last executing test programs:

16.93722595s ago: executing program 0 (id=319):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32=0x1, @ANYBLOB="7f00"], 0x48)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000000100000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

16.847125097s ago: executing program 0 (id=321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc98, 0x0, @perf_config_ext={0x3, 0x8001}, 0x28e4dcf2182c8c55, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x3f}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94)

16.627315129s ago: executing program 2 (id=327):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xc9e}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, 0x0, 0x3400cc00)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x2d, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)

15.757926768s ago: executing program 0 (id=328):
openat$tun(0xffffffffffffff9c, 0x0, 0x208001, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001)
ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})

15.477974631s ago: executing program 2 (id=330):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000005500000095000000000000009500a50500000000593d99973ab8bd84c7ae49ffb03398929787e599d43d73bfa7fbad380654b3dbd19705b578dd896a48070306cbb723154d92a6c9ba4e724ca3d4191cb23190858474249c9f0eb2c65e4ff70e1268d7aa51661c9062c9525f739b6e47126c7b84e972f425e4f09d46a0d1c17a5e0927153239042f0b6265561d1627a654effd7ef7500d875a3afdbde8a26f930cc2098b0027564c781f51a9b56eb8fd2f0cd67dcbb78e7c71b28f9599ef"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

15.477781665s ago: executing program 2 (id=331):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000000ec0)=""/4071, 0xfe7}, {&(0x7f00000027c0)=""/4065, 0xfe1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000500)=""/42, 0x2a}, {&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x8}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

15.477587105s ago: executing program 0 (id=332):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50)

15.416178503s ago: executing program 0 (id=333):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1)
r3 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
close(0x3)

15.35671964s ago: executing program 2 (id=335):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f0000000c80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.356286053s ago: executing program 2 (id=337):
socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

15.355987649s ago: executing program 1 (id=338):
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/uts\x00')

15.289473108s ago: executing program 0 (id=339):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

15.28933922s ago: executing program 1 (id=340):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00', 0x7c2})

15.289068349s ago: executing program 1 (id=341):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x10000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$kcm(0xa, 0x2, 0x3a)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x55)

15.217891242s ago: executing program 1 (id=342):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x2}, 0x28)

15.217486552s ago: executing program 2 (id=343):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r2 = socket$kcm(0x10, 0x0, 0x10)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_subtree(r3, 0x0, 0x45)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x18, 0x6d, 0x8, 0x0, 0xf825, 0x18228, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x100400, 0xc, 0xd, 0x2, 0x42, 0x3, 0x5, 0x0, 0x91fb, 0x0, 0xa9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001440)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6dc7, '\x00', r10, r11, 0x0, 0x3, 0x1}, 0x50)
sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000240))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580))
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)

15.217432103s ago: executing program 1 (id=344):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x5, 0x0, 0x0)

15.217389872s ago: executing program 1 (id=345):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0)

180.75069ms ago: executing program 32 (id=339):
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

89.78954ms ago: executing program 33 (id=345):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0)

