last executing test programs:

17.831366099s ago: executing program 1 (id=1437):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.085635837s ago: executing program 0 (id=1440):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000000000000018000000000000008400000005"], 0x38}, 0x41)

17.085384906s ago: executing program 0 (id=1442):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

17.013631361s ago: executing program 1 (id=1444):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

17.013412631s ago: executing program 0 (id=1445):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100003", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

17.013298807s ago: executing program 0 (id=1447):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

17.012469175s ago: executing program 1 (id=1448):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)

16.955525281s ago: executing program 0 (id=1450):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair(0x6, 0x2, 0x101, &(0x7f0000000000))

16.885919985s ago: executing program 1 (id=1453):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000640))
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e000000040104001600400001", 0x37}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="2be6109cd86710ec2824562c27adce431824f4261ad629ad2ea8d58a6d432fd08495a08db73957ebb0fb73aee25f26c4fdd5bf4059ca37f4ae5cbd95b73da9706ec177c4740d57248c5691c577c09045ef", &(0x7f0000000280)=""/62, &(0x7f00000002c0)="fe071916fe181daeae5c71c96569e6afd2eb3c76", &(0x7f0000000400)="9e6a76dec4d196d3d5f0c4f150302a46061fa3a15ae41b973a2a3aa4c585b6545bdb629b577e5b13eb712dfeee36c0774686700c7867a6f25ef5dd7ff5e43f9bac92fd6900e44a7a71da22f6a947416b82c8d65efc2a3d788d95a724691345579ce306fb139fc8d66fc413c4b4dfe6e95721ea8310291027bf0c8d23dd4d93b9a1858b609007b192ba3309cfedaa10baa03ea4d20660decf02e80a799033a7760f5697daf3c7db3da10f389351748cb16772f3", 0x4, r0}, 0x38)

16.826029635s ago: executing program 0 (id=1456):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12)

16.4957457s ago: executing program 1 (id=1458):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), 0x0, 0x0, 0xf1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
close(0x3)

15.91519505s ago: executing program 2 (id=1459):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0xa, 0x3, 0x73)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20)

15.693272028s ago: executing program 2 (id=1460):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23)

15.692913436s ago: executing program 2 (id=1461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8004}, 0x104101, 0x7fffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)

15.545594061s ago: executing program 2 (id=1462):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x5f, 0x0, &(0x7f0000000000)="4aa7cfaf8e41020ab300000085", 0x0, 0xe08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

15.545410968s ago: executing program 2 (id=1463):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19d30884}, 0x94)

15.545126734s ago: executing program 1 (id=1464):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x1b)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000400), 0x4)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff)

15.493807166s ago: executing program 2 (id=1465):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

1.073003087s ago: executing program 32 (id=1456):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12)

26.607369ms ago: executing program 33 (id=1464):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x1b)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000400), 0x4)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff)

