last executing test programs:

2m1.010005463s ago: executing program 2 (id=36):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

2m1.003856163s ago: executing program 0 (id=38):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)

2m0.938955304s ago: executing program 2 (id=39):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20)

2m0.937549123s ago: executing program 0 (id=41):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000200), 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

2m0.937435561s ago: executing program 2 (id=42):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000007000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m0.880902301s ago: executing program 0 (id=43):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000042fa007111420000000000851000000200000085000017c400000095000000000000009500a505000000003ae0566df9b170285298cc5371ae0afb57c72a1fa20a4c7468d9102ab24b094f6551be3924a4e10d4cb7b091b334ed"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

2m0.828391019s ago: executing program 0 (id=45):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c0200b3000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2m0.828198161s ago: executing program 2 (id=46):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r1, r0, 0x0, r0}, 0x10)

2m0.770455573s ago: executing program 0 (id=48):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142)

2m0.770325656s ago: executing program 2 (id=49):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000), 0x8)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="01", 0x1}], 0x1}, 0x4040)

2m0.584495684s ago: executing program 2 (id=50):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {&(0x7f0000002740)="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", 0x54f}], 0x2}, 0x80)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$kcm(0x28, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

2m0.523805262s ago: executing program 32 (id=50):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {&(0x7f0000002740)="e7b1ce5f7f89191227d596ad4f45a385f858d305d38cee3167b3ef9755633af767c39a186facb9077e6db2883aab7e9c13ccd4b95c4cd36dd45d0f47c5d9596f7f521523baa513c7ecab4ea2c9488a861a4079a7e7048ffbaaefb0f03fca4842651502634853800bb5ffba2c43c34f5820aea51765d11307a713bda1d65524bd6f7c1a5437c0ce088a8bd4a6dcd03955d0e6d3e25b33be6c61fbf0e30a9f8cf73a95c3b8a5c651504fe7752bb435742f6da3e64dd9e15cc8cfdde09f67012b13cee8198f123781db28f6386dfbce28d56cd47142504ee48c284999c3bbeeab6ab0aa08d866e312b497de81752079eed44da14db97fe6564e40f17812426bdd64cc124104028baa4c2887fb4e889b77c6f47e61e366c7811dc3d9b74d18316143f26d7f3e12025d230b6e5ad8bf1f60c24d3c2547dd4f4d7c125e8b5a012fbe4b1b162b9cea0e126815044f61d5de7503d78ec87e5447a047b002d90a37d76387d41bb6c721c16faf29a90eb551e1d036fc32b2b96ab1fc14520118a60585f7cfafea003cab7db8277afc144c661f73a47d5a2e3c5f4ee7acbf6ec47a05683231184c657e1ef5c56848056a2272306c96bf954747a04415345dcacd810ac0ce9d18ea17995a39bc4c647c24cd6e9ba4cf63ebabe4b651504436f2a6f277ade4325101ad2123536439e10b3ccb8ad6ae402f98724121c33dcf077abb17de6779e3986efa0bea3c607596a016dc193abfd655b6ed186953c6ef49e03cbfb4f137fb46d078dcd21ccf7b50aacf6953642a4c6d7b52a5cd87bd5a8be6f479ae5da28fd42af8a966163caebe0a9af773e3476f4ba7ae9f9540f30d4cae2ae6df080e5db4a5ed47086e5ac71c47b02850db5d5be0a7208a540ff2d763194064188bd938f9964b226624b87a810489535284210a9c84a35d897eeb8d848a43d926c08ff2f7937ee9e17215d3580e118ec290ee4c7191f34d82aef17058f8f5aaedbb73d2abc1f8909a2150cb3317f711455919ef4cbe017c6b6e406460221dfa229258144c7e3fe2a48459dbcf0b9982c2b003b51925e40955e1bfc535d2ef476b16cee8d6f250180772138cb67ca6704d5396e6867fbcd4ed46042f5376407dde454e8dbe6e46ff50ea2eefe5814d388eddc6a3d0d113c82bb6a8f7c4ea6d8b58ffcedaf77554b988df3c55380d5b15f29d32ef3021e47890bd647c9f371ddd62514714828dabb02a3f8c1c9548fcb28157cf02db1589540e898b1da1d394c859b11f4fc95fe6338cb133fe46bdf1ff83784e27741fde2872b4a0cbd90d5e8a8210cf3d21c7208e6b9be70091d3eb18b79cc36780bf12d23082bac6d6311848662617c3682859150ef25d1a1966ad478cbef16f055e7b62419735a2cc4cbefd963c29c8d94dfbadf92495bb60746f831a9537d56f7abb9f318c30194994859eebf5e11b017ea402fe1b4a07cba0f56277d7ac8e7d1d3af15d1da6715784fdb0311bf0afd19e18170eaa9369ac7743ae18ffffffffffffff7fa02f65e28c73c4e6720f18a57ed9361b90f08a0301b5f862063ffd726ab7757cc5ae43cff4243a7c6c81ca5d2b2dceb4f033fa1db514371821279dcb6fa51403f12fd5fcd208b1a4b95315d353f25b70de04dcc8713de72c83fe8ccb1c04b3bb4a0cbee43a36a05d250822526dc8443eae625fd57404d26dc9801be4d066b5ce5fa934aebbb9cb21c6f9780c6e071a418a4ad60d86596824c382f76b88b3ae2401c9c1345acac5d365f6eb065080e287fa12b6a7559f1081b847c54c7caa852ce4b11a45a44d9543aa872e68ed639d11475f89275a22482eda4253adf5cc26b0ef8ba200c04ae21deaaa584f76aed412ade8da894f95420a4a0a3d6ed31a84854e0ef48bc971654070986031b84cf880ab7bfe707b0f3675ea27", 0x54f}], 0x2}, 0x80)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$kcm(0x28, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

2m0.481096392s ago: executing program 0 (id=52):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000180091c8b14a0778a8123d181d"], 0xfe33)

2m0.480897582s ago: executing program 33 (id=52):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000180091c8b14a0778a8123d181d"], 0xfe33)

36.080448101s ago: executing program 4 (id=1927):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x9, 0x0)
close(0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = socket$kcm(0x2, 0x2, 0x0)
recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES8=r3, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r8 = socket$kcm(0x11, 0x3, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f0000000380)='./file0\x00', r6, 0x4000, r2}, 0x18)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x7, @local, 0x80}, 0x80, 0x0}, 0x20008080)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000001b80)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='ext4_forget\x00', r9, 0x0, 0x8}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1, 0x0, 0x1}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000280)={r6}, 0x8)

35.94898717s ago: executing program 4 (id=1931):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x4, 0xc2, 0x3, 0x5}]}}}], 0x38}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000))

35.948856747s ago: executing program 4 (id=1932):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000001200))

35.799312038s ago: executing program 3 (id=1937):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000001280), 0x0}, 0x20)

35.799146454s ago: executing program 4 (id=1938):
socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

35.799061168s ago: executing program 3 (id=1939):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708", @ANYBLOB], 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0)

35.737257262s ago: executing program 3 (id=1941):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, 0x0}, 0x94)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

35.212483632s ago: executing program 3 (id=1946):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000060000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b703000047f8ffff8500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

34.276945804s ago: executing program 3 (id=1948):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3f}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001d80)="e4", 0x1}], 0x1}, 0x44050)

34.276684656s ago: executing program 4 (id=1949):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r0, &(0x7f0000000940)="1957ab7e4e", 0x0}, 0x20)

34.10884006s ago: executing program 3 (id=1952):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0xb}, {0x2}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8)

33.969022769s ago: executing program 34 (id=1952):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0xb}, {0x2}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2040)
setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8)

33.9106303s ago: executing program 4 (id=1954):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd50}], 0x3a}, 0x0)

33.910467931s ago: executing program 35 (id=1954):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd50}], 0x3a}, 0x0)

17.820313001s ago: executing program 6 (id=2345):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080))

17.819942004s ago: executing program 6 (id=2346):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x5, 0x0, 0x0)

17.739341502s ago: executing program 6 (id=2347):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0)

17.09840973s ago: executing program 5 (id=2371):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x73, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x9d12}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

16.835196874s ago: executing program 6 (id=2372):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)

16.612724117s ago: executing program 5 (id=2373):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r0, 0x0, 0xffdd)

16.550452752s ago: executing program 6 (id=2374):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

16.20977415s ago: executing program 1 (id=2379):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

16.159303283s ago: executing program 1 (id=2380):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0, 0x2}, 0x20)

16.159201821s ago: executing program 5 (id=2381):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33)

16.158984913s ago: executing program 1 (id=2382):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8a, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

16.158858949s ago: executing program 5 (id=2383):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

16.109427669s ago: executing program 1 (id=2384):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0)

16.109065405s ago: executing program 5 (id=2385):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="f6313110b6468473237e58f6892f", 0xe}], 0x1}, 0x0)

16.108899674s ago: executing program 1 (id=2386):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0xc0189436, &(0x7f00000020c0)=""/4109)

16.048620622s ago: executing program 5 (id=2387):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xfffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00'], 0x5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

16.048445986s ago: executing program 1 (id=2388):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe800000200065", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30)

16.048144449s ago: executing program 6 (id=2389):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000004000000000000000000008520000018000000070000000300000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffb, 0xeb, &(0x7f0000000080)=""/235, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0xfffffffc, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x1e, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x3, 0x10)
openat$cgroup(r5, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xbc59e4ad6e10b49f, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="040000f3040000000300"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r9}, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30)

