last executing test programs:

1m21.987216424s ago: executing program 0 (id=460):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

1m21.987034333s ago: executing program 1 (id=461):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m21.984707442s ago: executing program 0 (id=462):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m21.908317979s ago: executing program 0 (id=463):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b36, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})

1m21.907833365s ago: executing program 0 (id=464):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

1m21.555781137s ago: executing program 1 (id=466):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m21.553053782s ago: executing program 1 (id=467):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85ecbd0d4e0e5deb694c8ccebf00000a00ff00"], 0x0, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007600"], 0xfe33)

1m21.478299029s ago: executing program 1 (id=469):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=""/58, 0x3a}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x33)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/249, 0x101d0}], 0x1}, 0x0)
close(r4)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)

1m21.413532538s ago: executing program 0 (id=471):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x4, 0x0, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(0x3)

1m21.240190528s ago: executing program 1 (id=472):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1m21.168876591s ago: executing program 0 (id=473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

1m21.040243728s ago: executing program 32 (id=473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

1m20.978342435s ago: executing program 1 (id=475):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg(0xffffffffffffffff, 0x0, 0x400c091)
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x30, 0x0, 0x20000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), 0x0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xe9, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})

1m20.945442381s ago: executing program 33 (id=475):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg(0xffffffffffffffff, 0x0, 0x400c091)
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x30, 0x0, 0x20000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), 0x0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xe9, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})

1.91953715s ago: executing program 4 (id=1383):
socket$kcm(0x29, 0x7, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

1.637266538s ago: executing program 4 (id=1386):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)

1.558456262s ago: executing program 4 (id=1387):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11149, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x4}, 0x109211, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)='memory.pressure\x00', 0x2, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
setsockopt$sock_attach_bpf(r2, 0x107, 0xe, &(0x7f0000000000)=r5, 0x4)

1.406255236s ago: executing program 2 (id=1388):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x0)

1.308449918s ago: executing program 2 (id=1390):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, 0x0, 0x0)

1.30820506s ago: executing program 4 (id=1391):
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x51}}], 0x18}, 0x0)

1.247140353s ago: executing program 4 (id=1393):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18)
close(r2)

1.246946959s ago: executing program 2 (id=1394):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)

1.194916298s ago: executing program 4 (id=1396):
openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(r1)
close(0x4)

1.193833595s ago: executing program 3 (id=1397):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403f0000180100002020782500000000002020207b1a00fe000000007b0a0000000000000701b092f8ffffffb702000008000000b70300000f000000a500feff0600000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

1.118130733s ago: executing program 3 (id=1398):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xa, 0x0, 0x0)

1.117474796s ago: executing program 3 (id=1399):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x0, 0x3b, 0x0, 0x8}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB], 0x18}, 0x8)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000500)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

317.497138ms ago: executing program 2 (id=1400):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

268.213748ms ago: executing program 2 (id=1401):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000100)={0x2, 0xffffffffffffff25, 0x51, 0x1, 0x0, 0x0, 0x0, 0x12, 0xa0083, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffc, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$TUNGETFEATURES(r5, 0x5452, &(0x7f00000013c0))
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000dd191f000a0000000000000072a00ca7352e3812984c6c01ccf7e2cb196291fb52d3eb29875ecd8d216d9229a52e4e4a50b63cd6d270fbc48e7a74", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0700000000000000104380000000d4b600000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

183.186769ms ago: executing program 2 (id=1402):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505", 0x34}], 0x1}, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x8, 0x2, 0x7ff, 0x1300, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xd, 0x17, &(0x7f0000000a80)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000c68c3c9800020000000000000005000000183400000100000000000000000000007b3908000000000080b5040003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0xf, 0xc4, &(0x7f00000002c0)=""/196}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001902a42ee37b967f95afea6c5762868e9cda66941b2c0e431207db6d2f2e545bf19fbf8ed8ed41071d90bf0b713c843c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)

88.531019ms ago: executing program 3 (id=1403):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x86c, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x14)

88.256146ms ago: executing program 3 (id=1404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)

