
[  127.912873][ T7423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.921662][ T7424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.305761][ T7445] __nla_validate_parse: 20 callbacks suppressed
[  129.305778][ T7445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.485'.
[  129.425980][ T7467] netlink: 168 bytes leftover after parsing attributes in process `syz.1.491'.
[  129.686775][ T7485] openvswitch: netlink: Key type 50 is out of range max 32
[  129.820005][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[  129.894116][ T7494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'.
[  129.898191][ T7492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'.
[  129.902569][ T7494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'.
[  129.957160][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'.
[  130.014181][   T33] audit: type=1107 audit(1758753888.227:6): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  130.014181][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  130.014181][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  130.014181][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  130.531957][ T7527] bridge0: port 3(syz_tun) entered blocking state
[  130.585218][ T7527] bridge0: port 3(syz_tun) entered disabled state
[  130.587994][ T7527] syz_tun: entered allmulticast mode
[  130.598233][ T7527] syz_tun: entered promiscuous mode
[  130.601245][ T7527] bridge0: port 3(syz_tun) entered blocking state
[  130.603570][ T7527] bridge0: port 3(syz_tun) entered forwarding state
[  130.706951][ T7532] _Z`Ԁ@S: entered promiscuous mode
[  131.185112][ T7566] validate_nla: 3 callbacks suppressed
[  131.185127][ T7566] netlink: 'syz.1.521': attribute type 32 has an invalid length.
[  131.191162][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.521'.
[  131.196953][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.521'.
[  131.204039][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.521'.
[  131.410482][   T33] audit: type=1107 audit(1758753889.627:7): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':9[=SԷQ
[  131.410482][   T33] %=jH_P#d)t^$bFm/R`Oh)B9]XB,ˬ+·9>qY?_ZٝشV6.X*j.qoˌk2m~LYS_pkhDz'
[  131.927161][ T7581] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  132.567931][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.570363][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.687881][ T7638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.708164][ T7635] delete_channel: no stack
[  132.747503][ T7642] netlink: 'syz.2.545': attribute type 31 has an invalid length.
[  132.890286][ T7661] xt_socket: unknown flags 0x40
[  132.970327][ T7665] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  133.615143][ T7711] openvswitch: netlink: Flow actions attr not present in new flow.
[  133.722188][ T7717] netlink: 'syz.2.568': attribute type 10 has an invalid length.
[  133.726961][ T7717] bond0: entered promiscuous mode
[  133.728496][ T7717] bond_slave_0: entered promiscuous mode
[  133.730570][ T7717] bond_slave_1: entered promiscuous mode
[  133.732737][ T7717] bridge0: port 1(bond0) entered blocking state
[  133.737265][ T7717] bridge0: port 1(bond0) entered disabled state
[  133.743901][ T7717] bond0: entered allmulticast mode
[  133.745694][ T7717] bond_slave_0: entered allmulticast mode
[  133.747493][ T7717] bond_slave_1: entered allmulticast mode
[  133.750994][ T7717] bridge0: port 1(bond0) entered blocking state
[  133.752971][ T7717] bridge0: port 1(bond0) entered forwarding state
[  134.797664][ T7728] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  135.054990][ T7743] __nla_validate_parse: 34 callbacks suppressed
[  135.055014][ T7743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.576'.
[  135.061518][ T7742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.576'.
[  135.116770][ T7745] TCP: TCP_TX_DELAY enabled
[  135.168498][ T7745] netlink: 'syz.1.577': attribute type 16 has an invalid length.
[  135.170956][ T7745] netlink: 156 bytes leftover after parsing attributes in process `syz.1.577'.
[  135.181368][ T7745] netlink: 809 bytes leftover after parsing attributes in process `syz.1.577'.
[  135.185300][ T7745] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.577'.
[  135.189082][ T7745] netlink: 809 bytes leftover after parsing attributes in process `syz.1.577'.
[  135.905560][ T7778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.589'.
[  135.915278][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.589'.
[  135.945515][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.589'.
[  135.981717][ T7781] netlink: 60 bytes leftover after parsing attributes in process `syz.1.588'.
[  136.352723][ T7792] netlink: 'syz.1.593': attribute type 29 has an invalid length.
[  136.367867][ T7789] netlink: 'syz.1.593': attribute type 29 has an invalid length.
[  137.239105][ T7832] nbd: must specify an index to disconnect
[  137.316553][ T7833] delete_channel: no stack
[  138.609959][ T7878] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  138.617220][ T7878] netlink: 'syz.2.619': attribute type 2 has an invalid length.
[  139.617672][ T7900] netlink: 'syz.2.625': attribute type 10 has an invalid length.