208.079877ms ago: executing program 36 (id=2389):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000004000000000000000000008520000018000000070000000300000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffb, 0xeb, &(0x7f0000000080)=""/235, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0xfffffffc, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x1e, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r5 = socket$kcm(0x10, 0x3, 0x10)
openat$cgroup(r5, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xbc59e4ad6e10b49f, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="040000f3040000000300"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r9}, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30)

104.666217ms ago: executing program 37 (id=2388):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe800000200065", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30)

0s ago: executing program 38 (id=2387):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xfffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00'], 0x5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35366' (ED25519) to the list of known hosts.
syzkaller login: [   40.686851][ T5756] cgroup: Unknown subsys name 'net'
[   40.799054][ T5756] cgroup: Unknown subsys name 'cpuset'
[   40.802978][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.042345][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.219584][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.222717][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.226453][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.229458][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.232070][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.304719][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.317930][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.320696][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.326648][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.329539][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.332539][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.335411][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.341914][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.345353][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.349537][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.421950][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   45.514643][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.517514][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.519984][ T5828] bridge_slave_0: entered allmulticast mode
[   45.522698][ T5828] bridge_slave_0: entered promiscuous mode
[   45.553405][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.555765][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.558501][ T5828] bridge_slave_1: entered allmulticast mode
[   45.561423][ T5828] bridge_slave_1: entered promiscuous mode
[   45.592473][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   45.599406][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.607568][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.642037][ T5828] team0: Port device team_slave_0 added
[   45.645864][ T5828] team0: Port device team_slave_1 added
[   45.648359][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.688840][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.691245][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.700804][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.722931][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.725355][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.734518][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.739683][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.742193][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.744695][ T5834] bridge_slave_0: entered allmulticast mode
[   45.747801][ T5834] bridge_slave_0: entered promiscuous mode
[   45.757885][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.760363][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.762910][ T5834] bridge_slave_1: entered allmulticast mode
[   45.765717][ T5834] bridge_slave_1: entered promiscuous mode
[   45.796924][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.823081][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.833789][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.837409][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.839929][ T5833] bridge_slave_0: entered allmulticast mode
[   45.842810][ T5833] bridge_slave_0: entered promiscuous mode
[   45.849232][ T5828] hsr_slave_0: entered promiscuous mode
[   45.851621][ T5828] hsr_slave_1: entered promiscuous mode
[   45.864134][ T5834] team0: Port device team_slave_0 added
[   45.866813][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.869238][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.871794][ T5833] bridge_slave_1: entered allmulticast mode
[   45.874553][ T5833] bridge_slave_1: entered promiscuous mode
[   45.885711][ T5834] team0: Port device team_slave_1 added
[   45.913974][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.925246][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.927825][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.937204][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.950404][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.957515][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.959967][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.969222][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.001704][ T5833] team0: Port device team_slave_0 added
[   46.005054][ T5833] team0: Port device team_slave_1 added
[   46.042069][ T5834] hsr_slave_0: entered promiscuous mode
[   46.044396][ T5834] hsr_slave_1: entered promiscuous mode
[   46.046814][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.049440][ T5834] Cannot create hsr debugfs directory
[   46.051765][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.054079][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.063560][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.068301][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.071446][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.080820][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.151602][ T5833] hsr_slave_0: entered promiscuous mode
[   46.154021][ T5833] hsr_slave_1: entered promiscuous mode
[   46.157564][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.160177][ T5833] Cannot create hsr debugfs directory
[   46.255213][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.273436][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.278235][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.299853][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.323700][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.333297][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.347748][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.356149][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.361780][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.364226][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.367115][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.369434][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.381373][  T751] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.384585][  T751] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.409105][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.413412][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.418609][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.424620][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.489189][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.507325][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   46.513242][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.519535][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.521956][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.525736][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.528141][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.553734][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   46.563369][  T751] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.565694][  T751] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.580966][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.583339][  T751] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.594865][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.618825][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.629143][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.631486][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.648069][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.650489][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.694576][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.714542][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.765551][ T5828] veth0_vlan: entered promiscuous mode
[   46.772817][ T5828] veth1_vlan: entered promiscuous mode
[   46.790490][ T5828] veth0_macvtap: entered promiscuous mode
[   46.794281][ T5828] veth1_macvtap: entered promiscuous mode
[   46.817507][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.821837][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.829250][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.832542][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.841301][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.844201][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.848773][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.851611][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.917129][ T5833] veth0_vlan: entered promiscuous mode
[   46.920052][ T5834] veth0_vlan: entered promiscuous mode
[   46.923214][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.925767][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.938134][ T5834] veth1_vlan: entered promiscuous mode
[   46.941614][ T5833] veth1_vlan: entered promiscuous mode
[   46.960960][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.963564][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.983807][ T5833] veth0_macvtap: entered promiscuous mode
[   46.987935][ T5834] veth0_macvtap: entered promiscuous mode
[   46.991550][ T5833] veth1_macvtap: entered promiscuous mode
[   46.998222][ T5834] veth1_macvtap: entered promiscuous mode
[   47.012911][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.015003][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.020274][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.024950][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.029592][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.038894][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.041947][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.044915][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.048720][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.053170][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.056170][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.060181][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.064306][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.163498][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.166049][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.185108][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.189712][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.210878][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.215469][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.233833][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.238302][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.257510][ T5839] Bluetooth: hci0: command tx timeout
[   47.313968][ T5904] Zero length message leads to an empty skb
[   47.363713][ T5908] netlink: 'syz.2.8': attribute type 2 has an invalid length.
[   47.418700][ T5839] Bluetooth: hci1: command tx timeout
[   47.420630][ T5839] Bluetooth: hci2: command tx timeout
[   47.600226][ T5920] syzkaller0: entered promiscuous mode
[   47.602072][ T5920] syzkaller0: entered allmulticast mode
[   48.357471][ T5936] mac80211_hwsim hwsim6 O3c: renamed from wlan1 (while UP)
[   48.532002][ T5938] syzkaller0: entered promiscuous mode
[   48.533884][ T5938] syzkaller0: entered allmulticast mode
[   48.694689][    C0] hrtimer: interrupt took 52663 ns
[   49.352165][   T54] Bluetooth: hci0: command tx timeout
