last executing test programs:

26.295298428s ago: executing program 3 (id=830):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x41cf, 0xffffffffffffe6ff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000680)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

25.2004196s ago: executing program 2 (id=834):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r2)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

25.131850977s ago: executing program 3 (id=835):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r2)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

25.061469354s ago: executing program 0 (id=836):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x18008, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

25.060782995s ago: executing program 1 (id=837):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x27, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8002, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12)

25.023113819s ago: executing program 2 (id=838):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r0, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0, 0x0], 0x0, 0x11, &(0x7f0000001480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)='%+9llu \x00'}, 0x20)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xc, 0x9, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0xc, &(0x7f0000001b00)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x23, &(0x7f0000001d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1ff}, [@func, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @printk={@lld}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x1, 0x7, 0x8, 0x30, 0x10}, @generic={0x2, 0x4, 0x3, 0x3, 0x40}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @exit]}, &(0x7f0000000380)='GPL\x00', 0xffff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0xc, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001700)={0x3, 0x6, 0x467c, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[r2, r3, 0x1, r4, r5], &(0x7f0000001c00)=[{0x4, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xa, 0xa}, {0x4, 0x4, 0x10, 0x6}], 0x10, 0x80000001}, 0x94) (rerun: 64)

24.955583185s ago: executing program 0 (id=839):
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xff, 0x7fff}, 0xa00, 0xc2, 0x8, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x16, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005100000085000000080000009500000000000000"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r3, 0x0, 0xe, 0x0, &(0x7f0000001580)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff, 0x6a0, 0x8}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1019cf29, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x971}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffff01}, @call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000c00)='syzkaller\x00', 0x6, 0xcf, &(0x7f0000000c40)=""/207, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x4, 0xffffffd3, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001100)=[r1], &(0x7f0000001140)=[{0x2, 0x5, 0xb1, 0x8}, {0x1, 0x5, 0xf, 0x9}, {0x2, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x2}, {0x4, 0x2, 0xf, 0x7}, {0x4, 0x2, 0xf, 0x7}, {0x0, 0x4, 0xf, 0x8}], 0x10, 0x733c}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0xfffffeff, &(0x7f00000005c0)=[{&(0x7f0000000600)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)

24.951301176s ago: executing program 3 (id=840):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000004c0)=@hci={0x1f, 0x480, 0x2c}, 0xfffffffffffffd1d, &(0x7f0000000540)=[{&(0x7f0000000580)='G', 0x1}], 0x1}, 0x480c0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0xa, 0x240f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x15, 0x2000000000000216, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7, 0xc, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f00000019c0)={'full'}, 0xfffffdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000001a00)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000700))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f00000007c0), &(0x7f00000008c0)=r2}, 0x20)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/45, 0x2d}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000080), 0x0}, 0x20)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x25, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc48, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x1, 0x88a9c7bf758cf3bf, 0x5, 0x4, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffff7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r1], 0x0, 0x10, 0x5}, 0x94)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1100000020000000", @ANYRES32=r9, @ANYBLOB="f2be9459d431b5898ec1d57507cef4cccf7057364acc559e98fc0b93e8caddfdff3c3d2675b25d077113a699369b13f57b8a", @ANYRES32, @ANYRES64=0x0], 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

24.749397447s ago: executing program 1 (id=841):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf050005001201", 0x2e}], 0x1, 0x0, 0xf0ff}, 0x0)

24.601323202s ago: executing program 0 (id=842):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000004c0)=@hci={0x1f, 0x480, 0x2c}, 0xfffffffffffffd1d, &(0x7f0000000540)=[{&(0x7f0000000580)='G', 0x1}], 0x1}, 0x480c0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0xa, 0x240f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x15, 0x2000000000000216, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7, 0xc, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f00000019c0)={'full'}, 0xfffffdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000001a00)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000700))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f00000007c0), &(0x7f00000008c0)=r2}, 0x20)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/45, 0x2d}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000080), 0x0}, 0x20)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x25, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc48, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x1, 0x88a9c7bf758cf3bf, 0x5, 0x4, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffff7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r1], 0x0, 0x10, 0x5}, 0x94)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1100000020000000", @ANYRES32=r9, @ANYBLOB="f2be9459d431b5898ec1d57507cef4cccf7057364acc559e98fc0b93e8caddfdff3c3d2675b25d077113a699369b13f57b8a", @ANYRES32, @ANYRES64=0x0], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

24.598191252s ago: executing program 2 (id=843):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000010000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000020000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000090000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

24.567146916s ago: executing program 1 (id=844):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x41cf, 0xffffffffffffe6ff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000680)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

23.704605754s ago: executing program 2 (id=845):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x43}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x5f7, 0x0, 0x1, 0xff, '\x00', r2, r0, 0x2, 0x3}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0)

23.676433597s ago: executing program 0 (id=846):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r2)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

23.64966099s ago: executing program 3 (id=847):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x18008, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

23.587194946s ago: executing program 1 (id=848):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="bf160000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000d0000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0xe, 0x0, &(0x7f00000010c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00', 0x0, 0x7e6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

23.481997567s ago: executing program 2 (id=849):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x27, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8002, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12)

23.481381267s ago: executing program 3 (id=850):
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xff, 0x7fff}, 0xa00, 0xc2, 0x8, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x16, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005100000085000000080000009500000000000000"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r3, 0x0, 0xe, 0x0, &(0x7f0000001580)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff, 0x6a0, 0x8}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1019cf29, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x971}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffff01}, @call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000c00)='syzkaller\x00', 0x6, 0xcf, &(0x7f0000000c40)=""/207, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x4, 0xffffffd3, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001100)=[r1], &(0x7f0000001140)=[{0x2, 0x5, 0xb1, 0x8}, {0x1, 0x5, 0xf, 0x9}, {0x2, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x2}, {0x4, 0x2, 0xf, 0x7}, {0x4, 0x2, 0xf, 0x7}, {0x0, 0x4, 0xf, 0x8}], 0x10, 0x733c}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0xfffffeff, &(0x7f00000005c0)=[{&(0x7f0000000600)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)

23.481005377s ago: executing program 0 (id=851):
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d000100004000000a1000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

23.421297043s ago: executing program 1 (id=852):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x2000, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x21e4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x10001}, [@cb_func={0x18, 0x3}]}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x3c, &(0x7f0000000400)=""/60, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x4, 0xb, 0x8}, {0x3, 0x3, 0xc, 0x5}, {0x0, 0x3, 0x8, 0x1}], 0x10, 0x1}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000005c0)=r4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @multicast})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000680)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640))
openat$cgroup_int(r5, &(0x7f0000000600)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x700, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000d00)={'syzkaller0\x00', @random="002000000102"})
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004040000080004000100000080000000a8a054f29206f1933dce080021e1be1138aa2dd995a5ac85d0741d6d353fdc4e46b34ac71e8129", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002800)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002840)={0x0, 0xfa, 0x8}, 0xc)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002880)=@arena={0x21, 0x0, 0x0, 0x3, 0x40000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x4, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000006600000000000000ffffffff850000009f0000009500000000004040"], &(0x7f0000000800)='GPL\x00', 0x2, 0x1b, &(0x7f0000000840)=""/27, 0x41100, 0x40, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002900)=[0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10, r11, r12, r13], 0x0, 0x10, 0x5}, 0x94)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0)
close(0x3)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r3}, 0x18)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="9f79de834f00cd31b304ffd7340aa5662289706aedda25b4519af611fa09e8da5239adad3c9d9ced0d0449e905a4ed56eed1dfd58a5e2ea3f7487cbc1b6721fa36d3fe8a523cf0110991d7c715b2805ca4603094ec15c2aa18ea856022f7450b52922fa2c933fce1dc5de61f87f366256a7e9e2ac5eda2f5f196dee0326684b90e5aa3bf22c2968b0e7f6d7569c9dc69e3185ea240", 0x95}, {&(0x7f00000001c0)="4e11e0dbee5cdd744a9776ec671cd3c994456df67d1bdc75a3cd90104e0c6e1a7279e73d9518da2f818f4e49fd8d4e360e92f364c5eba261fa23ffad4ff9ddbf4e7259ddbcb55bd603891907cdf68eaeacd9457a0ec0c0ed8faf63e1213fe13261e1645ea7396b704887ec7b3cc489072902879630afa89fd05bd864bb053cf28141cf1b17a4b2", 0x87}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="b46e55abebb19d33969a5579f8714438535fe4913d95b1ed124e4ef28842ea07d4db07006cc6e22c262e57e739ae627f96a697bf36d89c412bac3bff55b558939847aa8ed5e2d7fe49693b1c3c954a8a926008c591f12399c4596d17cbf0bac97e50ccf0a090dc59f0c8d3f7455f5976bcf9225c364db4", 0x77}], 0x4}, 0x880)

23.288813357s ago: executing program 3 (id=853):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="000100000000ee43402600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000ffff000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000998738c05a44bf5e118d45c336179e000085000000320000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28)
r6 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x17, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={r8, r6, 0x0, 0xa, &(0x7f0000000a80)='syzkaller\x00'}, 0x30)
syz_open_procfs$namespace(r8, &(0x7f0000000ac0)='ns/mnt\x00')
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8)
sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
r9 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x5, &(0x7f0000000180), 0x43)
sendmsg$inet(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(r5)
gettid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=r8, 0x12)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000004f7d851cb073e71b65214c24535d7500", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

23.26020439s ago: executing program 1 (id=854):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)='T', &(0x7f0000000280), 0x4af}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, 0x0, &(0x7f0000002ec0), 0x2, r0}, 0x38)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18110000cb1300000000000002000000850000003000000085002000070000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x5, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000003000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003040)={0x6, 0x3, &(0x7f0000003100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003140)={0x6, 0x3, &(0x7f0000003200)=ANY=[], &(0x7f0000003240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0xfd3e, &(0x7f0000000400)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/227, 0x140}], 0x4, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000000)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000032c0))
socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004)
perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x27, 0x1, 0x0, 0xff, 0x0, 0x9, 0x21044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0xe391e4aa703794f6, 0x5, 0x43a5bd72, 0x5, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa161, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x101, 0x1}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r4, 0x0, 0x42000)
socket$kcm(0x21, 0x2, 0x2)

23.201224676s ago: executing program 2 (id=855):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000004c0)=@hci={0x1f, 0x480, 0x2c}, 0xfffffffffffffd1d, &(0x7f0000000540)=[{&(0x7f0000000580)='G', 0x1}], 0x1}, 0x480c0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0xa, 0x240f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x15, 0x2000000000000216, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7, 0xc, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f00000019c0)={'full'}, 0xfffffdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000001a00)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000700))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f00000007c0), &(0x7f00000008c0)=r2}, 0x20)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/45, 0x2d}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000080), 0x0}, 0x20)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x25, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc48, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x1, 0x88a9c7bf758cf3bf, 0x5, 0x4, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffff7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r1], 0x0, 0x10, 0x5}, 0x94)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1100000020000000", @ANYRES32=r9, @ANYBLOB="f2be9459d431b5898ec1d57507cef4cccf7057364acc559e98fc0b93e8caddfdff3c3d2675b25d077113a699369b13f57b8a", @ANYRES32, @ANYRES64=0x0], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.140703472s ago: executing program 0 (id=856):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x41cf, 0xffffffffffffe6ff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000680)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

524.232366ms ago: executing program 32 (id=856):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x41cf, 0xffffffffffffe6ff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000680)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

439.337815ms ago: executing program 33 (id=854):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)='T', &(0x7f0000000280), 0x4af}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, 0x0, &(0x7f0000002ec0), 0x2, r0}, 0x38)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18110000cb1300000000000002000000850000003000000085002000070000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x5, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000003000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003040)={0x6, 0x3, &(0x7f0000003100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003140)={0x6, 0x3, &(0x7f0000003200)=ANY=[], &(0x7f0000003240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0xfd3e, &(0x7f0000000400)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/227, 0x140}], 0x4, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000000)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000032c0))
socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004)
perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x27, 0x1, 0x0, 0xff, 0x0, 0x9, 0x21044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0xe391e4aa703794f6, 0x5, 0x43a5bd72, 0x5, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa161, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x101, 0x1}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r4, 0x0, 0x42000)
socket$kcm(0x21, 0x2, 0x2)