[  139.632563][ T7900] dummy0: entered promiscuous mode
[  139.634544][ T7900] dummy0: entered allmulticast mode
[  139.636535][ T7900] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  139.812355][ T7905] netlink: 'syz.1.628': attribute type 10 has an invalid length.
[  141.482552][ T7961] __nla_validate_parse: 15 callbacks suppressed
[  141.482569][ T7961] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.643'.
[  141.522426][ T7961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.525471][ T7961] IPv6: NLM_F_CREATE should be set when creating new route
[  141.528459][ T7961] IPv6: NLM_F_CREATE should be set when creating new route
[  141.531420][ T7961] IPv6: NLM_F_CREATE should be set when creating new route
[  141.649426][ T7981] delete_channel: no stack
[  141.661047][ T7980] delete_channel: no stack
[  141.915325][ T7987] netlink: 'syz.2.650': attribute type 21 has an invalid length.
[  141.917868][ T7987] IPv6: NLM_F_CREATE should be specified when creating new route
[  141.922042][ T7987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.924786][ T7987] IPv6: NLM_F_CREATE should be set when creating new route
[  141.927949][ T7987] IPv6: NLM_F_CREATE should be set when creating new route
[  141.931210][ T7987] IPv6: NLM_F_CREATE should be set when creating new route
[  142.358602][ T8009] netlink: 'syz.1.655': attribute type 21 has an invalid length.
[  142.362004][ T8009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.655'.
[  142.453048][ T8016] netlink: 'syz.1.657': attribute type 9 has an invalid length.
[  142.455936][ T8016] netlink: 'syz.1.657': attribute type 11 has an invalid length.
[  142.458941][ T8016] netlink: 147436 bytes leftover after parsing attributes in process `syz.1.657'.
[  142.590924][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  142.716919][ T8034] netlink: 'syz.1.663': attribute type 23 has an invalid length.
[  142.761010][ T8034] netlink: 'syz.1.663': attribute type 12 has an invalid length.
[  142.768229][ T8034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.663'.
[  142.815414][ T8037] syzkaller0: entered promiscuous mode
[  142.817494][ T8037] syzkaller0: entered allmulticast mode
[  143.877891][ T8045] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.666'.
[  144.251330][ T8063] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.673'.
[  144.705244][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'.
[  145.132930][ T8084] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  145.398626][ T8095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  145.402513][ T8094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  145.573003][ T8113] netlink: 'syz.2.689': attribute type 4 has an invalid length.
[  145.738812][ T8119] bpf: Bad value for 'mode'
[  146.847420][ T8136] __nla_validate_parse: 3 callbacks suppressed
[  146.847432][ T8136] netlink: 72 bytes leftover after parsing attributes in process `syz.2.696'.
[  146.852371][ T8136] netlink: 72 bytes leftover after parsing attributes in process `syz.2.696'.
[  147.074300][ T8146] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.699'.
[  147.081341][ T8146] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.699'.
[  147.086803][ T8146] netlink: 180 bytes leftover after parsing attributes in process `syz.0.699'.
[  147.545199][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.704'.
[  147.549270][ T8160] netlink: 60 bytes leftover after parsing attributes in process `syz.1.704'.
[  147.759545][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.763706][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.769001][ T8170] bridge0: entered allmulticast mode
[  148.132395][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'.
[  148.404159][ T8190] netlink: 'syz.1.714': attribute type 2 has an invalid length.
[  148.406714][ T8190] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  148.413217][ T8190] netlink: 'syz.1.714': attribute type 10 has an invalid length.
[  148.732812][ T8207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.788617][   T54] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  148.895251][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'.
[  148.901536][ T8210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.720'.
[  150.026961][ T8261] netlink: 'syz.1.737': attribute type 12 has an invalid length.
[  151.207352][ T8299] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  151.394882][ T8310] netlink: 'syz.0.749': attribute type 16 has an invalid length.
[  151.929971][ T8327] netlink: 'syz.0.755': attribute type 10 has an invalid length.
[  152.854632][ T8335] netlink: 'syz.2.758': attribute type 13 has an invalid length.
[  152.857990][ T8335] netlink: 'syz.2.758': attribute type 17 has an invalid length.
[  153.231787][ T8357] __nla_validate_parse: 11 callbacks suppressed
[  153.231802][ T8357] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.764'.
[  153.390908][ T8335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.307953][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'.
[  154.462145][ T8383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.465463][ T8383] IPv6: NLM_F_CREATE should be set when creating new route
[  154.469088][ T8383] IPv6: NLM_F_CREATE should be set when creating new route
[  154.985304][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.779'.
[  154.989383][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.779'.
[  155.302877][ T8418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.786'.