[   49.506923][   T54] Bluetooth: hci2: command tx timeout
[   49.507034][ T5839] Bluetooth: hci1: command tx timeout
[   49.840501][ T5948] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.844982][ T5951] netlink: 763 bytes leftover after parsing attributes in process `syz.0.26'.
[   49.950831][ T5960] syzkaller0: entered promiscuous mode
[   49.953217][ T5960] syzkaller0: entered allmulticast mode
[   51.416701][ T5839] Bluetooth: hci0: command tx timeout
[   51.427580][ T5982] netlink: 'syz.1.40': attribute type 10 has an invalid length.
[   51.430681][ T5982] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.40'.
[   51.520030][ T5992] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.45'.
[   51.577775][ T5839] Bluetooth: hci2: command tx timeout
[   51.778544][ T5865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.864312][ T5865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.924674][ T5865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.974277][ T5865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.077857][ T5865] bridge_slave_1: left allmulticast mode
[   52.080277][ T5865] bridge_slave_1: left promiscuous mode
[   52.082548][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.088179][ T5865] bridge_slave_0: left allmulticast mode
[   52.090014][ T5865] bridge_slave_0: left promiscuous mode
[   52.091873][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.263157][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.268738][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.272507][ T5865] bond0 (unregistering): Released all slaves
[   52.490473][ T5865] hsr_slave_0: left promiscuous mode
[   52.492896][ T5865] hsr_slave_1: left promiscuous mode
[   52.495139][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.498367][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.501554][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.504089][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.514701][ T5865] veth1_macvtap: left promiscuous mode
[   52.517196][ T5865] veth0_macvtap: left promiscuous mode
[   52.519179][ T5865] veth1_vlan: left promiscuous mode
[   52.521252][ T5865] veth0_vlan: left promiscuous mode
[   52.715060][ T5865] team0 (unregistering): Port device team_slave_1 removed
[   52.733038][ T5865] team0 (unregistering): Port device team_slave_0 removed
[   52.835202][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.846861][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.849895][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.853317][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.858602][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.015325][ T6017] chnl_net:caif_netlink_parms(): no params data found
[   53.059777][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.062175][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.064519][ T6017] bridge_slave_0: entered allmulticast mode
[   53.067536][ T6017] bridge_slave_0: entered promiscuous mode
[   53.071271][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.073672][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.076042][ T6017] bridge_slave_1: entered allmulticast mode
[   53.080125][ T6017] bridge_slave_1: entered promiscuous mode
[   53.101556][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.106019][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.123586][ T6017] team0: Port device team_slave_0 added
[   53.128017][ T6017] team0: Port device team_slave_1 added
[   53.144090][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.146489][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.154795][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.159329][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.161675][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.170185][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.193562][ T6017] hsr_slave_0: entered promiscuous mode
[   53.195893][ T6017] hsr_slave_1: entered promiscuous mode
[   53.262326][ T5865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.298995][ T5865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.309024][ T6017] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   53.313290][ T6017] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   53.317874][ T6017] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   53.322474][ T6017] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   53.389076][ T5865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.473327][ T5839] Bluetooth: hci2: unexpected event 0x18 length: 151 > 23
[   53.477356][ T5865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.497322][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.511366][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.514744][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.518672][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.522199][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.525266][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.531635][ T6017] 8021q: adding VLAN 0 to HW filter on device team0
[   53.542105][  T751] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.544700][  T751] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.560819][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.563210][  T751] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.658040][ T5839] Bluetooth: hci2: command tx timeout
[   53.685253][ T5865] bridge_slave_1: left allmulticast mode
[   53.688439][ T5865] bridge_slave_1: left promiscuous mode
[   53.690383][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.694298][ T5865] bridge_slave_0: left allmulticast mode
[   53.696200][ T5865] bridge_slave_0: left promiscuous mode
[   53.698973][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.853428][ T6057] netlink: 'syz.1.63': attribute type 10 has an invalid length.
[   53.935478][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.940710][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.944507][ T5865] bond0 (unregistering): Released all slaves
[   53.989870][ T6057] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   54.025059][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.104743][ T6017] veth0_vlan: entered promiscuous mode
[   54.153245][ T6064] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.64'.
[   54.156883][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'.
[   54.160082][ T6064] netlink: 125808 bytes leftover after parsing attributes in process `syz.1.64'.
[   54.175270][ T6040] chnl_net:caif_netlink_parms(): no params data found
[   54.184457][ T6017] veth1_vlan: entered promiscuous mode
[   54.253934][ T5865] hsr_slave_0: left promiscuous mode
[   54.257117][ T5865] hsr_slave_1: left promiscuous mode
[   54.259245][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.261685][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.265925][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.268903][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.285382][ T5865] veth1_macvtap: left promiscuous mode
[   54.288507][ T5865] veth0_macvtap: left promiscuous mode
[   54.290645][ T5865] veth1_vlan: left promiscuous mode
[   54.292432][ T5865] veth0_vlan: left promiscuous mode
[   54.500626][ T5865] team0 (unregistering): Port device team_slave_1 removed
[   54.518411][ T5865] team0 (unregistering): Port device team_slave_0 removed
[   54.754433][ T6083] C: renamed from team_slave_0 (while UP)
[   54.758998][ T6083] netlink: 'syz.1.71': attribute type 4 has an invalid length.
[   54.761561][ T6083] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   54.817310][ T6017] veth0_macvtap: entered promiscuous mode
[   54.819802][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.832094][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.842429][ T6040] bridge_slave_0: entered allmulticast mode
[   54.845614][ T6040] bridge_slave_0: entered promiscuous mode
[   54.854002][ T6017] veth1_macvtap: entered promiscuous mode
[   54.859224][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.861898][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.864688][ T6040] bridge_slave_1: entered allmulticast mode
[   54.871319][ T6040] bridge_slave_1: entered promiscuous mode
[   54.910259][ T5839] Bluetooth: hci2: Malformed HCI Event
[   54.922340][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.931366][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.938881][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.946567][ T5839] Bluetooth: hci0: command tx timeout
[   54.972964][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.989113][ T6017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.991946][ T6017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.994741][ T6017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.001674][ T6017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.008025][ T6040] team0: Port device team_slave_0 added
[   55.021240][ T6040] team0: Port device team_slave_1 added
[   55.043929][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.046169][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.054907][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.077137][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.079338][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.088714][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.151371][ T4185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.154734][ T4185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.169204][ T6040] hsr_slave_0: entered promiscuous mode
[   55.171573][ T6040] hsr_slave_1: entered promiscuous mode
[   55.173725][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.177728][ T6040] Cannot create hsr debugfs directory
[   55.209506][ T4185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.212437][ T4185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.295512][ T6040] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   55.303679][ T6040] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   55.316526][ T6040] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   55.320572][ T6040] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   55.370628][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.385537][ T6040] 8021q: adding VLAN 0 to HW filter on device team0
[   55.392790][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.395119][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.410025][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.412819][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.427672][ T6040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.431149][ T6040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.543673][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.589700][ T5839] Bluetooth: hci1: command tx timeout
[   55.690224][ T6040] veth0_vlan: entered promiscuous mode
[   55.696208][ T6040] veth1_vlan: entered promiscuous mode
[   55.719853][ T6040] veth0_macvtap: entered promiscuous mode
[   55.724536][ T6040] veth1_macvtap: entered promiscuous mode
[   55.738294][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.747880][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.753350][ T6040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.758808][ T6040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.761775][ T6040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.764686][ T6040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.819953][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.825694][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.845643][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.848973][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.333820][ T6127] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   56.510770][   T10] cfg80211: failed to load regulatory.db
[   56.611407][ T6146] IPv6: Can't replace route, no match found
[   57.016672][ T5839] Bluetooth: hci0: command tx timeout
[   57.656908][ T5839] Bluetooth: hci1: command tx timeout
[   59.098209][ T5839] Bluetooth: hci0: command tx timeout
[   59.747522][ T5839] Bluetooth: hci1: command tx timeout
[   59.801618][ T6161] syzkaller0: tun_chr_ioctl cmd 2147767507
[   59.888146][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.123472][ T6184] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.106'.
[   60.169577][ T6188] netlink: 201660 bytes leftover after parsing attributes in process `syz.4.109'.
