last executing test programs:

4.290547018s ago: executing program 0 (id=1317):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

4.28643455s ago: executing program 1 (id=1318):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x828, 0x4, 0x0, 0x1, 0x9, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102)

4.201785568s ago: executing program 1 (id=1320):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)='}', 0x1}], 0x1}, 0xfffe)

4.20011301s ago: executing program 0 (id=1322):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1c00000013006bcc9e3be35ce217aa31076b876c1d0000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4)

4.199732977s ago: executing program 1 (id=1323):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

4.13312136s ago: executing program 0 (id=1325):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7ffbd, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1800}, 0x50)

4.132767363s ago: executing program 0 (id=1327):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4084)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1807fffffffffffc000000000000000018000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000001c0)=""/169, 0xa9}, {0x0}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000000280)=""/13, 0xd}], 0x5}, 0x12100)
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

4.132544416s ago: executing program 1 (id=1328):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xe7b8d9c5b5d01a1f]}}, 0x0, 0x2d, 0x0, 0x6}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190059"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r1}, 0x38)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

4.002820296s ago: executing program 0 (id=1330):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

3.863189267s ago: executing program 0 (id=1331):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
close(r0)

3.757650704s ago: executing program 32 (id=1331):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
close(r0)

3.33616233s ago: executing program 1 (id=1333):
socketpair(0x29, 0x5, 0x0, &(0x7f0000000580))

2.938460112s ago: executing program 1 (id=1334):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18)
socketpair(0x3, 0x1, 0x8, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x100000001, 0x82e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080))

2.938202224s ago: executing program 33 (id=1334):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18)
socketpair(0x3, 0x1, 0x8, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x100000001, 0x82e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080))

1.652135073s ago: executing program 2 (id=1362):
perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.58277999s ago: executing program 2 (id=1363):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.582457143s ago: executing program 2 (id=1364):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

522.556105ms ago: executing program 2 (id=1365):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005fb0000000c04000009000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1c, 0x4, 0x8, 0x7, 0x0, r0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"/11, @ANYRES32, @ANYBLOB="09747e91d2e5d5a9842c643fc91b7003e80b41c3fa0796", @ANYRES64=0x0], 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'sit0\x00', @local})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

411.754843ms ago: executing program 3 (id=1367):
r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')

292.815901ms ago: executing program 3 (id=1368):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

191.948448ms ago: executing program 3 (id=1369):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="180000001f00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000030000000000b70500000800000085000000b30000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080))

141.834989ms ago: executing program 3 (id=1370):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f0000000280), 0x4)
recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/4096, 0x1000}, 0x0)

141.605296ms ago: executing program 4 (id=1336):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12)

141.27657ms ago: executing program 2 (id=1371):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="d80000001e0081054e81f782db020000071d95eb78dc2992cbf538f6b830080006007c09e8fe08a304000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc080000000db7e5167fda40fad95667e006dcdfcace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x40400)

72.904034ms ago: executing program 2 (id=1372):
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x28000)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0xe71, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x8, 0x830f}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x2e, 0x3, 0x1}, 0x28)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c00040000000000000000007581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

72.790516ms ago: executing program 3 (id=1373):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)