0s ago: executing program 34 (id=343):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r2 = socket$kcm(0x10, 0x0, 0x10)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_subtree(r3, 0x0, 0x45)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x18, 0x6d, 0x8, 0x0, 0xf825, 0x18228, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x100400, 0xc, 0xd, 0x2, 0x42, 0x3, 0x5, 0x0, 0x91fb, 0x0, 0xa9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001440)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6dc7, '\x00', r10, r11, 0x0, 0x3, 0x1}, 0x50)
sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000240))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580))
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39122' (ED25519) to the list of known hosts.
syzkaller login: [   40.691424][ T5756] cgroup: Unknown subsys name 'net'
[   40.789999][ T5756] cgroup: Unknown subsys name 'cpuset'
[   40.794017][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.062160][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.325964][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.329526][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.332228][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.335386][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.338126][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.392389][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.395766][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.399065][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.402367][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.405727][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.427124][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.434107][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.437231][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.448542][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.451679][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.495807][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   45.575545][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.578856][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.581301][ T5828] bridge_slave_0: entered allmulticast mode
[   45.584064][ T5828] bridge_slave_0: entered promiscuous mode
[   45.588343][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.590736][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.593065][ T5828] bridge_slave_1: entered allmulticast mode
[   45.595944][ T5828] bridge_slave_1: entered promiscuous mode
[   45.626227][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.633150][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.664504][ T5828] team0: Port device team_slave_0 added
[   45.668790][ T5828] team0: Port device team_slave_1 added
[   45.720810][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.723062][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.732387][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.747368][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.749747][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.759203][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.779810][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.804078][ T5828] hsr_slave_0: entered promiscuous mode
[   45.807217][ T5828] hsr_slave_1: entered promiscuous mode
[   45.827711][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.903713][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.906169][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.908886][ T5833] bridge_slave_0: entered allmulticast mode
[   45.911832][ T5833] bridge_slave_0: entered promiscuous mode
[   45.928946][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.931841][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.934683][ T5833] bridge_slave_1: entered allmulticast mode
[   45.937912][ T5833] bridge_slave_1: entered promiscuous mode
[   45.982140][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.985306][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.988901][ T5836] bridge_slave_0: entered allmulticast mode
[   45.992824][ T5836] bridge_slave_0: entered promiscuous mode
[   46.008936][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.012001][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.015066][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.020154][ T5836] bridge_slave_1: entered allmulticast mode
[   46.023933][ T5836] bridge_slave_1: entered promiscuous mode
[   46.040040][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.073771][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.089645][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.101870][ T5833] team0: Port device team_slave_0 added
[   46.113456][ T5836] team0: Port device team_slave_0 added
[   46.117076][ T5833] team0: Port device team_slave_1 added
[   46.132578][ T5836] team0: Port device team_slave_1 added
[   46.146992][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.149896][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.159214][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.171166][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.173503][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.182687][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.204278][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.206712][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.216856][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.227117][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.229689][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.238495][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.275404][ T5833] hsr_slave_0: entered promiscuous mode