0s ago: executing program 34 (id=1465):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52282' (ED25519) to the list of known hosts.
syzkaller login: [   41.002869][ T5761] cgroup: Unknown subsys name 'net'
[   41.132412][ T5761] cgroup: Unknown subsys name 'cpuset'
[   41.136672][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.794273][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.964119][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.967244][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.970043][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.972709][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.975335][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.033976][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.039665][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.043002][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.048983][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.059647][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.062883][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.066203][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.069360][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.074950][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.078378][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.197936][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   47.311328][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.313646][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.316050][ T5833] bridge_slave_0: entered allmulticast mode
[   47.318800][ T5833] bridge_slave_0: entered promiscuous mode
[   47.325326][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.327585][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.329949][ T5833] bridge_slave_1: entered allmulticast mode
[   47.332837][ T5833] bridge_slave_1: entered promiscuous mode
[   47.386027][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.404462][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.436010][ T5833] team0: Port device team_slave_0 added
[   47.442060][ T5833] team0: Port device team_slave_1 added
[   47.444155][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   47.452232][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   47.501251][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.503419][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.511743][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.527250][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.529486][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.537298][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.586759][ T5833] hsr_slave_0: entered promiscuous mode
[   47.589190][ T5833] hsr_slave_1: entered promiscuous mode
[   47.604520][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.606802][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.609162][ T5839] bridge_slave_0: entered allmulticast mode
[   47.612670][ T5839] bridge_slave_0: entered promiscuous mode
[   47.615948][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.618195][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.621624][ T5839] bridge_slave_1: entered allmulticast mode
[   47.624312][ T5839] bridge_slave_1: entered promiscuous mode
[   47.658216][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.661242][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.664111][ T5842] bridge_slave_0: entered allmulticast mode
[   47.667367][ T5842] bridge_slave_0: entered promiscuous mode
[   47.671081][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.673906][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.676136][ T5842] bridge_slave_1: entered allmulticast mode
[   47.678947][ T5842] bridge_slave_1: entered promiscuous mode
[   47.722183][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.730682][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.735358][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.743216][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.792272][ T5842] team0: Port device team_slave_0 added
[   47.796109][ T5839] team0: Port device team_slave_0 added
[   47.805370][ T5842] team0: Port device team_slave_1 added
[   47.816633][ T5839] team0: Port device team_slave_1 added
[   47.845899][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.848189][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.856942][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.862255][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.864595][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.872596][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.896159][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.898419][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.907756][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.916323][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.918486][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.927574][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.964319][ T5842] hsr_slave_0: entered promiscuous mode
[   47.966662][ T5842] hsr_slave_1: entered promiscuous mode
[   47.968830][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.972051][ T5842] Cannot create hsr debugfs directory
[   48.004950][ T5839] hsr_slave_0: entered promiscuous mode
[   48.007678][ T5839] hsr_slave_1: entered promiscuous mode
[   48.010956][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.013787][ T5839] Cannot create hsr debugfs directory
[   48.062742][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.070886][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.092268][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.104997][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.230189][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.235324][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.245463][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.249974][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.310698][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.320812][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.325663][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.334185][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.356575][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.384182][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   48.398928][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.406749][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.409012][ T3642] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.424919][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.427084][ T3642] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.435380][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   48.446494][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.449165][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.466959][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.469858][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.546988][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.564589][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   48.581395][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.583576][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.612136][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.614725][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.656934][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.681686][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.693350][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.751305][ T5833] veth0_vlan: entered promiscuous mode
[   48.753778][ T5842] veth0_vlan: entered promiscuous mode
[   48.764448][ T5842] veth1_vlan: entered promiscuous mode
[   48.768401][ T5833] veth1_vlan: entered promiscuous mode
[   48.802375][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.812214][ T5842] veth0_macvtap: entered promiscuous mode
[   48.818991][ T5833] veth0_macvtap: entered promiscuous mode
[   48.827233][ T5842] veth1_macvtap: entered promiscuous mode
[   48.835778][ T5833] veth1_macvtap: entered promiscuous mode
[   48.854862][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.868496][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.875051][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.886921][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.892191][ T5839] veth0_vlan: entered promiscuous mode