[   60.177075][ T6190] netlink: 'syz.3.108': attribute type 1 has an invalid length.
[   60.180472][ T6190] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.108'.
[   60.395345][ T6214] netlink: 152 bytes leftover after parsing attributes in process `syz.3.120'.
[   60.450241][ T6217] netlink: 'syz.1.122': attribute type 4 has an invalid length.
[   60.452734][ T6217] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.122'.
[   60.466182][ T6216] netlink: 'syz.4.119': attribute type 25 has an invalid length.
[   60.869951][ T6243] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.132'.
[   61.039048][ T6256] netlink: 'syz.1.139': attribute type 17 has an invalid length.
[   61.046722][ T6256] netlink: 'syz.1.139': attribute type 16 has an invalid length.
[   61.049250][ T6256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.139'.
[   61.095997][ T6261] netlink: 14 bytes leftover after parsing attributes in process `syz.1.141'.
[   61.188635][ T5839] Bluetooth: hci0: command tx timeout
[   61.590183][ T6281] netlink: 'syz.1.150': attribute type 21 has an invalid length.
[   61.716644][ T6297] netlink: 'syz.1.159': attribute type 41 has an invalid length.
[   61.747718][ T6300] syz.4.160 uses obsolete (PF_INET,SOCK_PACKET)
[   61.816396][ T5839] Bluetooth: hci1: command tx timeout
[   61.835279][ T6306] delete_channel: no stack
[   62.104620][ T6333] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   62.107192][ T6333] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   62.401338][ T6361] netlink: 'syz.4.191': attribute type 1 has an invalid length.
[   62.403919][ T6361] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.191'.
[   62.571475][ T6377] netlink: 5 bytes leftover after parsing attributes in process `syz.1.198'.
[   62.608227][ T6380] netlink: 'syz.1.200': attribute type 10 has an invalid length.
[   62.614362][ T6380] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   64.426991][ T6434] netlink: 'syz.3.223': attribute type 21 has an invalid length.
[   65.697104][ T6518] validate_nla: 8 callbacks suppressed
[   65.697113][ T6518] netlink: 'syz.3.264': attribute type 21 has an invalid length.
[   66.375602][ T5839] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[   66.450819][ T6539] sctp: [Deprecated]: syz.3.272 (pid 6539) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.450819][ T6539] Use struct sctp_sack_info instead
[   67.056050][ T6588] netlink: 'syz.1.298': attribute type 26 has an invalid length.
[   69.227708][ T6645] __nla_validate_parse: 7 callbacks suppressed
[   69.227766][ T6645] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.323'.
[   69.233180][ T6645] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   69.236107][ T6645] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   69.503711][ T6655] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.327'.
[   69.747819][ T6683] netlink: 'syz.3.341': attribute type 1 has an invalid length.
[   69.772138][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.342'.
[   69.969075][ T5839] Bluetooth: hci2: ACL packet for unknown connection handle 0
[   70.194710][ T6713] netlink: 'syz.3.355': attribute type 12 has an invalid length.
[   70.197478][ T6713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.355'.
[   70.429737][ T6731] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   70.442986][ T6731] netlink: 'syz.1.364': attribute type 3 has an invalid length.
[   70.445613][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.364'.
[   70.609310][ T5839] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[   70.845204][ T6761] netlink: 'syz.4.377': attribute type 64 has an invalid length.
[   70.861869][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.864404][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.366721][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.390'.
[   71.549093][ T6801] netlink: 'syz.1.395': attribute type 10 has an invalid length.
[   71.554632][ T6801] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   71.564643][ T6801] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   71.570753][ T6801] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   71.960610][ T6826] netlink: 'syz.3.407': attribute type 39 has an invalid length.
[   72.176973][ T6843] syzkaller0: tun_chr_ioctl cmd 1074025677
[   72.179166][ T6843] syzkaller0: linktype set to 801
[   73.090878][ T6868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'.
[   73.103154][ T6861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'.
[   73.170621][ T6875] netlink: 'syz.3.430': attribute type 7 has an invalid length.
[   73.586184][ T6889] netlink: 'syz.1.436': attribute type 10 has an invalid length.
[   73.600536][ T6889] bond0: (slave netdevsim0): Releasing backup interface
[   73.605237][ T6889] batman_adv: batadv0: Adding interface: netdevsim0
[   73.610581][ T6889] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.612922][ T6891] netlink: 'syz.3.437': attribute type 1 has an invalid length.
[   73.618891][ T6889] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   73.738430][ T6897] syzkaller0: entered promiscuous mode
[   73.740297][ T6897] syzkaller0: entered allmulticast mode
[   76.017886][ T6968] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.471'.
[   76.472593][ T7019] netlink: 'syz.3.495': attribute type 21 has an invalid length.
[   76.564533][ T5839] Bluetooth: hci2: Malformed LE Event: 0x0d
[   76.573994][ T7031] netlink: 'syz.3.501': attribute type 29 has an invalid length.
[   76.623196][ T7035] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.503'.
[   76.671569][ T7039] netlink: 'syz.3.505': attribute type 1 has an invalid length.
[   76.674170][ T7039] netlink: 17 bytes leftover after parsing attributes in process `syz.3.505'.
[   76.696913][ T5839] Bluetooth: hci2: Malformed LE Event: 0x0d
[   76.708522][ T7043] netlink: 'syz.3.507': attribute type 2 has an invalid length.
[   76.711072][ T7043] netlink: 'syz.3.507': attribute type 1 has an invalid length.
[   76.713692][ T7043] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.507'.
[   76.718113][ T7043] nbd: illegal input index -404748436
[   76.760546][ T7047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.509'.
[   76.850953][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.511'.
[   76.854219][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.511'.
[   76.858739][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.511'.
[   77.024910][ T7072] netlink: zone id is out of range
[   77.027472][ T7072] netlink: zone id is out of range
[   77.029256][ T7072] netlink: zone id is out of range
[   77.031023][ T7072] netlink: zone id is out of range
[   77.032797][ T7072] netlink: zone id is out of range
[   77.035476][ T7072] netlink: zone id is out of range
[   77.045980][ T7072] netlink: zone id is out of range
[   77.049549][ T7072] netlink: zone id is out of range
[   77.051313][ T7072] netlink: zone id is out of range
[   77.053049][ T7072] netlink: zone id is out of range
[   77.116767][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.522'.
[   77.242594][ T7087] netlink: 17 bytes leftover after parsing attributes in process `syz.4.529'.
[   77.286185][ T7089] netlink: 'syz.1.528': attribute type 6 has an invalid length.
[   77.294956][ T7089] netlink: 'syz.1.528': attribute type 7 has an invalid length.
[   77.682539][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[   77.812024][ T7129] tap0: tun_chr_ioctl cmd 2147767517
[   78.614645][ T7141] netlink: 'syz.3.554': attribute type 1 has an invalid length.
[   78.701488][ T7149] can: request_module (can-proto-0) failed.
[   78.756115][ T7153] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[   78.927685][ T7171] netlink: 'syz.4.568': attribute type 22 has an invalid length.
[   79.194061][ T7193] veth0_macvtap: left promiscuous mode
[   79.425918][ T7202] syzkaller0: entered promiscuous mode
[   79.438509][ T7202] syzkaller0: entered allmulticast mode
[   80.470030][ T7206] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[   80.472824][ T7206] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[   80.682946][ T7235] delete_channel: no stack
[   80.685026][ T7235] delete_channel: no stack
[   81.035067][ T7266] __nla_validate_parse: 8 callbacks suppressed
[   81.035078][ T7266] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.611'.
[   81.234047][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'.
[   81.238695][ T7286] dummy0: entered promiscuous mode
[   81.388552][ T7307] IPv6: NLM_F_REPLACE set, but no existing node found!
[   81.394884][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.406301][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.417974][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.420451][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.484095][ T5839] Bluetooth: hci2: ISO packet for unknown connection handle 3849
[   81.749626][ T7352] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.653'.
[   82.041486][ T7376] validate_nla: 7 callbacks suppressed
[   82.041496][ T7376] netlink: 'syz.3.663': attribute type 8 has an invalid length.
[   82.049133][ T7376] netlink: 'syz.3.663': attribute type 9 has an invalid length.
[   82.051620][ T7376] netlink: 'syz.3.663': attribute type 10 has an invalid length.
[   82.054172][ T7376] netlink: 'syz.3.663': attribute type 11 has an invalid length.
[   82.056923][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'.
[   82.173157][ T7388] netlink: 'syz.1.664': attribute type 29 has an invalid length.
[   82.175680][ T7388] netlink: 'syz.1.664': attribute type 3 has an invalid length.
[   82.181143][ T7388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.664'.
[   83.131680][ T7421] netlink: 'syz.1.684': attribute type 21 has an invalid length.
[   83.283293][ T7431] netlink: 'syz.3.689': attribute type 21 has an invalid length.
[   83.285808][ T7431] netlink: 168 bytes leftover after parsing attributes in process `syz.3.689'.
[   83.314683][ T7427] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.687'.
[   83.538708][ T7451] netlink: 'syz.3.699': attribute type 11 has an invalid length.
[   83.542515][ T7451] netlink: 140 bytes leftover after parsing attributes in process `syz.3.699'.
[   83.558779][ T7451] netlink: 14 bytes leftover after parsing attributes in process `syz.3.699'.
[   83.663005][ T7455] : renamed from gre0 (while UP)
[   83.963492][ T7468] netlink: 'syz.1.707': attribute type 21 has an invalid length.
[   83.967914][ T7468] netlink: 128 bytes leftover after parsing attributes in process `syz.1.707'.
[   84.317998][ T7490] bridge0: port 1(bridge_slave_0) entered learning state
[   84.391281][ T5839] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[   85.627553][ T7522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   85.634475][ T7522] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   85.724874][ T7529] raw_sendmsg: syz.4.735 forgot to set AF_INET. Fix it!
[   85.865482][ T7538] tc_dump_action: action bad kind
[   86.499200][ T7568] macvlan0: entered promiscuous mode
[   86.501479][ T7522] syz.3.732 (7522) used greatest stack depth: 19448 bytes left
[   86.504473][ T7568] macvlan0: entered allmulticast mode
[   86.509934][ T7568] veth1_vlan: entered allmulticast mode
[   86.575192][ T7576] __nla_validate_parse: 7 callbacks suppressed
[   86.575201][ T7576] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.757'.
[   86.815334][ T7597] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.766'.
[   86.868491][ T7601] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.768'.
[   87.687415][ T7648] netlink: 132 bytes leftover after parsing attributes in process `syz.3.791'.
[   87.768805][ T7652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.793'.
[   87.998635][ T7688] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.810'.
[   88.139711][ T7702] netlink: 156 bytes leftover after parsing attributes in process `syz.4.816'.
[   88.634532][ T7726] netlink: 176 bytes leftover after parsing attributes in process `syz.3.827'.
[   88.717796][ T7728] validate_nla: 8 callbacks suppressed
[   88.717810][ T7728] netlink: 'syz.3.828': attribute type 10 has an invalid length.
[   88.834929][ T7732] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.829'.
[   89.014760][ T7744] IPv6: NLM_F_REPLACE set, but no existing node found!
[   89.153022][ T5839] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[   89.498910][ T7772] netlink: 'syz.1.848': attribute type 3 has an invalid length.