204.871799ms ago: executing program 34 (id=855):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000004c0)=@hci={0x1f, 0x480, 0x2c}, 0xfffffffffffffd1d, &(0x7f0000000540)=[{&(0x7f0000000580)='G', 0x1}], 0x1}, 0x480c0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0xa, 0x240f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x15, 0x2000000000000216, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7, 0xc, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
r6 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f00000019c0)={'full'}, 0xfffffdef)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000001a00)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000700))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f00000007c0), &(0x7f00000008c0)=r2}, 0x20)
recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/45, 0x2d}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000080), 0x0}, 0x20)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x25, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc48, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x1, 0x88a9c7bf758cf3bf, 0x5, 0x4, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffff7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r1], 0x0, 0x10, 0x5}, 0x94)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1100000020000000", @ANYRES32=r9, @ANYBLOB="f2be9459d431b5898ec1d57507cef4cccf7057364acc559e98fc0b93e8caddfdff3c3d2675b25d077113a699369b13f57b8a", @ANYRES32, @ANYRES64=0x0], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 35 (id=853):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="000100000000ee43402600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000ffff000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000998738c05a44bf5e118d45c336179e000085000000320000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28)
r6 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x17, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={r8, r6, 0x0, 0xa, &(0x7f0000000a80)='syzkaller\x00'}, 0x30)
syz_open_procfs$namespace(r8, &(0x7f0000000ac0)='ns/mnt\x00')
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8)
sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
r9 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x5, &(0x7f0000000180), 0x43)
sendmsg$inet(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(r5)
gettid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=r8, 0x12)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000004f7d851cb073e71b65214c24535d7500", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts.
[   68.206218][ T5768] cgroup: Unknown subsys name 'net'
[   68.337340][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.717952][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.995800][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.004902][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.012664][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.020638][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.029072][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.036375][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.122802][ T5779] (null): rxe_set_mtu: Set mtu to 1024
[   71.129383][ T5779] rxe_eth0 speed is unknown, defaulting to 1000
[   71.142143][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.153489][ T5779] rxe_eth0 speed is unknown, defaulting to 1000
[   71.161158][ T5779] rxe_eth0 speed is unknown, defaulting to 1000
[   71.161457][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.175352][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.184239][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.194781][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.203138][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.261919][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.262015][ T5782] (null): rxe_set_mtu: Set mtu to 1024
[   71.281577][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.289219][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.300163][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.308091][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.316169][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   71.332747][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.356809][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.361542][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.371710][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   71.378940][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   71.379360][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.394837][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.448883][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[   71.457435][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[   71.487722][ T5791] (null): rxe_set_mtu: Set mtu to 1024
[   71.494900][ T5790] (null): rxe_set_mtu: Set mtu to 1024
[   71.500611][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   71.512604][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   71.532906][ T5779] infiniband rxe0: set active
[   71.547021][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   71.555567][ T5779] infiniband rxe0: added rxe_eth0
[   71.624611][ T5779] RDS/IB: rxe0: added
[   71.629160][ T5779] smc: adding ib device rxe0 with port count 1
[   71.649038][ T5779] smc:    ib device rxe0 port 1 has pnetid 
[   71.658260][ T5790] rxe_eth0 speed is unknown, defaulting to 1000
[   71.665405][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   71.811124][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   71.828502][ T5791] rxe_eth0 speed is unknown, defaulting to 1000
[   72.024756][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.041762][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.049066][ T5782] bridge_slave_0: entered allmulticast mode
[   72.073386][ T5782] bridge_slave_0: entered promiscuous mode
[   72.096103][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.111494][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.118701][ T5782] bridge_slave_1: entered allmulticast mode
[   72.131554][ T5782] bridge_slave_1: entered promiscuous mode
[   72.162463][ T5779] rxe_eth0 speed is unknown, defaulting to 1000
[   72.247358][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.280751][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.365618][ T5782] team0: Port device team_slave_0 added
[   72.386234][ T5782] team0: Port device team_slave_1 added
[   72.479293][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.486517][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.513021][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.526824][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.533967][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.559973][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.571558][ T5790] chnl_net:caif_netlink_parms(): no params data found
[   72.599571][ T5779] rxe_eth0 speed is unknown, defaulting to 1000
[   72.748642][ T5791] chnl_net:caif_netlink_parms(): no params data found
[   72.823616][ T5782] hsr_slave_0: entered promiscuous mode
[   72.833528][ T5782] hsr_slave_1: entered promiscuous mode
[   72.866628][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.874376][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.884064][ T5790] bridge_slave_0: entered allmulticast mode
[   72.891192][ T5790] bridge_slave_0: entered promiscuous mode
[   72.930624][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.937992][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.945243][ T5790] bridge_slave_1: entered allmulticast mode
[   72.952443][ T5790] bridge_slave_1: entered promiscuous mode
[   72.958877][  T788] rxe_eth0 speed is unknown, defaulting to 1000
[   73.045805][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.057842][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.086316][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.093753][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.100856][ T5791] bridge_slave_0: entered allmulticast mode
[   73.107813][ T5791] bridge_slave_0: entered promiscuous mode
[   73.116378][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.123540][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.131010][ T5791] bridge_slave_1: entered allmulticast mode
[   73.132153][ T5781] Bluetooth: hci0: command tx timeout
[   73.138198][ T5791] bridge_slave_1: entered promiscuous mode
[   73.163322][ T5790] team0: Port device team_slave_0 added
[   73.198472][ T5790] team0: Port device team_slave_1 added
[   73.236111][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.255834][ T5446] infiniband rxe0: set active
[   73.278130][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.291326][ T5781] Bluetooth: hci1: command tx timeout
[   73.318102][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.325192][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.351870][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.364308][  T788] rxe_eth0 speed is unknown, defaulting to 1000
[   73.370970][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.378233][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.404237][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.441445][ T5781] Bluetooth: hci3: command tx timeout
[   73.444484][   T52] Bluetooth: hci2: command tx timeout
[   73.456117][ T5791] team0: Port device team_slave_0 added
[   73.496440][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   73.505783][ T5791] team0: Port device team_slave_1 added
[   73.533243][ T5790] hsr_slave_0: entered promiscuous mode
[   73.541877][ T5790] hsr_slave_1: entered promiscuous mode
[   73.547981][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.556277][ T5790] Cannot create hsr debugfs directory
[   73.597522][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.604943][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.631420][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.643685][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.650641][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.677221][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.769926][ T5791] hsr_slave_0: entered promiscuous mode
[   73.776462][ T5791] hsr_slave_1: entered promiscuous mode
[   73.782847][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.790406][ T5791] Cannot create hsr debugfs directory
[   73.895698][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.908378][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.920707][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.956372][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.981849][ T5779] chnl_net:caif_netlink_parms(): no params data found
[   74.131888][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.142721][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.152435][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.170639][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.178096][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.187824][ T5779] bridge_slave_0: entered allmulticast mode
[   74.194644][ T5779] bridge_slave_0: entered promiscuous mode
[   74.202869][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.209944][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.217234][ T5779] bridge_slave_1: entered allmulticast mode
[   74.224301][ T5779] bridge_slave_1: entered promiscuous mode
[   74.253537][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.262706][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.281165][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.324853][ T5779] team0: Port device team_slave_0 added
[   74.339377][ T5779] team0: Port device team_slave_1 added
[   74.371522][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.383716][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.410044][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.433319][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.440264][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.467006][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.538421][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.576080][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.585388][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.603246][ T5779] hsr_slave_0: entered promiscuous mode
[   74.609339][ T5779] hsr_slave_1: entered promiscuous mode
[   74.616427][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.624214][ T5779] Cannot create hsr debugfs directory
[   74.630554][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.699386][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.755641][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   74.794085][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.801477][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.820731][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.827868][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.909675][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.978629][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.988808][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.999296][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.015456][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.033131][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   75.067231][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.074370][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.095072][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.102236][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.115978][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.185904][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   75.201489][   T52] Bluetooth: hci0: command tx timeout
[   75.249920][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.257104][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.308241][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.315449][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.364651][   T52] Bluetooth: hci1: command tx timeout
[   75.415067][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.478879][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.513114][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[   75.521573][   T52] Bluetooth: hci2: command tx timeout
[   75.523097][ T5781] Bluetooth: hci3: command tx timeout
[   75.558745][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.565928][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.598047][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.605233][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.668044][ T5782] veth0_vlan: entered promiscuous mode
[   75.705466][ T5782] veth1_vlan: entered promiscuous mode
[   75.766328][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.882212][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.890719][ T5782] veth0_macvtap: entered promiscuous mode
[   75.904255][ T5790] veth0_vlan: entered promiscuous mode
[   75.927075][ T5782] veth1_macvtap: entered promiscuous mode
[   75.937401][ T5790] veth1_vlan: entered promiscuous mode
[   75.991147][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.016077][ T5790] veth0_macvtap: entered promiscuous mode
[   76.030944][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.048243][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.057899][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.067085][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.075874][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.107540][ T5790] veth1_macvtap: entered promiscuous mode
[   76.126322][ T5791] veth0_vlan: entered promiscuous mode
[   76.139509][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.176657][ T5791] veth1_vlan: entered promiscuous mode
[   76.197983][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.210025][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.223140][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.249096][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.264079][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.275481][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.289575][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.299076][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.307803][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.316724][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.359712][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.374847][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.419970][ T5791] veth0_macvtap: entered promiscuous mode