[   48.894454][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.897450][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.903974][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.906662][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.916144][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.918830][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.921991][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.924650][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.931345][ T5839] veth1_vlan: entered promiscuous mode
[   48.973285][ T5839] veth0_macvtap: entered promiscuous mode
[   49.003473][ T5839] veth1_macvtap: entered promiscuous mode
[   49.003851][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.010227][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.041989][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.053545][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.056437][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.057895][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.070535][   T54] Bluetooth: hci0: command tx timeout
[   49.079175][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.083145][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.085972][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.088872][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.102102][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.104740][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.140185][   T54] Bluetooth: hci1: command tx timeout
[   49.142314][   T54] Bluetooth: hci2: command tx timeout
[   49.145712][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.150354][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.150365][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.208649][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.212937][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.259362][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.262650][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.277442][ T5903] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   49.434536][ T5908] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   49.436808][    C0] hrtimer: interrupt took 38422 ns
[   49.446672][ T5908] netlink: 'syz.1.2': attribute type 4 has an invalid length.
[   49.450041][ T5908] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2'.
[   50.417848][ T5920] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9'.
[   50.523711][ T5923] Zero length message leads to an empty skb
[   51.141604][ T5219] Bluetooth: hci0: command tx timeout
[   51.219929][ T5219] Bluetooth: hci2: command tx timeout
[   51.221746][ T5219] Bluetooth: hci1: command tx timeout
[   51.742029][ T5952] netlink: 'syz.1.23': attribute type 25 has an invalid length.
[   51.744518][ T5952] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[   51.747794][ T5952] bridge0: port 1(bridge_slave_0) entered learning state
[   51.855013][ T5956] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   51.857542][ T5956] netlink: 'syz.0.24': attribute type 4 has an invalid length.
[   51.875404][ T5956] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.24'.
[   51.956420][ T5965] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.29'.
[   52.173141][ T5977] netlink: 17 bytes leftover after parsing attributes in process `syz.0.34'.
[   52.177655][ T5977] netlink: zone id is out of range
[   52.192886][ T5977] netlink: zone id is out of range
[   52.194434][ T5977] netlink: zone id is out of range
[   52.200665][ T5977] netlink: zone id is out of range
[   52.202296][ T5977] netlink: zone id is out of range
[   52.207630][ T5977] netlink: zone id is out of range
[   52.209205][ T5977] netlink: zone id is out of range
[   52.212249][ T5977] netlink: zone id is out of range
[   52.214623][ T5977] netlink: zone id is out of range
[   52.216219][ T5977] netlink: zone id is out of range
[   53.219470][ T5219] Bluetooth: hci0: command tx timeout
[   53.299442][ T5219] Bluetooth: hci1: command tx timeout
[   53.301073][   T54] Bluetooth: hci2: command tx timeout
[   53.691518][ T6011] netlink: 'syz.2.51': attribute type 10 has an invalid length.
[   54.928343][ T6050] netlink: 'syz.1.69': attribute type 2 has an invalid length.
[   54.939472][ T6050] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.69'.
[   55.299509][   T54] Bluetooth: hci0: command tx timeout
[   55.379456][ T5219] Bluetooth: hci2: command tx timeout
[   55.381169][   T54] Bluetooth: hci1: command tx timeout
[   55.415073][ T6062] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   55.415236][ T6062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.74'.
[   56.504343][ T6084] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.84'.
[   58.496999][ T6122] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.99'.
[   58.916712][ T6152] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.112'.
[   59.041270][ T6163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.041393][ T6165] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.119'.
[   59.454450][ T6199] netlink: 'syz.2.135': attribute type 17 has an invalid length.
[   59.461301][ T6199] netlink: 'syz.2.135': attribute type 16 has an invalid length.
[   59.468354][ T6199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.135'.
[   59.674650][ T6211] syz.2.142 (6211) used greatest stack depth: 19880 bytes left
[   60.091902][ T6258] netlink: 'syz.1.165': attribute type 21 has an invalid length.
[   60.164290][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'.
[   60.167135][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'.
[   60.176209][ T6262] net_ratelimit: 75 callbacks suppressed
[   60.176232][ T6262] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   60.180100][ T6262] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   60.273166][ T6272] netlink: 'syz.1.172': attribute type 39 has an invalid length.
[   60.352234][ T6272] hsr_slave_0 (unregistering): left promiscuous mode
[   60.533112][ T6291] netlink: 'syz.1.180': attribute type 37 has an invalid length.
[   61.209853][ T6313] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[   61.237552][ T6313] 8021q: adding VLAN 0 to HW filter on device team0
[   61.245872][ T6313] bond0: (slave team0): Enslaving as an active interface with an up link
[   61.253935][ T6315] warning: `syz.0.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.128048][ T6355] netlink: 'syz.1.212': attribute type 2 has an invalid length.
[   62.132572][ T6355] netlink: 'syz.1.212': attribute type 5 has an invalid length.
[   62.138118][ T6355] netlink: 'syz.1.212': attribute type 6 has an invalid length.
[   62.143465][ T6355] netlink: 649 bytes leftover after parsing attributes in process `syz.1.212'.
[   62.151255][ T6355] netlink: 129956 bytes leftover after parsing attributes in process `syz.1.212'.
[   62.160090][ T6355] netlink: 'syz.1.212': attribute type 2 has an invalid length.
[   62.162605][ T6355] netlink: 'syz.1.212': attribute type 5 has an invalid length.
[   62.164903][ T6355] netlink: 'syz.1.212': attribute type 6 has an invalid length.
[   62.167255][ T6355] netlink: 649 bytes leftover after parsing attributes in process `syz.1.212'.
[   62.170733][ T6358] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.214'.
[   62.656682][ T6394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.229'.
[   63.524871][ T6407] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.236'.
[   63.790740][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.616574][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 255
[   64.619031][   T54] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   65.089069][ T6474] netlink: 809 bytes leftover after parsing attributes in process `syz.1.266'.
[   65.102549][ T6474] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.266'.
[   65.609612][ T6502] syz.1.280: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   65.616325][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.1.280 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   65.616339][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.616346][ T6502] Call Trace:
[   65.616352][ T6502]  <TASK>
[   65.616357][ T6502]  dump_stack_lvl+0x189/0x250
[   65.616374][ T6502]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   65.616391][ T6502]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.616403][ T6502]  ? __pfx__printk+0x10/0x10