0s ago: executing program 3 (id=1405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'\x00', 0x500})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1200, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth1_vlan\x00', 0x200})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57520' (ED25519) to the list of known hosts.
syzkaller login: [   55.900445][ T5815] cgroup: Unknown subsys name 'net'
[   56.006145][ T5815] cgroup: Unknown subsys name 'cpuset'
[   56.012251][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.673887][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.828187][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.856589][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.859642][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.932619][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.942463][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.292362][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.295781][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.298582][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.302029][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.304837][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.459390][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.463555][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.468054][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.473202][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.476987][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.555680][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.561270][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.565152][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.568627][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.599457][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.603559][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.606258][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.610118][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.610387][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.616047][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.907017][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   68.040542][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.045542][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.048838][ T5869] bridge_slave_0: entered allmulticast mode
[   68.053899][ T5869] bridge_slave_0: entered promiscuous mode
[   68.059450][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   68.069517][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.074016][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.077034][ T5869] bridge_slave_1: entered allmulticast mode
[   68.085618][ T5869] bridge_slave_1: entered promiscuous mode
[   68.146912][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   68.164193][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.172222][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.225682][ T5869] team0: Port device team_slave_0 added
[   68.238826][ T5869] team0: Port device team_slave_1 added
[   68.283128][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.285700][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.288088][ T5872] bridge_slave_0: entered allmulticast mode
[   68.291154][ T5872] bridge_slave_0: entered promiscuous mode
[   68.309896][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.312438][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.324444][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.336273][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.339497][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.350429][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.356253][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.360063][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.364981][ T5872] bridge_slave_1: entered allmulticast mode
[   68.368954][ T5872] bridge_slave_1: entered promiscuous mode
[   68.415407][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.418300][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.422518][ T5871] bridge_slave_0: entered allmulticast mode
[   68.426745][ T5871] bridge_slave_0: entered promiscuous mode
[   68.432393][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.435151][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.437935][ T5871] bridge_slave_1: entered allmulticast mode
[   68.440715][ T5871] bridge_slave_1: entered promiscuous mode
[   68.460858][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.495279][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.541138][ T5869] hsr_slave_0: entered promiscuous mode
[   68.546787][ T5869] hsr_slave_1: entered promiscuous mode
[   68.552629][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.558884][ T5872] team0: Port device team_slave_0 added
[   68.566473][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.572301][ T5872] team0: Port device team_slave_1 added
[   68.636428][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.638880][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.649215][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.673385][ T5871] team0: Port device team_slave_0 added
[   68.676277][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.678975][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.689918][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.695386][ T5871] team0: Port device team_slave_1 added
[   68.748965][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.752961][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.765243][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.776588][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.779276][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.791222][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.860905][ T5872] hsr_slave_0: entered promiscuous mode
[   68.865672][ T5872] hsr_slave_1: entered promiscuous mode
[   68.868677][ T5872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.873921][ T5872] Cannot create hsr debugfs directory
[   68.907299][ T5871] hsr_slave_0: entered promiscuous mode
[   68.910614][ T5871] hsr_slave_1: entered promiscuous mode
[   68.914615][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.918028][ T5871] Cannot create hsr debugfs directory
[   69.139311][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.175962][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.193979][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.200818][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.276784][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.285320][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.289950][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.302283][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.372088][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.389816][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.399304][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.413692][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.497520][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.538813][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   69.553012][ T5856] Bluetooth: hci0: command tx timeout
[   69.553684][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.562874][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.565957][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.583070][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.586378][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.617318][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   69.633314][ T5856] Bluetooth: hci1: command tx timeout
[   69.644871][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.647775][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.655621][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.674657][ T5869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.678974][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.689960][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.693220][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.712967][ T5856] Bluetooth: hci2: command tx timeout
[   69.744669][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   69.766877][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.769883][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.777430][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.780911][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.920543][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.975183][ T5869] veth0_vlan: entered promiscuous mode
[   69.985234][ T5869] veth1_vlan: entered promiscuous mode
[   70.041420][ T5869] veth0_macvtap: entered promiscuous mode
[   70.060591][ T5869] veth1_macvtap: entered promiscuous mode
[   70.067694][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.072583][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.086814][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.100466][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.116968][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.120254][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.125421][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.129241][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.178968][ T5871] veth0_vlan: entered promiscuous mode
[   70.226557][ T5871] veth1_vlan: entered promiscuous mode
[   70.230326][ T5872] veth0_vlan: entered promiscuous mode
[   70.247185][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.258361][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.280593][ T5872] veth1_vlan: entered promiscuous mode
[   70.306373][ T5871] veth0_macvtap: entered promiscuous mode
[   70.315617][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.320753][ T5871] veth1_macvtap: entered promiscuous mode
[   70.325224][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.359315][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.366733][ T5872] veth0_macvtap: entered promiscuous mode
[   70.383212][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.391311][ T5872] veth1_macvtap: entered promiscuous mode