[   89.501646][ T7772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.848'.
[   89.798268][ T7779] netlink: 'syz.4.851': attribute type 4 has an invalid length.
[   90.238189][ T7789] net_ratelimit: 79 callbacks suppressed
[   90.238202][ T7789] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   90.243420][ T7789] openvswitch: netlink: Duplicate key (type 0).
[   91.663880][ T7884] netlink: 'syz.4.899': attribute type 4 has an invalid length.
[   91.674566][ T7884] netlink: 'syz.4.899': attribute type 16 has an invalid length.
[   91.677667][ T7884] __nla_validate_parse: 5 callbacks suppressed
[   91.677677][ T7884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.899'.
[   91.717807][ T7889] netlink: 'syz.1.901': attribute type 2 has an invalid length.
[   91.720573][ T7889] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.901'.
[   91.755958][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.902'.
[   91.759695][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.902'.
[   91.763179][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.902'.
[   91.789661][ T7895] netlink: 'syz.1.904': attribute type 3 has an invalid length.
[   91.793065][ T7895] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.904'.
[   92.001118][ T7919] veth1_macvtap: left promiscuous mode
[   92.095650][ T7921] netlink: 'syz.3.916': attribute type 4 has an invalid length.
[   92.098578][ T7921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.916'.
[   92.116095][ T7921] : renamed from bond0 (while UP)
[   92.640826][ T7945] lo: entered allmulticast mode
[   92.649260][ T7945] lo: entered promiscuous mode
[   92.651065][ T7945] lo: left allmulticast mode
[   92.990936][ T7976] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.942'.
[   93.009665][ T7979] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.944'.
[   93.067212][ T7988] veth1_vlan: entered allmulticast mode
[   93.091320][ T7992] netlink: 'syz.4.950': attribute type 22 has an invalid length.
[   93.094059][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'.
[   93.158978][ T7998] batadv_slave_1: entered promiscuous mode
[   93.198630][ T8004] netlink: 'syz.3.956': attribute type 21 has an invalid length.
[   94.138568][ T8028] validate_nla: 1 callbacks suppressed
[   94.138579][ T8028] netlink: 'syz.4.967': attribute type 49 has an invalid length.
[   94.295358][ T8045] : renamed from bond0 (while UP)
[   95.324306][ T8089] delete_channel: no stack
[   95.325994][ T8089] delete_channel: no stack
[   96.746073][ T8155] syzkaller0: entered promiscuous mode
[   96.750055][ T8155] syzkaller0: entered allmulticast mode
[   96.752780][ T5699] syzkaller0: tun_net_xmit 48
[   96.762018][ T8155] syzkaller0: tun_chr_ioctl cmd 2147767520
[   96.766099][ T8155] syzkaller0: tun_net_xmit 1280
[   97.513372][ T8176] __nla_validate_parse: 9 callbacks suppressed
[   97.513387][ T8176] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1039'.
[   97.649901][ T8192] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1047'.
[   97.653083][ T8192] netlink: zone id is out of range
[   97.654857][ T8192] netlink: get zone limit has 8 unknown bytes
[   97.849204][ T8213] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1057'.
[   98.088826][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   98.089939][ T8235] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1068'.
[   99.678039][ T8277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1088'.
[   99.762898][ T8284] netlink: 'syz.3.1089': attribute type 10 has an invalid length.
[   99.794928][ T8284] team0: Device hsr_slave_0 failed to register rx_handler
[   99.812089][ T8290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1094'.
[  100.213219][ T8325] netlink: 'syz.4.1111': attribute type 12 has an invalid length.
[  100.215991][ T8325] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.1111'.
[  100.246587][ T8327] netlink: 'syz.4.1112': attribute type 10 has an invalid length.
[  100.250648][ T8327] veth0_vlan: entered allmulticast mode
[  100.302752][ T8327] veth0_vlan: left promiscuous mode
[  100.314383][ T8327] veth0_vlan: entered promiscuous mode
[  100.328810][ T8327] team0: Device veth0_vlan failed to register rx_handler
[  100.394432][ T8327] syz.4.1112 (8327) used greatest stack depth: 18672 bytes left
[  100.514196][ T8334] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1115'.
[  100.983069][ T8360] netlink: 'syz.1.1127': attribute type 21 has an invalid length.
[  101.127750][ T5839] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  101.243544][ T8389] netlink: 'syz.3.1141': attribute type 29 has an invalid length.
[  101.251983][ T8389] netlink: 'syz.3.1141': attribute type 29 has an invalid length.
[  101.272143][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1142'.
[  101.340030][ T8395] syzkaller0: entered promiscuous mode
[  101.341963][ T8395] syzkaller0: entered allmulticast mode
[  101.345161][ T8396] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1143'.
[  102.074714][ T8398] netlink: 'syz.3.1145': attribute type 9 has an invalid length.
[  102.463421][ T8437] bridge_slave_1: left allmulticast mode
[  102.465992][ T8437] bridge_slave_1: left promiscuous mode
[  102.472350][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.632900][ T8437] bridge_slave_0: left allmulticast mode
[  102.635418][ T8437] bridge_slave_0: left promiscuous mode
[  102.681395][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.539960][ T8519] __nla_validate_parse: 3 callbacks suppressed
[  104.539970][ T8519] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1200'.
[  105.187089][ T5839] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  105.190629][ T5839] Bluetooth: hci0: Injecting HCI hardware error event
[  105.194370][   T54] Bluetooth: hci0: hardware error 0x00
[  105.313653][ T8567] netlink: 'syz.4.1221': attribute type 10 has an invalid length.
[  105.577953][ T8595] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1235'.
[  105.607524][ T8598] delete_channel: no stack
[  105.607777][ T8601] netlink: 'syz.3.1238': attribute type 16 has an invalid length.
[  105.612408][ T8601] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1238'.
[  105.679834][ T8606] syzkaller0: entered promiscuous mode
[  105.681772][ T8606] syzkaller0: entered allmulticast mode
[  106.949382][ T8648] netlink: 'syz.3.1259': attribute type 10 has an invalid length.
[  106.955521][ T8648] veth0_macvtap: left promiscuous mode
[  106.983214][ T8648] veth0_macvtap: entered promiscuous mode
[  107.009018][ T8648] team0: Device macvtap0 failed to register rx_handler
[  107.019011][ T8648] veth0_macvtap: left promiscuous mode
[  107.037474][ T8650] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1260'.
[  107.208835][ T8675] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1268'.
[  107.212179][ T8666] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1268'.
[  107.243471][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  107.246794][ T8672] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  107.268362][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  107.396444][ T8693] netlink: 'syz.3.1281': attribute type 16 has an invalid length.
[  107.407316][ T8693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1281'.
[  110.180845][ T8719] syzkaller0: entered promiscuous mode
[  110.182763][ T8719] syzkaller0: entered allmulticast mode
[  111.431493][ T8765] netlink: 'syz.4.1314': attribute type 3 has an invalid length.
[  111.434895][ T8765] netlink: 'syz.4.1314': attribute type 2 has an invalid length.
[  111.441247][ T8765] netlink: 198000 bytes leftover after parsing attributes in process `syz.4.1314'.
[  111.544352][ T8779] netlink: 65019 bytes leftover after parsing attributes in process `syz.4.1321'.
[  112.589396][ T8790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1326'.
[  112.942498][ T8845] veth1_macvtap: left promiscuous mode
[  112.944407][ T8845] macsec0: entered promiscuous mode
[  113.356557][ T8855] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  113.359056][ T8855] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  113.362683][ T8855] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1357'.
[  113.366654][ T8859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1359'.
[  113.387168][ T8860] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1359'.
[  113.416328][ T8861] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1359'.
[  113.447330][ T8867] netlink: 731 bytes leftover after parsing attributes in process `syz.1.1362'.
[  113.966047][ T8902] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.1379'.
[  113.969670][ T8902] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1379'.
[  114.129135][ T8918] netlink: 'syz.3.1386': attribute type 25 has an invalid length.
[  114.259163][ T8926] netlink: 'syz.3.1390': attribute type 10 has an invalid length.
[  114.597293][ T8938] netlink: 'syz.1.1396': attribute type 4 has an invalid length.
[  114.693573][ T8930] netlink: 'syz.4.1392': attribute type 28 has an invalid length.
[  114.698455][ T8938] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  115.469317][ T8994] netlink: 'syz.3.1421': attribute type 1 has an invalid length.
[  116.220590][ T9047] netlink: 'syz.1.1446': attribute type 16 has an invalid length.
[  116.273808][ T9055] netlink: 'syz.4.1449': attribute type 6 has an invalid length.
[  116.858227][ T9076] __nla_validate_parse: 8 callbacks suppressed
[  116.858236][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'.
[  116.962503][ T9090] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1467'.
[  117.228134][ T9110] netlink: 'syz.1.1476': attribute type 5 has an invalid length.
[  117.347745][ T9116] netlink: 'syz.1.1479': attribute type 3 has an invalid length.
[  117.350496][ T9116] netlink: 'syz.1.1479': attribute type 1 has an invalid length.
[  118.009381][ T9149] netlink: 'syz.3.1494': attribute type 4 has an invalid length.
[  118.633453][ T9168] netlink: 'syz.3.1503': attribute type 5 has an invalid length.
[  118.636110][ T9168] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1503'.
[  118.765596][ T9182] netlink: 'syz.3.1510': attribute type 4 has an invalid length.
[  118.770037][ T9182] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1510'.
[  118.773271][ T9182] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1510'.
[  119.102018][ T9222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1528'.
[  119.437906][ T9233] netlink: 'syz.3.1532': attribute type 10 has an invalid length.
[  119.440678][ T9233] netlink: 'syz.3.1532': attribute type 19 has an invalid length.
[  119.443454][ T9233] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1532'.
[  119.767714][ T9254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1542'.
[  119.872141][ T9258] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1544'.
[  120.064561][ T9272] netlink: 'syz.1.1550': attribute type 10 has an invalid length.
[  120.072790][ T9272] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1550'.
[  120.525638][ T9300] netlink: 'syz.3.1563': attribute type 21 has an invalid length.
[  120.631369][ T9308] netlink: zone id is out of range
[  120.634842][ T9308] netlink: zone id is out of range
[  120.638191][ T9308] netlink: zone id is out of range
[  120.640182][ T9308] netlink: zone id is out of range
[  120.642084][ T9308] netlink: zone id is out of range
[  120.644010][ T9308] netlink: zone id is out of range
[  120.645917][ T9308] netlink: zone id is out of range
[  120.652393][ T9308] netlink: zone id is out of range
[  120.654404][ T9308] netlink: zone id is out of range
[  120.657301][ T9308] netlink: zone id is out of range
[  120.870508][   T54] Bluetooth: hci1: ISO packet too small
[  122.309897][ T9364] __nla_validate_parse: 2 callbacks suppressed
[  122.309907][ T9364] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1593'.
[  122.511676][ T9380] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1599'.
[  122.542628][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  122.556787][ T9385] netlink: 'syz.3.1599': attribute type 10 has an invalid length.
[  122.562025][ T9385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1599'.
[  122.565122][ T9385] team0: entered promiscuous mode
[  122.567380][ T9385] team_slave_0: entered promiscuous mode
[  122.569598][ T9385] team_slave_1: entered promiscuous mode