[   65.616416][ T6502]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   65.616429][ T6502]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   65.616444][ T6502]  warn_alloc+0x214/0x310
[   65.616455][ T6502]  ? stack_depot_save_flags+0x429/0x900
[   65.616469][ T6502]  ? __pfx_warn_alloc+0x10/0x10
[   65.616480][ T6502]  ? kasan_save_track+0x4f/0x80
[   65.616490][ T6502]  ? xskq_create+0x56/0x170
[   65.616501][ T6502]  ? xsk_init_queue+0xb0/0x110
[   65.616509][ T6502]  ? xsk_setsockopt+0x4de/0x710
[   65.616517][ T6502]  ? do_sock_setsockopt+0x17c/0x1b0
[   65.616526][ T6502]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   65.616535][ T6502]  ? do_syscall_64+0xfa/0x3b0
[   65.616547][ T6502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.616559][ T6502]  __vmalloc_node_range_noprof+0x125/0x12f0
[   65.616582][ T6502]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   65.616594][ T6502]  ? __kasan_kmalloc+0x93/0xb0
[   65.616603][ T6502]  vmalloc_user_noprof+0xad/0xf0
[   65.616612][ T6502]  ? xskq_create+0xbf/0x170
[   65.616622][ T6502]  xskq_create+0xbf/0x170
[   65.616633][ T6502]  xsk_init_queue+0xb0/0x110
[   65.616644][ T6502]  xsk_setsockopt+0x4de/0x710
[   65.616654][ T6502]  ? __pfx_xsk_setsockopt+0x10/0x10
[   65.616665][ T6502]  ? __fget_files+0x2a/0x420
[   65.616674][ T6502]  ? aa_sock_opt_perm+0x74/0x110
[   65.616711][ T6502]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   65.616723][ T6502]  ? __pfx_xsk_setsockopt+0x10/0x10
[   65.616734][ T6502]  do_sock_setsockopt+0x17c/0x1b0
[   65.616745][ T6502]  __x64_sys_setsockopt+0x13f/0x1b0
[   65.616757][ T6502]  do_syscall_64+0xfa/0x3b0
[   65.616770][ T6502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.616778][ T6502]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   65.616789][ T6502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.616796][ T6502] RIP: 0033:0x7f34e9b8e9a9
[   65.616805][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.616813][ T6502] RSP: 002b:00007f34ea970038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   65.616822][ T6502] RAX: ffffffffffffffda RBX: 00007f34e9db5fa0 RCX: 00007f34e9b8e9a9
[   65.616827][ T6502] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   65.616832][ T6502] RBP: 00007f34e9c10d69 R08: 0000000000000004 R09: 0000000000000000
[   65.616837][ T6502] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   65.616841][ T6502] R13: 0000000000000000 R14: 00007f34e9db5fa0 R15: 00007ffc55d7aa88
[   65.616854][ T6502]  </TASK>
[   65.617003][ T6502] Mem-Info:
[   65.766777][ T6502] active_anon:5431 inactive_anon:0 isolated_anon:0
[   65.766777][ T6502]  active_file:800 inactive_file:38208 isolated_file:0
[   65.766777][ T6502]  unevictable:1768 dirty:1364 writeback:0
[   65.766777][ T6502]  slab_reclaimable:9064 slab_unreclaimable:52795
[   65.766777][ T6502]  mapped:17992 shmem:2436 pagetables:1079
[   65.766777][ T6502]  sec_pagetables:0 bounce:0
[   65.766777][ T6502]  kernel_misc_reclaimable:0
[   65.766777][ T6502]  free:299314 free_pcp:21620 free_cma:0
[   65.785168][ T6502] Node 0 active_anon:13752kB inactive_anon:0kB active_file:2236kB inactive_file:15220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30788kB dirty:3480kB writeback:0kB shmem:5156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7720kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   65.795595][ T6502] Node 1 active_anon:7972kB inactive_anon:0kB active_file:964kB inactive_file:137612kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41180kB dirty:1976kB writeback:0kB shmem:4588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3672kB pagetables:1440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   65.837845][ T6502] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   65.877492][ T6502] lowmem_reserve[]: 0 812 812 812 812
[   65.888164][ T6502] Node 0 DMA32 free:388124kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13888kB inactive_anon:0kB active_file:2236kB inactive_file:15220kB unevictable:3536kB writepending:3480kB present:1556484kB managed:831908kB mlocked:0kB bounce:0kB free_pcp:41448kB local_pcp:25508kB free_cma:0kB
[   65.915796][ T6502] lowmem_reserve[]: 0 0 0 0 0
[   65.921126][ T6502] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   65.953467][ T6502] lowmem_reserve[]: 0 0 854 854 854
[   65.960224][ T6502] Node 1 Normal free:332600kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7972kB inactive_anon:0kB active_file:964kB inactive_file:137612kB unevictable:3536kB writepending:1976kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:44760kB local_pcp:18100kB free_cma:0kB
[   65.995227][ T6502] lowmem_reserve[]: 0 0 0 0 0
[   66.000778][ T6502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   66.021049][ T6502] Node 0 DMA32: 2*4kB (UM) 267*8kB (UME) 272*16kB (UM) 42*32kB (UE) 31*64kB (UME) 8*128kB (UM) 3*256kB (UME) 2*512kB (ME) 2*1024kB (M) 3*2048kB (ME) 89*4096kB (UM) = 385376kB
[   66.049165][ T6502] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   66.068756][ T6502] Node 1 Normal: 840*4kB (UME) 3851*8kB (UME) 526*16kB (UME) 110*32kB (UME) 90*64kB (UM) 31*128kB (UM) 17*256kB (UME) 6*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 64*4096kB (M) = 332568kB
[   66.090542][ T6502] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   66.097330][ T6502] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   66.114292][ T6502] 41444 total pagecache pages
[   66.116001][ T6502] 0 pages in swap cache
[   66.117624][ T6502] Free swap  = 124996kB
[   66.119181][ T6502] Total swap = 124996kB
[   66.124420][ T6502] 786301 pages RAM
[   66.129544][ T6502] 0 pages HighMem/MovableOnly
[   66.131399][ T6502] 241076 pages reserved
[   66.133429][ T6502] 0 pages cma reserved
[   67.004036][ T6528] validate_nla: 2 callbacks suppressed
[   67.004062][ T6528] netlink: 'syz.2.293': attribute type 39 has an invalid length.
[   67.346151][ T6539] netlink: 'syz.1.298': attribute type 10 has an invalid length.
[   67.362953][ T6539] netlink: 'syz.1.298': attribute type 3 has an invalid length.
[   67.365359][ T6539] __nla_validate_parse: 1 callbacks suppressed
[   67.365365][ T6539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.298'.
[   67.997138][ T6579] netlink: 156 bytes leftover after parsing attributes in process `syz.0.317'.
[   68.296171][ T6592] netlink: 'syz.2.324': attribute type 11 has an invalid length.
[   68.299163][ T6592] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.324'.
[   68.373392][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.636362][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.2.331'.
[   68.641359][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.2.331'.
[   68.645114][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.2.331'.
[   69.157805][ T6637] netlink: 'syz.0.342': attribute type 10 has an invalid length.
[   69.161980][ T6637] bond0: (slave bond_slave_0): Releasing backup interface
[   69.378341][ T6649] netlink: 'syz.0.348': attribute type 21 has an invalid length.
[   69.385796][ T6649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.348'.
[   70.824363][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.829808][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.147379][ T6686] netlink: 'syz.2.365': attribute type 3 has an invalid length.
[   71.156824][ T6686] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   74.016015][ T6709] netlink: 'syz.1.376': attribute type 5 has an invalid length.
[   74.016347][ T6707] netlink: 'syz.2.374': attribute type 10 has an invalid length.
[   74.018499][ T6709] netlink: 168 bytes leftover after parsing attributes in process `syz.1.376'.
[   74.030045][ T6707] netlink: 168 bytes leftover after parsing attributes in process `syz.2.374'.
[   74.918078][ T6743] netlink: 'syz.2.392': attribute type 21 has an invalid length.
[   74.930490][ T6743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.392'.
[   75.274215][ T6749] netlink: 'syz.0.394': attribute type 2 has an invalid length.
[   76.390344][ T6789] netlink: 'syz.0.413': attribute type 3 has an invalid length.
[   76.392758][ T6789] netlink: 169664 bytes leftover after parsing attributes in process `syz.0.413'.
[   76.455702][ T6793] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[   76.473200][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.477522][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.518814][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.521510][ T6793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.524529][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.527021][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.565423][ T6793] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   76.806556][ T6811] raw_sendmsg: syz.2.422 forgot to set AF_INET. Fix it!