[   46.278188][ T5833] hsr_slave_1: entered promiscuous mode
[   46.280344][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.282940][ T5833] Cannot create hsr debugfs directory
[   46.284899][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.300738][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.309294][ T5836] hsr_slave_0: entered promiscuous mode
[   46.312898][ T5836] hsr_slave_1: entered promiscuous mode
[   46.315185][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.318107][ T5836] Cannot create hsr debugfs directory
[   46.320752][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.335849][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.450554][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.452892][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.455491][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.457895][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.511583][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.514676][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.541359][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.559298][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.570368][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.576901][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.594770][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.611870][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   46.628113][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.630508][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.642641][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.645237][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.649936][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.659900][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.673892][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.681171][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.785745][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.819207][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.835671][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.850881][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.854017][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.862691][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.871864][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.874152][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.878616][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.880900][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.888622][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.890963][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.902172][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.966402][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.975932][ T5828] veth0_vlan: entered promiscuous mode
[   46.986287][ T5828] veth1_vlan: entered promiscuous mode
[   47.025179][ T5828] veth0_macvtap: entered promiscuous mode
[   47.030584][ T5828] veth1_macvtap: entered promiscuous mode
[   47.041106][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.048966][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.055985][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.059744][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.063100][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.066230][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.096833][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.129697][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.146867][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.151610][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.183151][ T5836] veth0_vlan: entered promiscuous mode
[   47.188072][ T5833] veth0_vlan: entered promiscuous mode
[   47.193991][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.195973][ T5836] veth1_vlan: entered promiscuous mode
[   47.198040][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.203201][ T5833] veth1_vlan: entered promiscuous mode
[   47.233223][ T5833] veth0_macvtap: entered promiscuous mode
[   47.240832][ T5833] veth1_macvtap: entered promiscuous mode
[   47.254172][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.256071][ T5836] veth0_macvtap: entered promiscuous mode
[   47.268381][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.272583][ T5836] veth1_macvtap: entered promiscuous mode
[   47.280277][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.304513][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.310016][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.312936][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.315743][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.325130][ T5893] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   47.330298][ T5893] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.332985][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.389279][   T54] Bluetooth: hci0: command tx timeout
[   47.467814][ T5838] Bluetooth: hci1: command tx timeout
[   47.469825][   T54] Bluetooth: hci2: command tx timeout
