last executing test programs:

16.447030876s ago: executing program 0 (id=1058):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x100000, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000500)}, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) (async)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x100000, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xf, 0x3, 0x2) (async)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
close(r1) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$LINK_DETACH(0x22, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000500)}, 0x10) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async)

16.320281503s ago: executing program 0 (id=1060):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a000000ffffff7f090000000900000000200000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000004016f3c8d0ea245319817d65271e90000000000"], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x9, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xffffff7f, 0x7fffffff}], "54db"}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x6}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x4}, @datasec={0x8, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x9}, {0x4, 0x3, 0x9}, {0x2, 0x1a, 0x4900}, {0xffff24c8, 0x100, 0xffffffc0}, {0x3, 0x7, 0x2}, {0x5, 0x3, 0x1606}, {0x4, 0x6, 0xfffffff3}, {0x2, 0x3, 0x2}], ' '}, @datasec={0xe, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x4, 0x4}, {0x2, 0x5}, {0x1, 0xbe8, 0x80}, {0x2, 0x1, 0xffffffff}, {0x1, 0x56ec8c5, 0x7fff}], "fbcd"}, @ptr={0xd, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000800)=""/192, 0x149, 0xc0, 0x0, 0x7f}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xb, '\x00', r6, r7, 0x3, 0x1, 0x3}, 0x50)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d0802140000000200f53718000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b52a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000d11e172844014263d95395ae0d63c0a6a2e6baa014e2012ee44", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x7c}, {0x6}]})
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0xd401, 0x5, 0x0, 0x3, 0x0, 0x807, 0x0, 0x3, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4)

16.197521937s ago: executing program 0 (id=1062):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

16.13053787s ago: executing program 0 (id=1063):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000000c000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000040000000000f800"/35], 0x6d) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000000c000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000040000000000f800"/35], 0x6d)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0) (async)
r0 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1, r4})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
socket$kcm(0x10, 0x5, 0x0) (async)
socket$kcm(0x10, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x29, 0x8}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000005d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x3)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r6, r8}, 0xc)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r10, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)

15.921392193s ago: executing program 0 (id=1066):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000300)="25c89d0918a25b3725f245a434ac", 0x0, 0xf01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000180)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10)
r7 = socket$kcm(0x2, 0x3, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000044010000ff"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100))
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000940)=ANY=[@ANYRES64=r9, @ANYRES16=r7, @ANYRESOCT=r0], 0x12)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x9, <r10=>0x0}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x3, 0x8, 0x7a1, r8, 0x1, '\x00', 0x0, r2, 0x3, 0x4, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @map_fd]}, &(0x7f0000000440)='syzkaller\x00', 0x84, 0xf3, &(0x7f0000000740)=""/243, 0x1f00, 0x28, '\x00', 0x0, @fallback=0x14, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x401, 0xc}, 0x10, r10, r11, 0x4, &(0x7f0000000580)=[r12, r8], &(0x7f0000000840)=[{0x4, 0x1, 0x3}, {0x0, 0x5, 0x4, 0x5}, {0x2, 0x2, 0x1, 0x6}, {0x2, 0x5, 0x1, 0x6}], 0x10, 0x5}, 0x94)

15.748806s ago: executing program 2 (id=1069):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a000000ffffff7f090000000900000000200000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000004016f3c8d0ea245319817d65271e90000000000"], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x9, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xffffff7f, 0x7fffffff}], "54db"}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x6}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x4}, @datasec={0x8, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x9}, {0x4, 0x3, 0x9}, {0x2, 0x1a, 0x4900}, {0xffff24c8, 0x100, 0xffffffc0}, {0x3, 0x7, 0x2}, {0x5, 0x3, 0x1606}, {0x4, 0x6, 0xfffffff3}, {0x2, 0x3, 0x2}], ' '}, @datasec={0xe, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x4, 0x4}, {0x2, 0x5}, {0x1, 0xbe8, 0x80}, {0x2, 0x1, 0xffffffff}, {0x1, 0x56ec8c5, 0x7fff}], "fbcd"}, @ptr={0xd, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000800)=""/192, 0x149, 0xc0, 0x0, 0x7f}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xb, '\x00', r6, r7, 0x3, 0x1, 0x3}, 0x50)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d0802140000000200f53718000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b52a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000d11e172844014263d95395ae0d63c0a6a2e6baa014e2012ee44", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x7c}, {0x6}]})
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0xd401, 0x5, 0x0, 0x3, 0x0, 0x807, 0x0, 0x3, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4)

15.632016089s ago: executing program 1 (id=1070):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$kcm(0x1e, 0x2, 0x0) (async, rerun: 32)
r1 = socket$kcm(0x29, 0x5, 0x0) (rerun: 32)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5450, 0x0) (async, rerun: 64)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/43, 0x2b}], 0x31}, 0x40010080) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x7}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async, rerun: 64)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) (async, rerun: 64)
r6 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x004>\x00'], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) (async)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair(0x5, 0x3, 0x2, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xc) (async, rerun: 64)
r8 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r8, 0x0, 0x485, 0x0, 0x0) (async, rerun: 32)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYBLOB="00000500000000000000dc3700"], 0x48) (rerun: 32)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r9, &(0x7f0000000240)}, 0x20) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc4d2, 0x8000000000000001}, 0x2200, 0x4, 0x0, 0x5, 0x2, 0x4, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15.581071234s ago: executing program 1 (id=1071):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfdef)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e1204000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee500"/108, 0x6c}, {&(0x7f0000000500)="25108a32c7d4bdc542b8c9df6ceb70b094f1e124718e5504a6e20a2895b019f167c9c90e183174336e9df0dec10458f6dae623de224d1419522327262183f661e5c8531eac5b457ac2259030eb2539a1bb2b826d8818253b001e679d26b392fe43082e83d84c3f8755b2d34a", 0x6c}], 0x2}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1803000000000000000000000000000085100000060000001800000000000000000000000000000065000000000000001800000000000020000000000000502b950000000000000004030000fcffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)

15.575320618s ago: executing program 2 (id=1072):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b0180fe00e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)

15.575060097s ago: executing program 2 (id=1073):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, <r0=>0x0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r1}, 0x3b)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r1}, 0x3b) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async)

15.574968781s ago: executing program 2 (id=1074):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63ae", 0xb}], 0x1}, 0x4000010)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x34, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf520, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x900000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x1, 0x6, 0x3, 0xa, 0x18, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x2, 0x0, 0xa, 0x0, 0x1}, @jmp={0x5, 0x1, 0xc, 0x6, 0x8, 0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xbc, 0x88, &(0x7f0000000000)=""/136}, 0x94)

15.51078603s ago: executing program 2 (id=1075):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
getpid() (async)
r1 = getpid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)

15.510205224s ago: executing program 1 (id=1076):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x202400, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20040000)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0xff7b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x11, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r5}, 0x10)
syz_clone(0x28000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000071fd157c4850", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000080)="2ac7501bbb7309837d6fe9e3bbcaf1283f3337db28d63658fa036f522375e13d66ab410235be17183c1f7d2bdd96ec814796f05bbaece8ba5ee6", &(0x7f0000000200)=""/4096}, 0x20)