[   76.433413][ T5779] veth0_vlan: entered promiscuous mode
[   76.447888][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.452486][ T5791] veth1_macvtap: entered promiscuous mode
[   76.473875][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.480632][ T5779] veth1_vlan: entered promiscuous mode
[   76.576952][ T5779] veth0_macvtap: entered promiscuous mode
[   76.577894][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.603320][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.611153][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.611175][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.630550][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.640704][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.652876][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.665115][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.684227][ T5779] veth1_macvtap: entered promiscuous mode
[   76.704314][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.716481][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.740727][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.753932][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.766547][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.819795][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.828746][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.843493][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.852627][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.864555][ T5876] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3'.
[   76.901238][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.916077][ T5876] Zero length message leads to an empty skb
[   76.922843][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.966683][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.977559][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.988505][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.001782][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.012068][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.023174][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.035817][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.100586][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.120038][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.137610][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.148493][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.158381][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.169297][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.181963][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.235791][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.271463][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.280199][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.293552][ T5781] Bluetooth: hci0: command tx timeout
[   77.307153][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.342616][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.372904][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.401300][    C0] hrtimer: interrupt took 43712 ns
[   77.451997][ T5781] Bluetooth: hci1: command tx timeout
[   77.484051][ T5883] netlink: 'syz.1.2': attribute type 21 has an invalid length.
[   77.485397][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.550432][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.623121][ T5781] Bluetooth: hci2: command tx timeout
[   77.623225][   T52] Bluetooth: hci3: command tx timeout
[   77.712169][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.739900][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.819804][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.849399][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.225121][ T5893] rxe_eth0 speed is unknown, defaulting to 1000
[   79.085972][ T5905] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.319749][ T5909] dummy0: entered promiscuous mode
[   79.361366][   T52] Bluetooth: hci0: command tx timeout
[   79.484742][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   79.521596][   T52] Bluetooth: hci1: command tx timeout
[   79.686480][   T52] Bluetooth: hci2: command tx timeout
[   79.686491][ T5781] Bluetooth: hci3: command tx timeout
[   79.744085][ T5922] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15'.
[   79.847741][ T5916] netlink: 'syz.0.13': attribute type 10 has an invalid length.
[   79.867892][ T5916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'.
[   79.943754][ T5916] batman_adv: batadv0: Adding interface: virt_wifi0
[   80.013681][ T5916] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.115755][ T5916] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[   81.185439][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.194742][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.224699][ T5935] bridge0: entered allmulticast mode
[   81.495865][ T5935] bridge_slave_1: left allmulticast mode
[   81.554885][ T5935] bridge_slave_1: left promiscuous mode
[   81.581840][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.840708][ T5935] bridge_slave_0: left allmulticast mode
[   81.861013][ T5935] bridge_slave_0: left promiscuous mode
[   81.905291][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.485856][ T5942] rxe_eth0 speed is unknown, defaulting to 1000
[   82.636272][ T5940] syz.3.20 (5940) used greatest stack depth: 20792 bytes left
[   82.713236][ T5946] tun0: tun_chr_ioctl cmd 2147767511
[   82.890922][ T5948] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   82.930109][ T5948] syzkaller0: entered promiscuous mode
[   82.951405][ T5948] syzkaller0: entered allmulticast mode
[   84.833853][ T5944] rxe_eth0 speed is unknown, defaulting to 1000
[   84.875715][ T5783] rxe_eth0 speed is unknown, defaulting to 1000
[   85.188864][ T5952] rxe_eth0 speed is unknown, defaulting to 1000
[   86.838621][  T972] cfg80211: failed to load regulatory.db
[   86.923120][ T5986] syzkaller0: entered promiscuous mode
[   86.928800][ T5986] syzkaller0: entered allmulticast mode
[   86.975880][ T5991] wg2: entered promiscuous mode
[   86.994836][ T5991] wg2: entered allmulticast mode
[   89.157673][ T6007] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   89.168623][ T6007] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   89.428763][ T6015] rxe_eth0 speed is unknown, defaulting to 1000
[   89.439234][ T6018] lo: entered allmulticast mode
[   89.502824][ T6013] lo: entered promiscuous mode
[   89.516464][ T6013] lo: left allmulticast mode
[   89.543838][ T6019] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   89.577128][ T6013] bridge0: port 3(team0) entered blocking state
[   89.585613][ T6013] bridge0: port 3(team0) entered disabled state
[   89.593157][ T6013] team0: entered allmulticast mode
[   89.598722][ T6013] team_slave_0: entered allmulticast mode
[   89.607244][ T6013] team_slave_1: entered allmulticast mode
[   89.630183][ T6013] team0: entered promiscuous mode
[   89.635668][ T6013] team_slave_0: entered promiscuous mode
[   89.642903][ T6013] team_slave_1: entered promiscuous mode
[   89.658889][ T6013] bridge0: port 3(team0) entered blocking state
[   89.665915][ T6013] bridge0: port 3(team0) entered forwarding state
[   89.839610][ T6023] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   89.945336][ T6029] syzkaller0: entered promiscuous mode
[   89.950986][ T6029] syzkaller0: entered allmulticast mode
[   90.301966][ T6032] rxe_eth0 speed is unknown, defaulting to 1000
[   91.648362][ T6053] tap0: tun_chr_ioctl cmd 1074025675
[   91.664848][ T6053] tap0: persist disabled
[   93.151978][   T52] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[   93.249875][ T6076] syzkaller0: entered promiscuous mode
[   93.283725][ T6076] syzkaller0: entered allmulticast mode
[   93.509823][   T52] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[   93.862089][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[   96.436864][ T6102] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   96.931355][ T6107] rxe_eth0 speed is unknown, defaulting to 1000
[   98.970994][   T60] wlan1: Trigger new scan to find an IBSS to join
[   99.282023][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[   99.326568][ T6139] syzkaller0: entered promiscuous mode
[   99.345517][ T6139] syzkaller0: entered allmulticast mode
[  100.122935][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  101.432786][ T6162] tap0: tun_chr_ioctl cmd 1074025675
[  101.445245][ T6162] tap0: persist disabled
[  101.600714][   T52] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  102.365680][ T6194] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  102.410608][ T6194] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  102.745396][ T6196] syzkaller0: entered promiscuous mode
[  102.771498][ T6196] syzkaller0: entered allmulticast mode
[  103.925049][   T42] wlan1: Trigger new scan to find an IBSS to join
[  104.768425][ T6213] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  104.791355][ T6222] tap0: tun_chr_ioctl cmd 1074025675
[  104.796684][ T6222] tap0: persist disabled
[  104.852716][   T42] wlan1: Creating new IBSS network, BSSID 7e:b4:35:cc:6d:47
[  105.041139][ T6228] syzkaller0: entered promiscuous mode
[  105.059507][ T6228] syzkaller0: entered allmulticast mode
[  105.674179][ T6233] wg2: entered promiscuous mode
[  105.681919][ T6233] wg2: entered allmulticast mode
[  105.864926][ T6238] rxe_eth0 speed is unknown, defaulting to 1000
[  106.891474][   T50] wlan1: Trigger new scan to find an IBSS to join
[  107.351097][ T6248] rxe_eth0 speed is unknown, defaulting to 1000
[  107.422869][ T6251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.114'.
[  107.454209][ T6251] bridge_slave_0: entered allmulticast mode
[  107.660840][ T6249] rxe_eth0 speed is unknown, defaulting to 1000
[  107.681674][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  108.241930][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  108.673378][ T6265] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  108.849778][ T6267] rxe_eth0 speed is unknown, defaulting to 1000
[  109.485453][ T6278] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.115'.
[  109.933725][   T60] wlan1: Trigger new scan to find an IBSS to join
[  110.196203][ T6280] rxe_eth0 speed is unknown, defaulting to 1000
[  110.535276][ T6286] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.118'.
[  111.463435][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  111.638054][ T6296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.121'.
[  111.747712][ T6296] syz.1.121 (6296) used greatest stack depth: 20776 bytes left
[  112.127422][ T6303] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  112.557991][ T6310] rxe_eth0 speed is unknown, defaulting to 1000
[  112.708918][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  112.892575][   T42] wlan1: Creating new IBSS network, BSSID 7e:ac:a7:d3:0f:66
[  113.015092][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  113.090097][ T6320] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.131'.
[  113.778521][ T6325] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'.
[  114.039398][ T6328] rxe_eth0 speed is unknown, defaulting to 1000
[  114.577619][ T6342] dummy0: entered promiscuous mode
[  114.845949][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  114.884079][   T12] wlan1: Trigger new scan to find an IBSS to join
[  114.892226][ T6348] netlink: 'syz.3.139': attribute type 10 has an invalid length.
[  114.967246][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.139'.
[  115.003226][ T6348] batman_adv: batadv0: Adding interface: virt_wifi0
[  115.057525][ T6353] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.143'.
[  115.068103][ T6348] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.231592][ T6348] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  115.319309][ T6356] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.145'.
[  115.351861][ T6352] netlink: 'syz.2.144': attribute type 21 has an invalid length.
[  115.868022][ T6359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.146'.
[  115.931670][ T6360] rxe_eth0 speed is unknown, defaulting to 1000
[  116.488968][   T52] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  117.306964][ T6385] netlink: 'syz.0.156': attribute type 21 has an invalid length.
[  117.489811][ T6388] netlink: 44 bytes leftover after parsing attributes in process `syz.2.157'.
[  117.771993][ T6394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.159'.
[  117.921832][   T50] wlan1: Trigger new scan to find an IBSS to join
[  118.022541][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  119.132463][ T2924] wlan1: Creating new IBSS network, BSSID 12:7d:61:c8:a6:73
[  119.263920][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  119.398377][ T6418] netlink: 'syz.3.169': attribute type 21 has an invalid length.
[  119.588479][ T6424] netlink: 44 bytes leftover after parsing attributes in process `syz.2.172'.
[  119.623007][ T6423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.171'.
[  119.852832][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  119.862580][ T6430] FAULT_INJECTION: forcing a failure.
[  119.862580][ T6430] name failslab, interval 1, probability 0, space 0, times 1
[  119.883875][ T6430] CPU: 1 PID: 6430 Comm: syz.0.175 Not tainted syzkaller #0
[  119.891199][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  119.901296][ T6430] Call Trace:
[  119.904611][ T6430]  <TASK>
[  119.907563][ T6430]  dump_stack_lvl+0x18c/0x250
[  119.912266][ T6430]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.918437][ T6430]  ? show_regs_print_info+0x20/0x20
[  119.923644][ T6430]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.929841][ T6430]  should_fail_ex+0x394/0x4c0
[  119.934555][ T6430]  should_failslab+0x9/0x20
[  119.939077][ T6430]  slab_pre_alloc_hook+0x59/0x300
[  119.944128][ T6430]  kmem_cache_alloc+0x5a/0x2d0
[  119.948894][ T6430]  ? skb_clone+0x1eb/0x370
[  119.953340][ T6430]  skb_clone+0x1eb/0x370
[  119.957601][ T6430]  bpf_clone_redirect+0x16d/0x4a0
[  119.962653][ T6430]  bpf_prog_e97454e6a39c6b06+0x61/0x66
[  119.968135][ T6430]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  119.974125][ T6430]  ? __lock_acquire+0x7eb0/0x7eb0
[  119.979159][ T6430]  ? lock_chain_count+0x20/0x20
[  119.984026][ T6430]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  119.990275][ T6430]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  119.995572][ T6430]  ? ktime_get+0x7f/0x280
[  119.999907][ T6430]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  120.006158][ T6430]  ? ktime_get_real_ts64+0x440/0x440
[  120.011479][ T6430]  ? __local_bh_disable_ip+0x108/0x1a0
[  120.016957][ T6430]  ? __cant_sleep+0x220/0x220
[  120.021650][ T6430]  ? read_tsc+0x9/0x20
[  120.025733][ T6430]  ? ktime_get+0x24b/0x280
[  120.030166][ T6430]  ? bpf_test_run+0x174/0x870
[  120.034859][ T6430]  bpf_test_run+0x2df/0x870
[  120.039385][ T6430]  ? lock_chain_count+0x20/0x20
[  120.044258][ T6430]  ? bpf_test_run+0x174/0x870
[  120.048949][ T6430]  ? dst_hold+0x70/0x70
[  120.053144][ T6430]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  120.058565][ T6430]  ? cpu_online+0x60/0x60
[  120.062911][ T6430]  bpf_prog_test_run+0x31f/0x390
[  120.067862][ T6430]  __sys_bpf+0x49d/0x890
[  120.072118][ T6430]  ? bpf_link_show_fdinfo+0x560/0x560
[  120.077526][ T6430]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  120.083728][ T6430]  __x64_sys_bpf+0x7c/0x90
[  120.088154][ T6430]  do_syscall_64+0x55/0xb0
[  120.092578][ T6430]  ? clear_bhb_loop+0x40/0x90
[  120.097263][ T6430]  ? clear_bhb_loop+0x40/0x90
[  120.101955][ T6430]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.107865][ T6430] RIP: 0033:0x7f93aeb9fb19
[  120.112290][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.131901][ T6430] RSP: 002b:00007f93afb11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  120.140325][ T6430] RAX: ffffffffffffffda RBX: 00007f93aee25fa0 RCX: 00007f93aeb9fb19
