last executing test programs:

19.105609663s ago: executing program 1 (id=640):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6)

19.10515788s ago: executing program 1 (id=641):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.695741186s ago: executing program 1 (id=647):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

18.638255995s ago: executing program 1 (id=652):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)

18.561040048s ago: executing program 1 (id=657):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x20004000)

18.48425585s ago: executing program 0 (id=658):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000001801000020786d2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

18.483361249s ago: executing program 1 (id=659):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="620a29113707b440d2c0060000000071105cdb"], &(0x7f0000000480)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0xffffffffffffffff}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c118030029", 0x5}, {&(0x7f0000000240)="88c3e0efc969296659057f0b2af69ae3de806a417ca8b4ddc5ecfd4429deee167e7796e2686e2a5933663c59ba5e800a6c2513b1be310b1e3f2b50a9ca624bf36108", 0x42}], 0x2}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

18.483188714s ago: executing program 0 (id=660):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

18.415235087s ago: executing program 0 (id=661):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000a000000000000000000000b0300000000000000000000030000000005000000010000001c00000000000000000000030000000004000000020000000e000000000000000300000d"], 0x0, 0x82, 0x0, 0x1}, 0x28)

18.414981817s ago: executing program 0 (id=662):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000a0001", 0x37}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

18.352547045s ago: executing program 2 (id=663):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

18.351860863s ago: executing program 0 (id=664):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
close(r4)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xc68, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
r6 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a)

18.351357758s ago: executing program 2 (id=665):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001114010000000000000000000800010000000000080003"], 0x30}}, 0x0)

18.265928787s ago: executing program 2 (id=666):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x49, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a392f050b038da1880b25181aa59d943be3f4aed5", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000a0000000500000007000000c1000000", @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20)

18.265618413s ago: executing program 2 (id=667):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_netfilter(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002280)={0x24, 0x6, 0x5, 0x401, 0x70bd2b, 0x25dfdbff, {0x3, 0x0, 0xa}, [@nested={0xd, 0x133, 0x0, 0x1, [@generic="066d9192403de332e4"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc000)

18.265036621s ago: executing program 2 (id=668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000600000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000310"], 0x108}}, 0x0)

18.096397727s ago: executing program 2 (id=669):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40005)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff)

15.045767913s ago: executing program 0 (id=670):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7b, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb81371416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d83", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x4}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000010"], 0x0, 0x37}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600), 0x12)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x2, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f00000005c0)="84b68f730e4adcbd4a8ce26d422d5d2a215cbd0c8d99abedbf4118c2e2ce741951c53a49ced9521a5b1ade67487d95c6a0adb6b56d8a3c866276ffd36d5b94f747a8370cdae65caa4480633537e49f07d9e830c0380ef1102d54e818b81e6cb25dd6e9bc08"}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, 0x0, 0x3000c085)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x240080c5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

2.993959617s ago: executing program 32 (id=659):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="620a29113707b440d2c0060000000071105cdb"], &(0x7f0000000480)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0xffffffffffffffff}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c118030029", 0x5}, {&(0x7f0000000240)="88c3e0efc969296659057f0b2af69ae3de806a417ca8b4ddc5ecfd4429deee167e7796e2686e2a5933663c59ba5e800a6c2513b1be310b1e3f2b50a9ca624bf36108", 0x42}], 0x2}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

2.9447233s ago: executing program 33 (id=669):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40005)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff)