[   47.732209][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.747113][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.752621][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.756210][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.760640][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.830505][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.833790][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.851662][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.854193][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.871692][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.874234][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.886757][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.892022][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.059920][ T5903] Illegal XDP return value 342319104 on prog  (id 7) dev N/A, expect packet loss!
[   49.467737][ T5838] Bluetooth: hci0: command tx timeout
[   49.557607][ T5838] Bluetooth: hci1: command tx timeout
[   49.557665][   T54] Bluetooth: hci2: command tx timeout
[   51.119670][ T5893] syz.1.2 (5893) used greatest stack depth: 19296 bytes left
[   51.122255][ T5907] netlink: 'syz.2.7': attribute type 2 has an invalid length.
[   51.126995][ T5907] netlink: 'syz.2.7': attribute type 4 has an invalid length.
[   51.133625][ T5907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7'.
[   51.287285][ T5915] bridge0: entered promiscuous mode
[   51.287492][    C0] hrtimer: interrupt took 48663 ns
[   51.301068][ T5915] bridge0: entered allmulticast mode
[   51.349240][ T5921] syzkaller0: entered promiscuous mode
[   51.351413][ T5921] syzkaller0: entered allmulticast mode
[   51.557682][   T54] Bluetooth: hci0: command tx timeout
[   51.630411][   T54] Bluetooth: hci2: command tx timeout
[   51.638348][   T54] Bluetooth: hci1: command tx timeout
[   52.120422][ T5925] netlink: 'syz.2.15': attribute type 25 has an invalid length.
[   52.122955][ T5925] netlink: 'syz.2.15': attribute type 28 has an invalid length.
[   52.291461][ T5940] netlink: 'syz.1.22': attribute type 31 has an invalid length.
[   52.294078][ T5940] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   52.296584][ T5940] bridge0: port 1(bridge_slave_0) entered learning state
[   52.484411][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.487648][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.491437][ T5948] bridge0: entered allmulticast mode
[   52.496211][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.498658][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.501233][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.503538][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.507312][ T5948] bridge0: entered promiscuous mode
[   53.166822][ T5969] netlink: 'syz.1.35': attribute type 10 has an invalid length.
[   53.211576][ T5969] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   53.216052][ T5969] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   53.227241][ T5969] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   53.410782][ T5986] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.43'.
[   53.639486][   T54] Bluetooth: hci0: command tx timeout
[   53.723200][   T54] Bluetooth: hci1: command tx timeout
[   53.723371][ T5838] Bluetooth: hci2: command tx timeout
[   54.476688][ T5838] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[   54.832541][ T6025] netlink: 17 bytes leftover after parsing attributes in process `syz.2.58'.
[   54.838824][ T6025] netlink: zone id is out of range
[   54.840851][ T6025] netlink: zone id is out of range
[   54.842590][ T6025] netlink: zone id is out of range
[   54.844372][ T6025] netlink: zone id is out of range
[   54.846123][ T6025] netlink: zone id is out of range
[   54.850287][ T6025] netlink: zone id is out of range
[   54.852033][ T6025] netlink: zone id is out of range
[   54.853744][ T6025] netlink: zone id is out of range
[   54.855395][ T6025] netlink: zone id is out of range
[   54.862240][ T6025] netlink: zone id is out of range
[   54.924362][ T6034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.62'.
[   55.024436][ T6046] netlink: 'syz.2.68': attribute type 10 has an invalid length.
[   55.205861][ T6062] netlink: 196 bytes leftover after parsing attributes in process `syz.2.76'.
[   55.284248][ T6068] netlink: 'syz.0.79': attribute type 21 has an invalid length.
[   55.294574][ T6068] netlink: 'syz.0.79': attribute type 15 has an invalid length.
[   55.299298][ T6068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.79'.
[   55.307124][ T6068] IPv6: NLM_F_CREATE should be specified when creating new route
[   55.314453][ T6068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   55.316999][ T6068] IPv6: NLM_F_CREATE should be set when creating new route
[   55.319558][ T6068] IPv6: NLM_F_CREATE should be set when creating new route
[   55.321899][ T6068] IPv6: NLM_F_CREATE should be set when creating new route
[   55.412030][ T6078] veth1_macvtap: left promiscuous mode
[   55.870929][ T6112] netlink: 'syz.1.99': attribute type 2 has an invalid length.
[   55.874657][ T6112] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.99'.
[   55.875024][ T6123] netlink: 'syz.0.103': attribute type 39 has an invalid length.
[   56.037664][ T6133] syz.2.108 uses obsolete (PF_INET,SOCK_PACKET)
[   56.534194][ T6140] netlink: 'syz.2.111': attribute type 2 has an invalid length.
[   56.536939][ T6140] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.111'.
[   56.566009][ T6145] C: renamed from team_slave_0 (while UP)
[   56.575430][ T6145] netlink: 'syz.0.113': attribute type 4 has an invalid length.
[   56.578854][ T6145] netlink: 116 bytes leftover after parsing attributes in process `syz.0.113'.
[   56.765450][ T6148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.114'.
[   56.850446][ T6160] netlink: 3 bytes leftover after parsing attributes in process `syz.2.119'.
[   56.876778][ T6162] netlink: 'syz.1.120': attribute type 3 has an invalid length.
