last executing test programs:

4m27.960660468s ago: executing program 1 (id=356):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_ioapic_delayed_eoi_inj\x00', r1, 0x0, 0x4}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

4m27.85902369s ago: executing program 1 (id=357):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128a00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000100)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38) (async)
sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000040)="bc0eb1", 0x3}, {&(0x7f0000000440)="2dadd9b4f113b2dde506be7b02cb0ffcc2d5af8bb66d0b5f60a76542402093bbb15372c1ef85e87189565da4a9fac4ab0e8d179b0bdc82721971b60b7811d6413cde116374b5ca3116f12baa22ec80aae7cd25983c57e5a63bb487131f2ccf571e69e2472c0f94eba2a3f20f73b3cc6ad20ab45ed82cece21a65cf85b87204e5c44be8d1a2fa187a24ff336d9d42e6c86c22e45d9ed85cf81a9473", 0x9b}, {&(0x7f0000000080)="1540df47ea23ce4ba3b404ca6beeebc884498de99fb736201a159326bb6deaa17eb51d48d32924c07c9ae6d9dd16b5803ac4ea712ff3dbcbd8a2f9150f9f3fc8cfcbd26d01688516d541f3d0da2bd471", 0x50}, {&(0x7f0000000500)="3a532d3b23524be37d44b602c2", 0xd}, {&(0x7f0000000540)="ab69b6e9600eedff9dc02c55053a4d", 0xf}], 0x5, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffff7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @loopback}}}], 0x50}, 0x4008800)

4m26.999105687s ago: executing program 1 (id=370):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

4m26.360837263s ago: executing program 1 (id=373):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r2, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x9e, &(0x7f0000000140)}, 0x10) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e9028100000000ffe20000000061100c1e02000000620400dfff00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219}, 0x94)

4m26.008917932s ago: executing program 2 (id=383):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814)
recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

4m25.929102564s ago: executing program 2 (id=385):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x3d, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @jmp={0x5, 0x1, 0x3, 0xb, 0x3, 0xfffffffffffffdf0, 0x10}, @cb_func={0x18, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x81, 0xc, 0xe, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x877e}}, @call={0x85, 0x0, 0x0, 0x4e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x200, 0x27, &(0x7f0000000200)=""/39, 0x41100, 0x28, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r0, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000ac0)=[{}, {}], 0x10, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x141, 0x141, 0xa, [@union={0x4, 0x1, 0x0, 0x5, 0x1, 0x4, [{0x3, 0x3, 0x1}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @struct={0x1, 0x1, 0x0, 0x4, 0x0, 0xa, [{0xa, 0x3, 0x8}]}, @datasec={0xe, 0x8, 0x0, 0xf, 0x3, [{0x5, 0x1, 0x401}, {0x4, 0x9, 0xf1}, {0x4, 0x3, 0x6}, {0x2, 0x3, 0x8}, {0x4, 0x7, 0x6}, {0x2, 0x9, 0x92a}, {0x3, 0x7, 0x40d}, {0x2, 0x1, 0x9}], "5d540e"}, @datasec={0xf, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x3, 0x6}, {0x4, 0xd4e9, 0x2}, {0x1, 0x1000, 0x3}, {0x2, 0x0, 0x8}, {0x3, 0x40, 0xe84}], "40f8"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x5}, {0xe, 0x5}, {0xd, 0x4}]}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x1e, 0x30, 0x51, 0x0]}}, &(0x7f0000000040)=""/123, 0x166, 0x7b, 0x1, 0xfb45, 0x10000}, 0x28) (async)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdf8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m25.828231735s ago: executing program 2 (id=387):
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff, 0x400000000000000}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5707ec20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000980)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x6, 0x9, 0x10, 0xff, 0x0, 0x7fef, 0x9033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xae7}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x3, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x2, 0x8001}, 0x0, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x33, 0xfffffbff, 0x8, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x14, &(0x7f0000000000), 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708000008ea00007b8af80900005c10b124b9534269c418d1c998563f4a86de564f5c0f0139a04febaa55cf9e5b60a13d13d89f3bbd2f21c60ada8b107ee25adfdd182842f8795e57a02a7d21a724bf1d99dceb79de2ecca861f8e4a5b3137d0d700aaddfe4cfc1c3807bdffd5749f6b856421b5c17f748a7f026ac5970b59b9db5c36ed4cb14db0bf031650c94efbf55216d9b18520573b0471f"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
close(r5)
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x10082, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x400, 0x0, 0x0, 0x0, 0xa9e6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x200000000000005a, &(0x7f0000000f40)=ANY=[@ANYRES32=r4, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xa}, 0x94)

4m25.680538904s ago: executing program 2 (id=390):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r0 = socket$kcm(0xa, 0x2, 0x73) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000002c0), &(0x7f00000001c0)=r2}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_procs(r5, &(0x7f0000001140)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r7, &(0x7f0000001840)={&(0x7f00000011c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e24, 0x5f, @loopback, 0xfff}}}, 0x80, 0x0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sendmsg$inet(r0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

4m25.54058381s ago: executing program 2 (id=393):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000001000009f030000ff00000000000400", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000030000000b00"/28], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01ff8d00"})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0xffffffa4, 0x2, 0x8000, r0, 0xbaa1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0xf, @value=r2}, 0x50)

4m25.489234312s ago: executing program 1 (id=394):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d86000001c0081044e81f782db44b904021d080207000000810000a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)

4m25.329665389s ago: executing program 1 (id=395):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020208000b000300010004000c00eab556a705251e618294ff0051d891ab0c3f30815137e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa85}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x50)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x10000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x3126, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x6, 0x53d00000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r5], 0x0, 0x10, 0x2c}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x9}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000000c0)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x80000000, 0x7a}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)

4m25.273535538s ago: executing program 32 (id=395):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020208000b000300010004000c00eab556a705251e618294ff0051d891ab0c3f30815137e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa85}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x50)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x10000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x3126, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x6, 0x53d00000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r5], 0x0, 0x10, 0x2c}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x9}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000000c0)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x80000000, 0x7a}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)

4m25.229984225s ago: executing program 2 (id=397):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x42, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0xfff, 0x4, 0x321, 0x541ca, 0xffffffffffffffff, 0x5, '\x00', 0x0, r4, 0x1, 0x2, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', r3, r4, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x0, 0xb, 0xc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x4c65, 0xf1, &(0x7f00000002c0)=""/241, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x2, 0x769}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x3, 0x5, 0x2, 0xa}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000450000000000000000000000850000006c00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m25.229590916s ago: executing program 33 (id=397):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x42, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0xfff, 0x4, 0x321, 0x541ca, 0xffffffffffffffff, 0x5, '\x00', 0x0, r4, 0x1, 0x2, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', r3, r4, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x0, 0xb, 0xc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x4c65, 0xf1, &(0x7f00000002c0)=""/241, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x2, 0x769}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x3, 0x5, 0x2, 0xa}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000450000000000000000000000850000006c00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.549470789s ago: executing program 3 (id=3188):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x10}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)

17.468096923s ago: executing program 3 (id=3189):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x31, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

17.000053655s ago: executing program 3 (id=3196):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x14, &(0x7f0000001880)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000001000000180000001000000000000000060000001863000009000000000000000800000018110000", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="6dcfac455d3fcf9569528fed40a9133ba9b4ff825905efae174d7ac2c26f0fefad1e6280bada56a4258535d783079dc50878f3391066335600cb3b517eb8c556", @ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x9, 0x9c, &(0x7f0000001700)=""/156, 0x40f00, 0x1fd3c5cefae51c6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0x6, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001540)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001580)=[{0x2, 0x1, 0x4}, {0x2, 0x5, 0x4}, {0x1, 0x24, 0x7, 0xa}, {0x5, 0x1, 0x2, 0xc}, {0x5, 0x3, 0x6, 0x7}, {0x3, 0x4, 0x10, 0x5}, {0x2, 0x2, 0x800000a, 0x7}, {0x0, 0x5, 0xf, 0xa}], 0x10, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000016c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_config_ext={0x407fff, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d2f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0x9}, 0x1410d, 0x100000001, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xa, 0xffffffffffffffff, 0x9)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x101, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000000), 0x5}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000200000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\a\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r5=>0x0, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='skb_copy_datagram_iovec\x00', r6, 0x0, 0x4651}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1)
setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000080), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0xa, 0x5, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000005000000000100000000000000", @ANYBLOB="990cd2335d0f2670a42e9a6d6d9e00", @ANYBLOB='\x00'/20, @ANYRES8=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f0000000000)='p', 0x0}, 0x20)
sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8, 0xfffffffe}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)

16.929026983s ago: executing program 3 (id=3198):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x7b, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000df7f792d0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=r3, 0x4)
ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000580)=0x401)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005f"], 0x0, 0x36}, 0x28)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003a80)={0x0, 0x0, 0x0}, 0x4008804)
socket$kcm(0x2, 0x3, 0x2)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4)
sendmsg$inet(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0xfffffff8, 0x28, &(0x7f00000001c0)=""/40, 0x40f00, 0xa, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x7}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xe, 0x1, 0x76}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r1, r3]}, 0x94)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000680)=0xe1c)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000007c0)={'virt_wifi0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x37}, 0x94)

16.3597348s ago: executing program 4 (id=3199):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000002d0d81179d657b34951244217b15c50a000000000000000000000085000000a000000095000000000000001684a2784a98e753a745844b46839db82dec2630c6411c3972018b35e80c765dc1f0e29d593c8549c950631ef48d19fd4ef25434bbe4703790e16f87e2423e8a3246d76b816f77ed3446120c6a7a1c531994f4818093a16ff4b42d81376e6226de4b2192bc69a82146638369614f9aa26d636a22d70f1858e092ebacc15b0e2073501c842e81"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) (async)
close(r2) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x4}, 0x8) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='\x00') (async)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x8, 0x22, 0x81, 0x0, 0x5bc, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x6, 0x4}, 0x10821, 0x9, 0x101, 0x1, 0x9, 0x1, 0x8, 0x0, 0x7fff, 0x0, 0x8}, r0, 0x4, r1, 0x8)

16.310695841s ago: executing program 4 (id=3200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200), 0x5d) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x41) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000022c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f0000001640)=""/178, 0xb2}], 0x7, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2)

16.310219283s ago: executing program 4 (id=3201):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1cc300005e0007", @ANYRESHEX=0x0], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x122)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff1085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.200447583s ago: executing program 4 (id=3202):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffa}, 0x4592, 0x32, 0xfffffbff, 0x5, 0x8, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x91, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f286dd1a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x11)
syz_clone(0x28000, 0x0, 0x0, 0x0, 0x0, 0x0)

16.199608134s ago: executing program 4 (id=3205):
r0 = socket$kcm(0x15, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0xf000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB="0000008080000000000000000000000000000000998644d7c2223d1f465307f84ed4522071c1f01de1b29a5f40930407e163e53500e1754220390e295ed67984a14ffd08a0434449e1d94cbaf716d39500ac8c2bfa045c4256c6b3ace9e0e3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000003f40)=""/4096, 0xcd, 0x1000, 0x0, 0x7fffffff, 0x10000}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, <r6=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x36, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x2, 0x7, 0xa, 0x10, 0x8}], &(0x7f0000000340)='syzkaller\x00', 0x99f, 0x1000, &(0x7f0000002f40)=""/4096, 0x41000, 0x2, '\x00', 0x0, @fallback=0x28, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xa, 0x7ff, 0x47}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000540)=[r1, r6, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000005c0)=[{0x1, 0x5, 0xd, 0x1}, {0x2, 0x2, 0xa, 0x5}, {0x0, 0x3, 0x0, 0x3}, {0x3, 0x4, 0x7, 0x5}], 0x10, 0x8}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0xfff, <r7=>0x0}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002020000000000000001000005002f10dc8700000001000000000000000000"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000a00)='fsi_master_read\x00', r8, 0x0, 0x800000c67}, 0x18)
r9 = socket$kcm(0x10, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c00000000006113660000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd43faff0000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa9}, 0x94)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

16.069959582s ago: executing program 3 (id=3208):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socket$kcm(0x10, 0x0, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160009000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee40900ce01da1a348da9354ee6bd1a60850c9900001fb791643a5ee4ce1b14d6d9", 0x79}, {&(0x7f0000000340)="02f1bbf28ef65ac8ad6087b93e10b1d959bed6d04f8b91d1c39d4a42e02aa0f7281eb7c261c5736709df6989f2abad41bc854a8818b5991a6acde02068ec310f0886841a2ce73c54b1fb89db69f4b265240ad17054088ab0bb68e28a3b5220", 0x5f}], 0x2}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, &(0x7f0000000080))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10)
syz_clone(0xa3ae8500, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

16.068220463s ago: executing program 0 (id=3210):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000c40000006a0a00ff000000004c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)

15.990822342s ago: executing program 0 (id=3211):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000033a74db091819bab"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180008000000010000000000050000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x3}, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000fdffffffdbaaf0ff50000000bf8600000000000007080000c8070000bfa400000000000007040000f0ffefffd50000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$kcm(0x29, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040), 0x4) (async)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0)
sendmsg$kcm(r3, 0x0, 0x10) (async, rerun: 64)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x800000000007fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14305, 0x31, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x5, 0xffffffffffffffff, 0xf) (async, rerun: 64)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x6, &(0x7f00000007c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x33}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0xb607}], &(0x7f0000000880)='GPL\x00', 0x6, 0xaf, &(0x7f00000008c0)=""/175, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000a80)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r1], 0x0, 0x10, 0x8}, 0x94)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x70, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async)
r6 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f0000000640)=""/137, 0x89}], 0x7}, 0x10001) (async)
setsockopt$sock_attach_bpf(r6, 0x6, 0x24, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) (rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000009000000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xc, 0xffffffffffffffff, 0x9) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64)

15.570233062s ago: executing program 0 (id=3212):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000027c0)=""/4045, 0xfcd}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000b40)=""/138, 0x8a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000080)=""/187, 0xbb}], 0x7}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

15.531472846s ago: executing program 3 (id=3213):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000b085b94954b1333200000069116e0000000000851000000200"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x2, @perf_config_ext={0x4}, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x7fff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = syz_clone(0x120000, &(0x7f0000000680), 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000800)="56e9829041987dbed167a933800a4800839d6a13e3e7d6bf78a05f25d24c2d254f7baa467ebd45b6ac021e4f469164")
perf_event_open(0x0, r8, 0x8, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x9}, 0x1000, 0x2, 0x0, 0x9, 0x9, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)

