last executing test programs:

1m14.219873189s ago: executing program 1 (id=421):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x1e, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000e4020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x80082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x907b7d, 0x1, @perf_config_ext={0x7, 0xec}, 0x14105, 0x800000, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x3, 0x84)
socket$kcm(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x11c265, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r5 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044943, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x4000000}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfffff804, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m13.115356554s ago: executing program 1 (id=426):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

1m13.057362705s ago: executing program 1 (id=429):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m13.001064369s ago: executing program 2 (id=431):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

1m12.939048385s ago: executing program 2 (id=433):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0, 0x12}, 0x20)

1m12.88049615s ago: executing program 2 (id=434):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1m12.880082095s ago: executing program 1 (id=435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$kcm(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast})

1m12.879816944s ago: executing program 2 (id=436):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r0, 0x0, 0xffdd)

1m11.932059721s ago: executing program 1 (id=442):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x12120, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x400, @rand_addr=0x64010100}, 0x10, 0x0}, 0x200040c4)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m11.847356376s ago: executing program 2 (id=443):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100)=r1, 0x120)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x3, 0x5c3}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9)

1m11.648411513s ago: executing program 1 (id=444):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m11.516290251s ago: executing program 32 (id=444):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m11.461241751s ago: executing program 2 (id=447):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8)

1m11.353982988s ago: executing program 33 (id=447):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8)

648.094054ms ago: executing program 0 (id=1284):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)

648.004101ms ago: executing program 4 (id=1286):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d0000bf2dfe443b1b5e2a088137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

360.361629ms ago: executing program 4 (id=1290):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x62, 0xa, 0xff00}, [@call={0x71, 0x0, 0x408}]}, 0x0, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)

357.996295ms ago: executing program 4 (id=1296):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f4, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"})

285.265456ms ago: executing program 0 (id=1292):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)

285.090883ms ago: executing program 3 (id=1293):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x14130}], 0x1}, 0x80d1)
close(r0)

197.09073ms ago: executing program 3 (id=1294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0xc0802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'nr0\x00', 0x20})

196.79245ms ago: executing program 4 (id=1295):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xa1}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x81, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000980), &(0x7f00000002c0)=r3}, 0x20)

193.277016ms ago: executing program 0 (id=1301):
perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x89}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

189.859453ms ago: executing program 3 (id=1297):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33)

120.249981ms ago: executing program 0 (id=1298):
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x1e, 0x4, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f3704d373000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x4040000)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41}}], 0x39}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2], 0x20)

119.813543ms ago: executing program 3 (id=1299):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600140000000012080003002e", 0x2d}], 0x1}, 0x20000880)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a00", 0x1e}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

67.598067ms ago: executing program 3 (id=1300):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)

65.637981ms ago: executing program 4 (id=1302):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r1, 0x88, 0x64, &(0x7f00000009c0), 0x4)

65.386367ms ago: executing program 3 (id=1303):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272", 0x11}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

499.165µs ago: executing program 0 (id=1304):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)

111.521µs ago: executing program 0 (id=1305):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, r3, 0x7, r2, 0xb)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x2000)
sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000d40)="5c00000052006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef884c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010143)
sendmsg$kcm(r1, 0x0, 0x4000)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x53, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2123)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/dev/ppp\x00')
socket$kcm(0x2, 0x922000000001, 0x106)
r7 = socket$kcm(0xa, 0x2, 0x88)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f00000012c0)={r9}, 0x8)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4)