[   70.431036][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.438464][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.451368][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.455005][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.471423][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.484697][ T5929] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10'.
[   70.505305][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.513108][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.518391][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.524891][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.528756][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.636057][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.639224][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.651855][ T5856] Bluetooth: hci0: Malformed LE Event: 0x0d
[   70.693384][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.699921][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.717931][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.721169][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.776618][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.783807][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.805354][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   71.021515][    C1] hrtimer: interrupt took 73867 ns
[   71.240091][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.243117][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.604441][ T5957] netlink: 'syz.1.21': attribute type 10 has an invalid length.
[   71.632916][ T5957] team0: Port device syz_tun added
[   71.633169][ T5856] Bluetooth: hci0: command tx timeout
[   71.712452][ T5856] Bluetooth: hci1: command tx timeout
[   71.792986][ T5856] Bluetooth: hci2: command tx timeout
[   71.918636][ T5982] netlink: 176 bytes leftover after parsing attributes in process `syz.1.34'.
[   71.996266][ T5987] C: renamed from team_slave_0 (while UP)
[   72.006558][ T5987] netlink: 'syz.0.36': attribute type 4 has an invalid length.
[   72.010838][ T5987] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   72.088719][ T5991] netlink: 188 bytes leftover after parsing attributes in process `syz.1.38'.
[   72.308737][ T6002] Zero length message leads to an empty skb
[   72.532161][ T6009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'.
[   72.536180][ T6008] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'.
[   72.573864][ T6009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'.
[   73.724461][ T5856] Bluetooth: hci0: command tx timeout
[   73.792410][ T5856] Bluetooth: hci1: command tx timeout
[   73.808809][ T5856] Bluetooth: hci1: Malformed LE Event: 0x0d
[   73.890507][ T5856] Bluetooth: hci2: command tx timeout
[   74.158073][ T6053] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET)
[   75.391701][ T5874] Bluetooth: hci1: Opcode 0x206a failed: -110
[   75.533954][ T5874] Bluetooth: hci2: Malformed LE Event: 0x1b
[   75.771505][ T6085] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   75.795602][ T5874] Bluetooth: hci0: command tx timeout
[   75.872339][ T5874] Bluetooth: hci1: command 0x0419 tx timeout
[   75.951757][ T5874] Bluetooth: hci2: command tx timeout
[   77.748734][ T6130] netlink: 'syz.2.99': attribute type 10 has an invalid length.
[   77.759398][ T6130] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   77.888360][ T6136] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.101'.
[   77.951707][ T5874] Bluetooth: hci1: command 0x0419 tx timeout
[   78.295822][ T6158] netlink: 'syz.0.112': attribute type 10 has an invalid length.
[   79.112835][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.132705][ T6158] team0: Port device batadv0 added
[   79.317129][ T6175] : renamed from team_slave_1 (while UP)
[   79.704062][ T6194] netlink: 152 bytes leftover after parsing attributes in process `syz.0.128'.
[   79.709683][ T6194] netlink: 6 bytes leftover after parsing attributes in process `syz.0.128'.
[   79.966868][ T6200] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   79.970366][ T6200] netlink: 2 bytes leftover after parsing attributes in process `syz.0.131'.
[   79.974008][ T6200] team0: entered promiscuous mode
[   79.976279][ T6200] C: entered promiscuous mode
[   79.981187][ T6200] team_slave_1: entered promiscuous mode
[   79.993311][ T6200] batadv0: entered promiscuous mode
[   80.008835][ T6200] bridge0: port 3(team0) entered blocking state
[   80.023658][ T6200] bridge0: port 3(team0) entered disabled state
[   80.030755][ T6200] team0: entered allmulticast mode
[   80.034710][ T6200] C: entered allmulticast mode
[   80.037698][ T6200] team_slave_1: entered allmulticast mode
[   80.042271][ T6200] batadv0: entered allmulticast mode
[   80.180547][ T6200] bridge0: port 3(team0) entered blocking state
[   80.183648][ T6200] bridge0: port 3(team0) entered forwarding state
[   80.350042][ T6210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.464732][ T6216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.563515][ T5842] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   80.567332][ T5842] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   80.613835][ T6224] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.143'.
[   80.945143][ T6248] netlink: 'syz.1.155': attribute type 10 has an invalid length.
[   80.949026][ T6248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'.
[   81.293578][ T6264] netlink: 'syz.0.158': attribute type 10 has an invalid length.
[   81.308315][ T6264] bond0: (slave bond_slave_0): Releasing backup interface
[   81.336030][ T6268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.416425][ T6270] netlink: 'syz.1.165': attribute type 1 has an invalid length.
[   81.783883][ T6281] netlink: 'syz.1.169': attribute type 22 has an invalid length.
[   81.787774][ T6281] netlink: 'syz.1.169': attribute type 1 has an invalid length.
[   81.790568][ T6281] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.169'.
[   81.887745][ T6285] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.171'.
[   81.953504][ T6284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.957680][ T6284] IPv6: NLM_F_CREATE should be set when creating new route
[   81.962995][ T6284] IPv6: NLM_F_CREATE should be set when creating new route
[   81.966840][ T6284] IPv6: NLM_F_CREATE should be set when creating new route
[   83.317685][ T6332] netlink: 'syz.2.193': attribute type 21 has an invalid length.
[   83.323598][ T6332] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'.
[   85.225752][ T6409] netlink: 'syz.0.226': attribute type 2 has an invalid length.
[   85.229225][ T6409] netlink: 'syz.0.226': attribute type 1 has an invalid length.
[   85.233493][ T6409] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.226'.
[   85.240015][ T6409] nbd: couldn't find device at index 65542
[   86.023949][ T6413] netlink: 'syz.0.228': attribute type 49 has an invalid length.
[   86.100833][ T6415] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.229'.
[   86.280947][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.233'.
[   86.287534][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.233'.
[   86.293938][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.233'.
[   87.105945][   T47] cfg80211: failed to load regulatory.db
[   87.288143][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.242'.
[   87.309475][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.242'.
[   87.328251][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.242'.
[   87.545689][ T5874] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   88.364025][ T6508] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.268'.
[   88.660510][ T6517] syzkaller0: entered promiscuous mode
[   88.663290][ T6517] syzkaller0: entered allmulticast mode
[   89.790308][ T6546] netlink: 'syz.0.286': attribute type 3 has an invalid length.
[   89.797372][ T6546] netlink: 'syz.0.286': attribute type 10 has an invalid length.
[   90.227354][ T6566] netlink: 'syz.0.295': attribute type 10 has an invalid length.
[   90.230469][ T6566] netlink: 55 bytes leftover after parsing attributes in process `syz.0.295'.
[   91.036792][ T6603] netlink: 'syz.0.312': attribute type 29 has an invalid length.
[   91.045454][ T6603] netlink: 'syz.0.312': attribute type 29 has an invalid length.
[   91.844480][ T6632] netlink: 'syz.2.322': attribute type 7 has an invalid length.
[   91.915329][ T6637] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.324'.
[   91.919706][ T6637] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   92.032959][ T6644] veth0_vlan: entered allmulticast mode
[   92.560811][ T6650] veth0_vlan: left promiscuous mode
[   92.567189][ T6650] veth0_vlan: entered promiscuous mode
[   93.373608][ T6700] netlink: 'syz.1.352': attribute type 27 has an invalid length.
[   93.379189][ T6700] netlink: 'syz.1.352': attribute type 4 has an invalid length.
[   93.386541][ T6700] netlink: 152 bytes leftover after parsing attributes in process `syz.1.352'.
[   93.509242][ T5856] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[   93.615226][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'.
[   93.618914][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'.
[   93.646386][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[   94.745437][ T5874] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7
[   94.790361][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.375'.
[   94.801629][ T5874] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   94.801831][ T6752] netlink: 'syz.0.376': attribute type 10 has an invalid length.
[   94.809352][ T6752] bridge0: port 3(team0) entered disabled state
[   94.812417][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.816239][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.831158][ T6752] team0: Device bridge0 is already an upper device of the team interface
[   94.904675][ T6750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.260949][ T6773] netlink: 'syz.0.386': attribute type 29 has an invalid length.
[   95.278860][ T6773] netlink: 'syz.0.386': attribute type 29 has an invalid length.
[   95.285055][ T6773] netlink: 'syz.0.386': attribute type 29 has an invalid length.
[   95.289512][ T6773] netlink: 'syz.0.386': attribute type 29 has an invalid length.
[   95.360202][ T6777] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[   95.366923][ T6777] bridge0: port 3(team0) entered blocking state