15.529437888s ago: executing program 0 (id=3214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x25, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12000}, @map_fd={0x18, 0xb}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ringbuf_query, @jmp={0x5, 0x1, 0xb, 0x9, 0x0, 0x100, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0xa7, &(0x7f0000000180)=""/167, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x3, 0x39741e07}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], <r2=>0x0, 0xf2, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pI4   \x00'}, 0x20)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000700)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000740)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0x2}, 0x10, 0x2e531, r0, 0x7, &(0x7f00000009c0)=[r4, r5, r6], &(0x7f0000000a00)=[{0x3, 0x1, 0x1, 0xc}, {0x3, 0x1, 0x0, 0x1}, {0x4, 0x5, 0x1, 0x7}, {0x4, 0x1, 0x10, 0xb}, {0x5, 0x1, 0xb, 0x6}, {0x0, 0x5, 0xd, 0x7}, {0x1, 0x1, 0x3, 0x3}], 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r6)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x10000, '\x00', r1, r11, 0x5, 0x2, 0x3}, 0x50) (async)
r12 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000cc0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r12, &(0x7f0000000d00)={'a', ' *:* ', 'rw\x00'}, 0x9) (async)
r13 = socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='wbt_lat\x00', r0, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ec0)={@ifindex=<r14=>r1, 0x33, 0x1, 0x9, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0], &(0x7f0000000e80)=[0x0], <r15=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f00)={@fallback=r6, r7, 0x10, 0x0, 0x0, @void, @value=r0, @void, @void, r15}, 0x20) (async)
recvmsg$unix(r9, &(0x7f0000002000)={&(0x7f0000000f40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x40) (async)
close(r8) (async)
r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x180, 0x0)
ioctl$TUNSETSTEERINGEBPF(r16, 0x800454e0, &(0x7f0000002080)=r7)
socketpair(0x2a, 0xa, 0x99f, &(0x7f00000020c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff}) (async)
mkdir(&(0x7f0000002100)='./file0\x00', 0x100) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002500)={r11, 0x20, &(0x7f00000024c0)={&(0x7f0000002380), 0x0, <r18=>0x0, &(0x7f00000023c0)=""/254, 0xfe}}, 0x10)
r19 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0xb, 0x16, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x2, 0xa, 0xa, 0xc, 0xfffffffffffffff0}]}, &(0x7f0000002200)='syzkaller\x00', 0xffe00000, 0x98, &(0x7f0000002240)=""/152, 0x41100, 0x32, '\x00', r1, @fallback, r11, 0x8, &(0x7f0000002300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002340)={0x1, 0x0, 0x4}, 0x10, r18, r7, 0x6, 0x0, &(0x7f0000002540)=[{0x3, 0x2, 0x2, 0x1}, {0x5, 0x4, 0x1}, {0x2, 0x1, 0x6, 0x8}, {0x1, 0x5, 0xd, 0x3}, {0x1, 0x5, 0x2, 0x8}, {0x1, 0x4, 0xd, 0x1}], 0x10, 0xffffffff}, 0x94) (async)
socket$kcm(0x29, 0x7, 0x0) (async)
sendmsg$inet(r17, &(0x7f0000002bc0)={&(0x7f0000002680)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000026c0)="c7a99323d0b170882d131bfa5248e10e1c67c065d220e9233ebd78dba3ebe0844a06104712723efa290b38b0b37865b40cddb2e1d178adefa266fd5ba23d0192645712add9e2a7065bc7d5cdef5c19919fc022e30819aa70d5af45acb12e6f967c7b4c6c165a22d4ee3444ef854a9439", 0x70}, {&(0x7f0000002740)="19c1366b60f54a8fd80cbfd2382e48b45971a1613756b21adb4d6255f0c7b43e68183bb8de2bf3d4217a64b7e82b746ecc180fda08114cd7aff5750081be347b60e05dd20433728ea410b374944ca1a54eaef0eb797448da35bcc82031550d6ddf2c294534fe6953716210152dc40193aa305f79e792851d5e9e3b1ce36b41e26f9ddbe00e0ee1cae2e89448dc6192e1245aa90a68d5c40c36215d034e0cece903cfe149d924cb5884ad2474e065381fe857680a79b5e32565da4bbe0053df79e23cc33cee0afba225b1a42228ce5c49afaa483558e363b2dce151110feadaab4ad6", 0xe2}, {&(0x7f0000002840)="751cc6", 0x3}, {&(0x7f0000002880)="1280b76578cf7d147da95b45a7b1aac1c2d8ec6d7ee45b18fa5508085498ff1f1a7ece9de5ef3a1d06b73997688490b02a2ea2cf2feef7e3c9b538b456a74a50e8bd64e2fd876edad530a9d68e59ab2ee57a1f80b3f787c3ed02418efe135e636411f14d5232411831569b82eaf13b28bff27d44da7562722eaa23fcb27ab2a914a1634af4c062f76d685a682240a1b39b91f27a54fcb7b60e270cfe9fd7f3763fb9544929ef8aa5e047d4b70e01db36b80e6aae3ace3b3208a072b4a735b2a5931f29698cd0996996d531", 0xcb}, {&(0x7f0000002980)="510522bfb890e4d12fe6f6ba71912dc8622c4ca7a5318f43b46698b30aee6f66ce49c25e97e050aa16c8dffaef38a7585db0c2d8b87dfe7cfc461e1a16901718434dda2fe877ca4bf0", 0x49}], 0x5, &(0x7f0000002a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast1}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0xc, 0x9f, 0x1, 0x9, [{@loopback, 0xffffffff}]}, @rr={0x7, 0x23, 0x81, [@remote, @multicast1, @loopback, @multicast2, @loopback, @local, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xf8, 0x3, 0x8, [{@loopback, 0x7f}, {@remote, 0x1}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1}, {@loopback, 0x6d6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x9}, {@multicast1, 0x6000}]}, @cipso={0x86, 0x23, 0x0, [{0x5, 0x7, "edd0a90a4d"}, {0x2, 0x3, "b4"}, {0x7, 0x3, "bf"}, {0xb, 0xb, "f0cc047e0fb7e888a1"}, {0x6, 0x5, "d057fa"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x130}, 0x20000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c80)={{r5}, &(0x7f0000002c00), &(0x7f0000002c40)=r19}, 0x20) (async)
recvmsg$kcm(r13, &(0x7f0000002fc0)={&(0x7f0000002cc0)=@rc, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d40)=""/255, 0xff}, {&(0x7f0000002e40)=""/139, 0x8b}], 0x2, &(0x7f0000002f40)=""/120, 0x78}, 0x40000000)

15.445430766s ago: executing program 0 (id=3215):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d81f00001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)

15.444930865s ago: executing program 0 (id=3216):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x2e)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200c68c4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x7, 0x0, 0x0, 0x7ff4, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x8204, 0x7, 0xfffffc01, 0x9, 0x9, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c0771640101010000000000000000164701c838de82145ce97db073d8a272c2f1d0b6bd8c367000e4bdc27596d083ebb4ed3a84cc0dcdf7fcc8d52cb9c7704186994b0892e4f97dd59cd445c1c47666ded1c5b795a93e34589d87bb13ae2bd7cb0c74"], 0x20}, 0x200040c4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000300)={0x2}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1c, 0x4, 0x8, 0x7, 0x0, r0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x5c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0xfffffe5a, 0x0, 0x0, 0xfffffffffffffe80, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rxrpc_rx_ack\x00', r3, 0x0, 0xef}, 0xfffffffffffffe87)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050001000000000071113f0000000000851000000200000085000066aee9eb0c25588ed8cb8c71820005f1c7dd8549e8810569c42f081c356cf8000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x3403, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001980)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e20fb4f449d97d05765ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d2f40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4", 0xe1}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb1", 0x60}], 0x2}, 0x20044840)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005180400", @ANYRES32, @ANYBLOB="ec00001f7714ea293e3649562600e58f7592af968aa656e12ed15e22366867337acc7ab5b25f84d7b7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

15.30072598s ago: executing program 4 (id=3217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x6, 0x1, 0xffffff01, 0xcc20, 0xffffffffffffffff, 0x6155, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @generic={0x1, 0x4, 0x4, 0x7, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000340)='GPL\x00', 0xcea1, 0x87, &(0x7f0000000880)=""/135, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x5, 0x4, 0x7, 0x6}, {0x5, 0x5, 0xd, 0x9}], 0x10, 0x7fffffff}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a001a", 0x1f}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x5, 0xd50, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair(0x11, 0x2, 0x8, &(0x7f0000000080))

251.818465ms ago: executing program 34 (id=3216):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x2e)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200c68c4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x7, 0x0, 0x0, 0x7ff4, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x8204, 0x7, 0xfffffc01, 0x9, 0x9, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c0771640101010000000000000000164701c838de82145ce97db073d8a272c2f1d0b6bd8c367000e4bdc27596d083ebb4ed3a84cc0dcdf7fcc8d52cb9c7704186994b0892e4f97dd59cd445c1c47666ded1c5b795a93e34589d87bb13ae2bd7cb0c74"], 0x20}, 0x200040c4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000300)={0x2}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1c, 0x4, 0x8, 0x7, 0x0, r0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x5c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0xfffffe5a, 0x0, 0x0, 0xfffffffffffffe80, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rxrpc_rx_ack\x00', r3, 0x0, 0xef}, 0xfffffffffffffe87)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050001000000000071113f0000000000851000000200000085000066aee9eb0c25588ed8cb8c71820005f1c7dd8549e8810569c42f081c356cf8000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x3403, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001980)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e20fb4f449d97d05765ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d2f40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4", 0xe1}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb1", 0x60}], 0x2}, 0x20044840)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005180400", @ANYRES32, @ANYBLOB="ec00001f7714ea293e3649562600e58f7592af968aa656e12ed15e22366867337acc7ab5b25f84d7b7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

122.920714ms ago: executing program 35 (id=3213):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000b085b94954b1333200000069116e0000000000851000000200"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x2, @perf_config_ext={0x4}, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x7fff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = syz_clone(0x120000, &(0x7f0000000680), 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000800)="56e9829041987dbed167a933800a4800839d6a13e3e7d6bf78a05f25d24c2d254f7baa467ebd45b6ac021e4f469164")
perf_event_open(0x0, r8, 0x8, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x9}, 0x1000, 0x2, 0x0, 0x9, 0x9, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)

0s ago: executing program 36 (id=3217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x6, 0x1, 0xffffff01, 0xcc20, 0xffffffffffffffff, 0x6155, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @generic={0x1, 0x4, 0x4, 0x7, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000340)='GPL\x00', 0xcea1, 0x87, &(0x7f0000000880)=""/135, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x5, 0x4, 0x7, 0x6}, {0x5, 0x5, 0xd, 0x9}], 0x10, 0x7fffffff}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a001a", 0x1f}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x5, 0xd50, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair(0x11, 0x2, 0x8, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