[  120.148302][ T6430] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 000000000000000a
[  120.156280][ T6430] RBP: 00007f93afb11090 R08: 0000000000000000 R09: 0000000000000000
[  120.164256][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.172234][ T6430] R13: 00007f93aee26038 R14: 00007f93aee25fa0 R15: 00007ffca62e6f48
[  120.180241][ T6430]  </TASK>
[  120.209929][ T6429] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.174'.
[  120.915735][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  121.889921][ T6452] netlink: 44 bytes leftover after parsing attributes in process `syz.3.182'.
[  121.967168][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  122.068793][ T6457] rxe_eth0 speed is unknown, defaulting to 1000
[  122.324904][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  122.638332][ T6471] rxe_eth0 speed is unknown, defaulting to 1000
[  123.202303][ T6488] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'.
[  123.464748][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  123.940342][   T52] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  124.505529][ T6511] syz.2.203 (6511) used greatest stack depth: 20744 bytes left
[  124.592463][ T6516] Â: renamed from ip6gretap0 (while UP)
[  125.041971][ T6524] rxe_eth0 speed is unknown, defaulting to 1000
[  125.114292][ T6530] FAULT_INJECTION: forcing a failure.
[  125.114292][ T6530] name failslab, interval 1, probability 0, space 0, times 0
[  125.192874][ T6530] CPU: 1 PID: 6530 Comm: syz.3.208 Not tainted syzkaller #0
[  125.200209][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  125.210284][ T6530] Call Trace:
[  125.213582][ T6530]  <TASK>
[  125.216529][ T6530]  dump_stack_lvl+0x18c/0x250
[  125.221241][ T6530]  ? show_regs_print_info+0x20/0x20
[  125.226466][ T6530]  ? load_image+0x420/0x420
[  125.230996][ T6530]  ? __might_sleep+0xe0/0xe0
[  125.235609][ T6530]  ? __lock_acquire+0x7eb0/0x7eb0
[  125.240658][ T6530]  should_fail_ex+0x394/0x4c0
[  125.245364][ T6530]  should_failslab+0x9/0x20
[  125.249889][ T6530]  slab_pre_alloc_hook+0x59/0x300
[  125.254936][ T6530]  ? trace_probe_init+0x2d2/0x400
[  125.259980][ T6530]  ? trace_probe_init+0x2d2/0x400
[  125.265026][ T6530]  __kmem_cache_alloc_node+0x53/0x260
[  125.270423][ T6530]  ? trace_probe_init+0x2d2/0x400
[  125.275470][ T6530]  __kmalloc_node_track_caller+0xa4/0x230
[  125.281217][ T6530]  ? rcu_is_watching+0x15/0xb0
[  125.286016][ T6530]  kstrdup+0x3b/0x80
[  125.289940][ T6530]  trace_probe_init+0x2d2/0x400
[  125.294829][ T6530]  create_local_trace_uprobe+0x186/0x660
[  125.300494][ T6530]  ? bpf_get_uprobe_info+0x520/0x520
[  125.305809][ T6530]  ? _copy_from_user+0xa5/0xe0
[  125.310607][ T6530]  perf_uprobe_init+0xf3/0x190
[  125.315402][ T6530]  perf_uprobe_event_init+0xe6/0x180
[  125.320722][ T6530]  perf_try_init_event+0x12b/0x3c0
[  125.325857][ T6530]  ? perf_event_alloc+0xafe/0x2110
[  125.330991][ T6530]  perf_event_alloc+0xeaf/0x2110
[  125.335956][ T6530]  ? find_lively_task_by_vpid+0x19/0x290
[  125.341611][ T6530]  ? find_lively_task_by_vpid+0x19/0x290
[  125.347273][ T6530]  __se_sys_perf_event_open+0x78b/0x1d40
[  125.352940][ T6530]  ? mutex_unlock+0x10/0x10
[  125.357469][ T6530]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  125.363141][ T6530]  ? lock_chain_count+0x20/0x20
[  125.368029][ T6530]  ? lockdep_hardirqs_on+0x98/0x150
[  125.373246][ T6530]  ? __x64_sys_perf_event_open+0x20/0xc0
[  125.378911][ T6530]  do_syscall_64+0x55/0xb0
[  125.383353][ T6530]  ? clear_bhb_loop+0x40/0x90
[  125.388056][ T6530]  ? clear_bhb_loop+0x40/0x90
[  125.392763][ T6530]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.398687][ T6530] RIP: 0033:0x7f456119fb19
[  125.403122][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.422746][ T6530] RSP: 002b:00007f4562061028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  125.431189][ T6530] RAX: ffffffffffffffda RBX: 00007f4561426090 RCX: 00007f456119fb19
[  125.439181][ T6530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  125.447171][ T6530] RBP: 00007f4562061090 R08: 0000000000000000 R09: 0000000000000000
[  125.455160][ T6530] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  125.463148][ T6530] R13: 00007f4561426128 R14: 00007f4561426090 R15: 00007ffcd7963f58
[  125.471161][ T6530]  </TASK>
[  125.502312][ T6530] trace_uprobe: Failed to allocate trace_uprobe.(-12)
[  125.695735][ T6534] Driver unsupported XDP return value 0 on prog  (id 104) dev N/A, expect packet loss!
[  125.928600][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  125.933505][ T6537] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.211'.
[  127.558963][ T6558] netlink: 156 bytes leftover after parsing attributes in process `syz.1.217'.
[  127.597704][ T6561] netlink: 'syz.1.217': attribute type 28 has an invalid length.
[  127.685091][ T6561] netlink: 'syz.1.217': attribute type 29 has an invalid length.
[  127.769073][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.217'.
[  127.847181][ T6561] netlink: 'syz.1.217': attribute type 28 has an invalid length.
[  127.901338][ T6561] netlink: 'syz.1.217': attribute type 29 has an invalid length.
[  127.967655][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.217'.
[  128.028061][ T6561] netlink: 'syz.1.217': attribute type 28 has an invalid length.
[  128.067499][ T6561] netlink: 'syz.1.217': attribute type 29 has an invalid length.
[  128.124788][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.217'.
[  128.174366][ T6561] netlink: 'syz.1.217': attribute type 28 has an invalid length.
[  128.241356][ T6561] netlink: 'syz.1.217': attribute type 29 has an invalid length.
[  128.283917][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.217'.
[  129.159780][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  129.245571][ T6581] rxe_eth0 speed is unknown, defaulting to 1000
[  129.699464][ T6593] syz.2.225 (6593) used greatest stack depth: 20712 bytes left
[  130.127333][ T6601] netlink: 'syz.2.229': attribute type 9 has an invalid length.
[  130.192549][ T6601] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.229'.
[  130.523841][ T6483] syz.0.184 (6483) used greatest stack depth: 20648 bytes left
[  131.226201][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  132.280067][ T6630] syzkaller0: tun_chr_ioctl cmd 2147767506
[  132.380495][ T6630] netlink: 'syz.0.245': attribute type 10 has an invalid length.
[  132.888263][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  132.895221][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  133.657155][ T6648] netlink: 'syz.1.241': attribute type 9 has an invalid length.
[  133.666466][ T6648] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.241'.
[  133.783900][ T6646] netlink: 'syz.3.240': attribute type 10 has an invalid length.
[  133.792088][ T6646] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  133.935751][ T6635] syz.0.245 (6635) used greatest stack depth: 19880 bytes left
[  133.970172][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  134.161193][ T6663] netlink: 'syz.0.249': attribute type 39 has an invalid length.
[  134.320841][ T6663] hsr_slave_1 (unregistering): left promiscuous mode
[  134.509428][ T6660] rxe_eth0 speed is unknown, defaulting to 1000
[  134.677084][ T6679] FAULT_INJECTION: forcing a failure.
[  134.677084][ T6679] name failslab, interval 1, probability 0, space 0, times 0
[  134.731512][ T6679] CPU: 1 PID: 6679 Comm: syz.1.252 Not tainted syzkaller #0
[  134.738834][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  134.748886][ T6679] Call Trace:
[  134.752161][ T6679]  <TASK>
[  134.755084][ T6679]  dump_stack_lvl+0x18c/0x250
[  134.759759][ T6679]  ? sctp_sendmsg+0x1519/0x27b0
[  134.764607][ T6679]  ? ___sys_sendmsg+0x2a6/0x360
[  134.769450][ T6679]  ? show_regs_print_info+0x20/0x20
[  134.774643][ T6679]  ? load_image+0x420/0x420
[  134.779150][ T6679]  should_fail_ex+0x394/0x4c0
[  134.783825][ T6679]  should_failslab+0x9/0x20
[  134.788317][ T6679]  slab_pre_alloc_hook+0x59/0x300
[  134.793334][ T6679]  ? sctp_add_bind_addr+0x8c/0x360
[  134.798436][ T6679]  __kmem_cache_alloc_node+0x53/0x260
[  134.803804][ T6679]  ? sctp_add_bind_addr+0x8c/0x360
[  134.808912][ T6679]  kmalloc_trace+0x2a/0xe0
[  134.813329][ T6679]  sctp_add_bind_addr+0x8c/0x360
[  134.818263][ T6679]  sctp_copy_local_addr_list+0x31b/0x4e0
[  134.823916][ T6679]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  134.829626][ T6679]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  134.835690][ T6679]  ? sctp_v6_is_any+0x64/0x70
[  134.840359][ T6679]  ? sctp_copy_one_addr+0x8c/0x350
[  134.845468][ T6679]  sctp_bind_addr_copy+0xb3/0x3c0
[  134.850503][ T6679]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  134.856834][ T6679]  sctp_connect_new_asoc+0x2f9/0x6a0
[  134.862118][ T6679]  ? __sctp_connect+0xd80/0xd80
[  134.866960][ T6679]  ? __local_bh_enable_ip+0x13a/0x1c0
[  134.872330][ T6679]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  134.877869][ T6679]  ? security_sctp_bind_connect+0x89/0xb0
[  134.883599][ T6679]  sctp_sendmsg+0x1519/0x27b0
[  134.888284][ T6679]  ? sctp_getsockopt+0xb60/0xb60
[  134.893214][ T6679]  ? aa_sk_perm+0x7bb/0x8e0
[  134.897728][ T6679]  ? aa_af_perm+0x330/0x330
[  134.902234][ T6679]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  134.908644][ T6679]  ? sock_rps_record_flow+0x19/0x3f0
[  134.913931][ T6679]  ? inet_sendmsg+0xce/0x2a0
[  134.918516][ T6679]  ? inet_send_prepare+0x250/0x250
[  134.923620][ T6679]  ____sys_sendmsg+0x61b/0x980
[  134.928381][ T6679]  ? __asan_memset+0x22/0x40
[  134.932965][ T6679]  ? __sys_sendmsg_sock+0x30/0x30
[  134.937978][ T6679]  ? __import_iovec+0x3fa/0x850
[  134.942841][ T6679]  ? import_iovec+0x73/0xa0
[  134.947351][ T6679]  ___sys_sendmsg+0x2a6/0x360
[  134.952019][ T6679]  ? get_pid_task+0x20/0x1e0
[  134.956611][ T6679]  ? __sys_sendmsg+0x2b0/0x2b0
[  134.961381][ T6679]  ? __lock_acquire+0x7eb0/0x7eb0
[  134.966417][ T6679]  __se_sys_sendmsg+0x1d0/0x2c0
[  134.971262][ T6679]  ? __x64_sys_sendmsg+0x80/0x80
[  134.976211][ T6679]  ? lockdep_hardirqs_on+0x98/0x150
[  134.981405][ T6679]  do_syscall_64+0x55/0xb0
[  134.985814][ T6679]  ? clear_bhb_loop+0x40/0x90
[  134.990484][ T6679]  ? clear_bhb_loop+0x40/0x90
[  134.995154][ T6679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.001038][ T6679] RIP: 0033:0x7f13cb59fb19
[  135.005444][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.025037][ T6679] RSP: 002b:00007f13cc4cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.033444][ T6679] RAX: ffffffffffffffda RBX: 00007f13cb825fa0 RCX: 00007f13cb59fb19
[  135.041408][ T6679] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  135.049458][ T6679] RBP: 00007f13cc4cf090 R08: 0000000000000000 R09: 0000000000000000
[  135.057417][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.065377][ T6679] R13: 00007f13cb826038 R14: 00007f13cb825fa0 R15: 00007ffe090e7f78
[  135.073362][ T6679]  </TASK>
[  135.103191][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  135.268055][ T6683] syzkaller0: entered promiscuous mode
[  135.279579][ T6683] syzkaller0: entered allmulticast mode
[  135.292425][ T6684] netlink: 'syz.0.253': attribute type 9 has an invalid length.
[  135.317982][ T6684] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.253'.
[  135.400946][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  137.370685][ T6703] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.260'.
[  137.813916][ T6712] netlink: 'syz.3.262': attribute type 39 has an invalid length.
[  137.920243][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  137.948624][ T6712] hsr_slave_1 (unregistering): left promiscuous mode
[  139.508876][ T6721] netlink: 144 bytes leftover after parsing attributes in process `syz.1.266'.
[  139.569113][ T6721] team0: Port device team_slave_0 removed
[  139.575610][ T6721] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  139.851245][ T6724] FAULT_INJECTION: forcing a failure.
[  139.851245][ T6724] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  139.865737][ T6724] CPU: 1 PID: 6724 Comm: syz.0.267 Not tainted syzkaller #0
[  139.873050][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  139.883105][ T6724] Call Trace:
[  139.886379][ T6724]  <TASK>
[  139.889308][ T6724]  dump_stack_lvl+0x18c/0x250
[  139.894008][ T6724]  ? show_regs_print_info+0x20/0x20
[  139.899215][ T6724]  ? load_image+0x420/0x420
[  139.903727][ T6724]  ? __lock_acquire+0x7eb0/0x7eb0
[  139.908752][ T6724]  ? snprintf+0xe9/0x140
[  139.912995][ T6724]  should_fail_ex+0x394/0x4c0
[  139.917672][ T6724]  _copy_to_user+0x2f/0xa0
[  139.922096][ T6724]  simple_read_from_buffer+0xe7/0x150
[  139.927487][ T6724]  proc_fail_nth_read+0x1e8/0x260
[  139.932526][ T6724]  ? proc_fault_inject_write+0x360/0x360
[  139.938166][ T6724]  ? fsnotify_perm+0x271/0x5e0
[  139.942934][ T6724]  ? proc_fault_inject_write+0x360/0x360
[  139.948568][ T6724]  vfs_read+0x298/0x990
[  139.952729][ T6724]  ? kernel_read+0x1e0/0x1e0
[  139.957321][ T6724]  ? __fget_files+0x28/0x460
[  139.961914][ T6724]  ? __fget_files+0x3fc/0x460
[  139.966599][ T6724]  ? __fdget_pos+0x2a3/0x330
[  139.971188][ T6724]  ? ksys_read+0x74/0x260
[  139.975518][ T6724]  ksys_read+0x151/0x260
[  139.979761][ T6724]  ? vfs_write+0x9a0/0x9a0
[  139.984179][ T6724]  ? lockdep_hardirqs_on+0x98/0x150
[  139.989400][ T6724]  do_syscall_64+0x55/0xb0
[  139.993834][ T6724]  ? clear_bhb_loop+0x40/0x90
[  139.998513][ T6724]  ? clear_bhb_loop+0x40/0x90
[  140.003195][ T6724]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.009097][ T6724] RIP: 0033:0x7f93aeb6034e
[  140.013509][ T6724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.033116][ T6724] RSP: 002b:00007f93afb10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.041530][ T6724] RAX: ffffffffffffffda RBX: 00007f93afb116c0 RCX: 00007f93aeb6034e
[  140.049499][ T6724] RDX: 000000000000000f RSI: 00007f93afb110a0 RDI: 0000000000000008
[  140.057465][ T6724] RBP: 00007f93afb11090 R08: 0000000000000000 R09: 0000000000000000
[  140.065430][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.073396][ T6724] R13: 00007f93aee26038 R14: 00007f93aee25fa0 R15: 00007ffca62e6f48
[  140.081389][ T6724]  </TASK>
[  140.245566][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  140.906643][ T6742] FAULT_INJECTION: forcing a failure.
[  140.906643][ T6742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.937130][ T6742] CPU: 1 PID: 6742 Comm: syz.0.274 Not tainted syzkaller #0
[  140.944442][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  140.954515][ T6742] Call Trace:
[  140.957813][ T6742]  <TASK>
[  140.960757][ T6742]  dump_stack_lvl+0x18c/0x250
[  140.965464][ T6742]  ? show_regs_print_info+0x20/0x20
[  140.970690][ T6742]  ? load_image+0x420/0x420
[  140.975208][ T6742]  ? filemap_get_entry+0x375/0x3f0
[  140.980336][ T6742]  ? folio_mark_accessed+0x2fe/0x14a0
[  140.985711][ T6742]  ? folio_activate_fn+0x2000/0x2000
[  140.990996][ T6742]  should_fail_ex+0x394/0x4c0
[  140.995680][ T6742]  copy_page_from_iter_atomic+0x29e/0x13d0
[  141.001485][ T6742]  ? shmem_get_folio_gfp+0x26f2/0x2b40
[  141.006954][ T6742]  ? iov_iter_zero+0x1160/0x1160
[  141.011896][ T6742]  ? shmem_write_begin+0x1cf/0x430
[  141.017011][ T6742]  generic_perform_write+0x353/0x5c0
[  141.022311][ T6742]  ? generic_file_direct_write+0x3e0/0x3e0
[  141.028123][ T6742]  ? file_update_time+0x192/0x1a0
[  141.033149][ T6742]  shmem_file_write_iter+0xfb/0x120
[  141.038350][ T6742]  vfs_write+0x474/0x9a0
[  141.042601][ T6742]  ? file_end_write+0x250/0x250
[  141.047457][ T6742]  ? __fget_files+0x3fc/0x460
[  141.052142][ T6742]  ? __fdget_pos+0x2a3/0x330
[  141.056729][ T6742]  ? ksys_write+0x74/0x260
[  141.061147][ T6742]  ksys_write+0x151/0x260
[  141.065481][ T6742]  ? __ia32_sys_read+0x90/0x90
[  141.070251][ T6742]  ? lockdep_hardirqs_on+0x98/0x150
[  141.075448][ T6742]  do_syscall_64+0x55/0xb0
[  141.079862][ T6742]  ? clear_bhb_loop+0x40/0x90
[  141.084539][ T6742]  ? clear_bhb_loop+0x40/0x90
[  141.089216][ T6742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.095110][ T6742] RIP: 0033:0x7f93aeb9fb19