[  155.309970][ T8416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.786'.
[  155.318566][ T8416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.786'.
[  155.369189][ T8423] netlink: 'syz.0.788': attribute type 22 has an invalid length.
[  155.371995][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'.
[  155.396138][ T8422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.788'.
[  155.399846][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'.
[  155.578572][ T8435] sctp: [Deprecated]: syz.1.790 (pid 8435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.578572][ T8435] Use struct sctp_sack_info instead
[  155.997905][ T8443] netlink: 'syz.0.795': attribute type 2 has an invalid length.
[  156.000934][ T8443] netlink: 'syz.0.795': attribute type 11 has an invalid length.
[  156.228243][ T8459] syzkaller0: entered promiscuous mode
[  156.229991][ T8459] syzkaller0: entered allmulticast mode
[  156.367363][ T8468] netlink: 'syz.2.801': attribute type 10 has an invalid length.
[  156.679657][ T8491] netlink: 'syz.0.813': attribute type 9 has an invalid length.
[  156.746639][ T8491] netlink: 'syz.0.813': attribute type 13 has an invalid length.
[  156.749712][ T8491] netlink: 'syz.0.813': attribute type 17 has an invalid length.
[  156.805261][ T8491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.902535][   T54] Bluetooth: hci0: Malformed Event: 0x13
[  157.438073][ T8534] unsupported nlmsg_type 40
[  157.863379][ T8575] netlink: 'syz.2.844': attribute type 10 has an invalid length.
[  157.870402][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.917697][ T8586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.047611][ T8617] __nla_validate_parse: 27 callbacks suppressed
[  159.047683][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'.
[  159.339800][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  159.374517][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'.
[  159.378088][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'.
[  159.432272][ T8647] netlink: 'syz.1.868': attribute type 10 has an invalid length.
[  159.435689][ T8647] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.868'.
[  159.485546][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'.
[  159.585216][ T8657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.870'.
[  159.588334][ T8653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.870'.
[  159.596742][ T8653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.870'.
[  159.798616][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'.
[  159.918035][ T8679] netlink: 'syz.0.879': attribute type 13 has an invalid length.
[  159.936851][ T8679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.020775][ T8716] validate_nla: 3 callbacks suppressed
[  161.020785][ T8716] netlink: 'syz.1.892': attribute type 10 has an invalid length.
[  161.299777][ T8725] netlink: 'syz.1.895': attribute type 13 has an invalid length.
[  161.313926][ T8725] netlink: 'syz.1.895': attribute type 17 has an invalid length.
[  161.319544][ T8725] sit0: left promiscuous mode
[  161.321453][ T8725] sit0: left allmulticast mode
[  161.337431][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.339820][ T8725] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.342312][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.344671][ T8725] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.355175][ T8725] bridge0: left allmulticast mode
[  161.426385][ T8725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.431168][ T2205] erspan0 speed is unknown, defaulting to 1000
[  161.989947][ T8757] openvswitch: netlink: IP tunnel dst address not specified
[  162.121305][ T8767] netlink: 'syz.1.906': attribute type 13 has an invalid length.
[  162.125470][ T8767] netlink: 'syz.1.906': attribute type 17 has an invalid length.
[  162.131443][ T8767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.151992][ T8771] sit0: entered allmulticast mode
[  162.156899][ T8771] sit0: entered promiscuous mode
[  162.283019][ T8776] syzkaller0: entered promiscuous mode
[  162.287348][ T8776] syzkaller0: entered allmulticast mode
[  162.821617][ T8756] delete_channel: no stack
[  163.528459][ T8786] syz.2.912: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  163.536060][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.2.912 Not tainted syzkaller #0 PREEMPT(full) 
[  163.536080][ T8786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.536089][ T8786] Call Trace:
[  163.536094][ T8786]  <TASK>
[  163.536101][ T8786]  dump_stack_lvl+0x189/0x250
[  163.536125][ T8786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.536142][ T8786]  ? __pfx__printk+0x10/0x10
