last executing test programs:

3m14.676341129s ago: executing program 0 (id=77):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)

3m14.48456762s ago: executing program 0 (id=79):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* rww'], 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = socket$kcm(0x2a, 0x2, 0x0)
openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x128, 0x3, 0x1, 0x900, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4f}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x840}, 0x9000)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40)
sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x105, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000)=r8, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r8}, 0x8)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061146400000000000500000000000000950000000000000088311ab057cc89a60c70de746da473606ade6418183a7b7083f96179dad4bfd1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48)

3m14.33215932s ago: executing program 0 (id=81):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42)

3m14.216833634s ago: executing program 0 (id=83):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0xa4, 0x0, 0x0, 0xfffff03c}, {0x6}]})

3m14.107171101s ago: executing program 0 (id=84):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

3m14.056985358s ago: executing program 0 (id=86):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @private0, 0x7, 0x83}, 0x80, 0x0}, 0x800)

2m58.997322517s ago: executing program 32 (id=86):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @private0, 0x7, 0x83}, 0x80, 0x0}, 0x800)

2m12.432831649s ago: executing program 3 (id=731):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0)

2m12.242042714s ago: executing program 3 (id=733):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/213, 0xd5}, {0x0}, {&(0x7f0000000200)=""/43, 0x2b}], 0x7}, 0x100)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000038f0beea0000000000"], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x140, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10f9c6, 0x637}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000440), 0x3d)
socket$kcm(0xa, 0x2, 0x0)
close(r4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x24)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x0, 0x3, {0xa, 0x4e23, 0x1, @mcast1, 0xfffffffd}}}, 0x80, 0x0}, 0x40000)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='afs_edit_dir\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in6=@remote, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1}]}]}, 0x16c}}, 0x0)

2m11.681756133s ago: executing program 2 (id=741):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38}}, 0x128}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

2m11.674783352s ago: executing program 2 (id=742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}})

2m11.622568043s ago: executing program 1 (id=743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, 0x4000}, 0x38)

2m11.621900149s ago: executing program 1 (id=744):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = socket$kcm(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
sendmsg$inet(r3, 0x0, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

2m11.522649987s ago: executing program 2 (id=745):
r0 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0)

2m11.522426402s ago: executing program 2 (id=746):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000a400000095"], &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

2m11.49881927s ago: executing program 2 (id=747):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

2m11.486050991s ago: executing program 1 (id=748):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

2m11.422571718s ago: executing program 2 (id=749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, @perf_bp={&(0x7f00000006c0)}, 0x3000, 0xdf, 0x0, 0x2, 0x0, 0x3, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x48045}, 0x20008000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, <r7=>0xffffffffffffffff}, 0x0, &(0x7f0000000480)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/328], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x9c977f67b01895ca)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4308, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e6b876c1d0048007ea60864160af36504001d00380012001931a0e69ee517d3bc06000000a705255dbf7c851e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d0018d431", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c000180"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880)

2m11.049173266s ago: executing program 3 (id=750):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000800), 0x8)

2m11.048669683s ago: executing program 1 (id=751):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)

2m11.048309084s ago: executing program 3 (id=752):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [], [], 0x0, [0x1, 0x300]}, 0x0, 0x1}}, 0x4c}}, 0x0)

2m10.916501541s ago: executing program 3 (id=753):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c"], 0x254}}, 0x40808)

2m10.916281758s ago: executing program 1 (id=754):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xc1, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646563c4e323964227c143d0c8461f3163f71c3651d15b81100004a7de1ae68bf3601b166655a35903dc0d7e44868a9e29a339af0ea176ca80057abe4fefcd5c41e6dce6b2a2ac7a08b75d9644c2626a6c1c093bac86787ed691f2ff4fa70fc3344f8c1d017d4935fbb3c46697f4894ead3f6abd395a64464318b757e0735d59401c3d5910225a638d382a409e1119abe451e4db98acb58399b77280b319cf0c3e58b95d4b5bb74e76a266256014ae0522bcf23e4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m9.731837668s ago: executing program 3 (id=755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbe}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050)

2m7.111031099s ago: executing program 1 (id=756):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xb}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)

1m55.827318687s ago: executing program 33 (id=755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbe}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050)

1m49.037940735s ago: executing program 34 (id=749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, @perf_bp={&(0x7f00000006c0)}, 0x3000, 0xdf, 0x0, 0x2, 0x0, 0x3, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x48045}, 0x20008000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, <r7=>0xffffffffffffffff}, 0x0, &(0x7f0000000480)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/328], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x9c977f67b01895ca)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4308, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e6b876c1d0048007ea60864160af36504001d00380012001931a0e69ee517d3bc06000000a705255dbf7c851e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d0018d431", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c000180"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880)

1m43.268361728s ago: executing program 35 (id=756):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xb}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)

37.175474554s ago: executing program 5 (id=758):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

37.117488422s ago: executing program 6 (id=759):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f00000018c0), 0x4)

37.019052469s ago: executing program 5 (id=760):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

36.968937084s ago: executing program 6 (id=761):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

36.822970091s ago: executing program 5 (id=762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

36.820482211s ago: executing program 6 (id=763):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x218042, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000ac0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc052, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6)
close(r9)
perf_event_open(&(0x7f0000000b40)={0x2, 0x75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104301, 0x8, 0x6, 0x0, 0x10000000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r7, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r11 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000063620000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000020000005000000a436080008000000f910000007000000848acfff04000000586600000085000000b7000000000000009500"/128], &(0x7f0000000200)='syzkaller\x00', 0x4390, 0x0, 0x0, 0x41100, 0x4c, '\x00', r6, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, r12, 0x5, &(0x7f0000000300)=[r5], &(0x7f0000000980)=[{0x2, 0x3, 0xa, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x2, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x401}, 0x94)

36.683758733s ago: executing program 5 (id=764):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'dummy0\x00', @broadcast})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d080006f6090000000000000015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d366bf196d6931e7cad55c86102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x4080)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xd3, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="a7a98190a71d30afe6aace3703", 0x0}, 0x20)
socket$kcm(0x2d, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000001300)="1400000016001963d20500000056915a15aa2bfe2667968a097c009a8956613590d9de555beaa565b31870c9b74209995e247adab5923aad5fefd5ac98c0d5e79f300ed480d56b74e3d9c9ff97ba6cb468cdae477e71574ae5fc65330fdc77832925ef5290dd605beafc7963f54ea550da449fbbc76518", 0x77}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
close(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffef1, 0x45, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)

36.52989457s ago: executing program 4 (id=757):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a", 0xa}], 0x1}, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, 0x0, 0x0)
recvmsg(r3, 0x0, 0x40012142)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x0, 0xb, 0x5, 0x1, 0x0, 0x100000000, 0xe595, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x80, 0x4}, 0x0, 0x7, 0x1, 0x1, 0x9, 0xfff, 0x7, 0x0, 0x3ff, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r4, 0x7)
r5 = gettid()
syz_open_procfs$namespace(r5, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x4040014)
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x7, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000840)='O', 0x1}], 0x1}, 0x4008000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004004)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
close(r8)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

16.883164831s ago: executing program 36 (id=757):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a", 0xa}], 0x1}, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, 0x0, 0x0)
recvmsg(r3, 0x0, 0x40012142)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x0, 0xb, 0x5, 0x1, 0x0, 0x100000000, 0xe595, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x80, 0x4}, 0x0, 0x7, 0x1, 0x1, 0x9, 0xfff, 0x7, 0x0, 0x3ff, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r4, 0x7)
r5 = gettid()
syz_open_procfs$namespace(r5, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x4040014)
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x7, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000840)='O', 0x1}], 0x1}, 0x4008000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004004)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
close(r8)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

10.368576565s ago: executing program 37 (id=763):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x218042, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000ac0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc052, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6)
close(r9)
perf_event_open(&(0x7f0000000b40)={0x2, 0x75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104301, 0x8, 0x6, 0x0, 0x10000000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r7, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r11 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000063620000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000020000005000000a436080008000000f910000007000000848acfff04000000586600000085000000b7000000000000009500"/128], &(0x7f0000000200)='syzkaller\x00', 0x4390, 0x0, 0x0, 0x41100, 0x4c, '\x00', r6, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, r12, 0x5, &(0x7f0000000300)=[r5], &(0x7f0000000980)=[{0x2, 0x3, 0xa, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x2, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x401}, 0x94)