[   76.933389][ T6823] netlink: 3 bytes leftover after parsing attributes in process `syz.2.428'.
[   76.963453][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'.
[   77.070879][ T6828] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   78.625123][ T6878] netlink: 'syz.0.454': attribute type 27 has an invalid length.
[   78.627514][ T6878] netlink: 'syz.0.454': attribute type 3 has an invalid length.
[   78.631107][ T6878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.454'.
[   78.924707][ T6898] netlink: 'syz.2.463': attribute type 49 has an invalid length.
[   79.131471][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.134182][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.137813][ T6914] bridge0: entered allmulticast mode
[   79.946337][ T6957] netlink: 'syz.2.484': attribute type 7 has an invalid length.
[   80.298148][ T6972] netlink: 14 bytes leftover after parsing attributes in process `syz.0.492'.
[   80.597809][ T6988] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.499'.
[   81.070934][  T792] cfg80211: failed to load regulatory.db
[   81.783076][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1033324991 wd_nsec: 1033313673
[   82.746751][ T7007] netlink: 'syz.0.507': attribute type 13 has an invalid length.
[   82.749203][ T7007] netlink: 160 bytes leftover after parsing attributes in process `syz.0.507'.
[   82.755283][ T7007] erspan0: refused to change device tx_queue_len
[   82.757726][ T7007] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   83.043590][ T7019] netlink: 'syz.0.513': attribute type 21 has an invalid length.
[   83.046042][ T7019] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.056232][ T7019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.058643][ T7019] IPv6: NLM_F_CREATE should be set when creating new route
[   83.061009][ T7019] IPv6: NLM_F_CREATE should be set when creating new route
[   83.063590][ T7019] IPv6: NLM_F_CREATE should be set when creating new route
[   83.164304][ T7031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.519'.
[   83.284369][ T7042] netlink: 'syz.2.525': attribute type 16 has an invalid length.
[   83.286753][ T7042] netlink: 168 bytes leftover after parsing attributes in process `syz.2.525'.
[   83.306445][ T7044] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.524'.
[   83.513324][ T7057] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.528'.
[   83.523618][ T7055] netlink: 'syz.1.530': attribute type 3 has an invalid length.
[   83.526386][ T7055] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.530'.
[   83.532572][ T7057] netlink: 160 bytes leftover after parsing attributes in process `syz.0.528'.
[   84.298318][ T7078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.539'.
[   85.767600][ T7134] netlink: 'syz.2.562': attribute type 2 has an invalid length.
[   85.779758][ T7134] netlink: 'syz.2.562': attribute type 8 has an invalid length.
[   85.782246][ T7134] __nla_validate_parse: 2 callbacks suppressed
[   85.782320][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'.
[   85.883481][ T7145] netlink: 'syz.2.567': attribute type 21 has an invalid length.
[   85.958727][ T7152] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.570'.
[   86.555478][ T7180] netlink: 'syz.2.582': attribute type 21 has an invalid length.
[   86.557880][ T7180] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.621226][ T7180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.623409][ T7180] IPv6: NLM_F_CREATE should be set when creating new route
[   86.625572][ T7180] IPv6: NLM_F_CREATE should be set when creating new route
[   86.627724][ T7180] IPv6: NLM_F_CREATE should be set when creating new route
[   86.932224][ T7195] netlink: 14 bytes leftover after parsing attributes in process `syz.2.589'.
[   87.431624][ T7217] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.600'.
[   87.436101][ T7217] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.600'.
[   87.586713][ T7220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.601'.
[   89.672222][ T7262] netlink: 'syz.1.617': attribute type 2 has an invalid length.
[   89.674938][ T7262] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.617'.
[   92.740204][ T7287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.742504][ T7287] IPv6: NLM_F_CREATE should be set when creating new route
[   92.744669][ T7287] IPv6: NLM_F_CREATE should be set when creating new route
[   93.538139][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'.
[   93.649218][ T7305] netlink: 'syz.2.631': attribute type 10 has an invalid length.
[   93.672624][ T7305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   93.905534][ T7316] netlink: 'syz.1.637': attribute type 10 has an invalid length.
[   93.907887][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.637'.
[   93.912503][ T7316] dummy0: entered promiscuous mode
[   93.914309][ T7316] dummy0: entered allmulticast mode
[   93.917133][ T7316] bridge0: port 3(dummy0) entered blocking state
[   93.919249][ T7316] bridge0: port 3(dummy0) entered disabled state
[   93.929322][ T7316] bridge0: port 3(dummy0) entered blocking state
[   93.931275][ T7316] bridge0: port 3(dummy0) entered forwarding state
[   93.984294][ T7321] netlink: 14 bytes leftover after parsing attributes in process `syz.2.639'.
[  100.335926][ T7353] netlink: 'syz.2.652': attribute type 29 has an invalid length.
[  100.339209][ T7353] netlink: 'syz.2.652': attribute type 29 has an invalid length.
[  100.344505][ T7353] netlink: 'syz.2.652': attribute type 29 has an invalid length.
[  100.396082][ T7355] netlink: 'syz.2.653': attribute type 12 has an invalid length.
[  100.398561][ T7355] netlink: 120 bytes leftover after parsing attributes in process `syz.2.653'.
[  102.051764][ T7363] IPv6: Can't replace route, no match found
[  102.331171][   T54] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  102.454281][ T7393] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.670'.
[  103.632414][ T7417] netlink: 'syz.0.680': attribute type 4 has an invalid length.
[  103.634733][ T7417] netlink: 152 bytes leftover after parsing attributes in process `syz.0.680'.
[  103.662371][ T7417] netlink: 6 bytes leftover after parsing attributes in process `syz.0.680'.
[  103.665080][ T7417] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.487371][ T7481] delete_channel: no stack
[  105.028209][ T7511] netlink: 'syz.1.725': attribute type 21 has an invalid length.
[  105.065402][ T7511] netlink: 'syz.1.725': attribute type 1 has an invalid length.
[  105.342646][ T7526] netlink: 160 bytes leftover after parsing attributes in process `syz.1.732'.
[  105.758428][ T7539] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.738'.
[  112.637584][   T54] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  112.644240][ T7667] netlink: 'syz.2.795': attribute type 10 has an invalid length.
[  112.647036][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.649729][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.790982][ T7667] bond0: (slave bridge0): Releasing backup interface
[  112.898197][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.900559][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.903249][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.905460][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.923749][ T7667] team0: Port device bridge0 added
[  113.626634][ T7716] netlink: 140 bytes leftover after parsing attributes in process `syz.2.805'.
[  114.488543][ T7786] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.812'.
[  115.137776][ T7813] netlink: 'syz.1.820': attribute type 10 has an invalid length.
[  115.146797][ T7813] bridge0: port 3(dummy0) entered disabled state
[  115.148979][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.151816][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.188095][ T7813] bridge0: port 3(dummy0) entered blocking state
[  115.190264][ T7813] bridge0: port 3(dummy0) entered forwarding state