[  163.536162][ T8786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  163.536180][ T8786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  163.536197][ T8786]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  163.536215][ T8786]  warn_alloc+0x214/0x310
[  163.536236][ T8786]  ? __pfx_warn_alloc+0x10/0x10
[  163.536258][ T8786]  ? __get_vm_area_node+0x28f/0x300
[  163.536272][ T8786]  ? hash_netportnet_create+0x354/0xf90
[  163.536294][ T8786]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  163.536365][ T8786]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  163.536387][ T8786]  ? rcu_is_watching+0x15/0xb0
[  163.536402][ T8786]  ? hash_netportnet_create+0x354/0xf90
[  163.536420][ T8786]  ? hash_netportnet_create+0x354/0xf90
[  163.536438][ T8786]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  163.536453][ T8786]  ? hash_netportnet_create+0x354/0xf90
[  163.536473][ T8786]  ? hash_netportnet_create+0x2fa/0xf90
[  163.536493][ T8786]  hash_netportnet_create+0x354/0xf90
[  163.536516][ T8786]  ? __nla_parse+0x40/0x60
[  163.536532][ T8786]  ? __pfx_hash_netportnet_create+0x10/0x10
[  163.536552][ T8786]  ip_set_create+0xa97/0x1940
[  163.536567][ T8786]  ? ip_set_create+0x4a2/0x1940
[  163.536590][ T8786]  ? __pfx_ip_set_create+0x10/0x10
[  163.536628][ T8786]  nfnetlink_rcv_msg+0xb4d/0x1130
[  163.536644][ T8786]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  163.536672][ T8786]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  163.536707][ T8786]  ? perf_trace_run_bpf_submit+0xee/0x170
[  163.536737][ T8786]  ? irqentry_enter+0x3d/0x60
[  163.536761][ T8786]  netlink_rcv_skb+0x208/0x470
[  163.536780][ T8786]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  163.536793][ T8786]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.536817][ T8786]  ? bpf_lsm_capable+0x9/0x20
[  163.536829][ T8786]  ? security_capable+0x7e/0x2e0
[  163.536849][ T8786]  nfnetlink_rcv+0x26a/0x2520
[  163.536867][ T8786]  ? perf_trace_preemptirq_template+0x280/0x340
[  163.536886][ T8786]  ? irqentry_enter+0x3d/0x60
[  163.536903][ T8786]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  163.536923][ T8786]  ? __dev_queue_xmit+0x27b/0x3b50
[  163.536943][ T8786]  ? irqentry_exit+0x74/0x90
[  163.536959][ T8786]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  163.536986][ T8786]  ? ref_tracker_free+0x63a/0x7d0
[  163.537003][ T8786]  ? __asan_memcpy+0x40/0x70
[  163.537021][ T8786]  ? __pfx_ref_tracker_free+0x10/0x10
[  163.537051][ T8786]  ? skb_clone+0x246/0x3a0
[  163.537065][ T8786]  ? __netlink_deliver_tap+0x807/0x850
[  163.537079][ T8786]  ? netlink_deliver_tap+0x2e/0x1b0
[  163.537099][ T8786]  ? netlink_deliver_tap+0x2e/0x1b0
[  163.537122][ T8786]  netlink_unicast+0x82f/0x9e0
[  163.537144][ T8786]  ? __pfx_netlink_unicast+0x10/0x10
[  163.537158][ T8786]  ? skb_put+0x49/0x210
[  163.537177][ T8786]  ? skb_put+0x11b/0x210
[  163.537197][ T8786]  netlink_sendmsg+0x805/0xb30
[  163.537221][ T8786]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.537247][ T8786]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.537264][ T8786]  __sock_sendmsg+0x21c/0x270
[  163.537282][ T8786]  ____sys_sendmsg+0x505/0x830
[  163.537305][ T8786]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.537364][ T8786]  ? import_iovec+0x74/0xa0
[  163.537388][ T8786]  ___sys_sendmsg+0x21f/0x2a0
[  163.537410][ T8786]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.537458][ T8786]  ? __fget_files+0x2a/0x420
[  163.537471][ T8786]  ? __fget_files+0x3a0/0x420
[  163.537494][ T8786]  __x64_sys_sendmsg+0x19b/0x260
[  163.537516][ T8786]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.537552][ T8786]  do_syscall_64+0xfa/0x3b0
[  163.537572][ T8786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.537585][ T8786]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.537603][ T8786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.537616][ T8786] RIP: 0033:0x7f63b958ec29
[  163.537630][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.537641][ T8786] RSP: 002b:00007f63b77ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.537657][ T8786] RAX: ffffffffffffffda RBX: 00007f63b97d5fa0 RCX: 00007f63b958ec29
[  163.537667][ T8786] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  163.537676][ T8786] RBP: 00007f63b9611e41 R08: 0000000000000000 R09: 0000000000000000
[  163.537684][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.537692][ T8786] R13: 00007f63b97d6038 R14: 00007f63b97d5fa0 R15: 00007ffd5b516448
[  163.537716][ T8786]  </TASK>
[  163.537723][ T8786] Mem-Info:
[  163.722448][ T8786] active_anon:11390 inactive_anon:0 isolated_anon:0
[  163.722448][ T8786]  active_file:14823 inactive_file:38280 isolated_file:0
[  163.722448][ T8786]  unevictable:1768 dirty:32 writeback:0
[  163.722448][ T8786]  slab_reclaimable:9832 slab_unreclaimable:92493
[  163.722448][ T8786]  mapped:18030 shmem:2447 pagetables:854