[  141.099523][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.119124][ T6742] RSP: 002b:00007f93afb11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.127537][ T6742] RAX: ffffffffffffffda RBX: 00007f93aee25fa0 RCX: 00007f93aeb9fb19
[  141.135506][ T6742] RDX: 0000000000040010 RSI: 0000200000000680 RDI: 0000000000000008
[  141.143473][ T6742] RBP: 00007f93afb11090 R08: 0000000000000000 R09: 0000000000000000
[  141.151440][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.159406][ T6742] R13: 00007f93aee26038 R14: 00007f93aee25fa0 R15: 00007ffca62e6f48
[  141.167388][ T6742]  </TASK>
[  141.184368][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  141.548667][ T6750] netlink: 144 bytes leftover after parsing attributes in process `syz.2.277'.
[  142.154309][ T6750] team0: Port device team_slave_0 removed
[  142.160813][ T6750] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  142.288186][ T6752] rxe_eth0 speed is unknown, defaulting to 1000
[  145.891788][ T6814] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  146.383272][ T6830] rxe_eth0 speed is unknown, defaulting to 1000
[  148.070183][ T6859] netlink: 44 bytes leftover after parsing attributes in process `syz.0.314'.
[  149.206958][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  149.529193][ T6888] netlink: 44 bytes leftover after parsing attributes in process `syz.0.324'.
[  149.841072][ T6894] netlink: 'syz.3.328': attribute type 10 has an invalid length.
[  149.898421][ T6900] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.328'.
[  149.921660][ T6894] netlink: 55 bytes leftover after parsing attributes in process `syz.3.328'.
[  151.438746][ T6932] rxe_eth0 speed is unknown, defaulting to 1000
[  151.596476][ T6937] netlink: 'syz.3.342': attribute type 10 has an invalid length.
[  151.618822][ T6937] bridge0: port 3(team0) entered disabled state
[  151.625633][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.633513][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.702348][ T6937] team0: Device bridge0 is already an upper device of the team interface
[  153.303143][ T6976] FAULT_INJECTION: forcing a failure.
[  153.303143][ T6976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.337275][ T6976] CPU: 1 PID: 6976 Comm: syz.2.356 Not tainted syzkaller #0
[  153.344612][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  153.354667][ T6976] Call Trace:
[  153.357943][ T6976]  <TASK>
[  153.360871][ T6976]  dump_stack_lvl+0x18c/0x250
[  153.365559][ T6976]  ? show_regs_print_info+0x20/0x20
[  153.370763][ T6976]  ? load_image+0x420/0x420
[  153.375272][ T6976]  ? __might_fault+0xaa/0x120
[  153.379954][ T6976]  ? __lock_acquire+0x7eb0/0x7eb0
[  153.384980][ T6976]  ? __virt_addr_valid+0x10c/0x380
[  153.390094][ T6976]  should_fail_ex+0x394/0x4c0
[  153.394777][ T6976]  _copy_from_user+0x2f/0xe0
[  153.399369][ T6976]  generic_map_update_batch+0x58c/0x800
[  153.404936][ T6976]  ? rcu_read_unlock+0xa0/0xa0
[  153.409713][ T6976]  ? __fdget+0x180/0x210
[  153.413959][ T6976]  ? rcu_read_unlock+0xa0/0xa0
[  153.418721][ T6976]  bpf_map_do_batch+0x3f2/0x600
[  153.423833][ T6976]  ? bpf_lsm_xfrm_decode_session+0x10/0x10
[  153.429647][ T6976]  __sys_bpf+0x381/0x890
[  153.433890][ T6976]  ? bpf_link_show_fdinfo+0x560/0x560
[  153.439278][ T6976]  ? lock_chain_count+0x20/0x20
[  153.444141][ T6976]  __x64_sys_bpf+0x7c/0x90
[  153.448559][ T6976]  do_syscall_64+0x55/0xb0
[  153.452972][ T6976]  ? clear_bhb_loop+0x40/0x90
[  153.457648][ T6976]  ? clear_bhb_loop+0x40/0x90
[  153.462343][ T6976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.468256][ T6976] RIP: 0033:0x7f8703d9fb19
[  153.472677][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.492289][ T6976] RSP: 002b:00007f8704c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  153.500704][ T6976] RAX: ffffffffffffffda RBX: 00007f8704025fa0 RCX: 00007f8703d9fb19
[  153.508674][ T6976] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a
[  153.516644][ T6976] RBP: 00007f8704c25090 R08: 0000000000000000 R09: 0000000000000000
[  153.524612][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  153.532579][ T6976] R13: 00007f8704026038 R14: 00007f8704025fa0 R15: 00007fff08c16278
[  153.540564][ T6976]  </TASK>
[  154.042726][ T6983] rxe_eth0 speed is unknown, defaulting to 1000
[  155.197037][ T7007] netlink: 'syz.1.367': attribute type 25 has an invalid length.
[  155.206176][ T7007] netlink: 'syz.1.367': attribute type 28 has an invalid length.
[  155.965518][ T7023] netlink: 'syz.2.372': attribute type 10 has an invalid length.
[  155.976570][ T7023] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  155.984452][ T7023] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  156.000216][ T7023] team0: Port device wlan1 added
[  156.010914][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.120746][ T7029] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  156.133844][ T7029] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  156.165588][ T7029] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[  156.802143][ T7044] syz.0.380 uses obsolete (PF_INET,SOCK_PACKET)
[  156.910593][ T7049] netlink: 'syz.3.381': attribute type 10 has an invalid length.
[  156.946169][ T7049] vxcan1: entered promiscuous mode
[  156.955315][ T7049] vxcan1: entered allmulticast mode
[  156.964414][ T7049] team0: Device vxcan1 is of different type
[  156.993240][ T7046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.382'.
[  157.148808][ T7053] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.383'.
[  157.664574][ T7073] IPv6: Can't replace route, no match found
[  157.703901][ T7072] IPv6: Can't replace route, no match found
[  157.740001][ T7068] rxe_eth0 speed is unknown, defaulting to 1000
[  158.273498][ T7081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.393'.
[  158.447548][ T7090] : renamed from bond_slave_1 (while UP)
[  161.688957][ T7130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.408'.
[  161.982435][ T7135] rxe_eth0 speed is unknown, defaulting to 1000
[  162.123446][ T7142] netlink: 'syz.0.412': attribute type 29 has an invalid length.
[  162.146782][ T7142] netlink: 'syz.0.412': attribute type 29 has an invalid length.
[  162.186875][ T7143] netlink: 'syz.0.412': attribute type 29 has an invalid length.
[  162.222031][ T7142] netlink: 'syz.0.412': attribute type 29 has an invalid length.
[  162.260715][ T7142] netlink: 'syz.0.412': attribute type 29 has an invalid length.
[  163.664335][ T7158] rxe_eth0 speed is unknown, defaulting to 1000
[  163.984606][ T7163] rxe_eth0 speed is unknown, defaulting to 1000
[  164.393058][ T7177] delete_channel: no stack
[  166.141604][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  166.489810][ T7200] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  166.882642][ T7202] rxe_eth0 speed is unknown, defaulting to 1000
[  169.140776][ T7229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.441'.
[  169.169881][ T7232] IPv6: Can't replace route, no match found
[  169.510917][ T7240] rxe_eth0 speed is unknown, defaulting to 1000
[  169.832339][ T7253] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  169.840112][ T7253] netlink: 2 bytes leftover after parsing attributes in process `syz.1.450'.
[  169.892639][ T7253] team0: Device wg1 is of different type
[  170.317746][ T7263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.453'.
[  171.599510][ T7280] netlink: 'syz.2.462': attribute type 10 has an invalid length.
[  171.607659][ T7280] netlink: 2 bytes leftover after parsing attributes in process `syz.2.462'.
[  171.724698][ T7280] team0: Device wg1 is of different type
[  171.785871][ T7284] netlink: 44 bytes leftover after parsing attributes in process `syz.0.464'.
[  172.124124][ T7291] rxe_eth0 speed is unknown, defaulting to 1000
[  172.247114][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  173.746499][ T7325] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.476'.
[  174.563312][ T7342] rxe_eth0 speed is unknown, defaulting to 1000
[  176.831474][ T7378] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.495'.
[  176.840731][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'.
[  177.142745][ T7383] rxe_eth0 speed is unknown, defaulting to 1000
[  177.981615][ T7397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.500'.
[  178.380428][ T7407] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.504'.
[  178.469626][ T7407] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  180.336833][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  181.086355][ T7445] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.516'.
[  181.123440][ T7445] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  181.309588][ T7453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'.
[  182.281167][ T7467] netlink: 'syz.3.526': attribute type 10 has an invalid length.
[  182.290183][ T7467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.526'.
[  183.669837][ T7515] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.546'.
[  183.797000][ T7515] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  183.811657][ T7515] CPU: 0 PID: 7515 Comm: syz.0.546 Not tainted syzkaller #0
[  183.818991][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  183.829076][ T7515] Call Trace:
[  183.832380][ T7515]  <TASK>
[  183.835343][ T7515]  dump_stack_lvl+0x18c/0x250
[  183.840098][ T7515]  ? show_regs_print_info+0x20/0x20
[  183.845337][ T7515]  ? load_image+0x420/0x420
[  183.849917][ T7515]  sysfs_warn_dup+0x8e/0xa0
[  183.854456][ T7515]  sysfs_do_create_link_sd+0xc0/0x110
[  183.859872][ T7515]  device_add_class_symlinks+0x1cf/0x240
[  183.865563][ T7515]  device_add+0x4f9/0xc40
[  183.869938][ T7515]  wiphy_register+0x1f24/0x2c70
[  183.874871][ T7515]  ? cfg80211_event_work+0x40/0x40
[  183.880021][ T7515]  ? minstrel_ht_alloc+0x88a/0x990
[  183.885183][ T7515]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  183.891298][ T7515]  ieee80211_register_hw+0x2f3d/0x3cb0
[  183.896827][ T7515]  ? ieee80211_register_hw+0xf51/0x3cb0
[  183.902434][ T7515]  ? ieee80211_tasklet_handler+0x20/0x20
[  183.908101][ T7515]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  183.914037][ T7515]  ? __debug_object_init+0xec/0x450
[  183.919281][ T7515]  ? __asan_memset+0x22/0x40
[  183.923925][ T7515]  ? __hrtimer_init+0x189/0x270
[  183.928825][ T7515]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  183.934636][ T7515]  ? mac80211_hwsim_free+0x220/0x220
[  183.939955][ T7515]  ? rcu_is_watching+0x15/0xb0
[  183.944758][ T7515]  ? kstrndup+0xbd/0x140
[  183.949066][ T7515]  hwsim_new_radio_nl+0xdad/0x1a70
[  183.954225][ T7515]  ? __nla_validate+0x50/0x50
[  183.958968][ T7515]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  183.965340][ T7515]  ? __nla_parse+0x24/0x50
[  183.969810][ T7515]  ? __nla_parse+0x40/0x50
[  183.974272][ T7515]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  183.980653][ T7515]  genl_family_rcv_msg_doit+0x21a/0x310
[  183.986270][ T7515]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  183.992216][ T7515]  ? bpf_lsm_capable+0x9/0x10
[  183.996923][ T7515]  ? security_capable+0x89/0xb0
[  184.001830][ T7515]  genl_rcv_msg+0x611/0x7a0
[  184.006385][ T7515]  ? genl_bind+0x360/0x360
[  184.010837][ T7515]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  184.017204][ T7515]  ? perf_trace_lock+0x303/0x3b0
[  184.022201][ T7515]  netlink_rcv_skb+0x235/0x4c0
[  184.027000][ T7515]  ? genl_bind+0x360/0x360
[  184.031458][ T7515]  ? netlink_ack+0x1160/0x1160
[  184.036282][ T7515]  ? __lock_acquire+0x7eb0/0x7eb0
[  184.041364][ T7515]  ? down_read+0x1ac/0x2e0
[  184.045822][ T7515]  genl_rcv+0x28/0x40
[  184.049838][ T7515]  netlink_unicast+0x856/0x9e0
[  184.054683][ T7515]  netlink_sendmsg+0x8d0/0xbf0
[  184.059501][ T7515]  ? netlink_getsockopt+0x590/0x590
[  184.064736][ T7515]  ? apparmor_socket_sendmsg+0x8e/0x330
[  184.070324][ T7515]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  184.075644][ T7515]  ? security_socket_sendmsg+0x80/0xa0
[  184.081139][ T7515]  ? netlink_getsockopt+0x590/0x590
[  184.086374][ T7515]  ____sys_sendmsg+0x61b/0x980
[  184.091187][ T7515]  ? __asan_memset+0x22/0x40
[  184.095815][ T7515]  ? __sys_sendmsg_sock+0x30/0x30
[  184.100873][ T7515]  ? __import_iovec+0x5f2/0x850
[  184.105780][ T7515]  ? import_iovec+0x73/0xa0
[  184.110326][ T7515]  ___sys_sendmsg+0x2a6/0x360
[  184.115060][ T7515]  ? __sys_sendmsg+0x2b0/0x2b0
[  184.119973][ T7515]  __se_sys_sendmsg+0x1d0/0x2c0
[  184.124872][ T7515]  ? __x64_sys_sendmsg+0x80/0x80
[  184.129885][ T7515]  ? lockdep_hardirqs_on+0x98/0x150
[  184.135123][ T7515]  do_syscall_64+0x55/0xb0
[  184.139570][ T7515]  ? clear_bhb_loop+0x40/0x90
[  184.144280][ T7515]  ? clear_bhb_loop+0x40/0x90
[  184.148996][ T7515]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.154921][ T7515] RIP: 0033:0x7f93aeb9fb19
[  184.159387][ T7515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.179281][ T7515] RSP: 002b:00007f93afb11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.187732][ T7515] RAX: ffffffffffffffda RBX: 00007f93aee25fa0 RCX: 00007f93aeb9fb19
[  184.195735][ T7515] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000000a
[  184.203736][ T7515] RBP: 00007f93aec37b70 R08: 0000000000000000 R09: 0000000000000000
[  184.211736][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.219734][ T7515] R13: 00007f93aee26038 R14: 00007f93aee25fa0 R15: 00007ffca62e6f48
[  184.227754][ T7515]  </TASK>
[  185.600045][ T7540] netlink: 'syz.1.555': attribute type 10 has an invalid length.
[  185.614429][ T7540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'.
[  185.623479][ T7540] dummy0: entered promiscuous mode
[  185.628620][ T7540] dummy0: entered allmulticast mode
[  185.635710][ T7540] bridge0: port 3(dummy0) entered blocking state
[  185.644265][ T7540] bridge0: port 3(dummy0) entered disabled state
[  185.654052][ T7540] bridge0: port 3(dummy0) entered blocking state
[  185.660555][ T7540] bridge0: port 3(dummy0) entered forwarding state
[  185.773877][ T7540] rxe_eth0 speed is unknown, defaulting to 1000
[  186.085670][ T7557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.563'.
[  186.096103][ T7558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.563'.
[  187.837742][ T7598] FAULT_INJECTION: forcing a failure.
[  187.837742][ T7598] name failslab, interval 1, probability 0, space 0, times 0
[  187.850633][ T7598] CPU: 0 PID: 7598 Comm: syz.0.579 Not tainted syzkaller #0
[  187.857937][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  187.868004][ T7598] Call Trace:
[  187.871296][ T7598]  <TASK>
[  187.874235][ T7598]  dump_stack_lvl+0x18c/0x250
[  187.878937][ T7598]  ? show_regs_print_info+0x20/0x20
[  187.884152][ T7598]  ? load_image+0x420/0x420
[  187.888670][ T7598]  ? skb_network_protocol+0x533/0x790
[  187.894075][ T7598]  should_fail_ex+0x394/0x4c0
[  187.898787][ T7598]  should_failslab+0x9/0x20
[  187.903310][ T7598]  slab_pre_alloc_hook+0x59/0x300
[  187.908352][ T7598]  ? netif_skb_features+0xa51/0x1330
[  187.913668][ T7598]  kmem_cache_alloc+0x5a/0x2d0
[  187.918446][ T7598]  ? skb_clone+0x1eb/0x370
[  187.922883][ T7598]  skb_clone+0x1eb/0x370
[  187.927136][ T7598]  ? dev_queue_xmit_nit+0x204/0xba0
[  187.932355][ T7598]  dev_queue_xmit_nit+0x23f/0xba0
[  187.937401][ T7598]  ? dev_queue_xmit_nit+0x2d/0xba0
[  187.942540][ T7598]  dev_hard_start_xmit+0x150/0x790
[  187.947691][ T7598]  __dev_queue_xmit+0x1d1e/0x3a30
[  187.952743][ T7598]  ? __dev_queue_xmit+0x6d1/0x3a30
[  187.957885][ T7598]  ? pskb_expand_head+0x17a/0x1150
[  187.963017][ T7598]  ? pskb_expand_head+0x17a/0x1150
[  187.968149][ T7598]  ? netdev_core_pick_tx+0x370/0x370
[  187.973454][ T7598]  ? skb_release_data+0x1de/0x7f0
[  187.978506][ T7598]  ? __bpf_redirect+0x8c2/0xdf0
[  187.983387][ T7598]  __bpf_tx_skb+0x181/0x260
[  187.987905][ T7598]  bpf_clone_redirect+0x315/0x4a0
[  187.992959][ T7598]  bpf_prog_e97454e6a39c6b06+0x61/0x66
[  187.998440][ T7598]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  188.004437][ T7598]  ? __lock_acquire+0x7eb0/0x7eb0
[  188.009478][ T7598]  ? lock_chain_count+0x20/0x20
[  188.014346][ T7598]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  188.020605][ T7598]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  188.025905][ T7598]  ? ktime_get+0x7f/0x280