T6080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.62'.
[   53.618827][ T6080] team_slave_0: entered allmulticast mode
[   53.621675][ T6080] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   53.653939][ T5219] Bluetooth: hci1: command tx timeout
[   53.664681][ T5219] Bluetooth: hci0: command tx timeout
[   53.734253][ T5219] Bluetooth: hci2: command tx timeout
[   53.800124][ T6084] netlink: zone id is out of range
[   53.803505][ T6084] netlink: zone id is out of range
[   53.852388][ T6084] netlink: zone id is out of range
[   53.855522][ T6084] netlink: zone id is out of range
[   53.857545][ T6084] netlink: zone id is out of range
[   53.859595][ T6084] netlink: zone id is out of range
[   53.861513][ T6084] netlink: zone id is out of range
[   53.866018][ T6084] netlink: zone id is out of range
[   53.868311][ T6084] netlink: zone id is out of range
[   54.909134][ T6118] Driver unsupported XDP return value 0 on prog  (id 86) dev N/A, expect packet loss!
[   56.439476][ T6148] netlink: 'syz.0.85': attribute type 6 has an invalid length.
[   56.478126][ T6146] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.84'.
[   57.574883][ T6171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.91'.
[   57.580591][ T6171] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.91'.
[   57.885218][ T5219] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[   57.885549][ T6182] warning: `syz.2.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.891570][ T6182] netlink: 'syz.2.94': attribute type 21 has an invalid length.
[   57.894373][ T6182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.94'.
[   58.117535][ T6194] netlink: 'syz.2.98': attribute type 6 has an invalid length.
[   58.382813][ T6201] netlink: 830 bytes leftover after parsing attributes in process `syz.2.100'.
[   58.478915][ T5219] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   59.108599][ T6216] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   59.115121][ T6216] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   59.695399][ T5219] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[   59.938569][ T6242] bridge_slave_1: left allmulticast mode
[   59.942510][ T6242] bridge_slave_1: left promiscuous mode
[   59.945270][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.952410][ T6240] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.115'.
[   59.963879][ T6240] net_ratelimit: 79 callbacks suppressed
[   59.963888][ T6240] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   59.968284][ T6240] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   59.972900][ T6242] bridge_slave_0: left allmulticast mode
[   59.981658][ T6242] bridge_slave_0: left promiscuous mode
[   59.983595][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.984938][ T6240] netlink: 'syz.1.115': attribute type 39 has an invalid length.
[   60.026142][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.117'.
[   60.031426][ T6245] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.117'.
[   60.099033][ T6250] netlink: 'syz.2.119': attribute type 21 has an invalid length.
[   60.102013][ T6250] netlink: 164 bytes leftover after parsing attributes in process `syz.2.119'.
[   60.192332][ T6258] syz.2.121 uses obsolete (PF_INET,SOCK_PACKET)
[   60.656978][ T5219] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6
[   60.897676][ T6298] netlink: 'syz.2.136': attribute type 10 has an invalid length.
[   60.902788][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'.
[   60.906843][ T6298] batman_adv: batadv0: Adding interface: vlan1
[   60.908781][ T6298] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.916642][ T6298] batman_adv: batadv0: Interface activated: vlan1
[   61.291205][ T6321] veth0_vlan: entered allmulticast mode
[   61.312754][ T6321] batman_adv: batadv0: Interface deactivated: vlan1
[   61.343474][ T6322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.144'.
[   61.593007][ T5219] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   61.805072][ T5834] cgroup: fork rejected by pids controller in /syz0
[   62.061144][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.104145][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.177472][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.179935][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.183078][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.185876][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.188679][ T6341] batman_adv: batadv0: Removing interface: vlan1
[   62.229992][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.334934][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.461886][   T13] bridge_slave_1: left allmulticast mode
[   62.463911][   T13] bridge_slave_1: left promiscuous mode
[   62.466219][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.497083][   T13] bridge_slave_0: left allmulticast mode
[   62.498859][   T13] bridge_slave_0: left promiscuous mode
[   62.514092][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.648250][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.652436][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.656573][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.659923][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.663639][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.873326][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.878856][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.882401][   T13] bond0 (unregistering): Released all slaves
[   62.916992][ T6366] netlink: 'syz.2.158': attribute type 29 has an invalid length.
[   63.027827][ T6375] __nla_validate_parse: 4 callbacks suppressed
[   63.027841][ T6375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.159'.
[   63.049649][ T6375] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.159'.
[   63.331547][ T6357] chnl_net:caif_netlink_parms(): no params data found
[   63.386295][   T13] hsr_slave_0: left promiscuous mode
[   63.392641][   T13] hsr_slave_1: left promiscuous mode
[   63.397901][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.403326][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.411149][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.417628][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.435318][   T13] veth1_macvtap: left promiscuous mode
[   63.440783][   T13] veth0_macvtap: left promiscuous mode
[   63.444176][   T13] veth1_vlan: left promiscuous mode
[   63.447800][   T13] veth0_vlan: left promiscuous mode
[   63.714335][   T13] team0 (unregistering): Port device team_slave_1 removed
[   63.731634][   T13] team0 (unregistering): Port device team_slave_0 removed
[   64.022137][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.025759][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.028081][ T6357] bridge_slave_0: entered allmulticast mode
[   64.030774][ T6357] bridge_slave_0: entered promiscuous mode
[   64.034328][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.037561][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.039927][ T6357] bridge_slave_1: entered allmulticast mode
[   64.042698][ T6357] bridge_slave_1: entered promiscuous mode
[   64.086658][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.090958][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.134701][ T6357] team0: Port device team_slave_0 added
[   64.139547][ T6357] team0: Port device team_slave_1 added
[   64.170307][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.172563][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.181977][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.187387][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.189615][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.197944][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.253294][ T6357] hsr_slave_0: entered promiscuous mode
[   64.257578][ T6357] hsr_slave_1: entered promiscuous mode
[   64.259731][ T6357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.262109][ T6357] Cannot create hsr debugfs directory
[   64.412404][ T6425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.168'.
[   64.419525][ T6425] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.168'.
[   64.588945][ T6433] netlink: 'syz.1.170': attribute type 11 has an invalid length.
[   64.694093][ T5219] Bluetooth: hci2: command tx timeout
[   64.705695][ T6357] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.710075][ T6357] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.716509][ T6357] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.720549][ T6357] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.739452][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.741765][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.744176][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.746423][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.798868][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.822083][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.828498][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.838840][ T6357] 8021q: adding VLAN 0 to HW filter on device team0
[   64.849382][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.851797][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.857451][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.859701][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.974200][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.009502][ T6357] veth0_vlan: entered promiscuous mode
[   65.021695][ T6357] veth1_vlan: entered promiscuous mode
[   65.047913][ T6357] veth0_macvtap: entered promiscuous mode
[   65.056994][ T6357] veth1_macvtap: entered promiscuous mode
[   65.071424][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.080486][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.086705][ T6357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.089466][ T6357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.092301][ T6357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.096985][ T6357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.132631][ T6470] netlink: 'syz.2.173': attribute type 21 has an invalid length.
[   65.136655][ T6470] netlink: 'syz.2.173': attribute type 20 has an invalid length.
[   65.190983][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.196553][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.236874][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.244706][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.416206][ T6496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.178'.
[   65.430044][ T6496] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.178'.
[   66.530629][ T6532] syzkaller1: tun_chr_ioctl cmd 1074025680
[   66.532858][ T5219] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[   66.774391][ T5219] Bluetooth: hci2: command tx timeout
[   66.811074][ T6545] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.197'.
[   67.052605][ T6558] netlink: 'syz.2.202': attribute type 21 has an invalid length.
[   67.217726][ T6565] netlink: 10 bytes leftover after parsing attributes in process `syz.2.204'.
[   67.314386][ T6570] netlink: 132 bytes leftover after parsing attributes in process `syz.1.206'.
[   67.326719][ T6570] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.206'.
[   68.572285][ T6613] __nla_validate_parse: 2 callbacks suppressed
[   68.572298][ T6613] netlink: 132 bytes leftover after parsing attributes in process `syz.0.222'.
[   68.630146][ T6612] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.222'.
[   68.854217][ T5219] Bluetooth: hci2: command tx timeout
[   69.107242][ T6644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.231'.
[   69.111882][ T6645] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.230'.
[   69.157318][ T5219] Bluetooth: hci0: Unknown advertising packet type: 0x20
[   70.814770][ T6737] netlink: 'syz.1.250': attribute type 29 has an invalid length.
[   70.829130][ T6737] netlink: 'syz.1.250': attribute type 29 has an invalid length.
[   70.904084][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.906312][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.936987][ T5219] Bluetooth: hci2: command tx timeout
[   71.616902][ T6772] netlink: 17 bytes leftover after parsing attributes in process `syz.1.258'.
[   71.619928][ T6772] netlink: zone id is out of range
[   71.621687][ T6772] netlink: zone id is out of range
[   71.623434][ T6772] netlink: zone id is out of range
[   71.625375][ T6772] netlink: zone id is out of range
[   71.627124][ T6772] netlink: zone id is out of range
[   71.628840][ T6772] netlink: zone id is out of range
[   71.631896][ T6772] netlink: zone id is out of range
[   71.633559][ T6772] netlink: zone id is out of range
[   71.636583][ T6772] netlink: zone id is out of range
[   71.638329][ T6772] netlink: zone id is out of range
[   71.967932][ T6788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.264'.
[   72.377443][ T6799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.270'.
[   72.774479][ T6817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.276'.
[   73.042012][ T6822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.278'.
[   73.069909][ T5219] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[   73.095893][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.280'.
[   73.457833][ T6857] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.088717][ T6877] netlink: 'syz.0.297': attribute type 39 has an invalid length.
[   74.257243][ T6883] netlink: 'syz.0.299': attribute type 4 has an invalid length.
[   74.260272][ T6883] __nla_validate_parse: 2 callbacks suppressed
[   74.260280][ T6883] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.299'.
[   74.534879][ T6896] : port 1(vlan0) entered blocking state
[   74.536984][ T6896] : port 1(vlan0) entered disabled state
[   74.539863][ T6896] vlan0: entered allmulticast mode
[   74.541537][ T6896] veth0_vlan: entered allmulticast mode
[   74.544298][ T6896] vlan0: entered promiscuous mode
[   74.557327][ T6899] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.305'.
[   75.080153][ T6927] delete_channel: no stack
[   75.648869][ T6959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.323'.
[   75.652476][ T6958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.323'.
[   75.792749][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.327'.
[   75.852553][ T6978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.329'.
[   75.902833][ T6982] tap0: tun_chr_ioctl cmd 1074025677
[   75.918326][ T6982] tap0: linktype set to 769
[   76.330004][ T7006] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.340'.
[   77.081684][ T7030] syzkaller0: entered promiscuous mode
[   77.083960][ T7030] syzkaller0: entered allmulticast mode
[   77.151360][ T7032] syzkaller0: entered promiscuous mode
[   77.153268][ T7032] syzkaller0: entered allmulticast mode
[   78.295577][ T7065] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.362'.
[   78.298518][ T7065] net_ratelimit: 75 callbacks suppressed
[   78.298525][ T7065] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   78.419768][ T5219] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[   79.469312][ T5219] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   79.739099][ T7117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.380'.
[   79.813379][ T7128] netlink: 'syz.2.383': attribute type 6 has an invalid length.
[   79.820542][ T7128] netlink: 'syz.2.383': attribute type 7 has an invalid length.
[   79.823661][ T7128] netlink: 'syz.2.383': attribute type 15 has an invalid length.
[   79.827463][ T7128] netlink: 'syz.2.383': attribute type 16 has an invalid length.
[   79.830345][ T7128] netlink: 'syz.2.383': attribute type 21 has an invalid length.
[   79.832822][ T7128] netlink: 'syz.2.383': attribute type 25 has an invalid length.
[   79.836232][ T7128] netlink: 'syz.2.383': attribute type 27 has an invalid length.
[   79.844990][ T7128] netlink: 'syz.2.383': attribute type 28 has an invalid length.
[   79.847449][ T7128] netlink: 'syz.2.383': attribute type 29 has an invalid length.
[   79.849889][ T7128] netlink: 15446 bytes leftover after parsing attributes in process `syz.2.383'.
[   79.869375][ T7131] netlink: 'syz.0.384': attribute type 29 has an invalid length.
[   79.973139][ T7139] syzkaller1: tun_chr_ioctl cmd 1074025676
[   79.976171][ T7139] syzkaller1: owner set to 778
[   80.098526][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.389'.
[   80.131779][ T7149] raw_sendmsg: syz.2.390 forgot to set AF_INET. Fix it!
[   80.163233][ T7154] team0: Port device macvlan0 added
[   81.218380][ T7171] delete_channel: no stack
[   81.325119][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.328562][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.331330][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.336581][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.339359][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.432384][ T7173] chnl_net:caif_netlink_parms(): no params data found
[   81.475479][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.477946][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.480238][ T7173] bridge_slave_0: entered allmulticast mode
[   81.482868][ T7173] bridge_slave_0: entered promiscuous mode
[   81.486296][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.488576][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.490937][ T7173] bridge_slave_1: entered allmulticast mode
[   81.493632][ T7173] bridge_slave_1: entered promiscuous mode
[   81.515778][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.520475][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.541511][ T7173] team0: Port device team_slave_0 added
[   81.546581][ T7173] team0: Port device team_slave_1 added
[   81.565909][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.568958][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.578168][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.582471][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.586132][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.594362][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.620144][ T7173] hsr_slave_0: entered promiscuous mode
[   81.622400][ T7173] hsr_slave_1: entered promiscuous mode
[   81.625215][ T7173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.628028][ T7173] Cannot create hsr debugfs directory
[   81.720018][ T7173] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.725442][ T7173] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.729652][ T7173] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.733630][ T7173] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.751167][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.753538][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.756170][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.758515][ T7173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.790607][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.799304][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.802107][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.811238][ T7173] 8021q: adding VLAN 0 to HW filter on device team0
[   81.817815][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.820197][ T6686] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.826682][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.829082][ T6686] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.931308][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.054288][ T7173] veth0_vlan: entered promiscuous mode
[   82.059738][ T7173] veth1_vlan: entered promiscuous mode
[   82.065681][ T7202] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.401'.
[   82.105504][ T7173] veth0_macvtap: entered promiscuous mode
[   82.109375][ T7173] veth1_macvtap: entered promiscuous mode
