last executing test programs:

1.81450691s ago: executing program 2 (id=754):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r1, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)

897.784944ms ago: executing program 2 (id=790):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)

818.721705ms ago: executing program 2 (id=792):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0274204690d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

658.330609ms ago: executing program 2 (id=796):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2c, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0)

579.998515ms ago: executing program 2 (id=798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x54}}, 0x0)

509.092412ms ago: executing program 2 (id=802):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250af7a19d98c880e1b30400000000001800000000000000000000000000003db0519c2ae7179490"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)={0x624, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7ae, 0xc, 0x6, 0x7fff}, {0x9, 0xff, 0x2, 0x6}, {0x7fff, 0x80, 0x81, 0x8}, {0x2, 0x8, 0x5, 0x7ff}, {0x1, 0x52, 0x2, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4b4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x3, 0x2, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x101, 0x80, 0x40, 0x6}, {0x5, 0x6, 0x9, 0xffffffff}, {0x7, 0x9, 0x5, 0x5}, {0x400, 0xb, 0xb8}, {0xffff, 0x6, 0x5, 0x5}, {0x40, 0x8, 0x2, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x624}}, 0x8800)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r3, &(0x7f0000000080)=0x8, 0x12)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000040601020000000000000002000000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8, 0x0, 0xd}, 0x18)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r9, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}}, 0x0)

361.557104ms ago: executing program 1 (id=808):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

342.813341ms ago: executing program 1 (id=809):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0xf0000000, 0x9}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x60]}}, 0x0, 0x37, 0x0, 0x1, 0x1}, 0x28)

289.238232ms ago: executing program 1 (id=812):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002a40))
close(r0)

227.179241ms ago: executing program 1 (id=814):
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32, @ANYBLOB="0a0006"], 0x34}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db000008", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x34}}, 0x8080)

226.807914ms ago: executing program 1 (id=815):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0)

226.486616ms ago: executing program 0 (id=816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x6, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

168.482032ms ago: executing program 1 (id=817):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe4}, 0x94)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xb2, 0x88, &(0x7f00000003c0)="56660a76959f13ae206a674105cac6fd944a054759c8b3757ee0dcac2349bdfd253aafcaa31799d283a72c393b4d12ec40eefef49638250256134becc8e24bf0853143d25e685d2951c2144bac946dfb8748790fbc93ac2e575425763666bde558e3bbd4ed7d02b1ebe57c4db2f0b3f73fd7acb95d3cbf1b56c598858038548c4249176d64c4bf334bc533621e5193505a4c771c8c5d8e717543287ce29230da388a63a093d5a75eda368e847e64606f3c74", &(0x7f00000004c0)=""/136, 0x8, 0x0, 0xb9, 0x68, &(0x7f0000000580)="05311450ce3e6a53cd402c4c86df08d201f71481db3e1085dfc2aed49986bbbaffeb35f19c47e4698d0cd47bd7fc37fd7d421232378dda48a1892cc6598309d22a40e474b5bd79a8e3a25564fa3d7d6f629d3c5ad8844457b485a9b1b633e03139e77c3c71ad3bf5494d368c8cb335ef7038c2e91d421655de242ff3578424e9f2480755d65fa573b61186834961fb32c4eadfa4f00be79ea05210ac3cfb871b17cb2ed73ed006be9b2b23efc2b2033576d13a95cb00cc0af6", &(0x7f0000000640)="1522179d85c546270ddb112b025a4f71b0d64104e409eeb908ee9809a3248c750881eaf922e38776e7f4274da2ebad1cd20f5a5b4dd3621ab9592e5480f09ffbca8f3ec7414d0fad0f3c5bb55653700e9ee7dd1a3a6da6952e4190da730c52460fe4e4e6dc88485b", 0x4, 0x0, 0x4}, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ppoll(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)={[0x9]}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

168.20492ms ago: executing program 0 (id=818):
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
epoll_pwait(r0, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8)

116.584068ms ago: executing program 0 (id=819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa)
socket$alg(0x26, 0x5, 0x0)

83.636957ms ago: executing program 0 (id=820):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @bcast, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
getsockname$ax25(r0, 0x0, &(0x7f0000000100))

230.374µs ago: executing program 0 (id=821):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000600)=""/249}, 0x90)