[  115.192497][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.194794][ T7813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.197337][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.199659][ T7813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.214808][ T7813] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  115.567786][ T7838] netlink: 'syz.1.830': attribute type 29 has an invalid length.
[  115.575200][ T7838] netlink: 'syz.1.830': attribute type 29 has an invalid length.
[  115.584931][ T7838] netlink: 'syz.1.830': attribute type 29 has an invalid length.
[  115.604520][ T7838] netlink: 'syz.1.830': attribute type 29 has an invalid length.
[  115.737770][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.834'.
[  115.747443][ T7846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.834'.
[  115.751008][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.834'.
[  116.654926][ T7858] netlink: 144 bytes leftover after parsing attributes in process `syz.1.838'.
[  116.677462][ T7860] netlink: 'syz.2.840': attribute type 41 has an invalid length.
[  116.753209][ T7868] netlink: 'syz.2.844': attribute type 21 has an invalid length.
[  116.755646][ T7868] netlink: 128 bytes leftover after parsing attributes in process `syz.2.844'.
[  116.758605][ T7868] netlink: 'syz.2.844': attribute type 6 has an invalid length.
[  116.761346][ T7868] netlink: 3 bytes leftover after parsing attributes in process `syz.2.844'.
[  116.892426][ T7877] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.848'.
[  116.968372][ T7887] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.853'.
[  116.973684][ T7884] netlink: 'syz.2.850': attribute type 11 has an invalid length.
[  117.026528][ T7884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.213392][ T7910] bridge0: port 3(bond0) entered blocking state
[  118.215876][ T7910] bridge0: port 3(bond0) entered disabled state
[  118.218634][ T7910] bond0: entered allmulticast mode
[  118.222992][ T7910] bond_slave_1: entered allmulticast mode
[  118.229977][ T7910] bond0: entered promiscuous mode
[  118.231592][ T7910] bond_slave_1: entered promiscuous mode
[  121.037400][ T8050] __nla_validate_parse: 4 callbacks suppressed
[  121.037410][ T8050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.928'.
[  121.178892][ T8063] netlink: 'syz.1.933': attribute type 21 has an invalid length.
[  124.697088][ T8105] syzkaller0: entered promiscuous mode
[  124.698779][ T8105] syzkaller0: entered allmulticast mode
[  126.343820][ T5219] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  126.814683][ T8147] netlink: 'syz.0.971': attribute type 9 has an invalid length.
[  126.817106][ T8147] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.971'.
[  126.893344][ T8158] netlink: 168 bytes leftover after parsing attributes in process `syz.2.976'.
[  126.931357][ T8163] netlink: 144 bytes leftover after parsing attributes in process `syz.0.978'.
[  126.963701][ T8164] netlink: 188 bytes leftover after parsing attributes in process `syz.1.979'.
[  127.065392][ T8172] netlink: 'syz.1.983': attribute type 21 has an invalid length.
[  127.068628][ T8172] netlink: 128 bytes leftover after parsing attributes in process `syz.1.983'.
[  127.072496][ T8172] netlink: 'syz.1.983': attribute type 4 has an invalid length.
[  127.074810][ T8172] netlink: 3 bytes leftover after parsing attributes in process `syz.1.983'.
[  127.306320][ T8195] netlink: 'syz.1.994': attribute type 10 has an invalid length.
[  127.330268][ T8195] batman_adv: batadv0: Adding interface: netdevsim0
[  127.335469][ T8195] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.345241][ T8195] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  127.378157][ T8195] netlink: 'syz.1.994': attribute type 2 has an invalid length.
[  127.385025][ T8195] netlink: 51 bytes leftover after parsing attributes in process `syz.1.994'.
[  128.059108][ T8207] netlink: 'syz.2.998': attribute type 21 has an invalid length.
[  129.936185][ T8265] netlink: 'syz.2.1026': attribute type 1 has an invalid length.
[  129.942183][ T8265] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1026'.
[  130.561945][ T8294] netlink: 'syz.1.1040': attribute type 28 has an invalid length.
[  130.591002][ T8296] netlink: 'syz.1.1041': attribute type 2 has an invalid length.
[  130.593510][ T8296] netlink: 'syz.1.1041': attribute type 8 has an invalid length.
[  130.596019][ T8296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1041'.
[  130.683577][ T8300] blkio.reset_stats is deprecated
[  132.810815][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.812790][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  134.023663][ T8330] netlink: 'syz.0.1057': attribute type 6 has an invalid length.
[  134.225150][ T8349] syz.1.1067 uses obsolete (PF_INET,SOCK_PACKET)
[  134.272223][ T8357] IPv6: Can't replace route, no match found
[  135.378421][ T8425] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1101'.
[  135.384963][ T8425] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  136.557729][ T8463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1119'.
[  137.234459][ T8491] netlink: 'syz.0.1131': attribute type 21 has an invalid length.
[  137.237011][ T8491] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1131'.
[  137.329872][ T8498] netlink: 'syz.0.1134': attribute type 29 has an invalid length.
[  137.335282][ T8498] netlink: 'syz.0.1134': attribute type 29 has an invalid length.
[  137.365361][ T8498] netlink: 'syz.0.1134': attribute type 29 has an invalid length.
[  137.388199][ T8498] netlink: 'syz.0.1134': attribute type 29 has an invalid length.
[  137.971655][ T8539] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[  138.574471][ T8575] netlink: 'syz.2.1168': attribute type 4 has an invalid length.
[  138.793997][ T8598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1179'.
[  138.797872][ T8598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1179'.
[  139.289735][ T8601] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1172'.
[  139.292947][ T8601] netlink: 'syz.1.1172': attribute type 10 has an invalid length.
[  139.295377][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1172'.
[  139.298255][ T8601] team0: entered promiscuous mode
[  139.302432][ T8601] team_slave_0: entered promiscuous mode
[  139.304310][ T8601] team_slave_1: entered promiscuous mode
[  139.306138][ T8601] team0: entered allmulticast mode
[  139.307740][ T8601] team_slave_0: entered allmulticast mode
[  139.310114][ T8601] team_slave_1: entered allmulticast mode
[  139.312206][ T8601] bridge0: port 4(team0) entered blocking state
[  139.314389][ T8601] bridge0: port 4(team0) entered disabled state
[  139.318027][ T8601] bridge0: port 4(team0) entered blocking state
[  139.320118][ T8601] bridge0: port 4(team0) entered forwarding state
[  139.621801][ T8613] IPv6: Can't replace route, no match found
[  139.687473][ T8621] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1189'.
[  139.882566][ T8628] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.1192'.
[  139.887184][ T8628] openvswitch: netlink: Message has 6 unknown bytes.
[  139.896561][ T8632] netlink: 'syz.2.1194': attribute type 39 has an invalid length.
[  140.951165][ T8667] netlink: 'syz.1.1209': attribute type 10 has an invalid length.
[  140.972391][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.982624][ T8667] batadv0: entered promiscuous mode
[  140.984697][ T8667] batadv0: entered allmulticast mode
[  140.992181][ T8667] team0: Port device batadv0 added
[  141.280650][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  141.283591][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  141.308235][ T8679] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1214'.
[  141.548638][ T8688] netlink: 'syz.2.1218': attribute type 29 has an invalid length.
[  141.554792][ T8688] netlink: 'syz.2.1218': attribute type 10 has an invalid length.
[  141.591295][ T8688] team0: Device bond0 is already an upper device of the team interface
[  141.725622][ T8692] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1220'.
[  142.144621][ T8708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1227'.
[  142.204350][ T8712] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1229'.
[  142.207186][ T8712] netlink: zone id is out of range
[  142.208873][ T8712] netlink: zone id is out of range
[  142.211997][ T8712] netlink: zone id is out of range
[  142.213611][ T8712] netlink: zone id is out of range
[  142.215314][ T8712] netlink: zone id is out of range
[  142.216932][ T8712] netlink: zone id is out of range