[   82.147179][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.150408][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.151183][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.156711][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.159869][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.160133][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.162668][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.178920][ T7173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.182525][ T7173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.187150][ T7173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.190086][ T7173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.251260][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.254551][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.292252][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.297533][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.437235][ T7203] chnl_net:caif_netlink_parms(): no params data found
[   82.621679][ T7219] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.403'.
[   82.626851][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.631607][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.644813][ T7203] bridge_slave_0: entered allmulticast mode
[   82.651721][ T7203] bridge_slave_0: entered promiscuous mode
[   82.656006][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.658487][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.660819][ T7203] bridge_slave_1: entered allmulticast mode
[   82.663637][ T7203] bridge_slave_1: entered promiscuous mode
[   82.686903][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.695797][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.721254][ T7203] team0: Port device team_slave_0 added
[   82.727334][ T7203] team0: Port device team_slave_1 added
[   82.738264][ T7225] netlink: 164 bytes leftover after parsing attributes in process `syz.0.406'.
[   82.748615][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.750906][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.759664][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.765460][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.767667][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.776896][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.838555][ T7203] hsr_slave_0: entered promiscuous mode
[   82.842850][ T7203] hsr_slave_1: entered promiscuous mode
[   82.846678][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.849213][ T7203] Cannot create hsr debugfs directory
[   83.114958][ T7203] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.119907][ T7203] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.126949][ T7203] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.131729][ T7203] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.140338][ T7241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.411'.
[   83.161232][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.163904][ T7203] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.167188][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.169559][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.218014][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.230035][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.233017][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.243577][ T7203] 8021q: adding VLAN 0 to HW filter on device team0
[   83.252098][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.254623][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.289953][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.292382][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.410789][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.414542][ T5219] Bluetooth: hci0: command tx timeout
[   83.464316][ T7203] veth0_vlan: entered promiscuous mode
[   83.478573][ T7203] veth1_vlan: entered promiscuous mode
[   83.499769][ T7203] veth0_macvtap: entered promiscuous mode
[   83.503674][ T7203] veth1_macvtap: entered promiscuous mode
[   83.517055][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.525307][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.530385][ T7203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.533290][ T7203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.537596][ T7203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.540759][ T7203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.597110][ T6684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.599826][ T6684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.621890][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.623378][ T5279] udevd[5279]: worker [5828] terminated by signal 33 (Unknown signal 33)
[   83.626197][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.632526][ T5219] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   83.632788][ T5279] udevd[5279]: worker [5828] failed while handling '/devices/virtual/mac80211_hwsim/hwsim14'
[   83.949970][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.416'.
[   84.140532][ T5219] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[   84.214260][ T5219] Bluetooth: hci1: command tx timeout
[   84.244411][ T7280] netlink: 132 bytes leftover after parsing attributes in process `syz.4.422'.
[   84.569384][ T5219] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   85.316279][ T5219] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[   85.495672][ T5219] Bluetooth: hci0: command tx timeout
[   85.690102][ T5219] Bluetooth: hci0: unexpected event 0x01 length: 15 > 1
[   85.903542][ T5219] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   86.306802][ T5219] Bluetooth: hci1: command tx timeout
[   86.456443][ T7354] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.449'.
[   86.521109][ T7359] validate_nla: 9 callbacks suppressed
[   86.521122][ T7359] netlink: 'syz.0.451': attribute type 22 has an invalid length.
[   86.527326][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'.
[   86.529031][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.452'.
[   86.864837][ T7378] netlink: 'syz.3.459': attribute type 2 has an invalid length.
[   86.867511][ T7378] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.459'.
[   86.941260][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'.
[   87.152429][ T7389] netlink: 176 bytes leftover after parsing attributes in process `syz.0.463'.
[   87.361295][ T7392] netlink: 'syz.0.464': attribute type 21 has an invalid length.
[   87.553386][ T7397] netlink: 'syz.4.466': attribute type 21 has an invalid length.
[   87.575594][ T5219] Bluetooth: hci0: command tx timeout
[   87.988500][ T7413] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.471'.
[   87.992131][ T7411] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.471'.
[   88.066918][ T7419] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[   88.069424][ T7419] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[   88.206584][ T7429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.477'.
[   88.375768][ T5219] Bluetooth: hci1: command tx timeout
[   88.631779][ T7452] netlink: 'syz.3.485': attribute type 21 has an invalid length.
[   88.967430][ T7487] netlink: 'syz.4.497': attribute type 10 has an invalid length.
[   89.657484][ T5219] Bluetooth: hci0: command tx timeout
[   90.453917][ T5219] Bluetooth: hci1: command tx timeout
[   92.062901][ T7506] netlink: 'syz.4.501': attribute type 10 has an invalid length.
[   92.066122][ T7506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.501'.
[   92.074297][ T7506] batman_adv: batadv0: Adding interface: vlan1
[   92.077445][ T7506] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.085416][ T7506] batman_adv: batadv0: Interface activated: vlan1
[   93.056060][ T7550] netlink: 'syz.0.517': attribute type 46 has an invalid length.
[   93.077793][ T7550] netlink: 'syz.0.517': attribute type 7 has an invalid length.
[   93.316608][ T7572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   93.320299][ T7572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   93.626191][ T7583] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.527'.
[   93.823140][ T5219] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[   94.451349][ T7609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.537'.
[   94.598446][ T5219] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[   94.793047][ T7619] netlink: 'syz.3.541': attribute type 10 has an invalid length.
[   94.799274][ T7619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.541'.
[   95.337571][ T7635] netlink: 'syz.0.547': attribute type 10 has an invalid length.
[   95.351317][ T7635] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   95.471823][ T7643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.550'.
[   95.475617][ T7643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.550'.
[   95.982529][ T7677] netlink: 10 bytes leftover after parsing attributes in process `syz.3.560'.
[   96.329797][ T7699] netlink: 'syz.0.569': attribute type 21 has an invalid length.
[   96.332280][ T7699] netlink: 'syz.0.569': attribute type 1 has an invalid length.
[   96.336388][ T7699] netlink: 144 bytes leftover after parsing attributes in process `syz.0.569'.
[   99.871512][ T7755] netlink: 'syz.4.589': attribute type 39 has an invalid length.
[   99.918696][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.588'.
[   99.922010][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.588'.
[   99.927445][ T7753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.588'.
[  101.909334][ T7820] netlink: 'syz.0.613': attribute type 9 has an invalid length.
[  101.912213][ T7820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.613'.
[  102.396705][ T7848] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  102.631922][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'.
[  102.667153][ T7874] tap0: tun_chr_ioctl cmd 1074025677
[  102.669175][ T7874] tap0: linktype set to 769
[  102.738914][ T7880] netlink: 'syz.0.631': attribute type 6 has an invalid length.
[  102.748161][ T7880] ref_ctr_offset mismatch. inode: 0x386 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  102.760685][ T7884] netlink: 'syz.0.631': attribute type 6 has an invalid length.
[  103.137428][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'.
[  103.488154][ T7917] netlink: 'syz.0.640': attribute type 2 has an invalid length.
[  103.490719][ T7917] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.640'.
[  103.513920][ T7917] nbd: must specify an index to disconnect
[  103.538282][ T7917] netlink: 'syz.0.640': attribute type 3 has an invalid length.
[  103.540977][ T7917] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.640'.
[  104.225216][ T7949] netlink: 'syz.0.651': attribute type 39 has an invalid length.
[  104.276154][ T7955] netlink: 'syz.4.653': attribute type 1 has an invalid length.
[  104.285614][ T7955] netlink: 'syz.4.653': attribute type 2 has an invalid length.
[  104.288128][ T7955] netlink: 'syz.4.653': attribute type 7 has an invalid length.
[  104.290592][ T7955] netlink: 149 bytes leftover after parsing attributes in process `syz.4.653'.
[  104.293553][ T7955] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.653'.
[  105.157537][ T7986] __nla_validate_parse: 2 callbacks suppressed
[  105.157598][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.666'.
[  105.948624][ T8015] bridge_slave_1: left allmulticast mode
[  105.950514][ T8015] bridge_slave_1: left promiscuous mode
[  105.952403][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.958362][ T8015] bridge_slave_0: left allmulticast mode
[  105.960478][ T8015] bridge_slave_0: left promiscuous mode
[  105.962383][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.122179][ T8030] validate_nla: 4 callbacks suppressed
[  106.122188][ T8030] netlink: 'syz.3.681': attribute type 21 has an invalid length.
[  106.128117][ T8030] netlink: 168 bytes leftover after parsing attributes in process `syz.3.681'.
[  107.071879][ T5219] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  107.149065][ T8049] mac80211_hwsim hwsim9 O3c: renamed from wlan1 (while UP)
[  107.255814][ T8060] netlink: 'syz.3.692': attribute type 10 has an invalid length.
[  107.400800][ T8060] mac80211_hwsim hwsim14 wlan1: left promiscuous mode
[  107.403322][ T8060] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  107.430260][ T8060] team0: Port device wlan1 added
[  107.903911][ T8060] syz.3.692 (8060) used greatest stack depth: 19536 bytes left
[  108.230550][ T8097] netlink: 'syz.4.705': attribute type 1 has an invalid length.
[  108.233183][ T8097] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.705'.
[  108.268663][ T8102] netlink: 'syz.0.708': attribute type 17 has an invalid length.
[  108.273131][ T8102] netlink: 'syz.0.708': attribute type 16 has an invalid length.
[  108.276127][ T8102] netlink: 116 bytes leftover after parsing attributes in process `syz.0.708'.
[  108.451304][ T8116] netlink: 'syz.4.713': attribute type 2 has an invalid length.
[  108.461850][ T8116] netlink: 'syz.4.713': attribute type 1 has an invalid length.
[  108.466381][ T8116] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.713'.
[  108.469685][ T8116] block nbd5: not configured, cannot reconfigure
[  109.809163][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1025382644 wd_nsec: 1025382589
[  109.978224][ T8163] netlink: 'syz.3.726': attribute type 21 has an invalid length.
[  109.980939][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  110.001586][ T8164] netlink: 172 bytes leftover after parsing attributes in process `syz.0.727'.
[  113.003531][ T5219] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  113.840446][ T8221] netlink: 'syz.3.746': attribute type 21 has an invalid length.
[  113.852114][ T8221] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.746'.
[  113.887159][ T8223] syzkaller0: entered promiscuous mode
[  113.889290][ T8223] syzkaller0: entered allmulticast mode
[  114.269325][ T5219] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[  114.511909][ T8253] netlink: 'syz.3.755': attribute type 1 has an invalid length.
[  114.527014][ T8253] netlink: 'syz.3.755': attribute type 21 has an invalid length.
[  114.732150][ T8266] can: request_module (can-proto-4) failed.
[  114.833297][ T8272] netlink: 'syz.3.761': attribute type 6 has an invalid length.
[  114.837741][ T8272] netlink: 'syz.3.761': attribute type 7 has an invalid length.
[  114.840335][ T8272] netlink: 'syz.3.761': attribute type 15 has an invalid length.
[  114.843305][ T8272] netlink: 'syz.3.761': attribute type 16 has an invalid length.
[  114.846183][ T8272] netlink: 'syz.3.761': attribute type 21 has an invalid length.
[  114.848984][ T8272] netlink: 'syz.3.761': attribute type 25 has an invalid length.
[  114.851607][ T8272] netlink: 'syz.3.761': attribute type 27 has an invalid length.
[  114.854380][ T8272] netlink: 15446 bytes leftover after parsing attributes in process `syz.3.761'.
[  116.148536][ T8298] -1: renamed from syzkaller0
[  116.463864][ T8323] netlink: 188 bytes leftover after parsing attributes in process `syz.4.779'.
[  116.580044][ T8324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.779'.
[  117.972701][ T8368] team0: Device hsr_slave_0 failed to register rx_handler
[  118.183434][ T8371] syzkaller0: entered promiscuous mode
[  118.186559][ T8371] syzkaller0: entered allmulticast mode
[  118.232248][ T8373] syzkaller0: entered promiscuous mode
[  118.234298][ T8373] syzkaller0: entered allmulticast mode
[  119.425512][ T8393] validate_nla: 5 callbacks suppressed
[  119.425523][ T8393] netlink: 'syz.4.801': attribute type 4 has an invalid length.
[  119.430002][ T8393] netlink: 152 bytes leftover after parsing attributes in process `syz.4.801'.
[  119.441133][ T8394] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.801'.
[  120.073684][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.0.800'.
[  120.084704][ T8393] : renamed from bond0
[  120.447755][ T8423] netlink: 'syz.4.812': attribute type 3 has an invalid length.
[  120.450671][ T8423] netlink: 'syz.4.812': attribute type 1 has an invalid length.
[  120.453365][ T8423] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.812'.
[  121.009001][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.818'.
[  121.091498][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.818'.
[  121.103516][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.117838][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.120334][ T8451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.277732][ T8478] netlink: 'syz.0.830': attribute type 10 has an invalid length.
[  122.280480][ T8478] netlink: 55 bytes leftover after parsing attributes in process `syz.0.830'.
[  122.433396][ T8483] netlink: 'syz.3.832': attribute type 29 has an invalid length.
[  122.438516][ T8483] netlink: 'syz.3.832': attribute type 29 has an invalid length.
[  123.177551][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  123.363289][ T5219] Bluetooth: hci1: unexpected event 0x17 length: 15 > 6
[  124.631006][ T5279] udevd[5279]: worker [8446] terminated by signal 33 (Unknown signal 33)
[  126.428262][ T8543] netlink: 'syz.3.851': attribute type 21 has an invalid length.
[  126.430869][ T8543] netlink: 168 bytes leftover after parsing attributes in process `syz.3.851'.
[  126.616772][ T8560] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.855'.
[  128.221586][ T8620] syzkaller0: entered allmulticast mode
[  130.708540][ T8713] netlink: 'syz.3.905': attribute type 1 has an invalid length.
[  130.713944][ T8713] netlink: 17 bytes leftover after parsing attributes in process `syz.3.905'.
[  131.390028][ T8737] netlink: 'syz.3.911': attribute type 1 has an invalid length.
[  131.404145][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'.
[  131.712677][ T8754] netlink: 'syz.3.915': attribute type 1 has an invalid length.
[  131.719659][ T8754] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.915'.
[  132.306341][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.308352][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.513429][ T8781] netlink: 60 bytes leftover after parsing attributes in process `syz.4.922'.
[  132.516765][ T8779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.922'.
[  132.676286][ T8796] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.926'.
[  132.681448][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.924'.
[  132.687960][ T8796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.926'.
[  132.692106][ T8796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.926'.
[  132.699152][ T8788] netlink: 60 bytes leftover after parsing attributes in process `syz.0.924'.
[  132.703479][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.924'.
[  132.717440][ T8797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.924'.
[  132.858104][ T8803] netlink: 'syz.0.928': attribute type 5 has an invalid length.
[  133.622339][ T8831] netlink: 'syz.0.937': attribute type 6 has an invalid length.
[  133.626885][ T8831] netlink: 'syz.0.937': attribute type 9 has an invalid length.
[  134.079681][ T8860] netlink: 'syz.0.945': attribute type 21 has an invalid length.
[  134.569971][ T8891] netlink: 'syz.0.955': attribute type 29 has an invalid length.
[  136.957477][ T8937] netlink: 'syz.0.969': attribute type 12 has an invalid length.
[  136.961522][ T8937] __nla_validate_parse: 5 callbacks suppressed
[  136.961533][ T8937] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.969'.
[  137.205250][ T8940] syzkaller0: entered promiscuous mode
[  137.207173][ T8940] syzkaller0: entered allmulticast mode
[  140.527726][ T8962] netlink: 'syz.3.977': attribute type 10 has an invalid length.
[  140.531544][ T8962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.977'.
[  141.076584][ T8962] batadv0: entered promiscuous mode
[  141.079357][ T8962] batadv0: entered allmulticast mode
[  141.086877][ T8962] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  141.191296][ T8975] netlink: 'syz.0.980': attribute type 10 has an invalid length.
[  141.194336][ T8975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.980'.
[  141.197819][ T8975] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  141.201179][ T8975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.264595][ T8980] netlink: 'syz.0.982': attribute type 13 has an invalid length.
[  141.267318][ T8980] netlink: 14317 bytes leftover after parsing attributes in process `syz.0.982'.
[  141.389183][ T8988] netlink: 'syz.4.985': attribute type 21 has an invalid length.
[  141.392230][ T8988] netlink: 156 bytes leftover after parsing attributes in process `syz.4.985'.