[  163.722448][ T8786]  sec_pagetables:0 bounce:0
[  163.722448][ T8786]  kernel_misc_reclaimable:0
[  163.722448][ T8786]  free:232242 free_pcp:27271 free_cma:0
[  163.739496][ T8786] Node 0 active_anon:19804kB inactive_anon:0kB active_file:13520kB inactive_file:18336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33428kB dirty:24kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3636kB pagetables:1716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.750964][ T8786] Node 1 active_anon:25756kB inactive_anon:0kB active_file:45772kB inactive_file:134784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38692kB dirty:104kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7500kB pagetables:1700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.762654][ T8786] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  163.773761][ T8786] lowmem_reserve[]: 0 811 811 811 811
[  163.775942][ T8786] Node 0 DMA32 free:364268kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19804kB inactive_anon:0kB active_file:13520kB inactive_file:18336kB unevictable:3536kB writepending:24kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:25864kB local_pcp:20136kB free_cma:0kB
[  163.788191][ T8786] lowmem_reserve[]: 0 0 0 0 0
[  163.790097][ T8786] Node 1 DMA32 free:440888kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17728kB local_pcp:8576kB free_cma:0kB
[  163.801673][ T8786] lowmem_reserve[]: 0 0 854 854 854
[  163.803881][ T8786] Node 1 Normal free:108260kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25756kB inactive_anon:0kB active_file:45772kB inactive_file:134784kB unevictable:3536kB writepending:104kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:66592kB local_pcp:44520kB free_cma:0kB
[  163.816525][ T8786] lowmem_reserve[]: 0 0 0 0 0
[  163.818488][ T8786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  163.823352][ T8786] Node 0 DMA32: 323*4kB (M) 188*8kB (UME) 304*16kB (UME) 133*32kB (UME) 115*64kB (UME) 47*128kB (UME) 20*256kB (UM) 22*512kB (UME) 15*1024kB (UM) 14*2048kB (UME) 68*4096kB (UM) = 364236kB
[  163.830968][ T8786] Node 1 DMA32: 4*4kB (UM) 7*8kB (UM) 3*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 6*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 6*2048kB (UM) 102*4096kB (UM) = 440888kB
[  163.837938][ T8786] Node 1 Normal: 1093*4kB (UM) 285*8kB (UME) 271*16kB (UME) 58*32kB (UME) 121*64kB (UM) 111*128kB (UM) 13*256kB (UME) 9*512kB (UE) 8*1024kB (UM) 6*2048kB (U) 11*4096kB (UM) = 108268kB
[  163.849414][ T8786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.853163][ T8786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  163.857095][ T8786] 55550 total pagecache pages
[  163.859139][ T8786] 0 pages in swap cache
[  163.860987][ T8786] Free swap  = 124996kB
[  163.862787][ T8786] Total swap = 124996kB
[  163.864903][ T8786] 786301 pages RAM
[  163.866602][ T8786] 0 pages HighMem/MovableOnly
[  163.869544][ T8786] 241359 pages reserved
[  163.871455][ T8786] 0 pages cma reserved
[  164.831163][ T8831] __nla_validate_parse: 31 callbacks suppressed
[  164.831175][ T8831] netlink: 830 bytes leftover after parsing attributes in process `syz.1.924'.
[  165.129010][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'.
[  165.133290][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'.
[  165.148814][ T8847] netlink: 'syz.0.927': attribute type 21 has an invalid length.
[  165.161475][ T8847] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.927'.
[  165.174777][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'.
[  165.260820][ T8856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.928'.
[  165.265567][ T8853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.928'.
[  165.269076][ T8856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.928'.
[  165.498457][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'.
[  165.524915][ T8871] netlink: 'syz.1.934': attribute type 2 has an invalid length.
[  165.528087][ T8871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.934'.
[  165.546300][ T8871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.030935][ T8912] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  166.092665][ T8918] tmpfs: Bad value for 'uid'
[  166.097078][ T8918] tmpfs: Bad value for 'uid'
[  166.571988][ T8931] netlink: 'syz.1.955': attribute type 2 has an invalid length.
[  167.231529][ T8970] netlink: 'syz.0.969': attribute type 32 has an invalid length.
[  167.327675][ T8955] erspan0 speed is unknown, defaulting to 1000
[  168.045562][ T9008] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  168.144081][ T9012] syzkaller0: entered promiscuous mode
[  168.146124][ T9012] syzkaller0: entered allmulticast mode
[  168.670622][ T9056] netlink: 'syz.0.999': attribute type 4 has an invalid length.