[  142.218530][ T8712] netlink: zone id is out of range
[  142.221183][ T8712] netlink: zone id is out of range
[  142.223991][ T8712] netlink: zone id is out of range
[  142.225699][ T8712] netlink: zone id is out of range
[  142.372695][ T8723] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1234'.
[  142.382193][ T8723] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1234'.
[  142.386941][ T8723] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1234'.
[  142.498943][ T8736] : renamed from bond0
[  142.658290][ T8743] netlink: 'syz.1.1243': attribute type 21 has an invalid length.
[  142.700171][ T8746] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1244'.
[  143.131828][ T8779] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1260'.
[  143.284272][ T8787] netlink: 'syz.0.1264': attribute type 21 has an invalid length.
[  143.286867][ T8787] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1264'.
[  143.736186][ T8794] netlink: 'syz.0.1267': attribute type 21 has an invalid length.
[  144.588486][ T8828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.594031][ T8828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.598973][ T8828] bond0 (unregistering): (slave team0): Releasing backup interface
[  144.606902][ T8828] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  144.611788][ T8828] bond0 (unregistering): Released all slaves
[  145.219076][ T8857] netlink: 'syz.1.1291': attribute type 10 has an invalid length.
[  145.238250][ T8857] bond0: (slave bond_slave_0): Releasing backup interface
[  146.063861][ T8899] syzkaller0: entered promiscuous mode
[  146.065777][ T8899] syzkaller0: entered allmulticast mode
[  147.173485][ T8959] netlink: 'syz.1.1339': attribute type 3 has an invalid length.
[  147.176504][ T8959] __nla_validate_parse: 5 callbacks suppressed
[  147.176552][ T8959] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1339'.
[  147.200327][ T8959] netlink: 'syz.1.1339': attribute type 3 has an invalid length.
[  147.203066][ T8959] netlink: 14191 bytes leftover after parsing attributes in process `syz.1.1339'.
[  147.204774][ T8968] netlink: 'syz.2.1343': attribute type 4 has an invalid length.
[  147.208526][ T8968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1343'.
[  147.656912][ T8992] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1354'.
[  147.660020][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'.
[  147.662935][ T8992] netlink: 83780 bytes leftover after parsing attributes in process `syz.2.1354'.
[  147.783124][ T9005] netlink: 'syz.0.1360': attribute type 10 has an invalid length.
[  147.791272][ T9005] batman_adv: batadv0: Adding interface: team0
[  147.793215][ T9005] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.803713][ T9005] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  148.252225][ T9044] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1375'.
[  148.483412][ T9054] syzkaller0: entered promiscuous mode
[  148.485131][ T9054] syzkaller0: entered allmulticast mode
[  149.301596][ T7777] wlan1: Trigger new scan to find an IBSS to join
[  150.590205][ T9128] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.790257][ T9143] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1418'.
[  150.793318][ T9143] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1418'.
[  150.796341][ T9143] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1418'.
[  151.105395][ T9169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.151319][ T9206] IPv6: NLM_F_CREATE should be specified when creating new route
[  152.168218][ T9213] delete_channel: no stack
[  152.170219][ T9213] delete_channel: no stack
[  152.302475][ T9223] syzkaller0: entered promiscuous mode
[  152.304260][ T9223] syzkaller0: entered allmulticast mode
[  153.616132][ T9242] netlink: 'syz.2.1465': attribute type 3 has an invalid length.
[  153.618852][ T9242] netlink: 'syz.2.1465': attribute type 1 has an invalid length.
[  153.621911][ T9242] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1465'.
[  154.260481][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  157.299288][    C0] sched: DL replenish lagged too much
[  168.236990][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.240044][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.242525][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.245179][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.247670][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  169.462676][ T9257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  169.465992][ T9257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  169.469014][ T9257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  169.472437][ T9257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  169.475582][ T9257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  169.488915][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  169.492204][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  169.494811][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  169.498395][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  169.501658][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  170.193426][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  170.195975][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  170.259869][ T5835] Bluetooth: hci3: command tx timeout
[  170.339598][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  171.550922][ T5835] Bluetooth: hci5: command tx timeout
[  171.553054][ T5835] Bluetooth: hci4: command tx timeout
[  172.349602][ T5843] Bluetooth: hci3: command tx timeout
[  173.630726][ T5843] Bluetooth: hci4: command tx timeout
[  173.632502][ T5843] Bluetooth: hci5: command tx timeout
[  174.429625][ T5843] Bluetooth: hci3: command tx timeout
[  175.709477][ T5835] Bluetooth: hci5: command tx timeout
[  175.711731][ T5843] Bluetooth: hci4: command tx timeout
[  176.509652][ T5843] Bluetooth: hci3: command tx timeout
[  177.780770][ T5843] Bluetooth: hci4: command tx timeout
[  177.782555][ T5843] Bluetooth: hci5: command tx timeout
[  229.177679][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  229.182207][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  229.184816][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  229.191395][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  229.193991][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  230.334097][ T9257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  230.338703][ T9257] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  230.343625][ T9257] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  230.358331][ T9275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  230.362408][ T9275] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  230.365114][ T9275] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  230.368496][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  230.401055][ T9275] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  230.405610][ T9275] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  230.408208][ T9275] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  258.699295][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  258.701406][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9243
SYZFAIL: failed to recv rpc
[  258.704634][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=17145, q=1948 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  258.707444][    C0] task:syz.1.1464      state:R  running task     stack:25144 pid:9243  tgid:9239  ppid:5839   task_flags:0x400140 flags:0x0000400e
[  258.712112][    C0] Call Trace:
[  258.713186][    C0]  <IRQ>
[  258.714099][    C0]  sched_show_task+0x49d/0x630
[  258.715616][    C0]  ? __pfx_sched_show_task+0x10/0x10
[  258.717253][    C0]  ? rcu_dump_cpu_stacks+0x79/0x4e0
[  258.718844][    C0]  ? wq_watchdog_touch+0xef/0x180
[  258.720364][    C0]  print_other_cpu_stall+0xfa6/0x1370
[  258.722006][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  258.723813][    C0]  rcu_sched_clock_irq+0x9d1/0x1090
[  258.725422][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  258.727122][    C0]  update_process_times+0x23c/0x2f0
[  258.728660][    C0]  tick_nohz_handler+0x39a/0x520
[  258.730171][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  258.731804][    C0]  __hrtimer_run_queues+0x4e0/0xc60
[  258.733374][    C0]  ? ktime_get_update_offsets_now+0x60/0x3d0