[  141.697345][ T9005] netlink: 'syz.4.991': attribute type 11 has an invalid length.
[  141.699938][ T9005] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.991'.
[  141.754885][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.968430][ T9020] netlink: 180 bytes leftover after parsing attributes in process `syz.3.997'.
[  142.184822][ T9026] bridge_slave_1: left allmulticast mode
[  142.186682][ T9026] bridge_slave_1: left promiscuous mode
[  142.188613][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.193674][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.292343][ T9032] syzkaller0: entered promiscuous mode
[  142.298202][ T9032] syzkaller0: entered allmulticast mode
[  143.220077][ T9053] Q6\bY4: renamed from lo (while UP)
[  143.297952][ T9062] syzkaller0: entered promiscuous mode
[  143.300064][ T9062] syzkaller0: entered allmulticast mode
[  144.430219][ T9094] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1019'.
[  144.512191][ T9094] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[  144.516344][ T9094] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1019'.
[  144.854599][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.857433][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.860162][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.863629][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.868204][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.870890][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.875528][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.878258][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  144.880974][ T9105] netlink: 'syz.4.1022': attribute type 21 has an invalid length.
[  145.152226][ T9120] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1026'.
[  145.291618][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1026'.
[  145.298412][ T9120] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1026'.
[  145.301495][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1026'.
[  145.739871][ T9141] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1032'.
[  145.898029][ T9164] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1040'.
[  145.952953][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1040'.
[  146.427434][ T9194] syzkaller0: entered promiscuous mode
[  146.429666][ T9194] syzkaller0: entered allmulticast mode
[  147.354024][ T9199] __nla_validate_parse: 6 callbacks suppressed
[  147.354039][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'.
[  147.555586][ T9223] tun0: tun_chr_ioctl cmd 1074025675
[  147.558476][ T9223] tun0: persist enabled
[  147.561691][ T9223] tun0: tun_chr_ioctl cmd 1074025675
[  147.571723][ T9223] tun0: persist disabled
[  147.617038][ T9228] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  147.619364][ T9228] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  147.680038][ T9232] openvswitch: netlink: Flow actions attr not present in new flow.
[  147.684499][ T9232] syzkaller0: entered promiscuous mode
[  147.737010][ T9234] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1061'.
[  147.792959][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'.
[  147.798619][ T9234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'.
[  147.801997][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'.
[  148.012076][ T9251] veth0_macvtap: left promiscuous mode
[  148.207748][ T9263] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1070'.
[  148.262561][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1070'.
[  148.268875][ T9263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1070'.
[  148.272065][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1070'.
[  148.783447][ T9302] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1081'.
[  149.170051][ T9321] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  149.172964][ T9321] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  151.643235][ T9385] validate_nla: 31 callbacks suppressed
[  151.643246][ T9385] netlink: 'syz.3.1100': attribute type 39 has an invalid length.
[  151.650152][ T9382] netlink: 'syz.3.1100': attribute type 39 has an invalid length.
[  152.225976][ T9442] netlink: 'syz.4.1120': attribute type 21 has an invalid length.
[  152.402720][ T9455] __nla_validate_parse: 21 callbacks suppressed
[  152.402741][ T9455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1122'.
[  152.410769][ T9452] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1122'.
[  152.414714][ T9455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1122'.
[  152.451015][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'.
[  152.591268][ T9482] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1132'.
[  152.652295][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1132'.
[  152.656954][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1132'.
[  152.660429][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1132'.
[  152.900140][ T9491] netlink: 'syz.0.1134': attribute type 39 has an invalid length.
[  153.077745][ T9507] netlink: 'syz.4.1141': attribute type 22 has an invalid length.
[  154.012525][ T9526] netlink: 'syz.0.1146': attribute type 21 has an invalid length.
[  155.157971][ T9548] syz.3.1153 (9548) used greatest stack depth: 18976 bytes left
[  155.161830][ T9555] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1155'.
[  155.218619][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1155'.
[  155.651836][ T9582] netlink: 'syz.4.1165': attribute type 29 has an invalid length.
[  156.841487][ T9619] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  156.845443][ T9619] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  156.848401][ T9619] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  156.851387][ T9619] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  156.973227][ T9630] openvswitch: netlink: Flow actions attr not present in new flow.
[  156.979744][ T9630] syzkaller0: entered promiscuous mode
[  157.045539][ T9632] IPv6: NLM_F_REPLACE set, but no existing node found!
[  157.345126][ T5219] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  158.149711][ T9690] __nla_validate_parse: 13 callbacks suppressed
[  158.149723][ T9690] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1200'.
[  158.210950][ T9691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'.
[  158.216804][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'.
[  158.220083][ T9691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'.
[  158.529329][ T5219] Bluetooth: hci2: unknown advertising packet type: 0x13
[  158.552033][ T9719] netlink: 'syz.0.1210': attribute type 22 has an invalid length.
[  158.558899][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'.
[  159.852174][ T9786] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1233'.
[  159.882922][ T9788] netlink: 'syz.0.1234': attribute type 39 has an invalid length.
[  159.907523][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'.
[  159.911711][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'.
[  159.954598][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'.
[  160.019326][ T9793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  160.023559][ T9793] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  160.104648][ T9805] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1239'.
[  160.127220][ T9807] netlink: 'syz.4.1240': attribute type 16 has an invalid length.
[  160.133045][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.122276][ T9839] tap0: tun_chr_ioctl cmd 1074025677
[  161.132400][ T9839] tap0: linktype set to 769
[  161.163928][ T9834] tap0: tun_chr_ioctl cmd 1074025673
[  161.568403][ T9864] netlink: 'syz.3.1258': attribute type 3 has an invalid length.
[  163.510127][ T5219] Bluetooth: hci1: command 0x0406 tx timeout
[  163.680476][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.750749][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.789219][ T9934] netlink: 'syz.3.1279': attribute type 41 has an invalid length.
[  163.824779][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.907591][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.064529][ T9958] netlink: 'syz.4.1286': attribute type 41 has an invalid length.
[  164.092211][ T9959] __nla_validate_parse: 28 callbacks suppressed
[  164.092223][ T9959] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1285'.
[  164.118992][ T9960] TCP: TCP_TX_DELAY enabled
[  164.256485][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.261861][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.266498][   T12] bond0 (unregistering): Released all slaves
[  164.278327][ T9961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'.
[  164.291609][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'.
[  164.299749][ T9962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'.
[  164.645003][   T12] hsr_slave_0: left promiscuous mode
[  164.649719][   T12] hsr_slave_1: left promiscuous mode
[  164.677734][   T12] veth1_macvtap: left promiscuous mode
[  164.679646][   T12] veth0_macvtap: left promiscuous mode
[  164.681574][   T12] veth1_vlan: left promiscuous mode
[  164.981847][   T12] team0 (unregistering): Port device team_slave_1 removed
[  165.007479][   T12] team0 (unregistering): Port device team_slave_0 removed
[  165.497327][T10011] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1295'.
[  165.568773][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1295'.
[  165.572296][T10011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1295'.
[  165.577387][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1295'.
[  165.610902][T10021] mac80211_hwsim hwsim12 : renamed from wlan1 (while UP)
[  165.919939][T10052] -1: renamed from syzkaller0
[  165.936419][T10056] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1305'.
[  165.960763][T10059] netlink: 'syz.0.1306': attribute type 10 has an invalid length.
[  165.964694][T10059] geneve0: entered promiscuous mode
[  165.970172][T10059] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  165.976360][T10059] netlink: 'syz.0.1306': attribute type 21 has an invalid length.
[  165.991437][T10062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1305'.
[  166.398734][T10093] Dead loop on virtual device ip6_vti0, fix it urgently!
[  168.186735][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.262441][T10193] syzkaller1: tun_chr_ioctl cmd 1074025676
[  168.265278][T10193] syzkaller1: owner set to 778
[  168.305828][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.213185][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.293417][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.410060][ T5855] vlan0: left allmulticast mode
[  169.412133][ T5855] veth0_vlan: left allmulticast mode
[  169.416383][ T5855] vlan0: left promiscuous mode
[  169.418754][ T5855] : port 1(vlan0) entered disabled state
[  169.695969][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.701019][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.708747][ T5855] bond0 (unregistering): Released all slaves
[  169.752588][T10232] netlink: 'syz.3.1355': attribute type 1 has an invalid length.
[  169.930467][ T5855] hsr_slave_0: left promiscuous mode
[  169.933344][ T5855] hsr_slave_1: left promiscuous mode
[  169.939557][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.942717][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.946916][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.950079][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.960413][ T5855] veth1_macvtap: left promiscuous mode
[  169.962851][ T5855] veth0_macvtap: left promiscuous mode
[  169.965624][ T5855] veth1_vlan: left promiscuous mode
[  169.968030][ T5855] veth0_vlan: left promiscuous mode
[  170.280499][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  170.300297][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  170.886687][T10286] bridge_slave_1: left allmulticast mode
[  170.889477][T10286] bridge_slave_1: left promiscuous mode
[  170.891480][T10286] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.901394][T10286] bridge_slave_0: left promiscuous mode
[  170.903486][T10286] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.321040][T10314] __nla_validate_parse: 24 callbacks suppressed
[  171.321053][T10314] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1374'.
[  171.801525][T10351] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1380'.
[  171.804958][T10351] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1380'.
[  171.827776][T10346] netlink: 'syz.3.1379': attribute type 2 has an invalid length.
[  171.830502][T10346] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1379'.
[  172.140905][T10364] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1384'.
[  172.197561][T10370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1384'.
[  172.202085][T10364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1384'.
[  172.206902][T10370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1384'.
[  172.331785][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1387'.
[  172.340993][T10383] netlink: 'syz.3.1390': attribute type 21 has an invalid length.
[  172.343628][T10383] netlink: 14045 bytes leftover after parsing attributes in process `syz.3.1390'.
[  172.441756][T10395] netlink: 'syz.3.1392': attribute type 2 has an invalid length.
[  172.453169][T10387] netlink: 'syz.3.1392': attribute type 2 has an invalid length.
[  172.458518][T10387] netlink: 'syz.3.1392': attribute type 10 has an invalid length.
[  172.461089][T10387] vcan0: entered promiscuous mode
[  172.462981][T10387] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  172.523335][T10400] netlink: zone id is out of range
[  172.528507][T10400] netlink: zone id is out of range
[  172.530999][T10400] netlink: get zone limit has 8 unknown bytes
[  173.092763][T10435] netlink: 'syz.3.1406': attribute type 39 has an invalid length.
[  173.228058][T10455] hsr0: entered promiscuous mode
[  173.230984][T10455] hsr0: entered allmulticast mode
[  173.232950][T10455] hsr_slave_0: entered allmulticast mode
[  173.244639][T10455] hsr_slave_1: entered allmulticast mode
[  173.422285][T10467] netlink: 'syz.4.1412': attribute type 8 has an invalid length.
[  173.428984][T10467] netlink: 'syz.4.1412': attribute type 2 has an invalid length.
[  173.671965][T10475] netlink: 'syz.0.1415': attribute type 29 has an invalid length.
[  174.611791][   T54] Bluetooth: hci2: Malformed Event: 0x2f
[  174.648666][T10544] sock: sock_timestamping_bind_phc: sock not bind to device
[  176.249682][T10596] validate_nla: 4 callbacks suppressed
[  176.249700][T10596] netlink: 'syz.0.1450': attribute type 22 has an invalid length.
[  176.412480][T10608] netlink: 'syz.0.1452': attribute type 21 has an invalid length.
[  176.412531][T10609] netlink: 'syz.0.1452': attribute type 21 has an invalid length.
[  176.416363][T10608] netlink: 'syz.0.1452': attribute type 20 has an invalid length.
[  176.418478][T10609] netlink: 'syz.0.1452': attribute type 20 has an invalid length.
[  177.595909][T10636] netlink: 'syz.3.1459': attribute type 11 has an invalid length.
[  177.730834][T10651] __nla_validate_parse: 17 callbacks suppressed
[  177.730927][T10651] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1460'.
[  177.972395][T10667] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1463'.
[  177.990188][T10668] netlink: 'syz.0.1463': attribute type 21 has an invalid length.
[  177.992728][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  177.996353][T10667] netlink: 'syz.0.1463': attribute type 10 has an invalid length.
[  177.998805][T10667] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1463'.
[  178.869392][T10677] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1465'.
[  178.877723][T10685] syz.3.1465 (10685) used obsolete PPPIOCDETACH ioctl
[  179.093314][T10710] netlink: 'syz.3.1467': attribute type 1 has an invalid length.
[  179.096132][T10710] netlink: 'syz.3.1467': attribute type 4 has an invalid length.
[  179.098664][T10710] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1467'.
[  179.685854][T10746] syzkaller0: tun_chr_ioctl cmd 1074025677
[  179.687944][T10746] syzkaller0: linktype set to 0
[  179.781368][T10750] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1477'.
[  180.015050][T10761] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1480'.
[  180.276634][T10780] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1488'.
[  180.392574][T10781] netlink: 149 bytes leftover after parsing attributes in process `syz.3.1487'.
[  181.748425][T10817] validate_nla: 6 callbacks suppressed
[  181.748472][T10817] netlink: 'syz.3.1500': attribute type 10 has an invalid length.
[  182.791650][T10838] __nla_validate_parse: 9 callbacks suppressed
[  182.791747][T10838] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1507'.
[  182.839714][T10840] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1508'.
[  182.901276][T10845] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1508'.
[  182.926951][T10840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1508'.
[  182.930507][T10840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1508'.
[  183.940753][T10903] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1523'.
[  183.948802][T10904] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1523'.
[  184.155131][T10903]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.181208][T10903]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.185697][T10903]  (unregistering): Released all slaves
[  184.252822][T10920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1527'.
[  184.281676][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1527'.
[  184.308009][T10920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1527'.
[  185.176874][ T5219] Bluetooth: hci2: unknown advertising packet type: 0x70
[  185.176899][ T5219] Bluetooth: hci2: Malformed LE Event: 0x02
[  185.575819][ T5219] Bluetooth: hci2: command 0x0406 tx timeout
[  186.174862][T11092] netlink: 'syz.4.1573': attribute type 39 has an invalid length.
[  186.343142][T11099] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  186.347391][T11099] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  187.067872][T11139] syzkaller0: entered promiscuous mode
[  187.070237][T11139] syzkaller0: entered allmulticast mode
[  187.077632][T11143] nbd: must specify a size in bytes for the device
[  187.191219][T11153] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  187.195910][T11153] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  187.199743][T11155] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  187.218560][T11155] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  187.221344][T11155] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  187.230609][T11155] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  187.234143][T11155] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  187.241013][T11155] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  187.446830][T11175] delete_channel: no stack
[  189.243359][T11221] netlink: 'syz.3.1617': attribute type 39 has an invalid length.
[  189.253363][T11221] veth0_macvtap: left promiscuous mode
[  189.272606][T11223] delete_channel: no stack
[  189.278457][T11223] delete_channel: no stack
[  189.449037][T11229] netlink: 'syz.3.1620': attribute type 10 has an invalid length.
[  189.787454][T11238] __nla_validate_parse: 11 callbacks suppressed
[  189.787465][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1623'.
[  190.228582][T11252] sock: sock_set_timeout: `syz.3.1629' (pid 11252) tries to set negative timeout
[  190.836901][ T5219] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  191.953600][T11315] C: renamed from team_slave_0 (while UP)
[  191.958261][T11315] netlink: 'syz.0.1653': attribute type 3 has an invalid length.
[  191.961053][T11315] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1653'.
[  192.034275][T11324] netlink: 'syz.0.1656': attribute type 10 has an invalid length.
[  192.038997][T11324] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  192.205171][T11325] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1655'.
[  193.191962][T11336] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1660'.