0s ago: executing program 3 (id=1374):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
socketpair(0x18, 0x4, 0x0, &(0x7f0000000fc0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0x1, 0x58, &(0x7f00000008c0)}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r1 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x83549, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x65f8, 0x5}, 0x231c, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000b80)="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", 0x104}, {&(0x7f0000000440)="7137fc2cffcd6318d3b03cdd90ef215e91c9d611a61aca930c33ceca52691a4690185bc0c114bcfc1bc3de10acad7f98f1888ffaf61a63140c323e4c43fbf3e682fe95a32e4260e7c762961b5daa0157989788b463f6dd323f51bb8bb68ed0a251c3573d64c3b7f4835afbff053589b4515308dabcf1ffe6ed2b2f8b9de82cf028c775d8582a9ab39a5ff3cf1e887c20e145e5dd4e4633a2855cf4e49cd6a50b8dc2ff223ab682e3b612b03b04c4b4d83d6a41e22e8b2e0885", 0xb9}, {&(0x7f0000000580)}], 0x4}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r6], 0x48}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f00000001c0), 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4346' (ED25519) to the list of known hosts.
syzkaller login: [   41.429071][ T5751] cgroup: Unknown subsys name 'net'
[   41.559585][ T5751] cgroup: Unknown subsys name 'cpuset'
[   41.563370][ T5751] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.250594][ T5751] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.949229][ T5210] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.952874][ T5210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.955665][ T5210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.958882][ T5210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.961598][ T5210] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.992153][ T5210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.996613][ T5210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.999729][ T5210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.003012][ T5210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.005630][ T5210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.028136][ T5210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.031091][ T5210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.033971][ T5210] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.037204][ T5210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.039816][ T5210] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.269713][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   47.293863][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   47.320352][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   47.399507][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.402181][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.404547][ T5822] bridge_slave_0: entered allmulticast mode
[   47.408667][ T5822] bridge_slave_0: entered promiscuous mode
[   47.440351][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.442615][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.444968][ T5822] bridge_slave_1: entered allmulticast mode
[   47.448601][ T5822] bridge_slave_1: entered promiscuous mode
[   47.467828][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.470140][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.472416][ T5830] bridge_slave_0: entered allmulticast mode
[   47.475123][ T5830] bridge_slave_0: entered promiscuous mode
[   47.486580][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.488856][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.491143][ T5827] bridge_slave_0: entered allmulticast mode
[   47.493877][ T5827] bridge_slave_0: entered promiscuous mode
[   47.497895][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.500175][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.502452][ T5830] bridge_slave_1: entered allmulticast mode
[   47.505581][ T5830] bridge_slave_1: entered promiscuous mode
[   47.510166][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.513176][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.515501][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.517988][ T5827] bridge_slave_1: entered allmulticast mode
[   47.520758][ T5827] bridge_slave_1: entered promiscuous mode
[   47.541836][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.562189][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.587975][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.591906][ T5822] team0: Port device team_slave_0 added
[   47.595336][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.609823][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.613743][ T5822] team0: Port device team_slave_1 added
[   47.640415][ T5827] team0: Port device team_slave_0 added
[   47.660139][ T5827] team0: Port device team_slave_1 added
[   47.662666][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.664802][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.673116][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.679143][ T5830] team0: Port device team_slave_0 added
[   47.691561][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.693750][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.701734][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.706586][ T5830] team0: Port device team_slave_1 added
[   47.738108][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.740227][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.748143][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.752054][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.754275][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.762460][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.769630][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.771885][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.780593][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.784480][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.787355][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.795812][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.845831][ T5822] hsr_slave_0: entered promiscuous mode
[   47.848496][ T5822] hsr_slave_1: entered promiscuous mode
[   47.861630][ T5827] hsr_slave_0: entered promiscuous mode
[   47.863913][ T5827] hsr_slave_1: entered promiscuous mode
[   47.866036][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   47.869712][ T5827] Cannot create hsr debugfs directory
[   47.884776][ T5830] hsr_slave_0: entered promiscuous mode
[   47.887533][ T5830] hsr_slave_1: entered promiscuous mode
[   47.889690][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   47.891493][ T5830] Cannot create hsr debugfs directory