[   95.369911][ T6777] bridge0: port 3(team0) entered forwarding state
[   95.373657][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.377064][ T6777] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.380420][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.383764][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.399251][ T6777] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   95.554175][   T55] Bluetooth: hci1: command 0x0419 tx timeout
[   95.632363][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   95.636436][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[   95.640717][   T55] Bluetooth: hci0: hardware error 0x00
[   95.829574][ T6794] netlink: 'syz.0.396': attribute type 2 has an invalid length.
[   95.838001][ T6794] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.396'.
[   95.956479][ T6797] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[   95.960397][ T6797] netlink: 17 bytes leftover after parsing attributes in process `syz.2.397'.
[   97.235304][ T6826] netlink: 'syz.2.409': attribute type 29 has an invalid length.
[   97.239424][ T6825] netlink: 'syz.2.409': attribute type 29 has an invalid length.
[   97.301703][ T5874] Bluetooth: hci2: unexpected subevent 0x01 length: 14 < 18
[   97.720151][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   98.303393][ T6880] tun0: tun_chr_ioctl cmd 1074025677
[   98.308964][ T6880] tun0: linktype set to 774
[   98.393091][ T6883] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.436'.
[  100.199761][ T6941] warning: `syz.0.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.941308][ T5871] team0: Port device syz_tun removed
[  101.754108][ T6971] validate_nla: 2 callbacks suppressed
[  101.754205][ T6971] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[  101.759188][ T6971] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.477'.
[  101.800205][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.812881][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.815940][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.819137][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.823201][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.838621][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.843861][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.848615][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.852717][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.855723][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.983707][ T6982] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  102.024245][ T6972] chnl_net:caif_netlink_parms(): no params data found
[  102.232604][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.235061][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.238302][ T6972] bridge_slave_0: entered allmulticast mode
[  102.241314][ T6972] bridge_slave_0: entered promiscuous mode
[  102.255839][ T6974] chnl_net:caif_netlink_parms(): no params data found
[  102.272225][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.274946][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.278116][ T6972] bridge_slave_1: entered allmulticast mode
[  102.286645][ T6972] bridge_slave_1: entered promiscuous mode
[  102.319894][ T6995] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.482'.
[  102.328919][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.377104][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.429378][ T6972] team0: Port device team_slave_0 added
[  102.445172][ T6972] team0: Port device team_slave_1 added
[  102.469255][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.473532][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.476292][ T6974] bridge_slave_0: entered allmulticast mode
[  102.479915][ T6974] bridge_slave_0: entered promiscuous mode
[  102.504559][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.506942][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.509578][ T6974] bridge_slave_1: entered allmulticast mode
[  102.519833][ T6974] bridge_slave_1: entered promiscuous mode
[  102.538153][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.540870][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.554236][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.579863][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.583666][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.586292][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.597848][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.605405][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.677978][ T6974] team0: Port device team_slave_0 added
[  102.712906][ T6974] team0: Port device team_slave_1 added
[  102.725536][ T6972] hsr_slave_0: entered promiscuous mode
[  102.728884][ T6972] hsr_slave_1: entered promiscuous mode
[  102.736774][ T6972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.740420][ T6972] Cannot create hsr debugfs directory
[  102.805975][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.809637][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.821812][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.844528][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.847293][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.858874][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.925271][ T6974] hsr_slave_0: entered promiscuous mode
[  102.927796][ T6974] hsr_slave_1: entered promiscuous mode
[  102.932378][ T6974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.938080][ T6974] Cannot create hsr debugfs directory
[  103.078065][ T6972] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.101088][ T6972] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.117873][ T6972] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.130140][ T6972] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.234716][ T6974] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.244769][ T6974] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.255502][ T6974] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.265552][ T6974] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.319116][ T6972] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.348254][ T6972] 8021q: adding VLAN 0 to HW filter on device team0
[  103.367218][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.370029][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.384931][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.387452][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.433731][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.461268][ T6974] 8021q: adding VLAN 0 to HW filter on device team0
[  103.479499][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.483010][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.497479][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.500532][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.568446][ T6972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.744839][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.835375][ T6974] veth0_vlan: entered promiscuous mode
[  103.854508][ T6974] veth1_vlan: entered promiscuous mode
[  103.861182][ T6972] veth0_vlan: entered promiscuous mode
[  103.872040][ T5874] Bluetooth: hci1: command tx timeout
[  103.872367][   T55] Bluetooth: hci0: command tx timeout
[  103.880576][ T6972] veth1_vlan: entered promiscuous mode
[  103.909545][ T6974] veth0_macvtap: entered promiscuous mode
[  103.916358][ T6974] veth1_macvtap: entered promiscuous mode
[  103.943470][ T6972] veth0_macvtap: entered promiscuous mode
[  103.950649][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.962446][ T6972] veth1_macvtap: entered promiscuous mode
[  103.974620][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.988488][ T6974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.995433][ T6974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.998654][ T6974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.004257][ T6974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.043856][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.068344][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.089714][ T6972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.094691][ T6972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.097788][ T6972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.100832][ T6972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.125834][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.129073][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.175436][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.178612][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.206965][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.215800][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.257342][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.260341][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.951811][   T55] Bluetooth: hci0: command tx timeout
[  105.955206][   T55] Bluetooth: hci1: command tx timeout
[  106.007721][ T7119] netlink: 180 bytes leftover after parsing attributes in process `syz.3.522'.
[  106.243357][ T7128] netlink: 'syz.4.526': attribute type 10 has an invalid length.
[  106.395025][ T7133] netlink: 'syz.2.528': attribute type 21 has an invalid length.
[  106.534901][ T7141] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.532'.
[  106.544576][ T7141] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.532'.
[  106.548389][ T7141] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.532'.
[  106.670903][ T7151] netlink: 'syz.4.537': attribute type 21 has an invalid length.
[  106.722454][ T7151] netlink: 'syz.4.537': attribute type 1 has an invalid length.
[  106.913394][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.545'.
[  106.918200][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.545'.
[  106.923618][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.545'.
[  106.976817][ T7172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.033072][ T5874] Bluetooth: hci1: command tx timeout
[  108.033106][   T55] Bluetooth: hci0: command tx timeout
[  108.128861][ T7186] delete_channel: no stack
[  108.848206][ T7210] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[  108.853118][ T7210] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.564'.