0s ago: executing program 34 (id=670):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7b, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb81371416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d83", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x4}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000010"], 0x0, 0x37}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600), 0x12)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x2, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f00000005c0)="84b68f730e4adcbd4a8ce26d422d5d2a215cbd0c8d99abedbf4118c2e2ce741951c53a49ced9521a5b1ade67487d95c6a0adb6b56d8a3c866276ffd36d5b94f747a8370cdae65caa4480633537e49f07d9e830c0380ef1102d54e818b81e6cb25dd6e9bc08"}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, 0x0, 0x3000c085)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x240080c5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13613' (ED25519) to the list of known hosts.
syzkaller login: [   56.881502][ T5835] cgroup: Unknown subsys name 'net'
[   57.057316][ T5835] cgroup: Unknown subsys name 'cpuset'
[   57.063376][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.999412][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.090429][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.095111][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.098921][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.103091][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.106637][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.120467][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.125710][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.128619][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.132203][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.135448][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.177614][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.180630][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.183581][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.190976][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.195564][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.451686][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.515521][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.618632][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.621899][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.625040][ T5854] bridge_slave_0: entered allmulticast mode
[   64.628198][ T5854] bridge_slave_0: entered promiscuous mode
[   64.667095][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.669614][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.672170][ T5854] bridge_slave_1: entered allmulticast mode
[   64.675723][ T5854] bridge_slave_1: entered promiscuous mode
[   64.734828][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.756181][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.759248][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.761861][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.766603][ T5850] bridge_slave_0: entered allmulticast mode
[   64.769711][ T5850] bridge_slave_0: entered promiscuous mode
[   64.778814][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.781143][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.783680][ T5850] bridge_slave_1: entered allmulticast mode
[   64.786395][ T5850] bridge_slave_1: entered promiscuous mode
[   64.817435][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   64.848587][ T5854] team0: Port device team_slave_0 added
[   64.869823][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.874789][ T5854] team0: Port device team_slave_1 added
[   64.879183][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.952046][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.954801][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.957099][ T5859] bridge_slave_0: entered allmulticast mode
[   64.960073][ T5859] bridge_slave_0: entered promiscuous mode
[   64.963795][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.966026][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.975368][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.981197][ T5850] team0: Port device team_slave_0 added
[   64.985148][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.987981][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.990897][ T5859] bridge_slave_1: entered allmulticast mode
[   64.994930][ T5859] bridge_slave_1: entered promiscuous mode
[   65.012077][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.015053][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.025382][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.031826][ T5850] team0: Port device team_slave_1 added
[   65.079691][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.082475][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.094797][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.103920][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.110485][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.115015][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.117822][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.128063][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.168827][ T5854] hsr_slave_0: entered promiscuous mode
[   65.171656][ T5854] hsr_slave_1: entered promiscuous mode
[   65.185528][ T5859] team0: Port device team_slave_0 added
[   65.190205][ T5859] team0: Port device team_slave_1 added
[   65.266154][ T5850] hsr_slave_0: entered promiscuous mode
[   65.269032][ T5850] hsr_slave_1: entered promiscuous mode
[   65.271624][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.275393][ T5850] Cannot create hsr debugfs directory
[   65.282064][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.285203][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.294634][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.314662][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.317232][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.326941][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.430935][ T5859] hsr_slave_0: entered promiscuous mode
[   65.433426][ T5859] hsr_slave_1: entered promiscuous mode
[   65.435509][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   65.437208][ T5859] Cannot create hsr debugfs directory
[   65.693595][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.717822][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.739340][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.746838][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.800753][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.808941][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.834808][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.848836][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.893992][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.904347][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.917513][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.925123][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.057569][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.078335][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.099347][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   66.122130][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.125333][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.140983][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.144006][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.162021][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.163825][   T54] Bluetooth: hci1: command tx timeout
[   66.167598][ T5858] Bluetooth: hci0: command tx timeout
[   66.190063][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.198492][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.201362][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.220918][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.223940][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.243710][   T54] Bluetooth: hci2: command tx timeout
[   66.259680][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   66.284864][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.287178][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.305426][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.308298][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.513168][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.552054][ T5859] veth0_vlan: entered promiscuous mode
[   66.561516][ T5859] veth1_vlan: entered promiscuous mode
[   66.589031][ T5859] veth0_macvtap: entered promiscuous mode
[   66.609449][ T5859] veth1_macvtap: entered promiscuous mode