[  188.030253][ T7598]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  188.036511][ T7598]  ? ktime_get_real_ts64+0x440/0x440
[  188.041814][ T7598]  ? __x64_sys_bpf+0x7c/0x90
[  188.046423][ T7598]  ? __local_bh_disable_ip+0x108/0x1a0
[  188.051895][ T7598]  ? __cant_sleep+0x220/0x220
[  188.056592][ T7598]  ? read_tsc+0x9/0x20
[  188.060676][ T7598]  ? ktime_get+0x24b/0x280
[  188.065110][ T7598]  ? bpf_test_run+0x174/0x870
[  188.069805][ T7598]  bpf_test_run+0x2df/0x870
[  188.074338][ T7598]  ? bpf_test_run+0x174/0x870
[  188.079033][ T7598]  ? dst_hold+0x70/0x70
[  188.083300][ T7598]  ? eth_get_headlen+0x210/0x210
[  188.088261][ T7598]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  188.093675][ T7598]  ? cpu_online+0x60/0x60
[  188.098020][ T7598]  bpf_prog_test_run+0x31f/0x390
[  188.102983][ T7598]  __sys_bpf+0x49d/0x890
[  188.107247][ T7598]  ? bpf_link_show_fdinfo+0x560/0x560
[  188.112650][ T7598]  ? lock_chain_count+0x20/0x20
[  188.117531][ T7598]  __x64_sys_bpf+0x7c/0x90
[  188.121961][ T7598]  do_syscall_64+0x55/0xb0
[  188.126396][ T7598]  ? clear_bhb_loop+0x40/0x90
[  188.131096][ T7598]  ? clear_bhb_loop+0x40/0x90
[  188.135799][ T7598]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.141706][ T7598] RIP: 0033:0x7f93aeb9fb19
[  188.146134][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.165751][ T7598] RSP: 002b:00007f93afb11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  188.174182][ T7598] RAX: ffffffffffffffda RBX: 00007f93aee25fa0 RCX: 00007f93aeb9fb19
[  188.182167][ T7598] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 000000000000000a
[  188.190151][ T7598] RBP: 00007f93afb11090 R08: 0000000000000000 R09: 0000000000000000
[  188.198131][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.206112][ T7598] R13: 00007f93aee26038 R14: 00007f93aee25fa0 R15: 00007ffca62e6f48
[  188.214116][ T7598]  </TASK>
[  188.955684][ T7615] netlink: 'syz.3.586': attribute type 10 has an invalid length.
[  188.974774][ T7615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.586'.
[  188.994187][ T7615] batman_adv: batadv0: Interface activated: virt_wifi0
[  189.277605][ T7624] netlink: 140 bytes leftover after parsing attributes in process `syz.3.589'.
[  189.288069][ T7624] netlink: 10 bytes leftover after parsing attributes in process `syz.3.589'.
[  189.304469][ T7624] bond0: (slave bond_slave_0): Releasing backup interface
[  189.319841][ T7624] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  189.440095][ T7634] rxe_eth0 speed is unknown, defaulting to 1000
[  190.301205][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'.
[  191.632136][ T7680] netlink: 'syz.1.607': attribute type 12 has an invalid length.
[  191.640041][ T7680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.607'.
[  192.855699][ T7716] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  193.939910][ T7761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.640'.
[  194.108308][ T7764] netlink: 'syz.1.641': attribute type 9 has an invalid length.
[  194.116204][ T7764] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.641'.
[  194.336115][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  194.343104][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  194.472903][ T7778] dummy0: entered promiscuous mode
[  194.616717][ T7783] netlink: 'syz.2.644': attribute type 10 has an invalid length.
[  194.628346][ T7783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'.
[  194.656603][ T7783] batman_adv: batadv0: Adding interface: virt_wifi0
[  194.668967][ T7783] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.696919][ T7783] batman_adv: batadv0: Interface activated: virt_wifi0
[  195.107193][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.653'.
[  196.406771][ T7834] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.668'.
[  196.407556][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  196.416775][ T5098] Bluetooth: hci3: command 0x0406 tx timeout
[  196.444996][ T7832] netlink: 44 bytes leftover after parsing attributes in process `syz.3.665'.
[  196.454712][ T7835] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.668'.
[  196.898141][ T7848] FAULT_INJECTION: forcing a failure.
[  196.898141][ T7848] name failslab, interval 1, probability 0, space 0, times 0
[  196.961427][ T7848] CPU: 1 PID: 7848 Comm: syz.3.670 Not tainted syzkaller #0
[  196.968754][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  196.978824][ T7848] Call Trace:
[  196.982117][ T7848]  <TASK>
[  196.985058][ T7848]  dump_stack_lvl+0x18c/0x250
[  196.989753][ T7848]  ? sctp_sendmsg+0x1519/0x27b0
[  196.994620][ T7848]  ? ___sys_sendmsg+0x2a6/0x360
[  196.999482][ T7848]  ? show_regs_print_info+0x20/0x20
[  197.004697][ T7848]  ? load_image+0x420/0x420
[  197.009233][ T7848]  should_fail_ex+0x394/0x4c0
[  197.013966][ T7848]  should_failslab+0x9/0x20
[  197.018482][ T7848]  slab_pre_alloc_hook+0x59/0x300
[  197.023525][ T7848]  ? sctp_add_bind_addr+0x8c/0x360
[  197.028655][ T7848]  __kmem_cache_alloc_node+0x53/0x260
[  197.034048][ T7848]  ? sctp_add_bind_addr+0x8c/0x360
[  197.039179][ T7848]  kmalloc_trace+0x2a/0xe0
[  197.043615][ T7848]  sctp_add_bind_addr+0x8c/0x360
[  197.048571][ T7848]  sctp_copy_local_addr_list+0x31b/0x4e0
[  197.054211][ T7848]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  197.059926][ T7848]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  197.065990][ T7848]  ? sctp_v4_is_any+0x35/0x60
[  197.070660][ T7848]  ? sctp_copy_one_addr+0x8c/0x350
[  197.075768][ T7848]  sctp_bind_addr_copy+0xb3/0x3c0
[  197.080790][ T7848]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  197.087119][ T7848]  sctp_connect_new_asoc+0x2f9/0x6a0
[  197.092407][ T7848]  ? __sctp_connect+0xd80/0xd80
[  197.097251][ T7848]  ? __local_bh_enable_ip+0x13a/0x1c0
[  197.102619][ T7848]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  197.108158][ T7848]  ? security_sctp_bind_connect+0x89/0xb0
[  197.113873][ T7848]  sctp_sendmsg+0x1519/0x27b0
[  197.118553][ T7848]  ? sctp_getsockopt+0xb60/0xb60
[  197.123484][ T7848]  ? aa_sk_perm+0x7bb/0x8e0
[  197.127988][ T7848]  ? aa_af_perm+0x330/0x330
[  197.132488][ T7848]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  197.138901][ T7848]  ? sock_rps_record_flow+0x19/0x3f0
[  197.144182][ T7848]  ? inet_sendmsg+0xce/0x2a0
[  197.148766][ T7848]  ? inet_send_prepare+0x250/0x250
[  197.153874][ T7848]  ____sys_sendmsg+0x61b/0x980
[  197.158635][ T7848]  ? __asan_memset+0x22/0x40
[  197.163221][ T7848]  ? __sys_sendmsg_sock+0x30/0x30
[  197.168232][ T7848]  ? __import_iovec+0x3fa/0x850
[  197.173079][ T7848]  ? import_iovec+0x73/0xa0
[  197.177577][ T7848]  ___sys_sendmsg+0x2a6/0x360
[  197.182244][ T7848]  ? get_pid_task+0x20/0x1e0
[  197.186831][ T7848]  ? __sys_sendmsg+0x2b0/0x2b0
[  197.191599][ T7848]  ? __lock_acquire+0x7eb0/0x7eb0
[  197.196632][ T7848]  __se_sys_sendmsg+0x1d0/0x2c0
[  197.201479][ T7848]  ? __x64_sys_sendmsg+0x80/0x80
[  197.206423][ T7848]  ? lockdep_hardirqs_on+0x98/0x150
[  197.211614][ T7848]  do_syscall_64+0x55/0xb0
[  197.216021][ T7848]  ? clear_bhb_loop+0x40/0x90
[  197.220689][ T7848]  ? clear_bhb_loop+0x40/0x90
[  197.225363][ T7848]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.231252][ T7848] RIP: 0033:0x7f456119fb19
[  197.235665][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.255261][ T7848] RSP: 002b:00007f4562082028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.263665][ T7848] RAX: ffffffffffffffda RBX: 00007f4561425fa0 RCX: 00007f456119fb19
[  197.271628][ T7848] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  197.279589][ T7848] RBP: 00007f4562082090 R08: 0000000000000000 R09: 0000000000000000
[  197.287549][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.295512][ T7848] R13: 00007f4561426038 R14: 00007f4561425fa0 R15: 00007ffcd7963f58
[  197.303484][ T7848]  </TASK>
[  197.336194][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  197.889978][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  197.944411][ T7869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.679'.
[  199.430803][ T7888] netlink: 95624 bytes leftover after parsing attributes in process `syz.2.686'.
[  199.558747][ T7888] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.686'.
[  199.571439][ T7888] tipc: Started in network mode
[  199.579585][ T7888] tipc: Node identity b, cluster identity 73
[  199.601680][ T7888] tipc: Node number set to 11
[  199.675139][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  200.348331][ T7924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.697'.
[  201.164624][   T52] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  201.365307][ T7944] netlink: 209596 bytes leftover after parsing attributes in process `syz.2.707'.
[  201.366593][ T7942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.706'.
[  201.397829][ T7944] openvswitch: netlink: Message has 253 unknown bytes.
[  201.613626][ T7948] netlink: 'syz.3.708': attribute type 10 has an invalid length.
[  201.638752][ T7948] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  201.821344][ T7953] syzkaller0: tun_chr_ioctl cmd 2147767506
[  201.837988][ T7953] netlink: 'syz.0.710': attribute type 10 has an invalid length.
[  202.428408][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  202.853442][ T7972] FAULT_INJECTION: forcing a failure.
[  202.853442][ T7972] name failslab, interval 1, probability 0, space 0, times 0
[  202.887434][ T7972] CPU: 0 PID: 7972 Comm: syz.3.720 Not tainted syzkaller #0
[  202.894759][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  202.904821][ T7972] Call Trace:
[  202.908103][ T7972]  <TASK>
[  202.911034][ T7972]  dump_stack_lvl+0x18c/0x250
[  202.915727][ T7972]  ? sctp_sendmsg+0x1519/0x27b0
[  202.920586][ T7972]  ? ___sys_sendmsg+0x2a6/0x360
[  202.925444][ T7972]  ? show_regs_print_info+0x20/0x20
[  202.930650][ T7972]  ? load_image+0x420/0x420
[  202.935174][ T7972]  should_fail_ex+0x394/0x4c0
[  202.939867][ T7972]  should_failslab+0x9/0x20
[  202.944368][ T7972]  slab_pre_alloc_hook+0x59/0x300
[  202.949395][ T7972]  ? sctp_add_bind_addr+0x8c/0x360
[  202.954519][ T7972]  __kmem_cache_alloc_node+0x53/0x260
[  202.959899][ T7972]  ? sctp_add_bind_addr+0x8c/0x360
[  202.965022][ T7972]  kmalloc_trace+0x2a/0xe0
[  202.969455][ T7972]  sctp_add_bind_addr+0x8c/0x360
[  202.974409][ T7972]  sctp_copy_local_addr_list+0x31b/0x4e0
[  202.980056][ T7972]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  202.985781][ T7972]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  202.991859][ T7972]  ? sctp_v6_is_any+0x64/0x70
[  202.996542][ T7972]  ? sctp_copy_one_addr+0x8c/0x350
[  203.001663][ T7972]  sctp_bind_addr_copy+0xb3/0x3c0
[  203.006694][ T7972]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  203.013031][ T7972]  sctp_connect_new_asoc+0x2f9/0x6a0
[  203.018325][ T7972]  ? __sctp_connect+0xd80/0xd80
[  203.023177][ T7972]  ? __local_bh_enable_ip+0x13a/0x1c0
[  203.028557][ T7972]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  203.034106][ T7972]  ? security_sctp_bind_connect+0x89/0xb0
[  203.039841][ T7972]  sctp_sendmsg+0x1519/0x27b0
[  203.044536][ T7972]  ? sctp_getsockopt+0xb60/0xb60
[  203.049478][ T7972]  ? aa_sk_perm+0x7bb/0x8e0
[  203.053992][ T7972]  ? aa_af_perm+0x330/0x330
[  203.058500][ T7972]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  203.064923][ T7972]  ? sock_rps_record_flow+0x19/0x3f0
[  203.070228][ T7972]  ? inet_sendmsg+0xce/0x2a0
[  203.074823][ T7972]  ? inet_send_prepare+0x250/0x250
[  203.079946][ T7972]  ____sys_sendmsg+0x61b/0x980
[  203.084721][ T7972]  ? __asan_memset+0x22/0x40
[  203.089321][ T7972]  ? __sys_sendmsg_sock+0x30/0x30
[  203.094430][ T7972]  ? __import_iovec+0x3fa/0x850
[  203.099293][ T7972]  ? import_iovec+0x73/0xa0
[  203.103802][ T7972]  ___sys_sendmsg+0x2a6/0x360
[  203.108478][ T7972]  ? get_pid_task+0x20/0x1e0
[  203.113079][ T7972]  ? __sys_sendmsg+0x2b0/0x2b0
[  203.117866][ T7972]  ? __lock_acquire+0x7eb0/0x7eb0
[  203.122916][ T7972]  __se_sys_sendmsg+0x1d0/0x2c0
[  203.127775][ T7972]  ? __x64_sys_sendmsg+0x80/0x80
[  203.132730][ T7972]  ? lockdep_hardirqs_on+0x98/0x150
[  203.137938][ T7972]  do_syscall_64+0x55/0xb0
[  203.142358][ T7972]  ? clear_bhb_loop+0x40/0x90
[  203.147036][ T7972]  ? clear_bhb_loop+0x40/0x90
[  203.151721][ T7972]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.157621][ T7972] RIP: 0033:0x7f456119fb19
[  203.162039][ T7972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.181648][ T7972] RSP: 002b:00007f4562082028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.190065][ T7972] RAX: ffffffffffffffda RBX: 00007f4561425fa0 RCX: 00007f456119fb19
[  203.198123][ T7972] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  203.206094][ T7972] RBP: 00007f4562082090 R08: 0000000000000000 R09: 0000000000000000
[  203.214067][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  203.222037][ T7972] R13: 00007f4561426038 R14: 00007f4561425fa0 R15: 00007ffcd7963f58
[  203.230024][ T7972]  </TASK>
[  203.244446][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  203.277703][ T7977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.719'.
[  203.356706][ T7981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.407159][ T7980] netlink: 'syz.1.721': attribute type 10 has an invalid length.
[  203.416448][ T7980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.484385][ T7980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.883470][ T7980] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  203.974487][ T7984] netlink: 144 bytes leftover after parsing attributes in process `syz.0.723'.
[  204.048407][ T7984] team0: Port device team_slave_0 removed
[  204.062154][ T7984] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  204.137967][ T7980] syz.1.721 (7980) used greatest stack depth: 18792 bytes left
[  204.237962][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  204.643082][ T8005] netlink: 'syz.3.731': attribute type 46 has an invalid length.
[  205.638335][ T8021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.739'.
[  205.680745][   T52] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  206.466061][   T52] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  206.764887][ T8060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.751'.
[  207.269606][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  207.384721][ T8073] netlink: 'syz.1.758': attribute type 21 has an invalid length.
[  207.467326][ T8073] netlink: 156 bytes leftover after parsing attributes in process `syz.1.758'.
[  207.505645][ T8083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.595050][ T8075] sit0: entered promiscuous mode
[  207.622014][ T8075] sit0: entered allmulticast mode
[  207.725760][ T8091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.763'.
[  208.324844][ T8121] netlink: 'syz.3.773': attribute type 10 has an invalid length.
[  208.356772][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.773'.
[  208.647040][ T8126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.774'.
[  210.431577][ T8180] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.788'.
[  210.459781][ T8180] openvswitch: netlink: Flow key attr not present in new flow.
[  212.559272][ T8231] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.805'.
[  212.591442][ T8231] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  212.941821][ T8243] netlink: 'syz.2.812': attribute type 3 has an invalid length.
[  212.962125][ T8243] netlink: 'syz.2.812': attribute type 1 has an invalid length.
[  212.971413][ T8243] netlink: 128 bytes leftover after parsing attributes in process `syz.2.812'.
[  213.145257][   T52] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  214.278777][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'.
[  214.360308][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'.
[  214.392583][ T8265] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'.
[  214.819649][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  215.444770][ T8292] FAULT_INJECTION: forcing a failure.
[  215.444770][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.586316][ T8292] CPU: 1 PID: 8292 Comm: syz.0.831 Not tainted syzkaller #0
[  215.593658][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  215.603730][ T8292] Call Trace:
[  215.607027][ T8292]  <TASK>
[  215.609966][ T8292]  dump_stack_lvl+0x18c/0x250
[  215.614679][ T8292]  ? show_regs_print_info+0x20/0x20
[  215.619895][ T8292]  ? load_image+0x420/0x420
[  215.624417][ T8292]  ? __might_fault+0xaa/0x120
[  215.629109][ T8292]  ? __lock_acquire+0x7eb0/0x7eb0
[  215.634152][ T8292]  ? __virt_addr_valid+0x10c/0x380
[  215.639286][ T8292]  should_fail_ex+0x394/0x4c0
[  215.643996][ T8292]  _copy_from_user+0x2f/0xe0
[  215.648616][ T8292]  generic_map_update_batch+0x53e/0x800
[  215.654198][ T8292]  ? rcu_read_unlock+0xa0/0xa0
[  215.658991][ T8292]  ? __fdget+0x180/0x210
[  215.663269][ T8292]  ? rcu_read_unlock+0xa0/0xa0
[  215.668078][ T8292]  bpf_map_do_batch+0x3f2/0x600
[  215.672954][ T8292]  ? bpf_lsm_xfrm_decode_session+0x10/0x10
[  215.678795][ T8292]  __sys_bpf+0x381/0x890
[  215.683063][ T8292]  ? bpf_link_show_fdinfo+0x560/0x560
[  215.688468][ T8292]  ? lock_chain_count+0x20/0x20
[  215.693343][ T8292]  __x64_sys_bpf+0x7c/0x90
[  215.697779][ T8292]  do_syscall_64+0x55/0xb0
[  215.702215][ T8292]  ? clear_bhb_loop+0x40/0x90
[  215.706914][ T8292]  ? clear_bhb_loop+0x40/0x90
[  215.711621][ T8292]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.717538][ T8292] RIP: 0033:0x7f93aeb9fb19
[  215.721976][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.741599][ T8292] RSP: 002b:00007f93afb11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  215.750031][ T8292] RAX: ffffffffffffffda RBX: 00007f93aee25fa0 RCX: 00007f93aeb9fb19
[  215.758020][ T8292] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a
[  215.766011][ T8292] RBP: 00007f93afb11090 R08: 0000000000000000 R09: 0000000000000000
[  215.773997][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  215.781980][ T8292] R13: 00007f93aee26038 R14: 00007f93aee25fa0 R15: 00007ffca62e6f48
[  215.789986][ T8292]  </TASK>
[  215.912625][ T8293] syzkaller0: entered promiscuous mode
[  215.928442][ T8293] syzkaller0: entered allmulticast mode
[  216.282759][   T52] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  217.830469][ T8344] syzkaller0: entered promiscuous mode
[  217.851536][ T8344] syzkaller0: entered allmulticast mode
[  217.912743][   T52] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  239.695179][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  239.714119][ T1311] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  241.982663][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  241.992397][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  242.000041][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  242.008123][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  242.015807][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  242.023134][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  242.144322][ T8367] rxe_eth0 speed is unknown, defaulting to 1000
[  242.483106][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  242.496466][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  242.504435][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  242.512531][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  242.520478][ T5098] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  242.528881][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  242.684558][ T8370] rxe_eth0 speed is unknown, defaulting to 1000
[  242.692480][ T5098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  242.711417][ T5098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  242.719160][ T5098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  242.727624][ T5098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  242.735376][ T5098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  242.742736][ T5098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.110732][   T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  243.119531][   T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.131612][   T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.139949][   T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  243.152702][   T52] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  243.160015][   T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  243.211702][ T8372] rxe_eth0 speed is unknown, defaulting to 1000
[  243.586219][ T8375] rxe_eth0 speed is unknown, defaulting to 1000
[  243.647196][ T8367] chnl_net:caif_netlink_parms(): no params data found
[  244.016377][ T8370] chnl_net:caif_netlink_parms(): no params data found
[  244.081751][ T5098] Bluetooth: hci4: command tx timeout
[  244.215611][ T8367] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.231436][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.239156][ T8367] bridge_slave_0: entered allmulticast mode
[  244.254256][ T8367] bridge_slave_0: entered promiscuous mode
[  244.377908][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.386593][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.399575][ T8367] bridge_slave_1: entered allmulticast mode
[  244.408256][ T8367] bridge_slave_1: entered promiscuous mode
[  244.439278][ T8372] chnl_net:caif_netlink_parms(): no params data found
[  244.534249][ T8367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.567223][ T5098] Bluetooth: hci5: command tx timeout
[  244.605130][ T8367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.634188][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.649941][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.657172][ T8370] bridge_slave_0: entered allmulticast mode
[  244.672735][ T8370] bridge_slave_0: entered promiscuous mode
[  244.726249][ T8367] team0: Port device team_slave_0 added
[  244.741800][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.749470][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.765658][ T8370] bridge_slave_1: entered allmulticast mode
[  244.779482][ T8370] bridge_slave_1: entered promiscuous mode
[  244.801566][ T5098] Bluetooth: hci6: command tx timeout
[  244.830056][ T8367] team0: Port device team_slave_1 added
[  244.977588][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.097672][ T8367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.111549][ T8367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.144983][ T8367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.166344][ T8367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.179090][ T8367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.206677][ T5098] Bluetooth: hci7: command tx timeout
[  245.220139][ T8367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.235748][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.380647][ T8370] team0: Port device team_slave_0 added
[  245.398146][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.407707][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.421885][ T8372] bridge_slave_0: entered allmulticast mode
[  245.429189][ T8372] bridge_slave_0: entered promiscuous mode
[  245.477976][ T8370] team0: Port device team_slave_1 added
[  246.161713][ T5098] Bluetooth: hci4: command tx timeout
[  246.651591][ T5098] Bluetooth: hci5: command tx timeout
[  246.881687][ T5098] Bluetooth: hci6: command tx timeout
[  247.289660][ T5098] Bluetooth: hci7: command tx timeout
[  248.241641][ T5098] Bluetooth: hci4: command tx timeout
[  248.731613][ T5098] Bluetooth: hci5: command tx timeout
[  248.969073][ T5098] Bluetooth: hci6: command tx timeout
[  249.361420][ T5098] Bluetooth: hci7: command tx timeout
[  250.321593][ T5098] Bluetooth: hci4: command tx timeout
[  250.801440][ T5098] Bluetooth: hci5: command tx timeout
[  250.965978][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.011402][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.018663][ T8372] bridge_slave_1: entered allmulticast mode
[  251.059228][ T5098] Bluetooth: hci6: command tx timeout
[  251.089917][ T8372] bridge_slave_1: entered promiscuous mode
[  251.451687][ T5098] Bluetooth: hci7: command tx timeout
[  253.130611][ T8367] hsr_slave_0: entered promiscuous mode
[  256.551635][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  256.557996][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  294.162517][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  295.441750][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  312.434445][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  312.443458][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  312.451089][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  312.459587][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  312.467333][   T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  312.479446][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  312.552854][ T5796] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  312.560913][ T5796] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  312.571834][ T5796] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  312.579542][ T5796] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  312.588317][ T5796] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  312.596961][ T5796] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  312.605329][ T5796] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  312.615397][ T5796] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  312.632614][ T5796] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  312.640610][ T5796] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  312.648270][ T5796] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  312.655759][ T5796] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  312.663439][ T5796] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  312.680737][ T5795] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  312.688788][ T5098] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  312.697796][ T5098] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  312.705222][ T5795] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  312.714198][ T5098] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  314.561635][ T5781] Bluetooth: hci0: command tx timeout
[  314.801575][ T5098] Bluetooth: hci9: command tx timeout
[  314.807479][ T5098] Bluetooth: hci10: command tx timeout
[  314.816978][ T5781] Bluetooth: hci8: command tx timeout
[  316.641475][ T5781] Bluetooth: hci0: command tx timeout
[  316.881525][   T52] Bluetooth: hci9: command tx timeout
[  316.887872][ T5098] Bluetooth: hci10: command tx timeout
[  316.893553][ T5781] Bluetooth: hci8: command tx timeout
[  317.211306][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  317.217805][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  318.722563][ T5098] Bluetooth: hci0: command tx timeout
[  318.961593][ T5098] Bluetooth: hci10: command tx timeout
[  318.967119][ T5098] Bluetooth: hci8: command tx timeout
[  318.974807][ T5781] Bluetooth: hci9: command tx timeout
[  320.801490][ T5098] Bluetooth: hci0: command tx timeout
[  321.041533][   T52] Bluetooth: hci9: command tx timeout
[  321.046969][   T52] Bluetooth: hci10: command tx timeout
[  321.052685][ T5098] Bluetooth: hci8: command tx timeout
[  358.161309][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  358.168052][    C1] rcu: 	1-....: (10346 ticks this GP) idle=325c/1/0x4000000000000000 softirq=28390/28395 fqs=3447
[  358.179397][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  358.185810][    C1] rcu: 	 number:  1573420         13            0
[  358.192203][    C1] rcu: 	cputime:    16384      36105           41   ==> 52520(ms)
[  358.199997][    C1] rcu: 	(t=10503 jiffies g=26325 q=1485 ncpus=2)
[  358.206303][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 636 jiffies! g26325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  358.218430][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=22897
[  358.226298][    C1] rcu: rcu_preempt kthread starved for 639 jiffies! g26325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  358.237468][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  358.247418][    C1] rcu: RCU grace-period kthread stack dump:
[  358.253297][    C1] task:rcu_preempt     state:I stack:27048 pid:17    ppid:2      flags:0x00004000
[  358.262492][    C1] Call Trace:
[  358.265754][    C1]  <TASK>
[  358.268696][    C1]  __schedule+0x156f/0x4720
[  358.273197][    C1]  ? lock_chain_count+0x20/0x20
[  358.278052][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  358.283234][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  358.289111][    C1]  ? asan.module_dtor+0x20/0x20
[  358.293943][    C1]  ? rcu_is_watching+0x15/0xb0
[  358.298702][    C1]  schedule+0xbd/0x170
[  358.302756][    C1]  schedule_timeout+0x188/0x2d0
[  358.307597][    C1]  ? console_conditional_schedule+0x40/0x40
[  358.313472][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  358.319348][    C1]  ? update_process_times+0x1b0/0x1b0
[  358.324707][    C1]  ? prepare_to_swait_event+0x359/0x3c0
[  358.330238][    C1]  rcu_gp_fqs_loop+0x30d/0x15e0
[  358.335078][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  358.341213][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[  358.346224][    C1]  ? rcu_gp_init+0x1530/0x1530
[  358.350967][    C1]  ? rcu_gp_cleanup+0xade/0xc30
[  358.355802][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.360981][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  358.366160][    C1]  rcu_gp_kthread+0x9e/0x400
[  358.370733][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  358.375841][    C1]  ? __kthread_parkme+0x71/0x1c0
[  358.380761][    C1]  ? __kthread_parkme+0x15b/0x1c0
[  358.385776][    C1]  kthread+0x2fa/0x390
[  358.389826][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  358.394920][    C1]  ? kthread_blkcg+0xd0/0xd0
[  358.399491][    C1]  ret_from_fork+0x48/0x80
[  358.403891][    C1]  ? kthread_blkcg+0xd0/0xd0
[  358.408476][    C1]  ret_from_fork_asm+0x11/0x20
[  358.413231][    C1]  </TASK>
[  358.416233][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  358.422546][    C1] Sending NMI from CPU 1 to CPUs 0:
[  358.427764][    C0] NMI backtrace for cpu 0
[  358.427774][    C0] CPU: 0 PID: 5768 Comm: syz-executor Not tainted syzkaller #0
[  358.427790][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  358.427798][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x10
[  358.427816][    C0] Code: f1 33 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 61 50 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[  358.427829][    C0] RSP: 0018:ffffc900042176f8 EFLAGS: 000002d3
[  358.427842][    C0] RAX: ffffffff813b5538 RBX: 0000000000000003 RCX: ffff888076241e00
[  358.427853][    C0] RDX: 0000000000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260
[  358.427863][    C0] RBP: ffffc900042177d0 R08: ffffffff922235c7 R09: 1ffffffff24446b8
[  358.427874][    C0] R10: dffffc0000000000 R11: fffffbfff24446b9 R12: dffffc0000000000
[  358.427885][    C0] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000842ee4
[  358.427895][    C0] FS:  0000555581f0c500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  358.427908][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  358.427919][    C0] CR2: 00007fcf3a8dafdf CR3: 000000007626f000 CR4: 00000000003506f0
[  358.427932][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  358.427941][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  358.427950][    C0] Call Trace:
[  358.427957][    C0]  <TASK>
[  358.427962][    C0]  kvm_wait+0x23d/0x2a0
[  358.427983][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  358.427999][    C0]  ? kvm_arch_para_hints+0x50/0x50
[  358.428025][    C0]  __pv_queued_spin_lock_slowpath+0x613/0x9c0
[  358.428051][    C0]  ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0
[  358.428075][    C0]  do_raw_spin_lock+0x23e/0x2b0
[  358.428097][    C0]  ? __rwlock_init+0x150/0x150
[  358.428119][    C0]  ? lock_sock_nested+0x6a/0x100
[  358.428143][    C0]  lock_sock_nested+0x6a/0x100
[  358.428166][    C0]  tcp_recvmsg+0x203/0x890
[  358.428183][    C0]  ? tcp_recv_timestamp+0x720/0x720
[  358.428201][    C0]  ? aa_sk_perm+0x7bb/0x8e0
[  358.428219][    C0]  ? sock_rps_record_flow+0x19/0x3f0
[  358.428241][    C0]  inet_recvmsg+0x140/0x1f0
[  358.428272][    C0]  ? inet_splice_eof+0x2b0/0x2b0
[  358.428294][    C0]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  358.428313][    C0]  ? security_socket_recvmsg+0x89/0xb0