[  168.798506][ T9068] netlink: 'syz.2.1003': attribute type 1 has an invalid length.
[  169.801737][ T9130] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  169.819193][ T9130] delete_channel: no stack
[  170.425469][ T9137] __nla_validate_parse: 19 callbacks suppressed
[  170.425481][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'.
[  170.483394][ T9137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1026'.
[  170.488510][ T9137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1026'.
[  170.494334][ T9137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1026'.
[  170.831479][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1028'.
[  170.835448][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1028'.
[  170.839364][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1028'.
[  171.384932][ T9163] netlink: 'syz.2.1034': attribute type 10 has an invalid length.
[  171.396597][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1034'.
[  171.399658][ T9163] batadv0: entered promiscuous mode
[  171.401616][ T9163] batadv0: entered allmulticast mode
[  171.410006][ T9163] bridge0: port 3(batadv0) entered blocking state
[  171.413391][ T9163] bridge0: port 3(batadv0) entered disabled state
[  171.548336][ T9163] bridge0: port 3(batadv0) entered blocking state
[  171.556019][ T9163] bridge0: port 3(batadv0) entered forwarding state
[  171.610531][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1036'.
[  171.614462][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1036'.
[  171.734253][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  171.738243][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  172.015500][ T9193] nbd: must specify at least one socket
[  172.092969][ T9199] bridge0: port 3(syz_tun) entered disabled state
[  172.096022][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.099944][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.105332][ T9199] bridge0: entered allmulticast mode
[  277.493545][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  277.495970][    C1] rcu: 	0-...!: (1 GPs behind) idle=5c24/1/0x4000000000000000 softirq=28449/28450 fqs=0
[  277.500466][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=23337, q=179 ncpus=2)
[  277.502862][    C1] Sending NMI from CPU 1 to CPUs 0:
[  277.502935][    C0] NMI backtrace for cpu 0
[  277.502964][    C0] CPU: 0 UID: 0 PID: 9217 Comm: syz.0.1055 Not tainted syzkaller #0 PREEMPT(full) 
[  277.502974][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.502979][    C0] RIP: 0010:__lock_acquire+0x736/0xd20
[  277.502996][    C0] Code: 85 db 0f 84 81 00 00 00 83 fb 31 0f 83 e0 05 00 00 48 8d 04 9b 45 8b 66 20 48 8b 4c 24 10 8b 44 c1 f8 44 31 e0 25 00 60 00 00 <31> c9 89 c2 f7 da 48 19 c9 49 09 cf 85 c0 b8 01 00 00 00 0f 45 e8
[  277.503002][    C0] RSP: 0018:ffffc90000007750 EFLAGS: 00000006
[  277.503009][    C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffff88813520e130
[  277.503014][    C0] RDX: 0000000000000008 RSI: ffff88813520e158 RDI: ffff88813520d640
[  277.503019][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81adabcb
[  277.503023][    C0] R10: dffffc0000000000 R11: ffffed1009604f51 R12: 00000000000c4067
[  277.503027][    C0] R13: 0000000000000002 R14: ffff88813520e158 R15: 01cac7e6738f27c7
[  277.503032][    C0] FS:  00007fc6fafad6c0(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  277.503038][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.503042][    C0] CR2: 0000000000000000 CR3: 000000002cdba000 CR4: 00000000000006f0
[  277.503063][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.503069][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  277.503073][    C0] Call Trace:
[  277.503077][    C0]  <IRQ>
[  277.503085][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  277.503093][    C0]  lock_acquire+0x120/0x360
[  277.503102][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  277.503112][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  277.503120][    C0]  ? hrtimer_try_to_cancel+0x22b/0x420
[  277.503126][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  277.503133][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  277.503140][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  277.503149][    C0]  hrtimer_try_to_cancel+0x22b/0x420
[  277.503158][    C0]  hrtimer_cancel+0x3b/0x50
[  277.503164][    C0]  cpu_clock_event_stop+0xd9/0x130
[  277.503172][    C0]  __perf_event_overflow+0x580/0xe40
[  277.503183][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  277.503190][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  277.503200][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  277.503208][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  277.503214][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  277.503230][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  277.503237][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  277.503246][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  277.503252][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  277.503257][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  277.503269][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  277.503279][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  277.503292][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  277.503301][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  277.503310][    C0]  </IRQ>