0s ago: executing program 4 (id=1306):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26166' (ED25519) to the list of known hosts.
syzkaller login: [   55.806889][ T5815] cgroup: Unknown subsys name 'net'
[   55.929450][ T5815] cgroup: Unknown subsys name 'cpuset'
[   55.935415][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.402066][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.253938][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.257615][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.260841][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.264188][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.267777][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.293529][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.300044][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.303567][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.316428][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.319901][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.381899][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.385841][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.388732][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.392520][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.396776][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.528828][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   61.600025][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   61.633948][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.636939][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.640021][ T5830] bridge_slave_0: entered allmulticast mode
[   61.642810][ T5830] bridge_slave_0: entered promiscuous mode
[   61.648206][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.650647][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.653152][ T5830] bridge_slave_1: entered allmulticast mode
[   61.656206][ T5830] bridge_slave_1: entered promiscuous mode
[   61.680790][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   61.695163][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.706786][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.744564][ T5830] team0: Port device team_slave_0 added
[   61.759202][ T5830] team0: Port device team_slave_1 added
[   61.784842][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.788825][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.791401][ T5835] bridge_slave_0: entered allmulticast mode
[   61.794102][ T5835] bridge_slave_0: entered promiscuous mode
[   61.797695][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.800075][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.802371][ T5835] bridge_slave_1: entered allmulticast mode
[   61.805094][ T5835] bridge_slave_1: entered promiscuous mode
[   61.829605][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.832232][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.841221][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.846743][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.849077][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.857934][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.869069][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.871568][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.873951][ T5838] bridge_slave_0: entered allmulticast mode
[   61.877028][ T5838] bridge_slave_0: entered promiscuous mode
[   61.891280][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.893714][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.896480][ T5838] bridge_slave_1: entered allmulticast mode
[   61.899264][ T5838] bridge_slave_1: entered promiscuous mode
[   61.914500][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.920792][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.943334][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.969633][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.989379][ T5835] team0: Port device team_slave_0 added
[   61.998190][ T5830] hsr_slave_0: entered promiscuous mode
[   62.001557][ T5830] hsr_slave_1: entered promiscuous mode
[   62.013634][ T5835] team0: Port device team_slave_1 added
[   62.034424][ T5838] team0: Port device team_slave_0 added
[   62.049279][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.052176][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.063043][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.071036][ T5838] team0: Port device team_slave_1 added
[   62.074422][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.077976][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.089094][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.164113][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.167417][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.178945][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.197821][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.200893][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.212102][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.238431][ T5835] hsr_slave_0: entered promiscuous mode
[   62.240858][ T5835] hsr_slave_1: entered promiscuous mode
[   62.243058][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.246210][ T5835] Cannot create hsr debugfs directory
[   62.315798][ T5838] hsr_slave_0: entered promiscuous mode
[   62.319133][ T5838] hsr_slave_1: entered promiscuous mode
[   62.322134][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.326206][ T5838] Cannot create hsr debugfs directory
[   62.523739][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.568690][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.576325][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.601837][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.649084][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.655933][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.662818][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.680109][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.720774][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.728367][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.736516][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.756167][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.818406][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.854344][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   62.865066][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.867699][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.880797][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.883521][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.930982][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.964019][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   62.971994][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.987776][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.990833][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.000869][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.003974][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.014220][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   63.031531][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.034648][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.041903][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.045000][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.120994][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.184495][ T5830] veth0_vlan: entered promiscuous mode
[   63.209267][ T5830] veth1_vlan: entered promiscuous mode
[   63.231824][ T5830] veth0_macvtap: entered promiscuous mode
[   63.236106][ T5830] veth1_macvtap: entered promiscuous mode
[   63.250436][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.260042][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.272131][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.275174][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.278714][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.281693][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.296341][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.319079][   T55] Bluetooth: hci0: command tx timeout
[   63.338383][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.357597][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.361116][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.386358][   T55] Bluetooth: hci1: command tx timeout
[   63.400370][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.403699][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.418797][ T5838] veth0_vlan: entered promiscuous mode
[   63.424833][ T5835] veth0_vlan: entered promiscuous mode
[   63.432982][ T5835] veth1_vlan: entered promiscuous mode
[   63.439293][ T5838] veth1_vlan: entered promiscuous mode
[   63.454304][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.466528][   T55] Bluetooth: hci2: command tx timeout
[   63.471539][ T5835] veth0_macvtap: entered promiscuous mode
[   63.478344][ T5838] veth0_macvtap: entered promiscuous mode
[   63.483862][ T5835] veth1_macvtap: entered promiscuous mode
[   63.489015][ T5838] veth1_macvtap: entered promiscuous mode
[   63.502914][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.533217][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.540077][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.546161][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.549174][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.552108][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.558837][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.564091][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.571597][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.574544][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.585276][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.588235][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.707338][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.710600][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.769890][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.773312][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.819396][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.826266][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.827908][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.835570][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.949873][   T55] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   64.233539][ T5926] netlink: 'syz.1.15': attribute type 2 has an invalid length.