[  122.572252][ T9385] team0: entered allmulticast mode
[  122.574044][ T9385] team_slave_0: entered allmulticast mode
[  122.576039][ T9385] team_slave_1: entered allmulticast mode
[  122.582869][ T9385] bridge0: port 3(team0) entered blocking state
[  122.585295][ T9385] bridge0: port 3(team0) entered disabled state
[  122.592048][ T9385] bridge0: port 3(team0) entered blocking state
[  122.594434][ T9385] bridge0: port 3(team0) entered forwarding state
[  123.025393][ T9394] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.1604'.
[  123.592348][ T9421] ref_ctr_offset mismatch. inode: 0x90c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  123.600103][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1614'.
[  123.603412][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1614'.
[  123.914191][ T9443] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1626'.
[  123.943379][ T9449] netlink: 'syz.4.1629': attribute type 29 has an invalid length.
[  123.946933][ T9449] netlink: 'syz.4.1629': attribute type 29 has an invalid length.
[  123.949951][ T9449] netlink: 'syz.4.1629': attribute type 29 has an invalid length.
[  123.953280][ T9449] netlink: 'syz.4.1629': attribute type 29 has an invalid length.
[  124.108265][ T9472] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1640'.
[  124.867537][ T9525] netlink: 'syz.3.1665': attribute type 21 has an invalid length.
[  124.870241][ T9525] netlink: 'syz.3.1665': attribute type 1 has an invalid length.
[  124.872903][ T9525] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1665'.
[  125.420875][ T9544] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1674'.
[  125.459995][ T9546] sit0: entered allmulticast mode
[  125.503512][ T9550] netlink: 'syz.3.1677': attribute type 1 has an invalid length.
[  126.259344][ T9608] netlink: 'syz.3.1703': attribute type 6 has an invalid length.
[  126.775291][ T9613] net_ratelimit: 74 callbacks suppressed
[  126.775302][ T9613] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  126.779668][ T9613] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  126.869995][ T9624] netlink: 'syz.1.1711': attribute type 27 has an invalid length.
[  127.450956][ T9637] __nla_validate_parse: 4 callbacks suppressed
[  127.450965][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'.
[  127.529680][ T9643] veth0_vlan: left promiscuous mode
[  127.534894][ T9643] veth0_vlan: entered promiscuous mode
[  127.934564][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  127.994743][ T9685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1739'.
[  128.155490][ T9698] validate_nla: 1 callbacks suppressed
[  128.155499][ T9698] netlink: 'syz.1.1745': attribute type 3 has an invalid length.
[  128.161839][ T9698] netlink: 'syz.1.1745': attribute type 4 has an invalid length.
[  128.164610][ T9698] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.1745'.
[  128.229457][ T9706] netlink: 'syz.1.1749': attribute type 10 has an invalid length.
[  128.382652][ T9710] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1751'.
[  128.630496][ T9725] netlink: 'syz.3.1757': attribute type 17 has an invalid length.
[  128.633143][ T9725] netlink: 'syz.3.1757': attribute type 16 has an invalid length.
[  128.634724][ T9727] netlink: 'syz.1.1756': attribute type 21 has an invalid length.
[  128.635757][ T9725] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1757'.
[  128.950712][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.953549][ T9759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.957874][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.960390][ T9759] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.121658][ T9766] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1775'.
[  129.565405][ T9780] netlink: 'syz.3.1782': attribute type 10 has an invalid length.
[  129.842210][ T9780] bridge0: port 3(team0) entered disabled state
[  129.844466][ T9780] team0: left allmulticast mode
[  129.846972][ T9780] team_slave_0: left allmulticast mode
[  129.848930][ T9780] team_slave_1: left allmulticast mode
[  129.850876][ T9780] team0: left promiscuous mode
[  129.852612][ T9780] team_slave_0: left promiscuous mode
[  129.854627][ T9780] team_slave_1: left promiscuous mode
[  129.856875][ T9780] bridge0: port 3(team0) entered disabled state
[  130.006382][ T9794] netlink: 'syz.1.1789': attribute type 2 has an invalid length.
[  130.227568][ T9801] netlink: 'syz.3.1792': attribute type 29 has an invalid length.
[  130.230657][ T9801] netlink: 'syz.3.1792': attribute type 29 has an invalid length.
[  130.484815][ T9832] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1801'.
[  130.673561][ T9853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1807'.
[  130.817155][ T9871] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1812'.
[  131.321961][ T9927] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1817'.
[  131.333627][ T9925] bond0: (slave bond_slave_0): Releasing backup interface
[  131.380833][ T9929] geneve0: entered promiscuous mode
[  131.442344][ T9929] : (slave geneve0): Enslaving as an active interface with an up link
[  132.956897][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.959052][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  133.529418][ T9985] validate_nla: 9 callbacks suppressed
[  133.529429][ T9985] netlink: 'syz.3.1844': attribute type 39 has an invalid length.
[  133.632998][ T5839] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  133.798939][T10020] bridge_slave_1: left allmulticast mode
[  133.800875][T10020] bridge_slave_1: left promiscuous mode
[  133.802870][T10020] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.806877][T10020] bridge_slave_0: left allmulticast mode
[  133.810123][T10020] bridge_slave_0: left promiscuous mode
[  133.812213][T10020] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.940339][T10034] netlink: 'syz.3.1867': attribute type 21 has an invalid length.
[  133.943177][T10034] netlink: 'syz.3.1867': attribute type 20 has an invalid length.
[  133.964849][T10036] net veth1_virt_wifi : renamed from virt_wifi0
[  134.038818][T10048] netlink: 'syz.4.1874': attribute type 2 has an invalid length.
[  134.041513][T10048] __nla_validate_parse: 3 callbacks suppressed
[  134.041520][T10048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1874'.
[  134.128215][T10058] netlink: 271 bytes leftover after parsing attributes in process `syz.3.1879'.
[  134.992395][T10072] netlink: 'syz.4.1885': attribute type 2 has an invalid length.
[  135.045736][T10075] delete_channel: no stack
[  135.078796][T10078] netlink: 'syz.3.1888': attribute type 29 has an invalid length.
[  135.089535][T10078] netlink: 'syz.3.1888': attribute type 29 has an invalid length.
[  135.154444][T10084] netlink: 'syz.4.1890': attribute type 41 has an invalid length.
[  135.302488][T10098] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1898'.
[  135.328648][T10101] ksmbd: Unknown IPC event: 1, ignore.
[  135.614335][T10115] netlink: 'syz.1.1905': attribute type 10 has an invalid length.
[  135.642104][T10119] 0: renamed from bond_slave_1 (while UP)
[  135.753653][T10128] netlink: 'syz.1.1912': attribute type 1 has an invalid length.
[  135.776205][T10128] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1912'.
[  135.987817][T10137] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1915'.
[  136.264791][ T5839] Bluetooth: hci2: unknown advertising packet type: 0x0c
[  136.279577][T10169] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1928'.
[  136.675198][T10200] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1942'.
[  138.230869][T10217] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1950'.
[  138.517842][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1958'.
[  138.526851][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1958'.
[  138.560512][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.563678][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.566928][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.570308][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.573419][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.574607][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  138.580793][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  138.585754][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  138.592416][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  138.595350][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  138.654946][T10233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.660209][T10233] bond0 (unregistering): Released all slaves
[  138.838078][T10228] chnl_net:caif_netlink_parms(): no params data found
[  138.884160][T10231] chnl_net:caif_netlink_parms(): no params data found
[  138.959345][T10228] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.961816][T10228] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.964233][T10228] bridge_slave_0: entered allmulticast mode
[  138.976116][T10228] bridge_slave_0: entered promiscuous mode
[  138.990574][T10228] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.993436][T10228] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.995870][T10228] bridge_slave_1: entered allmulticast mode
[  139.000684][T10228] bridge_slave_1: entered promiscuous mode
[  139.016698][T10231] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.019331][T10231] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.021782][T10231] bridge_slave_0: entered allmulticast mode
[  139.024577][T10231] bridge_slave_0: entered promiscuous mode
[  139.036098][T10231] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.038823][T10231] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.041413][T10231] bridge_slave_1: entered allmulticast mode
[  139.044539][T10231] bridge_slave_1: entered promiscuous mode
[  139.056196][T10228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.061538][T10228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.102193][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.113617][T10228] team0: Port device team_slave_0 added
[  139.117394][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.123736][T10228] team0: Port device team_slave_1 added
[  139.177058][T10228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.179439][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.189965][T10228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.195538][T10231] team0: Port device team_slave_0 added
[  139.199546][T10231] team0: Port device team_slave_1 added
[  139.215465][T10228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.218195][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.227517][T10228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.240607][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.242985][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.252239][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.271394][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.273774][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.282740][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.300145][T10228] hsr_slave_0: entered promiscuous mode
[  139.302679][T10228] hsr_slave_1: entered promiscuous mode
[  139.304872][T10228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.307827][T10228] Cannot create hsr debugfs directory
[  139.353814][T10231] hsr_slave_0: entered promiscuous mode
[  139.356174][T10231] hsr_slave_1: entered promiscuous mode
[  139.360233][T10231] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.362785][T10231] Cannot create hsr debugfs directory
[  139.514735][T10231] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  139.521903][T10231] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  139.526072][T10231] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  139.549075][T10231] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  139.591477][T10228] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  139.602200][T10228] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  139.611267][T10228] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  139.620902][ T5220] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[  139.620939][T10228] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  139.660171][T10231] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.674990][T10231] 8021q: adding VLAN 0 to HW filter on device team0