0s ago: executing program 38 (id=764):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'dummy0\x00', @broadcast})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d080006f6090000000000000015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d366bf196d6931e7cad55c86102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x4080)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xd3, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="a7a98190a71d30afe6aace3703", 0x0}, 0x20)
socket$kcm(0x2d, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000001300)="1400000016001963d20500000056915a15aa2bfe2667968a097c009a8956613590d9de555beaa565b31870c9b74209995e247adab5923aad5fefd5ac98c0d5e79f300ed480d56b74e3d9c9ff97ba6cb468cdae477e71574ae5fc65330fdc77832925ef5290dd605beafc7963f54ea550da449fbbc76518", 0x77}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
close(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffef1, 0x45, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41556' (ED25519) to the list of known hosts.
syzkaller login: [   57.428209][ T5842] cgroup: Unknown subsys name 'net'
[   57.517288][ T5842] cgroup: Unknown subsys name 'cpuset'
[   57.523679][ T5842] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.588359][ T5842] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.544205][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.573434][ T3047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.576530][ T3047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.620879][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.624324][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.625768][ T3047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.629066][ T3047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.634014][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.638125][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.640937][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.522335][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.526747][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.533224][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.536346][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.540090][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.678653][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.681609][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.684798][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.687543][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.691061][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.742071][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.746939][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.750163][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.755596][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.759524][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.817305][ T5899] chnl_net:caif_netlink_parms(): no params data found
[   70.031271][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.035233][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.038271][ T5899] bridge_slave_0: entered allmulticast mode
[   70.041372][ T5899] bridge_slave_0: entered promiscuous mode
[   70.063973][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.067185][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.070115][ T5899] bridge_slave_1: entered allmulticast mode
[   70.074787][ T5899] bridge_slave_1: entered promiscuous mode
[   70.126064][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.135099][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.184886][ T5899] team0: Port device team_slave_0 added
[   70.188710][ T5899] team0: Port device team_slave_1 added
[   70.290534][ T5903] chnl_net:caif_netlink_parms(): no params data found
[   70.297345][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.300108][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.313526][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.323590][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.326382][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.337512][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.353016][ T5907] chnl_net:caif_netlink_parms(): no params data found
[   70.434139][ T5899] hsr_slave_0: entered promiscuous mode
[   70.437044][ T5899] hsr_slave_1: entered promiscuous mode
[   70.525241][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.527882][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.530538][ T5903] bridge_slave_0: entered allmulticast mode
[   70.534334][ T5903] bridge_slave_0: entered promiscuous mode
[   70.537835][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.540133][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.543310][ T5903] bridge_slave_1: entered allmulticast mode
[   70.546035][ T5903] bridge_slave_1: entered promiscuous mode
[   70.548565][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.551122][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.553663][ T5907] bridge_slave_0: entered allmulticast mode
[   70.557414][ T5907] bridge_slave_0: entered promiscuous mode
[   70.594986][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.597808][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.600589][ T5907] bridge_slave_1: entered allmulticast mode
[   70.604541][ T5907] bridge_slave_1: entered promiscuous mode
[   70.635751][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.652335][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.669000][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.694265][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.699267][ T5903] team0: Port device team_slave_0 added
[   70.729525][ T5903] team0: Port device team_slave_1 added
[   70.779324][ T5907] team0: Port device team_slave_0 added
[   70.799629][ T5907] team0: Port device team_slave_1 added
[   70.803885][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.806584][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.817575][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.842181][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.847959][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.863558][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.886864][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.889062][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.898308][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.904122][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.906554][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.915726][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.001763][ T5903] hsr_slave_0: entered promiscuous mode
[   71.004757][ T5903] hsr_slave_1: entered promiscuous mode
[   71.006921][ T5903] debugfs: 'hsr0' already exists in 'hsr'
[   71.008690][ T5903] Cannot create hsr debugfs directory
[   71.026524][ T5907] hsr_slave_0: entered promiscuous mode
[   71.029524][ T5907] hsr_slave_1: entered promiscuous mode
[   71.032295][ T5907] debugfs: 'hsr0' already exists in 'hsr'
[   71.035103][ T5907] Cannot create hsr debugfs directory
[   71.121139][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.149439][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.159324][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.175511][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.276536][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.278599][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.350004][ T5903] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.363245][ T5903] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.370230][ T5903] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.375994][ T5903] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.449982][ T5907] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.458785][ T5907] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.475162][ T5907] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.483409][ T5907] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.492341][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.534792][ T5899] 8021q: adding VLAN 0 to HW filter on device team0
[   71.557467][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.560190][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.586628][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.589398][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.593523][ T5239] Bluetooth: hci0: command tx timeout
[   71.599889][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.650169][ T5903] 8021q: adding VLAN 0 to HW filter on device team0
[   71.686598][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.689391][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.696494][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.708961][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.711740][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.736038][ T5907] 8021q: adding VLAN 0 to HW filter on device team0
[   71.754577][ T5239] Bluetooth: hci1: command tx timeout
[   71.786936][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.789373][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.799137][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.801942][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.834293][ T5239] Bluetooth: hci2: command tx timeout
[   71.866746][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.925084][ T5899] veth0_vlan: entered promiscuous mode
[   71.936531][ T5899] veth1_vlan: entered promiscuous mode
[   71.976845][ T5899] veth0_macvtap: entered promiscuous mode
[   71.987577][ T5899] veth1_macvtap: entered promiscuous mode
[   72.002233][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.015822][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.046375][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.049171][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.058349][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.066680][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.078576][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.117101][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.143430][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.148694][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.187433][ T5903] veth0_vlan: entered promiscuous mode
[   72.195706][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.199654][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.217358][ T5903] veth1_vlan: entered promiscuous mode
[   72.262934][ T5907] veth0_vlan: entered promiscuous mode
[   72.270688][ T5907] veth1_vlan: entered promiscuous mode
[   72.309167][ T5903] veth0_macvtap: entered promiscuous mode
[   72.326152][ T5903] veth1_macvtap: entered promiscuous mode
[   72.344986][ T5907] veth0_macvtap: entered promiscuous mode
[   72.350794][ T5907] veth1_macvtap: entered promiscuous mode
[   72.362325][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.378262][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.402503][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.407245][ T5722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.416371][ T5722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.428631][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.432926][ T5722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.437080][ T5722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.465324][ T5722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.494427][ T5722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.520171][ T5722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.529666][ T5722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.609978][ T3047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.614485][ T3047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.653222][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.656251][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.694619][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.700334][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.700884][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.710247][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.673726][ T5239] Bluetooth: hci0: command tx timeout
[   73.833280][ T5239] Bluetooth: hci1: command tx timeout
[   73.915978][ T5239] Bluetooth: hci2: command tx timeout
[   74.200035][ T6036] netlink: 232 bytes leftover after parsing attributes in process `syz.0.45'.
[   74.289987][ T6040] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.46'.
[   74.339624][ T6039] netlink: 'syz.0.47': attribute type 12 has an invalid length.
[   74.346055][ T6039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.47'.
[   74.592673][    C1] hrtimer: interrupt took 70704 ns
[   74.668046][ T6054] netlink: 'syz.1.53': attribute type 21 has an invalid length.
[   74.671104][ T6054] netlink: 156 bytes leftover after parsing attributes in process `syz.1.53'.
[   74.829128][ T6061] warning: `syz.1.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.689978][ T6074] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   75.702769][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.61'.
[   75.725214][ T6074] team0: Port device geneve0 added
[   75.754140][ T5239] Bluetooth: hci0: command tx timeout
[   75.785175][ T6078] lo speed is unknown, defaulting to 1000
[   75.797734][ T6078] lo speed is unknown, defaulting to 1000
[   75.805628][ T6078] lo speed is unknown, defaulting to 1000
[   75.879110][ T6084] netlink: 'syz.0.66': attribute type 2 has an invalid length.
[   75.915760][ T5239] Bluetooth: hci1: command tx timeout
[   76.003915][ T5239] Bluetooth: hci2: command tx timeout
[   76.185858][   T96] lo speed is unknown, defaulting to 1000
[   76.186298][ T6078] infiniband syz2: set active
[   76.190851][ T6078] infiniband syz2: added lo
[   76.268606][ T6078] RDS/IB: syz2: added
[   76.280197][ T6078] smc: adding ib device syz2 with port count 1
[   76.297207][ T6078] smc:    ib device syz2 port 1 has pnetid 
[   76.316426][   T24] lo speed is unknown, defaulting to 1000
[   76.333003][ T6078] lo speed is unknown, defaulting to 1000
[   76.507782][ T6078] lo speed is unknown, defaulting to 1000
[   76.662438][ T6109] netlink: 'syz.2.78': attribute type 1 has an invalid length.
[   76.762267][ T6113] netlink: 56 bytes leftover after parsing attributes in process `syz.2.80'.
[   76.775560][ T6078] lo speed is unknown, defaulting to 1000
[   77.088018][ T6122] =======================================================
[   77.088018][ T6122] WARNING: The mand mount option has been deprecated and
[   77.088018][ T6122]          and is ignored by this kernel. Remove the mand
[   77.088018][ T6122]          option from the mount to silence this warning.
[   77.088018][ T6122] =======================================================
[   77.115701][ T6078] syz.1.64 (6078) used greatest stack depth: 19816 bytes left
[   77.603002][ T5239] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[   77.834657][   T55] Bluetooth: hci0: command tx timeout
[   77.841449][ T6139] syzkaller0: entered promiscuous mode
[   77.845986][ T6139] syzkaller0: entered allmulticast mode
[   77.994956][   T55] Bluetooth: hci1: command tx timeout
[   78.065747][   T55] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[   78.077793][   T55] Bluetooth: hci2: command tx timeout
[   78.365161][ T6152] Zero length message leads to an empty skb