[   64.297130][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19'.
[   64.301898][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19'.
[   64.324116][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19'.
[   64.434338][    C0] hrtimer: interrupt took 19545 ns
[   64.474249][ T5937] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   64.478158][ T5937] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   64.484450][ T5937] netlink: 777 bytes leftover after parsing attributes in process `syz.1.22'.
[   64.498837][ T5937] netlink: 129904 bytes leftover after parsing attributes in process `syz.1.22'.
[   64.503732][ T5937] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   64.515505][ T5937] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   64.518770][ T5937] netlink: 777 bytes leftover after parsing attributes in process `syz.1.22'.
[   65.062714][ T5965] netlink: 'syz.1.35': attribute type 2 has an invalid length.
[   65.113260][ T5963] sit0: entered promiscuous mode
[   65.161729][ T5963] sit0: entered allmulticast mode
[   65.487332][ T5219] Bluetooth: hci0: command tx timeout
[   65.489702][ T5219] Bluetooth: hci1: command tx timeout
[   65.547257][   T55] Bluetooth: hci2: command tx timeout
[   65.736981][ T5969] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   65.740269][ T5969] netlink: 55 bytes leftover after parsing attributes in process `syz.1.37'.
[   65.830243][ T5971] warning: `syz.2.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.075754][   T55] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[   66.080689][   T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[   66.084980][   T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   66.085000][   T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.085010][   T55] Workqueue: hci1 hci_rx_work
[   66.085034][   T55] Call Trace:
[   66.085040][   T55]  <TASK>
[   66.085047][   T55]  dump_stack_lvl+0x189/0x250
[   66.085065][   T55]  ? kernfs_path_from_node+0x2c/0x260
[   66.085084][   T55]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.085099][   T55]  ? __pfx__printk+0x10/0x10
[   66.085120][   T55]  ? kernfs_path_from_node+0x2c/0x260
[   66.085135][   T55]  ? kernfs_path_from_node+0x2c/0x260
[   66.085151][   T55]  ? kernfs_path_from_node+0x22c/0x260
[   66.085164][   T55]  ? kernfs_path_from_node+0x2c/0x260
[   66.085181][   T55]  sysfs_create_dir_ns+0x259/0x280
[   66.085236][   T55]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   66.085252][   T55]  ? do_raw_spin_unlock+0x4d/0x240
[   66.085276][   T55]  kobject_add_internal+0x59f/0xb40
[   66.085305][   T55]  kobject_add+0x155/0x220
[   66.085327][   T55]  ? __pfx_kobject_add+0x10/0x10
[   66.085345][   T55]  ? _raw_spin_unlock+0x28/0x50
[   66.085363][   T55]  ? get_device_parent+0x366/0x3a0
[   66.085382][   T55]  device_add+0x408/0xb50
[   66.085400][   T55]  hci_conn_add_sysfs+0xd5/0x1e0
[   66.085418][   T55]  le_conn_complete_evt+0xc3a/0x1220
[   66.085448][   T55]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   66.085467][   T55]  ? __pfx_bt_warn+0x10/0x10
[   66.085477][   T55]  ? __mutex_unlock_slowpath+0x1cd/0x700
[   66.085499][   T55]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   66.085514][   T55]  ? skb_pull_data+0xfb/0x200
[   66.085535][   T55]  hci_le_enh_conn_complete_evt+0x189/0x470
[   66.085555][   T55]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[   66.085577][   T55]  hci_event_packet+0x78f/0x1200
[   66.085594][   T55]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   66.085641][   T55]  ? __pfx_hci_event_packet+0x10/0x10
[   66.085663][   T55]  ? kcov_remote_start+0x4d3/0x7f0
[   66.085685][   T55]  ? lockdep_hardirqs_on+0x90/0x150
[   66.085705][   T55]  ? hci_send_to_monitor+0xe2/0x570
[   66.085721][   T55]  hci_rx_work+0x46a/0xe80
[   66.085744][   T55]  ? process_scheduled_works+0x9ef/0x17b0
[   66.085761][   T55]  process_scheduled_works+0xae1/0x17b0
[   66.085800][   T55]  ? __pfx_process_scheduled_works+0x10/0x10
[   66.085835][   T55]  worker_thread+0x8a0/0xda0
[   66.085872][   T55]  kthread+0x711/0x8a0
[   66.085892][   T55]  ? __pfx_worker_thread+0x10/0x10
[   66.085906][   T55]  ? __pfx_kthread+0x10/0x10
[   66.085926][   T55]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.085941][   T55]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.085956][   T55]  ? __pfx_kthread+0x10/0x10
[   66.085974][   T55]  ret_from_fork+0x3fc/0x770
[   66.085991][   T55]  ? __pfx_ret_from_fork+0x10/0x10
[   66.086010][   T55]  ? __switch_to_asm+0x39/0x70
[   66.086026][   T55]  ? __switch_to_asm+0x33/0x70
[   66.086042][   T55]  ? __pfx_kthread+0x10/0x10
[   66.086061][   T55]  ret_from_fork_asm+0x1a/0x30
[   66.086092][   T55]  </TASK>
[   66.212331][   T55] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[   66.218700][   T55] Bluetooth: hci1: failed to register connection device
[   66.528046][ T5995] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.48'.
[   66.608298][ T6000] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[   66.612418][ T6000] netlink: 17 bytes leftover after parsing attributes in process `syz.2.50'.
[   67.505897][ T6043] netlink: 'syz.1.71': attribute type 29 has an invalid length.
[   67.509690][ T6043] netlink: 'syz.1.71': attribute type 29 has an invalid length.
[   67.546366][ T5219] Bluetooth: hci1: command tx timeout
[   67.548318][ T5219] Bluetooth: hci0: command tx timeout
[   67.632931][ T5219] Bluetooth: hci2: command tx timeout
[   67.672779][ T6049] netlink: 168 bytes leftover after parsing attributes in process `syz.1.73'.
[   68.120753][ T6058] team0: Port device geneve1 added
[   68.892132][ T6064] bond0: (slave bond_slave_0): Releasing backup interface
[   69.236198][ T6085] veth0_macvtap: left promiscuous mode
[   69.626184][ T5219] Bluetooth: hci0: command tx timeout
[   69.628525][ T5219] Bluetooth: hci1: command tx timeout
[   69.706064][   T55] Bluetooth: hci2: command tx timeout
[   69.738832][ T6096] : renamed from vlan0 (while UP)
[   70.218037][ T6107] delete_channel: no stack
[   70.565845][ T6127] validate_nla: 6 callbacks suppressed
[   70.565856][ T6127] netlink: 'syz.2.104': attribute type 3 has an invalid length.
[   70.636178][ T6132] netlink: 'syz.1.106': attribute type 3 has an invalid length.
[   70.643799][ T6132] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   71.210771][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.213814][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.353169][ T6156] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.116'.
[   71.916057][ T6174] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.124'.
[   72.366333][ T6187] sit0: entered allmulticast mode
[   72.474193][ T6182] sit0: entered promiscuous mode
[   73.612319][ T6220] Zero length message leads to an empty skb
[   73.615010][ T6220] netlink: 'syz.1.139': attribute type 10 has an invalid length.
[   73.619628][ T6220] bridge0: port 3(team0) entered blocking state
[   73.623388][ T6220] bridge0: port 3(team0) entered disabled state
[   73.627747][ T6220] team0: entered allmulticast mode
[   73.629496][ T6220] team_slave_0: entered allmulticast mode
[   73.631646][ T6220] team_slave_1: entered allmulticast mode
[   73.634953][ T6220] team0: entered promiscuous mode
[   73.638162][ T6220] team_slave_0: entered promiscuous mode
[   73.640185][ T6220] team_slave_1: entered promiscuous mode
[   73.653298][ T6220] bridge0: port 3(team0) entered blocking state
[   73.656222][ T6220] bridge0: port 3(team0) entered forwarding state
[   73.709626][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.758703][ T6226] netlink: 'syz.2.142': attribute type 12 has an invalid length.
[   73.761934][ T6226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.142'.
[   73.805871][ T6224] netlink: 180 bytes leftover after parsing attributes in process `syz.1.140'.
[   73.813388][ T6224] netlink: 164 bytes leftover after parsing attributes in process `syz.1.140'.
[   73.838962][ T6224] netlink: 164 bytes leftover after parsing attributes in process `syz.1.140'.
[   74.395303][ T6240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.148'.
[   75.403255][ T6265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.160'.
[   75.409921][ T6265] openvswitch: netlink: Message has 4 unknown bytes.
[   75.575915][ T6277] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.166'.
[   75.580037][ T6277] bridge: RTM_NEWNEIGH with invalid state 0x1
[   75.776752][ T6283] netlink: 156 bytes leftover after parsing attributes in process `syz.2.169'.
[   76.669221][ T6309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.180'.
[   77.199340][ T6333] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.190'.
[   78.352322][ T6355] netlink: 'syz.1.199': attribute type 10 has an invalid length.
[   78.361115][ T6355] team0: Device hsr_slave_0 failed to register rx_handler
[   79.409213][ T6377] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   79.735545][ T6395] netlink: 'syz.2.213': attribute type 21 has an invalid length.
[   79.911655][ T6399] nbd: must specify an index to disconnect
[   80.218143][ T6410] netlink: 168 bytes leftover after parsing attributes in process `syz.2.220'.
[   80.259606][ T6412] netlink: 'syz.1.222': attribute type 10 has an invalid length.
[   80.279688][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.296802][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.308070][ T6412] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   80.391526][ T6412] syz.1.222 (6412) used greatest stack depth: 19072 bytes left
[   81.086628][ T6436] cgroup: fork rejected by pids controller in /syz1
[   81.332832][ T6450] syz.0.238 uses obsolete (PF_INET,SOCK_PACKET)
[   81.552030][   T55] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[   81.915987][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.922280][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.926063][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.930921][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.933867][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.071537][ T6476] chnl_net:caif_netlink_parms(): no params data found
[   82.153697][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.218348][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.221056][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.223474][ T6476] bridge_slave_0: entered allmulticast mode
[   82.230014][ T6476] bridge_slave_0: entered promiscuous mode