[  277.503312][    C0]  <TASK>
[  277.503315][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  277.503322][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x70
[  277.503331][    C0] Code: 00 74 2c 8b 91 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a <48> 89 44 f2 08 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00
[  277.503336][    C0] RSP: 0018:ffffc90020a4fb88 EFLAGS: 00000283
[  277.503342][    C0] RAX: ffffffff847e8b9d RBX: dffffc0000000000 RCX: 0000000000080000
[  277.503347][    C0] RDX: ffffc90008079000 RSI: 00000000000002c1 RDI: 00000000000002c2
[  277.503351][    C0] RBP: ffff88810b1d3610 R08: ffff88810b1d363f R09: 1ffff1102163a6c7
[  277.503356][    C0] R10: dffffc0000000000 R11: ffffed102163a6c8 R12: ffff88810b1d3630
[  277.503360][    C0] R13: 0000000000000048 R14: 0000000000000047 R15: 0000000000000001
[  277.503366][    C0]  ? tomoyo_check_acl+0x30d/0x400
[  277.503379][    C0]  tomoyo_check_acl+0x30d/0x400
[  277.503389][    C0]  ? __pfx_tomoyo_check_path_number_acl+0x10/0x10
[  277.503397][    C0]  tomoyo_path_number_perm+0x2dc/0x5a0
[  277.503404][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  277.503411][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  277.503419][    C0]  ? perf_trace_lock_acquire+0xf5/0x410
[  277.503428][    C0]  ? __lock_acquire+0xab9/0xd20
[  277.503443][    C0]  ? __fget_files+0x2a/0x420
[  277.503451][    C0]  ? __fget_files+0x2a/0x420
[  277.503458][    C0]  ? __fget_files+0x3a0/0x420
[  277.503464][    C0]  ? __fget_files+0x2a/0x420
[  277.503472][    C0]  security_file_ioctl+0xcb/0x2d0
[  277.503479][    C0]  __se_sys_ioctl+0x47/0x170
[  277.503489][    C0]  do_syscall_64+0xfa/0x3b0
[  277.503499][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.503505][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  277.503513][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.503519][    C0] RIP: 0033:0x7fc6fa18ec29
[  277.503531][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.503537][    C0] RSP: 002b:00007fc6fafad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  277.503543][    C0] RAX: ffffffffffffffda RBX: 00007fc6fa3d5fa0 RCX: 00007fc6fa18ec29
[  277.503548][    C0] RDX: ffffffffffffffff RSI: 0000000040042408 RDI: 0000000000000007
[  277.503552][    C0] RBP: 00007fc6fa211e41 R08: 0000000000000000 R09: 0000000000000000
[  277.503556][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.503559][    C0] R13: 00007fc6fa3d6038 R14: 00007fc6fa3d5fa0 R15: 00007ffe411722c8
[  277.503569][    C0]  </TASK>
[  277.503897][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g23337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  277.688883][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  277.692015][    C1] rcu: RCU grace-period kthread stack dump:
[  277.693795][    C1] task:rcu_preempt     state:R  running task     stack:26920 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  277.697875][    C1] Call Trace:
[  277.698951][    C1]  <TASK>
[  277.699864][    C1]  __schedule+0x1798/0x4cc0
[  277.701303][    C1]  ? __lock_acquire+0xab9/0xd20
[  277.702874][    C1]  ? __pfx___schedule+0x10/0x10
[  277.704479][    C1]  ? schedule+0x91/0x360
[  277.705912][    C1]  schedule+0x165/0x360
[  277.707217][    C1]  schedule_timeout+0x12b/0x270
[  277.708695][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  277.710316][    C1]  ? __pfx_process_timeout+0x10/0x10
[  277.711903][    C1]  ? prepare_to_swait_event+0x341/0x380
[  277.713597][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  277.715148][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  277.716738][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.718539][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  277.720287][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  277.722278][    C1]  ? finish_swait+0xcd/0x1f0
[  277.723897][    C1]  rcu_gp_kthread+0x99/0x390
[  277.725450][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  277.727046][    C1]  ? __kthread_parkme+0x7b/0x200
[  277.728512][    C1]  ? __kthread_parkme+0x1a1/0x200
[  277.729980][    C1]  kthread+0x711/0x8a0
[  277.731205][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  277.732813][    C1]  ? __pfx_kthread+0x10/0x10
[  277.734185][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  277.735709][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.737265][    C1]  ? __pfx_kthread+0x10/0x10
[  277.738627][    C1]  ret_from_fork+0x439/0x7d0
[  277.740003][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  277.741515][    C1]  ? __switch_to_asm+0x39/0x70
[  277.742959][    C1]  ? __switch_to_asm+0x33/0x70
[  277.744447][    C1]  ? __pfx_kthread+0x10/0x10
[  277.745966][    C1]  ret_from_fork_asm+0x1a/0x30
[  277.747542][    C1]  </TASK>