[   78.416658][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.99'.
[   79.142341][ T6168] netlink: 'syz.1.106': attribute type 2 has an invalid length.
[   79.145087][ T6168] netlink: 'syz.1.106': attribute type 8 has an invalid length.
[   79.148179][ T6168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.106'.
[   80.662448][ T6183] netlink: 'syz.1.113': attribute type 2 has an invalid length.
[   80.692989][ T6183] netlink: 51 bytes leftover after parsing attributes in process `syz.1.113'.
[   81.487741][ T6197] netlink: 'syz.1.120': attribute type 20 has an invalid length.
[   81.491038][ T6197] IPv6: NLM_F_CREATE should be specified when creating new route
[   82.216620][ T6231] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.136'.
[   82.339880][ T6235] netlink: 'syz.1.137': attribute type 10 has an invalid length.
[   82.344440][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'.
[   82.372390][ T6235] team0: Port device geneve0 added
[   82.459651][ T6237] netlink: 'syz.2.139': attribute type 10 has an invalid length.
[   83.245191][ T6260] netlink: 176 bytes leftover after parsing attributes in process `syz.1.148'.
[   83.251578][ T6261] netlink: 52 bytes leftover after parsing attributes in process `syz.2.149'.
[   83.683542][   T55] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11
[   85.289894][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'.
[   85.365379][ T6317] netlink: 324 bytes leftover after parsing attributes in process `syz.1.174'.
[   85.677377][ T6324] netlink: 'syz.1.175': attribute type 11 has an invalid length.
[   86.499847][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'.
[   86.504427][ T6336] openvswitch: netlink: Missing key (keys=40, expected=80)
[   86.612191][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   87.041194][ T3146] cfg80211: failed to load regulatory.db
[   87.511200][ T6345] netlink: 'syz.1.184': attribute type 62 has an invalid length.
[   88.505239][ T6364] netlink: 'syz.1.191': attribute type 21 has an invalid length.
[   88.508359][ T6364] netlink: 128 bytes leftover after parsing attributes in process `syz.1.191'.
[   88.512013][ T6364] netlink: 'syz.1.191': attribute type 4 has an invalid length.
[   88.516295][ T6364] netlink: 'syz.1.191': attribute type 5 has an invalid length.
[   88.519341][ T6364] netlink: 3 bytes leftover after parsing attributes in process `syz.1.191'.
[   88.788841][   T55] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[   88.793786][   T55] Bluetooth: hci2: Unable to find connection with handle 0x0000
[   90.197742][ T6384] netlink: 'syz.2.200': attribute type 6 has an invalid length.
[   90.349544][ T6388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.368015][ T6388] netlink: 'syz.2.202': attribute type 11 has an invalid length.
[   90.375093][ T6388] netlink: 168 bytes leftover after parsing attributes in process `syz.2.202'.
[   90.538303][ T6395] syz.1.204 uses obsolete (PF_INET,SOCK_PACKET)
[   91.598057][ T6418] netlink: 'syz.2.215': attribute type 49 has an invalid length.
[   91.754628][   T55] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   91.854654][ T6422] netlink: 'syz.2.217': attribute type 2 has an invalid length.
[   92.561536][   T55] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6
[   92.687038][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.696154][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.703411][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.711349][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.715744][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.761596][ T5722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.881108][ T5722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.900607][ T6439] lo speed is unknown, defaulting to 1000
[   92.906573][ T6446] netlink: 64 bytes leftover after parsing attributes in process `syz.1.227'.
[   92.989807][ T5722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.127909][ T5722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.286099][ T6451] netlink: 96 bytes leftover after parsing attributes in process `syz.1.229'.
[   93.290775][ T6451] netlink: 96 bytes leftover after parsing attributes in process `syz.1.229'.
[   93.451030][ T5722] bridge_slave_1: left allmulticast mode
[   93.454061][ T5722] bridge_slave_1: left promiscuous mode
[   93.457329][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.484013][ T5722] bridge_slave_0: left allmulticast mode
[   93.486331][ T5722] bridge_slave_0: left promiscuous mode
[   93.488758][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.372376][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.384702][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.391609][ T5722] bond0 (unregistering): Released all slaves
[   94.481837][ T6439] chnl_net:caif_netlink_parms(): no params data found
[   94.618802][ T6478] netlink: 'syz.2.237': attribute type 10 has an invalid length.
[   94.640223][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.649713][ T6478] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   94.803657][ T5239] Bluetooth: hci0: command tx timeout
[   94.831649][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.866936][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.881054][ T6439] bridge_slave_0: entered allmulticast mode
[   94.891329][ T6439] bridge_slave_0: entered promiscuous mode
[   94.910025][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.925871][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.928289][ T6439] bridge_slave_1: entered allmulticast mode
[   94.941251][ T6439] bridge_slave_1: entered promiscuous mode
[   95.089510][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.121647][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.229736][ T6482] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.371660][ T6439] team0: Port device team_slave_0 added
[   95.386724][ T6439] team0: Port device team_slave_1 added
[   95.438176][ T6502] netlink: 'syz.2.243': attribute type 1 has an invalid length.
[   95.441547][ T6502] netlink: 'syz.2.243': attribute type 2 has an invalid length.
[   95.523616][ T5722] hsr_slave_0: left promiscuous mode
[   95.562589][ T5722] hsr_slave_1: left promiscuous mode
[   95.590024][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.605470][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.639029][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.652936][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.681755][ T5722] veth1_macvtap: left promiscuous mode
[   95.687247][ T5722] veth0_macvtap: left promiscuous mode
[   95.689671][ T5722] veth1_vlan: left promiscuous mode
[   95.691925][ T5722] veth0_vlan: left promiscuous mode
[   96.072214][ T5722] team0 (unregistering): Port device team_slave_1 removed
[   96.099431][ T5722] team0 (unregistering): Port device team_slave_0 removed
[   96.376584][ T6503] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.243'.
[   96.442071][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.452910][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.481608][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.509309][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.517626][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.546552][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.668555][ T6439] hsr_slave_0: entered promiscuous mode
[   96.671806][ T6439] hsr_slave_1: entered promiscuous mode
[   96.874207][ T5239] Bluetooth: hci0: command tx timeout
[   97.094985][ T6439] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.115484][ T6439] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.138199][ T6439] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.161010][ T6439] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.472582][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.500361][ T6439] 8021q: adding VLAN 0 to HW filter on device team0
[   97.528096][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.531205][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.552464][ T6548] netlink: 'syz.1.252': attribute type 1 has an invalid length.
[   97.562577][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.566024][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.636886][ T6531] netlink: 'syz.1.252': attribute type 4 has an invalid length.
[   97.640367][ T6531] netlink: 'syz.1.252': attribute type 11 has an invalid length.
[   97.644789][ T6531] netlink: 196896 bytes leftover after parsing attributes in process `syz.1.252'.
[   98.017404][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.052065][ T6439] veth0_vlan: entered promiscuous mode
[   98.062533][ T6439] veth1_vlan: entered promiscuous mode
[   98.095059][ T6439] veth0_macvtap: entered promiscuous mode
[   98.105125][ T6439] veth1_macvtap: entered promiscuous mode
[   98.121345][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.132095][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.147600][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.158089][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.189224][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.210890][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.276898][ T6570] syzkaller0: entered promiscuous mode
[   98.279141][ T6570] syzkaller0: entered allmulticast mode
[   98.286170][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.292520][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.340105][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.347985][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.362038][ T6583] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   98.973122][ T5239] Bluetooth: hci0: command tx timeout
[  100.156180][ T6706] netlink: 'syz.3.274': attribute type 29 has an invalid length.
[  100.160568][ T6706] netlink: 'syz.3.274': attribute type 29 has an invalid length.
[  101.032944][ T5239] Bluetooth: hci0: command tx timeout
[  101.994773][ T5239] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  101.998317][ T5239] Bluetooth: hci2: Injecting HCI hardware error event
[  102.001952][ T5239] Bluetooth: hci2: hardware error 0x00
[  102.879316][ T6713] ref_ctr_offset mismatch. inode: 0x9c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  103.030169][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'.
[  103.100158][ T6723] netlink: 88 bytes leftover after parsing attributes in process `syz.1.282'.
[  103.231216][ T6731] lo speed is unknown, defaulting to 1000
[  104.455436][ T6766] netlink: 'syz.1.300': attribute type 10 has an invalid length.
[  104.569600][ T6766] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  104.952795][ T5239] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  107.621140][ T6779] netlink: 'syz.2.305': attribute type 9 has an invalid length.
[  107.633685][ T6779] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.305'.
[  107.739064][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[  107.925791][ T6789] netlink: 763 bytes leftover after parsing attributes in process `syz.3.307'.
[  108.770534][ T6809] lo speed is unknown, defaulting to 1000
[  109.305017][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'.
[  110.089411][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'.
[  110.279846][ T6863] netlink: 4200 bytes leftover after parsing attributes in process `syz.3.343'.
[  110.526034][ T6877] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.350'.
[  110.529693][ T6877] openvswitch: netlink: Message has 6 unknown bytes.
[  110.608220][ T6885] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.611133][ T6885] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.391934][ T6913] netlink: 'syz.1.365': attribute type 10 has an invalid length.
[  112.223644][ T6934] netlink: 'syz.2.372': attribute type 3 has an invalid length.
[  112.227815][ T6934] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.372'.
[  112.259376][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.374'.
[  112.282217][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.374'.
[  112.744645][ T6967] netlink: 'syz.3.388': attribute type 25 has an invalid length.
[  112.747191][ T6969] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[  113.294576][ T6996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.403'.
[  113.422251][ T7000] netlink: 'syz.3.406': attribute type 1 has an invalid length.
[  113.436143][ T7000] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.406'.
[  113.445379][ T7002] netlink: 531 bytes leftover after parsing attributes in process `syz.1.405'.
[  114.618015][ T7031] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.420'.
[  114.699449][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.423'.
[  115.217810][ T7071] lo speed is unknown, defaulting to 1000
[  115.860404][ T7100] IPv6: NLM_F_CREATE should be specified when creating new route
[  116.680436][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.451'.
[  116.687344][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.451'.
[  116.695994][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.451'.
[  117.383474][ T5239] Bluetooth: hci1: Malformed LE Event: 0x0d
[  117.409212][ T7141] syzkaller0: entered promiscuous mode
[  117.412238][ T7141] syzkaller0: entered allmulticast mode
[  117.555976][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  117.560164][ T7151] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  117.565110][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.111758][ T7186] netlink: 'syz.3.490': attribute type 1 has an invalid length.
[  119.115448][ T7186] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.490'.
[  119.279469][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'.
[  119.285664][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'.
[  119.289247][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.491'.
[  119.789626][ T7195] Driver unsupported XDP return value 0 on prog  (id 194) dev N/A, expect packet loss!
[  120.851872][ T7212] netlink: 'syz.3.500': attribute type 13 has an invalid length.
[  120.859850][ T7212] netlink: 'syz.3.500': attribute type 17 has an invalid length.
[  120.915074][ T7216] openvswitch: netlink: Missing valid actions attribute.
[  120.917957][ T7216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.986844][ T7212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.124044][ T7220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.505'.
[  122.359309][ T7287] netlink: 'syz.2.534': attribute type 7 has an invalid length.
[  122.412151][ T7289] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.535'.
[  122.695598][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.543'.
[  122.731188][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.543'.
[  122.737740][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.543'.
[  123.319604][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  123.539855][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'.
[  124.236653][ T7353] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.561'.
[  124.340987][ T7357] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  124.361897][ T7357] syzkaller0: entered promiscuous mode
[  124.366126][ T7357] syzkaller0: entered allmulticast mode
[  124.633670][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.567'.
[  126.308839][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'.
[  126.312487][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'.