[   82.263088][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.269358][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.271773][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.274127][ T6476] bridge_slave_1: entered allmulticast mode
[   82.279358][ T6476] bridge_slave_1: entered promiscuous mode
[   82.300098][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.304602][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.354377][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.368010][ T6476] team0: Port device team_slave_0 added
[   82.378999][ T6476] team0: Port device team_slave_1 added
[   82.401639][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.416655][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.428378][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.443574][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.461882][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.464147][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.473213][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.514372][ T6476] hsr_slave_0: entered promiscuous mode
[   82.517481][ T6476] hsr_slave_1: entered promiscuous mode
[   82.519595][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.522008][ T6476] Cannot create hsr debugfs directory
[   83.576853][   T12] team0: left allmulticast mode
[   83.579600][   T12] team_slave_0: left allmulticast mode
[   83.581511][   T12] team_slave_1: left allmulticast mode
[   83.583458][   T12] team0: left promiscuous mode
[   83.585071][   T12] team_slave_0: left promiscuous mode
[   83.592016][   T12] team_slave_1: left promiscuous mode
[   83.594874][   T12] bridge0: port 3(team0) entered disabled state
[   83.626903][   T12] bridge_slave_1: left allmulticast mode
[   83.629040][   T12] bridge_slave_1: left promiscuous mode
[   83.657083][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.676999][   T12] bridge_slave_0: left allmulticast mode
[   83.678989][   T12] bridge_slave_0: left promiscuous mode
[   83.681926][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.955890][ T5219] Bluetooth: hci0: command tx timeout
[   84.149653][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.156762][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.162943][   T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[   84.167460][   T12] bond0 (unregistering): Released all slaves
[   85.372698][   T12] hsr_slave_0: left promiscuous mode
[   85.376854][   T12] hsr_slave_1: left promiscuous mode
[   85.379844][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.382992][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.404952][   T12] veth1_macvtap: left promiscuous mode
[   85.408572][   T12] veth0_macvtap: left promiscuous mode
[   85.411139][   T12] veth1_vlan: left promiscuous mode
[   85.413617][   T12] veth0_vlan: left promiscuous mode
[   85.851592][   T12] team0 (unregistering): Port device team_slave_1 removed
[   85.893120][   T12] team0 (unregistering): Port device team_slave_0 removed
[   86.026495][ T5219] Bluetooth: hci0: command tx timeout
[   86.339576][ T5219] Bluetooth: hci2: unknown advertising packet type: 0x20
[   86.354311][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.280'.
[   86.428803][   T24] cfg80211: failed to load regulatory.db
[   86.596751][ T6567] netlink: 'syz.0.281': attribute type 4 has an invalid length.
[   86.599931][ T6567] netlink: 152 bytes leftover after parsing attributes in process `syz.0.281'.
[   86.623225][ T6567] : renamed from bond0 (while UP)
[   88.105451][ T5219] Bluetooth: hci0: command tx timeout
[   88.123884][ T6476] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.154013][ T6476] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.172472][ T6476] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.188044][ T6476] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.454303][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.480002][ T6476] 8021q: adding VLAN 0 to HW filter on device team0
[   88.489400][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.492479][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.510818][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.513893][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.619527][ T6476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.623720][ T6476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.752579][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.814442][ T6476] veth0_vlan: entered promiscuous mode
[   88.824358][ T6476] veth1_vlan: entered promiscuous mode
[   89.029283][ T6476] veth0_macvtap: entered promiscuous mode
[   89.033749][ T6476] veth1_macvtap: entered promiscuous mode
[   89.042805][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.050266][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.062986][ T6476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.066979][ T6476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.069946][ T6476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.073625][ T6476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.145762][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.148384][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.180080][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.182657][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.266208][ T6633] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.345734][ T6639] netlink: 'syz.1.298': attribute type 10 has an invalid length.
[   89.348554][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'.
[   89.451359][ T6644] ref_ctr_offset mismatch. inode: 0x239 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[   89.678416][ T6639] vcan0: entered promiscuous mode
[   89.680446][ T6639] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   89.688350][ T6644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.299'.
[   89.694103][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.299'.
[   89.763847][ T6648] openvswitch: netlink: Flow key attr not present in new flow.
[   90.185953][ T5219] Bluetooth: hci0: command tx timeout
[   90.660002][ T6661] netlink: 'syz.0.306': attribute type 10 has an invalid length.
[   90.662644][ T6661] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.306'.
[   90.808618][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.311'.
[   90.814218][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.311'.
[   90.819093][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.311'.
[   90.942317][ T6685] netlink: 'syz.2.317': attribute type 13 has an invalid length.
[   90.944818][ T6685] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.317'.
[   91.053492][ T6694] netlink: 'syz.0.321': attribute type 5 has an invalid length.
[   91.080455][ T6691] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   91.192095][ T6704] tc_dump_action: action bad kind
[   91.232226][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   92.243364][ T6747] netlink: 'syz.0.344': attribute type 10 has an invalid length.
[   92.247620][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.250896][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.258347][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.260757][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.263614][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.265998][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.270481][ T6747] : (slave bridge0): Enslaving as an active interface with an up link
[   92.354227][ T6753] __nla_validate_parse: 3 callbacks suppressed
[   92.354241][ T6753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.347'.
[   92.446533][ T6765] delete_channel: no stack
[   92.448488][ T6765] delete_channel: no stack
[   92.485698][ T6757] netlink: 'syz.0.349': attribute type 39 has an invalid length.
[   92.518104][ T6768] netlink: 'syz.2.354': attribute type 21 has an invalid length.
[   92.552784][ T6771] netlink: 'syz.1.355': attribute type 21 has an invalid length.
[   92.558684][ T6771] IPv6: NLM_F_CREATE should be specified when creating new route
[   92.561841][ T6771] IPv6: Can't replace route, no match found
[   92.572705][ T6768] netlink: 156 bytes leftover after parsing attributes in process `syz.2.354'.
[   93.317405][ T6802] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.607564][ T6820] netlink: 'syz.0.376': attribute type 29 has an invalid length.
[   93.611366][ T6820] netlink: 'syz.0.376': attribute type 29 has an invalid length.
[   94.322807][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'.
[   94.800962][ T6864] netlink: 'syz.2.395': attribute type 39 has an invalid length.
[   94.821522][ T6864] syz.2.395 (6864) used greatest stack depth: 18480 bytes left
[   96.604689][ T6915] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   96.631184][ T6919] netlink: 10 bytes leftover after parsing attributes in process `syz.0.419'.
[   96.697255][ T6916] netlink: 'syz.2.418': attribute type 10 has an invalid length.
[   96.712858][ T6916] bridge0: port 3(macsec0) entered blocking state
[   96.722289][ T6916] bridge0: port 3(macsec0) entered disabled state
[   96.729322][ T6916] macsec0: entered allmulticast mode
[   96.731587][ T6916] veth1_macvtap: entered allmulticast mode
[   96.766418][ T6916] macsec0: entered promiscuous mode
[   96.779604][ T6916] bridge0: port 3(macsec0) entered blocking state
[   96.782798][ T6916] bridge0: port 3(macsec0) entered forwarding state
[   98.548511][ T6942] netlink: 'syz.1.426': attribute type 22 has an invalid length.
[   98.551343][ T6942] netlink: 148 bytes leftover after parsing attributes in process `syz.1.426'.
[   98.755649][ T6959] syzkaller0: entered promiscuous mode
[   98.757746][ T6959] syzkaller0: entered allmulticast mode
[   99.955927][ T6587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.058141][ T6587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.114003][ T6587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.257000][ T6587] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.447007][ T6587] bridge_slave_1: left allmulticast mode
[  100.449614][ T6587] bridge_slave_1: left promiscuous mode
[  100.452103][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.499173][ T6587] bridge_slave_0: left allmulticast mode
[  100.501671][ T6587] bridge_slave_0: left promiscuous mode