15.509280214s ago: executing program 2 (id=1077):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc020107020010010000000a000000", 0x13}], 0x2}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=0xffffffffffffffff, 0x4)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r7, 0x20, &(0x7f0000000400)={&(0x7f0000000b80)=""/231, 0xe7, <r9=>0x0, &(0x7f00000003c0)=""/43, 0x2b}}, 0x10)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0x1f, 0x4204, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b703000600000085100000faffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, r8, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x3, 0x3, 0xffff}, 0x10, r9, 0x0, 0x1, &(0x7f0000000cc0)=[r10], &(0x7f0000000d00)=[{0x3, 0x1, 0xf, 0x5}], 0x10, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10001, 0x80000001, 0x8001, 0x2004, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0x1}, 0x50)

15.460648753s ago: executing program 1 (id=1078):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)

15.46029531s ago: executing program 1 (id=1079):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01c0fe00e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)

15.381767771s ago: executing program 1 (id=1080):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4011, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x1c125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8050, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x8}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000ff0f0000be0000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003532511aa64879a8c3"], 0x63)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0xfc, 0x3, 0x0, 0x0, 0x7, 0x8822, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x1000, 0xfffff, 0x3, 0xfe8d42e69ac4daf8, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r5, 0x4}, 0x38)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x31, &(0x7f0000000100), 0x120)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f0000000000000000851000000600000085100000040000006608000000000000000000050c0000000095000000000000009500"/74], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