[   56.925175][ T6170] bridge0: port 3(veth1_to_team) entered blocking state
[   56.927684][ T6170] bridge0: port 3(veth1_to_team) entered disabled state
[   56.930077][ T6170] veth1_to_team: entered allmulticast mode
[   56.934187][ T6170] veth1_to_team: entered promiscuous mode
[   56.937189][ T6170] bridge0: port 3(veth1_to_team) entered blocking state
[   56.939781][ T6170] bridge0: port 3(veth1_to_team) entered forwarding state
[   57.045756][ T6182] netlink: 'syz.0.128': attribute type 21 has an invalid length.
[   57.833312][ T6212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.566465][ T6253] netlink: 'syz.0.160': attribute type 10 has an invalid length.
[   58.569209][ T6253] __nla_validate_parse: 4 callbacks suppressed
[   58.569216][ T6253] netlink: 55 bytes leftover after parsing attributes in process `syz.0.160'.
[   59.077368][ T6273] Zero length message leads to an empty skb
[   59.091041][ T6272] netlink: 'syz.0.169': attribute type 21 has an invalid length.
[   59.093755][ T6272] netlink: 156 bytes leftover after parsing attributes in process `syz.0.169'.
[   60.173382][ T5838] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[   60.336587][ T6311] netlink: 'syz.2.185': attribute type 10 has an invalid length.
[   60.342313][ T6311] veth1_vlan: entered allmulticast mode
[   60.349791][ T6311] team0: Device veth1_vlan failed to register rx_handler
[   60.676899][ T6325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.191'.
[   61.634349][ T6378] netlink: 'syz.2.215': attribute type 39 has an invalid length.
[   61.636889][ T6378] netlink: 'syz.2.215': attribute type 4 has an invalid length.
[   61.640101][ T6378] netlink: 152 bytes leftover after parsing attributes in process `syz.2.215'.
[   61.670738][ T6380] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   61.675344][ T6380] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   61.680733][ T6380] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   61.754155][ T6390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.221'.
[   61.903042][ T6394] netlink: 'syz.2.223': attribute type 29 has an invalid length.
[   61.949265][ T6398] netlink: 22 bytes leftover after parsing attributes in process `syz.2.225'.
[   61.990684][ T6404] netlink: 'syz.1.229': attribute type 29 has an invalid length.
[   62.036340][ T6408] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.230'.
[   62.114631][ T6414] warning: `syz.2.232' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.685956][ T6438] syzkaller0: entered promiscuous mode
[   62.688049][ T6438] syzkaller0: entered allmulticast mode
[   63.336541][ T6450] syzkaller0: tun_chr_ioctl cmd 1074025677
[   63.338735][ T6450] syzkaller0: linktype set to 0
[   64.848536][ T6477] validate_nla: 1 callbacks suppressed
[   64.848549][ T6477] netlink: 'syz.2.259': attribute type 2 has an invalid length.
[   64.852994][ T6477] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.259'.
[   64.856054][ T6477] nbd: must specify at least one socket
[   65.139514][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   65.179939][ T6484] netlink: 33 bytes leftover after parsing attributes in process `syz.2.262'.
[   65.183652][ T6484] netlink: 33 bytes leftover after parsing attributes in process `syz.2.262'.
[   65.613138][ T6514] netlink: 144 bytes leftover after parsing attributes in process `syz.1.275'.
[   65.729227][ T6522] netlink: 'syz.1.279': attribute type 15 has an invalid length.
[   66.077696][ T6527] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   66.080255][ T6527] netlink: 17 bytes leftover after parsing attributes in process `syz.2.281'.
[   66.744145][ T6537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'.
[   66.752449][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[   66.860122][ T6547] netlink: 'syz.1.289': attribute type 10 has an invalid length.
[   67.817820][ T6562] syzkaller0: create flow: hash 1126725516 index 1
[   67.836656][ T6562] syzkaller0: delete flow: hash 1126725516 index 1
[   70.142639][ T6635] netlink: 180 bytes leftover after parsing attributes in process `syz.1.329'.
[   70.145951][ T6635] netlink: 164 bytes leftover after parsing attributes in process `syz.1.329'.
[   70.157964][ T6635] netlink: 164 bytes leftover after parsing attributes in process `syz.1.329'.
[   70.243952][ T6644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'.
[   70.247100][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'.
[   70.255545][ T6644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'.
[   70.261431][ T6643] netlink: 'syz.0.333': attribute type 6 has an invalid length.
[   70.264030][ T6643] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.333'.
[   70.386785][   T54] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   85.798674][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.805067][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.807759][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.810521][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.813437][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.852767][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.855876][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.858611][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.861596][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.865158][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.055415][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   86.058447][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   86.061082][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   86.064472][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   86.067221][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.878157][ T5838] Bluetooth: hci3: command tx timeout