[  100.504335][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.518128][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.522224][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.526269][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.530201][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.536072][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.632533][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  100.639396][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  100.647006][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  100.650851][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  100.654675][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  100.844834][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.850937][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.857005][ T6587] bond0 (unregistering): Released all slaves
[  101.095873][ T6996] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.452'.
[  101.185938][ T6587] hsr_slave_0: left promiscuous mode
[  101.189028][ T6587] hsr_slave_1: left promiscuous mode
[  101.192089][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.195968][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.208277][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.211535][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.233906][ T6587] veth1_macvtap: left promiscuous mode
[  101.239367][ T6587] veth0_macvtap: left promiscuous mode
[  101.242119][ T6587] veth1_vlan: left promiscuous mode
[  101.244813][ T6587] veth0_vlan: left promiscuous mode
[  102.025203][ T6587] team0 (unregistering): Port device team_slave_1 removed
[  102.060891][ T6587] team0 (unregistering): Port device team_slave_0 removed
[  102.388948][ T6984] chnl_net:caif_netlink_parms(): no params data found
[  102.542022][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.547159][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.550008][ T6984] bridge_slave_0: entered allmulticast mode
[  102.574832][ T6984] bridge_slave_0: entered promiscuous mode
[  102.580116][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.583152][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.590489][ T6984] bridge_slave_1: entered allmulticast mode
[  102.594257][ T6984] bridge_slave_1: entered promiscuous mode
[  102.597203][ T5219] Bluetooth: hci0: command tx timeout
[  102.632088][ T6989] chnl_net:caif_netlink_parms(): no params data found
[  102.670252][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.701889][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.755840][ T5219] Bluetooth: hci1: command tx timeout
[  103.539151][ T6984] team0: Port device team_slave_0 added
[  103.553142][ T6984] team0: Port device team_slave_1 added
[  103.638568][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.655529][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.658818][ T6989] bridge_slave_0: entered allmulticast mode
[  103.662666][ T6989] bridge_slave_0: entered promiscuous mode
[  103.669645][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.673657][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.677997][ T6989] bridge_slave_1: entered allmulticast mode
[  103.687036][ T6989] bridge_slave_1: entered promiscuous mode
[  103.699153][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.702152][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.718222][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.751527][ T6587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.857780][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.860773][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.872391][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.881243][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.901611][ T6587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.939327][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.034324][ T6984] hsr_slave_0: entered promiscuous mode
[  104.038558][ T6984] hsr_slave_1: entered promiscuous mode
[  104.069519][ T6587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.102454][ T6989] team0: Port device team_slave_0 added
[  104.107573][ T6989] team0: Port device team_slave_1 added
[  104.119840][ T6587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.205693][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.208979][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.238726][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.256646][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.259562][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.271500][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.282092][ T7052] netlink: 'syz.0.473': attribute type 29 has an invalid length.
[  104.387802][ T6989] hsr_slave_0: entered promiscuous mode
[  104.391421][ T6989] hsr_slave_1: entered promiscuous mode
[  104.394323][ T6989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.399862][ T6989] Cannot create hsr debugfs directory
[  104.458083][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.475'.
[  104.563727][ T6587] macsec0: left allmulticast mode
[  104.568121][ T6587] veth1_macvtap: left allmulticast mode
[  104.570512][ T6587] macsec0: left promiscuous mode
[  104.572883][ T6587] bridge0: port 3(macsec0) entered disabled state
[  104.582660][ T6587] bridge_slave_1: left allmulticast mode
[  104.584849][ T6587] bridge_slave_1: left promiscuous mode
[  104.592232][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.601522][ T6587] bridge_slave_0: left allmulticast mode
[  104.604035][ T6587] bridge_slave_0: left promiscuous mode
[  104.609189][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.669221][ T5219] Bluetooth: hci0: command tx timeout
[  104.761383][ T7064] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  104.807035][ T6587] team0: Port device geneve1 removed
[  104.825390][ T5219] Bluetooth: hci1: command tx timeout
[  104.904586][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.910831][ T6587] bond0 (unregistering): Released all slaves
[  105.101313][ T6984] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.108300][ T6984] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.126960][ T6984] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.160432][ T6984] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.597715][ T6587] hsr_slave_0: left promiscuous mode
[  105.603197][ T6587] hsr_slave_1: left promiscuous mode
[  105.607637][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.610335][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.613680][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.616493][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.630134][ T6587] veth1_macvtap: left promiscuous mode
[  105.632820][ T6587] veth1_vlan: left promiscuous mode
[  105.635697][ T6587] veth0_vlan: left promiscuous mode
[  105.961374][ T6587] team0 (unregistering): Port device team_slave_1 removed
[  105.993913][ T6587] team0 (unregistering): Port device team_slave_0 removed
[  106.341922][ T6989] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.366442][ T6989] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.374756][ T6989] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.384662][ T6989] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.420647][ T6984] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.461776][ T6984] 8021q: adding VLAN 0 to HW filter on device team0
[  106.493675][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.496859][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.513677][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.516777][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.564639][ T6984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.570612][ T6984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.613860][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.633566][ T6989] 8021q: adding VLAN 0 to HW filter on device team0
[  106.643278][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.646576][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.669695][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.672801][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.738181][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.745793][ T5219] Bluetooth: hci0: command tx timeout
[  106.838117][ T6984] veth0_vlan: entered promiscuous mode
[  106.844112][ T6984] veth1_vlan: entered promiscuous mode
[  106.870862][ T6984] veth0_macvtap: entered promiscuous mode
[  106.876954][ T6984] veth1_macvtap: entered promiscuous mode
[  106.887393][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.905889][ T5219] Bluetooth: hci1: command tx timeout
[  106.906899][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.919901][ T6984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.923695][ T6984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.934294][ T6984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.941037][ T6984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.999909][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.097335][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.100129][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.129294][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.134705][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.340100][ T6989] veth0_vlan: entered promiscuous mode
[  107.369390][ T6989] veth1_vlan: entered promiscuous mode
[  107.412668][ T6989] veth0_macvtap: entered promiscuous mode
[  107.417804][ T6989] veth1_macvtap: entered promiscuous mode
[  107.432744][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.437301][ T5219] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[  107.440385][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.448820][ T6989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.451719][ T6989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.454647][ T6989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.458762][ T6989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.519718][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.523940][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.538406][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.541901][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.770555][ T7130] syzkaller0: entered promiscuous mode
[  107.772450][ T7130] syzkaller0: entered allmulticast mode
[  108.826579][ T5219] Bluetooth: hci0: command tx timeout
[  108.844971][ T7149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.503'.
[  108.849179][ T7151] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.504'.
[  108.853422][ T7152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.503'.
[  108.864352][ T7153] netlink: 56 bytes leftover after parsing attributes in process `syz.4.503'.