0s ago: executing program 0 (id=822):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26161' (ED25519) to the list of known hosts.
syzkaller login: [   49.579701][ T5740] cgroup: Unknown subsys name 'net'
[   49.737554][ T5740] cgroup: Unknown subsys name 'cpuset'
[   49.743198][ T5740] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.422836][ T5740] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.494244][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.503864][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.508261][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.512340][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.515725][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.520131][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.523919][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.527829][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.533432][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.537797][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.630962][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.635299][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.638778][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.646446][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.650203][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.782752][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   61.871619][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   61.932323][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.935231][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.937503][ T5841] bridge_slave_0: entered allmulticast mode
[   61.940516][ T5841] bridge_slave_0: entered promiscuous mode
[   61.957396][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.959689][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.961950][ T5841] bridge_slave_1: entered allmulticast mode
[   61.965090][ T5841] bridge_slave_1: entered promiscuous mode
[   61.992421][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.997545][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.057253][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.060347][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.063317][ T5839] bridge_slave_0: entered allmulticast mode
[   62.068296][ T5839] bridge_slave_0: entered promiscuous mode
[   62.074732][ T5841] team0: Port device team_slave_0 added
[   62.079023][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.081970][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.086274][ T5839] bridge_slave_1: entered allmulticast mode
[   62.090104][ T5839] bridge_slave_1: entered promiscuous mode
[   62.095320][ T5841] team0: Port device team_slave_1 added
[   62.175119][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.179575][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.182317][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.193272][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.201517][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   62.208636][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.212057][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.214295][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.225019][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.272918][ T5839] team0: Port device team_slave_0 added
[   62.277124][ T5839] team0: Port device team_slave_1 added
[   62.339362][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.341675][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.350683][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.362803][ T5841] hsr_slave_0: entered promiscuous mode
[   62.365689][ T5841] hsr_slave_1: entered promiscuous mode
[   62.391889][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.394084][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.402208][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.409350][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.412881][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.416978][ T5847] bridge_slave_0: entered allmulticast mode
[   62.420143][ T5847] bridge_slave_0: entered promiscuous mode
[   62.442027][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.445723][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.448846][ T5847] bridge_slave_1: entered allmulticast mode
[   62.452607][ T5847] bridge_slave_1: entered promiscuous mode
[   62.506392][ T5839] hsr_slave_0: entered promiscuous mode
[   62.509096][ T5839] hsr_slave_1: entered promiscuous mode
[   62.511538][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.516975][ T5839] Cannot create hsr debugfs directory
[   62.525509][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.529720][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.573236][ T5847] team0: Port device team_slave_0 added
[   62.594264][ T5847] team0: Port device team_slave_1 added
[   62.639144][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.641529][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.651391][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.682065][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.685620][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.693943][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.742655][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.752507][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.776882][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.783669][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.793231][ T5847] hsr_slave_0: entered promiscuous mode
[   62.796657][ T5847] hsr_slave_1: entered promiscuous mode
[   62.799456][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.802647][ T5847] Cannot create hsr debugfs directory