[   66.627095][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.645761][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.658636][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.668639][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.685725][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.692493][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.710306][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.714118][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.789677][ T5850] veth0_vlan: entered promiscuous mode
[   66.806026][ T5850] veth1_vlan: entered promiscuous mode
[   66.808535][ T5854] veth0_vlan: entered promiscuous mode
[   66.837969][ T5854] veth1_vlan: entered promiscuous mode
[   66.856868][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.859742][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.901468][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.905673][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.911094][ T5850] veth0_macvtap: entered promiscuous mode
[   66.938431][ T5854] veth0_macvtap: entered promiscuous mode
[   66.955304][ T5850] veth1_macvtap: entered promiscuous mode
[   66.958712][ T5854] veth1_macvtap: entered promiscuous mode
[   66.981149][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.004305][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.007607][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.019764][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.050418][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.056999][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.078877][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.085139][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.096838][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.171869][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.189073][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.192240][ T5919] C: renamed from team_slave_0 (while UP)
[   67.206904][ T5919] netlink: 'syz.2.4': attribute type 3 has an invalid length.
[   67.209992][ T5919] netlink: 'syz.2.4': attribute type 1 has an invalid length.
[   67.213324][ T5919] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   67.219818][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.232084][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.233794][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.268598][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.294351][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.297879][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.448081][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.454850][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.654519][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.657558][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.997823][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.003957][ T5938] netlink: 'syz.1.9': attribute type 1 has an invalid length.
[   68.011565][ T5938] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   68.022472][ T5935] netlink: 'syz.2.7': attribute type 4 has an invalid length.
[   68.048806][ T5935] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.112633][    C0] hrtimer: interrupt took 38881 ns
[   68.305482][   T54] Bluetooth: hci1: command tx timeout
[   68.307393][   T54] Bluetooth: hci0: command tx timeout
[   68.327139][   T54] Bluetooth: hci2: command tx timeout
[   68.795582][ T5935] .`: renamed from bond0 (while UP)
[   68.939552][ T5954] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.119802][ T5971] netlink: 'syz.2.23': attribute type 4 has an invalid length.
[   69.324667][ T5985] netlink: 76 bytes leftover after parsing attributes in process `syz.2.30'.
[   69.412500][ T5992] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   69.704110][ T6008] netlink: 'syz.0.39': attribute type 10 has an invalid length.
[   69.831680][ T6008] bond0: (slave bond_slave_0): Releasing backup interface
[   70.181679][ T6029] netlink: 'syz.0.50': attribute type 39 has an invalid length.
[   70.332953][ T5858] Bluetooth: hci0: command tx timeout
[   70.335292][ T5858] Bluetooth: hci1: command tx timeout
[   70.436066][   T54] Bluetooth: hci2: command tx timeout
[   70.511437][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.52'.
[   70.735568][ T6035] netlink: set zone limit has 4 unknown bytes
[   70.908677][   T54] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[   71.044943][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.63'.
[   71.051344][ T6055] openvswitch: netlink: Missing key (keys=40, expected=100)
[   71.217291][ T6069] Y4`Ҙ: renamed from lo (while UP)
[   71.247157][ T6073] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.72'.
[   71.287898][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.290106][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.554768][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[   71.643258][ T6087] : entered promiscuous mode
[   72.342393][ T6100] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   72.403476][ T5858] Bluetooth: hci0: command tx timeout
[   72.405346][   T54] Bluetooth: hci1: command tx timeout
[   72.485649][   T54] Bluetooth: hci2: command tx timeout
[   73.640046][ T6158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.111'.
[   73.657654][ T6155] netlink: 'syz.2.109': attribute type 5 has an invalid length.
[   73.672880][ T6155] netlink: 713 bytes leftover after parsing attributes in process `syz.2.109'.
[   73.676482][ T6155] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.109'.
[   73.680105][ T6155] netlink: 'syz.2.109': attribute type 5 has an invalid length.
[   73.687084][ T6155] netlink: 713 bytes leftover after parsing attributes in process `syz.2.109'.
[   73.822309][ T6167] netlink: 44 bytes leftover after parsing attributes in process `syz.0.115'.
[   73.835230][ T6167] netlink: 43 bytes leftover after parsing attributes in process `syz.0.115'.
[   73.838089][ T6167] netlink: 'syz.0.115': attribute type 5 has an invalid length.
[   73.840629][ T6167] netlink: 43 bytes leftover after parsing attributes in process `syz.0.115'.
[   73.876365][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   73.879173][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   75.101344][ T6211] netlink: 277 bytes leftover after parsing attributes in process `syz.2.131'.
[   76.633318][ T6239] netlink: 'syz.0.143': attribute type 10 has an invalid length.
[   80.254440][    C1] Illegal XDP return value 16128 on prog  (id 43) dev bond_slave_1, expect packet loss!
[   83.446576][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2223696283 wd_nsec: 2223696098
[   85.243372][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.250423][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.297572][ T6239] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   85.735343][ T6263] netlink: 'syz.1.154': attribute type 12 has an invalid length.
[   85.753004][ T6263] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.154'.
[   85.831418][ T6275] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.160'.
[   85.929866][ T6281] netlink: 'syz.2.163': attribute type 2 has an invalid length.
[   85.936783][ T6281] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   85.995997][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.164'.
[   86.190552][ T6289] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   86.483765][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[   86.656100][   T24] cfg80211: failed to load regulatory.db
[   87.147688][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'.
[   87.156051][ T6306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.174'.
[   87.582780][ T6319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.180'.
[   87.585944][ T6319] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   87.817346][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.076417][ T6329] syz.1.183 (6329) used greatest stack depth: 19576 bytes left
[   88.190986][ T6341] netlink: 'syz.0.190': attribute type 11 has an invalid length.
[   88.194868][ T6341] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.190'.
[   89.021946][ T6340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.319158][ T6352] netlink: 'syz.0.192': attribute type 2 has an invalid length.
[   91.347561][ T6354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.442349][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'.
[   91.460264][ T6360] netlink: 76 bytes leftover after parsing attributes in process `syz.0.198'.
[   91.648972][ T6364] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.199'.
[   91.936636][ T6370] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   91.960802][ T6370] syzkaller0: entered promiscuous mode
[   91.970912][ T6370] syzkaller0: entered allmulticast mode
[   95.871771][ T6394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.207'.
[   96.281713][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[   96.471087][ T6426] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.224'.
[   96.568255][ T6418] netlink: 'syz.0.220': attribute type 10 has an invalid length.