[  108.968751][ T7157] @: renamed from bond_slave_0 (while UP)
[  108.985342][ T5219] Bluetooth: hci1: command tx timeout
[  109.086471][ T7163] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.509'.
[  109.255747][ T7178] netlink: 'syz.0.513': attribute type 10 has an invalid length.
[  109.263088][ T7178] team0: Device ipvlan1 failed to register rx_handler
[  109.277975][ T7176] Q6\bY4: renamed from lo (while UP)
[  109.300705][ T7179] netlink: 'syz.4.516': attribute type 25 has an invalid length.
[  109.325472][ T7179] netlink: 'syz.4.516': attribute type 28 has an invalid length.
[  109.970551][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'.
[  110.430614][ T7211] netlink: 'syz.0.529': attribute type 21 has an invalid length.
[  110.434104][ T7211] netlink: 168 bytes leftover after parsing attributes in process `syz.0.529'.
[  114.764063][ T7253] netlink: 'syz.4.544': attribute type 4 has an invalid length.
[  114.768108][ T7253] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.544'.
[  115.154526][ T7264] netlink: 'syz.0.548': attribute type 37 has an invalid length.
[  116.192323][ T7277] netlink: 'syz.3.555': attribute type 29 has an invalid length.
[  116.343685][ T5219] Bluetooth: hci0: ISO packet for unknown connection handle 2815
[  117.089989][ T7297] netlink: 'syz.4.563': attribute type 1 has an invalid length.
[  117.093487][ T7297] netlink: 17 bytes leftover after parsing attributes in process `syz.4.563'.
[  119.017820][ T7338] sock: sock_timestamping_bind_phc: sock not bind to device
[  119.403640][ T7366] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.595'.
[  119.471660][ T7368] netlink: 156 bytes leftover after parsing attributes in process `syz.3.596'.
[  119.532224][ T7368] C: renamed from team_slave_0 (while UP)
[  120.280681][ T7368] netlink: 152 bytes leftover after parsing attributes in process `syz.3.596'.
[  120.611001][ T7380] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  120.866685][ T7392] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.603'.
[  120.876808][ T7392] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  120.879548][ T7392] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.714997][ T7403] @: renamed from bond_slave_0 (while UP)
[  121.857961][ T7411] netlink: 'syz.3.612': attribute type 1 has an invalid length.
[  124.062120][ T7464] lo: entered allmulticast mode
[  124.072942][ T7464] lo: entered promiscuous mode
[  124.074792][ T7464] lo: left allmulticast mode
[  124.417163][ T7481] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.640'.
[  124.635143][ T7484] netlink: 'syz.4.643': attribute type 27 has an invalid length.
[  124.638773][ T7484] netlink: 152 bytes leftover after parsing attributes in process `syz.4.643'.
[  124.643874][ T7484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  124.916153][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.920635][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.934081][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.937218][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.636635][ T7511] netlink: 'syz.4.655': attribute type 11 has an invalid length.
[  125.641006][ T7511] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.655'.
[  125.884406][ T7510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.921100][ T7515] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.656'.
[  126.060042][ T7524] netlink: 'syz.4.660': attribute type 13 has an invalid length.
[  126.062614][ T7524] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.660'.
[  127.039883][ T7569] netlink: 'syz.0.679': attribute type 2 has an invalid length.
[  127.043146][ T7569] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.679'.
[  127.052989][ T7569] nbd: must specify a device to reconfigure
[  127.156854][ T7578] netlink: 'syz.4.685': attribute type 11 has an invalid length.
[  127.159590][ T7578] netlink: 168 bytes leftover after parsing attributes in process `syz.4.685'.
[  127.160410][ T7579] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.684'.
[  127.259161][ T7587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.689'.
[  127.262883][ T7587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.689'.
[  127.350358][ T5219] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  127.353727][ T5219] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  128.770648][ T7639] netlink: 'syz.3.711': attribute type 2 has an invalid length.
[  129.939708][ T5219] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  130.111433][ T5279] udevd[5279]: worker [5831] terminated by signal 33 (Unknown signal 33)
[  130.114338][ T5279] udevd[5279]: worker [5831] failed while handling '/devices/virtual/block/loop4'
[  130.205044][ T5279] udevd[5279]: worker [5834] terminated by signal 33 (Unknown signal 33)
[  130.208107][ T5279] udevd[5279]: worker [5834] failed while handling '/devices/virtual/block/loop3'
[  131.521087][ T7740] Driver unsupported XDP return value 0 on prog  (id 306) dev N/A, expect packet loss!
[  131.887263][ T7764] __nla_validate_parse: 4 callbacks suppressed
[  131.887355][ T7764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.764'.
[  132.019230][ T7770] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.766'.
[  132.649313][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.652780][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.765406][ T7782] netlink: 'syz.4.771': attribute type 39 has an invalid length.
[  132.806896][ T7789] netlink: 'syz.3.774': attribute type 6 has an invalid length.
[  133.686071][ T5219] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  133.686375][ T5219] Bluetooth: hci0: connection err: -111
[  134.293200][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.788'.
[  134.355144][ T7823] TCP: TCP_TX_DELAY enabled
[  134.388139][ T7826] syzkaller0: entered promiscuous mode
[  134.389986][ T7826] syzkaller0: entered allmulticast mode
[  136.829172][ T7877] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.811'.
[  137.059072][ T7888] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.816'.
[  137.123373][ T7896] netlink: 'syz.4.820': attribute type 10 has an invalid length.
[  137.127567][ T7896] lo: entered promiscuous mode
[  137.132957][ T7896] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  137.160200][ T7899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.819'.
[  137.175936][ T7894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.819'.
[  137.188583][ T7899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.819'.
[  137.193069][ T7902] netlink: 'syz.3.823': attribute type 10 has an invalid length.
[  137.210476][ T7902] team0: Port device dummy0 added
[  137.258470][ T7905] syzkaller0: entered promiscuous mode
[  137.265913][ T7905] syzkaller0: entered allmulticast mode
[  137.592836][ T7916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.828'.
[  137.623350][ T7918] netlink: 10 bytes leftover after parsing attributes in process `syz.4.829'.
[  137.737223][ T7924] netlink: 'syz.4.832': attribute type 10 has an invalid length.
[  137.744251][ T7924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.747875][ T7924] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  137.759741][ T7924] bond0: entered promiscuous mode
[  137.761538][ T7924] bond_slave_0: entered promiscuous mode
[  137.763512][ T7924] bond_slave_1: entered promiscuous mode
[  137.765630][ T7924] batadv0: entered promiscuous mode
[  137.778594][ T7924] netlink: 'syz.4.832': attribute type 10 has an invalid length.
[  137.787073][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.832'.
[  137.790900][ T7924] batadv0: entered allmulticast mode
[  137.799371][ T7924] bond0: (slave batadv0): Releasing backup interface
[  137.809790][ T7924] bridge0: port 3(batadv0) entered blocking state
[  137.812951][ T7924] bridge0: port 3(batadv0) entered disabled state
[  137.859045][ T7935] netlink: 'syz.3.837': attribute type 39 has an invalid length.
[  137.940960][ T7946] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.841'.
[  138.011966][ T7952] netlink: 'syz.0.845': attribute type 10 has an invalid length.
[  138.203093][ T5852] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  138.207396][ T5852] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  138.237482][ T7974] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.854'.
[  138.458848][ T7983] netlink: 'syz.0.860': attribute type 10 has an invalid length.
[  138.461785][ T7983] netlink: 168 bytes leftover after parsing attributes in process `syz.0.860'.
[  140.039565][ T8036] netlink: 'syz.3.879': attribute type 11 has an invalid length.
[  140.106447][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.772098][ T8101] team0: default FDB implementation only supports local addresses
[  141.845612][ T8107] netlink: 'syz.3.912': attribute type 10 has an invalid length.
[  142.091191][ T8125] netlink: 'syz.0.921': attribute type 2 has an invalid length.
[  142.094699][ T8125] __nla_validate_parse: 3 callbacks suppressed
[  142.094707][ T8125] netlink: 132 bytes leftover after parsing attributes in process `syz.0.921'.
[  143.517455][ T8182] netlink: 'syz.4.948': attribute type 29 has an invalid length.
[  143.526986][ T8184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.949'.
[  143.896528][ T8205] C: renamed from team_slave_0 (while UP)
[  143.900854][ T8205] netlink: 'syz.0.957': attribute type 3 has an invalid length.
[  143.906131][ T8205] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[  143.908716][ T8205] netlink: 116 bytes leftover after parsing attributes in process `syz.0.957'.
[  143.912512][ T8205] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.913706][ T8208] netlink: 'syz.3.959': attribute type 39 has an invalid length.
[  144.129385][ T8214] bridge0: port 3(syz_tun) entered blocking state
[  144.131996][ T8214] bridge0: port 3(syz_tun) entered disabled state
[  144.135890][ T8214] syz_tun: entered allmulticast mode
[  144.139040][ T8214] syz_tun: entered promiscuous mode
[  144.141459][ T8214] bridge0: port 3(syz_tun) entered blocking state
[  144.144353][ T8214] bridge0: port 3(syz_tun) entered forwarding state
[  144.226786][ T5219] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  144.483614][ T8234] netlink: 'syz.4.975': attribute type 12 has an invalid length.
[  144.489049][ T8234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.975'.
[  144.697123][ T8240] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.972'.