0s ago: executing program 0 (id=1081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a000000ffffff7f090000000900000000200000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000004016f3c8d0ea245319817d65271e90000000000"], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x9, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xffffff7f, 0x7fffffff}], "54db"}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x6}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x4}, @datasec={0x8, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x9}, {0x4, 0x3, 0x9}, {0x2, 0x1a, 0x4900}, {0xffff24c8, 0x100, 0xffffffc0}, {0x3, 0x7, 0x2}, {0x5, 0x3, 0x1606}, {0x4, 0x6, 0xfffffff3}, {0x2, 0x3, 0x2}], ' '}, @datasec={0xe, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x4, 0x4}, {0x2, 0x5}, {0x1, 0xbe8, 0x80}, {0x2, 0x1, 0xffffffff}, {0x1, 0x56ec8c5, 0x7fff}], "fbcd"}, @ptr={0xd, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000800)=""/192, 0x149, 0xc0, 0x0, 0x7f}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xb, '\x00', r6, r7, 0x3, 0x1, 0x3}, 0x50)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d0802140000000200f53718000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b52a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000d11e172844014263d95395ae0d63c0a6a2e6baa014e2012ee44", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x7c}, {0x6}]})
perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0xd401, 0x5, 0x0, 0x3, 0x0, 0x807, 0x0, 0x3, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8946' (ED25519) to the list of known hosts.
syzkaller login: [   40.694588][ T5754] cgroup: Unknown subsys name 'net'
[   40.839172][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.845667][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.056352][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.271539][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.274512][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.277132][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.280059][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.282583][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.294943][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.297739][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.300223][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.302866][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.305655][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.339803][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.342609][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.345137][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.349022][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.351538][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.456812][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   45.538293][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   45.556972][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.559514][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.561845][ T5826] bridge_slave_0: entered allmulticast mode
[   45.564552][ T5826] bridge_slave_0: entered promiscuous mode
[   45.579039][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.581344][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.583611][ T5826] bridge_slave_1: entered allmulticast mode
[   45.586676][ T5826] bridge_slave_1: entered promiscuous mode
[   45.638476][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.659022][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.662340][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.664651][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.668465][ T5830] bridge_slave_0: entered allmulticast mode
[   45.671478][ T5830] bridge_slave_0: entered promiscuous mode
[   45.684469][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.689574][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.692217][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.694916][ T5830] bridge_slave_1: entered allmulticast mode
[   45.698292][ T5830] bridge_slave_1: entered promiscuous mode
[   45.728915][ T5826] team0: Port device team_slave_0 added
[   45.742438][ T5826] team0: Port device team_slave_1 added
[   45.746323][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.753397][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.800329][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.802573][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.811161][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.817832][ T5830] team0: Port device team_slave_0 added
[   45.820012][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.822295][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.824548][ T5833] bridge_slave_0: entered allmulticast mode
[   45.827278][ T5833] bridge_slave_0: entered promiscuous mode
[   45.830238][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.832506][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.834774][ T5833] bridge_slave_1: entered allmulticast mode
[   45.837661][ T5833] bridge_slave_1: entered promiscuous mode
[   45.840129][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.842334][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.850680][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.855040][ T5830] team0: Port device team_slave_1 added
[   45.888222][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.890460][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.898473][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.903646][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.909572][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.912706][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.914863][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.922914][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.971299][ T5833] team0: Port device team_slave_0 added
[   45.976114][ T5826] hsr_slave_0: entered promiscuous mode
[   45.978397][ T5826] hsr_slave_1: entered promiscuous mode
[   45.983244][ T5830] hsr_slave_0: entered promiscuous mode
[   45.986708][ T5830] hsr_slave_1: entered promiscuous mode
[   45.988787][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.991233][ T5830] Cannot create hsr debugfs directory
[   45.994195][ T5833] team0: Port device team_slave_1 added
[   46.042970][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.045280][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.053575][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.064228][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.067228][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.075637][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.124910][ T5833] hsr_slave_0: entered promiscuous mode
[   46.127842][ T5833] hsr_slave_1: entered promiscuous mode
[   46.129921][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.132311][ T5833] Cannot create hsr debugfs directory
[   46.237903][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.243429][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.258046][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.276554][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.306256][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.310850][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.314879][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.320295][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.329095][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.331475][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.334063][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.336509][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.374840][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.377278][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.379646][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.381888][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.389782][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.398979][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.406418][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.416570][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.440885][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.443866][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.448602][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.451185][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.468543][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.487497][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   46.499009][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.501475][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.511214][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.513647][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.524347][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.553137][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   46.567019][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.569333][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.580473][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.585864][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.588259][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.619619][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.642087][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.644416][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.668804][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.671194][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.708402][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.753329][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.774880][ T5826] veth0_vlan: entered promiscuous mode
[   46.792157][ T5826] veth1_vlan: entered promiscuous mode
[   46.809235][ T5830] veth0_vlan: entered promiscuous mode
[   46.821109][ T5826] veth0_macvtap: entered promiscuous mode
[   46.824712][ T5830] veth1_vlan: entered promiscuous mode