[   62.863321][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.890933][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.897853][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.918871][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.105908][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.111553][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.128897][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.139203][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.146517][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.169728][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.185911][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.188647][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.202519][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.207762][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.210578][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.259890][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   63.283059][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.286733][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.309295][  T793] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.312295][  T793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.368453][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.397050][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   63.400948][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.421020][  T793] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.423985][  T793] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.447623][  T793] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.450717][  T793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.497724][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.539584][ T5841] veth0_vlan: entered promiscuous mode
[   63.555615][ T5845] Bluetooth: hci1: command tx timeout
[   63.557845][   T55] Bluetooth: hci0: command tx timeout
[   63.561543][ T5841] veth1_vlan: entered promiscuous mode
[   63.577424][ T5841] veth0_macvtap: entered promiscuous mode
[   63.581830][ T5841] veth1_macvtap: entered promiscuous mode
[   63.592613][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.601663][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.605663][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.608674][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.611911][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.616208][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.716544][   T55] Bluetooth: hci2: command tx timeout
[   63.725345][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.752721][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.765761][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.769139][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.821660][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.824134][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.861111][ T5847] veth0_vlan: entered promiscuous mode
[   63.867266][ T5839] veth0_vlan: entered promiscuous mode
[   63.867780][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.878665][ T5847] veth1_vlan: entered promiscuous mode
[   63.883707][ T5839] veth1_vlan: entered promiscuous mode
[   63.911908][ T5847] veth0_macvtap: entered promiscuous mode
[   63.940680][ T5847] veth1_macvtap: entered promiscuous mode
[   63.969725][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.972370][ T5839] veth0_macvtap: entered promiscuous mode
[   63.993357][ T5839] veth1_macvtap: entered promiscuous mode
[   64.013187][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.019294][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.022069][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.026633][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.031238][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.061756][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.068037][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.072748][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.076268][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.079345][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.082500][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.131966][ T5907] netlink: 'syz.0.22': attribute type 9 has an invalid length.
[   64.135577][ T5907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'.
[   64.181848][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.188511][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.205461][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.208157][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.226941][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.232135][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.256284][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.260128][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.384680][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   64.462750][ T5930] tc_dump_action: action bad kind
[   64.522918][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.536324][ T5940] netlink: 76 bytes leftover after parsing attributes in process `syz.0.35'.
[   64.539448][ T5940] nbd: illegal input index 65508
[   64.552211][ T5942] netlink: 'syz.2.37': attribute type 1 has an invalid length.
[   64.607101][ T5944] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   64.691086][ T5944] syz.1.38 (5944) used greatest stack depth: 20120 bytes left
[   64.879763][ T5972] netlink: 'syz.0.52': attribute type 1 has an invalid length.
[   64.885214][ T5972] netlink: 'syz.0.52': attribute type 11 has an invalid length.
[   64.887919][ T5972] netlink: 220 bytes leftover after parsing attributes in process `syz.0.52'.
[   64.937280][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   65.061228][ T5991] ieee802154 phy0 wpan0: encryption failed: -90
[   65.127278][ T5996] tipc: Started in network mode
[   65.129152][ T5996] tipc: Node identity cab952359078, cluster identity 4711
[   65.132144][ T5996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.138129][ T5996] syzkaller0: entered promiscuous mode
[   65.140137][ T5996] syzkaller0: entered allmulticast mode
[   65.181112][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[   65.186047][ T5995] tipc: Resetting bearer <eth:syzkaller0>
[   65.202521][ T5995] tipc: Disabling bearer <eth:syzkaller0>
[   65.267476][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'.
[   65.381768][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'.
[   65.389873][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.392968][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.653915][ T5845] Bluetooth: hci1: command tx timeout
[   65.656439][   T55] Bluetooth: hci0: command tx timeout
[   65.795347][   T55] Bluetooth: hci2: command tx timeout
[   66.146416][ T6044] netlink: 'syz.2.82': attribute type 6 has an invalid length.
[   66.148975][ T6044] netlink: 'syz.2.82': attribute type 7 has an invalid length.
[   66.151661][ T6044] netlink: 'syz.2.82': attribute type 8 has an invalid length.
[   66.235569][ T6050] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   66.238357][ T6050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.85'.
[   66.242149][ T6050] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   66.493054][ T6065] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   66.497034][ T5901] IPVS: starting estimator thread 0...