[  358.428336][    C0]  sock_read_iter+0x2db/0x3f0
[  358.428355][    C0]  ? kernel_sock_ip_overhead+0x5a0/0x5a0
[  358.428378][    C0]  ? common_file_perm+0x198/0x1f0
[  358.428397][    C0]  vfs_read+0x486/0x990
[  358.428421][    C0]  ? kernel_read+0x1e0/0x1e0
[  358.428443][    C0]  ? __rseq_handle_notify_resume+0x33f/0x1140
[  358.428472][    C0]  ? __fdget_pos+0x1d8/0x330
[  358.428494][    C0]  ksys_read+0x151/0x260
[  358.428517][    C0]  ? vfs_write+0x9a0/0x9a0
[  358.428539][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  358.428555][    C0]  do_syscall_64+0x55/0xb0
[  358.428573][    C0]  ? clear_bhb_loop+0x40/0x90
[  358.428594][    C0]  ? clear_bhb_loop+0x40/0x90
[  358.428614][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  358.428634][    C0] RIP: 0033:0x7fcf3cb5ac97
[  358.428647][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  358.428659][    C0] RSP: 002b:00007fff94639e60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  358.428673][    C0] RAX: ffffffffffffffda RBX: 0000555581f0c500 RCX: 00007fcf3cb5ac97
[  358.428684][    C0] RDX: 0000000000000004 RSI: 00007fff94639ebc RDI: 0000000000000003
[  358.428693][    C0] RBP: 00007fff9463a360 R08: 0000000000000000 R09: 0000000000000000
[  358.428702][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  358.428711][    C0] R13: 00007fff94639ebc R14: 00007fff94639f50 R15: 0000000000000000
[  358.428729][    C0]  </TASK>
[  358.428772][    C1] CPU: 1 PID: 8352 Comm: syz.1.854 Not tainted syzkaller #0
[  358.802688][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  358.812725][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90
[  358.819474][    C1] Code: c0 4c 89 01 48 c7 44 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 15 a0 d5 7b 7e 65 8b 0d a1 d5 7b
[  358.839062][    C1] RSP: 0018:ffffc900001eef90 EFLAGS: 00000246
[  358.845111][    C1] RAX: 0000000000000305 RBX: 0000000000000304 RCX: 0000000000000300
[  358.853065][    C1] RDX: 0000000000000100 RSI: 0000000000000304 RDI: 0000000000000000
[  358.861015][    C1] RBP: 0000000000000001 R08: ffff8880299f0000 R09: 0000000000000003
[  358.868966][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90004187ae0
[  358.876918][    C1] R13: ffffc900001ef068 R14: ffffc90004187be0 R15: ffffc900001ef078
[  358.884869][    C1] FS:  00007f13cc4ae6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  358.893777][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  358.900336][    C1] CR2: 000055d22f4e8d10 CR3: 000000007a94d000 CR4: 00000000003506e0
[  358.908287][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  358.916238][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  358.924203][    C1] Call Trace:
[  358.927467][    C1]  <IRQ>
[  358.930295][    C1]  unwind_next_frame+0x1d2b/0x2990
[  358.935410][    C1]  ? smp_call_function_single+0x48d/0x5a0
[  358.941124][    C1]  ? smp_call_function_single+0x48d/0x5a0
[  358.946824][    C1]  ? stack_trace_save+0x100/0x100
[  358.951833][    C1]  arch_stack_walk+0x144/0x190
[  358.956585][    C1]  ? perf_install_in_context+0x5bb/0x920
[  358.962201][    C1]  stack_trace_save+0xaa/0x100
[  358.966946][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  358.972039][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  358.977215][    C1]  ? sched_clock_cpu+0x75/0x430
[  358.982046][    C1]  ? ktime_get+0x24b/0x280
[  358.986445][    C1]  kasan_set_track+0x4e/0x70
[  358.991013][    C1]  ? kasan_set_track+0x4e/0x70
[  358.995756][    C1]  ? kasan_save_free_info+0x28/0x40
[  359.000933][    C1]  ? ____kasan_slab_free+0x126/0x1f0
[  359.006214][    C1]  ? slab_free_freelist_hook+0x154/0x240
[  359.011827][    C1]  ? __kmem_cache_free+0xba/0x1f0
[  359.016847][    C1]  ? skb_release_data+0x609/0x7f0
[  359.021873][    C1]  ? kfree_skb_reason+0x10e/0x170
[  359.026886][    C1]  ? dev_kfree_skb_any_reason+0x120/0x130
[  359.032589][    C1]  ? free_old_xmit_skbs+0x11a/0x3b0
[  359.037782][    C1]  ? start_xmit+0x16d/0x1470
[  359.042357][    C1]  ? dev_hard_start_xmit+0x269/0x790
[  359.047630][    C1]  ? sch_direct_xmit+0x251/0x4a0
[  359.052551][    C1]  ? __dev_queue_xmit+0x19f3/0x3a30
[  359.057732][    C1]  ? ip_finish_output2+0xd97/0x1260
[  359.062942][    C1]  ? ip_output+0x29f/0x440
[  359.067360][    C1]  ? __ip_queue_xmit+0x1056/0x1960
[  359.072457][    C1]  ? __tcp_transmit_skb+0x1dd6/0x3470
[  359.077831][    C1]  ? tcp_rcv_established+0xb30/0x1dd0
[  359.083191][    C1]  ? tcp_v4_do_rcv+0x6d3/0xba0
[  359.087936][    C1]  ? tcp_v4_rcv+0x2358/0x2a60
[  359.092594][    C1]  ? ip_protocol_deliver_rcu+0x20a/0x3f0
[  359.098212][    C1]  ? ip_local_deliver_finish+0x2c3/0x510
[  359.103827][    C1]  ? NF_HOOK+0x32d/0x3b0
[  359.108051][    C1]  ? ip_sublist_rcv+0xa36/0xd60
[  359.112884][    C1]  ? ip_list_rcv+0x3ed/0x440
[  359.117453][    C1]  ? __netif_receive_skb_list_core+0x582/0x770
[  359.123589][    C1]  ? netif_receive_skb_list_internal+0x943/0xca0
[  359.129897][    C1]  ? napi_complete_done+0x329/0x820
[  359.135091][    C1]  ? virtnet_poll+0xb6e/0x1300
[  359.139851][    C1]  ? __napi_poll+0xbb/0x460
[  359.144336][    C1]  ? net_rx_action+0x65f/0xcc0
[  359.149084][    C1]  ? handle_softirqs+0x27d/0x820
[  359.154003][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  359.158745][    C1]  ? irq_exit_rcu+0x9/0x20
[  359.163140][    C1]  ? sysvec_apic_timer_interrupt+0xa4/0xc0
[  359.168930][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.175067][    C1]  ? __schedule+0x157f/0x4720
[  359.179746][    C1]  ? preempt_schedule_irq+0xbf/0x150
[  359.185013][    C1]  ? irqentry_exit+0x67/0x70
[  359.189582][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.195716][    C1]  ? preempt_schedule+0xc0/0xd0
[  359.200567][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[  359.205922][    C1]  ? smp_call_function_single+0x48d/0x5a0
[  359.211641][    C1]  ? kasan_save_stack+0x60/0x60
[  359.216479][    C1]  ? __kmem_cache_free+0xba/0x1f0
[  359.221490][    C1]  kasan_save_free_info+0x28/0x40
[  359.226505][    C1]  ____kasan_slab_free+0x126/0x1f0
[  359.231605][    C1]  slab_free_freelist_hook+0x154/0x240
[  359.237058][    C1]  ? skb_release_data+0x609/0x7f0
[  359.242065][    C1]  __kmem_cache_free+0xba/0x1f0
[  359.246898][    C1]  skb_release_data+0x609/0x7f0
[  359.251741][    C1]  kfree_skb_reason+0x10e/0x170
[  359.256580][    C1]  dev_kfree_skb_any_reason+0x120/0x130
[  359.262114][    C1]  ? refcount_dec_and_test+0x70/0x70
[  359.267388][    C1]  free_old_xmit_skbs+0x11a/0x3b0
[  359.272399][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  359.277582][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.283723][    C1]  ? virtqueue_napi_schedule+0x40/0x40
[  359.289171][    C1]  start_xmit+0x16d/0x1470
[  359.293572][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.299717][    C1]  dev_hard_start_xmit+0x269/0x790
[  359.304837][    C1]  sch_direct_xmit+0x251/0x4a0
[  359.309583][    C1]  ? do_raw_spin_lock+0x2b0/0x2b0
[  359.314592][    C1]  ? mrp_pdu_parse_vecattr_event+0x230/0x230
[  359.320560][    C1]  ? __dev_queue_xmit+0x6d1/0x3a30
[  359.325653][    C1]  __dev_queue_xmit+0x19f3/0x3a30
[  359.330661][    C1]  ? __dev_queue_xmit+0x6d1/0x3a30
[  359.335760][    C1]  ? __asan_memcpy+0x40/0x70
[  359.340334][    C1]  ? netdev_core_pick_tx+0x370/0x370
[  359.345610][    C1]  ? llc_sysctl_exit+0x70/0x70
[  359.350352][    C1]  ? neigh_resolve_output+0x5f5/0x710
[  359.355714][    C1]  ? ip_finish_output2+0x45a/0x1260
[  359.360894][    C1]  ip_finish_output2+0xd97/0x1260
[  359.365898][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[  359.370905][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  359.376087][    C1]  ? ip_fragment+0x210/0x210
[  359.380664][    C1]  ? ip_skb_dst_mtu+0x18d/0xb70
[  359.385494][    C1]  ? ip_skb_dst_mtu+0x922/0xb70
[  359.390327][    C1]  ? ip_finish_output+0x3ec/0x4c0
[  359.395334][    C1]  ip_output+0x29f/0x440
[  359.399556][    C1]  ? ip_output+0x5a/0x440
[  359.403868][    C1]  ? __ip_queue_xmit+0x5d/0x1960
[  359.408788][    C1]  __ip_queue_xmit+0x1056/0x1960
[  359.413709][    C1]  ? __ip_queue_xmit+0x5d/0x1960
[  359.418631][    C1]  __tcp_transmit_skb+0x1dd6/0x3470
[  359.423824][    C1]  ? __tcp_send_ack+0x5f0/0x5f0
[  359.428680][    C1]  ? __tcp_send_ack+0x299/0x5f0
[  359.433514][    C1]  tcp_rcv_established+0xb30/0x1dd0
[  359.438702][    C1]  ? tcp_check_space+0xa80/0xa80
[  359.443624][    C1]  ? ipv4_confirm_neigh+0x4b0/0x500
[  359.448804][    C1]  ? rt_is_expired+0x250/0x2d0
[  359.453552][    C1]  tcp_v4_do_rcv+0x6d3/0xba0
[  359.458123][    C1]  tcp_v4_rcv+0x2358/0x2a60
[  359.462629][    C1]  ? tcp_v4_rcv+0x1011/0x2a60
[  359.467301][    C1]  ? tcp_filter+0x90/0x90
[  359.471618][    C1]  ? read_lock_is_recursive+0x20/0x20
[  359.476982][    C1]  ip_protocol_deliver_rcu+0x20a/0x3f0
[  359.482421][    C1]  ? ip_local_deliver_finish+0x1c2/0x510
[  359.488031][    C1]  ip_local_deliver_finish+0x2c3/0x510
[  359.493472][    C1]  NF_HOOK+0x32d/0x3b0
[  359.497517][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.503657][    C1]  ? NF_HOOK+0x3b0/0x3b0
[  359.507878][    C1]  ? NF_HOOK+0x9f/0x3b0
[  359.512015][    C1]  ? ip_local_deliver+0x180/0x180
[  359.517023][    C1]  ? NF_HOOK+0x3b0/0x3b0
[  359.521245][    C1]  ? ip_local_deliver+0x10b/0x180
[  359.526259][    C1]  ip_sublist_rcv+0xa36/0xd60
[  359.530936][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  359.538122][    C1]  ? ip_list_rcv+0x440/0x440
[  359.542698][    C1]  ? ip_rcv_core+0xd80/0xd80
[  359.547269][    C1]  ? ip_rcv_core+0x898/0xd80
[  359.551851][    C1]  ip_list_rcv+0x3ed/0x440
[  359.556265][    C1]  ? ip_rcv_finish+0x250/0x250
[  359.561008][    C1]  ? ip_rcv_finish+0x250/0x250
[  359.565757][    C1]  __netif_receive_skb_list_core+0x582/0x770
[  359.571736][    C1]  ? set_rps_cpu+0x6a0/0x6a0
[  359.576313][    C1]  ? read_tsc+0x9/0x20
[  359.580384][    C1]  netif_receive_skb_list_internal+0x943/0xca0
[  359.586523][    C1]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  359.592227][    C1]  ? netif_receive_skb_list_internal+0x4b1/0xca0
[  359.598536][    C1]  ? mark_lock+0x94/0x320
[  359.602848][    C1]  ? netif_receive_skb_core+0x230/0x230
[  359.608376][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  359.614336][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  359.621523][    C1]  ? lock_chain_count+0x20/0x20
[  359.626365][    C1]  napi_complete_done+0x329/0x820
[  359.631376][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  359.636562][    C1]  ? __napi_schedule_irqoff+0x90/0x90
[  359.641927][    C1]  ? virtqueue_enable_cb_prepare+0x2ce/0x4e0
[  359.647907][    C1]  ? virtqueue_enable_cb_prepare+0x205/0x4e0
[  359.653887][    C1]  virtnet_poll+0xb6e/0x1300
[  359.658471][    C1]  ? refill_work+0x220/0x220
[  359.663047][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.669192][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  359.674375][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.680516][    C1]  __napi_poll+0xbb/0x460
[  359.684834][    C1]  net_rx_action+0x65f/0xcc0
[  359.689429][    C1]  ? net_tx_action+0x950/0x950
[  359.694175][    C1]  ? detach_timer+0x2b0/0x2b0
[  359.698857][    C1]  handle_softirqs+0x27d/0x820
[  359.703605][    C1]  ? read_tsc+0x9/0x20
[  359.707660][    C1]  ? ktime_get+0x24b/0x280
[  359.712061][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  359.716811][    C1]  ? do_softirq+0x1a0/0x1a0
[  359.721305][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  359.726528][    C1]  __irq_exit_rcu+0xd3/0x190
[  359.731098][    C1]  ? irq_exit_rcu+0x20/0x20
[  359.735590][    C1]  irq_exit_rcu+0x9/0x20
[  359.739817][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  359.745452][    C1]  </IRQ>
[  359.748395][    C1]  <TASK>
[  359.751318][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.757292][    C1] RIP: 0010:__schedule+0x157f/0x4720
[  359.762562][    C1] Code: 28 00 74 08 4c 89 f7 e8 cf e7 40 f7 4d 89 26 48 89 df 4c 89 e6 e8 a1 4b 60 f6 48 89 c7 e8 b9 13 be f6 48 8b 84 24 98 00 00 00 <66> 42 c7 44 28 12 f8 f8 48 c7 84 24 00 01 00 00 0e 36 e0 45 4a c7
[  359.782163][    C1] RSP: 0018:ffffc90004187680 EFLAGS: 00000286
[  359.788216][    C1] RAX: 1ffff92000830ef0 RBX: ffff8880299f0000 RCX: 24a466016af42200
[  359.796174][    C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffff8880299f1600
[  359.804149][    C1] RBP: ffffc90004187890 R08: ffffffff92223607 R09: 1ffffffff24446c0
[  359.812105][    C1] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: ffff888076241e00
[  359.820057][    C1] R13: dffffc0000000000 R14: ffff8880b8d3c250 R15: ffff8880b8d3cf88
[  359.828024][    C1]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  359.833747][    C1]  ? mark_lock+0x94/0x320
[  359.838073][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  359.845254][    C1]  ? lock_chain_count+0x20/0x20
[  359.850087][    C1]  ? asan.module_dtor+0x20/0x20
[  359.854922][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  359.860108][    C1]  preempt_schedule_irq+0xbf/0x150
[  359.865202][    C1]  ? preempt_schedule_notrace+0x110/0x110
[  359.870912][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  359.876719][    C1]  irqentry_exit+0x67/0x70
[  359.881115][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.887077][    C1] RIP: 0010:preempt_schedule+0xc0/0xd0
[  359.892522][    C1] Code: 0e 36 e0 45 4a c7 04 33 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 58 75 10 48 8d 65 f0 5b 41 5e 5d c3 e8 10 00 00 00 <eb> d0 e8 c9 ac f7 ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 53 49
[  359.912110][    C1] RSP: 0018:ffffc90004187a00 EFLAGS: 00000246
[  359.918155][    C1] RAX: 1ffff1100533e000 RBX: 1ffff92000830f40 RCX: 24a466016af42200
[  359.926107][    C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260
[  359.934057][    C1] RBP: ffffc90004187a78 R08: ffffffff92223607 R09: 1ffffffff24446c0
[  359.942011][    C1] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: 0000000000000000
[  359.949961][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000830f60
[  359.957923][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  359.963543][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  359.969688][    C1]  preempt_schedule_thunk+0x1a/0x30
[  359.974872][    C1]  ? smp_call_function_single+0x488/0x5a0
[  359.980572][    C1]  smp_call_function_single+0x48d/0x5a0
[  359.986099][    C1]  ? event_function+0x300/0x300
[  359.990929][    C1]  ? flush_smp_call_function_queue+0x250/0x250
[  359.997061][    C1]  ? event_function+0x300/0x300
[  360.001899][    C1]  ? perf_install_in_context+0x203/0x920
[  360.007522][    C1]  perf_install_in_context+0x5bb/0x920
[  360.012968][    C1]  ? alloc_file_pseudo+0x1ae/0x210
[  360.018059][    C1]  ? exclusive_event_installable+0x2c0/0x2c0
[  360.024031][    C1]  ? add_event_to_ctx+0x1170/0x1170
[  360.029231][    C1]  ? anon_inode_getfile+0x109/0x1a0
[  360.034409][    C1]  ? perf_event__header_size+0x165/0x220
[  360.040032][    C1]  __se_sys_perf_event_open+0x180d/0x1d40
[  360.045743][    C1]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  360.051369][    C1]  ? lock_chain_count+0x20/0x20
[  360.056206][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  360.062168][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  360.067361][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  360.072976][    C1]  do_syscall_64+0x55/0xb0
[  360.077375][    C1]  ? clear_bhb_loop+0x40/0x90
[  360.082042][    C1]  ? clear_bhb_loop+0x40/0x90
[  360.086712][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.092596][    C1] RIP: 0033:0x7f13cb59fb19
[  360.096992][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.116579][    C1] RSP: 002b:00007f13cc4ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  360.124984][    C1] RAX: ffffffffffffffda RBX: 00007f13cb826090 RCX: 00007f13cb59fb19
[  360.132949][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000005c0
[  360.140899][    C1] RBP: 00007f13cb637b70 R08: 0000000000000002 R09: 0000000000000000
[  360.148848][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  360.156798][    C1] R13: 00007f13cb826128 R14: 00007f13cb826090 R15: 00007ffe090e7f78
[  360.164760][    C1]  </TASK>