[   87.957579][ T5838] Bluetooth: hci4: command tx timeout
[   88.107638][ T5838] Bluetooth: hci5: command tx timeout
[   89.947600][ T5838] Bluetooth: hci3: command tx timeout
[   90.027658][ T5838] Bluetooth: hci4: command tx timeout
[   90.187578][ T5838] Bluetooth: hci5: command tx timeout
[   92.027569][ T5838] Bluetooth: hci3: command tx timeout
[   92.118515][ T5838] Bluetooth: hci4: command tx timeout
[   92.267579][ T5838] Bluetooth: hci5: command tx timeout
[   94.107630][ T5838] Bluetooth: hci3: command tx timeout
[   94.187606][ T5838] Bluetooth: hci4: command tx timeout
[   94.347617][ T5838] Bluetooth: hci5: command tx timeout
[  146.755114][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.758381][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.760991][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.764515][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.767178][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.820632][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.823679][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.826379][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.831392][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.834272][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  147.009590][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  147.012739][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  147.015474][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  147.018970][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  147.021705][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  148.827608][ T5838] Bluetooth: hci6: command tx timeout
[  148.907715][ T5838] Bluetooth: hci7: command tx timeout
[  149.077645][ T5838] Bluetooth: hci8: command tx timeout
[  150.907667][ T5838] Bluetooth: hci6: command tx timeout
[  150.987645][ T5838] Bluetooth: hci7: command tx timeout
[  151.157666][ T5838] Bluetooth: hci8: command tx timeout
[  152.997709][ T5838] Bluetooth: hci6: command tx timeout
[  153.067718][ T5838] Bluetooth: hci7: command tx timeout
[  153.227663][ T5838] Bluetooth: hci8: command tx timeout
[  155.077679][ T5838] Bluetooth: hci6: command tx timeout
[  155.147735][ T5838] Bluetooth: hci7: command tx timeout
[  155.307623][ T5838] Bluetooth: hci8: command tx timeout
[  170.190201][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  175.427484][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  175.429756][    C0] rcu: 	0-....: (10499 ticks this GP) idle=fd2c/1/0x4000000000000000 softirq=15748/15748 fqs=4600
[  175.434182][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  175.436218][    C0] rcu: 	 number:  1046903          0            0
[  175.438255][    C0] rcu: 	cputime:    23993      28486           78   ==> 52480(ms)
[  175.440802][    C0] rcu: 	(t=10500 jiffies g=8709 q=2069 ncpus=2)
[  175.442839][    C0] CPU: 0 UID: 0 PID: 6664 Comm: syz.2.343 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  175.442848][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.442853][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  175.442869][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  175.442875][    C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000206
[  175.442882][    C0] RAX: b5e994c2fee7e700 RBX: 1ffff92000000ebc RCX: b5e994c2fee7e700
[  175.442887][    C0] RDX: 0000000000000003 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  175.442891][    C0] RBP: ffffc90000007698 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  175.442895][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffffff8e144400
[  175.442900][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  175.442904][    C0] FS:  00007fd3d36786c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  175.442909][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.442914][    C0] CR2: 00002000000029c0 CR3: 00000000237b0000 CR4: 00000000000006f0
[  175.442939][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  175.442944][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  175.442948][    C0] Call Trace:
[  175.442952][    C0]  <IRQ>
[  175.442954][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.442966][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  175.442978][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.442989][    C0]  __rcu_read_unlock+0x84/0xe0
[  175.442999][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.443006][    C0]  unwind_next_frame+0x19ae/0x2390
[  175.443016][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.443023][    C0]  ? netif_set_mtu_ext+0x438/0x620
[  175.443034][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  175.443044][    C0]  arch_stack_walk+0x11c/0x150
[  175.443056][    C0]  ? do_setlink+0x91a/0x41c0
[  175.443065][    C0]  stack_trace_save+0x9c/0xe0
[  175.443074][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  175.443086][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.443093][    C0]  kasan_save_track+0x3e/0x80
[  175.443103][    C0]  ? kasan_save_track+0x3e/0x80
[  175.443111][    C0]  ? kasan_save_free_info+0x46/0x50
[  175.443119][    C0]  ? __kasan_slab_free+0x62/0x70
[  175.443124][    C0]  ? kfree+0x18e/0x440
[  175.443130][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  175.443138][    C0]  ? rcu_core+0xca8/0x1710
[  175.443144][    C0]  ? handle_softirqs+0x286/0x870