[   66.586549][ T6071] IPVS: using max 80 ests per chain, 192000 per kthread
[   66.627314][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'.
[   66.630343][ T6081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'.
[   67.380605][ T6129] geneve2: entered promiscuous mode
[   67.382375][ T6129] geneve2: entered allmulticast mode
[   67.510066][ T6137] macvlan1: entered promiscuous mode
[   67.512705][ T6137] ipvlan0: entered promiscuous mode
[   67.517382][ T6137] ipvlan0: left promiscuous mode
[   67.521068][ T6137] macvlan1: left promiscuous mode
[   67.529708][ T6139] syz_tun: entered allmulticast mode
[   67.540897][ T6139] dvmrp8: entered allmulticast mode
[   67.548352][ T6138] syz_tun: left allmulticast mode
[   67.710575][ T6154] netlink: del zone limit has 8 unknown bytes
[   67.716921][   T55] Bluetooth: hci0: command tx timeout
[   67.718717][   T55] Bluetooth: hci1: command tx timeout
[   67.875857][ T5845] Bluetooth: hci2: command tx timeout
[   67.900880][ T6174] Zero length message leads to an empty skb
[   68.067271][ T6186] tipc: New replicast peer: 255.255.255.255
[   68.079394][ T6186] tipc: Enabled bearer <udp:syz2>, priority 10
[   68.192445][ T6193] warning: `syz.2.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.249418][ T6197] Bluetooth: MGMT ver 1.23
[   68.887050][ T6223] team0: Port device team_slave_0 removed
[   69.196180][  T791] tipc: Node number set to 1522618933
[   69.431641][ T6267] __nla_validate_parse: 9 callbacks suppressed
[   69.431659][ T6267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'.
[   69.455803][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   69.558341][ T6273] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   69.798160][   T55] Bluetooth: hci0: command tx timeout
[   69.800642][ T5845] Bluetooth: hci1: command tx timeout
[   69.923606][ T6291] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000
[   69.956562][ T5845] Bluetooth: hci2: command tx timeout
[   70.043614][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'.
[   70.533443][ T6298] openvswitch: netlink: IP tunnel dst address not specified
[   70.779429][ T6317] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   70.801647][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[   70.807194][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[   70.811182][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[   70.861713][ T6321] netlink: 52 bytes leftover after parsing attributes in process `syz.2.213'.
[   71.079404][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.082070][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.405197][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   71.418702][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'.
[   71.430147][ T6373] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   71.439757][ T6373] netlink: 10 bytes leftover after parsing attributes in process `syz.1.232'.
[   71.496763][ T6373] nbd: socks must be embedded in a SOCK_ITEM attr
[   71.499314][ T6373] block nbd0: shutting down sockets
[   71.507522][ T6384] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   71.839180][ T6407] tipc: Started in network mode
[   71.841167][ T6407] tipc: Node identity 8a338347fab, cluster identity 4711
[   71.844302][ T6407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.848732][ T6407] syzkaller0: entered promiscuous mode
[   71.851121][ T6407] syzkaller0: entered allmulticast mode
[   71.867626][ T6409] ieee802154 phy0 wpan0: encryption failed: -22
[   71.867838][ T6407] tipc: Resetting bearer <eth:syzkaller0>
[   71.878430][ T6405] tipc: Resetting bearer <eth:syzkaller0>
[   71.885926][ T6405] tipc: Disabling bearer <eth:syzkaller0>
[   72.165703][ T6427] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.230790][ T6427] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.282025][ T6427] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.313086][ T6427] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.412396][ T6427] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.426456][ T6427] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.441954][ T6427] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.458846][ T6427] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.736572][ T6462] syz.2.256 uses obsolete (PF_INET,SOCK_PACKET)
[   72.787258][ T6463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.793622][ T6463] netlink: 'syz.1.255': attribute type 10 has an invalid length.
[   72.801660][ T6463] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.806148][ T6463] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   73.225115][  T791] IPVS: starting estimator thread 0...
[   73.318420][ T6475] IPVS: using max 47 ests per chain, 112800 per kthread
[   73.555549][ T6500] netlink: 'syz.1.271': attribute type 5 has an invalid length.
[   73.748598][ T6515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.819814][ T6515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.879864][ T6515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.936514][ T6515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.018570][ T6515] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.026076][ T6515] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.036108][ T6515] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.048851][ T6515] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.560708][ T6536] __nla_validate_parse: 6 callbacks suppressed
[   74.560727][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'.
[   74.569294][ T6536] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   74.572117][ T6536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.286'.
[   74.766303][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'.
[   74.776408][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'.
[   74.780452][ T6551] nbd: socks must be embedded in a SOCK_ITEM attr
[   74.902320][ T6556] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   74.904659][ T5888] IPVS: starting estimator thread 0...
[   74.994799][ T6560] IPVS: using max 49 ests per chain, 117600 per kthread
[   75.041247][ T6570] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   75.945779][ T6596] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   76.969716][ T6644] sctp: [Deprecated]: syz.1.332 (pid 6644) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.969716][ T6644] Use struct sctp_sack_info instead