[  126.317937][ T7373] netlink: 'syz.1.569': attribute type 4 has an invalid length.
[  126.648339][ T7386] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.575'.
[  126.654896][ T7390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.575'.
[  128.066247][ T7423] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.588'.
[  129.518161][ T7449] netlink: 'syz.2.601': attribute type 1 has an invalid length.
[  129.640717][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  129.657298][ T7457] : entered promiscuous mode
[  129.719928][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'.
[  129.740657][ T7463] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.608'.
[  130.148041][ T7466] netlink: 'syz.1.609': attribute type 12 has an invalid length.
[  130.150785][ T7466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.609'.
[  130.839472][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'.
[  131.627454][ T7535] netlink: 132 bytes leftover after parsing attributes in process `syz.1.639'.
[  131.636678][ T7534] netlink: 92 bytes leftover after parsing attributes in process `syz.3.638'.
[  131.756730][ T7538] siw: device registration error -23
[  131.858417][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.864959][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.891738][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.921570][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.045941][ T7541] bond0: (slave batadv0): Releasing backup interface
[  132.791853][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.794847][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.307909][ T7566] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.311569][ T7566] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  133.915229][ T7591] netlink: 'syz.3.661': attribute type 1 has an invalid length.
[  134.160249][ T7605] netlink: 156 bytes leftover after parsing attributes in process `syz.1.666'.
[  134.403350][ T7621] netlink: 'syz.3.673': attribute type 2 has an invalid length.
[  135.010139][ T7657] netlink: 14 bytes leftover after parsing attributes in process `syz.3.687'.
[  135.020455][ T7657] hsr_slave_0: left promiscuous mode
[  135.025835][ T7657] hsr_slave_1: left promiscuous mode
[  138.015639][ T7715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.713'.
[  138.211940][ T7728] xt_l2tp: missing protocol rule (udp|l2tpip)
[  138.359629][ T7739] nbd: must specify an index to disconnect
[  138.450186][ T7742] veth1_macvtap: left promiscuous mode
[  138.454175][ T7742] macsec0: entered promiscuous mode
[  138.816387][ T7754] netlink: 'syz.3.731': attribute type 3 has an invalid length.
[  139.056516][ T7762] netlink: 'syz.2.735': attribute type 1 has an invalid length.
[  139.559818][ T7779] : renamed from pim6reg1
[  139.590787][ T7783] netlink: 'syz.1.744': attribute type 10 has an invalid length.
[  139.604465][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.609192][ T7783] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  139.638481][ T7783] netlink: 'syz.1.744': attribute type 10 has an invalid length.
[  139.641726][ T7783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'.
[  139.646022][ T7783] batadv0: entered promiscuous mode
[  139.648479][ T7783] batadv0: entered allmulticast mode
[  139.652509][ T7783] bond0: (slave batadv0): Releasing backup interface
[  139.660730][ T7783] bridge0: port 3(batadv0) entered blocking state
[  139.667220][ T7783] bridge0: port 3(batadv0) entered disabled state
[  139.785339][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  139.788942][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  139.967858][ T7802] bridge_slave_1: left allmulticast mode
[  139.970289][ T7802] bridge_slave_1: left promiscuous mode
[  139.981342][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.153235][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  140.162603][ T7806] netlink: 304 bytes leftover after parsing attributes in process `syz.3.753'.
[  140.862415][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1157746208 wd_nsec: 1157731961
[  145.742043][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4368328302 wd_nsec: 4368317052
[  155.721697][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.726883][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.733780][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.738301][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.746475][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.782116][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.786737][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.789645][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.794235][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.796847][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  157.831127][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  157.834529][ T5887] Bluetooth: hci4: command tx timeout
[  157.836976][ T5887] Bluetooth: hci3: command tx timeout
[  157.842389][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  157.847039][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  157.850614][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  157.856571][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  159.913184][ T5239] Bluetooth: hci5: command tx timeout
[  159.916143][ T5239] Bluetooth: hci3: command tx timeout
[  159.918310][ T5239] Bluetooth: hci4: command tx timeout
[  161.993102][   T55] Bluetooth: hci4: command tx timeout
[  161.995441][   T55] Bluetooth: hci3: command tx timeout
[  161.997491][   T55] Bluetooth: hci5: command tx timeout
[  164.073342][ T5239] Bluetooth: hci5: command tx timeout
[  164.075719][ T5239] Bluetooth: hci3: command tx timeout
[  164.078000][ T5239] Bluetooth: hci4: command tx timeout
[  166.152976][   T55] Bluetooth: hci5: command tx timeout
[  194.160980][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.163693][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  196.236432][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  216.738653][ T5887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.743252][ T5887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.746846][ T5887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.750434][ T5887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.754787][ T5887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  216.836600][ T7834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  216.847467][ T7834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  216.851715][ T7834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  216.855832][ T7834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  216.859206][ T7834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  217.352892][ T7834] Bluetooth: hci0: command 0x0406 tx timeout
[  218.456501][ T7839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  218.464871][ T7839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  218.469130][ T7839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  218.476473][ T7839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  218.480339][ T7839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  223.588534][ T7802] bridge_slave_0: left allmulticast mode
[  223.590906][ T7802] bridge_slave_0: left promiscuous mode
[  223.593476][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.547488][ T5887] Bluetooth: hci7: command tx timeout
[  227.602581][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'.
[  227.607235][ T7803] netlink: 52 bytes leftover after parsing attributes in process `syz.2.749'.
[  227.847607][ T7833] lo speed is unknown, defaulting to 1000
[  228.290599][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.362828][ T7829] lo speed is unknown, defaulting to 1000
[  228.416525][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.544506][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.592117][ T7837] lo speed is unknown, defaulting to 1000
[  228.592470][ T7833] chnl_net:caif_netlink_parms(): no params data found
[  228.638760][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.785152][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.790805][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.794301][ T7833] bridge_slave_0: entered allmulticast mode
[  228.798697][ T7833] bridge_slave_0: entered promiscuous mode
[  228.805527][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.808437][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.811304][ T7833] bridge_slave_1: entered allmulticast mode
[  228.815929][ T7833] bridge_slave_1: entered promiscuous mode
[  228.872016][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.879117][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.942574][ T7833] team0: Port device team_slave_0 added
[  228.969911][ T7833] team0: Port device team_slave_1 added
[  229.052597][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.055596][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.065951][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.077360][   T12] bridge_slave_1: left allmulticast mode
[  229.079722][   T12] bridge_slave_1: left promiscuous mode
[  229.082183][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.090301][   T12] bridge_slave_0: left allmulticast mode
[  229.092525][   T12] bridge_slave_0: left promiscuous mode
[  229.096383][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.457153][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.463842][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.469983][   T12] bond0 (unregistering): Released all slaves
[  229.488866][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.491685][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.505523][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.593201][ T5239] Bluetooth: hci8: command tx timeout
[  229.593855][ T5887] Bluetooth: hci7: command tx timeout
[  229.597582][ T5239] Bluetooth: hci6: command tx timeout
[  229.666760][ T7833] hsr_slave_0: entered promiscuous mode
[  229.669330][ T7833] hsr_slave_1: entered promiscuous mode
[  229.727255][ T7829] chnl_net:caif_netlink_parms(): no params data found
[  229.888264][ T7837] chnl_net:caif_netlink_parms(): no params data found
[  230.120757][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.123426][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.126421][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.128735][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.139748][   T12] veth0_macvtap: left promiscuous mode
[  230.142056][   T12] veth1_vlan: left promiscuous mode
[  230.145768][   T12] veth0_vlan: left promiscuous mode
[  230.501779][   T12] team0 (unregistering): Port device team_slave_1 removed
[  230.533859][   T12] team0 (unregistering): Port device team_slave_0 removed
[  230.877343][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.879927][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.882506][ T7829] bridge_slave_0: entered allmulticast mode
[  230.885988][ T7829] bridge_slave_0: entered promiscuous mode
[  230.889537][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.891990][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.895009][ T7829] bridge_slave_1: entered allmulticast mode
[  230.898519][ T7829] bridge_slave_1: entered promiscuous mode
[  230.918988][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.921944][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.929182][ T7837] bridge_slave_0: entered allmulticast mode
[  230.933437][ T7837] bridge_slave_0: entered promiscuous mode
[  230.939836][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.945742][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.948895][ T7837] bridge_slave_1: entered allmulticast mode
[  230.954194][ T7837] bridge_slave_1: entered promiscuous mode
[  231.034247][ T7837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.041478][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.062335][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.080027][ T7837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.121778][ T7833] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  231.161788][ T7833] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  231.170130][ T7837] team0: Port device team_slave_0 added
[  231.176289][ T7837] team0: Port device team_slave_1 added
[  231.196178][ T7829] team0: Port device team_slave_0 added
[  231.198720][ T7833] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  231.219739][ T7829] team0: Port device team_slave_1 added
[  231.223693][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.226095][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.235445][ T7837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.239698][ T7833] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  231.268192][ T7837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.271131][ T7837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.281725][ T7837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.313118][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.315821][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.326622][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.336836][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.339687][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.353745][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.404341][ T7837] hsr_slave_0: entered promiscuous mode
[  231.407627][ T7837] hsr_slave_1: entered promiscuous mode
[  231.410491][ T7837] debugfs: 'hsr0' already exists in 'hsr'
[  231.413544][ T7837] Cannot create hsr debugfs directory
[  231.458680][ T7829] hsr_slave_0: entered promiscuous mode
[  231.461869][ T7829] hsr_slave_1: entered promiscuous mode
[  231.467720][ T7829] debugfs: 'hsr0' already exists in 'hsr'
[  231.469988][ T7829] Cannot create hsr debugfs directory
[  231.516000][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.593946][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.645879][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.673114][ T5239] Bluetooth: hci6: command tx timeout
[  231.673143][ T7839] Bluetooth: hci7: command tx timeout
[  231.684802][ T5239] Bluetooth: hci8: command tx timeout
[  231.721956][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.893407][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.944919][ T7837] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  231.978746][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.990561][ T7837] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  231.996212][ T7837] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  232.001974][ T7837] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  232.069746][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.086914][ T7833] 8021q: adding VLAN 0 to HW filter on device team0
[  232.117483][ T1825] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.120055][ T1825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.141142][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.154773][ T7829] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  232.164665][ T1825] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.167480][ T1825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.178397][ T7829] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  232.185766][ T7829] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  232.218834][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.231786][ T7829] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  232.380416][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.411924][ T7837] 8021q: adding VLAN 0 to HW filter on device team0