[  258.735190][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  258.736918][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  258.738719][    C0]  ? sched_clock_cpu+0x74/0x430
[  258.740196][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  258.741710][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  258.743507][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  258.745212][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  258.747007][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  258.748863][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  258.754545][    C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000206
[  258.756383][    C0] RAX: 410d8bee754b2600 RBX: 1ffff92000000e84 RCX: 410d8bee754b2600
[  258.758733][    C0] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  258.761095][    C0] RBP: ffffc900000074d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  258.763515][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  258.765958][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8e144560
[  258.768377][    C0]  ? __lock_acquire+0xab9/0xd20
[  258.769918][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  258.771783][    C0]  ? unwind_next_frame+0xa5/0x2390
[  258.773357][    C0]  __rcu_read_unlock+0x84/0xe0
[  258.774820][    C0]  ? unwind_next_frame+0xa5/0x2390
[  258.776404][    C0]  unwind_next_frame+0x19ae/0x2390
[  258.777985][    C0]  ? unwind_next_frame+0xa5/0x2390
[  258.779530][    C0]  ? irq_exit_rcu+0x9/0x30
[  258.780935][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  258.782835][    C0]  arch_stack_walk+0x11c/0x150
[  258.784315][    C0]  ? sysvec_irq_work+0xa3/0xc0
[  258.785803][    C0]  stack_trace_save+0x9c/0xe0
[  258.787263][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  258.788932][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  258.790409][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  258.792013][    C0]  kasan_save_track+0x3e/0x80
[  258.793446][    C0]  ? kasan_save_track+0x3e/0x80
[  258.794953][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  258.796522][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  258.798409][    C0]  ? __alloc_skb+0x112/0x2d0
[  258.799859][    C0]  ? ndisc_alloc_skb+0x9f/0x480
[  258.801373][    C0]  ? ndisc_send_rs+0x2b5/0x630
[  258.802863][    C0]  ? addrconf_rs_timer+0x369/0x670
[  258.804435][    C0]  ? call_timer_fn+0x17e/0x5f0
[  258.805919][    C0]  ? __run_timer_base+0x61a/0x860
[  258.807481][    C0]  ? run_timer_softirq+0xb7/0x180
[  258.809037][    C0]  ? handle_softirqs+0x286/0x870
[  258.810559][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  258.812050][    C0]  ? irq_exit_rcu+0x9/0x30
[  258.813470][    C0]  __kasan_slab_alloc+0x6c/0x80
[  258.815004][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  258.816783][    C0]  ? __alloc_skb+0x112/0x2d0
[  258.818248][    C0]  __alloc_skb+0x112/0x2d0
[  258.819643][    C0]  ndisc_alloc_skb+0x9f/0x480
[  258.821125][    C0]  ndisc_send_rs+0x2b5/0x630
[  258.822550][    C0]  addrconf_rs_timer+0x369/0x670
[  258.824104][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  258.825812][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  258.827316][    C0]  call_timer_fn+0x17e/0x5f0
[  258.828773][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  258.830452][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.832062][    C0]  ? call_timer_fn+0xbe/0x5f0
[  258.833524][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  258.835114][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  258.836796][    C0]  __run_timer_base+0x61a/0x860
[  258.838297][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  258.839935][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  258.841606][    C0]  run_timer_softirq+0xb7/0x180
[  258.843116][    C0]  handle_softirqs+0x286/0x870
[  258.844585][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  258.846063][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  258.847680][    C0]  ? irq_work_single+0x1ac/0x240
[  258.849208][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  258.850819][    C0]  __irq_exit_rcu+0xca/0x1f0
[  258.852247][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  258.853860][    C0]  ? rcu_is_watching+0x15/0xb0
[  258.855332][    C0]  irq_exit_rcu+0x9/0x30
[  258.856643][    C0]  sysvec_irq_work+0xa3/0xc0
[  258.858079][    C0]  </IRQ>
[  258.859004][    C0]  <TASK>
[  258.859910][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  258.861412][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  258.863266][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  258.869043][    C0] RSP: 0018:ffffc900086f7460 EFLAGS: 00000206
[  258.870851][    C0] RAX: 410d8bee754b2600 RBX: 1ffff920010dee94 RCX: 410d8bee754b2600
[  258.873194][    C0] RDX: 0000000000000007 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  258.875524][    C0] RBP: ffffc900086f7560 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  258.877899][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  258.880255][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8e144560
[  258.882640][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  258.884477][    C0]  __rcu_read_unlock+0x84/0xe0
[  258.885949][    C0]  d_alloc_parallel+0x1220/0x14e0
[  258.887478][    C0]  ? d_alloc_parallel+0x2e0/0x14e0
[  258.889056][    C0]  ? irqentry_enter+0x3d/0x60
[  258.890479][    C0]  ? __lock_acquire+0xab9/0xd20
[  258.891953][    C0]  ? __pfx_d_alloc_parallel+0x10/0x10
[  258.893594][    C0]  ? __raw_spin_lock_init+0x45/0x100
[  258.895180][    C0]  ? __init_waitqueue_head+0xa9/0x150
[  258.896774][    C0]  __lookup_slow+0x116/0x3d0
[  258.898144][    C0]  ? __pfx___lookup_slow+0x10/0x10
[  258.899700][    C0]  ? down_read+0x1ad/0x2e0
[  258.901067][    C0]  lookup_slow+0x53/0x70
[  258.902342][    C0]  link_path_walk+0x935/0xea0
[  258.903820][    C0]  path_openat+0x28c/0x3830
[  258.905209][    C0]  ? arch_stack_walk+0xfc/0x150
[  258.906710][    C0]  ? __pfx_path_openat+0x10/0x10
[  258.908222][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.910087][    C0]  do_filp_open+0x1fa/0x410
[  258.911507][    C0]  ? __lock_acquire+0xab9/0xd20
[  258.912988][    C0]  ? __pfx_do_filp_open+0x10/0x10
[  258.914526][    C0]  ? __pfx_kfree_link+0x10/0x10
[  258.916041][    C0]  ? _raw_spin_unlock+0x28/0x50
[  258.917503][    C0]  ? alloc_fd+0x64c/0x6c0
[  258.918842][    C0]  do_sys_openat2+0x121/0x1c0
[  258.920272][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  258.921849][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  258.923820][    C0]  __x64_sys_openat+0x138/0x170
[  258.925325][    C0]  do_syscall_64+0xfa/0x3b0
[  258.926735][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.928611][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  258.930468][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.932254][    C0] RIP: 0033:0x7f34e9b8d310
[  258.933595][    C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  258.939349][    C0] RSP: 002b:00007f34ea94ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  258.941874][    C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f34e9b8d310
[  258.944196][    C0] RDX: 0000000000000002 RSI: 00007f34ea94efa0 RDI: 00000000ffffff9c
[  258.946532][    C0] RBP: 00007f34ea94efa0 R08: 0000000000000000 R09: 0000000000000000
[  258.948919][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  258.951325][    C0] R13: 0000000000000000 R14: 00007f34e9db6080 R15: 00007ffc55d7aa88
[  258.953740][    C0]  </TASK>

VM DIAGNOSIS:
10:54:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006750
R8 =ffff888108a80237 R9 =1ffff11021150046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58cb R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f34ea94f6c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010e954000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f34e9c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000002818 RBX=ffffc90007740000 RCX=ffff888108693980 RDX=0000000000000100
RSI=000000000000006c RDI=0000000000000000 RBP=1ffff110215045e3 RSP=ffffc900001e0828
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=ffffffff868f0bf0
R12=ffff88810a822f18 R13=ffff88810a822f36 R14=000000000000006b R15=dffffc0000000000
RIP=ffffffff868f1658 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f45718e0800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff9fe4cf38 CR3=000000001f23c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