[   46.829349][ T5826] veth1_macvtap: entered promiscuous mode
[   46.844921][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.854560][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.860137][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.862929][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.867139][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.869883][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.878660][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.913242][ T5830] veth0_macvtap: entered promiscuous mode
[   46.929086][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.931627][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.931846][ T5830] veth1_macvtap: entered promiscuous mode
[   46.951148][ T5833] veth0_vlan: entered promiscuous mode
[   46.963455][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.964664][ T5833] veth1_vlan: entered promiscuous mode
[   46.968769][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.970126][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.980526][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.989754][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.992629][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.996084][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.998855][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.015115][ T5833] veth0_macvtap: entered promiscuous mode
[   47.023305][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.031604][ T5833] veth1_macvtap: entered promiscuous mode
[   47.060280][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.077735][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.080186][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.084931][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.089807][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.092596][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.096522][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.099261][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.125001][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.127609][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.183277][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.192580][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.222207][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.225757][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.277167][ T5901] netlink: 96168 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.283645][ T5900] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET)
[   47.289848][ T5900] netlink: 8210 bytes leftover after parsing attributes in process `syz.1.5'.
[   47.315057][ T5903] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   47.320451][   T55] Bluetooth: hci0: command tx timeout
[   47.342733][ T5903] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.395877][   T55] Bluetooth: hci2: command tx timeout
[   47.397848][   T55] Bluetooth: hci1: command tx timeout
[   47.521475][ T5905] Zero length message leads to an empty skb
[   48.410719][ T5908] delete_channel: no stack
[   48.488054][ T5925] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   48.509280][ T5928] netlink: 'syz.0.15': attribute type 2 has an invalid length.
[   48.511809][ T5928] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   48.514288][ T5928] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15'.
[   48.841080][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   48.897700][ T5939] netlink: 'syz.0.19': attribute type 12 has an invalid length.
[   48.900242][ T5939] netlink: 120 bytes leftover after parsing attributes in process `syz.0.19'.
[   49.219184][    C0] hrtimer: interrupt took 21890 ns
[   49.298902][ T5974] netlink: 'syz.0.31': attribute type 6 has an invalid length.
[   49.301479][ T5974] netlink: 168 bytes leftover after parsing attributes in process `syz.0.31'.
[   49.397733][ T5828] Bluetooth: hci0: command tx timeout
[   49.476123][ T5828] Bluetooth: hci1: command tx timeout
[   49.477910][ T5828] Bluetooth: hci2: command tx timeout
[   50.033691][ T5987] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.37'.
[   50.040622][ T5987] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37'.
[   50.053015][ T5989] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.37'.
[   50.759021][ T5977] syz.2.33 (5977) used greatest stack depth: 20432 bytes left
[   51.888638][   T55] Bluetooth: hci0: command tx timeout
[   51.890496][   T55] Bluetooth: hci2: command tx timeout
[   51.892382][   T55] Bluetooth: hci1: command tx timeout
[   51.925959][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1160688986 wd_nsec: 1160689021
[   51.947989][ T6023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.48'.
[   52.111632][ T6030] raw_sendmsg: syz.2.50 forgot to set AF_INET. Fix it!
[   52.266726][ T6052] syzkaller0: tun_chr_ioctl cmd 1074025677
[   52.269159][ T6052] syzkaller0: linktype set to 0
[   52.446346][ T6059] netlink: 'syz.2.58': attribute type 29 has an invalid length.
[   52.449931][ T6058] netlink: 'syz.2.58': attribute type 29 has an invalid length.
[   52.505926][ T6058] __nla_validate_parse: 24 callbacks suppressed
[   52.505936][ T6058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.58'.
[   52.720925][ T6073] netlink: 'syz.1.61': attribute type 10 has an invalid length.
[   52.726747][ T6073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.61'.
[   52.733209][ T6073] veth0_vlan: entered allmulticast mode
[   52.744430][ T6073] bridge0: port 3(veth0_vlan) entered blocking state
[   52.751312][ T6073] bridge0: port 3(veth0_vlan) entered disabled state
[   52.778796][ T6073] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   52.815410][ T6069] netlink: 'syz.1.61': attribute type 21 has an invalid length.
[   52.864349][ T6077] netlink: 'syz.2.64': attribute type 2 has an invalid length.
[   52.876097][ T6077] netlink: 'syz.2.64': attribute type 1 has an invalid length.
[   52.881957][ T6077] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.64'.
[   52.886874][ T6077] nbd: couldn't find device at index 65542
[   52.915056][ T6079] netlink: 'syz.2.65': attribute type 12 has an invalid length.
[   52.918755][ T6079] netlink: 120 bytes leftover after parsing attributes in process `syz.2.65'.
[   53.958716][ T5828] Bluetooth: hci1: command tx timeout
[   53.960990][ T5828] Bluetooth: hci2: command tx timeout
[   53.963204][ T5828] Bluetooth: hci0: command tx timeout
[   54.075672][ T6132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.523770][ T6145] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.82'.
[   54.898009][ T6169] netlink: 'syz.2.90': attribute type 12 has an invalid length.
[   54.901228][ T6169] netlink: 120 bytes leftover after parsing attributes in process `syz.2.90'.
[   54.940550][ T6173] netlink: 763 bytes leftover after parsing attributes in process `syz.0.91'.
[   55.264019][ T6186] netlink: 10 bytes leftover after parsing attributes in process `syz.0.96'.
[   55.690261][ T6198] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.100'.
[   55.921328][ T6207] netlink: 96168 bytes leftover after parsing attributes in process `syz.1.103'.
[   55.941746][ T6208] : port 1(erspan0) entered blocking state
[   55.944461][ T6208] : port 1(erspan0) entered disabled state
[   55.947452][ T6208] erspan0: entered allmulticast mode
[   55.951141][ T6208] erspan0: entered promiscuous mode
[   55.957886][ T6208] erspan0: left allmulticast mode
[   55.960065][ T6208] erspan0: left promiscuous mode
[   55.962636][ T6208] : port 1(erspan0) entered disabled state
[   57.466847][ T6229] netlink: 'syz.0.110': attribute type 17 has an invalid length.
[   57.470143][ T6229] netlink: 'syz.0.110': attribute type 16 has an invalid length.
[   57.512514][ T6229] netlink: 'syz.0.110': attribute type 21 has an invalid length.
[   57.520503][ T6229] netlink: 'syz.0.110': attribute type 16 has an invalid length.
[   57.523430][ T6229] __nla_validate_parse: 1 callbacks suppressed
[   57.523438][ T6229] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.110'.
[   57.806679][ T6234] netlink: 'syz.0.112': attribute type 10 has an invalid length.
[   57.809425][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.112'.
[   57.818920][ T6234] batman_adv: batadv0: Adding interface: vlan1
[   57.821156][ T6234] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.840118][ T6234] batman_adv: batadv0: Interface activated: vlan1
[   57.974556][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[   58.248816][ T6265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.472590][ T6272] syzkaller0: entered promiscuous mode
[   58.474907][ T6272] syzkaller0: entered allmulticast mode
[   59.212262][ T6286] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   59.214987][ T6286] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   59.759583][ T6304] netlink: 144 bytes leftover after parsing attributes in process `syz.1.131'.
[   60.628033][ T6332] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.141'.
[   60.725987][ T6334] netlink: 152 bytes leftover after parsing attributes in process `syz.0.140'.
[   60.728996][ T6334] netlink: 6 bytes leftover after parsing attributes in process `syz.0.140'.
[   61.610934][ T6382] syzkaller0: entered promiscuous mode
[   61.613243][ T6382] syzkaller0: entered allmulticast mode
[   61.814815][ T6385] netlink: 10 bytes leftover after parsing attributes in process `syz.1.156'.
[   62.710675][ T6401] syzkaller0: entered promiscuous mode
[   62.712545][ T6401] syzkaller0: entered allmulticast mode
[   63.462876][ T6425] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.166'.
[   63.520761][ T6425] netlink: 830 bytes leftover after parsing attributes in process `syz.1.166'.
[   63.696344][ T6432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.169'.
[   63.705412][ T6435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.169'.