[  193.408680][T11348] netlink: 'syz.3.1664': attribute type 1 has an invalid length.
[  193.455972][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1664'.
[  193.471151][T11349] sctp: [Deprecated]: syz.3.1664 (pid 11349) Use of int in maxseg socket option.
[  193.471151][T11349] Use struct sctp_assoc_value instead
[  193.478579][T11352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1664'.
[  193.481879][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1664'.
[  193.736809][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.738990][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.496624][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1676'.
[  194.537241][T11387] netlink: 'syz.3.1676': attribute type 2 has an invalid length.
[  195.000665][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.010534][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.018820][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.023606][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.030578][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.038704][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.042741][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.048175][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.052875][T11409] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.058883][T11409] netlink: 105 bytes leftover after parsing attributes in process `syz.3.1684'.
[  195.536832][T11441] netlink: 'syz.4.1693': attribute type 27 has an invalid length.
[  200.177571][T11578] __nla_validate_parse: 2 callbacks suppressed
[  200.177584][T11578] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1741'.
[  200.976320][T11611] netlink: 'syz.3.1751': attribute type 10 has an invalid length.
[  200.978943][T11611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1751'.
[  200.982070][T11611] team0: Device Q6\bY4 is loopback device. Loopback devices can't be added as a team port
[  200.986147][T11611] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  201.266746][T11628] netlink: 'syz.4.1756': attribute type 10 has an invalid length.
[  201.617662][T11644] netlink: 'syz.4.1761': attribute type 3 has an invalid length.
[  201.620429][T11644] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1761'.
[  201.891171][T11660] netlink: 'syz.4.1767': attribute type 22 has an invalid length.
[  201.895340][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'.
[  201.962695][T11671] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1771'.
[  202.076834][T11681] syzkaller0: entered promiscuous mode
[  202.078654][T11681] syzkaller0: entered allmulticast mode
[  203.381037][T11692] C: renamed from team_slave_0 (while UP)
[  203.392300][T11692] netlink: 'syz.3.1777': attribute type 3 has an invalid length.
[  203.395409][T11692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1777'.
[  203.398397][T11692] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  203.458929][T11699] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1780'.
[  203.462012][T11699] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.1780'.
[  203.956694][T11721] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1787'.
[  204.121147][T11723] netlink: 'syz.4.1787': attribute type 10 has an invalid length.
[  204.124253][T11723] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1787'.
[  205.289100][T11779] netlink: 'syz.0.1806': attribute type 3 has an invalid length.
[  205.368225][T11779] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  205.677312][T11788] C: renamed from team_slave_0 (while UP)
[  205.722254][T11788] netlink: 'syz.4.1810': attribute type 1 has an invalid length.
[  205.727043][T11788] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1810'.
[  206.053960][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  206.056088][T11722] Bluetooth: hci1: command 0x0406 tx timeout
[  208.022843][T11869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  208.028852][T11869] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  208.532316][T11876] sock: sock_timestamping_bind_phc: sock not bind to device
[  209.272831][T11886] netlink: 'syz.0.1842': attribute type 29 has an invalid length.
[  209.283283][T11886] netlink: 'syz.0.1842': attribute type 29 has an invalid length.
[  209.288021][T11886] netlink: 'syz.0.1842': attribute type 29 has an invalid length.
[  209.294391][T11886] netlink: 'syz.0.1842': attribute type 29 has an invalid length.
[  209.425026][T11891] netlink: 'syz.0.1843': attribute type 2 has an invalid length.
[  209.428084][T11891] netlink: 'syz.0.1843': attribute type 1 has an invalid length.
[  209.430851][T11891] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1843'.
[  209.434282][T11891] nbd: illegal input index -404748436
[  210.223225][T11922] nbd: must specify an index to disconnect
[  210.427861][T11926] netlink: 'syz.0.1856': attribute type 11 has an invalid length.
[  211.155931][T11951] netlink: 'syz.0.1865': attribute type 10 has an invalid length.
[  211.158862][T11951] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  211.926469][T11978] netlink: 'syz.3.1873': attribute type 11 has an invalid length.
[  212.251415][T11993] sit0: entered allmulticast mode
[  212.282909][T11993] sit0: entered promiscuous mode
[  212.412056][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'.
[  212.419516][T11996] tc_dump_action: action bad kind
[  212.421822][T12000] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  213.129598][T12018] netlink: 'syz.4.1887': attribute type 28 has an invalid length.
[  213.138984][T12018] netlink: 'syz.4.1887': attribute type 3 has an invalid length.
[  213.141800][T12018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1887'.
[  213.526028][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'.
[  214.876895][T12050] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.1895'.
[  215.537927][T12055] IPv6: NLM_F_REPLACE set, but no existing node found!
[  215.834795][T12058] validate_nla: 1 callbacks suppressed
[  215.834806][T12058] netlink: 'syz.0.1897': attribute type 4 has an invalid length.
[  215.839525][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'.
[  215.931090][T12060] delete_channel: no stack
[  215.965781][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'.
[  215.969563][T12064] tc_dump_action: action bad kind
[  215.983300][T12066] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1901'.
[  216.061769][T12070] netlink: 'syz.0.1902': attribute type 10 has an invalid length.
[  216.072432][T12070] team0: Device dummy0 is up. Set it down before adding it as a team port
[  216.500708][   T54] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  217.323168][T12121] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1912'.
[  217.518581][T12134] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1919'.
[  218.501901][T12193] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1936'.
[  218.619624][T12196] netlink: 'syz.0.1937': attribute type 10 has an invalid length.
[  218.664312][T12196] team0: Cannot enslave team device to itself
[  219.045441][T12206] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1941'.
[  219.273529][T12218] netlink: 'syz.3.1943': attribute type 3 has an invalid length.
[  219.278299][T12218] netlink: 'syz.3.1943': attribute type 1 has an invalid length.
[  219.280799][T12218] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1943'.
[  219.413688][T12224] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1947'.
[  219.417600][T12224] netlink: 6108 bytes leftover after parsing attributes in process `syz.3.1947'.
[  219.420591][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'.
[  219.647799][T12233] tap0: tun_chr_ioctl cmd 2148553947
[  220.182295][T12257] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1959'.
[  221.369414][T12289] netlink: 'syz.3.1969': attribute type 5 has an invalid length.
[  221.959825][T12307] netlink: 'syz.0.1975': attribute type 3 has an invalid length.
[  222.111961][T12312] netlink: 'syz.4.1976': attribute type 9 has an invalid length.
[  222.123719][T12312] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1976'.
[  222.370217][T12327] netlink: 'syz.4.1982': attribute type 21 has an invalid length.
[  222.420311][T12329] netlink: 'syz.0.1983': attribute type 10 has an invalid length.
[  222.546213][T12329] bond0: (slave geneve0): Releasing backup interface
[  223.016034][T12345] netlink: 'syz.0.1989': attribute type 29 has an invalid length.
[  223.019202][T12345] netlink: 'syz.0.1989': attribute type 29 has an invalid length.
[  224.265068][T12389] netlink: 'syz.0.2003': attribute type 22 has an invalid length.
[  224.268323][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'.
[  224.281993][T12394] netlink: 'syz.3.2004': attribute type 22 has an invalid length.
[  224.286270][T12394] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2004'.
[  224.338312][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  225.322018][T12440] netlink: 'syz.3.2018': attribute type 29 has an invalid length.
[  225.565667][T12440] syzkaller0: entered promiscuous mode
[  225.567863][T12440] syzkaller0: entered allmulticast mode
[  226.374612][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  228.359803][T12448] validate_nla: 1 callbacks suppressed
[  228.359815][T12448] netlink: 'syz.0.2020': attribute type 29 has an invalid length.
[  228.364954][T12451] syzkaller0: tun_chr_ioctl cmd 1074025677
[  228.367029][T12451] syzkaller0: linktype set to 805
[  228.390072][T12454] netlink: 'syz.0.2021': attribute type 10 has an invalid length.
[  228.392792][T12454] team0: Device ip6_vti0 is of different type
[  228.462169][T12456] netlink: 'syz.4.2022': attribute type 1 has an invalid length.
[  228.470431][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[  228.473305][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'.
[  228.476781][T12456] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2022'.
[  228.491194][T12454] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2021'.
[  228.499066][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'.
[  228.501988][T12454] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2021'.
[  230.077886][T12526] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2046'.
[  230.492676][T12568] netlink: 'syz.4.2059': attribute type 29 has an invalid length.
[  230.496738][T12568] netlink: 'syz.4.2059': attribute type 29 has an invalid length.
[  230.499690][T12568] netlink: 'syz.4.2059': attribute type 29 has an invalid length.
[  230.502733][T12568] netlink: 'syz.4.2059': attribute type 29 has an invalid length.
[  230.536159][T12568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2059'.
[  230.578201][T12570] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2058'.
[  231.942730][T12596] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2069'.
[  232.000526][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'.
[  232.006498][T12604] netlink: 'syz.0.2070': attribute type 21 has an invalid length.
[  232.900645][T12631] netlink: 'syz.4.2079': attribute type 10 has an invalid length.
[  232.927216][T12631] batman_adv: batadv0: Adding interface: netdevsim0
[  232.929630][T12631] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.939504][T12631] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  233.072387][T12647] netlink: 'syz.4.2084': attribute type 21 has an invalid length.
[  233.077484][   T54] Bluetooth: hci0: Malformed Event: 0x2f
[  234.460408][T12725] netlink: 'syz.4.2108': attribute type 10 has an invalid length.
[  235.717023][T12769] netlink: 'syz.4.2123': attribute type 21 has an invalid length.
[  235.779385][T12783] netlink: 495 bytes leftover after parsing attributes in process `syz.4.2126'.
[  235.782750][T12782] netlink: 495 bytes leftover after parsing attributes in process `syz.4.2126'.
[  236.020552][T12796] netlink: 'syz.4.2131': attribute type 29 has an invalid length.
[  236.023358][T12795] netlink: 'syz.4.2131': attribute type 29 has an invalid length.
[  236.026278][T12796] netlink: 'syz.4.2131': attribute type 29 has an invalid length.
[  236.032436][T12795] netlink: 'syz.4.2131': attribute type 29 has an invalid length.
[  236.283049][T12806] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2134'.
[  236.286418][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2134'.
[  236.849595][T12845] netlink: 'syz.0.2147': attribute type 3 has an invalid length.
[  236.852071][T12845] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2147'.
[  236.935312][T12852] netlink: 'syz.3.2150': attribute type 2 has an invalid length.
[  236.937821][T12852] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2150'.
[  237.036341][T12855] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2149'.
[  237.499866][T12879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2157'.
[  238.302882][T12908] netlink: 'syz.0.2166': attribute type 21 has an invalid length.
[  238.302896][T12907] netlink: 'syz.0.2166': attribute type 21 has an invalid length.
[  238.839064][T12936] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2176'.
[  239.856365][T12957] sctp: [Deprecated]: syz.4.2181 (pid 12957) Use of struct sctp_assoc_value in delayed_ack socket option.
[  239.856365][T12957] Use struct sctp_sack_info instead
[  240.452271][T12980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2183'.
[  240.559226][T12999] validate_nla: 2 callbacks suppressed
[  240.559284][T12999] netlink: 'syz.0.2187': attribute type 2 has an invalid length.
[  241.185906][T13012] syzkaller0: entered promiscuous mode
[  241.187911][T13012] syzkaller0: entered allmulticast mode
[  242.263323][T13032] netlink: 'syz.4.2199': attribute type 7 has an invalid length.
[  242.352281][T13041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2204'.
[  242.361114][T13044] netlink: 'syz.4.2203': attribute type 1 has an invalid length.
[  242.373462][T13045] netlink: 'syz.3.2205': attribute type 2 has an invalid length.
[  242.379476][T13045] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2205'.
[  242.392763][T13045] netlink: 'syz.3.2205': attribute type 2 has an invalid length.
[  242.400393][T13045] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2205'.
[  242.630349][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2203'.
[  242.654390][T13055] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2203'.
[  242.668747][T13061] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2203'.
[  242.900040][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2211'.
[  242.903268][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2211'.
[  242.911198][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2211'.
[  244.167426][T13134] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2233'.
[  244.247926][T13141] netlink: 'syz.0.2236': attribute type 29 has an invalid length.
[  244.260404][T13141] netlink: 'syz.0.2236': attribute type 29 has an invalid length.
[  244.268265][T13141] netlink: 'syz.0.2236': attribute type 29 has an invalid length.
[  244.274232][T13141] netlink: 'syz.0.2236': attribute type 29 has an invalid length.
[  245.800204][T13198] delete_channel: no stack
[  245.801901][T13198] delete_channel: no stack
[  246.076336][T13208] netlink: 'syz.4.2259': attribute type 10 has an invalid length.
[  247.305920][T13235] syzkaller0: entered promiscuous mode
[  247.307834][T13235] syzkaller0: entered allmulticast mode
[  247.641669][T13242] __nla_validate_parse: 2 callbacks suppressed
[  247.641686][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'.
[  248.395954][T13245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2270'.
[  248.890169][T13280] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2283'.
[  249.348193][T13297] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2287'.
[  249.397371][T13301] netlink: 'syz.4.2289': attribute type 1 has an invalid length.
[  249.489101][T13309] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2292'.
[  249.903620][T13330] syzkaller0: entered promiscuous mode
[  249.907869][T13330] syzkaller0: entered allmulticast mode
[  250.296868][T13353] netlink: 'syz.4.2305': attribute type 10 has an invalid length.
[  250.302320][T13353] batman_adv: batadv0: Adding interface: team0
[  250.306195][T13353] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.314915][T13353] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  250.703369][T13370] netlink: 61955 bytes leftover after parsing attributes in process `syz.4.2309'.
[  250.712842][T13370] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2309'.
[  252.233344][T13415] tap0: tun_chr_ioctl cmd 1074025677
[  252.237205][T13415] tap0: linktype set to 769
[  252.520909][T13419] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2322'.
[  253.850042][T13445] netlink: 'syz.4.2330': attribute type 2 has an invalid length.
[  253.853198][T13445] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2330'.
[  253.873109][T13445] netlink: 731 bytes leftover after parsing attributes in process `syz.4.2330'.
[  253.982573][T13448] batadv0: left allmulticast mode
[  253.999814][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.003120][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.012601][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.017052][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.100561][T13451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2332'.
[  254.105820][T13451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2332'.
[  254.137668][T13454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2332'.
[  254.157359][T13457] ksmbd: Unknown IPC event: 1, ignore.
[  254.334390][T13466] netlink: 'syz.4.2336': attribute type 11 has an invalid length.
[  254.337019][T13466] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2336'.
[  254.414550][T13464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.201616][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.204426][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  256.650540][T13514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2351'.
[  256.762054][T13523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'.
[  257.285875][T13541] netlink: 'syz.4.2359': attribute type 14 has an invalid length.
[  257.288412][T13541] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2359'.
[  257.859002][T13550] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2362'.
[  258.009015][T13557] netlink: 'syz.0.2365': attribute type 4 has an invalid length.
[  258.935801][T13585] netlink: 'syz.0.2373': attribute type 29 has an invalid length.
[  258.938882][T13585] netlink: 'syz.0.2373': attribute type 29 has an invalid length.
[  259.576831][T13591] __nla_validate_parse: 2 callbacks suppressed
[  259.577220][T13591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2374'.
[  259.619901][T13603] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  259.624951][T13605] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2374'.
[  260.145650][T13623] : renamed from bond0 (while UP)
[  260.360177][T13625] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2387'.
[  260.486365][T13628] netlink: 'syz.0.2388': attribute type 16 has an invalid length.
[  260.489102][T13628] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2388'.
[  260.738045][T13639] netlink: 'syz.4.2392': attribute type 8 has an invalid length.
[  260.740756][T13639] netlink: 'syz.4.2392': attribute type 3 has an invalid length.
[  260.743363][T13639] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.2392'.
[  260.999364][T13653] netlink: 'syz.3.2397': attribute type 29 has an invalid length.
[  261.205208][T13668] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2401'.
[  261.209258][T13668] netlink: 'syz.3.2401': attribute type 21 has an invalid length.
[  261.211823][T13668] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2401'.
[  261.322293][T13675] syzkaller0: entered promiscuous mode
[  261.325518][T13675] syzkaller0: entered allmulticast mode
[  262.357710][T13683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2406'.
[  262.487523][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'.
[  263.392552][T13725] netlink: 'syz.0.2415': attribute type 46 has an invalid length.
[  263.396795][T13725] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2415'.