[  175.443151][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  175.443158][    C0]  ? irq_exit_rcu+0x9/0x30
[  175.443164][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.443173][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.443180][    C0]  ? unwind_next_frame+0x22/0x2390
[  175.443186][    C0]  ? arch_stack_walk+0x11c/0x150
[  175.443193][    C0]  ? stack_trace_save+0x9c/0xe0
[  175.443201][    C0]  ? kasan_save_track+0x3e/0x80
[  175.443209][    C0]  ? kasan_save_free_info+0x46/0x50
[  175.443217][    C0]  ? __kasan_slab_free+0x62/0x70
[  175.443222][    C0]  ? kmem_cache_free+0x18f/0x400
[  175.443228][    C0]  ? netlink_broadcast_filtered+0x103e/0x1140
[  175.443238][    C0]  ? nlmsg_notify+0xf0/0x1a0
[  175.443243][    C0]  ? fib_table_delete+0xca9/0xf80
[  175.443250][    C0]  ? fib_magic+0x2e4/0x390
[  175.443257][    C0]  ? fib_del_ifaddr+0x28b/0x1480
[  175.443264][    C0]  ? fib_inetaddr_event+0xbb/0x190
[  175.443272][    C0]  ? notifier_call_chain+0x1b6/0x3e0
[  175.443279][    C0]  ? blocking_notifier_call_chain+0x6a/0x90
[  175.443286][    C0]  ? __inet_del_ifa+0x87d/0x1040
[  175.443293][    C0]  ? inetdev_event+0x632/0x15b0
[  175.443300][    C0]  ? notifier_call_chain+0x1b6/0x3e0
[  175.443306][    C0]  ? netif_set_mtu_ext+0x438/0x620
[  175.443326][    C0]  kasan_save_free_info+0x46/0x50
[  175.443334][    C0]  __kasan_slab_free+0x62/0x70
[  175.443340][    C0]  ? slab_free_after_rcu_debug+0x60/0x2a0
[  175.443348][    C0]  kfree+0x18e/0x440
[  175.443355][    C0]  ? rcu_core+0xc34/0x1710
[  175.443362][    C0]  slab_free_after_rcu_debug+0x60/0x2a0
[  175.443371][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  175.443379][    C0]  ? rcu_core+0xc34/0x1710
[  175.443385][    C0]  rcu_core+0xca8/0x1710
[  175.443400][    C0]  ? __pfx_rcu_core+0x10/0x10
[  175.443410][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  175.443418][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  175.443436][    C0]  handle_softirqs+0x286/0x870
[  175.443445][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  175.443455][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  175.443467][    C0]  __irq_exit_rcu+0xca/0x1f0
[  175.443474][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.443486][    C0]  irq_exit_rcu+0x9/0x30
[  175.443492][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.443501][    C0]  </IRQ>
[  175.443503][    C0]  <TASK>
[  175.443505][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.443512][    C0] RIP: 0010:unwind_next_frame+0x22/0x2390
[  175.443519][    C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 00 00 00 00 fc ff df <48> 8d 5f 48 48 89 d8 48 c1 e8 03 48 89 44 24 30 80 3c 28 00 74 08
[  175.443524][    C0] RSP: 0018:ffffc90007e35e38 EFLAGS: 00000292
[  175.443531][    C0] RAX: 0000000000000001 RBX: ffffc90007e35fc0 RCX: b5e994c2fee7e700
[  175.443535][    C0] RDX: dffffc0000000000 RSI: ffffffff82230b1e RDI: ffffc90007e35f08
[  175.443539][    C0] RBP: dffffc0000000000 R08: ffffc90007e35fd0 R09: 0000000000000000
[  175.443543][    C0] R10: ffffc90007e35f58 R11: ffffffff81acf520 R12: ffff8881087fd640
[  175.443548][    C0] R13: 0000000000000000 R14: ffffc90007e35f08 R15: ffffc90007e35f08
[  175.443554][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  175.443564][    C0]  ? kasan_save_track+0x3e/0x80
[  175.443576][    C0]  ? unwind_next_frame+0x19ae/0x2390
[  175.443585][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.443593][    C0]  ? stack_trace_save+0x9c/0xe0
[  175.443601][    C0]  ? kasan_save_track+0x3e/0x80
[  175.443611][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  175.443620][    C0]  arch_stack_walk+0x11c/0x150
[  175.443630][    C0]  ? kasan_save_track+0x3e/0x80
[  175.443642][    C0]  stack_trace_save+0x9c/0xe0
[  175.443650][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  175.443661][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.443668][    C0]  kasan_save_track+0x3e/0x80
[  175.443677][    C0]  ? kasan_save_track+0x3e/0x80
[  175.443739][    C0]  ? netlink_broadcast_filtered+0x103e/0x1140
[  175.443754][    C0]  kasan_save_free_info+0x46/0x50
[  175.443762][    C0]  __kasan_slab_free+0x62/0x70
[  175.443768][    C0]  kmem_cache_free+0x18f/0x400
[  175.443778][    C0]  netlink_broadcast_filtered+0x103e/0x1140
[  175.443789][    C0]  ? __build_skb_around+0x257/0x3e0
[  175.443797][    C0]  ? __alloc_skb+0x1bc/0x2d0
[  175.443808][    C0]  nlmsg_notify+0xf0/0x1a0
[  175.443816][    C0]  fib_table_delete+0xca9/0xf80
[  175.443834][    C0]  ? __pfx_fib_table_delete+0x10/0x10
[  175.443844][    C0]  ? l3mdev_fib_table+0x18/0x160
[  175.443853][    C0]  ? fib_new_table+0x10a/0x2d0
[  175.443862][    C0]  fib_magic+0x2e4/0x390
[  175.443873][    C0]  ? __pfx_fib_magic+0x10/0x10
[  175.443887][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.443900][    C0]  fib_del_ifaddr+0x28b/0x1480
[  175.443909][    C0]  ? addr_event+0x83/0x470
[  175.443919][    C0]  ? inetaddr_event+0xe3/0x140
[  175.443931][    C0]  fib_inetaddr_event+0xbb/0x190
[  175.443941][    C0]  notifier_call_chain+0x1b6/0x3e0
[  175.443952][    C0]  blocking_notifier_call_chain+0x6a/0x90
[  175.443962][    C0]  __inet_del_ifa+0x87d/0x1040
[  175.443977][    C0]  inetdev_event+0x632/0x15b0
[  175.443987][    C0]  ? __pfx_inetdev_event+0x10/0x10
[  175.443999][    C0]  notifier_call_chain+0x1b6/0x3e0
[  175.444010][    C0]  netif_set_mtu_ext+0x438/0x620
[  175.444020][    C0]  ? __pfx_netif_set_mtu_ext+0x10/0x10
[  175.444033][    C0]  ? validate_linkmsg+0x765/0x950
[  175.444045][    C0]  do_setlink+0x91a/0x41c0
[  175.444054][    C0]  ? __kernel_text_address+0xd/0x40