[   64.762835][ T6462] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.178'.
[   64.768294][ T6462] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.178'.
[   65.124572][ T6471] netlink: 'syz.1.183': attribute type 11 has an invalid length.
[   65.130790][ T6471] netlink: 140 bytes leftover after parsing attributes in process `syz.1.183'.
[   65.137661][ T6469] netlink: 'syz.2.182': attribute type 64 has an invalid length.
[   65.139280][ T6460] syz.0.179 (6460) used greatest stack depth: 19648 bytes left
[   65.472982][ T6493] netlink: 176 bytes leftover after parsing attributes in process `syz.1.189'.
[   65.528236][ T6496] netlink: 172 bytes leftover after parsing attributes in process `syz.1.190'.
[   65.532858][ T6496] netlink: 'syz.1.190': attribute type 21 has an invalid length.
[   65.545123][ T6496] netlink: 128 bytes leftover after parsing attributes in process `syz.1.190'.
[   65.549287][ T6496] netlink: 'syz.1.190': attribute type 4 has an invalid length.
[   65.559442][ T6496] netlink: 'syz.1.190': attribute type 10 has an invalid length.
[   66.746263][ T6496] syz.1.190 (6496) used greatest stack depth: 19360 bytes left
[   67.532288][ T6563] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   67.536654][ T6563] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   68.904878][ T6616] __nla_validate_parse: 3 callbacks suppressed
[   68.904889][ T6616] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.231'.
[   68.926704][ T5220] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   69.004421][ T6619] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.232'.
[   69.016021][ T6619] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.232'.
[   69.878584][ T6646] bridge_slave_1: left allmulticast mode
[   69.880644][ T6646] bridge_slave_1: left promiscuous mode
[   69.887089][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.893554][ T6646] bridge_slave_0: left allmulticast mode
[   69.897038][ T6648] netlink: 17 bytes leftover after parsing attributes in process `syz.2.239'.
[   69.898335][ T6646] bridge_slave_0: left promiscuous mode
[   69.900697][ T6648] netlink: zone id is out of range
[   69.902654][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.904780][ T6648] netlink: zone id is out of range
[   69.911892][ T6648] netlink: zone id is out of range
[   69.913960][ T6648] netlink: zone id is out of range
[   69.916302][ T6648] netlink: zone id is out of range
[   69.918423][ T6648] netlink: zone id is out of range
[   69.920519][ T6648] netlink: zone id is out of range
[   69.922784][ T6648] netlink: zone id is out of range
[   69.980215][ T6653] netlink: 'syz.2.240': attribute type 11 has an invalid length.
[   70.070324][ T6656] netlink: 12671 bytes leftover after parsing attributes in process `syz.1.242'.
[   70.613182][ T6693] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   70.685301][ T6700] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   70.688892][ T6701] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   70.701905][ T6700] bond0: (slave bond_slave_0): Releasing backup interface
[   70.839110][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.841399][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.880563][ T6718] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   70.882954][ T6718] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   71.075439][ T5828] Bluetooth: hci1: command tx timeout
[   71.856657][ T6739] delete_channel: no stack
[   71.858331][ T6739] delete_channel: no stack
[   72.105018][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.271'.
[   72.190307][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.273'.
[   73.076190][ T6804] mac80211_hwsim hwsim5 O3c: renamed from wlan1 (while UP)
[   73.604411][ T6818] netlink: 'syz.0.290': attribute type 29 has an invalid length.
[   73.613978][ T6818] netlink: 'syz.0.290': attribute type 29 has an invalid length.
[   73.869330][ T6836] mac80211_hwsim hwsim3 O3c: renamed from wlan1 (while UP)
[   73.933466][ T6836] netlink: 168 bytes leftover after parsing attributes in process `syz.1.297'.
[   74.237392][ T6863] netlink: 'syz.2.304': attribute type 22 has an invalid length.
[   74.254977][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   75.136192][ T6928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.324'.
[   75.342453][ T6942] syzkaller0: entered promiscuous mode
[   75.344458][ T6942] syzkaller0: entered allmulticast mode
[   76.136137][ T6961] netlink: 129956 bytes leftover after parsing attributes in process `syz.2.336'.
[   76.238741][ T6961] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.336'.
[   76.245613][ T6962] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.336'.
[   76.300730][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'.
[   76.331744][ T6966] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.339'.
[   76.443614][ T6973] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.340'.
[   76.766609][ T6999] netlink: 'syz.1.347': attribute type 28 has an invalid length.
[   76.769336][ T6999] netlink: 2 bytes leftover after parsing attributes in process `syz.1.347'.
[   78.309403][ T7046] netlink: 'syz.0.361': attribute type 40 has an invalid length.
[   78.461701][ T7049] syzkaller0: entered promiscuous mode
[   78.463581][ T7049] syzkaller0: entered allmulticast mode
[   78.467122][ T7054] netlink: 'syz.0.364': attribute type 21 has an invalid length.
[   80.045721][ T7066] netlink: 'syz.1.367': attribute type 29 has an invalid length.
[   80.202104][ T7085] syzkaller0: entered promiscuous mode
[   80.203961][ T7085] syzkaller0: entered allmulticast mode
[   80.210141][   T12] syzkaller0: tun_net_xmit 48
[   80.213727][ T7085] syzkaller0: tun_chr_ioctl cmd 2147767520
[   80.240148][ T7085] syzkaller0: tun_net_xmit 1280
[   81.089625][   T10] cfg80211: failed to load regulatory.db
[   81.344327][ T7123] __nla_validate_parse: 3 callbacks suppressed
[   81.344339][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.383'.
[   81.353779][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.383'.
[   81.359615][ T7123] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.383'.
[   81.374461][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.383'.
[   81.451401][ T7136] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.387'.
[   82.037565][ T7163] netlink: 809 bytes leftover after parsing attributes in process `syz.1.397'.
[   82.040622][ T7163] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.397'.
[   82.043704][ T7163] netlink: 809 bytes leftover after parsing attributes in process `syz.1.397'.
[   82.154743][ T7165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.399'.
[   82.659115][ T7193] netlink: 10 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.827162][ T7201] : port 1(veth0_to_bridge) entered blocking state
[   82.829509][ T7201] : port 1(veth0_to_bridge) entered disabled state
[   82.832062][ T7201] veth0_to_bridge: entered allmulticast mode
[   82.836056][ T7201] veth0_to_bridge: entered promiscuous mode
[   82.840842][ T7201] : port 2(erspan0) entered blocking state
[   82.843049][ T7201] : port 2(erspan0) entered disabled state
[   82.845086][ T7201] erspan0: entered allmulticast mode
[   82.855487][ T7201] erspan0: entered promiscuous mode
[   82.938865][ T7221] netlink: 'syz.1.416': attribute type 2 has an invalid length.
[   82.941480][ T7221] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[   82.943922][ T7221] netlink: 'syz.1.416': attribute type 2 has an invalid length.
[   82.946634][ T7221] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[   83.774529][ T7255] netlink: 'syz.2.427': attribute type 11 has an invalid length.
[   83.782813][ T7256] netlink: 'syz.2.427': attribute type 10 has an invalid length.
[   83.800250][ T7256] bond0: (slave O3c): Enslaving as an active interface with an up link
[   83.808058][ T7254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.603067][ T7271] delete_channel: no stack
[   84.697427][ T7279] netlink: 'syz.1.434': attribute type 10 has an invalid length.
[   86.760524][ T7321] netlink: 'syz.2.447': attribute type 2 has an invalid length.
[   86.763022][ T7321] netlink: 'syz.2.447': attribute type 8 has an invalid length.
[   86.775326][ T7321] __nla_validate_parse: 10 callbacks suppressed
[   86.775338][ T7321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'.
[   86.970466][ T7332] netlink: 'syz.0.450': attribute type 10 has an invalid length.
[   87.038149][ T7332] team0: Port device geneve1 added
[   87.177485][ T7342] netlink: 'syz.1.453': attribute type 29 has an invalid length.
[   88.548332][ T7416] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.478'.
[   89.657688][ T7463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.495'.
[   89.744065][ T7474] validate_nla: 1 callbacks suppressed
[   89.744077][ T7474] netlink: 'syz.0.497': attribute type 10 has an invalid length.
[   89.802144][ T7473] netlink: 'syz.0.497': attribute type 28 has an invalid length.
[   90.426589][ T7495] delete_channel: no stack
[   90.994538][ T7527] netlink: 'syz.0.516': attribute type 41 has an invalid length.
[   91.037970][ T7532] netlink: 'syz.0.519': attribute type 21 has an invalid length.
[   91.040621][ T7532] netlink: 10498 bytes leftover after parsing attributes in process `syz.0.519'.
[   91.046103][ T7531] netlink: 'syz.0.519': attribute type 21 has an invalid length.
[   91.514295][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.524'.
[   91.518227][ T7546] netlink: 'syz.2.524': attribute type 11 has an invalid length.
[   91.520751][ T7546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.524'.
[   91.527758][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.524'.
[   91.534457][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.524'.
[   91.553122][ T7553] netlink: 'syz.1.526': attribute type 29 has an invalid length.