[  277.748497][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  277.750695][    C1] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  277.753715][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.756783][    C1] Workqueue: events_unbound toggle_allocation_gate
[  277.758761][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  277.760783][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5f
[  277.766655][    C1] RSP: 0018:ffffc90006e67660 EFLAGS: 00000293
[  277.768775][    C1] RAX: ffffffff81b4665b RBX: 1ffff11009608341 RCX: ffff88810a15b980
[  277.771206][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  277.773956][    C1] RBP: ffffc90006e677e0 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6
[  277.776642][    C1] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffff88804b041a08
[  277.779169][    C1] R13: dffffc0000000000 R14: ffff88813663b1c0 R15: 0000000000000000
[  277.781780][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  277.784493][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.786466][    C1] CR2: 0000000000000000 CR3: 000000000df36000 CR4: 00000000000006f0
[  277.789238][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.791763][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  277.794405][    C1] Call Trace:
[  277.795443][    C1]  <TASK>
[  277.796335][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  277.797861][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  277.799798][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  277.801612][    C1]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  277.803726][    C1]  ? __pfx___text_poke+0x10/0x10
[  277.805247][    C1]  ? rcu_is_watching+0x15/0xb0
[  277.806638][    C1]  ? trace_contention_end+0x39/0x120
[  277.808261][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  277.809789][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  277.811469][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  277.813636][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[  277.815784][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  277.817268][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  277.819273][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  277.821091][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  277.822860][    C1]  static_key_enable_cpuslocked+0x128/0x250
[  277.824714][    C1]  static_key_enable+0x1a/0x20
[  277.826154][    C1]  toggle_allocation_gate+0xad/0x240
[  277.827939][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  277.829873][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  277.831544][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  277.833201][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  277.834883][    C1]  process_scheduled_works+0xae1/0x17b0
[  277.836582][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  277.838521][    C1]  worker_thread+0x8a0/0xda0
[  277.840159][    C1]  kthread+0x711/0x8a0
[  277.841512][    C1]  ? __pfx_worker_thread+0x10/0x10
[  277.843147][    C1]  ? __pfx_kthread+0x10/0x10
[  277.844646][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  277.846326][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.848210][    C1]  ? __pfx_kthread+0x10/0x10
[  277.849666][    C1]  ret_from_fork+0x439/0x7d0
[  277.851060][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  277.852608][    C1]  ? __switch_to_asm+0x39/0x70
[  277.854039][    C1]  ? __switch_to_asm+0x33/0x70
[  277.855434][    C1]  ? __pfx_kthread+0x10/0x10
[  277.856781][    C1]  ret_from_fork_asm+0x1a/0x30
[  277.858204][    C1]  </TASK>

VM DIAGNOSIS:
22:47:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8b8cf50d RCX=0000000000000000 RDX=0000000000000000
RSI=ffff88804b027a98 RDI=ffffffff8b8cf500 RBP=ffffc900000077c0 RSP=ffffc90000007698
R8 =0000000000000000 R9 =0000000000000001 R10=dffffc0000000000 R11=ffffed1009604f51
R12=1ffff92000000ee0 R13=ffff88804b027a98 R14=dffffc0000000000 R15=000000000000000c
RIP=ffffffff8b76fbce RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6fafad6c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002cdba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc6fa3a7498 00007fc6fa3a7470 XMM03=00007fc6fa3a74a8 00007fc6fa3a74a0
XMM04=00007fc6faf0d100 00007fc6fa3a7460 XMM05=00007fc6fa3a7478 00007fc6fa3a74c0
XMM06=00007fc6fa3a74b8 00007fc6fa3a74b0 XMM07=00007fc6fa3a74a8 00007fc6fa3a74a0
XMM08=0000000000000000 00007fc6fa212f0f XMM09=0000000000000000 00007fc6fa212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff9635c2f8 RBX=00000000000003fd RCX=00000000000000b8 RDX=0000000000000008
RSI=00000000000003fd RDI=ffff88810a15b980 RBP=ffffffff934e2c90 RSP=ffffc900001e0228
R8 =ffffc900001e01f0 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819de510
R12=ffffffff9634d568 R13=ffffffff96360818 R14=ffff88810a15c5d8 R15=00000000000000b7
RIP=ffffffff819dca17 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7477da7498 00007f7477da7470 XMM03=00007f7477da74a8 00007f7477da74a0
XMM04=00007f747890d100 00007f7477da7460 XMM05=00007f7477da7478 00007f7477da74c0
XMM06=00007f7477da74b8 00007f7477da74b0 XMM07=00007f7477da74a8 00007f7477da74a0
XMM08=0000000000000000 00007f7477c12f0f XMM09=0000000000000000 00007f7477c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