[   48.114991][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.121966][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.127816][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.133158][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.180787][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.189667][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.191948][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.194600][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.196888][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.202978][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.218442][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.223028][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.270824][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.273093][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.275499][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.277818][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.284578][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.288516][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.291136][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.294068][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.306330][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.311210][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.319442][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.324149][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.366152][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.400070][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   48.414475][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.420933][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.423215][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.439033][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.441314][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.447725][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   48.458509][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.463552][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.465816][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.478329][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.480516][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.495012][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   48.510068][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.512302][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.525861][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.528191][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.561465][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.564626][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.652519][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.702543][ T5827] veth0_vlan: entered promiscuous mode
[   48.714791][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.722468][ T5827] veth1_vlan: entered promiscuous mode
[   48.741259][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.772391][ T5830] veth0_vlan: entered promiscuous mode
[   48.782388][ T5827] veth0_macvtap: entered promiscuous mode
[   48.789322][ T5827] veth1_macvtap: entered promiscuous mode
[   48.793307][ T5830] veth1_vlan: entered promiscuous mode
[   48.819387][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.823543][ T5822] veth0_vlan: entered promiscuous mode
[   48.833856][ T5822] veth1_vlan: entered promiscuous mode
[   48.841025][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.853480][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.857360][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.860841][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.872674][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.891942][ T5822] veth0_macvtap: entered promiscuous mode
[   48.895480][ T5830] veth0_macvtap: entered promiscuous mode
[   48.910231][ T5822] veth1_macvtap: entered promiscuous mode
[   48.923165][ T5830] veth1_macvtap: entered promiscuous mode
[   48.928735][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.951922][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.955768][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.960086][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.966642][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.984704][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.987604][ T5210] Bluetooth: hci0: command tx timeout
[   48.993037][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.002919][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.006361][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.012415][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.015499][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.018963][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.025682][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.038930][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.058807][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.061581][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.067474][ T5210] Bluetooth: hci1: command tx timeout
[   49.077717][ T5210] Bluetooth: hci2: command tx timeout
[   49.079213][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.147816][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.150240][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.160300][ T3047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.162889][ T3047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.205550][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.209602][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.225528][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.235432][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.349390][ T5904] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   49.351783][ T5904] netlink: 'syz.2.7': attribute type 3 has an invalid length.
[   49.354225][ T5904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.362588][ T5904] Zero length message leads to an empty skb
[   49.419577][ T5210] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   49.419679][ T5210] Bluetooth: hci0: connection err: -111
[   49.425629][ T5908] @: renamed from bond_slave_0 (while UP)
[   49.532045][ T5916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.592446][ T5920] netlink: 'syz.2.15': attribute type 2 has an invalid length.
[   49.603914][ T5920] netlink: 119 bytes leftover after parsing attributes in process `syz.2.15'.
[   49.780081][ T5210] Bluetooth: hci2: Dropping invalid advertising data
[   49.782398][ T5210] Bluetooth: hci2: unknown advertising packet type: 0xff
[   49.782412][ T5210] Bluetooth: hci2: Malformed LE Event: 0x02
[   50.083703][ T5958] netlink: 'syz.1.34': attribute type 29 has an invalid length.
[   50.090102][ T5958] netlink: 'syz.1.34': attribute type 29 has an invalid length.
[   50.098842][ T5958] netlink: 'syz.1.34': attribute type 29 has an invalid length.
[   50.102111][ T5958] netlink: 'syz.1.34': attribute type 29 has an invalid length.
[   50.173415][ T5964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   50.180546][    T9] cfg80211: failed to load regulatory.db
[   50.434489][ T5992] warning: `syz.1.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.660542][ T6015] netlink: 164 bytes leftover after parsing attributes in process `syz.2.62'.
[   50.671737][ T6015] netlink: 164 bytes leftover after parsing attributes in process `syz.2.62'.