[   91.558971][ T7553] netlink: 'syz.1.526': attribute type 29 has an invalid length.
[   91.577180][ T7553] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.526'.
[   91.584014][ T7555] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.527'.
[   92.582359][ T7596] __nla_validate_parse: 2 callbacks suppressed
[   92.582371][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'.
[   92.588049][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'.
[   93.243599][ T7607] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.542'.
[   93.299762][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'.
[   93.303192][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'.
[   93.307121][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'.
[   93.338333][ T7614] !: renamed from dummy0 (while UP)
[   93.563153][ T7631] netlink: 'syz.1.549': attribute type 7 has an invalid length.
[   93.596047][ T7631] syzkaller0: tun_chr_ioctl cmd 1074025677
[   93.598203][ T7631] syzkaller0: linktype set to 805
[   93.907465][ T7638] netlink: 'syz.2.551': attribute type 39 has an invalid length.
[   94.419475][ T7650] netlink: 'syz.0.554': attribute type 11 has an invalid length.
[   94.422057][ T7650] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.554'.
[   94.444912][ T7650] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   94.452938][ T7650] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   94.498248][ T7649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.151163][ T7686] validate_nla: 1 callbacks suppressed
[   95.151175][ T7686] netlink: 'syz.0.564': attribute type 4 has an invalid length.
[   95.157327][ T7686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.564'.
[   95.162654][ T7686] net_ratelimit: 75 callbacks suppressed
[   95.162661][ T7686] wlan1: mtu less than device minimum
[   95.629439][ T7698] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.569'.
[   95.809870][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'.
[   96.490893][ T7724] netlink: 'syz.0.578': attribute type 21 has an invalid length.
[   97.989459][ T7738] sctp: [Deprecated]: syz.2.581 (pid 7738) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.989459][ T7738] Use struct sctp_sack_info instead
[   98.308053][ T7742] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   98.310252][ T7742] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   98.407652][ T7744] netlink: 'syz.0.584': attribute type 12 has an invalid length.
[   98.410724][ T7744] __nla_validate_parse: 2 callbacks suppressed
[   98.410732][ T7744] netlink: 120 bytes leftover after parsing attributes in process `syz.0.584'.
[   98.913656][ T7759] netlink: 'syz.2.590': attribute type 10 has an invalid length.
[   98.920310][ T7759] macvlan0: entered promiscuous mode
[   98.922430][ T7759] macvlan0: entered allmulticast mode
[   98.924199][ T7759] veth1_vlan: entered allmulticast mode
[   98.951757][ T7763] netlink: 'syz.1.592': attribute type 3 has an invalid length.
[   98.954146][ T7763] netlink: 'syz.1.592': attribute type 2 has an invalid length.
[   98.966141][ T7763] netlink: 'syz.1.592': attribute type 4 has an invalid length.
[   98.968556][ T7763] netlink: 167504 bytes leftover after parsing attributes in process `syz.1.592'.
[   98.996474][ T7766] netlink: 'syz.2.590': attribute type 29 has an invalid length.
[   98.999903][ T7766] netlink: 'syz.2.590': attribute type 29 has an invalid length.
[   99.006608][ T7766] netlink: 'syz.2.590': attribute type 29 has an invalid length.
[   99.071601][ T7768] netlink: 120 bytes leftover after parsing attributes in process `syz.1.594'.
[   99.169312][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.176935][ T1950] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.179481][ T1950] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.980762][ T7790] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.601'.
[  100.035858][ T7793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'.
[  100.044720][ T7790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'.
[  100.066763][ T7793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'.
[  100.213982][ T7803] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.606'.
[  100.230681][ T5828] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  100.505983][ T7824] netlink: 144 bytes leftover after parsing attributes in process `syz.0.613'.
[  101.331653][ T7850] validate_nla: 2 callbacks suppressed
[  101.331665][ T7850] netlink: 'syz.1.621': attribute type 12 has an invalid length.
[  101.336251][ T7850] netlink: 120 bytes leftover after parsing attributes in process `syz.1.621'.
[  101.489683][ T5828] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  102.292034][ T5828] Bluetooth: hci0: command tx timeout
[  102.416344][ T7892] sock: sock_timestamping_bind_phc: sock not bind to device
[  102.728784][ T7903] Q6\bY4: renamed from lo (while UP)
[  102.845489][ T7909] delete_channel: no stack
[  102.848072][ T7909] delete_channel: no stack
[  103.298743][ T7925] veth1_macvtap: left promiscuous mode
[  103.323191][ T7925] veth1_macvtap: entered promiscuous mode
[  103.326343][ T7925] macsec0: entered promiscuous mode
[  103.329195][ T7925] macsec0: entered allmulticast mode
[  103.331182][ T7925] veth1_macvtap: entered allmulticast mode
[  103.555500][ T5828] Bluetooth: hci2: command tx timeout
[  103.732678][ T7953] __nla_validate_parse: 5 callbacks suppressed
[  103.732738][ T7953] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.653'.
[  103.739039][ T7953] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.653'.
[  103.742305][ T7953] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.653'.
[  103.867932][ T7963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  103.871010][ T7963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  105.244032][ T7995] netlink: 'syz.1.663': attribute type 21 has an invalid length.
[  105.361760][ T8010] netlink: 17 bytes leftover after parsing attributes in process `syz.1.665'.
[  105.364593][ T8010] netlink: zone id is out of range
[  105.368370][ T8010] netlink: zone id is out of range
[  105.370032][ T8010] netlink: zone id is out of range
[  105.371639][ T8010] netlink: zone id is out of range
[  105.373239][ T8010] netlink: zone id is out of range
[  105.374888][ T8010] netlink: zone id is out of range
[  105.376927][ T8010] netlink: zone id is out of range
[  105.378704][ T8010] netlink: zone id is out of range
[  105.380341][ T8010] netlink: zone id is out of range
[  105.382010][ T8010] netlink: zone id is out of range
[  105.589104][ T8024] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  106.134681][ T8053] netlink: 'syz.0.673': attribute type 39 has an invalid length.
[  106.322641][ T8053] hsr_slave_0 (unregistering): left promiscuous mode
[  106.910038][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  106.921760][ T8068] netlink: 'syz.1.679': attribute type 10 has an invalid length.
[  106.970508][ T8068] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  106.973954][ T8067] netlink: 'syz.1.679': attribute type 12 has an invalid length.
[  106.976854][ T8067] netlink: 120 bytes leftover after parsing attributes in process `syz.1.679'.
[  107.041107][ T8076] netlink: 'syz.1.681': attribute type 29 has an invalid length.
[  107.058850][ T8076] netlink: 'syz.1.681': attribute type 4 has an invalid length.
[  107.061510][ T8076] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  107.063953][ T8076] netlink: 'syz.1.681': attribute type 2 has an invalid length.
[  107.067938][ T8076] netlink: 129968 bytes leftover after parsing attributes in process `syz.1.681'.
[  107.072541][ T8076] netlink: 'syz.1.681': attribute type 29 has an invalid length.
[  107.087732][ T8078] netlink: 'syz.2.682': attribute type 27 has an invalid length.
[  107.090534][ T8078] netlink: 'syz.2.682': attribute type 3 has an invalid length.
[  107.093130][ T8078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.682'.
[  107.357377][ T8098] netlink: 'syz.1.688': attribute type 12 has an invalid length.
[  107.359929][ T8098] netlink: 120 bytes leftover after parsing attributes in process `syz.1.688'.
[  107.837540][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'.
[  109.167938][ T8200] __nla_validate_parse: 8 callbacks suppressed
[  109.167949][ T8200] netlink: 120 bytes leftover after parsing attributes in process `syz.0.722'.
[  109.260990][ T8206] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.727'.
[  109.448317][ T8224] netlink: 168 bytes leftover after parsing attributes in process `syz.0.732'.
[  109.544348][ T8228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.734'.
[  109.630882][ T8232] netlink: 120 bytes leftover after parsing attributes in process `syz.0.736'.
[  110.324833][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'.
[  110.329327][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'.
[  110.332481][ T8248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'.
[  110.335990][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'.
[  110.498643][ T8252] netlink: 120 bytes leftover after parsing attributes in process `syz.1.743'.
[  111.964457][ T8328] validate_nla: 21 callbacks suppressed
[  111.964519][ T8328] netlink: 'syz.0.769': attribute type 3 has an invalid length.
[  111.975678][ T8328] netlink: 'syz.0.769': attribute type 3 has an invalid length.
[  112.145412][ T8345] netlink: 'syz.1.774': attribute type 12 has an invalid length.
[  112.484182][ T8380] netlink: 'syz.1.785': attribute type 11 has an invalid length.
[  112.522348][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.301696][ T8391] netlink: 'syz.2.789': attribute type 12 has an invalid length.
[  126.818819][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 10663572394 wd_nsec: 10663572602
[  127.430562][ T8405] syzkaller0: entered promiscuous mode
[  127.432473][ T8405] syzkaller0: entered allmulticast mode