[   77.127529][ T6664] xt_policy: neither incoming nor outgoing policy selected
[   77.382314][ T6681] netlink: 248 bytes leftover after parsing attributes in process `syz.1.345'.
[   77.503140][ T6687] bridge1: entered allmulticast mode
[   77.549444][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'.
[   77.587115][ T6692] netlink: 'syz.0.350': attribute type 4 has an invalid length.
[   78.040708][ T6729] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   78.044737][ T6729] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   78.197761][ T6736] delete_channel: no stack
[   78.217904][ T6741] netlink: 'syz.2.374': attribute type 84 has an invalid length.
[   78.440798][ T6759] unsupported nlmsg_type 40
[   78.642696][ T6775] xt_HMARK: spi-set and port-set can't be combined
[   78.790153][ T6783] pim6reg1: entered promiscuous mode
[   78.792486][ T6783] pim6reg1: entered allmulticast mode
[   78.963768][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'.
[   78.971190][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'.
[   79.219028][ T6818] wg1: entered promiscuous mode
[   79.220884][ T6818] wg1: entered allmulticast mode
[   80.227783][ T6838] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.316846][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   80.319892][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'.
[   80.461190][ T6852] netlink: 'syz.0.426': attribute type 10 has an invalid length.
[   80.463713][ T6852] openvswitch: netlink: Flow key attr not present in new flow.
[   80.526765][ T6852] sctp: [Deprecated]: syz.0.426 (pid 6852) Use of int in max_burst socket option deprecated.
[   80.526765][ T6852] Use struct sctp_assoc_value instead
[   80.539532][ T6860] netlink: 'syz.2.428': attribute type 10 has an invalid length.
[   80.544385][ T6852] pim6reg: entered allmulticast mode
[   80.555279][ T6860] team0: Port device dummy0 added
[   80.557459][ T6852] pim6reg: left allmulticast mode
[   80.958917][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'.
[   81.330029][  T975] cfg80211: failed to load regulatory.db
[   81.623264][ T6930] netlink: 'syz.0.461': attribute type 2 has an invalid length.
[   81.626658][ T6930] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[   81.629189][ T6930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.461'.
[   81.693754][ T6937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.716334][ T6936] netlink: 27 bytes leftover after parsing attributes in process `syz.1.460'.
[   81.722841][ T6928] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   81.749544][ T6928] syzkaller0: entered promiscuous mode
[   81.751848][ T6928] syzkaller0: entered allmulticast mode
[   82.026532][ T6947] netlink: 248 bytes leftover after parsing attributes in process `syz.2.468'.
[   82.269381][   T33] audit: type=1800 audit(1751792929.048:2): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.472" name="memory.events" dev="tmpfs" ino=838 res=0 errno=0
[   82.629218][ T6992] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   82.894284][ T7008] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   83.454922][ T7021] syzkaller0: tun_chr_ioctl cmd 1074025677
[   83.469099][ T7021] syzkaller0: linktype set to 774
[   83.860683][ T7061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.510'.
[   83.980423][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[   83.983461][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'.
[   84.088293][ T7079] netlink: 'syz.0.515': attribute type 11 has an invalid length.
[   84.127368][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[   84.131765][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.177171][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.201077][ T7090] netlink: 'syz.2.521': attribute type 4 has an invalid length.
[   84.729275][ T7146] sctp: [Deprecated]: syz.2.546 (pid 7146) Use of int in max_burst socket option.
[   84.729275][ T7146] Use struct sctp_assoc_value instead
[   84.860143][ T7156] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   84.884635][ T7158] netlink: 'syz.1.552': attribute type 7 has an invalid length.
[   84.887343][ T7158] netlink: 'syz.1.552': attribute type 8 has an invalid length.
[   85.701584][ T7218] __nla_validate_parse: 4 callbacks suppressed
[   85.701603][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[   85.857338][ T7228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.579'.
[   85.872819][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[   85.900174][ T7230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.903316][ T7230] IPv6: NLM_F_CREATE should be set when creating new route
[   85.906141][ T7230] IPv6: NLM_F_CREATE should be set when creating new route
[   85.908510][ T7230] IPv6: NLM_F_CREATE should be set when creating new route
[   85.935597][ T7230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.946748][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[   85.965304][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'.
[   86.142029][ T7247] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   86.364683][ T7258] block nbd0: server does not support multiple connections per device.
[   86.373258][ T7258] block nbd0: shutting down sockets
[   86.476946][   T33] audit: type=1804 audit(1751792933.258:3): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.598" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0
[   86.491391][   T33] audit: type=1800 audit(1751792933.258:4): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="cgroup.controllers" dev="tmpfs" ino=966 res=0 errno=0
[   86.903635][ T7294] xt_hashlimit: max too large, truncated to 1048576
[   86.906420][ T7294] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   87.059196][ T7305] netlink: 'syz.0.615': attribute type 4 has an invalid length.
[   87.110970][ T7307] netlink: 'syz.0.616': attribute type 3 has an invalid length.
[   87.116292][ T7307] netlink: 'syz.0.616': attribute type 3 has an invalid length.
[   87.170815][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[   87.430631][ T7320] tipc: Can't bind to reserved service type 0
[   87.731712][ T7336] netlink: 'syz.1.630': attribute type 12 has an invalid length.
[   87.735352][ T7336] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.630'.
[   87.840228][ T7340] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   88.363839][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[   88.656173][ T7404] bridge_slave_0: left allmulticast mode
[   88.658723][ T7404] bridge_slave_0: left promiscuous mode