[  108.980055][ T7211] netlink: 'syz.4.563': attribute type 10 has an invalid length.
[  108.985059][ T7211] netlink: 55 bytes leftover after parsing attributes in process `syz.4.563'.
[  109.197270][ T7229] : renamed from hsr_slave_0 (while UP)
[  109.718045][ T7249] syzkaller0: entered promiscuous mode
[  109.720826][ T7249] syzkaller0: entered allmulticast mode
[  109.817349][ T7253] netlink: 'syz.2.580': attribute type 13 has an invalid length.
[  109.901115][ T7257] netlink: 'syz.2.582': attribute type 21 has an invalid length.
[  110.112095][   T55] Bluetooth: hci1: command tx timeout
[  110.112172][ T5874] Bluetooth: hci0: command tx timeout
[  111.829072][ T7257] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[  111.832635][ T7257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.582'.
[  112.027198][ T7279] netlink: 22 bytes leftover after parsing attributes in process `syz.4.592'.
[  113.805069][ T7306] netlink: 'syz.4.604': attribute type 2 has an invalid length.
[  113.811041][ T7306] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.604'.
[  113.818232][ T7306] nbd: must specify at least one socket
[  113.996304][ T7314] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.608'.
[  115.667234][ T7363] netlink: 'syz.2.629': attribute type 6 has an invalid length.
[  115.670736][ T7363] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.629'.
[  119.069298][ T7387] netlink: 'syz.4.641': attribute type 21 has an invalid length.
[  119.197755][ T7392] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.643'.
[  120.190554][ T7444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  120.214306][ T7444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  121.166915][ T7466] netlink: 'syz.4.678': attribute type 1 has an invalid length.
[  121.387886][ T7481] netlink: 13 bytes leftover after parsing attributes in process `syz.3.685'.
[  121.669349][ T7502] netlink: 'syz.3.695': attribute type 10 has an invalid length.
[  121.706449][ T7502] bond0: (slave bond_slave_0): Releasing backup interface
[  124.172932][ T7538] netlink: 'syz.2.711': attribute type 10 has an invalid length.
[  124.180446][ T7538] netlink: 'syz.2.711': attribute type 11 has an invalid length.
[  124.187249][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'.
[  125.344927][ T7547] lo: entered allmulticast mode
[  125.384178][ T7547] lo: entered promiscuous mode
[  125.385919][ T7547] lo: left allmulticast mode
[  125.537288][ T7559] netlink: 2451 bytes leftover after parsing attributes in process `syz.4.721'.
[  125.783649][ T7587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'.
[  129.294150][ T7665] netlink: 'syz.4.766': attribute type 33 has an invalid length.
[  130.114987][ T7685] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.773'.
[  130.118516][ T7685] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  130.128645][ T7685] openvswitch: netlink: Message has 2 unknown bytes.
[  130.190163][ T7684] netlink: 'syz.4.775': attribute type 39 has an invalid length.
[  132.067519][ T7732] netlink: 60 bytes leftover after parsing attributes in process `syz.3.796'.
[  132.428645][ T7737] netlink: 188 bytes leftover after parsing attributes in process `syz.3.797'.
[  132.752234][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.754767][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.739668][ T7773] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.814'.
[  133.772239][ T7775] netlink: 'syz.4.815': attribute type 10 has an invalid length.
[  133.894332][ T7775] team0: Device ipvlan1 failed to register rx_handler
[  134.036989][ T7775] syz.4.815 (7775) used greatest stack depth: 18872 bytes left
[  135.775429][ T7825] netlink: 60 bytes leftover after parsing attributes in process `syz.4.833'.
[  136.285449][ T7841] netlink: 168 bytes leftover after parsing attributes in process `syz.4.841'.
[  136.419990][ T7844] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.842'.
[  139.007739][ T7846] C: renamed from team_slave_0 (while UP)
[  139.016002][ T7846] netlink: 'syz.2.843': attribute type 3 has an invalid length.
[  139.019604][ T7846] netlink: 144 bytes leftover after parsing attributes in process `syz.2.843'.
[  139.028037][ T7846] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  139.367976][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.539573][ T7881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.859'.
[  140.111758][    T9] page_pool_release_retry() stalled pool shutdown: id 19, 1 inflight 60 sec
[  140.121786][ T7892] netlink: 'syz.3.864': attribute type 10 has an invalid length.
[  140.342847][ T7892] team0: Device ipvlan1 failed to register rx_handler
[  141.495063][ T7935] netlink: 'syz.2.883': attribute type 28 has an invalid length.
[  141.497818][ T7935] netlink: 'syz.2.883': attribute type 4 has an invalid length.
[  141.500558][ T7935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.883'.
[  141.705960][ T7948] mac80211_hwsim hwsim14 .3c: renamed from wlan1 (while UP)
[  142.090911][ T7963] netlink: 'syz.4.896': attribute type 17 has an invalid length.
[  142.113107][ T7963] netlink: 'syz.4.896': attribute type 16 has an invalid length.
[  142.118266][ T7963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.896'.
[  142.201157][ T7970] netlink: 'syz.3.900': attribute type 21 has an invalid length.
[  142.207118][ T7970] netlink: 'syz.3.900': attribute type 10 has an invalid length.
[  142.211086][ T7970] netlink: 55 bytes leftover after parsing attributes in process `syz.3.900'.
[  142.500226][ T7979] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.903'.
[  142.504962][ T7979] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.903'.
[  142.508378][ T7979] netlink: 2 bytes leftover after parsing attributes in process `syz.2.903'.
[  142.679946][ T7989] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.908'.
[  144.059770][ T8043] netlink: 156 bytes leftover after parsing attributes in process `syz.2.933'.
[  144.961809][ T8057] netlink: 'syz.4.938': attribute type 33 has an invalid length.
[  144.965406][ T8057] netlink: 152 bytes leftover after parsing attributes in process `syz.4.938'.
[  145.890376][ T8073] netlink: 'syz.4.946': attribute type 21 has an invalid length.
[  145.893885][ T8073] netlink: 'syz.4.946': attribute type 15 has an invalid length.
[  145.896853][ T8073] netlink: 156 bytes leftover after parsing attributes in process `syz.4.946'.
[  145.900149][ T8073] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.903701][ T8073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.906297][ T8073] IPv6: NLM_F_CREATE should be set when creating new route
[  145.909052][ T8073] IPv6: NLM_F_CREATE should be set when creating new route
[  145.911789][ T8073] IPv6: NLM_F_CREATE should be set when creating new route
[  145.923876][ T8079] netlink: 'syz.3.949': attribute type 21 has an invalid length.
[  145.926863][ T8079] netlink: 156 bytes leftover after parsing attributes in process `syz.3.949'.
[  145.930348][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  146.083002][ T8094] netlink: 'syz.3.955': attribute type 12 has an invalid length.
[  146.085638][ T8094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.955'.
[  146.691336][ T8103] pim6reg1: entered allmulticast mode
[  147.909868][ T8135] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.975'.
[  148.029432][ T8139] pim6reg1: entered promiscuous mode
[  148.034273][ T8139] pim6reg1: entered allmulticast mode
[  148.690928][ T8143] netlink: 'syz.3.978': attribute type 21 has an invalid length.
[  148.704052][ T8143] netlink: 156 bytes leftover after parsing attributes in process `syz.3.978'.
[  148.779742][ T8145] netlink: 14 bytes leftover after parsing attributes in process `syz.3.979'.
[  148.786582][ T8145] hsr_slave_0: left promiscuous mode
[  148.813046][ T8145] hsr_slave_1: left promiscuous mode
[  149.058306][ T8166] netlink: 'syz.4.987': attribute type 10 has an invalid length.
[  149.108406][ T8170] netlink: 'syz.4.989': attribute type 12 has an invalid length.
[  149.112089][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.989'.
[  149.212770][ T8178] netlink: 'syz.2.993': attribute type 10 has an invalid length.
[  149.224579][ T8178] bond0: (slave ): Enslaving as an active interface with an up link
[  149.324460][ T8186] netlink: 'syz.4.997': attribute type 2 has an invalid length.
[  149.327553][ T8186] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.997'.
[  149.339002][ T8186] nbd: must specify at least one socket
[  149.363487][ T8186] netlink: 830 bytes leftover after parsing attributes in process `syz.4.997'.
[  149.367228][ T8186] bond_slave_0: entered promiscuous mode
[  149.369592][ T8186] bond_slave_1: entered promiscuous mode
[  149.648457][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1003'.
[  149.653610][ T8200] batadv0: entered promiscuous mode
[  149.655630][ T8200] batadv0: entered allmulticast mode
[  149.658245][ T8200] bridge0: port 3(batadv0) entered blocking state
[  149.663776][ T8200] bridge0: port 3(batadv0) entered disabled state
[  149.668460][ T8200] bridge0: port 3(batadv0) entered blocking state
[  149.671257][ T8200] bridge0: port 3(batadv0) entered forwarding state
[  149.762336][ T5691] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  149.766498][ T5691] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  149.774142][ T5874] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  149.774333][ T5874] Bluetooth: hci1: connection err: -111
[  149.780564][ T8209] @: renamed from bond_slave_0
[  150.843616][ T8229] validate_nla: 1 callbacks suppressed
[  150.843630][ T8229] netlink: 'syz.3.1014': attribute type 10 has an invalid length.
[  150.848319][ T8229] team0: Device ip6_vti0 is of different type
[  150.947934][ T8236] netlink: 'syz.4.1016': attribute type 10 has an invalid length.
[  150.950945][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.954918][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.962087][ T8236] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.965145][ T8236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.969177][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.972522][ T8236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.979665][ T8236] team0: Port device bridge0 added
[  152.027735][ T8261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1027'.