[   96.788450][ T6418] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   97.413489][ T6418] syz.0.220 (6418) used greatest stack depth: 19064 bytes left
[   97.918081][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   98.025288][ T6470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.241'.
[   98.029197][ T6470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.241'.
[   98.071866][ T6472] Zero length message leads to an empty skb
[   98.357146][ T6478] veth0_vlan: entered allmulticast mode
[   98.500333][ T6492] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.252'.
[   98.531836][ T6492] netlink: 61831 bytes leftover after parsing attributes in process `syz.1.252'.
[   98.790155][ T6496] netlink: 'syz.1.253': attribute type 3 has an invalid length.
[   98.794595][ T6496] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.253'.
[   98.988333][ T6514] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.262'.
[   99.101412][ T6525] netlink: 'syz.0.267': attribute type 3 has an invalid length.
[   99.216219][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'.
[   99.341164][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   99.681440][ T6566] netlink: 188 bytes leftover after parsing attributes in process `syz.0.277'.
[   99.860475][ T6584] netlink: 'syz.0.285': attribute type 3 has an invalid length.
[   99.990695][ T6595] netlink: 'syz.1.291': attribute type 2 has an invalid length.
[  100.127079][ T6597] sit0: entered promiscuous mode
[  100.946727][ T6646] netlink: 'syz.2.315': attribute type 29 has an invalid length.
[  100.952520][ T6646] netlink: 'syz.2.315': attribute type 29 has an invalid length.
[  100.956961][ T6646] netlink: 'syz.2.315': attribute type 29 has an invalid length.
[  100.961966][ T6646] netlink: 'syz.2.315': attribute type 29 has an invalid length.
[  101.788564][ T6692] __nla_validate_parse: 8 callbacks suppressed
[  101.788582][ T6692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.337'.
[  101.795911][ T6692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.337'.
[  102.116256][ T6709] =======================================================
[  102.116256][ T6709] WARNING: The mand mount option has been deprecated and
[  102.116256][ T6709]          and is ignored by this kernel. Remove the mand
[  102.116256][ T6709]          option from the mount to silence this warning.
[  102.116256][ T6709] =======================================================
[  102.235076][ T6715] netlink: 'syz.1.346': attribute type 12 has an invalid length.
[  102.238435][ T6715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.346'.
[  102.327504][ T6719] syz.1.346 (6719) used obsolete PPPIOCDETACH ioctl
[  102.400426][ T6715] syz.1.346 uses obsolete (PF_INET,SOCK_PACKET)
[  102.763747][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'.
[  102.960893][   T54] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  103.012008][ T6744] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.357'.
[  103.018966][ T6744] netlink: zone id is out of range
[  103.022007][ T6744] netlink: get zone limit has 8 unknown bytes
[  103.431376][ T6759] netlink: 'syz.1.362': attribute type 29 has an invalid length.
[  103.440972][ T6759] netlink: 'syz.1.362': attribute type 29 has an invalid length.
[  103.505790][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'.
[  103.515039][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'.
[  103.812321][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[  104.269473][ T6809] netlink: 'syz.2.382': attribute type 10 has an invalid length.
[  104.278008][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.382'.
[  104.282013][ T6809] ipvlan1: entered promiscuous mode
[  104.286622][ T6809] ipvlan1: entered allmulticast mode
[  104.288499][ T6809] veth0_vlan: entered allmulticast mode
[  104.296284][ T6809] bridge0: port 3(ipvlan1) entered blocking state
[  104.298833][ T6809] bridge0: port 3(ipvlan1) entered disabled state
[  104.306561][ T6809] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  104.397470][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  104.781978][ T6831] netlink: 'syz.2.394': attribute type 6 has an invalid length.
[  104.785067][ T6831] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[  104.951794][ T6842] netlink: 'syz.2.399': attribute type 27 has an invalid length.
[  104.959660][ T6842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  105.391519][ T6855] xt_time: unknown flags 0xf4
[  105.613544][ T6866] netlink: 'syz.0.409': attribute type 10 has an invalid length.
[  105.729147][ T6866] batman_adv: batadv0: Adding interface: netdevsim0
[  105.731380][ T6866] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.741885][ T6866] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  105.904768][ T6878] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[  106.037434][ T6884] lo: entered allmulticast mode
[  106.068656][ T6884] lo: entered promiscuous mode
[  106.070516][ T6884] lo: left allmulticast mode
[  106.130608][   T54] Bluetooth: hci0: Dropping invalid advertising data
[  106.138630][   T54] Bluetooth: hci0: unknown advertising packet type: 0xff
[  106.288816][ T6904] Unknown options in mask b7f2
[  106.796505][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.908601][ T6908] bridge_slave_0 (unregistering): left allmulticast mode
[  106.911610][ T6908] bridge_slave_0 (unregistering): left promiscuous mode
[  106.931740][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.201883][ T6928] __nla_validate_parse: 10 callbacks suppressed
[  107.201905][ T6928] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.438'.
[  107.319751][ T6932] netlink: 703 bytes leftover after parsing attributes in process `syz.2.440'.
[  107.504844][ T6939] nftables ruleset with unbound set
[  107.672719][ T6941] netlink: 76 bytes leftover after parsing attributes in process `syz.2.444'.
[  107.986893][   T54] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  108.272173][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  108.283295][ T6967] : entered promiscuous mode
[  108.369561][ T6973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.458793][ T6971] veth1_macvtap: left promiscuous mode
[  108.514804][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  109.085784][ T6988] netlink: 'syz.0.465': attribute type 2 has an invalid length.
[  109.091871][ T6988] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.465'.
[  110.097941][ T7002] : renamed from bond_slave_0 (while UP)
[  110.151092][ T7006] netlink: 2 bytes leftover after parsing attributes in process `syz.2.473'.
[  110.418878][ T7016] netlink: 'syz.2.478': attribute type 9 has an invalid length.
[  110.421659][ T7016] netlink: 211924 bytes leftover after parsing attributes in process `syz.2.478'.
[  110.431163][ T7018] netlink: 'syz.1.479': attribute type 3 has an invalid length.
[  110.436509][ T7018] netlink: 116 bytes leftover after parsing attributes in process `syz.1.479'.
[  110.562898][   T54] Bluetooth: hci2: command tx timeout
[  110.607921][ T7028] netlink: 'syz.2.484': attribute type 2 has an invalid length.
[  110.610589][ T7028] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.484'.
[  110.795560][ T7038] netlink: 168 bytes leftover after parsing attributes in process `syz.0.489'.
[  111.158036][ T7048] syzkaller0: entered promiscuous mode
[  111.160312][ T7048] syzkaller0: entered allmulticast mode
[  111.294495][ T7050] netlink: 'syz.2.495': attribute type 2 has an invalid length.
[  112.358018][ T7082] netlink: 'syz.1.510': attribute type 4 has an invalid length.
[  112.417530][ T7088] __nla_validate_parse: 1 callbacks suppressed
[  112.417550][ T7088] netlink: 1 bytes leftover after parsing attributes in process `syz.2.509'.
[  112.500225][ T7091] netlink: 124 bytes leftover after parsing attributes in process `syz.2.514'.
[  112.506919][ T7091] netlink: 124 bytes leftover after parsing attributes in process `syz.2.514'.
[  112.658885][ T7098] netlink: 'syz.2.516': attribute type 10 has an invalid length.
[  112.831451][ T7109] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.521'.
[  112.855411][ T7113] netlink: 'syz.0.523': attribute type 9 has an invalid length.
[  112.860446][ T7113] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.523'.
[  112.946783][ T7115] netlink: 10 bytes leftover after parsing attributes in process `syz.0.524'.
[  112.953619][ T7115] netlink: 'syz.0.524': attribute type 13 has an invalid length.
[  112.956881][ T7115] netlink: 'syz.0.524': attribute type 17 has an invalid length.
[  113.071177][ T7115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.326173][ T7123] : port 1(vlan0) entered blocking state
[  113.328831][ T7123] : port 1(vlan0) entered disabled state
[  113.331098][ T7123] vlan0: entered allmulticast mode
[  113.333973][ T7123] vlan0: entered promiscuous mode