[   88.661252][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.669429][ T7404] bridge_slave_1: left allmulticast mode
[   88.671765][ T7404] bridge_slave_1: left promiscuous mode
[   88.674279][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.707577][ T7404] bond0: (slave bond_slave_0): Releasing backup interface
[   88.727458][ T7404] bond0: (slave bond_slave_1): Releasing backup interface
[   88.745639][ T7404] team0: Port device team_slave_0 removed
[   88.784405][ T7404] team0: Port device team_slave_1 removed
[   88.788730][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.791216][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.824103][ T7413] team0: Mode changed to "broadcast"
[   88.905946][ T7404] syz.0.660 (7404) used greatest stack depth: 19928 bytes left
[   89.152170][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'.
[   89.246189][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[   89.318431][ T7451] tc_dump_action: action bad kind
[   89.432962][ T7463] sctp: [Deprecated]: syz.1.686 (pid 7463) Use of int in maxseg socket option.
[   89.432962][ T7463] Use struct sctp_assoc_value instead
[   89.548585][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.551632][ T7469] bridge0: port 2(bridge_slave_1) entered listening state
[   89.554874][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.557955][ T7469] bridge0: port 1(bridge_slave_0) entered listening state
[   89.562138][ T7469] bridge0: entered promiscuous mode
[   90.058188][ T7509] netlink: 'syz.1.707': attribute type 3 has an invalid length.
[   90.265348][ T7525] netlink: 'syz.2.715': attribute type 1 has an invalid length.
[   90.267850][ T7525] NCSI netlink: No device for ifindex 813332851
[   91.651649][ T7567] __nla_validate_parse: 6 callbacks suppressed
[   91.651669][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'.
[   91.672713][ T7567] erspan0: entered promiscuous mode
[   91.681192][ T7567] macvtap1: entered promiscuous mode
[   91.683294][ T7567] macvtap1: entered allmulticast mode
[   91.685499][ T7567] erspan0: entered allmulticast mode
[   91.697316][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'.
[   91.703643][ T7567] erspan0: left allmulticast mode
[   91.709193][ T7567] erspan0: left promiscuous mode
[   91.713815][ T7571] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[   91.721608][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.724758][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.735751][ T7571] bridge0: left promiscuous mode
[   91.755298][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.758341][ T7571] bridge0: port 2(bridge_slave_1) entered listening state
[   91.761443][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.764887][ T7571] bridge0: port 1(bridge_slave_0) entered listening state
[   91.779421][ T7571] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   92.006262][ T7602] veth1_to_batadv: mtu greater than device maximum
[   92.580377][ T7645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.768'.
[   93.343889][ T7706] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[   93.368461][ T7708] trusted_key: syz.1.799 sent an empty control message without MSG_MORE.
[   93.391958][ T7710] gretap1: entered promiscuous mode
[   93.448183][ T7718] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   93.455731][ T7720] xt_hashlimit: overflow, rate too high: 1125899906842624
[   93.718962][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'.
[   93.842050][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[   94.004323][ T7760] 
[   94.005787][ T7760] =============================
[   94.007932][ T7760] WARNING: suspicious RCU usage
[   94.009972][ T7760] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   94.014168][ T7760] -----------------------------
[   94.016522][ T7760] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   94.020183][ T7760] 
[   94.020183][ T7760] other info that might help us debug this:
[   94.020183][ T7760] 
[   94.023962][ T7760] 
[   94.023962][ T7760] rcu_scheduler_active = 2, debug_locks = 1
[   94.027220][ T7760] 1 lock held by syz.0.822/7760:
[   94.029013][ T7760]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   94.033061][ T7760] 
[   94.033061][ T7760] stack backtrace:
[   94.036223][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.0.822 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   94.036242][ T7760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.036250][ T7760] Call Trace:
[   94.036256][ T7760]  <TASK>
[   94.036262][ T7760]  dump_stack_lvl+0x189/0x250
[   94.036290][ T7760]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.036312][ T7760]  ? __pfx__printk+0x10/0x10
[   94.036329][ T7760]  ? print_lock_name+0xde/0x100
[   94.036345][ T7760]  lockdep_rcu_suspicious+0x140/0x1d0
[   94.036365][ T7760]  task_cls_state+0x1a5/0x1d0
[   94.036384][ T7760]  bpf_get_cgroup_classid_curr+0x18/0x60
[   94.036396][ T7760]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   94.036407][ T7760]  bpf_prog_run_pin_on_cpu+0xbf/0x150
[   94.036425][ T7760]  bpf_prog_test_run_syscall+0x312/0x4b0
[   94.036443][ T7760]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   94.036457][ T7760]  ? __fget_files+0x2a/0x420
[   94.036474][ T7760]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   94.036490][ T7760]  bpf_prog_test_run+0x2c7/0x340
[   94.036510][ T7760]  __sys_bpf+0x4a4/0x860
[   94.036527][ T7760]  ? __pfx___sys_bpf+0x10/0x10
[   94.036553][ T7760]  ? exc_page_fault+0x76/0xf0
[   94.036573][ T7760]  ? rcu_is_watching+0x15/0xb0
[   94.036597][ T7760]  __x64_sys_bpf+0x7c/0x90
[   94.036613][ T7760]  do_syscall_64+0xfa/0x3b0
[   94.036623][ T7760]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.036641][ T7760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.036653][ T7760]  ? exc_page_fault+0x9f/0xf0
[   94.036671][ T7760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.036683][ T7760] RIP: 0033:0x7fc2d618e929
[   94.036694][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.036705][ T7760] RSP: 002b:00007fc2d7021038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   94.036718][ T7760] RAX: ffffffffffffffda RBX: 00007fc2d63b5fa0 RCX: 00007fc2d618e929
[   94.036727][ T7760] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   94.036735][ T7760] RBP: 00007fc2d6210b39 R08: 0000000000000000 R09: 0000000000000000
[   94.036743][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.036750][ T7760] R13: 0000000000000000 R14: 00007fc2d63b5fa0 R15: 00007ffc7285a8f8
[   94.036770][ T7760]  </TASK>