[  264.350198][T13764] netlink: 'syz.4.2432': attribute type 10 has an invalid length.
[  264.418268][T13764] team0: Port device geneve1 added
[  265.126540][T13799] syz.0.2442: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  265.141831][T13799] CPU: 0 UID: 0 PID: 13799 Comm: syz.0.2442 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  265.141854][T13799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.141860][T13799] Call Trace:
[  265.141864][T13799]  <TASK>
[  265.141868][T13799]  dump_stack_lvl+0x189/0x250
[  265.141885][T13799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.141894][T13799]  ? __pfx__printk+0x10/0x10
[  265.141906][T13799]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  265.141917][T13799]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  265.141927][T13799]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  265.141937][T13799]  warn_alloc+0x214/0x310
[  265.141947][T13799]  ? stack_depot_save_flags+0x429/0x900
[  265.141959][T13799]  ? __pfx_warn_alloc+0x10/0x10
[  265.141968][T13799]  ? kasan_save_track+0x4f/0x80
[  265.141976][T13799]  ? xskq_create+0x56/0x170
[  265.141987][T13799]  ? xsk_init_queue+0xb0/0x110
[  265.141994][T13799]  ? xsk_setsockopt+0x4de/0x710
[  265.142002][T13799]  ? do_sock_setsockopt+0x17c/0x1b0
[  265.142010][T13799]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  265.142017][T13799]  ? do_syscall_64+0xfa/0x3b0
[  265.142027][T13799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.142038][T13799]  __vmalloc_node_range_noprof+0x125/0x12f0
[  265.142059][T13799]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  265.142070][T13799]  ? __kasan_kmalloc+0x93/0xb0
[  265.142079][T13799]  vmalloc_user_noprof+0xad/0xf0
[  265.142088][T13799]  ? xskq_create+0xbf/0x170
[  265.142097][T13799]  xskq_create+0xbf/0x170
[  265.142108][T13799]  xsk_init_queue+0xb0/0x110
[  265.142118][T13799]  xsk_setsockopt+0x4de/0x710
[  265.142127][T13799]  ? __pfx_xsk_setsockopt+0x10/0x10
[  265.142137][T13799]  ? __fget_files+0x2a/0x420
[  265.142169][T13799]  ? aa_sock_opt_perm+0x74/0x110
[  265.142181][T13799]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  265.142192][T13799]  ? __pfx_xsk_setsockopt+0x10/0x10
[  265.142201][T13799]  do_sock_setsockopt+0x17c/0x1b0
[  265.142212][T13799]  __x64_sys_setsockopt+0x13f/0x1b0
[  265.142222][T13799]  do_syscall_64+0xfa/0x3b0
[  265.142231][T13799]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.142240][T13799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.142247][T13799]  ? exc_page_fault+0x9f/0xf0
[  265.142257][T13799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.142265][T13799] RIP: 0033:0x7f572cb8e9a9
[  265.142273][T13799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.142279][T13799] RSP: 002b:00007f572daa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  265.142289][T13799] RAX: ffffffffffffffda RBX: 00007f572cdb5fa0 RCX: 00007f572cb8e9a9
[  265.142295][T13799] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  265.142300][T13799] RBP: 00007f572cc10d69 R08: 0000000000000004 R09: 0000000000000000
[  265.142304][T13799] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  265.142309][T13799] R13: 0000000000000000 R14: 00007f572cdb5fa0 R15: 00007ffe0a7b4228
[  265.142320][T13799]  </TASK>
[  265.142324][T13799] Mem-Info:
[  265.249356][T13799] active_anon:32643 inactive_anon:0 isolated_anon:0
[  265.249356][T13799]  active_file:14654 inactive_file:38297 isolated_file:0
[  265.249356][T13799]  unevictable:1768 dirty:94 writeback:0
[  265.249356][T13799]  slab_reclaimable:9710 slab_unreclaimable:56215
[  265.249356][T13799]  mapped:27311 shmem:17212 pagetables:1300
[  265.249356][T13799]  sec_pagetables:0 bounce:0
[  265.249356][T13799]  kernel_misc_reclaimable:0
[  265.249356][T13799]  free:254814 free_pcp:19101 free_cma:0
[  265.264310][T13799] Node 0 active_anon:60176kB inactive_anon:0kB active_file:45380kB inactive_file:120720kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:78540kB dirty:256kB writeback:0kB shmem:52176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9136kB pagetables:3124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  265.275542][T13799] Node 1 active_anon:71756kB inactive_anon:0kB active_file:13236kB inactive_file:32468kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31520kB dirty:120kB writeback:0kB shmem:18032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4088kB pagetables:1940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  265.287895][T13799] Node 0 DMA free:14828kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:488kB local_pcp:360kB free_cma:0kB
[  265.297956][T13799] lowmem_reserve[]: 0 812 812 812 812
[  265.300137][T13799] Node 0 DMA32 free:162504kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60176kB inactive_anon:0kB active_file:45380kB inactive_file:120720kB unevictable:3536kB writepending:256kB present:1556484kB managed:831908kB mlocked:0kB bounce:0kB free_pcp:30532kB local_pcp:10260kB free_cma:0kB
[  265.310338][T13799] lowmem_reserve[]: 0 0 0 0 0
[  265.311956][T13799] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  265.321504][T13799] lowmem_reserve[]: 0 0 854 854 854
[  265.323636][T13799] Node 1 Normal free:383432kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75020kB inactive_anon:0kB active_file:13236kB inactive_file:32468kB unevictable:3536kB writepending:120kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41452kB local_pcp:20444kB free_cma:0kB
[  265.333970][T13799] lowmem_reserve[]: 0 0 0 0 0
[  265.335807][T13799] Node 0 DMA: 9*4kB (U) 9*8kB (U) 4*16kB (U) 10*32kB (U) 6*64kB (U) 5*128kB (U) 4*256kB (U) 2*512kB (U) 1*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 14828kB
[  265.341919][T13799] Node 0 DMA32: 27*4kB (UME) 318*8kB (UE) 347*16kB (UME) 363*32kB (UME) 149*64kB (UE) 84*128kB (U) 62*256kB (UM) 32*512kB (UME) 28*1024kB (UM) 16*2048kB (UM) 7*4096kB (UM) = 162476kB
[  265.351098][T13799] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  265.356795][T13799] Node 1 Normal: 311*4kB (UME) 782*8kB (UME) 752*16kB (UME) 347*32kB (UME) 456*64kB (UME) 264*128kB (UM) 124*256kB (UME) 52*512kB (UM) 24*1024kB (UME) 13*2048kB (UE) 44*4096kB (UM) = 383404kB
[  265.362886][T13799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  265.366632][T13808] netlink: 'syz.4.2444': attribute type 3 has an invalid length.
[  265.369056][T13808] netlink: 'syz.4.2444': attribute type 1 has an invalid length.
[  265.371909][T13808] __nla_validate_parse: 5 callbacks suppressed
[  265.371916][T13808] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2444'.
[  265.377590][T13799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  265.380648][T13799] 71692 total pagecache pages
[  265.382270][T13799] 0 pages in swap cache
[  265.383786][T13799] Free swap  = 124996kB
[  265.385270][T13799] Total swap = 124996kB
[  265.386805][T13799] 786301 pages RAM
[  265.388204][T13799] 0 pages HighMem/MovableOnly
[  265.389871][T13799] 241076 pages reserved
[  265.391353][T13799] 0 pages cma reserved
[  265.594624][T13816] netlink: 'syz.4.2446': attribute type 22 has an invalid length.
[  265.597259][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'.
[  267.005417][   T54] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11
[  267.043368][T13875] netlink: 'syz.4.2464': attribute type 4 has an invalid length.
[  267.046309][T13875] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.2464'.
[  267.160723][T13878] Dead loop on virtual device ip6_vti0, fix it urgently!
[  267.257400][T13880] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[  267.260391][T13880] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[  267.263329][T13880] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[  267.266728][T13880] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[  267.271642][T13880] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[  267.390678][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2469'.
[  267.394949][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2469'.
[  267.398963][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2469'.
[  267.424030][T13892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2467'.
[  267.430231][T13890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2467'.
[  267.857559][T13915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2477'.
[  267.860659][T13916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2477'.
[  267.966489][T13912] syz.4.2476 (13912) used greatest stack depth: 18800 bytes left
[  270.258792][ T5219] Bluetooth: hci0: Unknown advertising packet type: 0x20
[  270.451326][T14062] validate_nla: 6 callbacks suppressed
[  270.451383][T14062] netlink: 'syz.0.2525': attribute type 10 has an invalid length.
[  270.459007][T14062] __nla_validate_parse: 8 callbacks suppressed
[  270.459061][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2525'.
[  270.467938][T14062] veth0_vlan: entered allmulticast mode
[  270.475286][T14062] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  270.531060][T14066] netlink: 'syz.0.2526': attribute type 1 has an invalid length.
[  270.536184][T14066] netlink: 'syz.0.2526': attribute type 3 has an invalid length.
[  270.538789][T14066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2526'.
[  271.093922][ T5219] Bluetooth: hci2: command 0x0406 tx timeout
[  271.321373][T14105] netlink: 'syz.3.2537': attribute type 5 has an invalid length.
[  271.324240][T14105] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2537'.
[  272.030222][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2544'.
[  272.376453][T14145] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2550'.
[  273.339618][T14155] syzkaller0: entered promiscuous mode
[  273.341486][T14155] syzkaller0: entered allmulticast mode
[  274.461067][T14162] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2555'.
[  274.469805][T14160] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2555'.
[  274.572488][T14169] netlink: 'syz.0.2557': attribute type 29 has an invalid length.
[  274.578277][T14169] netlink: 'syz.0.2557': attribute type 29 has an invalid length.
[  274.665604][T14180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2561'.
[  274.880911][T14207] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2566'.
[  275.206730][   T54] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6
[  275.243240][T14224] netlink: 'syz.3.2571': attribute type 11 has an invalid length.
[  275.388275][T14227] mac80211_hwsim hwsim14 O3c: renamed from wlan1 (while UP)
[  275.928287][T14245] netlink: 'syz.4.2577': attribute type 29 has an invalid length.
[  275.930834][T14245] netlink: 'syz.4.2577': attribute type 3 has an invalid length.
[  275.933286][T14245] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2577'.
[  276.261111][T14260] netlink: 'syz.0.2582': attribute type 22 has an invalid length.
[  276.264282][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'.
[  284.005577][T14297] veth0_vlan: entered allmulticast mode
[  284.012934][T14297] batman_adv: batadv0: Interface deactivated: vlan1
[  284.517346][T14323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2604'.
[  284.605102][T14333] netlink: 'syz.0.2607': attribute type 6 has an invalid length.
[  284.607992][T14333] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  284.610683][T14333] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2607'.
[  284.667064][T14335] netlink: 'syz.3.2608': attribute type 6 has an invalid length.
[  284.670504][T14335] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2608'.
[  284.751177][T14337] netlink: 'syz.3.2609': attribute type 29 has an invalid length.
[  284.761725][T14337] netlink: 'syz.3.2609': attribute type 29 has an invalid length.
[  285.129965][T14357] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2615'.
[  285.390815][T14364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'.
[  285.396262][T14364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'.
[  285.399583][T14364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'.
[  285.537948][T14375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2623'.
[  286.069708][T14395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2631'.
[  286.538280][T14409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2638'.
[  286.882148][T14448] sctp: [Deprecated]: syz.3.2649 (pid 14448) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.882148][T14448] Use struct sctp_sack_info instead
[  286.965426][T14454] netlink: 'syz.0.2648': attribute type 2 has an invalid length.
[  286.968145][T14454] netlink: 'syz.0.2648': attribute type 1 has an invalid length.
[  287.691053][T14462] netlink: 'syz.3.2654': attribute type 1 has an invalid length.
[  287.797533][T14472] netlink: 'syz.0.2659': attribute type 10 has an invalid length.
[  287.800547][T14472] netlink: 'syz.0.2659': attribute type 5 has an invalid length.
[  288.731927][T14511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.126451][T14528] IPv6: NLM_F_CREATE should be specified when creating new route
[  289.647360][T14550] __nla_validate_parse: 6 callbacks suppressed
[  289.647374][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2686'.
[  289.727902][T14556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2689'.
[  290.274599][T14585] tap0: tun_chr_ioctl cmd 1074025672
[  290.281058][T14585] tap0: ignored: set checksum enabled
[  290.643045][T14588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2697'.
[  291.372450][T14607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'.
[  291.380282][T14607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'.
[  291.386219][T14607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'.
[  291.409784][T14610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2704'.
[  291.570586][T14623] sctp: [Deprecated]: syz.4.2706 (pid 14623) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.570586][T14623] Use struct sctp_sack_info instead
[  292.531587][T14638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2712'.
[  292.762713][T14651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2716'.
[  295.060682][T14681] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2727'.
[  295.297861][T14690] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  296.167056][T14747] validate_nla: 4 callbacks suppressed
[  296.167068][T14747] netlink: 'syz.0.2751': attribute type 8 has an invalid length.
[  296.173974][T14747] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2751'.
[  296.186627][T14749] netlink: 'syz.0.2751': attribute type 4 has an invalid length.
[  296.196186][T14747] netlink: 'syz.0.2751': attribute type 12 has an invalid length.
[  296.198961][T14747] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2751'.
[  296.417876][T14763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2755'.
[  296.922917][T14769] netlink: 'syz.3.2758': attribute type 2 has an invalid length.
[  296.926297][T14769] netlink: 'syz.3.2758': attribute type 4 has an invalid length.
[  296.929056][T14769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2758'.
[  296.993991][T14769] netlink: 'syz.3.2758': attribute type 29 has an invalid length.
[  297.189040][ T5862] page_pool_release_retry() stalled pool shutdown: id 83, 1 inflight 60 sec
[  297.544884][T14785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2761'.
[  297.668624][T14789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2766'.
[  297.712762][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2765'.
[  297.716283][T14791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2765'.
[  297.719741][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2765'.
[  298.015872][T14809] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  298.490655][T14826] tap0: tun_chr_ioctl cmd 1074025677
[  298.493224][T14826] tap0: linktype set to 769
[  299.952379][   T54] Bluetooth: hci0: unknown advertising packet type: 0x20
[  299.952397][   T54] Bluetooth: hci0: unknown advertising packet type: 0x20
[  300.532919][T14885] delete_channel: no stack
[  301.178098][T14905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.183296][T14903] syzkaller0: entered promiscuous mode
[  301.248866][T14914] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  301.392820][T14922] __nla_validate_parse: 7 callbacks suppressed
[  301.392834][T14922] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2806'.
[  301.629515][T14929] netlink: 'syz.0.2809': attribute type 8 has an invalid length.
[  301.632298][T14929] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2809'.
[  301.689513][T14931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2810'.
[  301.842211][T14941] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2814'.
[  301.910235][T14943] netlink: 'syz.0.2815': attribute type 3 has an invalid length.
[  301.913038][T14943] netlink: 'syz.0.2815': attribute type 1 has an invalid length.
[  301.915936][T14943] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2815'.
[  302.175543][T14957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2819'.
[  302.220762][T14961] netlink: 'syz.4.2821': attribute type 21 has an invalid length.
[  302.279938][T14967] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2824'.
[  302.404567][T14972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2826'.
[  302.474012][T14974] netlink: 'syz.4.2827': attribute type 4 has an invalid length.
[  302.819886][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'.
[  305.087727][T15060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2854'.
[  305.181829][T15069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.318778][T15080] netlink: 'syz.3.2860': attribute type 21 has an invalid length.
[  305.846541][T15122] netlink: 'syz.0.2876': attribute type 9 has an invalid length.
[  305.909637][T15127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.092559][T15139] netlink: 'syz.0.2882': attribute type 22 has an invalid length.
[  308.755233][T15200] __nla_validate_parse: 4 callbacks suppressed
[  308.755245][T15200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2900'.
[  308.918728][T15207] syzkaller0: left promiscuous mode
[  308.939290][T15212] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2905'.
[  309.725873][T15234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.059735][T15266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2922'.
[  310.991372][T15296] delete_channel: no stack
[  310.996767][T15296] delete_channel: no stack
[  311.361775][T15312] netlink: 'syz.3.2937': attribute type 29 has an invalid length.
[  311.365706][T15312] netlink: 'syz.3.2937': attribute type 29 has an invalid length.
[  311.987592][T15326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.018931][T15328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2943'.
[  312.062139][T15330] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2944'.
[  313.109004][T15358] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  313.111154][T15358] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  313.198086][T15361] netlink: 'syz.4.2955': attribute type 40 has an invalid length.
[  313.355988][T15369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2957'.
[  313.441662][T15376] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2958'.
[  314.032877][T15396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2963'.
[  314.402351][T15413] syzkaller0: entered promiscuous mode
[  314.405667][T15413] syzkaller0: entered allmulticast mode
[  314.477559][T15417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2970'.
[  314.545086][T15423] netlink: 'syz.0.2973': attribute type 22 has an invalid length.
[  314.548378][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  314.729335][T15436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2978'.
[  315.088714][T15455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2985'.
[  315.675891][T15468] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  315.708556][T15470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  315.711871][T15470] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  315.766666][T15473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2992'.
[  315.880310][T15477] IPv6: NLM_F_REPLACE set, but no existing node found!