[  127.738711][ T8447] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  127.747541][ T8444] __nla_validate_parse: 13 callbacks suppressed
[  127.747597][ T8444] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.803'.
[  127.811617][ T8451] net_ratelimit: 73 callbacks suppressed
[  127.811630][ T8451] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  127.815617][ T8451] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  127.860677][ T8454] netlink: 168 bytes leftover after parsing attributes in process `syz.0.805'.
[  128.873675][ T8534] tap0: tun_chr_ioctl cmd 1074025677
[  128.875725][ T8534] tap0: linktype set to 769
[  128.877750][ T8534] tap0: tun_chr_ioctl cmd 1074812118
[  129.646844][ T8572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.842'.
[  129.684391][ T8574] netlink: 'syz.2.843': attribute type 12 has an invalid length.
[  129.698071][ T8574] netlink: 120 bytes leftover after parsing attributes in process `syz.2.843'.
[  129.937788][ T8598] netlink: 'syz.0.853': attribute type 2 has an invalid length.
[  129.940278][ T8598] netlink: 198064 bytes leftover after parsing attributes in process `syz.0.853'.
[  130.148885][ T8606] netlink: 'syz.2.855': attribute type 12 has an invalid length.
[  130.151343][ T8606] netlink: 120 bytes leftover after parsing attributes in process `syz.2.855'.
[  130.332134][ T8621] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.859'.
[  130.340630][ T5828] Bluetooth: hci1: Malformed HCI Event
[  130.350025][ T8621] netlink: 'syz.1.859': attribute type 41 has an invalid length.
[  130.352528][ T8621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'.
[  130.512322][ T8647] netlink: 'syz.0.868': attribute type 39 has an invalid length.
[  130.623858][ T8658] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.872'.
[  130.738968][ T8667] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.877'.
[  130.743358][ T8668] netlink: 'syz.1.876': attribute type 12 has an invalid length.
[  130.754160][ T8667] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  131.080323][ T8678] tun0: tun_chr_ioctl cmd 1074025677
[  131.082541][ T8678] tun0: linktype set to 774
[  131.471461][ T8693] netlink: 'syz.2.886': attribute type 12 has an invalid length.
[  132.296196][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.298324][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.540823][ T8722] netlink: 'syz.1.896': attribute type 12 has an invalid length.
[  132.644694][ T8733] netlink: 'syz.0.902': attribute type 3 has an invalid length.
[  133.690794][ T8748] __nla_validate_parse: 5 callbacks suppressed
[  133.690805][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'.
[  133.753691][ T8756] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.908'.
[  133.828434][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.909'.
[  133.925123][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.911'.
[  133.928486][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.911'.
[  134.086627][ T8765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.912'.
[  134.090054][ T8767] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.913'.
[  135.107616][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  135.512746][ T8819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.930'.
[  135.718766][ T8827] netlink: 825 bytes leftover after parsing attributes in process `syz.1.932'.
[  136.255037][ T8863] validate_nla: 3 callbacks suppressed
[  136.255049][ T8863] netlink: 'syz.0.946': attribute type 11 has an invalid length.
[  136.849313][ T8921] netlink: 'syz.0.969': attribute type 10 has an invalid length.
[  136.878771][ T8921] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  136.882145][ T8921] bond0: (slave wlan1): Releasing backup interface
[  137.616466][ T8978] netlink: 'syz.1.989': attribute type 12 has an invalid length.
[  137.824722][ T8999] netlink: 'syz.2.996': attribute type 12 has an invalid length.
[  138.050071][ T9022] netlink: 'syz.2.1005': attribute type 29 has an invalid length.
[  138.052991][ T9022] netlink: 'syz.2.1005': attribute type 29 has an invalid length.
[  138.277682][ T9036] netlink: 'syz.2.1009': attribute type 29 has an invalid length.
[  138.364960][ T9043] netlink: 'syz.2.1012': attribute type 12 has an invalid length.
[  139.150395][ T9070] __nla_validate_parse: 18 callbacks suppressed
[  139.150430][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1023'.
[  139.288867][ T9088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1027'.
[  139.555860][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1036'.
[  139.601844][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'.
[  139.604757][ T9119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1038'.
[  139.709936][ T9124] netlink: 'syz.1.1040': attribute type 21 has an invalid length.
[  139.713164][ T9124] netlink: 'syz.1.1040': attribute type 6 has an invalid length.
[  139.717319][ T9124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1040'.
[  139.767590][ T9133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1042'.
[  139.773947][ T9133] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1042'.
[  140.017757][ T9155] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1047'.
[  140.020836][ T9155] nbd: illegal input index 65540
[  140.129993][ T9161] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1049'.
[  141.316170][ T9218] validate_nla: 5 callbacks suppressed
[  141.316183][ T9218] netlink: 'syz.2.1069': attribute type 12 has an invalid length.
[  141.392285][ T9225] netlink: 'syz.1.1071': attribute type 16 has an invalid length.
[  142.002852][ T9254] netlink: 'syz.0.1081': attribute type 12 has an invalid length.
[  157.216014][ T5220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.219362][ T5220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.222262][ T5220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.227531][ T5220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.230915][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.316376][ T5220] Bluetooth: hci3: command tx timeout
[  159.954562][ T9267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  159.961585][ T9267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  159.964725][ T9267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  159.967546][ T9267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.970148][ T9267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  159.973100][ T9267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.977587][ T9267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.980111][ T9267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  159.982801][ T9267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  159.985137][ T9267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  161.405535][ T9268] Bluetooth: hci3: command tx timeout
[  162.035450][ T9268] Bluetooth: hci4: command tx timeout
[  162.037720][ T9268] Bluetooth: hci5: command tx timeout
[  163.475401][   T55] Bluetooth: hci3: command tx timeout
[  164.115542][   T55] Bluetooth: hci5: command tx timeout
[  164.117440][   T55] Bluetooth: hci4: command tx timeout
[  165.565612][ T9268] Bluetooth: hci3: command tx timeout
[  166.195720][ T9268] Bluetooth: hci4: command tx timeout
[  166.198203][ T9268] Bluetooth: hci5: command tx timeout
[  168.275596][   T55] Bluetooth: hci5: command tx timeout
[  168.277487][ T9268] Bluetooth: hci4: command tx timeout
[  217.726802][ T9267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.733057][ T9267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.736476][ T9267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.739291][ T9267] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.742138][ T9267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  217.807949][ T9267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  217.812264][ T9267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.815315][ T9267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.818539][ T9267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.821051][ T9267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.890915][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  217.894220][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  217.897919][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  217.900684][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  217.903244][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  219.795560][ T9267] Bluetooth: hci7: command tx timeout
[  219.875494][ T9267] Bluetooth: hci6: command tx timeout
[  219.955392][ T9267] Bluetooth: hci8: command tx timeout
[  221.875632][ T9267] Bluetooth: hci7: command tx timeout
[  221.956647][ T9267] Bluetooth: hci6: command tx timeout
[  222.036887][ T9267] Bluetooth: hci8: command tx timeout
[  223.955472][ T9267] Bluetooth: hci7: command tx timeout
[  224.036850][ T9267] Bluetooth: hci6: command tx timeout
[  224.115469][ T9267] Bluetooth: hci8: command tx timeout
[  226.035336][ T9267] Bluetooth: hci7: command tx timeout
[  226.115413][ T9267] Bluetooth: hci6: command tx timeout
[  226.206625][ T9267] Bluetooth: hci8: command tx timeout
[  246.955191][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  246.957365][    C1] rcu: 	1-....: (10500 ticks this GP) idle=5934/1/0x4000000000000000 softirq=29299/29301 fqs=4748
[  246.962084][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  246.964158][    C1] rcu: 	 number:  1037889          0            0
[  246.966213][    C1] rcu: 	cputime:    24190      28299           87   ==> 52490(ms)
[  246.968688][    C1] rcu: 	(t=10500 jiffies g=18937 q=8642 ncpus=2)
[  246.970700][    C1] CPU: 1 UID: 0 PID: 9249 Comm: syz.1.1080 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  246.970710][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.970715][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  246.970732][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  246.970738][    C1] RSP: 0018:ffffc900001e05e0 EFLAGS: 00000206