VM DIAGNOSIS:
09:09:00  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f22 RDI=0000000000000f23 RBP=00000000000003f8 RSP=ffffc900046b7550
R8 =ffff88801fdd8237 R9 =1ffff11003fbb046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e5 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc2d70216c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30c1fffc CR3=0000000027c88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc2d6384478 00007fc2d6384450 XMM03=00007fc2d6384488 00007fc2d6384480
XMM04=00007fc2d6eed100 00007fc2d6384440 XMM05=00007fc2d6384458 00007fc2d63844a0
XMM06=00007fc2d6384498 00007fc2d6384490 XMM07=00007fc2d6384488 00007fc2d6384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc2d6211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888107b23980 RBX=0000000000000201 RCX=ae45088428a14b00 RDX=ffff888107b23980
RSI=0000000000000201 RDI=ffffffff8945af4a RBP=ffffc900034ef7c0 RSP=ffffc900034ef708
R8 =0000000000000000 R9 =ffffffff84987ff3 R10=ffffc900034ef940 R11=ffffffff84987f40
R12=1ffff9200069dee4 R13=ffffffff8e8847d0 R14=0000000000000246 R15=dffffc0000000000
RIP=ffffffff819e0f0d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe43f51a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30f12ff8 CR3=00000001104c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0cdb611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