[  113.343321][ T7124] : port 1(vlan0) entered blocking state
[  113.345366][ T7124] : port 1(vlan0) entered forwarding state
[  113.836988][ T7139] cgroup: fork rejected by pids controller in /syz0
[  114.399286][ T7149] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.537'.
[  114.724478][ T7163] netlink: 7 bytes leftover after parsing attributes in process `syz.2.543'.
[  114.744595][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'.
[  114.798497][ T7165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.544'.
[  114.901260][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.967531][ T7169] netlink: 'syz.1.546': attribute type 9 has an invalid length.
[  115.286121][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.290265][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.294969][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.299283][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.303643][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.475971][ T7178] chnl_net:caif_netlink_parms(): no params data found
[  115.536756][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.539244][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.541758][ T7178] bridge_slave_0: entered allmulticast mode
[  115.545243][ T7178] bridge_slave_0: entered promiscuous mode
[  115.550112][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.553603][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.556749][ T7178] bridge_slave_1: entered allmulticast mode
[  115.559708][ T7178] bridge_slave_1: entered promiscuous mode
[  115.590659][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.597985][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.639019][ T7178] team0: Port device team_slave_0 added
[  115.645909][ T7178] team0: Port device team_slave_1 added
[  115.674694][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.677169][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.686309][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.691311][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.694279][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.703864][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.748524][ T7178] hsr_slave_0: entered promiscuous mode
[  115.751631][ T7178] hsr_slave_1: entered promiscuous mode
[  115.754799][ T7178] debugfs: 'hsr0' already exists in 'hsr'
[  115.756969][ T7178] Cannot create hsr debugfs directory
[  116.785555][ T7178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.872456][ T7178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.942940][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.947724][ T7203] bridge0: entered allmulticast mode
[  117.004508][ T7178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.063400][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.069196][ T7202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.090035][ T7202] bridge0: entered promiscuous mode
[  117.221163][ T7178] batman_adv: batadv0: Removing interface: netdevsim0
[  117.225792][ T7178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.242429][ T7211] netlink: 'syz.2.560': attribute type 39 has an invalid length.
[  117.366507][   T54] Bluetooth: hci1: command tx timeout
[  117.540718][ T7178] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  117.556341][ T7178] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  117.570485][ T7178] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  117.576323][ T7178] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  117.667016][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.681872][ T7178] 8021q: adding VLAN 0 to HW filter on device team0
[  117.688830][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.691490][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.702375][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.705571][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.746643][ T7219] netlink: 'syz.2.561': attribute type 2 has an invalid length.
[  117.749753][ T7219] __nla_validate_parse: 2 callbacks suppressed
[  117.749770][ T7219] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.561'.
[  117.758535][ T7178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.808187][ T7223] netlink: 68 bytes leftover after parsing attributes in process `syz.1.562'.
[  117.869379][ T7223] netlink: 'syz.1.562': attribute type 10 has an invalid length.
[  118.131614][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.190622][ T7178] veth0_vlan: entered promiscuous mode
[  118.202174][ T7178] veth1_vlan: entered promiscuous mode
[  118.234927][ T7178] veth0_macvtap: entered promiscuous mode
[  118.241081][ T7178] veth1_macvtap: entered promiscuous mode
[  118.267283][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'.
[  118.267784][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.288278][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.317080][ T5914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.320180][ T5914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.325417][ T5914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.340911][ T5914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.480843][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.484460][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.534159][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.536751][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.575059][ T7244] netlink: 'syz.0.548': attribute type 21 has an invalid length.
[  119.443261][   T54] Bluetooth: hci1: command tx timeout
[  119.747102][ T7285] netlink: 'syz.2.587': attribute type 4 has an invalid length.
[  119.929529][ T7290] openvswitch: netlink: Message has 4 unknown bytes.
[  120.009746][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'.
[  120.013516][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'.
[  120.271908][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[  120.296020][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[  120.379885][   T54] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  120.385971][   T54] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff
[  121.395375][ T7316] netlink: 104 bytes leftover after parsing attributes in process `syz.1.600'.
[  121.524449][ T5858] Bluetooth: hci1: command tx timeout
[  121.766611][ T7333] bpf: Bad value for 'mode'
[  123.611163][ T5858] Bluetooth: hci1: command tx timeout
[  125.085263][ T7350] netlink: 92 bytes leftover after parsing attributes in process `syz.0.614'.
[  125.092394][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'.
[  125.095527][ T7356] syzkaller0: entered promiscuous mode
[  125.100211][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'.
[  125.102126][ T7356] syzkaller0: entered allmulticast mode
[  125.226437][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'.
[  125.269688][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.614'.
[  125.740952][ T7368] cgroup: Unknown subsys name '0x0000000000000000'
[  125.895773][ T7374] netlink: 60 bytes leftover after parsing attributes in process `syz.2.621'.
[  125.900006][ T7372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.621'.
[  125.910767][ T7374] netlink: 6 bytes leftover after parsing attributes in process `syz.2.621'.
[  125.917186][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[  125.927830][ T7374] netlink: 128092 bytes leftover after parsing attributes in process `syz.2.621'.
[  126.120930][ T7388] netlink: 'syz.2.626': attribute type 10 has an invalid length.
[  126.150091][ T7388] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  127.023535][ T7429] netlink: 'syz.2.645': attribute type 29 has an invalid length.
[  132.731861][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.738594][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  143.226111][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.230850][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  143.236242][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.240026][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.244939][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  143.247790][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.250436][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.253790][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  143.265956][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  143.272893][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  145.283125][ T5853] Bluetooth: hci4: command tx timeout
[  145.286328][ T5853] Bluetooth: hci3: command tx timeout
[  146.059571][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.065908][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.070192][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.074875][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.079959][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.389827][ T5853] Bluetooth: hci3: command tx timeout