[  144.804077][ T8244] syzkaller0: entered promiscuous mode
[  144.806668][ T8244] syzkaller0: entered allmulticast mode
[  145.770244][ T8274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.990'.
[  145.773924][ T8274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.990'.
[  145.787125][ T8274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.990'.
[  146.057968][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'.
[  146.092332][ T8295] netlink: 'syz.3.996': attribute type 10 has an invalid length.
[  146.141299][ T8295] team0: Device ipvlan1 failed to register rx_handler
[  146.305010][ T8305] netlink: 'syz.4.1003': attribute type 21 has an invalid length.
[  146.312111][ T8305] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1003'.
[  147.278204][ T8316] netlink: 'syz.0.1006': attribute type 2 has an invalid length.
[  147.280968][ T8316] netlink: 'syz.0.1006': attribute type 8 has an invalid length.
[  147.283923][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1006'.
[  147.324396][ T8319] Q6\bY4: renamed from lo
[  150.412121][ T8334] netlink: 'syz.3.1014': attribute type 4 has an invalid length.
[  150.419013][ T8334] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1014'.
[  150.660918][ T8346] netlink: 'syz.4.1018': attribute type 29 has an invalid length.
[  150.805070][ T8359] sock: sock_timestamping_bind_phc: sock not bind to device
[  151.002495][ T8377] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1033'.
[  151.046691][ T8380] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1040'.
[  151.050629][ T8380] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  151.075617][ T8380] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  153.964632][ T8424] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1048'.
[  155.132069][ T8451] netlink: 'syz.3.1060': attribute type 11 has an invalid length.
[  155.134151][ T8449] netlink: 201660 bytes leftover after parsing attributes in process `syz.4.1061'.
[  155.135005][ T8451] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1060'.
[  155.234570][ T8460] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1064'.
[  155.243207][ T8460] hsr0: entered promiscuous mode
[  155.245174][ T8460] hsr0: entered allmulticast mode
[  155.249814][ T8460] hsr_slave_0: entered allmulticast mode
[  155.257054][ T8460] hsr_slave_1: entered allmulticast mode
[  157.364349][ T8524] netlink: 'syz.3.1095': attribute type 3 has an invalid length.
[  157.367029][ T8524] netlink: 'syz.3.1095': attribute type 1 has an invalid length.
[  157.369783][ T8524] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1095'.
[  157.374169][ T8524] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  158.303729][ T8565] syzkaller0: entered promiscuous mode
[  158.315926][ T8565] syzkaller0: entered allmulticast mode
[  158.321635][ T8568] netlink: 'syz.0.1114': attribute type 29 has an invalid length.
[  159.138307][ T8568] netlink: 'syz.0.1114': attribute type 29 has an invalid length.
[  160.342409][ T8590] C: renamed from team_slave_0 (while UP)
[  160.346364][ T8590] netlink: 'syz.4.1120': attribute type 3 has an invalid length.
[  160.348888][ T8590] netlink: 'syz.4.1120': attribute type 1 has an invalid length.
[  160.351645][ T8590] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1120'.
[  160.354862][ T8590] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.382314][ T8595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1122'.
[  160.517684][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1124'.
[  160.638948][ T8608] bridge0: port 4(syz_tun) entered blocking state
[  160.641633][ T8608] bridge0: port 4(syz_tun) entered disabled state
[  160.644496][ T8608] syz_tun: entered allmulticast mode
[  160.649121][ T8608] syz_tun: entered promiscuous mode
[  160.651398][ T8608] bridge0: port 4(syz_tun) entered blocking state
[  160.653790][ T8608] bridge0: port 4(syz_tun) entered forwarding state
[  161.430801][ T8620] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  163.316264][ T8657] netlink: 'syz.0.1150': attribute type 10 has an invalid length.
[  163.334561][ T8657] : entered promiscuous mode
[  163.337767][ T8657] @: entered promiscuous mode
[  163.339993][ T8657] bond_slave_1: entered promiscuous mode
[  163.341467][ T8664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1153'.
[  163.342416][ T8657] bridge0: entered promiscuous mode
[  163.377706][ T8657] netlink: 'syz.0.1150': attribute type 10 has an invalid length.
[  163.381063][ T8657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1150'.
[  163.722362][ T8676] netlink: 'syz.3.1164': attribute type 11 has an invalid length.
[  163.728458][ T8676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1164'.
[  163.826105][ T8675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.858057][ T8683] netlink: 'syz.0.1158': attribute type 11 has an invalid length.
[  163.863497][ T8683] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1158'.
[  163.868984][ T8685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1159'.
[  163.929686][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.961400][ T8690] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1165'.
[  164.568030][ T8699] netlink: 'syz.3.1167': attribute type 23 has an invalid length.
[  164.919416][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1169'.
[  165.558685][ T8721] netlink: 'syz.4.1172': attribute type 11 has an invalid length.
[  165.562025][ T8721] __nla_validate_parse: 4 callbacks suppressed
[  165.562036][ T8721] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.1172'.
[  165.590581][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1176'.
[  165.632912][ T8725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1183'.
[  165.658815][ T8726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.940696][ T8744] netlink: 'syz.3.1187': attribute type 11 has an invalid length.
[  165.944256][ T8744] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1187'.
[  166.029461][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.040356][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1190'.
[  166.193027][ T8754] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1192'.
[  166.930909][ T8772] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1199'.
[  167.117063][ T8785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1201'.
[  168.495389][ T8838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1227'.
[  168.499165][ T8837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1227'.
[  168.566915][ T8844] netlink: 'syz.3.1230': attribute type 10 has an invalid length.
[  168.586002][ T8844] team0: Port device dummy0 removed
[  168.588102][ T8844] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  168.747357][ T8858] netlink: 'syz.4.1237': attribute type 13 has an invalid length.
[  169.021077][ T8870] netlink: 'syz.3.1242': attribute type 2 has an invalid length.
[  169.025172][ T8870] netlink: 'syz.3.1242': attribute type 8 has an invalid length.
[  169.200796][ T8894] netlink: 'syz.3.1252': attribute type 25 has an invalid length.
[  169.203520][ T8894] netlink: 'syz.3.1252': attribute type 28 has an invalid length.
[  169.391964][ T8899] netlink: 'syz.3.1254': attribute type 6 has an invalid length.
[  170.089547][ T8938] syzkaller0: entered promiscuous mode
[  170.091934][ T8938] syzkaller0: entered allmulticast mode
[  170.513877][ T8951] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check.
[  170.982544][ T8969] __nla_validate_parse: 6 callbacks suppressed
[  170.982557][ T8969] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1287'.
[  171.481145][ T8996] netlink: 'syz.0.1298': attribute type 15 has an invalid length.
[  171.482312][ T8997] netlink: 'syz.3.1299': attribute type 21 has an invalid length.
[  171.483817][ T8996] netlink: 'syz.0.1298': attribute type 7 has an invalid length.
[  171.488694][ T8997] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1299'.
[  171.494692][ T8996] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1298'.
[  171.630519][ T9003] syzkaller0: entered promiscuous mode
[  171.632953][ T9003] syzkaller0: entered allmulticast mode
[  193.963572][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.966681][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  196.488469][ T9026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.493989][ T9026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.499023][ T9026] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.502713][ T9026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.507028][ T9026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.511036][ T9026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.514153][ T9026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.518523][ T9026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.523570][ T9026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.527228][ T9026] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.529742][ T9026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.532936][ T9026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.535582][ T9026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.538749][ T9026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.542930][ T9026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  198.585864][ T9028] Bluetooth: hci5: command tx timeout
[  198.588949][ T9028] Bluetooth: hci3: command tx timeout
[  198.591299][ T9028] Bluetooth: hci4: command tx timeout
[  200.665452][ T9027] Bluetooth: hci3: command tx timeout
[  200.667927][ T9027] Bluetooth: hci5: command tx timeout
[  200.675017][ T9028] Bluetooth: hci4: command tx timeout
[  202.745630][ T9026] Bluetooth: hci5: command tx timeout
[  202.748129][ T9027] Bluetooth: hci3: command tx timeout
[  202.751568][ T9028] Bluetooth: hci4: command tx timeout
[  204.825561][ T9028] Bluetooth: hci4: command tx timeout
[  204.827412][ T9028] Bluetooth: hci3: command tx timeout
[  204.829201][ T9028] Bluetooth: hci5: command tx timeout