[  232.455907][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.458848][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.466025][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.468835][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.504235][   T12] bridge0: port 3(batadv0) entered disabled state
[  232.508662][   T12] bridge_slave_1: left allmulticast mode
[  232.510718][   T12] bridge_slave_1: left promiscuous mode
[  232.517443][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.527717][   T12] bridge_slave_0: left allmulticast mode
[  232.529879][   T12] bridge_slave_0: left promiscuous mode
[  232.531699][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.729407][   T12] team0: Port device geneve0 removed
[  232.812013][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.817689][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.821800][   T12] bond0 (unregistering): Released all slaves
[  232.937235][   T12] team0: Port device geneve0 removed
[  233.056831][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.061013][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.065624][   T12] bond0 (unregistering): Released all slaves
[  233.157051][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.187111][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.228492][ T7829] 8021q: adding VLAN 0 to HW filter on device team0
[  233.242432][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.245378][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.264796][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.267804][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.351332][ T7837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.481998][ T7833] veth0_vlan: entered promiscuous mode
[  233.516352][ T7833] veth1_vlan: entered promiscuous mode
[  233.542286][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.569428][ T7833] veth0_macvtap: entered promiscuous mode
[  233.595053][ T7833] veth1_macvtap: entered promiscuous mode
[  233.646830][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.651174][ T7837] veth0_vlan: entered promiscuous mode
[  233.665038][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.672414][ T7837] veth1_vlan: entered promiscuous mode
[  233.685951][ T5722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.696431][ T5722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.700938][ T5722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.709250][ T5722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.738651][ T7837] veth0_macvtap: entered promiscuous mode
[  233.753083][ T5239] Bluetooth: hci7: command tx timeout
[  233.755195][ T5239] Bluetooth: hci8: command tx timeout
[  233.755387][ T7837] veth1_macvtap: entered promiscuous mode
[  233.756911][ T5239] Bluetooth: hci6: command tx timeout
[  233.781756][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.810124][ T7837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.821510][ T5722] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.825343][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.825359][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.851765][ T5722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.856343][ T5722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.859930][ T5722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.939289][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.942288][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.958198][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.961226][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.977953][ T7829] veth0_vlan: entered promiscuous mode
[  234.006406][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.010582][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.019291][ T7829] veth1_vlan: entered promiscuous mode
[  234.088107][ T7829] veth0_macvtap: entered promiscuous mode
[  234.096164][ T7829] veth1_macvtap: entered promiscuous mode
[  234.122371][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.147922][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.167901][ T5898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.171791][ T5898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.179405][ T5898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.195731][ T5898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.214750][ T7914] netlink: 'syz.5.760': attribute type 10 has an invalid length.
[  234.348993][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.353972][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.414136][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.417212][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.535304][ T7923] : renamed from dummy0 (while UP)
[  234.591297][ T7924] netlink: 188 bytes leftover after parsing attributes in process `syz.5.764'.
[  234.755320][ T7921] netlink: 'syz.6.763': attribute type 1 has an invalid length.
[  234.758447][ T7921] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.763'.
[  235.833150][ T7839] Bluetooth: hci6: command tx timeout
[  235.835332][ T7839] Bluetooth: hci8: command tx timeout
[  272.066473][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 8963127706 wd_nsec: 8963127773
[  278.583435][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  278.586018][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  278.729278][ T7839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  278.732566][ T7839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  278.739145][ T7839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  278.742347][ T7839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  278.746871][ T7839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  278.749627][ T7839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  278.753187][ T7839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  278.758403][ T7839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  278.762015][ T7839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  278.765061][ T7839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  278.787412][ T7839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  278.791980][ T7839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  278.795247][ T7839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  278.798565][ T7839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  278.801786][ T7839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  280.794638][ T7839] Bluetooth: hci2: command tx timeout
[  280.873093][   T55] Bluetooth: hci1: command tx timeout
[  280.876183][ T7839] Bluetooth: hci0: command tx timeout
[  282.874206][ T7839] Bluetooth: hci2: command tx timeout
[  282.953190][ T7839] Bluetooth: hci0: command tx timeout
[  282.972541][   T55] Bluetooth: hci1: command tx timeout
[  284.953017][ T7839] Bluetooth: hci2: command tx timeout
[  285.033045][   T55] Bluetooth: hci1: command tx timeout
[  285.037565][ T7839] Bluetooth: hci0: command tx timeout
[  287.033035][ T7839] Bluetooth: hci2: command tx timeout
[  287.113096][   T55] Bluetooth: hci1: command tx timeout
[  287.115659][ T7839] Bluetooth: hci0: command tx timeout
[  311.004850][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.011680][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.017127][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.019906][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.023822][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.066170][ T7839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.094267][ T5887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.097594][ T5887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.101366][ T5887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.104758][ T5887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.127219][ T5887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.131631][ T5887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.135379][ T5887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.139920][ T5887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.146046][ T5887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  313.114048][ T5887] Bluetooth: hci3: command tx timeout
[  313.193061][ T7839] Bluetooth: hci4: command tx timeout
[  313.195217][ T5887] Bluetooth: hci5: command tx timeout
[  315.195266][ T5887] Bluetooth: hci3: command tx timeout
[  315.273031][ T7839] Bluetooth: hci4: command tx timeout
[  315.275032][ T5887] Bluetooth: hci5: command tx timeout
[  317.037568][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.040275][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.402995][ T5887] Bluetooth: hci3: command tx timeout
[  317.405070][ T5887] Bluetooth: hci5: command tx timeout
[  317.406980][ T5887] Bluetooth: hci4: command tx timeout
[  319.603091][ T7839] Bluetooth: hci4: command tx timeout
[  319.605506][ T7839] Bluetooth: hci5: command tx timeout
[  319.607802][ T7839] Bluetooth: hci3: command tx timeout
[  349.832950][ T5887] Bluetooth: hci8: command 0x0406 tx timeout
[  350.235350][ T5887] Bluetooth: hci7: command 0x0406 tx timeout
[  350.237716][ T5887] Bluetooth: hci6: command 0x0406 tx timeout
[  371.059778][ T7839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  371.064921][ T7839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  371.067732][ T7839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  371.070437][ T7839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  371.078151][ T7839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  371.148874][   T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  371.152339][   T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  371.157917][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  371.161947][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  371.164999][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  371.219169][   T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  371.223280][   T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  371.227250][   T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  371.230879][   T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  371.236053][   T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  373.113034][   T55] Bluetooth: hci9: command tx timeout
[  373.193235][   T55] Bluetooth: hci10: command tx timeout
[  373.274560][   T55] Bluetooth: hci11: command tx timeout
[  375.193164][   T55] Bluetooth: hci9: command tx timeout
[  375.273153][ T7839] Bluetooth: hci10: command tx timeout
[  375.352927][   T55] Bluetooth: hci11: command tx timeout
[  377.272774][   T55] Bluetooth: hci9: command tx timeout
[  377.646311][   T55] Bluetooth: hci10: command tx timeout
[  377.648622][   T55] Bluetooth: hci11: command tx timeout
[  378.481141][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.483748][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  379.423078][ T7839] Bluetooth: hci9: command tx timeout
[  379.672823][ T7839] Bluetooth: hci11: command tx timeout
[  379.674747][ T7839] Bluetooth: hci10: command tx timeout
[  401.039905][ T5887] Bluetooth: hci2: command 0x0406 tx timeout
[  401.042518][ T5887] Bluetooth: hci1: command 0x0406 tx timeout
[  401.045507][ T5239] Bluetooth: hci0: command 0x0406 tx timeout
[  401.623030][   T34] INFO: task kworker/0:1:10 blocked for more than 160 seconds.
[  401.626214][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  401.645162][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  401.648710][   T34] task:kworker/0:1     state:D stack:23408 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  401.673696][   T34] Workqueue: events ovs_dp_masks_rebalance
[  401.676168][   T34] Call Trace:
[  401.677538][   T34]  <TASK>
[  401.678766][   T34]  __schedule+0x1798/0x4cc0
[  401.680738][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.695102][   T34]  ? __pfx___schedule+0x10/0x10
[  401.697186][   T34]  ? schedule+0x91/0x360
[  401.698950][   T34]  schedule+0x165/0x360
[  401.700667][   T34]  schedule_preempt_disabled+0x13/0x30
[  401.746785][   T34]  __mutex_lock+0x7e6/0x1350
[  401.748721][   T34]  ? __mutex_lock+0x5bb/0x1350
[  401.750667][   T34]  ? ovs_dp_masks_rebalance+0x2f/0xe0
[  401.774745][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  401.776945][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  401.779353][   T34]  ovs_dp_masks_rebalance+0x2f/0xe0
[  401.781813][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  401.803239][   T34]  process_scheduled_works+0xae1/0x17b0
[  401.805623][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  401.808121][   T34]  worker_thread+0x8a0/0xda0
[  401.810029][   T34]  kthread+0x711/0x8a0
[  401.811722][   T34]  ? __pfx_worker_thread+0x10/0x10
[  401.822734][   T34]  ? __pfx_kthread+0x10/0x10
[  401.824709][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.826868][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.828896][   T34]  ? __pfx_kthread+0x10/0x10
[  401.830697][   T34]  ret_from_fork+0x439/0x7d0
[  401.832630][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  401.854961][   T34]  ? __switch_to_asm+0x39/0x70
[  401.856955][   T34]  ? __switch_to_asm+0x33/0x70
[  401.858940][   T34]  ? __pfx_kthread+0x10/0x10
[  401.860870][   T34]  ret_from_fork_asm+0x1a/0x30
[  401.872738][   T34]  </TASK>
[  401.873872][   T34] INFO: task kworker/u8:0:12 blocked for more than 160 seconds.
[  401.876370][   T34]       Not tainted syzkaller #0
[  401.878348][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  401.881674][   T34] task:kworker/u8:0    state:D stack:23896 pid:12    tgid:12    ppid:2      task_flags:0x4208060 flags:0x00004000
[  401.902450][   T34] Workqueue: netns cleanup_net
[  401.904537][   T34] Call Trace:
[  401.905704][   T34]  <TASK>
[  401.906768][   T34]  __schedule+0x1798/0x4cc0
[  401.908603][   T34]  ? __lock_acquire+0xab9/0xd20
[  401.910605][   T34]  ? __lock_acquire+0xab9/0xd20
[  401.912426][   T34]  ? __pfx___schedule+0x10/0x10
[  401.917241][   T34]  ? schedule+0x91/0x360
[  401.918868][   T34]  schedule+0x165/0x360
[  401.920473][   T34]  schedule_preempt_disabled+0x13/0x30
[  401.922322][   T34]  __mutex_lock+0x7e6/0x1350
[  401.924965][   T34]  ? __mutex_lock+0x5bb/0x1350
[  401.926716][   T34]  ? internal_dev_destroy+0xf0/0x170
[  401.928820][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  401.930907][   T34]  ? kasan_quarantine_put+0xdd/0x220
[  401.935530][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.937723][   T34]  internal_dev_destroy+0xf0/0x170
[  401.939865][   T34]  __dp_destroy+0x6a5/0x9b0
[  401.941717][   T34]  ovs_exit_net+0x139/0x790
[  401.946378][   T34]  ? kasan_quarantine_put+0xdd/0x220
[  401.948572][   T34]  ? __pfx___might_resched+0x10/0x10
[  401.950844][   T34]  ? __pfx_ovs_exit_net+0x10/0x10
[  401.955667][   T34]  ? idr_destroy+0x218/0x290
[  401.957635][   T34]  ops_undo_list+0x49a/0x990
[  401.959577][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  401.961744][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  401.964580][   T34]  cleanup_net+0x4c5/0x800