[  175.444061][    C0]  ? arch_stack_walk+0xfc/0x150
[  175.444071][    C0]  ? __pfx_do_setlink+0x10/0x10
[  175.444086][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.444096][    C0]  ? __mutex_trylock_common+0x153/0x260
[  175.444106][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  175.444116][    C0]  ? rcu_is_watching+0x15/0xb0
[  175.444124][    C0]  ? trace_contention_end+0x39/0x120
[  175.444132][    C0]  ? __mutex_lock+0x330/0xe80
[  175.444142][    C0]  ? __pfx_aa_get_newest_label+0x10/0x10
[  175.444154][    C0]  ? rtnl_newlink+0x8db/0x1c70
[  175.444163][    C0]  ? rcu_is_watching+0x15/0xb0
[  175.444171][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  175.444184][    C0]  ? ns_capable+0x8a/0xf0
[  175.444194][    C0]  ? rtnl_link_get_net_capable+0x16a/0x350
[  175.444202][    C0]  rtnl_newlink+0x160b/0x1c70
[  175.444217][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  175.444226][    C0]  ? irqentry_exit+0x74/0x90
[  175.444234][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.444245][    C0]  ? unwind_next_frame+0xa5/0x2390
[  175.444257][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.444272][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  175.444282][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  175.444288][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  175.444296][    C0]  ? kernel_text_address+0xa5/0xe0
[  175.444307][    C0]  ? __lock_acquire+0xab9/0xd20
[  175.444324][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  175.444334][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  175.444345][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  175.444355][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  175.444372][    C0]  netlink_rcv_skb+0x208/0x470
[  175.444379][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  175.444389][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.444401][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.444408][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.444417][    C0]  netlink_unicast+0x75c/0x8e0
[  175.444431][    C0]  netlink_sendmsg+0x805/0xb30
[  175.444442][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.444450][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  175.444459][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.444468][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.444475][    C0]  __sock_sendmsg+0x21c/0x270
[  175.444486][    C0]  ____sys_sendmsg+0x505/0x830
[  175.444496][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.444508][    C0]  ? import_iovec+0x74/0xa0
[  175.444516][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  175.444525][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.444547][    C0]  ? __fget_files+0x2a/0x420
[  175.444555][    C0]  ? __fget_files+0x3a0/0x420
[  175.444567][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  175.444573][    C0]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  175.444583][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.444595][    C0]  ? rcu_is_watching+0x15/0xb0
[  175.444605][    C0]  ? do_syscall_64+0xbe/0x3b0
[  175.444615][    C0]  do_syscall_64+0xfa/0x3b0
[  175.444625][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.444630][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.444639][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.444645][    C0] RIP: 0033:0x7fd3d278e9a9
[  175.444652][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.444657][    C0] RSP: 002b:00007fd3d3678038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.444664][    C0] RAX: ffffffffffffffda RBX: 00007fd3d29b5fa0 RCX: 00007fd3d278e9a9
[  175.444668][    C0] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 000000000000000b
[  175.444672][    C0] RBP: 00007fd3d2810d69 R08: 0000000000000000 R09: 0000000000000000
[  175.444676][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.444680][    C0] R13: 0000000000000000 R14: 00007fd3d29b5fa0 R15: 00007ffc21750458
[  175.444709][    C0]  </TASK>
[  175.808633][    C0] sched: DL replenish lagged too much
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
11:42:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000068d0
R8 =ffff888106da8237 R9 =1ffff11020db5046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58aa R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd3d36786c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000029c0 CR3=00000000237b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd3d2986478 00007fd3d2986450 XMM03=00007fd3d2986488 00007fd3d2986480
XMM04=00007fd3d34ed100 00007fd3d2986440 XMM05=00007fd3d2986458 00007fd3d29864a0
XMM06=00007fd3d2986498 00007fd3d2986490 XMM07=00007fd3d2986488 00007fd3d2986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd3d2811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4b390 RBX=ffff88813663b200 RCX=ffff888108cc8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007307800 RSP=ffffc90007307698
R8 =ffffffff8fa1eaf7 R9 =1ffffffff1f43d5e R10=dffffc0000000000 R11=fffffbfff1f43d5f
R12=1ffff1100960838d R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c68
RIP=ffffffff81c01dd1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005640d54f5e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007efe84786d00
XMM02=0065a00300000035 9803000800000000 XMM03=02a810006380040a 1000060c02de0008
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=96030002000f9403 0002000f00000037 XMM07=000f900300000000 0f88030208000f80
XMM08=030100000c080608 80a1909000000036 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