[  247.343193][ T9026] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  247.347814][ T9026] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  247.350596][ T9026] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  247.353474][ T9026] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  247.360320][ T9026] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.514068][ T9028] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  247.517353][ T9028] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  247.520231][ T9028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  247.523211][ T9028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  247.527687][ T9028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  247.585781][ T9028] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  247.589095][ T9028] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  247.591860][ T9028] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  247.594967][ T9028] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  247.602115][ T9028] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  249.395578][ T9026] Bluetooth: hci7: command tx timeout
[  249.547657][ T9026] Bluetooth: hci6: command tx timeout
[  249.635660][ T9026] Bluetooth: hci8: command tx timeout
[  251.465415][ T9026] Bluetooth: hci7: command tx timeout
[  251.637015][ T9026] Bluetooth: hci6: command tx timeout
[  251.705459][ T9026] Bluetooth: hci8: command tx timeout
[  253.555644][ T9026] Bluetooth: hci7: command tx timeout
[  253.715559][ T9026] Bluetooth: hci6: command tx timeout
[  253.795616][ T9026] Bluetooth: hci8: command tx timeout
[  255.401349][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.403622][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.635431][ T9026] Bluetooth: hci7: command tx timeout
[  255.796308][ T9026] Bluetooth: hci6: command tx timeout
[  255.875618][ T9026] Bluetooth: hci8: command tx timeout
[  276.775274][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  276.777718][    C1] rcu: 	1-....: (10499 ticks this GP) idle=0d1c/1/0x4000000000000000 softirq=29581/29581 fqs=4758
[  276.782679][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  276.784783][    C1] rcu: 	 number:  1008337          0            0
[  276.787016][    C1] rcu: 	cputime:    24130      28347           96   ==> 52480(ms)
[  276.789472][    C1] rcu: 	(t=10500 jiffies g=23081 q=3826 ncpus=2)
[  276.791918][    C1] CPU: 1 UID: 0 PID: 9013 Comm: syz.4.1307 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  276.791928][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.791933][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  276.791951][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  276.791957][    C1] RSP: 0018:ffffc900001e0460 EFLAGS: 00000206
[  276.791964][    C1] RAX: eaf8559dfac09d00 RBX: 1ffff9200003c094 RCX: eaf8559dfac09d00
[  276.791969][    C1] RDX: 0000000000000002 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  276.791974][    C1] RBP: ffffc900001e0558 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  276.791979][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffffff8e144400
[  276.791983][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  276.791988][    C1] FS:  00007f7282ecb6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  276.791993][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.791997][    C1] CR2: 000000110c325912 CR3: 0000000121654000 CR4: 00000000000006f0
[  276.792022][    C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300
[  276.792028][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  276.792032][    C1] Call Trace:
[  276.792037][    C1]  <IRQ>
[  276.792042][    C1]  ? unwind_next_frame+0xa5/0x2390
[  276.792052][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  276.792063][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  276.792073][    C1]  ? lock_acquire+0x175/0x360
[  276.792081][    C1]  ? unwind_next_frame+0xa5/0x2390
[  276.792092][    C1]  __rcu_read_unlock+0x84/0xe0
[  276.792103][    C1]  ? unwind_next_frame+0xa5/0x2390
[  276.792109][    C1]  unwind_next_frame+0x19ae/0x2390
[  276.792119][    C1]  ? unwind_next_frame+0xa5/0x2390
[  276.792127][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.792136][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  276.792145][    C1]  arch_stack_walk+0x11c/0x150
[  276.792161][    C1]  stack_trace_save+0x9c/0xe0
[  276.792170][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  276.792184][    C1]  kasan_save_stack+0x3e/0x60
[  276.792195][    C1]  ? kasan_save_stack+0x3e/0x60
[  276.792203][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  276.792210][    C1]  ? call_rcu+0x157/0x9c0
[  276.792218][    C1]  ? exit_creds+0x146/0x1c0
[  276.792227][    C1]  ? __put_task_struct+0x105/0x460
[  276.792234][    C1]  ? delayed_put_task_struct+0x11f/0x2f0
[  276.792243][    C1]  ? rcu_core+0xca8/0x1710
[  276.792248][    C1]  ? handle_softirqs+0x286/0x870
[  276.792255][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  276.792261][    C1]  ? irq_exit_rcu+0x9/0x30
[  276.792267][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  276.792277][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.792283][    C1]  ? lock_acquire+0x175/0x360
[  276.792288][    C1]  ? fs_reclaim_acquire+0x72/0x100
[  276.792296][    C1]  ? kmem_cache_alloc_noprof+0x44/0x3c0
[  276.792302][    C1]  ? sk_prot_alloc+0x57/0x220
[  276.792310][    C1]  ? sk_alloc+0x3a/0x370
[  276.792315][    C1]  ? unix_create1+0xb0/0x7c0
[  276.792326][    C1]  ? unix_create+0x154/0x200
[  276.792334][    C1]  ? __sock_create+0x4b3/0x9f0
[  276.792343][    C1]  ? __sys_socketpair+0x1c5/0x560
[  276.792352][    C1]  ? __x64_sys_socketpair+0x9b/0xb0
[  276.792360][    C1]  ? do_syscall_64+0xfa/0x3b0
[  276.792368][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.792390][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  276.792398][    C1]  ? __pfx_put_cred_rcu+0x10/0x10
[  276.792406][    C1]  call_rcu+0x157/0x9c0
[  276.792414][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  276.792429][    C1]  ? __pfx_call_rcu+0x10/0x10
[  276.792436][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.792450][    C1]  exit_creds+0x146/0x1c0
[  276.792459][    C1]  ? rcu_core+0xc34/0x1710
[  276.792466][    C1]  __put_task_struct+0x105/0x460
[  276.792474][    C1]  ? rcu_core+0xc34/0x1710
[  276.792479][    C1]  ? delayed_put_task_struct+0xf3/0x2f0
[  276.792488][    C1]  delayed_put_task_struct+0x11f/0x2f0
[  276.792498][    C1]  ? __pfx_delayed_put_task_struct+0x10/0x10
[  276.792507][    C1]  rcu_core+0xca8/0x1710
[  276.792522][    C1]  ? __pfx_rcu_core+0x10/0x10
[  276.792534][    C1]  ? sched_balance_domains+0x121/0x9e0
[  276.792544][    C1]  ? sched_balance_domains+0x8be/0x9e0
[  276.792553][    C1]  ? sched_balance_domains+0x121/0x9e0
[  276.792563][    C1]  handle_softirqs+0x286/0x870
[  276.792573][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  276.792583][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  276.792595][    C1]  __irq_exit_rcu+0xca/0x1f0
[  276.792602][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  276.792614][    C1]  irq_exit_rcu+0x9/0x30
[  276.792620][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  276.792629][    C1]  </IRQ>
[  276.792631][    C1]  <TASK>
[  276.792634][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.792641][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  276.792647][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  276.792652][    C1] RSP: 0018:ffffc9000261fb80 EFLAGS: 00000206
[  276.792658][    C1] RAX: eaf8559dfac09d00 RBX: 0000000000000000 RCX: eaf8559dfac09d00
[  276.792662][    C1] RDX: 0000000000000000 RSI: ffffffff8db864db RDI: ffffffff8be29f80
[  276.792666][    C1] RBP: ffffffff82185094 R08: 0000000000000000 R09: ffffffff82185094
[  276.792670][    C1] R10: dffffc0000000000 R11: fffffbfff33ffcc5 R12: 0000000000000000
[  276.792674][    C1] R13: ffffffff8e246a60 R14: 0000000000000001 R15: 0000000000000246
[  276.792680][    C1]  ? kmem_cache_alloc_noprof+0x44/0x3c0
[  276.792692][    C1]  ? kmem_cache_alloc_noprof+0x44/0x3c0
[  276.792705][    C1]  ? irqentry_exit+0x74/0x90
[  276.792715][    C1]  fs_reclaim_acquire+0x72/0x100
[  276.792722][    C1]  ? kmem_cache_alloc_noprof+0x44/0x3c0
[  276.792728][    C1]  kmem_cache_alloc_noprof+0x44/0x3c0
[  276.792734][    C1]  ? sk_prot_alloc+0x57/0x220
[  276.792743][    C1]  sk_prot_alloc+0x57/0x220
[  276.792749][    C1]  ? sk_alloc+0x24/0x370
[  276.792757][    C1]  sk_alloc+0x3a/0x370
[  276.792766][    C1]  unix_create1+0xb0/0x7c0
[  276.792809][    C1]  ? unix_create+0x87/0x200
[  276.792820][    C1]  unix_create+0x154/0x200
[  276.792832][    C1]  __sock_create+0x4b3/0x9f0
[  276.792846][    C1]  __sys_socketpair+0x1c5/0x560
[  276.792859][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  276.792870][    C1]  do_syscall_64+0xfa/0x3b0
[  276.792879][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.792885][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.792894][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.792900][    C1] RIP: 0033:0x7f7281f8e9a9
[  276.792908][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.792913][    C1] RSP: 002b:00007f7282ecb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  276.792920][    C1] RAX: ffffffffffffffda RBX: 00007f72821b5fa0 RCX: 00007f7281f8e9a9
[  276.792925][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  276.792928][    C1] RBP: 00007f7282010d69 R08: 0000000000000000 R09: 0000000000000000
[  276.792932][    C1] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  276.792936][    C1] R13: 0000000000000000 R14: 00007f72821b5fa0 R15: 00007ffd3a7571f8
[  276.792948][    C1]  </TASK>
[  277.054484][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
11:24:24  Registers:
info registers vcpu 0

CPU#0
RAX=037582b377c85100 RBX=ffffffff81975f18 RCX=037582b377c85100 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1eaf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559c9e279e08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f8840986d00
XMM02=0300100000000015 ffffffff00000000 XMM03=080010e003301000 10d0030f800410c0
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=8003081000238004 2408000400000017 XMM07=0000000800000000 d201000006080623
XMM08=8003080fa0060500 1000108000000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df790
R8 =ffff888021930237 R9 =1ffff11004326046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58d2 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7282ecb6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c325912 CR3=0000000121654000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7282186478 00007f7282186450 XMM03=00007f7282186488 00007f7282186480
XMM04=00007f7282ced100 00007f7282186440 XMM05=00007f7282186458 00007f72821864a0
XMM06=00007f7282186498 00007f7282186490 XMM07=00007f7282186488 00007f7282186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7282011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