[  139.688036][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.690402][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.701867][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.704312][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.762683][T10228] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.767795][T10231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.788566][T10228] 8021q: adding VLAN 0 to HW filter on device team0
[  139.793562][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.795863][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.807501][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.809917][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.889212][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.979623][T10228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.051591][T10231] veth0_vlan: entered promiscuous mode
[  140.064597][T10231] veth1_vlan: entered promiscuous mode
[  140.079040][T10231] veth0_macvtap: entered promiscuous mode
[  140.084303][T10231] veth1_macvtap: entered promiscuous mode
[  140.093454][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.125381][T10231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.131467][T10231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.134369][T10231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.137640][T10231] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.140570][T10231] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.217461][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.218491][T10228] veth0_vlan: entered promiscuous mode
[  140.220128][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.224877][T10228] veth1_vlan: entered promiscuous mode
[  140.245636][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.254497][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.257587][T10228] veth0_macvtap: entered promiscuous mode
[  140.268049][T10228] veth1_macvtap: entered promiscuous mode
[  140.280995][T10228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.286479][T10228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.291549][T10228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.294465][T10228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.303973][T10228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.307454][T10228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.388357][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.391037][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.439503][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.446941][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.616851][ T5220] Bluetooth: hci1: command tx timeout
[  140.626828][   T54] Bluetooth: hci0: command tx timeout
[  140.628076][ T5220] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  140.736379][T10357] syzkaller0: entered promiscuous mode
[  140.744999][T10357] syzkaller0: entered allmulticast mode
[  140.762108][T10363] validate_nla: 3 callbacks suppressed
[  140.762117][T10363] netlink: 'syz.5.1997': attribute type 10 has an invalid length.
[  140.780471][T10363] macvlan0: entered promiscuous mode
[  140.783828][T10363] macvlan0: entered allmulticast mode
[  140.788307][T10363] veth1_vlan: entered allmulticast mode
[  140.792522][T10363] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  140.839125][T10365] __nla_validate_parse: 3 callbacks suppressed
[  140.839135][T10365] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1999'.
[  140.961126][T10380] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2005'.
[  141.064734][T10391] netlink: 'syz.6.2011': attribute type 21 has an invalid length.
[  141.282032][ T5220] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  141.282050][ T5220] Bluetooth: unknown link type 128
[  141.795434][ T5220] Bluetooth: hci1: Malformed LE Event: 0x0b
[  141.831234][T10456] netlink: 'syz.5.2041': attribute type 27 has an invalid length.
[  141.836810][T10456] netlink: 'syz.5.2041': attribute type 3 has an invalid length.
[  141.839489][T10456] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2041'.
[  142.256748][T10470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.696507][ T5220] Bluetooth: hci2: command tx timeout
[  142.698408][ T5220] Bluetooth: hci1: command tx timeout
[  142.855507][   T54] Bluetooth: hci0: command tx timeout
[  143.573851][T10481] syzkaller1: tun_chr_ioctl cmd 1074025677
[  143.576020][T10481] syzkaller1: linktype set to 804
[  143.682496][T10493] netlink: 40227 bytes leftover after parsing attributes in process `syz.6.2058'.
[  143.696485][   T54] Bluetooth: hci0: Unable to find connection for big 0x00
[  144.146880][T10529] netlink: 'syz.5.2074': attribute type 1 has an invalid length.
[  144.374245][T10546] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2082'.
[  144.381678][T10546] netlink: zone id is out of range
[  144.384191][T10546] netlink: get zone limit has 8 unknown bytes
[  144.390507][T10546] netlink: 'syz.1.2082': attribute type 10 has an invalid length.
[  144.393556][T10546] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2082'.
[  144.614226][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2085'.
[  144.778457][   T54] Bluetooth: hci1: command tx timeout
[  144.821384][T10569] netlink: 'syz.1.2093': attribute type 27 has an invalid length.
[  144.828254][T10569] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2093'.
[  144.882387][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'.
[  144.885660][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'.
[  144.889761][T10575] bridge_slave_0: entered allmulticast mode
[  144.936933][   T54] Bluetooth: hci0: command tx timeout
[  145.571907][T10621] netlink: 'syz.1.2117': attribute type 10 has an invalid length.
[  145.580729][T10621] veth1_macvtap: left promiscuous mode
[  145.937758][T10666] netlink: 'syz.5.2140': attribute type 21 has an invalid length.
[  145.945192][T10666] __nla_validate_parse: 7 callbacks suppressed
[  145.945200][T10666] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2140'.
[  145.951158][T10666] netlink: 'syz.5.2140': attribute type 3 has an invalid length.
[  145.955313][T10666] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2140'.
[  146.061933][T10674] netlink: 'syz.5.2143': attribute type 21 has an invalid length.
[  146.493349][T10710] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2159'.
[  146.649245][T10728] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2167'.
[  146.857736][   T54] Bluetooth: hci1: command tx timeout
[  147.016951][   T54] Bluetooth: hci0: command tx timeout
[  147.042199][T10771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.937631][   T54] Bluetooth: hci1: command tx timeout
[  149.728371][T10853] netlink: 'syz.6.2225': attribute type 10 has an invalid length.
[  149.731050][T10853] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2225'.
[  149.777072][T10857] netlink: 'syz.1.2227': attribute type 10 has an invalid length.
[  149.788106][T10857] batman_adv: batadv0: Adding interface: team0
[  149.790229][T10857] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.799677][T10857] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  149.803306][T10863] netlink: 'syz.5.2230': attribute type 29 has an invalid length.
[  149.811968][T10863] netlink: 'syz.5.2230': attribute type 29 has an invalid length.
[  149.816115][T10863] netlink: 'syz.5.2230': attribute type 29 has an invalid length.
[  149.824565][T10863] netlink: 'syz.5.2230': attribute type 29 has an invalid length.
[  149.852616][T10869] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.2233'.
[  150.036205][   T54] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5
[  150.480612][T10900] netlink: 'syz.1.2246': attribute type 10 has an invalid length.
[  150.485739][T10900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2246'.
[  150.936860][T10900] ipvlan1: entered promiscuous mode
[  150.940432][T10900] ipvlan1: entered allmulticast mode
[  150.942422][T10900] veth0_vlan: entered allmulticast mode
[  150.945776][T10900] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  150.955329][T10907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  150.959797][T10907] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  151.105917][T10917] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2251'.
[  151.110578][T10912] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2251'.
[  151.114158][T10917] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2251'.
[  151.159019][T10921] netlink: 'syz.6.2255': attribute type 10 has an invalid length.
[  151.161815][T10921] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2255'.
[  151.365570][T10940] netlink: 'syz.6.2264': attribute type 11 has an invalid length.
[  151.370346][T10940] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2264'.
[  151.603432][T10939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.663792][T10949] netlink: 'syz.6.2269': attribute type 10 has an invalid length.
[  151.672154][   T54] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  151.882581][ T5220] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  151.943160][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.947371][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.950649][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.954027][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.957271][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.960627][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.964045][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.967211][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  151.970314][T10969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  152.898542][T11001] netlink: 'syz.5.2292': attribute type 21 has an invalid length.
[  152.901752][T11001] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2292'.
[  153.034832][T11019] netlink: 'syz.5.2300': attribute type 33 has an invalid length.
[  153.039864][T11019] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2300'.
[  153.280915][T11039] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2311'.
[  153.439712][T11053] netlink: 'syz.5.2318': attribute type 21 has an invalid length.
[  153.442380][T11053] netlink: 'syz.5.2318': attribute type 6 has an invalid length.
[  153.444988][T11053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2318'.
[  153.456727][T11055] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2314'.
[  153.604238][T11068] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  153.737400][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  153.771798][T11071] sctp: [Deprecated]: syz.5.2325 (pid 11071) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.771798][T11071] Use struct sctp_sack_info instead
[  153.896544][   T54] Bluetooth: hci1: command tx timeout
[  154.381812][T11109] IPv6: NLM_F_CREATE should be specified when creating new route
[  154.431545][T11107] netlink: 'syz.5.2341': attribute type 3 has an invalid length.
[  155.122299][T11151] netlink: 'syz.5.2362': attribute type 2 has an invalid length.
[  155.125042][T11151] nbd: must specify a device to reconfigure
[  155.287396][   T54] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  155.337021][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  156.080670][T11182] netlink: 'syz.1.2376': attribute type 1 has an invalid length.
[  157.487090][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  161.867673][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3577199446 wd_nsec: 3577199584