[  152.205994][ T8269] delete_channel: no stack
[  152.208796][ T8269] delete_channel: no stack
[  152.532561][ T8274] delete_channel: no stack
[  152.585426][ T8282] netlink: 'syz.3.1037': attribute type 21 has an invalid length.
[  152.588087][ T8282] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1037'.
[  152.591336][ T8282] netlink: 'syz.3.1037': attribute type 4 has an invalid length.
[  152.599114][ T8282] netlink: 'syz.3.1037': attribute type 5 has an invalid length.
[  152.604293][ T8282] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1037'.
[  154.077608][ T8328] netlink: 'syz.4.1059': attribute type 2 has an invalid length.
[  154.111196][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'.
[  154.115060][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1060'.
[  154.130691][ T8332] syzkaller0: entered promiscuous mode
[  154.132743][ T8332] syzkaller0: entered allmulticast mode
[  154.342644][ T8348] netlink: 'syz.4.1068': attribute type 2 has an invalid length.
[  154.350692][ T8348] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1068'.
[  154.463886][ T8358] delete_channel: no stack
[  155.743929][ T8387] netlink: 'syz.3.1086': attribute type 1 has an invalid length.
[  155.755263][ T8387] netlink: 'syz.3.1086': attribute type 4 has an invalid length.
[  155.759609][ T8387] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1086'.
[  155.991175][ T8402] netlink: 'syz.2.1093': attribute type 10 has an invalid length.
[  156.029008][ T8406] netlink: 'syz.3.1095': attribute type 10 has an invalid length.
[  156.038885][ T8402] team0: Device ipvlan1 failed to register rx_handler
[  156.045536][ T8396] cgroup: fork rejected by pids controller in /syz4
[  156.050365][ T8406] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1095'.
[  156.443194][ T8418] netlink: 'syz.3.1099': attribute type 29 has an invalid length.
[  156.446732][ T8418] netlink: 'syz.3.1099': attribute type 29 has an invalid length.
[  156.490216][ T5874] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4
[  156.658539][ T5874] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  156.795594][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.799307][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.802625][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.805768][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.808613][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.111584][ T8439] syzkaller0: tun_chr_ioctl cmd 1074025677
[  157.113629][ T8439] syzkaller0: Linktype set failed because interface is up
[  157.117804][ T5691] syzkaller0: tun_net_xmit 76
[  157.119719][ T5691] syzkaller0: tun_net_xmit 48
[  157.142925][    T9] syzkaller0: tun_net_xmit 76
[  157.178897][ T8426] chnl_net:caif_netlink_parms(): no params data found
[  157.255465][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.261130][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.264233][ T8426] bridge_slave_0: entered allmulticast mode
[  157.267349][ T8426] bridge_slave_0: entered promiscuous mode
[  157.273848][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.276468][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.279000][ T8426] bridge_slave_1: entered allmulticast mode
[  157.283729][ T8426] bridge_slave_1: entered promiscuous mode
[  157.331300][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.270188][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.302461][ T8426] team0: Port device team_slave_0 added
[  158.309061][ T8426] team0: Port device team_slave_1 added
[  158.341875][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.355084][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.368951][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.376842][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.380290][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.391408][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.463981][ T8426] hsr_slave_0: entered promiscuous mode
[  158.467389][ T8426] hsr_slave_1: entered promiscuous mode
[  158.470048][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.475342][ T8426] Cannot create hsr debugfs directory
[  158.667879][ T8426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.681254][ T8477] C: renamed from team_slave_0 (while UP)
[  158.690091][ T8477] netlink: 'syz.3.1121': attribute type 3 has an invalid length.
[  158.700391][ T8477] netlink: 'syz.3.1121': attribute type 1 has an invalid length.
[  158.708350][ T8477] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1121'.
[  158.713984][ T8477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  158.720270][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1122'.
[  158.725355][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1122'.
[  158.730141][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1122'.
[  158.754702][ T8426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.831812][ T8426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.832455][ T5874] Bluetooth: hci0: command tx timeout
[  158.892849][ T8426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.968612][ T8426] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.978461][ T8426] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  158.986610][ T8477] bridge0: port 3(syz_tun) entered blocking state
[  158.989092][ T8477] bridge0: port 3(syz_tun) entered disabled state
[  159.000090][ T8477] syz_tun: entered allmulticast mode
[  159.004686][ T8477] syz_tun: entered promiscuous mode
[  159.007011][ T8477] bridge0: port 3(syz_tun) entered blocking state
[  159.009398][ T8477] bridge0: port 3(syz_tun) entered forwarding state
[  159.014475][ T8426] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  159.023710][ T8426] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  159.127219][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.147348][ T8426] 8021q: adding VLAN 0 to HW filter on device team0
[  159.176236][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.179212][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.188372][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.191544][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.384340][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.638840][ T8426] veth0_vlan: entered promiscuous mode
[  159.647958][ T8426] veth1_vlan: entered promiscuous mode
[  159.680207][ T8426] veth0_macvtap: entered promiscuous mode
[  159.687581][ T8426] veth1_macvtap: entered promiscuous mode
[  159.697867][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.704886][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.710683][ T8426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.714024][ T8426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.717279][ T8426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.720385][ T8426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.771929][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.774757][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.793071][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.796472][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.241098][ T8552] netlink: 'syz.3.1145': attribute type 22 has an invalid length.
[  160.247156][ T8552] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1145'.
[  160.519725][ T8566] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1151'.
[  160.911871][ T5874] Bluetooth: hci0: command tx timeout
[  161.841232][ T8598] netlink: 'syz.3.1166': attribute type 16 has an invalid length.
[  161.846089][ T8598] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1166'.
[  161.874333][ T8602] netlink: 'syz.3.1168': attribute type 21 has an invalid length.
[  161.877066][ T8602] netlink: 'syz.3.1168': attribute type 4 has an invalid length.
[  162.991901][ T5874] Bluetooth: hci0: command tx timeout
[  163.699453][ T8620] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1176'.
[  165.071680][ T5874] Bluetooth: hci0: command tx timeout
[  165.865137][ T8634] syzkaller0: entered promiscuous mode
[  165.867680][ T8634] syzkaller0: entered allmulticast mode
[  166.035963][ T8636] delete_channel: no stack
[  166.037746][ T8636] delete_channel: no stack
[  166.214284][ T8640] netlink: 'syz.2.1185': attribute type 2 has an invalid length.
[  166.217220][ T8640] netlink: 'syz.2.1185': attribute type 8 has an invalid length.
[  166.220202][ T8640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'.
[  166.355793][ T8644] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1187'.
[  166.429601][ T8646] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1188'.
[  166.537045][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1190'.
[  166.548249][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.729517][ T8650] bridge_slave_0 (unregistering): left allmulticast mode
[  166.732371][ T8650] bridge_slave_0 (unregistering): left promiscuous mode
[  166.735696][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.766075][ T8652] netlink: 64515 bytes leftover after parsing attributes in process `syz.3.1191'.
[  166.813910][ T8655] netlink: 'syz.4.1193': attribute type 21 has an invalid length.
[  166.816697][ T8655] netlink: 'syz.4.1193': attribute type 1 has an invalid length.
[  166.983917][ T8674] syz.2.1201: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  166.991950][ T8674] CPU: 0 UID: 0 PID: 8674 Comm: syz.2.1201 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  166.991995][ T8674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.992003][ T8674] Call Trace:
[  166.992011][ T8674]  <TASK>
[  166.992017][ T8674]  dump_stack_lvl+0x189/0x250
[  166.992042][ T8674]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.992059][ T8674]  ? __pfx__printk+0x10/0x10
[  166.992079][ T8674]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  166.992096][ T8674]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  166.992115][ T8674]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  166.992135][ T8674]  warn_alloc+0x214/0x310
[  166.992152][ T8674]  ? stack_depot_save_flags+0x40/0x900
[  166.992176][ T8674]  ? __pfx_warn_alloc+0x10/0x10
[  166.992194][ T8674]  ? kasan_save_track+0x4f/0x80
[  166.992216][ T8674]  ? xskq_create+0x56/0x170
[  166.992232][ T8674]  ? xsk_init_queue+0xb0/0x110