[  246.970746][    C1] RAX: b8fc781f800d6200 RBX: 1ffff9200003c0c4 RCX: b8fc781f800d6200
[  246.970751][    C1] RDX: 0000000000000003 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  246.970755][    C1] RBP: ffffc900001e06d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  246.970760][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  246.970764][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  246.970768][    C1] FS:  00007fce3b6b26c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  246.970774][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  246.970778][    C1] CR2: 000000110c3695b9 CR3: 0000000117d58000 CR4: 00000000000006f0
[  246.970803][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  246.970809][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  246.970812][    C1] Call Trace:
[  246.970818][    C1]  <IRQ>
[  246.970821][    C1]  ? __lock_acquire+0xab9/0xd20
[  246.970836][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  246.970847][    C1]  ? unwind_next_frame+0xa5/0x2390
[  246.970859][    C1]  __rcu_read_unlock+0x84/0xe0
[  246.970869][    C1]  ? unwind_next_frame+0xa5/0x2390
[  246.970876][    C1]  unwind_next_frame+0x19ae/0x2390
[  246.970887][    C1]  ? unwind_next_frame+0xa5/0x2390
[  246.970894][    C1]  ? tomoyo_realpath_from_path+0x58d/0x5d0
[  246.970908][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  246.970917][    C1]  arch_stack_walk+0x11c/0x150
[  246.970929][    C1]  ? tomoyo_check_open_permission+0x1c1/0x3b0
[  246.970939][    C1]  stack_trace_save+0x9c/0xe0
[  246.970948][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  246.970958][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  246.970966][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  246.970975][    C1]  kasan_save_track+0x3e/0x80
[  246.970982][    C1]  ? kasan_save_track+0x3e/0x80
[  246.970987][    C1]  ? kasan_save_free_info+0x46/0x50
[  246.970995][    C1]  ? __kasan_slab_free+0x62/0x70
[  246.971000][    C1]  ? kmem_cache_free+0x18f/0x400
[  246.971007][    C1]  ? rcu_core+0xca8/0x1710
[  246.971013][    C1]  ? handle_softirqs+0x286/0x870
[  246.971019][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  246.971025][    C1]  ? irq_exit_rcu+0x9/0x30
[  246.971031][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  246.971040][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.971047][    C1]  ? preempt_schedule_irq+0xb0/0x150
[  246.971055][    C1]  ? irqentry_exit+0x6f/0x90
[  246.971067][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.971073][    C1]  ? __slab_free+0x270/0x400
[  246.971081][    C1]  ? qlist_free_all+0x97/0x140
[  246.971089][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  246.971098][    C1]  ? __kasan_kmalloc+0x22/0xb0
[  246.971103][    C1]  ? __kmalloc_noprof+0x27a/0x4f0
[  246.971109][    C1]  ? tomoyo_encode+0x28b/0x550
[  246.971116][    C1]  ? tomoyo_realpath_from_path+0x58d/0x5d0
[  246.971142][    C1]  ? rcu_core+0xca8/0x1710
[  246.971147][    C1]  kasan_save_free_info+0x46/0x50
[  246.971156][    C1]  __kasan_slab_free+0x62/0x70
[  246.971163][    C1]  kmem_cache_free+0x18f/0x400
[  246.971170][    C1]  ? __pfx_delayed_free_vfsmnt+0x10/0x10
[  246.971179][    C1]  ? rcu_core+0xc34/0x1710
[  246.971186][    C1]  rcu_core+0xca8/0x1710
[  246.971192][    C1]  ? debug_object_activate+0x2e2/0x420
[  246.971208][    C1]  ? __pfx_rcu_core+0x10/0x10
[  246.971216][    C1]  ? handle_softirqs+0x286/0x870
[  246.971226][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  246.971234][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.971243][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  246.971250][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  246.971262][    C1]  handle_softirqs+0x286/0x870
[  246.971271][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  246.971281][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  246.971290][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  246.971301][    C1]  __irq_exit_rcu+0xca/0x1f0
[  246.971308][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  246.971319][    C1]  irq_exit_rcu+0x9/0x30
[  246.971325][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  246.971334][    C1]  </IRQ>
[  246.971336][    C1]  <TASK>
[  246.971339][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.971345][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  246.971353][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 1d 21 f6 e8 c6 f0 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  246.971358][    C1] RSP: 0018:ffffc9000423f280 EFLAGS: 00000282
[  246.971364][    C1] RAX: b8fc781f800d6200 RBX: 0000000000000000 RCX: b8fc781f800d6200
[  246.971368][    C1] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: 0000000000000001
[  246.971372][    C1] RBP: ffffc9000423f320 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  246.971376][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  246.971380][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000847e50
[  246.971394][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  246.971406][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  246.971414][    C1]  irqentry_exit+0x6f/0x90
[  246.971422][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.971428][    C1] RIP: 0010:__slab_free+0x270/0x400
[  246.971436][    C1] Code: ea 48 8b 4c 24 10 4d 89 f8 e8 fc df ff ff 41 89 c7 e9 23 fe ff ff 48 8b 5c 24 10 4c 89 f9 4c 89 ea 4c 89 c8 f0 48 0f c7 4e 20 <0f> 85 54 fe ff ff 48 85 ed 75 2c 45 85 ed 79 59 65 48 8b 05 c8 ff
[  246.971441][    C1] RSP: 0018:ffffc9000423f3e0 EFLAGS: 00000242
[  246.971446][    C1] RAX: ffff888119be6cb0 RBX: ffff888119be6b60 RCX: 000000000024001d
[  246.971484][    C1] RDX: 000000000024001e RSI: ffffea000466f980 RDI: ffffffff00000000
[  246.971489][    C1] RBP: 0000000000000000 R08: 000000000000001d R09: ffff888119be6cb0
[  246.971493][    C1] R10: 0000000000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  246.971497][    C1] R13: 000000000024001e R14: 0000000000000000 R15: 000000000024001d
[  246.971512][    C1]  ? __phys_addr+0xd3/0x180
[  246.971523][    C1]  qlist_free_all+0x97/0x140
[  246.971534][    C1]  kasan_quarantine_reduce+0x148/0x160
[  246.971544][    C1]  __kasan_kmalloc+0x22/0xb0
[  246.971552][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  246.971559][    C1]  ? tomoyo_encode+0x28b/0x550
[  246.971569][    C1]  tomoyo_encode+0x28b/0x550
[  246.971581][    C1]  tomoyo_realpath_from_path+0x58d/0x5d0
[  246.971596][    C1]  tomoyo_check_open_permission+0x1c1/0x3b0
[  246.971605][    C1]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  246.971612][    C1]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  246.971636][    C1]  ? mnt_get_write_access+0x68/0x2a0
[  246.971645][    C1]  ? security_file_open+0x10/0x270
[  246.971652][    C1]  ? tomoyo_file_open+0x165/0x220
[  246.971664][    C1]  security_file_open+0xb1/0x270
[  246.971672][    C1]  do_dentry_open+0x35e/0x1970
[  246.971688][    C1]  vfs_open+0x3b/0x340
[  246.971696][    C1]  ? path_openat+0x2ecd/0x3830
[  246.971707][    C1]  path_openat+0x2ee5/0x3830
[  246.971731][    C1]  ? __pfx_path_openat+0x10/0x10
[  246.971749][    C1]  do_filp_open+0x1fa/0x410
[  246.971759][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  246.971781][    C1]  ? do_sys_openat2+0x10a/0x1c0
[  246.971792][    C1]  do_sys_openat2+0x121/0x1c0
[  246.971802][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  246.971809][    C1]  ? irqentry_exit+0x74/0x90
[  246.971822][    C1]  __x64_sys_openat+0x138/0x170
[  246.971834][    C1]  do_syscall_64+0xfa/0x3b0
[  246.971844][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.971850][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.971858][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.971864][    C1] RIP: 0033:0x7fce3a78e9a9
[  246.971873][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.971878][    C1] RSP: 002b:00007fce3b6b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  246.971884][    C1] RAX: ffffffffffffffda RBX: 00007fce3a9b5fa0 RCX: 00007fce3a78e9a9
[  246.971889][    C1] RDX: 00000000000026e1 RSI: 0000200000000940 RDI: ffffffffffffff9c
[  246.971893][    C1] RBP: 00007fce3a810d69 R08: 0000000000000000 R09: 0000000000000000
[  246.971896][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.971900][    C1] R13: 0000000000000000 R14: 00007fce3a9b5fa0 R15: 00007ffd71e3bc38
[  246.971912][    C1]  </TASK>
[  247.237981][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
21:04:42  Registers:
info registers vcpu 0

CPU#0
RAX=3b785e189f574600 RBX=ffffffff81976a48 RCX=3b785e189f574600 RDX=0000000000000001
RSI=ffffffff8d99883e RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f728afb96c0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000082 DR2=0000200000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f251d386d00
XMM02=1298809000000025 0012908000000000 XMM03=80900001d0030012 a080900001d00300
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=b00300100002a003 0010000200000027 XMM07=0002800300000000 ffffff0401f00300
XMM08=080001e803000800 01e0030000000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000047 RBX=0000000000000047 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df910
R8 =ffff888107c30237 R9 =1ffff11020f86046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58b8 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fce3b6b26c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3695b9 CR3=0000000117d58000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000c05000000 0000000000000866 XMM03=0000000000009500 0000000000009500
XMM04=0000000000000000 0000000000000000 XMM05=9500000000000000 95000000000c0500
XMM06=0000000000000000 0866000000040000 XMM07=1085000000060000 1085000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fce3a811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