[  316.121445][T15484] netlink: 'syz.4.2997': attribute type 3 has an invalid length.
[  316.127926][T15484] netlink: 'syz.4.2997': attribute type 1 has an invalid length.
[  316.130837][T15484] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2997'.
[  316.250852][T15484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2997'.
[  316.254697][T15487] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2997'.
[  316.309906][T15484] netlink: 'syz.4.2997': attribute type 29 has an invalid length.
[  316.602507][T15489] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2998'.
[  316.625381][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.627654][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.902118][T15573] netlink: 'syz.3.3025': attribute type 21 has an invalid length.
[  317.988692][T15580] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  318.177820][   T54] Bluetooth: hci1: unexpected event 0x17 length: 15 > 6
[  318.327613][T15602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  319.138428][T15617] delete_channel: no stack
[  319.175659][T15625] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  319.453902][T15646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  319.503157][T15649] __nla_validate_parse: 4 callbacks suppressed
[  319.503193][T15649] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3054'.
[  319.515839][T15649] netlink: zone id is out of range
[  319.517632][T15649] netlink: zone id is out of range
[  319.519443][T15649] netlink: zone id is out of range
[  319.521279][T15649] netlink: zone id is out of range
[  319.523016][T15649] netlink: zone id is out of range
[  319.526598][T15649] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3054'.
[  319.809057][T15668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3059'.
[  319.812771][T15667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3059'.
[  319.818933][T15668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3059'.
[  320.063714][T15672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.066417][T15672] IPv6: NLM_F_CREATE should be set when creating new route
[  320.070106][T15672] IPv6: NLM_F_CREATE should be set when creating new route
[  320.072758][T15672] IPv6: NLM_F_CREATE should be set when creating new route
[  320.259624][T15675] netlink: 'syz.4.3062': attribute type 2 has an invalid length.
[  320.262519][T15675] netlink: 'syz.4.3062': attribute type 1 has an invalid length.
[  320.268099][T15675] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3062'.
[  320.272284][T15675] nbd: illegal input index -404748436
[  320.277086][T15675] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.3062'.
[  320.282803][T15675] netlink: 'syz.4.3062': attribute type 4 has an invalid length.
[  320.286447][T15675] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.3062'.
[  320.450593][T15680] netlink: 809 bytes leftover after parsing attributes in process `syz.4.3064'.
[  320.453511][T15680] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.3064'.
[  320.516367][T15686] netlink: 'syz.3.3066': attribute type 3 has an invalid length.
[  320.608384][T15695] netlink: 'syz.4.3069': attribute type 2 has an invalid length.
[  320.613878][T15695] netlink: 'syz.4.3069': attribute type 1 has an invalid length.
[  320.616649][T15695] nbd: illegal input index 65540
[  320.708756][T15703] netlink: 'syz.3.3071': attribute type 21 has an invalid length.
[  321.099697][T15724] netlink: 'syz.0.3079': attribute type 1 has an invalid length.
[  321.271706][T15739] net_ratelimit: 80 callbacks suppressed
[  321.271715][T15739] bridge_slave_1: mtu less than device minimum
[  321.278707][T15738] bridge_slave_1: mtu less than device minimum
[  321.344147][T15745] netlink: 'syz.3.3086': attribute type 29 has an invalid length.
[  322.916913][T15833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.069733][T15848] validate_nla: 3 callbacks suppressed
[  323.069742][T15848] netlink: 'syz.4.3114': attribute type 26 has an invalid length.
[  323.095418][T15851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.290939][T15880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.343700][   T54] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[  323.992691][ T5279] udevd[5279]: worker [15372] terminated by signal 33 (Unknown signal 33)
[  324.293369][T15896] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  325.383674][T15930] __nla_validate_parse: 10 callbacks suppressed
[  325.383686][T15930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3142'.
[  325.934975][T15965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3152'.
[  325.938068][T15959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3152'.
[  325.949054][T15965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3152'.
[  326.074419][T15970] bond_slave_1: entered promiscuous mode
[  326.076300][T15970] bond_slave_1: entered allmulticast mode
[  326.966489][T15993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3164'.
[  327.126360][T16009] can: request_module (can-proto-0) failed.
[  327.308991][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  327.447123][T16030] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3173'.
[  327.478469][T16045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3179'.
[  327.811943][T16070] netlink: 'syz.3.3186': attribute type 26 has an invalid length.
[  328.732161][T16095] netlink: 'syz.4.3195': attribute type 26 has an invalid length.
[  328.967348][T16105] net veth1_virt_wifi : renamed from virt_wifi0
[  329.673626][T16134] netlink: 'syz.0.3207': attribute type 2 has an invalid length.
[  329.706110][T16134] netlink: 'syz.0.3207': attribute type 2 has an invalid length.
[  329.721628][T16137] netlink: 'syz.3.3208': attribute type 11 has an invalid length.
[  329.725413][T16137] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3208'.
[  329.745546][T16139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3209'.
[  330.282641][T16150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3212'.
[  330.502921][T16160] netlink: 'syz.4.3217': attribute type 26 has an invalid length.
[  346.026470][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.029492][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.032549][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.035289][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.038158][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.040883][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.045800][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.048136][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.051047][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.054422][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  346.177036][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.180444][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.183094][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.187458][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.190126][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.367992][T16163] chnl_net:caif_netlink_parms(): no params data found
[  348.133935][T11803] Bluetooth: hci3: command tx timeout
[  348.136697][T16174] Bluetooth: hci4: command tx timeout
[  348.213912][T16174] Bluetooth: hci5: command tx timeout
[  350.213923][T16174] Bluetooth: hci4: command tx timeout
[  350.215779][T16174] Bluetooth: hci3: command tx timeout
[  350.293959][T11803] Bluetooth: hci5: command tx timeout
[  352.293992][T11803] Bluetooth: hci3: command tx timeout
[  352.295851][T11803] Bluetooth: hci4: command tx timeout
[  352.373903][T16174] Bluetooth: hci5: command tx timeout
[  354.373936][T16174] Bluetooth: hci4: command tx timeout
[  354.375872][T16174] Bluetooth: hci3: command tx timeout
[  354.453959][T11803] Bluetooth: hci5: command tx timeout
[  406.907664][T16174] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  406.911736][T16174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  406.915805][T16174] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  406.918920][T16174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  406.921512][T16174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  407.180528][T16174] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  407.186303][T16174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  407.189057][T16174] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  407.191838][T16174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  407.195204][T16174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  407.216486][T11803] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  407.219650][T11803] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  407.222265][T11803] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  407.227585][T11803] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  407.230880][T11803] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  408.933981][T11803] Bluetooth: hci6: command tx timeout
[  409.254955][T16174] Bluetooth: hci7: command tx timeout
[  409.258241][T11803] Bluetooth: hci8: command tx timeout
[  411.013885][T11803] Bluetooth: hci6: command tx timeout
[  411.334430][T11803] Bluetooth: hci8: command tx timeout
[  411.336813][T11803] Bluetooth: hci7: command tx timeout
[  413.093897][T16174] Bluetooth: hci6: command tx timeout
[  413.414262][T16174] Bluetooth: hci7: command tx timeout
[  413.416730][T16174] Bluetooth: hci8: command tx timeout
[  415.173941][T11803] Bluetooth: hci6: command tx timeout
[  415.494264][T11803] Bluetooth: hci8: command tx timeout
[  415.496873][T11803] Bluetooth: hci7: command tx timeout
[  435.393781][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  435.395932][    C0] rcu: 	0-....: (1 GPs behind) idle=5034/1/0x4000000000000000 softirq=63570/63573 fqs=5250
[  435.400485][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  435.402530][    C0] rcu: 	 number:  1023503          0            0
[  435.404594][    C0] rcu: 	cputime:    25875      26614           91   ==> 52500(ms)
[  435.407059][    C0] rcu: 	(t=10502 jiffies g=49861 q=2960 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  435.409037][    C0] CPU: 0 UID: 0 PID: 16152 Comm: syz.3.3213 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  435.409047][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  435.409052][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  435.409069][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  435.409075][    C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000206
[  435.409082][    C0] RAX: 0b5a52f9e30ef400 RBX: 1ffff92000000ebc RCX: 0b5a52f9e30ef400
[  435.409087][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  435.409092][    C0] RBP: ffffc90000007698 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  435.409097][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  435.409102][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  435.409106][    C0] FS:  00007f048e5f76c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  435.409112][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  435.409116][    C0] CR2: 0000560322d9de08 CR3: 000000002b064000 CR4: 00000000000006f0
[  435.409141][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  435.409147][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  435.409151][    C0] Call Trace:
[  435.409155][    C0]  <IRQ>
[  435.409162][    C0]  ? irqentry_exit+0x74/0x90
[  435.409173][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  435.409185][    C0]  ? unwind_next_frame+0xa5/0x2390
[  435.409197][    C0]  __rcu_read_unlock+0x84/0xe0
[  435.409207][    C0]  ? unwind_next_frame+0xa5/0x2390
[  435.409213][    C0]  unwind_next_frame+0x19ae/0x2390
[  435.409255][    C0]  ? unwind_next_frame+0xa5/0x2390
[  435.409263][    C0]  ? __pmd_alloc+0x15d/0x3b0
[  435.409272][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  435.409281][    C0]  arch_stack_walk+0x11c/0x150
[  435.409292][    C0]  ? copy_pmd_range+0x6bfc/0x7000
[  435.409301][    C0]  stack_trace_save+0x9c/0xe0
[  435.409310][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  435.409321][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  435.409329][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  435.409337][    C0]  kasan_save_track+0x3e/0x80
[  435.409343][    C0]  ? kasan_save_track+0x3e/0x80
[  435.409348][    C0]  ? kasan_save_free_info+0x46/0x50
[  435.409356][    C0]  ? __kasan_slab_free+0x62/0x70
[  435.409361][    C0]  ? kfree+0x18e/0x440
[  435.409367][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  435.409375][    C0]  ? rcu_core+0xca8/0x1710
[  435.409381][    C0]  ? handle_softirqs+0x286/0x870
[  435.409387][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  435.409393][    C0]  ? irq_exit_rcu+0x9/0x30
[  435.409399][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  435.409406][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  435.409413][    C0]  ? preempt_schedule_irq+0xb0/0x150
[  435.409421][    C0]  ? irqentry_exit+0x6f/0x90
[  435.409427][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  435.409433][    C0]  ? __pagetable_ctor+0x25d/0x340
[  435.409439][    C0]  ? __pmd_alloc+0x15d/0x3b0
[  435.409463][    C0]  kasan_save_free_info+0x46/0x50
[  435.409472][    C0]  __kasan_slab_free+0x62/0x70
[  435.409478][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  435.409485][    C0]  kfree+0x18e/0x440
[  435.409492][    C0]  ? rcu_core+0xc34/0x1710
[  435.409499][    C0]  slab_free_after_rcu_debug+0x60/0x2a0
[  435.409508][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  435.409515][    C0]  ? rcu_core+0xc34/0x1710
[  435.409522][    C0]  rcu_core+0xca8/0x1710
[  435.409537][    C0]  ? __pfx_rcu_core+0x10/0x10
[  435.409548][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  435.409556][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  435.409574][    C0]  handle_softirqs+0x286/0x870
[  435.409583][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  435.409593][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  435.409603][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  435.409614][    C0]  __irq_exit_rcu+0xca/0x1f0
[  435.409621][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  435.409632][    C0]  irq_exit_rcu+0x9/0x30
[  435.409638][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  435.409646][    C0]  </IRQ>
[  435.409648][    C0]  <TASK>
[  435.409651][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  435.409657][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  435.409666][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 1d 21 f6 e8 c6 f0 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  435.409671][    C0] RSP: 0018:ffffc900094a7140 EFLAGS: 00000286
[  435.409677][    C0] RAX: 0b5a52f9e30ef400 RBX: 0000000000000000 RCX: 0b5a52f9e30ef400
[  435.409681][    C0] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: 0000000000000001
[  435.409685][    C0] RBP: ffffc900094a71e0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  435.409689][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  435.409693][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001294e28
[  435.409707][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  435.409719][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  435.409727][    C0]  irqentry_exit+0x6f/0x90
[  435.409735][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  435.409742][    C0] RIP: 0010:__pagetable_ctor+0x25d/0x340
[  435.409748][    C0] Code: 02 00 00 75 61 e8 93 43 b4 ff 48 8b 5c 24 18 4d 85 ff 75 07 e8 84 43 b4 ff eb 06 e8 7d 43 b4 ff fb 48 c7 44 24 20 0e 36 e0 45 <4a> c7 04 23 00 00 00 00 66 42 c7 44 23 09 00 00 42 c6 44 23 0b 00
[  435.409753][    C0] RSP: 0018:ffffc900094a72a0 EFLAGS: 00000287
[  435.409758][    C0] RAX: ffffffff820be573 RBX: 1ffff92001294e58 RCX: 0000000000080000
[  435.409763][    C0] RDX: ffffc90021c2b000 RSI: 0000000000001cc9 RDI: 0000000000001cca
[  435.409767][    C0] RBP: ffffc900094a7368 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  435.409772][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  435.409776][    C0] R13: ffffea0000807370 R14: 0000000000000001 R15: 0000000000000200
[  435.409784][    C0]  ? __pagetable_ctor+0x253/0x340
[  435.409801][    C0]  ? __pfx___pagetable_ctor+0x10/0x10
[  435.409808][    C0]  ? rcu_is_watching+0x15/0xb0
[  435.409818][    C0]  ? __raw_spin_lock_init+0x45/0x100
[  435.409828][    C0]  __pmd_alloc+0x15d/0x3b0
[  435.409836][    C0]  copy_pmd_range+0x6bfc/0x7000
[  435.409847][    C0]  ? look_up_lock_class+0x74/0x170
[  435.409856][    C0]  ? register_lock_class+0x51/0x320
[  435.409866][    C0]  ? __lock_acquire+0xab9/0xd20
[  435.409876][    C0]  ? do_raw_spin_lock+0x121/0x290
[  435.409884][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  435.409895][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  435.409905][    C0]  ? _raw_spin_unlock+0x28/0x50
[  435.409912][    C0]  ? __pud_alloc+0x1db/0x260
[  435.409920][    C0]  copy_page_range+0xc46/0x1270
[  435.409940][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  435.409956][    C0]  dup_mmap+0xf57/0x1ac0
[  435.409972][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  435.409983][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  435.409993][    C0]  ? mm_init+0xce1/0xf10
[  435.410006][    C0]  copy_mm+0x13c/0x4b0
[  435.410015][    C0]  ? copy_process+0x978/0x3b80
[  435.410022][    C0]  copy_process+0x16d3/0x3b80
[  435.410036][    C0]  ? copy_process+0x978/0x3b80
[  435.410051][    C0]  ? __pfx_copy_process+0x10/0x10
[  435.410059][    C0]  ? migrate_enable+0x29c/0x3c0
[  435.410073][    C0]  kernel_clone+0x21e/0x870
[  435.410086][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  435.410103][    C0]  __x64_sys_clone+0x18b/0x1e0
[  435.410114][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  435.410128][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  435.410138][    C0]  ? rcu_is_watching+0x15/0xb0
[  435.410148][    C0]  ? do_syscall_64+0xbe/0x3b0
[  435.410159][    C0]  do_syscall_64+0xfa/0x3b0
[  435.410167][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.410173][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  435.410182][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.410188][    C0] RIP: 0033:0x7f048e78e9a9
[  435.410195][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.410200][    C0] RSP: 002b:00007f048e5f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  435.410207][    C0] RAX: ffffffffffffffda RBX: 00007f048e9b5fa0 RCX: 00007f048e78e9a9
[  435.410211][    C0] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000120000
[  435.410215][    C0] RBP: 00007f048e810d69 R08: 0000200000000800 R09: 0000200000000800
[  435.410239][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  435.410244][    C0] R13: 0000000000000000 R14: 00007f048e9b5fa0 R15: 00007ffe8fb1a2b8
[  435.410256][    C0]  </TASK>
[  435.680409][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
20:56:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000068d0
R8 =ffff888021578237 R9 =1ffff110042af046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58c3 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f048e5f76c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560322d9de08 CR3=000000002b064000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0fff2404ffffffff fffffff8350b002d
XMM02=c4e81aaec1ab06e9 7a9a6ca9eb146cfe XMM03=000000be4bffbb04 8a97a1cf8328e9fa
XMM04=aafe975358440000 0000000000000000 XMM05=15dbaec9c229f144 adb8d239eb12b7c8
XMM06=d851175f7058b74e c30fb1a312170f19 XMM07=cb645cacf7080c7b 4ec6fca3ddaafe97
XMM08=5358440000000000 0000000000000000 XMM09=0000000000000000 00007f83c7411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88810d026130 RCX=72fded70b2345d00 RDX=ffff88810d025640
RSI=ffffffff8e13f0e0 RDI=ffff88810d026130 RBP=00000000ffffffff RSP=ffffc9000320f070
R8 =ffffc9000320f14f R9 =0000000000000000 R10=ffffc9000320f140 R11=fffff52000641e2a
R12=0000000000000046 R13=ffff88810d025640 R14=ffffffff8e13f0e0 R15=0000000000000000
RIP=ffffffff8b6e9f8d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4dd5eac800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe24205ff8 CR3=00000001101d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