[  166.992247][ T8674]  ? xsk_setsockopt+0x4de/0x710
[  166.992261][ T8674]  ? do_sock_setsockopt+0x17c/0x1b0
[  166.992276][ T8674]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  166.992291][ T8674]  ? do_syscall_64+0xfa/0x3b0
[  166.992310][ T8674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.992358][ T8674]  __vmalloc_node_range_noprof+0x125/0x12f0
[  166.992401][ T8674]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  166.992423][ T8674]  ? __kasan_kmalloc+0x93/0xb0
[  166.992440][ T8674]  vmalloc_user_noprof+0xad/0xf0
[  166.992457][ T8674]  ? xskq_create+0xbf/0x170
[  166.992475][ T8674]  xskq_create+0xbf/0x170
[  166.992495][ T8674]  xsk_init_queue+0xb0/0x110
[  166.992515][ T8674]  xsk_setsockopt+0x4de/0x710
[  166.992533][ T8674]  ? __pfx_xsk_setsockopt+0x10/0x10
[  166.992552][ T8674]  ? __fget_files+0x2a/0x420
[  166.992567][ T8674]  ? aa_sock_opt_perm+0x74/0x110
[  166.992586][ T8674]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  166.992603][ T8674]  ? __pfx_xsk_setsockopt+0x10/0x10
[  166.992620][ T8674]  do_sock_setsockopt+0x17c/0x1b0
[  166.992638][ T8674]  __x64_sys_setsockopt+0x13f/0x1b0
[  166.992657][ T8674]  do_syscall_64+0xfa/0x3b0
[  166.992674][ T8674]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.992701][ T8674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.992714][ T8674]  ? exc_page_fault+0x9f/0xf0
[  166.992734][ T8674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.992749][ T8674] RIP: 0033:0x7fb8b8d8e9a9
[  166.992763][ T8674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.992774][ T8674] RSP: 002b:00007fb8b9c82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  166.992789][ T8674] RAX: ffffffffffffffda RBX: 00007fb8b8fb5fa0 RCX: 00007fb8b8d8e9a9
[  166.992799][ T8674] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  166.992807][ T8674] RBP: 00007fb8b8e10d69 R08: 0000000000000004 R09: 0000000000000000
[  166.992816][ T8674] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  166.992824][ T8674] R13: 0000000000000000 R14: 00007fb8b8fb5fa0 R15: 00007ffc565bdf78
[  166.992847][ T8674]  </TASK>
[  166.993676][ T8674] Mem-Info:
[  167.128733][ T8674] active_anon:8700 inactive_anon:0 isolated_anon:0
[  167.128733][ T8674]  active_file:11197 inactive_file:38266 isolated_file:0
[  167.128733][ T8674]  unevictable:1768 dirty:194 writeback:0
[  167.128733][ T8674]  slab_reclaimable:9728 slab_unreclaimable:61711
[  167.128733][ T8674]  mapped:18065 shmem:2451 pagetables:918
[  167.128733][ T8674]  sec_pagetables:0 bounce:0
[  167.128733][ T8674]  kernel_misc_reclaimable:0
[  167.128733][ T8674]  free:275399 free_pcp:19411 free_cma:0
[  167.150744][ T8674] Node 0 active_anon:24036kB inactive_anon:0kB active_file:8968kB inactive_file:142380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27820kB dirty:484kB writeback:0kB shmem:4716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5252kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  167.166109][ T8674] Node 1 active_anon:10764kB inactive_anon:0kB active_file:35820kB inactive_file:10684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44440kB dirty:292kB writeback:0kB shmem:5088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7004kB pagetables:1736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  167.178526][ T8674] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  167.192269][ T8674] lowmem_reserve[]: 0 812 812 812 812
[  167.194763][ T8674] Node 0 DMA32 free:270652kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24036kB inactive_anon:0kB active_file:8968kB inactive_file:142380kB unevictable:3536kB writepending:484kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:37020kB local_pcp:20900kB free_cma:0kB
[  167.216323][ T8674] lowmem_reserve[]: 0 0 0 0 0
[  167.218125][ T8674] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  167.237852][ T8674] lowmem_reserve[]: 0 0 854 854 854
[  167.239952][ T8674] Node 1 Normal free:356796kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10764kB inactive_anon:0kB active_file:35820kB inactive_file:10684kB unevictable:3536kB writepending:292kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41024kB local_pcp:21428kB free_cma:0kB
[  167.251321][ T8674] lowmem_reserve[]: 0 0 0 0 0
[  167.254885][ T8674] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  167.260367][ T8674] Node 0 DMA32: 698*4kB (UM) 385*8kB (UME) 80*16kB (UM) 86*32kB (UM) 52*64kB (UE) 16*128kB (UE) 2*256kB (U) 15*512kB (UME) 9*1024kB (UM) 6*2048kB (UM) 57*4096kB (UM) = 278448kB
[  167.267702][ T8674] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  167.274615][ T8674] Node 1 Normal: 56*4kB (UM) 268*8kB (UME) 366*16kB (UME) 264*32kB (UME) 224*64kB (UME) 79*128kB (UME) 34*256kB (UME) 17*512kB (UM) 7*1024kB (UM) 4*2048kB (UM) 69*4096kB (UM) = 356512kB
[  167.280666][ T8674] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  167.284403][ T8674] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  167.287934][ T8674] 51914 total pagecache pages
[  167.289845][ T8674] 0 pages in swap cache
[  167.291236][ T8674] Free swap  = 124996kB
[  167.294291][ T8674] Total swap = 124996kB
[  167.295700][ T8674] 786301 pages RAM
[  167.296974][ T8674] 0 pages HighMem/MovableOnly
[  167.298568][ T8674] 241075 pages reserved
[  167.299967][ T8674] 0 pages cma reserved
[  167.368954][ T8684] syzkaller0: entered allmulticast mode
[  167.454049][ T8694] netlink: 'syz.2.1212': attribute type 13 has an invalid length.
[  167.458001][ T8694] netlink: 'syz.2.1212': attribute type 58 has an invalid length.
[  167.463595][ T8694] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1212'.
[  167.503218][ T8700] syzkaller1: tun_chr_ioctl cmd 1074025673
[  167.960517][ T8711] netlink: 'syz.2.1220': attribute type 21 has an invalid length.
[  168.171729][ T8727] syzkaller1: tun_chr_ioctl cmd 1074812118
[  169.081992][ T8750] netlink: 'syz.2.1236': attribute type 10 has an invalid length.
[  169.088397][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'.
[  170.027800][ T8783] netlink: 'syz.4.1249': attribute type 6 has an invalid length.
[  170.030634][ T8783] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1249'.
[  170.167215][ T8791] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1253'.
[  170.887062][ T8827] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1270'.
[  171.212514][ T5874] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10
[  171.889452][ T8840] netlink: 'syz.2.1275': attribute type 29 has an invalid length.
[  171.895969][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'.
[  172.145845][ T8853] netlink: 'syz.3.1280': attribute type 3 has an invalid length.
[  172.149349][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'.
[  172.388609][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1285'.
[  172.399545][ T8862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1285'.
[  172.449815][ T8871] netlink: 'syz.4.1287': attribute type 21 has an invalid length.
[  172.466895][ T5874] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  173.231782][ T5874] Bluetooth: hci2: command tx timeout
[  173.833607][ T8907] syzkaller0: entered promiscuous mode
[  173.835791][ T8907] syzkaller0: entered allmulticast mode
[  173.838237][ T8908] netlink: 'syz.3.1305': attribute type 21 has an invalid length.
[  176.883387][ T8985] netlink: 'syz.2.1341': attribute type 2 has an invalid length.
[  176.889138][ T8985] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1341'.
[  177.683341][ T9041] netlink: 'syz.3.1367': attribute type 29 has an invalid length.
[  177.786033][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  178.733935][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  179.209807][ T9056] netlink: 'syz.3.1373': attribute type 2 has an invalid length.
[  179.218117][ T9056] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1373'.
[  179.223653][ T9056] nbd: must specify at least one socket
[  179.442161][ T9068] netlink: 'syz.4.1377': attribute type 10 has an invalid length.
[  179.448372][ T9068] bridge0: port 3(macsec0) entered blocking state
[  179.450785][ T9068] bridge0: port 3(macsec0) entered disabled state
[  179.453538][ T9068] macsec0: entered allmulticast mode
[  179.455942][ T9068] veth1_macvtap: entered allmulticast mode
[  179.460428][ T9068] macsec0: entered promiscuous mode
[  179.463886][ T9068] bridge0: port 3(macsec0) entered blocking state
[  179.466765][ T9068] bridge0: port 3(macsec0) entered forwarding state
[  179.587177][ T9072] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1379'.
[  194.125579][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.128500][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  196.448653][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.457140][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.460722][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.464429][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.467994][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.888780][ T5221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  197.898174][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  197.906369][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.911229][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.915209][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.939905][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  197.944668][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.948547][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.957536][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.961208][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  198.511902][   T55] Bluetooth: hci3: command tx timeout
[  199.951726][   T55] Bluetooth: hci4: command tx timeout
[  200.031625][   T55] Bluetooth: hci5: command tx timeout
[  200.592211][   T55] Bluetooth: hci3: command tx timeout
[  202.031821][   T55] Bluetooth: hci4: command tx timeout
[  202.114588][   T55] Bluetooth: hci5: command tx timeout
[  202.681869][   T55] Bluetooth: hci3: command tx timeout
[  204.111855][   T55] Bluetooth: hci4: command tx timeout
[  204.194549][   T55] Bluetooth: hci5: command tx timeout
[  204.751698][   T55] Bluetooth: hci3: command tx timeout
[  206.191786][   T55] Bluetooth: hci4: command tx timeout
[  206.271764][   T55] Bluetooth: hci5: command tx timeout