[  147.392156][ T5853] Bluetooth: hci4: command tx timeout
[  148.285534][   T54] Bluetooth: hci5: command tx timeout
[  149.964931][   T54] Bluetooth: hci4: command tx timeout
[  149.967221][   T54] Bluetooth: hci3: command tx timeout
[  150.660016][ T5853] Bluetooth: hci5: command tx timeout
[  152.003082][ T5853] Bluetooth: hci3: command tx timeout
[  152.005416][ T5853] Bluetooth: hci4: command tx timeout
[  152.722871][   T54] Bluetooth: hci5: command tx timeout
[  154.916233][   T54] Bluetooth: hci5: command tx timeout
[  191.126123][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  191.686041][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  194.173892][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.176542][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  203.424410][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.428836][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.434893][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.439589][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.443171][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  203.489545][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  203.496190][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  203.499378][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  203.502223][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  203.506264][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  205.522955][ T5858] Bluetooth: hci1: command tx timeout
[  205.525770][   T54] Bluetooth: hci6: command tx timeout
[  206.081881][ T5858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  206.086410][ T5858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  206.091974][ T5858] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  206.096443][ T5858] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  206.103653][ T5858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  207.602960][ T5858] Bluetooth: hci1: command tx timeout
[  207.605581][   T54] Bluetooth: hci6: command tx timeout
[  208.249931][   T54] Bluetooth: hci7: command tx timeout
[  209.845759][   T54] Bluetooth: hci6: command tx timeout
[  209.847879][   T54] Bluetooth: hci1: command tx timeout
[  210.322941][ T5858] Bluetooth: hci7: command tx timeout
[  212.014776][ T5858] Bluetooth: hci1: command tx timeout
[  212.017091][ T5858] Bluetooth: hci6: command tx timeout
[  212.433470][   T54] Bluetooth: hci7: command tx timeout
[  214.482901][   T54] Bluetooth: hci7: command tx timeout
[  255.608408][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.611081][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  264.151980][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  264.155183][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  264.159188][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  264.162012][ T5853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  264.165393][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  264.168456][ T5853] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  264.173096][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  264.176184][ T5853] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  264.179813][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  264.182502][ T5853] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  266.345489][ T5234] Bluetooth: hci9: command tx timeout
[  266.348934][ T5234] Bluetooth: hci8: command tx timeout
[  267.074918][ T5853] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  267.078882][ T5853] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  267.083627][ T5853] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  267.088167][ T5853] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  267.091047][ T5853] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  268.004520][ T5853] Bluetooth: hci3: command 0x0406 tx timeout
[  268.006845][ T5853] Bluetooth: hci4: command 0x0406 tx timeout
[  268.643001][ T5234] Bluetooth: hci8: command tx timeout
[  268.644918][ T5234] Bluetooth: hci9: command tx timeout
[  269.257040][ T5853] Bluetooth: hci10: command tx timeout
[  270.770518][   T54] Bluetooth: hci9: command tx timeout
[  270.774801][   T54] Bluetooth: hci8: command tx timeout
[  271.283654][ T5858] Bluetooth: hci10: command tx timeout
[  272.802909][ T5858] Bluetooth: hci8: command tx timeout
[  272.805093][ T5858] Bluetooth: hci9: command tx timeout
[  273.044281][ T5853] Bluetooth: hci5: command 0x0406 tx timeout
[  273.362741][ T5853] Bluetooth: hci10: command tx timeout
[  275.542846][   T54] Bluetooth: hci10: command tx timeout
[  281.845274][   T34] INFO: task syz.2.669:7479 blocked for more than 143 seconds.
[  281.848429][   T34]       Not tainted syzkaller #0
[  281.850529][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  281.858906][   T34] task:syz.2.669       state:D stack:25096 pid:7479  tgid:7479  ppid:5859   task_flags:0x400040 flags:0x00004004
[  281.864098][   T34] Call Trace:
[  281.865476][   T34]  <TASK>
[  281.866676][   T34]  __schedule+0x1798/0x4cc0
[  281.868509][   T34]  ? __lock_acquire+0xab9/0xd20
[  281.870540][   T34]  ? __lock_acquire+0xab9/0xd20
[  281.872586][   T34]  ? __pfx___schedule+0x10/0x10
[  281.879904][   T34]  ? schedule+0x91/0x360
[  281.881709][   T34]  schedule+0x165/0x360
[  281.883668][   T34]  schedule_preempt_disabled+0x13/0x30
[  281.916242][   T34]  __mutex_lock+0x7e6/0x1350
[  281.918476][   T34]  ? __mutex_lock+0x5bb/0x1350
[  281.920517][   T34]  ? tun_chr_close+0x3e/0x1c0
[  281.922446][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  281.924488][   T34]  ? perf_trace_preemptirq_template+0xa3/0x340
[  281.926891][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.928965][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  281.934887][   T34]  tun_chr_close+0x3e/0x1c0
[  281.936874][   T34]  __fput+0x44c/0xa70
[  281.938492][   T34]  task_work_run+0x1d4/0x260
[  281.940461][   T34]  ? __pfx_task_work_run+0x10/0x10
[  281.945238][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  281.947585][   T34]  exit_to_user_mode_loop+0xec/0x110
[  281.949648][   T34]  do_syscall_64+0x2bd/0x3b0
[  281.951585][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  281.963717][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.966337][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.968812][   T34] RIP: 0033:0x7fbeccb8eba9
[  281.970596][   T34] RSP: 002b:00007ffe16930558 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  281.992734][   T34] RAX: 0000000000000000 RBX: 00007fbeccdd7da0 RCX: 00007fbeccb8eba9
[  281.996016][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  281.999180][   T34] RBP: 00007fbeccdd7da0 R08: 0000000000000138 R09: 000000101693084f
[  282.002219][   T34] R10: 00007fbeccdd7cb0 R11: 0000000000000246 R12: 000000000001f577
[  282.022895][   T34] R13: 00007fbeccdd6090 R14: ffffffffffffffff R15: 00007ffe16930670
[  282.026263][   T34]  </TASK>
[  282.027555][   T34] 
[  282.027555][   T34] Showing all locks held in the system:
[  282.030218][   T34] 1 lock held by khungtaskd/34:
[  282.031858][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  282.053177][   T34] 3 locks held by kworker/1:3/5312:
[  282.055196][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  282.059150][   T34]  #1: ffffc9000299fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  282.072737][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  282.075738][   T34] 2 locks held by getty/5673:
[  282.077266][   T34]  #0: ffff8881055a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  282.080458][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  282.093540][   T34] 1 lock held by syz-executor/5835:
[  282.095330][   T34] 4 locks held by kworker/u8:2/5863:
[  282.097209][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  282.100614][   T34]  #1: ffffc900043cfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  282.118991][   T34]  #2: ffffffff8f52d310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  282.122563][   T34]  #3: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0
[  282.148825][   T34] 3 locks held by kworker/u8:3/5880:
[  282.150689][   T34]  #0: ffff8880218a4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  282.157463][   T34]  #1: ffffc900044bfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  282.161996][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  282.165849][   T34] 2 locks held by syz.1.659/7456:
[  282.167590][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  282.170476][   T34]  #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  282.177526][   T34] 1 lock held by syz.2.669/7479:
[  282.179085][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  282.181988][   T34] 10 locks held by syz.2.669/7480:
[  282.205352][   T34] 1 lock held by syz.0.670/7482:
[  282.207131][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  282.209987][   T34] 1 lock held by syz-executor/7486:
[  282.211687][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.217707][   T34] 1 lock held by syz-executor/7489:
[  282.219626][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.223164][   T34] 1 lock held by syz-executor/7494:
[  282.224942][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.227966][   T34] 1 lock held by syz-executor/7502:
[  282.229649][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.242947][   T34] 1 lock held by syz-executor/7504:
[  282.244895][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.248339][   T34] 1 lock held by syz-executor/7511:
[  282.250209][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.274704][   T34] 1 lock held by syz-executor/7521:
[  282.276561][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.279765][   T34] 1 lock held by syz-executor/7524:
[  282.281602][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.290553][   T34] 1 lock held by syz-executor/7530:
[  282.292227][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  282.296932][   T34] 
[  282.297732][   T34] =============================================
[  282.297732][   T34] 
[  282.300250][   T34] NMI backtrace for cpu 0
[  282.300272][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  282.300282][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.300287][   T34] Call Trace:
[  282.300292][   T34]  <TASK>
[  282.300296][   T34]  dump_stack_lvl+0x189/0x250
[  282.300312][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.300322][   T34]  ? __pfx__printk+0x10/0x10
[  282.300338][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  282.300352][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  282.300364][   T34]  ? __pfx__printk+0x10/0x10
[  282.300376][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  282.300389][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  282.300401][   T34]  watchdog+0xf93/0xfe0
[  282.300416][   T34]  ? watchdog+0x1de/0xfe0
[  282.300428][   T34]  kthread+0x711/0x8a0
[  282.300440][   T34]  ? __pfx_watchdog+0x10/0x10
[  282.300450][   T34]  ? __pfx_kthread+0x10/0x10
[  282.300459][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.300467][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.300475][   T34]  ? __pfx_kthread+0x10/0x10
[  282.300484][   T34]  ret_from_fork+0x439/0x7d0
[  282.300494][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  282.300504][   T34]  ? __switch_to_asm+0x39/0x70
[  282.300513][   T34]  ? __switch_to_asm+0x33/0x70
[  282.300521][   T34]  ? __pfx_kthread+0x10/0x10
[  282.300530][   T34]  ret_from_fork_asm+0x1a/0x30
[  282.300550][   T34]  </TASK>
[  282.300553][   T34] Sending NMI from CPU 0 to CPUs 1:
[  282.348246][    C1] NMI backtrace for cpu 1
[  282.348266][    C1] CPU: 1 UID: 0 PID: 7480 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) 
[  282.348281][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.348289][    C1] RIP: 0010:unwind_next_frame+0x395/0x2390
[  282.348309][    C1] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 80 19 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 75 15 00 00 83 f8 01 4c 8b 7c 24 48 48 bd 00 00 00
[  282.348317][    C1] RSP: 0018:ffffc900001df578 EFLAGS: 00000246
[  282.348328][    C1] RAX: 0000000000000002 RBX: ffffffff9027bee4 RCX: ffffffff9027beec
[  282.348337][    C1] RDX: ffffffff90dbe18a RSI: ffffffff90dbe17e RDI: ffffffff8be33da0
[  282.348346][    C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: ffffffff8172d195
[  282.348355][    C1] R10: ffffc900001df698 R11: ffffffff81ac4c50 R12: ffffffff90dbe18e
[  282.348364][    C1] R13: ffffffff90dbe18f R14: ffffc900001df648 R15: ffffffff9027bee8
[  282.348373][    C1] FS:  00007fbecda9e6c0(0000) GS:ffff8881a3c12000(0000) knlGS:0000000000000000
[  282.348384][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  282.348392][    C1] CR2: 00007f06282497e4 CR3: 000000003c712000 CR4: 00000000000006f0
[  282.348423][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  282.348430][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  282.348434][    C1] Call Trace:
[  282.348438][    C1]  <IRQ>
[  282.348446][    C1]  ? unwind_next_frame+0xa5/0x2390
[  282.348461][    C1]  ? __pfx___schedule+0x10/0x10
[  282.348477][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  282.348493][    C1]  arch_stack_walk+0x11c/0x150
[  282.348510][    C1]  ? __pfx___schedule+0x10/0x10
[  282.348524][    C1]  stack_trace_save+0x9c/0xe0
[  282.348538][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  282.348552][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  282.348562][    C1]  ? sched_clock+0x3f/0x60
[  282.348577][    C1]  ? lapic_next_event+0x11/0x20
[  282.348592][    C1]  kasan_save_track+0x3e/0x80
[  282.348609][    C1]  ? kasan_save_track+0x3e/0x80
[  282.348623][    C1]  ? kasan_save_free_info+0x46/0x50
[  282.348636][    C1]  ? __kasan_slab_free+0x5b/0x80
[  282.348687][    C1]  ? kmem_cache_free+0x18f/0x400
[  282.348704][    C1]  ? skb_release_data+0x62d/0x7c0
[  282.348720][    C1]  ? __kfree_skb+0x55/0x70
[  282.348729][    C1]  ? tcp_ack+0x1fd2/0x6150
[  282.348743][    C1]  ? tcp_rcv_state_process+0x629/0x4140
[  282.348754][    C1]  ? tcp_v4_do_rcv+0x3f2/0xce0
[  282.348766][    C1]  ? tcp_v4_rcv+0x26a6/0x2f40
[  282.348779][    C1]  ? ip_protocol_deliver_rcu+0x221/0x440
[  282.348792][    C1]  ? ip_local_deliver_finish+0x3bb/0x6f0
[  282.348806][    C1]  ? NF_HOOK+0x30c/0x3a0
[  282.348818][    C1]  ? ip_sublist_rcv_finish+0x221/0x2a0
[  282.348830][    C1]  ? ip_sublist_rcv+0x6e7/0x9b0
[  282.348839][    C1]  ? ip_list_rcv+0x3e2/0x430
[  282.348846][    C1]  ? __netif_receive_skb_list_core+0x7d2/0x800
[  282.348858][    C1]  ? netif_receive_skb_list_internal+0x975/0xcc0
[  282.348876][    C1]  ? napi_complete_done+0x2f2/0x7c0
[  282.348886][    C1]  ? e1000_clean+0xd0b/0x2b00
[  282.348902][    C1]  ? __napi_poll+0xc7/0x360
[  282.348913][    C1]  ? net_rx_action+0x707/0xe30
[  282.348924][    C1]  ? handle_softirqs+0x286/0x870
[  282.348931][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  282.348939][    C1]  ? irq_exit_rcu+0x9/0x30
[  282.348949][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  282.348959][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  282.348972][    C1]  ? __pfx___schedule+0x10/0x10
[  282.348998][    C1]  ? skb_release_data+0x62d/0x7c0
[  282.349013][    C1]  kasan_save_free_info+0x46/0x50
[  282.349030][    C1]  __kasan_slab_free+0x5b/0x80
[  282.349045][    C1]  kmem_cache_free+0x18f/0x400
[  282.349063][    C1]  skb_release_data+0x62d/0x7c0
[  282.349083][    C1]  __kfree_skb+0x55/0x70
[  282.349097][    C1]  tcp_ack+0x1fd2/0x6150
[  282.349129][    C1]  ? __pfx_tcp_ack+0x10/0x10
[  282.349151][    C1]  tcp_rcv_state_process+0x629/0x4140
[  282.349163][    C1]  ? irqentry_exit+0x74/0x90
[  282.349181][    C1]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  282.349191][    C1]  ? tcp_v4_rcv+0x260e/0x2f40
[  282.349208][    C1]  ? do_raw_spin_lock+0x121/0x290
[  282.349227][    C1]  tcp_v4_do_rcv+0x3f2/0xce0
[  282.349244][    C1]  tcp_v4_rcv+0x26a6/0x2f40
[  282.349264][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  282.349281][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  282.349295][    C1]  ip_protocol_deliver_rcu+0x221/0x440
[  282.349309][    C1]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  282.349323][    C1]  ip_local_deliver_finish+0x3bb/0x6f0
[  282.349340][    C1]  NF_HOOK+0x30c/0x3a0
[  282.349354][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  282.349367][    C1]  ? NF_HOOK+0x9a/0x3a0
[  282.349376][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  282.349388][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  282.349402][    C1]  ip_sublist_rcv_finish+0x221/0x2a0
[  282.349419][    C1]  ip_sublist_rcv+0x6e7/0x9b0
[  282.349439][    C1]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  282.349452][    C1]  ? skb_orphan+0xaf/0xd0
[  282.349466][    C1]  ? ip_rcv_core+0x7f7/0xd00
[  282.349484][    C1]  ip_list_rcv+0x3e2/0x430
[  282.349496][    C1]  ? hrtimer_interrupt+0x889/0xaa0
[  282.349509][    C1]  ? __pfx_ip_list_rcv+0x10/0x10
[  282.349516][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  282.349536][    C1]  ? __pfx_ip_list_rcv+0x10/0x10
[  282.349551][    C1]  __netif_receive_skb_list_core+0x7d2/0x800
[  282.349568][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  282.349585][    C1]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  282.349604][    C1]  netif_receive_skb_list_internal+0x975/0xcc0
[  282.349622][    C1]  ? e1000_alloc_rx_buffers+0xa2b/0xcf0
[  282.349631][    C1]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  282.349673][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  282.349697][    C1]  ? e1000_clean_rx_irq+0xf7c/0x1170
[  282.349711][    C1]  napi_complete_done+0x2f2/0x7c0