[  170.216449][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  173.570247][ T5220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.573961][ T5220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.577224][ T5220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.581057][ T5220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.584263][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.702697][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.714187][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.718302][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.722223][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.725977][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.860357][T11227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.864199][T11227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.868052][T11227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.871942][T11227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.875428][T11227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.745614][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  193.747964][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  234.921228][T11234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  234.926615][T11234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  234.930123][T11234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  234.939793][T11234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  234.943601][T11234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.132104][T11238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.140000][T11238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.143017][T11238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.151277][T11238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  235.162905][T11240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  235.261770][T11240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  235.272548][T11240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  235.275695][T11240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  235.279935][T11240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  235.283417][T11240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  255.187085][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  255.189357][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  261.556239][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  261.558486][    C0] rcu: 	0-....: (10486 ticks this GP) idle=b46c/1/0x4000000000000000 softirq=38029/38034 fqs=5242
[  261.563423][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  261.565546][    C0] rcu: 	 number:   699523          0            0
[  261.567653][    C0] rcu: 	cputime:    32799      19699          137   ==> 52500(ms)
[  261.570194][    C0] rcu: 	(t=10501 jiffies g=25429 q=2461 ncpus=2)
[  261.572289][    C0] CPU: 0 UID: 0 PID: 11212 Comm: syz.5.2387 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  261.572298][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.572303][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  261.572318][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  261.572324][    C0] RSP: 0018:ffffc90000007400 EFLAGS: 00000206
[  261.572331][    C0] RAX: 2fe099c28e016a00 RBX: 1ffff92000000e88 RCX: 2fe099c28e016a00
[  261.572335][    C0] RDX: 0000000000000002 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  261.572340][    C0] RBP: ffffc900000074f8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  261.572344][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  261.572349][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  261.572353][    C0] FS:  00007fe2139f66c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  261.572358][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  261.572362][    C0] CR2: 0000000100000001 CR3: 000000011c860000 CR4: 00000000000006f0
[  261.572388][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  261.572394][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  261.572397][    C0] Call Trace:
[  261.572402][    C0]  <IRQ>
[  261.572409][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  261.572428][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  261.572446][    C0]  ? unwind_next_frame+0xa5/0x2390
[  261.572475][    C0]  __rcu_read_unlock+0x84/0xe0
[  261.572490][    C0]  ? unwind_next_frame+0xa5/0x2390
[  261.572496][    C0]  unwind_next_frame+0x19ae/0x2390
[  261.572518][    C0]  ? unwind_next_frame+0xa5/0x2390
[  261.572529][    C0]  ? __sys_socketpair+0x1c5/0x560
[  261.572560][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  261.572577][    C0]  arch_stack_walk+0x11c/0x150
[  261.572606][    C0]  ? __x64_sys_socketpair+0x9b/0xb0
[  261.572636][    C0]  stack_trace_save+0x9c/0xe0
[  261.572655][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  261.572676][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  261.572684][    C0]  ? sched_clock+0x3f/0x60
[  261.572696][    C0]  ? sched_clock_cpu+0x74/0x430
[  261.572713][    C0]  kasan_save_track+0x3e/0x80
[  261.572724][    C0]  ? kasan_save_track+0x3e/0x80
[  261.572733][    C0]  ? kasan_save_free_info+0x46/0x50
[  261.572741][    C0]  ? __kasan_slab_free+0x62/0x70
[  261.572746][    C0]  ? kmem_cache_free+0x18f/0x400
[  261.572753][    C0]  ? skb_release_data+0x62d/0x7c0
[  261.572759][    C0]  ? __kfree_skb+0x55/0x70
[  261.572765][    C0]  ? tcp_write_queue_purge+0x143/0x2f0
[  261.572775][    C0]  ? tcp_done_with_error+0x43/0xd0
[  261.572783][    C0]  ? tcp_write_timer_handler+0x6ec/0x9b0
[  261.572791][    C0]  ? tcp_write_timer+0x162/0x2e0
[  261.572799][    C0]  ? call_timer_fn+0x17e/0x5f0
[  261.572805][    C0]  ? __run_timer_base+0x61a/0x860
[  261.572813][    C0]  ? run_timer_softirq+0xb7/0x180
[  261.572822][    C0]  ? handle_softirqs+0x286/0x870
[  261.572829][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  261.572835][    C0]  ? irq_exit_rcu+0x9/0x30
[  261.572841][    C0]  ? sysvec_irq_work+0xa3/0xc0
[  261.572847][    C0]  ? asm_sysvec_irq_work+0x1a/0x20
[  261.572853][    C0]  ? preempt_schedule_irq+0xb0/0x150
[  261.572861][    C0]  ? irqentry_exit+0x6f/0x90
[  261.572870][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  261.572877][    C0]  ? put_cpu_partial+0x1b4/0x250
[  261.572884][    C0]  ? __slab_free+0x2f7/0x400
[  261.572891][    C0]  ? qlist_free_all+0x97/0x140
[  261.572900][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[  261.572908][    C0]  ? __kasan_slab_alloc+0x22/0x80
[  261.572914][    C0]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  261.572919][    C0]  ? sk_prot_alloc+0x57/0x220
[  261.572925][    C0]  ? sk_alloc+0x3a/0x370
[  261.572930][    C0]  ? unix_create1+0xb0/0x7c0
[  261.572940][    C0]  ? unix_create+0x154/0x200
[  261.572948][    C0]  ? __sock_create+0x4b3/0x9f0
[  261.572956][    C0]  ? __sys_socketpair+0x1c5/0x560
[  261.573020][    C0]  ? skb_release_data+0x62d/0x7c0
[  261.573028][    C0]  kasan_save_free_info+0x46/0x50
[  261.573038][    C0]  __kasan_slab_free+0x62/0x70
[  261.573048][    C0]  kmem_cache_free+0x18f/0x400
[  261.573068][    C0]  skb_release_data+0x62d/0x7c0
[  261.573098][    C0]  __kfree_skb+0x55/0x70
[  261.573108][    C0]  tcp_write_queue_purge+0x143/0x2f0
[  261.573134][    C0]  tcp_done_with_error+0x43/0xd0
[  261.573149][    C0]  tcp_write_timer_handler+0x6ec/0x9b0
[  261.573173][    C0]  tcp_write_timer+0x162/0x2e0
[  261.573228][    C0]  call_timer_fn+0x17e/0x5f0
[  261.573236][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  261.573245][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.573252][    C0]  ? call_timer_fn+0xbe/0x5f0
[  261.573260][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  261.573293][    C0]  ? __pfx_tcp_write_timer+0x10/0x10
[  261.573309][    C0]  __run_timer_base+0x61a/0x860
[  261.573318][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  261.573359][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  261.573405][    C0]  run_timer_softirq+0xb7/0x180
[  261.573419][    C0]  handle_softirqs+0x286/0x870
[  261.573437][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  261.573459][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  261.573467][    C0]  ? irq_work_single+0x1ac/0x240
[  261.573484][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  261.573501][    C0]  __irq_exit_rcu+0xca/0x1f0
[  261.573512][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  261.573531][    C0]  ? rcu_is_watching+0x15/0xb0
[  261.573546][    C0]  irq_exit_rcu+0x9/0x30
[  261.573553][    C0]  sysvec_irq_work+0xa3/0xc0
[  261.573562][    C0]  </IRQ>
[  261.573564][    C0]  <TASK>
[  261.573569][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  261.573577][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  261.573586][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  261.573591][    C0] RSP: 0018:ffffc900029bf960 EFLAGS: 00000286
[  261.573597][    C0] RAX: 2fe099c28e016a00 RBX: 0000000000000000 RCX: 2fe099c28e016a00
[  261.573601][    C0] RDX: 0000000000000007 RSI: ffffffff8d998701 RDI: 0000000000000001
[  261.573605][    C0] RBP: ffffc900029bfa10 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  261.573609][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  261.573613][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000537f2c
[  261.573659][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  261.573689][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  261.573702][    C0]  irqentry_exit+0x6f/0x90
[  261.573711][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  261.573718][    C0] RIP: 0010:put_cpu_partial+0x1b4/0x250
[  261.573726][    C0] Code: 85 b5 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 6c 58 09 cc e8 38 92 55 09 f7 c5 00 02 00 00 74 bc fb 4d 85 e4 <75> bb eb c4 90 e8 c2 04 a5 02 85 c0 74 22 83 3d 2b 23 89 0d 00 75
[  261.573731][    C0] RSP: 0018:ffffc900029bfad0 EFLAGS: 00000246
[  261.573736][    C0] RAX: 2fe099c28e016a00 RBX: ffff88801b68f640 RCX: 2fe099c28e016a00
[  261.573740][    C0] RDX: 0000000000000007 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  261.573744][    C0] RBP: 0000000000000282 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  261.573748][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
[  261.573752][    C0] R13: 0000000000000000 R14: ffff888108039cc0 R15: ffff88804b040960
[  261.573790][    C0]  ? put_cpu_partial+0x6d/0x250
[  261.573809][    C0]  __slab_free+0x2f7/0x400
[  261.573827][    C0]  ? __phys_addr+0xd3/0x180
[  261.573847][    C0]  qlist_free_all+0x97/0x140
[  261.573868][    C0]  kasan_quarantine_reduce+0x148/0x160
[  261.573886][    C0]  __kasan_slab_alloc+0x22/0x80
[  261.573899][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  261.573907][    C0]  ? sk_prot_alloc+0x57/0x220
[  261.573925][    C0]  sk_prot_alloc+0x57/0x220
[  261.573932][    C0]  ? sk_alloc+0x24/0x370
[  261.573947][    C0]  sk_alloc+0x3a/0x370
[  261.573967][    C0]  unix_create1+0xb0/0x7c0
[  261.573997][    C0]  unix_create+0x154/0x200
[  261.574018][    C0]  __sock_create+0x4b3/0x9f0
[  261.574050][    C0]  __sys_socketpair+0x1c5/0x560
[  261.574078][    C0]  __x64_sys_socketpair+0x9b/0xb0
[  261.574095][    C0]  do_syscall_64+0xfa/0x3b0
[  261.574109][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.574115][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  261.574132][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.574139][    C0] RIP: 0033:0x7fe215b8eb69
[  261.574149][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.574154][    C0] RSP: 002b:00007fe2139f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  261.574161][    C0] RAX: ffffffffffffffda RBX: 00007fe215db6080 RCX: 00007fe215b8eb69
[  261.574165][    C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
[  261.574168][    C0] RBP: 00007fe215c11df1 R08: 0000000000000000 R09: 0000000000000000
[  261.574172][    C0] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  261.574197][    C0] R13: 0000000000000000 R14: 00007fe215db6080 R15: 00007ffda30dac08
[  261.574235][    C0]  </TASK>
[  261.865072][    C0] sched: DL replenish lagged too much
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
12:41:01  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006730
R8 =ffff888108d80237 R9 =1ffff110211b0046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b0 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe2139f66c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000100000001 CR3=000000011c860000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1fec412f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8e144440 RCX=ffffffff8b71260c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8e144440 RBP=ffffc9000305f418 RSP=ffffc9000305f320
R8 =ffffffff8e144443 R9 =1ffffffff1c28888 R10=dffffc0000000000 R11=fffffbfff1c28889
R12=1ffff9200060be6c R13=0000000000000001 R14=ffffc9000305f380 R15=1ffffffff1c28888
RIP=ffffffff8b7125ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f51a2c68c5a CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f51a4f87d20
XMM02=0012d0030000003d 900012d000000000 XMM03=030003a2b0809000 12d0030012a88090
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000003bf12
XMM06=d00300100013c003 000800130000003f XMM07=0013b00300000000 a00308a010001390
XMM08=0300100013800300 100012f00000003e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