[  226.919641][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  255.557326][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.560339][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.697937][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  256.701651][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  256.705010][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  256.708269][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  256.711357][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.935897][ T5221] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.939302][ T5221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.946921][ T5221] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.963184][ T5221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.966116][ T5221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.119899][ T9237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  258.123579][ T9237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  258.126778][ T9237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  258.129717][ T9237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  258.132937][ T9237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  287.091485][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  287.094151][    C1] rcu: 	1-....: (10499 ticks this GP) idle=e6ac/1/0x4000000000000000 softirq=28016/28016 fqs=4866
[  287.099876][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  287.102408][    C1] rcu: 	 number:   939835          1            0
[  287.104880][    C1] rcu: 	cputime:    24479      28010          101   ==> 52490(ms)
[  287.107686][    C1] rcu: 	(t=10500 jiffies g=22665 q=3747 ncpus=2)
[  287.110330][    C1] CPU: 1 UID: 0 PID: 9206 Comm: syz.2.1402 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  287.110344][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.110350][    C1] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0
[  287.110372][    C1] Code: 00 4d 85 e4 75 16 e8 a1 5f 11 00 eb 15 e8 9a 5f 11 00 e8 f5 ca bf 09 4d 85 e4 74 ea e8 8b 5f 11 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
[  287.110381][    C1] RSP: 0018:ffffc900001e0b80 EFLAGS: 00000246
[  287.110392][    C1] RAX: ffffffff81aebe35 RBX: 0000000000000000 RCX: ffff888026305640
[  287.110400][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  287.110406][    C1] RBP: ffffc900001e0c20 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  287.110414][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000200
[  287.110420][    C1] R13: dffffc0000000000 R14: 1ffff9200003c170 R15: dffffc0000000000
[  287.110428][    C1] FS:  00007fb8b9c616c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  287.110433][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.110438][    C1] CR2: 00007fb8b9c60fc8 CR3: 000000001ecb8000 CR4: 00000000000006f0
[  287.110472][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  287.110480][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  287.110486][    C1] Call Trace:
[  287.110493][    C1]  <IRQ>
[  287.110500][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  287.110522][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  287.110538][    C1]  ktime_get+0x3e/0x1f0
[  287.110552][    C1]  mac80211_hwsim_beacon+0x15c/0x1c0
[  287.110563][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  287.110575][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  287.110604][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  287.110625][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  287.110641][    C1]  handle_softirqs+0x286/0x870
[  287.110665][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  287.110679][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  287.110693][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  287.110711][    C1]  __irq_exit_rcu+0xca/0x1f0
[  287.110723][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  287.110743][    C1]  irq_exit_rcu+0x9/0x30
[  287.110753][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  287.110768][    C1]  </IRQ>
[  287.110771][    C1]  <TASK>
[  287.110776][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  287.110788][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  287.110802][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  287.110810][    C1] RSP: 0018:ffffc9000afb7200 EFLAGS: 00000286
[  287.110815][    C1] RAX: dc5a1a1176cf2800 RBX: 0000000000000000 RCX: dc5a1a1176cf2800
[  287.110820][    C1] RDX: 0000000000000006 RSI: ffffffff8d99873a RDI: 0000000000000001
[  287.110827][    C1] RBP: ffffc9000afb72a0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  287.110833][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  287.110840][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920015f6e40
[  287.110864][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  287.110884][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  287.110899][    C1]  irqentry_exit+0x6f/0x90
[  287.110909][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  287.110918][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  287.110928][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  287.110935][    C1] RSP: 0018:ffffc9000afb7360 EFLAGS: 00000206
[  287.110943][    C1] RAX: dc5a1a1176cf2800 RBX: 0000000000000000 RCX: dc5a1a1176cf2800
[  287.110950][    C1] RDX: 0000000000000000 RSI: ffffffff8db8641b RDI: ffffffff8be29f80
[  287.110956][    C1] RBP: ffffffff8215f69d R08: 0000000000000000 R09: ffffffff8215f69d
[  287.110963][    C1] R10: 000000000000000a R11: ffffffff81acf520 R12: 0000000000000000
[  287.110969][    C1] R13: ffffffff8e258aa0 R14: 0000000000000001 R15: 0000000000000246
[  287.110978][    C1]  ? fs_reclaim_acquire+0x7d/0x100
[  287.110990][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  287.111004][    C1]  ? fs_reclaim_acquire+0x7d/0x100
[  287.111031][    C1]  ? fs_reclaim_acquire+0x7d/0x100
[  287.111039][    C1]  ? compute_scc+0x159/0xf00
[  287.111051][    C1]  fs_reclaim_acquire+0x99/0x100
[  287.111062][    C1]  ? fs_reclaim_acquire+0x7d/0x100
[  287.111073][    C1]  ? compute_scc+0x159/0xf00
[  287.111120][    C1]  __kvmalloc_node_noprof+0x132/0x5f0
[  287.111134][    C1]  ? compute_scc+0x159/0xf00
[  287.111152][    C1]  compute_scc+0x159/0xf00
[  287.111168][    C1]  ? irqentry_exit+0x74/0x90
[  287.111188][    C1]  ? __pfx_compute_scc+0x10/0x10
[  287.111202][    C1]  ? bpf_check+0x1668b/0x1d2e0
[  287.111220][    C1]  bpf_check+0x173f6/0x1d2e0
[  287.111242][    C1]  ? trace_call_bpf+0xb7/0x850
[  287.111262][    C1]  ? migrate_enable+0x29c/0x3c0
[  287.111283][    C1]  ? trace_call_bpf+0xb7/0x850
[  287.111293][    C1]  ? trace_call_bpf+0xb7/0x850
[  287.111302][    C1]  ? trace_call_bpf+0x5ba/0x850
[  287.111312][    C1]  ? perf_trace_preemptirq_template+0x280/0x340
[  287.111333][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  287.111357][    C1]  ? __lock_acquire+0xab9/0xd20
[  287.111374][    C1]  ? __pfx_bpf_check+0x10/0x10
[  287.111387][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  287.111404][    C1]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  287.111415][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.111427][    C1]  ? ktime_get_with_offset+0x8c/0x2a0
[  287.111439][    C1]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  287.111452][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  287.111474][    C1]  ? __asan_memset+0x22/0x50
[  287.111489][    C1]  ? bpf_obj_name_cpy+0x194/0x1e0
[  287.111499][    C1]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  287.111509][    C1]  ? security_bpf_prog_load+0x7f/0x310
[  287.111525][    C1]  bpf_prog_load+0x1318/0x1930
[  287.111542][    C1]  ? __pfx_bpf_prog_load+0x10/0x10
[  287.111567][    C1]  ? bpf_lsm_bpf+0x9/0x20
[  287.111575][    C1]  ? security_bpf+0x7e/0x300
[  287.111589][    C1]  __sys_bpf+0x528/0x870
[  287.111602][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  287.111633][    C1]  __x64_sys_bpf+0x7c/0x90
[  287.111646][    C1]  do_syscall_64+0xfa/0x3b0
[  287.111666][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.111676][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  287.111690][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.111700][    C1] RIP: 0033:0x7fb8b8d8e9a9
[  287.111711][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.111718][    C1] RSP: 002b:00007fb8b9c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  287.111725][    C1] RAX: ffffffffffffffda RBX: 00007fb8b8fb6080 RCX: 00007fb8b8d8e9a9
[  287.111731][    C1] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  287.111737][    C1] RBP: 00007fb8b8e10d69 R08: 0000000000000000 R09: 0000000000000000
[  287.111743][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.111748][    C1] R13: 0000000000000000 R14: 00007fb8b8fb6080 R15: 00007ffc565bdf78
[  287.111769][    C1]  </TASK>
[  287.389497][    C1] sched: DL replenish lagged too much
[  287.415254][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 105742372829 wd_nsec: 105742375187

VM DIAGNOSIS:
09:33:55  Registers:
info registers vcpu 0

CPU#0
RAX=1c27d126676f9000 RBX=ffffffff81975f18 RCX=1c27d126676f9000 RDX=0000000000000001
RSI=ffffffff8d99873a RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005578397c7e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f6174986d00
XMM02=0110000000000015 ffffffff00000000 XMM03=0001000000052808 0003001000010800
XMM04=0000000000000000 0000000000000011 XMM05=0000000000000000 000000000001df8a
XMM06=0301901000000400 1000060100000017 XMM07=0000000000000000 000000001c083803
XMM08=0108003003000800 2803000000000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfeb0
R8 =ffff888108be8237 R9 =1ffff1102117d046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58c1 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb8b9c616c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb8b9c60fc8 CR3=000000001ecb8000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb8b8f86478 00007fb8b8f86450 XMM03=00007fb8b8f86488 00007fb8b8f86480
XMM04=00007fb8b9aed100 00007fb8b8f86440 XMM05=00007fb8b8f86458 00007fb8b8f864a0
XMM06=00007fb8b8f86498 00007fb8b8f86490 XMM07=00007fb8b8f86488 00007fb8b8f86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb8b8e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