[  401.966531][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  401.968524][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.970679][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  401.978337][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  401.980862][   T34]  process_scheduled_works+0xae1/0x17b0
[  401.984127][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  401.986662][   T34]  worker_thread+0x8a0/0xda0
[  401.988557][   T34]  kthread+0x711/0x8a0
[  401.990287][   T34]  ? __pfx_worker_thread+0x10/0x10
[  401.992427][   T34]  ? __pfx_kthread+0x10/0x10
[  401.998862][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.001187][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.003969][   T34]  ? __pfx_kthread+0x10/0x10
[  402.005989][   T34]  ret_from_fork+0x439/0x7d0
[  402.007911][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.010017][   T34]  ? __switch_to_asm+0x39/0x70
[  402.011990][   T34]  ? __switch_to_asm+0x33/0x70
[  402.016882][   T34]  ? __pfx_kthread+0x10/0x10
[  402.018929][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.021032][   T34]  </TASK>
[  402.022354][   T34] INFO: task kworker/u8:1:13 blocked for more than 160 seconds.
[  402.026224][   T34]       Not tainted syzkaller #0
[  402.028543][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.032069][   T34] task:kworker/u8:1    state:D stack:23640 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.039810][   T34] Workqueue: ipv6_addrconf addrconf_dad_work
[  402.043071][   T34] Call Trace:
[  402.044320][   T34]  <TASK>
[  402.049156][   T34]  __schedule+0x1798/0x4cc0
[  402.050717][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.052399][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.056063][   T34]  ? __pfx___schedule+0x10/0x10
[  402.057719][   T34]  ? schedule+0x91/0x360
[  402.059231][   T34]  schedule+0x165/0x360
[  402.060631][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.062470][   T34]  __mutex_lock+0x7e6/0x1350
[  402.065005][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.066952][   T34]  ? addrconf_dad_work+0x112/0x14b0
[  402.069473][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.071408][   T34]  ? do_raw_spin_lock+0x121/0x290
[  402.074885][   T34]  ? look_up_lock_class+0x74/0x170
[  402.076748][   T34]  addrconf_dad_work+0x112/0x14b0
[  402.078720][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.080443][   T34]  ? __pfx_addrconf_dad_work+0x10/0x10
[  402.082234][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.087647][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.089736][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.091801][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.095269][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.097047][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.098886][   T34]  worker_thread+0x8a0/0xda0
[  402.100757][   T34]  ? __kthread_parkme+0x7b/0x200
[  402.102360][   T34]  kthread+0x711/0x8a0
[  402.105056][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.106706][   T34]  ? __pfx_kthread+0x10/0x10
[  402.108129][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.109751][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.111436][   T34]  ? __pfx_kthread+0x10/0x10
[  402.114800][   T34]  ret_from_fork+0x439/0x7d0
[  402.116301][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.118039][   T34]  ? __switch_to_asm+0x39/0x70
[  402.119599][   T34]  ? __switch_to_asm+0x33/0x70
[  402.121203][   T34]  ? __pfx_kthread+0x10/0x10
[  402.123314][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.124964][   T34]  </TASK>
[  402.128275][   T34] INFO: task kworker/1:1:47 blocked for more than 160 seconds.
[  402.130675][   T34]       Not tainted syzkaller #0
[  402.132233][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.149059][   T34] task:kworker/1:1     state:D stack:25032 pid:47    tgid:47    ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.154753][   T34] Workqueue: events ovs_dp_masks_rebalance
[  402.157024][   T34] Call Trace:
[  402.158450][   T34]  <TASK>
[  402.159657][   T34]  __schedule+0x1798/0x4cc0
[  402.161576][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.167398][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  402.169727][   T34]  ? __pfx___schedule+0x10/0x10
[  402.171884][   T34]  ? schedule+0x91/0x360
[  402.175269][   T34]  schedule+0x165/0x360
[  402.177034][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.179327][   T34]  __mutex_lock+0x7e6/0x1350
[  402.181087][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.184855][   T34]  ? ovs_dp_masks_rebalance+0x2f/0xe0
[  402.187200][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.189315][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.191793][   T34]  ovs_dp_masks_rebalance+0x2f/0xe0
[  402.196948][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.199305][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.201667][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.211596][   T34]  worker_thread+0x8a0/0xda0
[  402.215517][   T34]  kthread+0x711/0x8a0
[  402.217334][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.219450][   T34]  ? __pfx_kthread+0x10/0x10
[  402.221365][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.226621][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.228879][   T34]  ? __pfx_kthread+0x10/0x10
[  402.230917][   T34]  ret_from_fork+0x439/0x7d0
[  402.233433][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.235567][   T34]  ? __switch_to_asm+0x39/0x70
[  402.237606][   T34]  ? __switch_to_asm+0x33/0x70
[  402.239607][   T34]  ? __pfx_kthread+0x10/0x10
[  402.241508][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.246507][   T34]  </TASK>
[  402.256507][   T34] INFO: task kworker/u10:5:1089 blocked for more than 160 seconds.
[  402.259694][   T34]       Not tainted syzkaller #0
[  402.261678][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.271212][   T34] task:kworker/u10:5   state:D stack:22312 pid:1089  tgid:1089  ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.276400][   T34] Workqueue: events_unbound linkwatch_event
[  402.278845][   T34] Call Trace:
[  402.280337][   T34]  <TASK>
[  402.281556][   T34]  __schedule+0x1798/0x4cc0
[  402.286790][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.288779][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.290620][   T34]  ? __pfx___schedule+0x10/0x10
[  402.293462][   T34]  ? schedule+0x91/0x360
[  402.295265][   T34]  schedule+0x165/0x360
[  402.297007][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.299243][   T34]  __mutex_lock+0x7e6/0x1350
[  402.301169][   T34]  ? look_up_lock_class+0x74/0x170
[  402.308130][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.310146][   T34]  ? linkwatch_event+0xe/0x60
[  402.312097][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.314669][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.316854][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.319201][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.321530][   T34]  linkwatch_event+0xe/0x60
[  402.328974][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.331254][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.334172][   T34]  worker_thread+0x8a0/0xda0
[  402.336112][   T34]  kthread+0x711/0x8a0
[  402.337747][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.339917][   T34]  ? __pfx_kthread+0x10/0x10
[  402.341843][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.346862][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.349157][   T34]  ? __pfx_kthread+0x10/0x10
[  402.351173][   T34]  ret_from_fork+0x439/0x7d0
[  402.353581][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.357672][   T34]  ? __switch_to_asm+0x39/0x70
[  402.359720][   T34]  ? __switch_to_asm+0x33/0x70
[  402.361788][   T34]  ? __pfx_kthread+0x10/0x10
[  402.366732][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.368841][   T34]  </TASK>
[  402.370188][   T34] INFO: task kworker/0:2:3146 blocked for more than 160 seconds.
[  402.373940][   T34]       Not tainted syzkaller #0
[  402.376101][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.379787][   T34] task:kworker/0:2     state:D stack:24936 pid:3146  tgid:3146  ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.387666][   T34] Workqueue: events ovs_dp_masks_rebalance
[  402.390262][   T34] Call Trace:
[  402.391719][   T34]  <TASK>
[  402.393446][   T34]  __schedule+0x1798/0x4cc0
[  402.395441][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.398196][   T34]  ? __pfx___schedule+0x10/0x10
[  402.400349][   T34]  ? preempt_schedule+0xae/0xc0
[  402.402451][   T34]  ? schedule+0x91/0x360
[  402.407316][   T34]  schedule+0x165/0x360
[  402.409330][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.411681][   T34]  __mutex_lock+0x7e6/0x1350
[  402.416558][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.418687][   T34]  ? ovs_dp_masks_rebalance+0x2f/0xe0
[  402.421055][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.425997][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.428500][   T34]  ovs_dp_masks_rebalance+0x2f/0xe0
[  402.430775][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.435688][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.438189][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.440839][   T34]  worker_thread+0x8a0/0xda0
[  402.445915][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.448596][   T34]  ? __kthread_parkme+0x7b/0x200
[  402.450725][   T34]  kthread+0x711/0x8a0
[  402.452527][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.455275][   T34]  ? __pfx_kthread+0x10/0x10
[  402.465717][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.467956][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.470155][   T34]  ? __pfx_kthread+0x10/0x10
[  402.472187][   T34]  ret_from_fork+0x439/0x7d0
[  402.477772][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.480059][   T34]  ? __switch_to_asm+0x39/0x70
[  402.482115][   T34]  ? __switch_to_asm+0x33/0x70
[  402.484728][   T34]  ? __pfx_kthread+0x10/0x10
[  402.486787][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.488779][   T34]  </TASK>
[  402.490070][   T34] INFO: task kworker/0:3:5317 blocked for more than 160 seconds.
[  402.496199][   T34]       Not tainted syzkaller #0
[  402.498355][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.502022][   T34] task:kworker/0:3     state:D stack:24920 pid:5317  tgid:5317  ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.507795][   T34] Workqueue: events ovs_dp_masks_rebalance
[  402.510302][   T34] Call Trace:
[  402.511776][   T34]  <TASK>
[  402.515654][   T34]  __schedule+0x1798/0x4cc0
[  402.517645][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.520375][   T34]  ? __pfx___schedule+0x10/0x10
[  402.522498][   T34]  ? schedule+0x91/0x360
[  402.528022][   T34]  schedule+0x165/0x360
[  402.529857][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.532185][   T34]  __mutex_lock+0x7e6/0x1350
[  402.536863][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.539029][   T34]  ? ovs_dp_masks_rebalance+0x2f/0xe0
[  402.541548][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.545773][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.548167][   T34]  ovs_dp_masks_rebalance+0x2f/0xe0
[  402.550646][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.558672][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.563380][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.565980][   T34]  worker_thread+0x8a0/0xda0
[  402.567983][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.570714][   T34]  ? __kthread_parkme+0x7b/0x200
[  402.575867][   T34]  kthread+0x711/0x8a0
[  402.577693][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.579907][   T34]  ? __pfx_kthread+0x10/0x10
[  402.581913][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.584898][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.587181][   T34]  ? __pfx_kthread+0x10/0x10
[  402.589151][   T34]  ret_from_fork+0x439/0x7d0
[  402.591173][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.596392][   T34]  ? __switch_to_asm+0x39/0x70
[  402.598758][   T34]  ? __switch_to_asm+0x33/0x70
[  402.601234][   T34]  ? __pfx_kthread+0x10/0x10
[  402.603882][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.606030][   T34]  </TASK>
[  402.607415][   T34] INFO: task kworker/1:3:5932 blocked for more than 161 seconds.
[  402.610690][   T34]       Not tainted syzkaller #0
[  402.615772][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.619486][   T34] task:kworker/1:3     state:D stack:23504 pid:5932  tgid:5932  ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.625199][   T34] Workqueue: events ovs_dp_masks_rebalance
[  402.627695][   T34] Call Trace:
[  402.629148][   T34]  <TASK>
[  402.630447][   T34]  __schedule+0x1798/0x4cc0
[  402.632440][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.646603][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  402.648840][   T34]  ? __pfx___schedule+0x10/0x10
[  402.650855][   T34]  ? schedule+0x91/0x360
[  402.652606][   T34]  schedule+0x165/0x360
[  402.656905][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.659205][   T34]  __mutex_lock+0x7e6/0x1350
[  402.661109][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.665865][   T34]  ? ovs_dp_masks_rebalance+0x2f/0xe0
[  402.668102][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.670204][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.672574][   T34]  ovs_dp_masks_rebalance+0x2f/0xe0
[  402.675310][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.677693][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.680044][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.682481][   T34]  worker_thread+0x8a0/0xda0
[  402.685836][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.688423][   T34]  ? __kthread_parkme+0x7b/0x200
[  402.690585][   T34]  kthread+0x711/0x8a0
[  402.692307][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.694923][   T34]  ? __pfx_kthread+0x10/0x10
[  402.696592][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.698646][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.700526][   T34]  ? __pfx_kthread+0x10/0x10
[  402.702008][   T34]  ret_from_fork+0x439/0x7d0
[  402.705815][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.707790][   T34]  ? __switch_to_asm+0x39/0x70
[  402.709420][   T34]  ? __switch_to_asm+0x33/0x70
[  402.711226][   T34]  ? __pfx_kthread+0x10/0x10
[  402.713890][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.715819][   T34]  </TASK>
[  402.717088][   T34] INFO: task kworker/1:5:5966 blocked for more than 161 seconds.
[  402.720202][   T34]       Not tainted syzkaller #0
[  402.722212][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.727316][   T34] task:kworker/1:5     state:D stack:23144 pid:5966  tgid:5966  ppid:2      task_flags:0x4208060 flags:0x00004000
[  402.731757][   T34] Workqueue: events bpf_prog_free_deferred
[  402.734240][   T34] Call Trace:
[  402.735419][   T34]  <TASK>
[  402.736586][   T34]  __schedule+0x1798/0x4cc0
[  402.738451][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  402.740801][   T34]  ? __pfx___schedule+0x10/0x10
[  402.747013][   T34]  ? schedule+0x91/0x360
[  402.748683][   T34]  schedule+0x165/0x360
[  402.750445][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.753184][   T34]  __mutex_lock+0x7e6/0x1350
[  402.755255][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.757268][   T34]  ? bpf_prog_dev_bound_destroy+0x75/0x590