[  282.349722][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  282.349736][    C1]  e1000_clean+0xd0b/0x2b00
[  282.349760][    C1]  ? irqentry_exit+0x74/0x90
[  282.349776][    C1]  ? __pfx_e1000_clean+0x10/0x10
[  282.349796][    C1]  __napi_poll+0xc7/0x360
[  282.349809][    C1]  net_rx_action+0x707/0xe30
[  282.349822][    C1]  ? clockevents_program_event+0x24d/0x360
[  282.349846][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  282.349854][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  282.349863][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  282.349887][    C1]  handle_softirqs+0x286/0x870
[  282.349900][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  282.349914][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  282.349928][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  282.349945][    C1]  __irq_exit_rcu+0xca/0x1f0
[  282.349957][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  282.349971][    C1]  irq_exit_rcu+0x9/0x30
[  282.349979][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  282.349987][    C1]  </IRQ>
[  282.349991][    C1]  <TASK>
[  282.349996][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  282.350008][    C1] RIP: 0010:__schedule+0x0/0x4cc0
[  282.350020][    C1] Code: a7 f6 45 89 f8 89 d9 48 8b 5c 24 08 e9 ee fe ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  282.350039][    C1] RSP: 0018:ffffc90004fdf158 EFLAGS: 00000286
[  282.350050][    C1] RAX: 004bb099f45b8a00 RBX: 0000000000000000 RCX: 004bb099f45b8a00
[  282.350058][    C1] RDX: 0000000000000007 RSI: ffffffff8d9ba3cb RDI: 0000000000000001
[  282.350066][    C1] RBP: ffffc90004fdf200 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  282.350075][    C1] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: 0000000000000000
[  282.350083][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920009fbe2c
[  282.350099][    C1]  preempt_schedule_irq+0xb5/0x150
[  282.350152][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  282.350165][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  282.350177][    C1]  irqentry_exit+0x6f/0x90
[  282.350189][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  282.350200][    C1] RIP: 0010:put_cpu_partial+0x1b4/0x250
[  282.350213][    C1] Code: 85 b5 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 58 b1 61 09 f7 c5 00 02 00 00 74 bc fb 4d 85 e4 <75> bb eb c4 90 e8 d2 35 ac 02 85 c0 74 22 83 3d 7b 92 8a 0d 00 75
[  282.350222][    C1] RSP: 0018:ffffc90004fdf2c8 EFLAGS: 00000286
[  282.350233][    C1] RAX: 004bb099f45b8a00 RBX: ffff88801a442140 RCX: 004bb099f45b8a00
[  282.350242][    C1] RDX: 0000000000000007 RSI: ffffffff8d9ba3cb RDI: ffffffff8be33e00
[  282.350251][    C1] RBP: 0000000000000282 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  282.350260][    C1] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffffea0000dff000
[  282.350269][    C1] R13: 0000000000000001 R14: ffff888107c3b980 R15: ffff88813663e700
[  282.350281][    C1]  ? put_cpu_partial+0x6d/0x250
[  282.350295][    C1]  __slab_free+0x2d5/0x3c0
[  282.350309][    C1]  ? __phys_addr+0xd3/0x180
[  282.350326][    C1]  qlist_free_all+0x97/0x140
[  282.350343][    C1]  kasan_quarantine_reduce+0x148/0x160
[  282.350359][    C1]  __kasan_kmalloc+0x22/0xb0
[  282.350377][    C1]  __kvmalloc_node_noprof+0x30d/0x5f0
[  282.350395][    C1]  ? compute_scc+0x150/0xfa0
[  282.350408][    C1]  compute_scc+0x150/0xfa0
[  282.350424][    C1]  ? __pfx_compute_scc+0x10/0x10
[  282.350440][    C1]  bpf_check+0x173f6/0x1d2c0
[  282.350453][    C1]  ? __pfx_perf_tp_event+0x10/0x10
[  282.350484][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  282.350499][    C1]  ? perf_trace_run_bpf_submit+0xee/0x170
[  282.350510][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  282.350519][    C1]  ? irqentry_exit+0x74/0x90
[  282.350530][    C1]  ? irqentry_exit+0x74/0x90
[  282.350538][    C1]  ? __pfx_bpf_check+0x10/0x10
[  282.350553][    C1]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  282.350568][    C1]  ? seqcount_lockdep_reader_access+0x17e/0x1c0
[  282.350584][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  282.350603][    C1]  ? __asan_memset+0x22/0x50
[  282.350617][    C1]  ? bpf_obj_name_cpy+0x194/0x1e0
[  282.350625][    C1]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  282.350638][    C1]  ? security_bpf_prog_load+0x7f/0x310
[  282.350693][    C1]  bpf_prog_load+0x1318/0x1930
[  282.350712][    C1]  ? __pfx_bpf_prog_load+0x10/0x10
[  282.350738][    C1]  ? bpf_lsm_bpf+0x9/0x20
[  282.350753][    C1]  ? security_bpf+0x7e/0x300
[  282.350771][    C1]  __sys_bpf+0x528/0x870
[  282.350787][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  282.350814][    C1]  __x64_sys_bpf+0x7c/0x90
[  282.350828][    C1]  do_syscall_64+0xfa/0x3b0
[  282.350843][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.350855][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  282.350870][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.350882][    C1] RIP: 0033:0x7fbeccb8eba9
[  282.350891][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.350898][    C1] RSP: 002b:00007fbecda9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  282.350911][    C1] RAX: ffffffffffffffda RBX: 00007fbeccdd5fa0 RCX: 00007fbeccb8eba9
[  282.350919][    C1] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  282.350927][    C1] RBP: 00007fbeccc11e19 R08: 0000000000000000 R09: 0000000000000000
[  282.350934][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.350941][    C1] R13: 00007fbeccdd6038 R14: 00007fbeccdd5fa0 R15: 00007ffe169303f8
[  282.350956][    C1]  </TASK>
[  282.364760][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  282.364775][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  282.364785][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.364791][   T34] Call Trace:
[  282.364795][   T34]  <TASK>
[  282.364799][   T34]  dump_stack_lvl+0x99/0x250
[  282.364818][   T34]  ? __asan_memcpy+0x40/0x70
[  282.364830][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.364838][   T34]  ? __pfx__printk+0x10/0x10
[  282.364856][   T34]  vpanic+0x281/0x750
[  282.364866][   T34]  ? __pfx_vpanic+0x10/0x10
[  282.364874][   T34]  ? preempt_schedule+0xae/0xc0
[  282.364885][   T34]  ? preempt_schedule_common+0x83/0xd0
[  282.364895][   T34]  panic+0xb9/0xc0
[  282.364903][   T34]  ? __pfx_panic+0x10/0x10
[  282.364912][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  282.364926][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  282.364940][   T34]  watchdog+0xfd2/0xfe0
[  282.364954][   T34]  ? watchdog+0x1de/0xfe0
[  282.364967][   T34]  kthread+0x711/0x8a0
[  282.364980][   T34]  ? __pfx_watchdog+0x10/0x10
[  282.364990][   T34]  ? __pfx_kthread+0x10/0x10
[  282.365000][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.365008][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.365017][   T34]  ? __pfx_kthread+0x10/0x10
[  282.365026][   T34]  ret_from_fork+0x439/0x7d0
[  282.365037][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  282.365047][   T34]  ? __switch_to_asm+0x39/0x70
[  282.365056][   T34]  ? __switch_to_asm+0x33/0x70
[  282.365070][   T34]  ? __pfx_kthread+0x10/0x10
[  282.365080][   T34]  ret_from_fork_asm+0x1a/0x30
[  282.365096][   T34]  </TASK>
[  282.818942][   T34] Kernel Offset: disabled
[  282.820758][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:17:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107f18237 R9 =1ffff11020fe3046 R10=dffffc0000000000 R11=ffffffff85500300
R12=dffffc0000000000 R13=ffffffff99b038df R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550037c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f06282ff972 CR3=000000010f554000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f062a5a7d20
XMM02=0000000500000007 ffffffff00000001 XMM03=ffffffff8966b92c ffffffff8a26b607
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff897017fd ffffffff00000007 XMM07=ffffffff00000000 ffffffff898cbb71
XMM08=ffffffff81d5a3aa ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f3f3f300f1f1f1f1 RBX=ffffc900001df888 RCX=004bb099f45b8a00 RDX=0000000000000000
RSI=ffffffff8b87b420 RDI=ffffffff8be33e00 RBP=ffffc900001df858 RSP=ffffc900001df7e0
R8 =ffffffff8fa3a837 R9 =1ffffffff1f47506 R10=dffffc0000000000 R11=fffffbfff1f47507
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200003befc R15=dffffc0000000000
RIP=ffffffff8185069b RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbecda9e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f06282497e4 CR3=000000003c712000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f062a5a7d20
XMM02=0000000500000007 ffffffff00000001 XMM03=ffffffff8966b92c ffffffff8a26b607
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff897017fd ffffffff00000007 XMM07=ffffffff00000000 ffffffff898cbb71
XMM08=ffffffff81d5a3aa ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