[  402.759666][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.761826][   T34]  ? do_raw_spin_lock+0x121/0x290
[  402.767915][   T34]  bpf_prog_dev_bound_destroy+0x75/0x590
[  402.770305][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.772340][   T34]  ? __pfx_bpf_prog_dev_bound_destroy+0x10/0x10
[  402.775383][   T34]  ? bpf_prog_free_deferred+0x345/0x6b0
[  402.777605][   T34]  ? rcu_is_watching+0x15/0xb0
[  402.779265][   T34]  ? bpf_prog_free_deferred+0x345/0x6b0
[  402.781047][   T34]  ? kfree+0x4d/0x440
[  402.782374][   T34]  bpf_prog_free_deferred+0x38d/0x6b0
[  402.786848][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  402.788594][   T34]  process_scheduled_works+0xae1/0x17b0
[  402.790412][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.792360][   T34]  worker_thread+0x8a0/0xda0
[  402.794628][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.796706][   T34]  ? __kthread_parkme+0x7b/0x200
[  402.798360][   T34]  kthread+0x711/0x8a0
[  402.799718][   T34]  ? __pfx_worker_thread+0x10/0x10
[  402.801387][   T34]  ? __pfx_kthread+0x10/0x10
[  402.805232][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.806883][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.808773][   T34]  ? __pfx_kthread+0x10/0x10
[  402.810687][   T34]  ret_from_fork+0x439/0x7d0
[  402.812628][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  402.815354][   T34]  ? __switch_to_asm+0x39/0x70
[  402.817312][   T34]  ? __switch_to_asm+0x33/0x70
[  402.819272][   T34]  ? __pfx_kthread+0x10/0x10
[  402.821016][   T34]  ret_from_fork_asm+0x1a/0x30
[  402.824534][   T34]  </TASK>
[  402.825878][   T34] INFO: task syz.6.763:7918 blocked for more than 161 seconds.
[  402.828758][   T34]       Not tainted syzkaller #0
[  402.830512][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.834536][   T34] task:syz.6.763       state:D stack:25096 pid:7918  tgid:7918  ppid:7837   task_flags:0x400040 flags:0x00004004
[  402.838806][   T34] Call Trace:
[  402.840206][   T34]  <TASK>
[  402.841435][   T34]  __schedule+0x1798/0x4cc0
[  402.845057][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.846671][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.848266][   T34]  ? __pfx___schedule+0x10/0x10
[  402.849861][   T34]  ? schedule+0x91/0x360
[  402.851341][   T34]  schedule+0x165/0x360
[  402.855023][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.857127][   T34]  __mutex_lock+0x7e6/0x1350
[  402.858789][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.860396][   T34]  ? ppp_release+0x87/0x1f0
[  402.862070][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.867959][   T34]  ppp_release+0x87/0x1f0
[  402.869537][   T34]  ? __pfx_ppp_release+0x10/0x10
[  402.871255][   T34]  __fput+0x44c/0xa70
[  402.874259][   T34]  task_work_run+0x1d4/0x260
[  402.876046][   T34]  ? __pfx_task_work_run+0x10/0x10
[  402.877819][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  402.879629][   T34]  exit_to_user_mode_loop+0xec/0x110
[  402.881443][   T34]  do_syscall_64+0x2bd/0x3b0
[  402.885984][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.888001][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.890400][   T34]  ? exc_page_fault+0x9f/0xf0
[  402.892045][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.894515][   T34] RIP: 0033:0x7fbb4f78eba9
[  402.896181][   T34] RSP: 002b:00007ffeec074fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  402.898959][   T34] RAX: 0000000000000000 RBX: 00007fbb4f9d7da0 RCX: 00007fbb4f78eba9
[  402.901961][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  402.906654][   T34] RBP: 00007fbb4f9d7da0 R08: 0000000000021884 R09: 0000001eec0752bf
[  402.909390][   T34] R10: 00007fbb4f9d7cb0 R11: 0000000000000246 R12: 000000000003966e
[  402.912160][   T34] R13: 00007fbb4f9d6090 R14: ffffffffffffffff R15: 00007ffeec0750e0
[  402.915363][   T34]  </TASK>
[  402.916591][   T34] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  402.920069][   T34] INFO: task syz.5.764:7923 blocked for more than 161 seconds.
[  402.925241][   T34]       Not tainted syzkaller #0
[  402.927220][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  402.930588][   T34] task:syz.5.764       state:D stack:24848 pid:7923  tgid:7922  ppid:7833   task_flags:0x400140 flags:0x00004004
[  402.935936][   T34] Call Trace:
[  402.937333][   T34]  <TASK>
[  402.938564][   T34]  __schedule+0x1798/0x4cc0
[  402.940494][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.942507][   T34]  ? __lock_acquire+0xab9/0xd20
[  402.946468][   T34]  ? __pfx___schedule+0x10/0x10
[  402.948502][   T34]  ? schedule+0x91/0x360
[  402.950257][   T34]  schedule+0x165/0x360
[  402.951751][   T34]  schedule_preempt_disabled+0x13/0x30
[  402.954194][   T34]  __mutex_lock+0x7e6/0x1350
[  402.955742][   T34]  ? __mutex_lock+0x5bb/0x1350
[  402.957668][   T34]  ? ethnl_default_dump_one+0x151/0x7e0
[  402.959925][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  402.961840][   T34]  ? __nlmsg_put+0xef/0x1b0
[  402.967742][   T34]  ethnl_default_dump_one+0x151/0x7e0
[  402.971067][   T34]  ? ethnl_default_dumpit+0xd1/0x600
[  402.973525][   T34]  ethnl_default_dumpit+0x30c/0x600
[  402.975522][   T34]  ? ethnl_default_dumpit+0xd1/0x600
[  402.977528][   T34]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  402.979842][   T34]  ? __build_skb_around+0x257/0x3e0
[  402.981950][   T34]  genl_dumpit+0x10b/0x1b0
[  402.987093][   T34]  netlink_dump+0x6e4/0xe90
[  402.988940][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  402.990692][   T34]  ? ethnl_default_parse+0x181/0x290
[  402.993274][   T34]  ? genl_start+0x581/0x6c0
[  402.994943][   T34]  __netlink_dump_start+0x5cb/0x7e0
[  402.996831][   T34]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  402.998823][   T34]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  403.001007][   T34]  ? genl_get_cmd+0x67f/0x910
[  403.004752][   T34]  ? __pfx_genl_start+0x10/0x10
[  403.006551][   T34]  ? __pfx_genl_dumpit+0x10/0x10
[  403.008390][   T34]  ? __pfx_genl_done+0x10/0x10
[  403.010321][   T34]  genl_rcv_msg+0x5da/0x790
[  403.012073][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  403.014515][   T34]  ? __pfx_ethnl_default_start+0x10/0x10
[  403.016463][   T34]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  403.018390][   T34]  ? __pfx_ethnl_default_done+0x10/0x10
[  403.020302][   T34]  ? __asan_memcpy+0x40/0x70
[  403.021857][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  403.026367][   T34]  netlink_rcv_skb+0x208/0x470
[  403.028007][   T34]  ? __lock_acquire+0xab9/0xd20
[  403.029658][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  403.031472][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  403.034320][   T34]  ? down_read+0x1ad/0x2e0
[  403.036107][   T34]  genl_rcv+0x28/0x40
[  403.037543][   T34]  netlink_unicast+0x82f/0x9e0
[  403.039274][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  403.041069][   T34]  ? netlink_sendmsg+0x642/0xb30
[  403.045032][   T34]  ? skb_put+0x11b/0x210
[  403.046570][   T34]  netlink_sendmsg+0x805/0xb30
[  403.048144][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.049946][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  403.051672][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  403.054027][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.055839][   T34]  __sock_sendmsg+0x21c/0x270
[  403.057407][   T34]  ____sys_sendmsg+0x505/0x830
[  403.059025][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  403.060885][   T34]  ? import_iovec+0x74/0xa0
[  403.065000][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  403.066603][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  403.068420][   T34]  ? __fget_files+0x2a/0x420
[  403.069959][   T34]  ? __fget_files+0x3a0/0x420
[  403.075321][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  403.077106][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  403.079034][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  403.080906][   T34]  ? rcu_is_watching+0x15/0xb0
[  403.082617][   T34]  ? do_syscall_64+0xbe/0x3b0
[  403.085883][   T34]  do_syscall_64+0xfa/0x3b0
[  403.087483][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.089280][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.091339][   T34]  ? exc_page_fault+0x9f/0xf0
[  403.095197][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.097182][   T34] RIP: 0033:0x7f8e3d38eba9
[  403.098738][   T34] RSP: 002b:00007f8e3e2af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.102087][   T34] RAX: ffffffffffffffda RBX: 00007f8e3d5d5fa0 RCX: 00007f8e3d38eba9
[  403.107235][   T34] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 000000000000000e
[  403.109995][   T34] RBP: 00007f8e3d411e19 R08: 0000000000000000 R09: 0000000000000000
[  403.114596][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.117343][   T34] R13: 00007f8e3d5d6038 R14: 00007f8e3d5d5fa0 R15: 00007ffdb7350458
[  403.120070][   T34]  </TASK>
[  403.121158][   T34] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  403.126171][   T34] INFO: task syz.4.757:7928 blocked for more than 161 seconds.
[  403.128677][   T34]       Not tainted syzkaller #0
[  403.130246][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  403.133642][   T34] task:syz.4.757       state:D stack:25960 pid:7928  tgid:7927  ppid:7829   task_flags:0x400140 flags:0x00004004
[  403.137632][   T34] Call Trace:
[  403.138829][   T34]  <TASK>
[  403.139958][   T34]  __schedule+0x1798/0x4cc0
[  403.141596][   T34]  ? __lock_acquire+0xab9/0xd20
[  403.145798][   T34]  ? __lock_acquire+0xab9/0xd20
[  403.147426][   T34]  ? __pfx___schedule+0x10/0x10
[  403.149133][   T34]  ? schedule+0x91/0x360
[  403.150583][   T34]  schedule+0x165/0x360
[  403.152042][   T34]  schedule_preempt_disabled+0x13/0x30
[  403.154390][   T34]  __mutex_lock+0x7e6/0x1350
[  403.156004][   T34]  ? __mutex_lock+0x5bb/0x1350
[  403.157582][   T34]  ? __tun_chr_ioctl+0x37a/0x1df0
[  403.159293][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  403.161047][   T34]  __tun_chr_ioctl+0x37a/0x1df0
[  403.165040][   T34]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  403.166966][   T34]  ? __fget_files+0x2a/0x420
[  403.168448][   T34]  ? __fget_files+0x3a0/0x420
[  403.169943][   T34]  ? __fget_files+0x2a/0x420
[  403.171388][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  403.174480][   T34]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  403.176504][   T34]  __se_sys_ioctl+0xfc/0x170
[  403.178228][   T34]  do_syscall_64+0xfa/0x3b0
[  403.180115][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.182572][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  403.190287][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.193066][   T34] RIP: 0033:0x7f2b0ef8eba9
[  403.194649][   T34] RSP: 002b:00007f2b0fd50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  403.197819][   T34] RAX: ffffffffffffffda RBX: 00007f2b0f1d5fa0 RCX: 00007f2b0ef8eba9
[  403.200984][   T34] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 000000000000000d
[  403.207686][   T34] RBP: 00007f2b0f011e19 R08: 0000000000000000 R09: 0000000000000000
[  403.211060][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.214905][   T34] R13: 00007f2b0f1d6038 R14: 00007f2b0f1d5fa0 R15: 00007fffd86bfed8
[  403.217672][   T34]  </TASK>
[  403.218757][   T34] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  403.222068][   T34] 
[  403.222068][   T34] Showing all locks held in the system:
[  403.227297][   T34] 3 locks held by kworker/0:1/10:
[  403.229113][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.233275][   T34]  #1: ffffc900000d7bc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.238013][   T34]  #2: ffffffff8f86f568 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  403.241593][   T34] 5 locks held by kworker/u8:0/12:
[  403.245423][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.249890][   T34]  #1: ffffc900000f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.254657][   T34]  #2: ffffffff8f52d310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  403.257966][   T34]  #3: ffffffff8f86f568 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xdc/0x790
[  403.260899][   T34]  #4: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170
[  403.265640][   T34] 3 locks held by kworker/u8:1/13:
[  403.267495][   T34]  #0: ffff888109a53148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.272299][   T34]  #1: ffffc90000107bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.278544][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  403.282030][   T34] 3 locks held by kworker/1:0/24:
[  403.285859][   T34]  #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.290280][   T34]  #1: ffffc900001c7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.296134][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  403.299438][   T34] 1 lock held by khungtaskd/34:
[  403.300982][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  403.306281][   T34] 3 locks held by kworker/1:1/47:
[  403.307955][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.311417][   T34]  #1: ffffc9000075fbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.317842][   T34]  #2: ffffffff8f86f568 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  403.325831][   T34] 3 locks held by kworker/u10:5/1089:
[  403.327730][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.331871][   T34]  #1: ffffc90006e57bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.335976][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  403.338972][   T34] 3 locks held by kworker/0:2/3146:
[  403.340858][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.347034][   T34]  #1: ffffc90021f6fbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.352364][   T34]  #2: ffffffff8f86f568 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  403.356666][   T34] 1 lock held by klogd/5288:
[  403.358629][   T34] 3 locks held by kworker/0:3/5317:
[  403.360467][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.366482][   T34]  #1: ffffc90001dafbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.371379][   T34]  #2: ffffffff8f86f568 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  403.375645][   T34] 2 locks held by getty/5679:
[  403.377332][   T34]  #0: ffff8880213a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  403.384750][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  403.388364][   T34] 5 locks held by kworker/u11:2/5886:
[  403.390206][   T34]  #0: ffff88801f5d3148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.394157][   T34]  #1: ffffc900034efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.398245][   T34]  #2: ffff88810b58cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  403.401364][   T34]  #3: ffff88810b58c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  403.408052][   T34]  #4: ffffffff8e13fbb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  403.412383][   T34] 3 locks held by kworker/1:3/5932:
[  403.414929][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.419257][   T34]  #1: ffffc90003a7fbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.427455][   T34]  #2: ffffffff8f86f568 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0
[  403.431110][   T34] 3 locks held by kworker/1:5/5966:
[  403.434810][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  403.438760][   T34]  #1: ffffc90003c6fbc0 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  403.445061][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: bpf_prog_dev_bound_destroy+0x75/0x590
[  403.448819][   T34] 1 lock held by syz.6.763/7918:
[  403.450429][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0
[  403.453665][   T34] 4 locks held by syz.6.763/7919:
[  403.455345][   T34] 3 locks held by syz.5.764/7923:
[  403.457055][   T34]  #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  403.459776][   T34]  #1: ffff888029b206d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  403.466261][   T34]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_dump_one+0x151/0x7e0
[  403.470429][   T34] 1 lock held by syz.4.757/7928:
[  403.472550][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  403.477092][   T34] 1 lock held by syz-executor/7934:
[  403.479325][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.487594][   T34] 1 lock held by syz-executor/7935:
[  403.489740][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.494192][   T34] 1 lock held by syz-executor/7938:
[  403.496422][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.500454][   T34] 1 lock held by syz-executor/7947:
[  403.505287][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.509169][   T34] 1 lock held by syz-executor/7949:
[  403.511380][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.519649][   T34] 1 lock held by syz-executor/7951:
[  403.521755][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.528495][   T34] 1 lock held by syz-executor/7963:
[  403.530787][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.536602][   T34] 1 lock held by syz-executor/7967:
[  403.538775][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.545423][   T34] 1 lock held by syz-executor/7970:
[  403.547520][   T34]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  403.558049][   T34] 
[  403.559154][   T34] =============================================
[  403.559154][   T34] 
[  403.562550][   T34] NMI backtrace for cpu 1
[  403.562580][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  403.562595][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.562604][   T34] Call Trace:
[  403.562611][   T34]  <TASK>
[  403.562618][   T34]  dump_stack_lvl+0x189/0x250
[  403.562644][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.562703][   T34]  ? __pfx__printk+0x10/0x10
[  403.562732][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  403.562755][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  403.562777][   T34]  ? __pfx__printk+0x10/0x10
[  403.562800][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  403.562823][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  403.562845][   T34]  watchdog+0xf93/0xfe0
[  403.562868][   T34]  ? watchdog+0x1de/0xfe0
[  403.562891][   T34]  kthread+0x711/0x8a0
[  403.562910][   T34]  ? __pfx_watchdog+0x10/0x10
[  403.562928][   T34]  ? __pfx_kthread+0x10/0x10
[  403.562947][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  403.562961][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.562975][   T34]  ? __pfx_kthread+0x10/0x10
[  403.562993][   T34]  ret_from_fork+0x439/0x7d0
[  403.563010][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  403.563029][   T34]  ? __switch_to_asm+0x39/0x70
[  403.563045][   T34]  ? __switch_to_asm+0x33/0x70
[  403.563061][   T34]  ? __pfx_kthread+0x10/0x10
[  403.563079][   T34]  ret_from_fork_asm+0x1a/0x30
[  403.563112][   T34]  </TASK>
[  403.632964][   T34] Sending NMI from CPU 1 to CPUs 0:
[  403.635253][    C0] NMI backtrace for cpu 0
[  403.635276][    C0] CPU: 0 UID: 0 PID: 7919 Comm: syz.6.763 Not tainted syzkaller #0 PREEMPT(full) 
[  403.635290][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.635298][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  403.635324][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 52 f8 8e 03 66
[  403.635334][    C0] RSP: 0018:ffffc90000007368 EFLAGS: 00000046
[  403.635350][    C0] RAX: 0000000000000096 RBX: ffff88804b023900 RCX: 0000000000000838
[  403.635360][    C0] RDX: 0000000000000000 RSI: 0000000000000096 RDI: 0000000000000838
[  403.635366][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ae170e
[  403.635373][    C0] R10: 0000000000000003 R11: ffffffff81704490 R12: 0000000010000f19
[  403.635380][    C0] R13: dffffc0000000000 R14: 0000000000000096 R15: 0000000000000020
[  403.635388][    C0] FS:  00007fbb506066c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  403.635399][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  403.635406][    C0] CR2: 00007fba8b503999 CR3: 000000001fa6e000 CR4: 00000000000006f0
[  403.635436][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  403.635442][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  403.635446][    C0] Call Trace:
[  403.635450][    C0]  <IRQ>
[  403.635454][    C0]  lapic_next_event+0x11/0x20
[  403.635465][    C0]  clockevents_program_event+0x1cf/0x360
[  403.635480][    C0]  hrtimer_interrupt+0x620/0xaa0
[  403.635495][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  403.635505][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  403.635514][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  403.635524][    C0] RIP: 0010:kasan_check_range+0x0/0x2c0
[  403.635537][    C0] Code: 48 c7 c6 9e a9 ba 8d e8 fe d5 04 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba
[  403.635543][    C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00000246
[  403.635550][    C0] RAX: 1ffff92000000ee0 RBX: 0000000000000010 RCX: ffffffff8172dd88
[  403.635555][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000007718
[  403.635560][    C0] RBP: 0000000000000000 R08: 000000000000000a R09: ffffffff8172d195
[  403.635564][    C0] R10: ffffc90000007718 R11: ffffffff81ac4d00 R12: ffffc90000007a50
[  403.635571][    C0] R13: ffffc90000007718 R14: ffffc90000007718 R15: ffffc90000007710
[  403.635580][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  403.635595][    C0]  ? unwind_next_frame+0xa5/0x2390
[  403.635608][    C0]  ? unwind_next_frame+0xc98/0x2390
[  403.635624][    C0]  __asan_memset+0x22/0x50
[  403.635637][    C0]  unwind_next_frame+0xc98/0x2390
[  403.635651][    C0]  ? unwind_next_frame+0xa5/0x2390
[  403.635700][    C0]  ? kasan_save_track+0x3e/0x80
[  403.635717][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  403.635731][    C0]  arch_stack_walk+0x11c/0x150
[  403.635745][    C0]  ? kasan_save_free_info+0x46/0x50
[  403.635758][    C0]  stack_trace_save+0x9c/0xe0
[  403.635771][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  403.635789][    C0]  kasan_save_track+0x3e/0x80
[  403.635801][    C0]  ? kasan_save_track+0x3e/0x80
[  403.635831][    C0]  ? skb_release_data+0x62d/0x7c0
[  403.635848][    C0]  kasan_save_free_info+0x46/0x50
[  403.635860][    C0]  __kasan_slab_free+0x5b/0x80
[  403.635876][    C0]  kmem_cache_free+0x18f/0x400
[  403.635895][    C0]  skb_release_data+0x62d/0x7c0
[  403.635913][    C0]  consume_skb+0x9e/0xf0
[  403.635927][    C0]  mac80211_hwsim_beacon_tx+0x3f0/0x860
[  403.635945][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  403.635965][    C0]  __iterate_interfaces+0x2ab/0x590
[  403.635979][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  403.635995][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  403.636012][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  403.636027][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  403.636045][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  403.636057][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  403.636069][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  403.636085][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  403.636095][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  403.636104][    C0]  handle_softirqs+0x286/0x870
[  403.636113][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  403.636122][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  403.636132][    C0]  __irq_exit_rcu+0xca/0x1f0
[  403.636139][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  403.636148][    C0]  irq_exit_rcu+0x9/0x30
[  403.636155][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  403.636163][    C0]  </IRQ>
[  403.636166][    C0]  <TASK>
[  403.636168][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  403.636177][    C0] RIP: 0010:preempt_schedule+0x0/0xc0
[  403.636186][    C0] Code: 00 00 e8 43 8e 14 f6 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 56 53 48 83 e4 e0 48 83 ec 60 65 48 8b
[  403.636193][    C0] RSP: 0018:ffffc900029bf460 EFLAGS: 00000246
[  403.636201][    C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: 0000000000000000
[  403.636205][    C0] RDX: 0000000000000007 RSI: ffffffff8d9ba14a RDI: 00000000ffffffff
[  403.636210][    C0] RBP: ffffc900029bf4b0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  403.636222][    C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: dffffc0000000000
[  403.636228][    C0] R13: ffff888022b08000 R14: ffffffff99ce6018 R15: 1ffff92000537e98
[  403.636238][    C0]  preempt_schedule_thunk+0x16/0x30
[  403.636253][    C0]  _raw_spin_unlock_irqrestore+0xfd/0x110
[  403.636262][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  403.636276][    C0]  debug_check_no_obj_freed+0x451/0x470
[  403.636289][    C0]  ? __page_table_check_zero+0xba/0x530
[  403.636303][    C0]  ? __page_table_check_zero+0xba/0x530
[  403.636314][    C0]  __free_frozen_pages+0x4dd/0xd30
[  403.636329][    C0]  __put_partials+0x156/0x1a0
[  403.636338][    C0]  put_cpu_partial+0x17c/0x250
[  403.636345][    C0]  ? put_cpu_partial+0x6d/0x250
[  403.636353][    C0]  __slab_free+0x2d5/0x3c0
[  403.636362][    C0]  ? __phys_addr+0xd3/0x180
[  403.636373][    C0]  qlist_free_all+0x97/0x140
[  403.636383][    C0]  kasan_quarantine_reduce+0x148/0x160
[  403.636394][    C0]  __kasan_slab_alloc+0x22/0x80
[  403.636404][    C0]  __kmalloc_noprof+0x224/0x4f0
[  403.636414][    C0]  ? kobject_get_path+0xc5/0x2d0
[  403.636425][    C0]  kobject_get_path+0xc5/0x2d0
[  403.636435][    C0]  kobject_uevent_env+0x292/0x8c0
[  403.636446][    C0]  ? irqentry_exit+0x74/0x90
[  403.636459][    C0]  __kobject_del+0xd2/0x300
[  403.636472][    C0]  ? kobject_put+0x237/0x480
[  403.636485][    C0]  kobject_put+0x243/0x480
[  403.636499][    C0]  netdev_queue_update_kobjects+0x5db/0x6c0
[  403.636522][    C0]  netdev_unregister_kobject+0x11f/0x450
[  403.636541][    C0]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  403.636567][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  403.636593][    C0]  ? ppp_release+0x87/0x1f0
[  403.636614][    C0]  unregister_netdevice_queue+0x33c/0x380
[  403.636635][    C0]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  403.636656][    C0]  ? __pfx_locks_remove_posix+0x10/0x10
[  403.636708][    C0]  ppp_release+0xed/0x1f0
[  403.636724][    C0]  ? __pfx_ppp_release+0x10/0x10
[  403.636740][    C0]  __fput+0x44c/0xa70
[  403.636762][    C0]  fput_close_sync+0x119/0x200
[  403.636779][    C0]  ? __pfx_fput_close_sync+0x10/0x10
[  403.636800][    C0]  __x64_sys_close+0x7f/0x110
[  403.636818][    C0]  do_syscall_64+0xfa/0x3b0
[  403.636836][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.636848][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  403.636862][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.636874][    C0] RIP: 0033:0x7fbb4f78eba9
[  403.636887][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.636897][    C0] RSP: 002b:00007fbb50606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  403.636909][    C0] RAX: ffffffffffffffda RBX: 00007fbb4f9d5fa0 RCX: 00007fbb4f78eba9
[  403.636918][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b
[  403.636924][    C0] RBP: 00007fbb4f811e19 R08: 0000000000000000 R09: 0000000000000000
[  403.636932][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.636939][    C0] R13: 00007fbb4f9d6038 R14: 00007fbb4f9d5fa0 R15: 00007ffeec074e68
[  403.636952][    C0]  </TASK>
[  403.939631][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  403.942027][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  403.945048][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.948872][   T34] Call Trace:
[  403.950239][   T34]  <TASK>
[  403.951453][   T34]  dump_stack_lvl+0x99/0x250
[  403.953055][   T34]  ? __asan_memcpy+0x40/0x70
[  403.954585][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.956292][   T34]  ? __pfx__printk+0x10/0x10
[  403.958023][   T34]  vpanic+0x281/0x750
[  403.959320][   T34]  ? __pfx_vpanic+0x10/0x10
[  403.960806][   T34]  ? preempt_schedule+0xae/0xc0
[  403.962425][   T34]  ? preempt_schedule_common+0x83/0xd0
[  403.964252][   T34]  panic+0xb9/0xc0
[  403.965469][   T34]  ? __pfx_panic+0x10/0x10
[  403.967122][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  403.969009][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  403.970998][   T34]  watchdog+0xfd2/0xfe0
[  403.972419][   T34]  ? watchdog+0x1de/0xfe0
[  403.973850][   T34]  kthread+0x711/0x8a0
[  403.975345][   T34]  ? __pfx_watchdog+0x10/0x10
[  403.977093][   T34]  ? __pfx_kthread+0x10/0x10
[  403.978662][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  403.980369][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.982067][   T34]  ? __pfx_kthread+0x10/0x10
[  403.983726][   T34]  ret_from_fork+0x439/0x7d0
[  403.985347][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  403.987210][   T34]  ? __switch_to_asm+0x39/0x70
[  403.989181][   T34]  ? __switch_to_asm+0x33/0x70
[  403.991078][   T34]  ? __pfx_kthread+0x10/0x10
[  403.992772][   T34]  ret_from_fork_asm+0x1a/0x30
[  403.994587][   T34]  </TASK>
[  403.996197][   T34] Kernel Offset: disabled
[  403.997636][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:51:08  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000009f RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000009f RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900000068d8
R8 =0000000000000000 R9 =ffffffff81ae170e R10=0000000000000003 R11=ffffffff81704490
R12=0000000010000f19 R13=dffffc0000000000 R14=000000000000009f R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbb506066c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fba8b503999 CR3=000000001fa6e000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fba8d7a7d20
XMM02=0000000000000025 ffffffff00000000 XMM03=00007fba8d7a7d20 00007fba8d7a7d20
XMM04=0000000000000000 0000000000000015 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff8a51cda5 ffffffff00000027 XMM07=ffffffff00000000 00007fba8d7a7d20
XMM08=00007fba8d7a7d20 0000000000000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b47e040 RBX=0000000000000001 RCX=ffff888109ff5640 RDX=0000000000000000
RSI=ffffffff8be33de0 RDI=ffffffff8be33da0 RBP=fffffffffffffe38 RSP=ffffc9000354fa18
R8 =0000000000000000 R9 =ffffffff8b47df72 R10=dffffc0000000000 R11=ffffffff8b47dea0
R12=dffffc0000000000 R13=ffffffff8b47df72 R14=ffff888021394d80 R15=00000000000000bb
RIP=ffffffff8b7d3c20 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fba8b4282cc CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fba8d7a7d20
XMM02=0000000000000025 ffffffff00000000 XMM03=00007fba8d7a7d20 00007fba8d7a7d20
XMM04=0000000000000000 00007fba8d7a7d20 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff8a51cda5 ffffffff00000027 XMM07=ffffffff00000000 00007fba8d7a7d20
XMM08=00007fba8d7a7d20 0000000000000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