[   50.734428][ T6017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   50.739122][ T6017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   50.746423][    C0] hrtimer: interrupt took 43760 ns
[   51.066995][ T5210] Bluetooth: hci0: command tx timeout
[   51.146686][ T5210] Bluetooth: hci2: command tx timeout
[   51.146776][   T55] Bluetooth: hci1: command tx timeout
[   51.668832][ T6017] syz.0.63 (6017) used greatest stack depth: 18896 bytes left
[   52.282467][ T6066] netlink: 'syz.2.87': attribute type 29 has an invalid length.
[   52.339719][ T6066] netlink: 'syz.2.87': attribute type 29 has an invalid length.
[   52.351112][ T6066] netlink: 'syz.2.87': attribute type 29 has an invalid length.
[   52.427811][ T6080] netlink: 168 bytes leftover after parsing attributes in process `syz.0.93'.
[   52.600264][ T6093] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'.
[   53.183991][   T55] Bluetooth: hci0: command tx timeout
[   53.252647][ T6133] netlink: 531 bytes leftover after parsing attributes in process `syz.1.116'.
[   53.334463][   T55] Bluetooth: hci2: command tx timeout
[   53.336277][   T55] Bluetooth: hci1: command tx timeout
[   54.414073][ T6150] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.121'.
[   55.172299][ T6156] validate_nla: 2 callbacks suppressed
[   55.172365][ T6156] netlink: 'syz.2.125': attribute type 2 has an invalid length.
[   55.227807][   T55] Bluetooth: hci0: command tx timeout
[   55.386646][   T55] Bluetooth: hci2: command tx timeout
[   55.390943][   T55] Bluetooth: hci1: command tx timeout
[   56.144574][ T6164] netlink: 'syz.1.128': attribute type 21 has an invalid length.
[   56.174265][ T6168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.282383][ T6172] netlink: 'syz.0.131': attribute type 39 has an invalid length.
[   56.616854][ T6179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.132'.
[   56.953449][ T6188] netlink: 168 bytes leftover after parsing attributes in process `syz.2.138'.
[   57.040302][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.043003][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.086279][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.088949][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.242829][ T6195] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   57.245224][ T6195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.141'.
[   57.423100][ T6195] .`: renamed from bond0 (while UP)
[   57.642333][ T6207] netlink: 'syz.0.147': attribute type 6 has an invalid length.
[   57.779059][ T6223] netlink: 'syz.2.155': attribute type 10 has an invalid length.
[   57.783870][ T6223] veth1_macvtap: left promiscuous mode
[   57.815844][ T6228] netlink: 'syz.1.157': attribute type 2 has an invalid length.
[   57.819064][ T6228] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[   57.821989][ T6228] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.157'.
[   57.824771][ T6228] nbd: illegal input index 65540
[   60.708921][ T6258] netlink: 'syz.2.169': attribute type 25 has an invalid length.
[   60.711419][ T6258] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.169'.
[   60.744172][ T6260] netlink: 'syz.2.170': attribute type 21 has an invalid length.
[   60.847207][ T6266] netlink: 168 bytes leftover after parsing attributes in process `syz.2.173'.
[   60.871995][ T6268] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.174'.
[   60.914723][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'.
[   61.023395][ T6274] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.177'.
[   61.169052][ T6294] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.187'.
[   61.175579][ T6296] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   61.178982][ T6296] netlink: 'syz.0.188': attribute type 2 has an invalid length.
[   61.181371][ T6296] netlink: 'syz.0.188': attribute type 7 has an invalid length.
[   61.184155][ T6296] netlink: 21 bytes leftover after parsing attributes in process `syz.0.188'.
[   61.190644][ T6296] netlink: 101636 bytes leftover after parsing attributes in process `syz.0.188'.
[   61.193503][ T6296] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   61.195968][ T6296] netlink: 'syz.0.188': attribute type 2 has an invalid length.
[   61.201962][ T6296] netlink: 'syz.0.188': attribute type 7 has an invalid length.
[   61.204381][ T6296] netlink: 21 bytes leftover after parsing attributes in process `syz.0.188'.
[   61.242296][ T6300] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'.
[   62.449173][ T6332] netlink: 'syz.2.205': attribute type 5 has an invalid length.
[   63.536869][ T6350] netlink: 'syz.2.212': attribute type 3 has an invalid length.
[   63.575856][ T6354] syzkaller0: entered promiscuous mode
[   63.578766][ T6354] syzkaller0: entered allmulticast mode
[   63.595861][   T55] Bluetooth: hci2: Malformed LE Event: 0x0d
[   63.671407][   T55] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[   64.514665][ T6392] openvswitch: netlink: Message has 4 unknown bytes.
[   64.722919][ T6410] syz.0.241 uses obsolete (PF_INET,SOCK_PACKET)
[   64.820343][ T6418] syzkaller0: entered promiscuous mode
[   64.822092][ T6418] syzkaller0: entered allmulticast mode
[   64.900569][ T6428] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   64.902633][ T6428] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   65.219869][ T6445] delete_channel: no stack
[   67.717240][ T6484] validate_nla: 5 callbacks suppressed
[   67.717255][ T6484] netlink: 'syz.2.276': attribute type 10 has an invalid length.
[   67.721550][ T6484] __nla_validate_parse: 10 callbacks suppressed
[   67.721558][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.276'.
[   67.729038][ T6484] dummy0: entered promiscuous mode
[   67.732635][ T6484] bridge0: port 3(dummy0) entered blocking state
[   67.734705][ T6484] bridge0: port 3(dummy0) entered disabled state
[   67.737175][ T6484] dummy0: entered allmulticast mode
[   67.741512][ T6484] bridge0: port 3(dummy0) entered blocking state
[   67.743613][ T6484] bridge0: port 3(dummy0) entered forwarding state
[   67.837787][ T6495] netlink: 'syz.0.282': attribute type 10 has an invalid length.
[   67.844032][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.282'.
[   67.858003][ T6495] dummy0: entered promiscuous mode
[   67.860057][ T6495] bridge0: port 3(dummy0) entered blocking state
[   67.862344][ T6495] bridge0: port 3(dummy0) entered disabled state
[   67.864477][ T6495] dummy0: entered allmulticast mode
[   67.867497][ T6495] bridge0: port 3(dummy0) entered blocking state
[   67.869499][ T6495] bridge0: port 3(dummy0) entered forwarding state
[   68.526370][ T6504] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.286'.
[   70.027134][ T6548] netlink: 830 bytes leftover after parsing attributes in process `syz.1.305'.
[   70.030211][ T6548] @: entered promiscuous mode
[   70.031900][ T6548] bond_slave_1: entered promiscuous mode
[   70.364910][ T6575] netlink: 'syz.0.318': attribute type 33 has an invalid length.
[   70.367945][ T6575] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.318'.
[   70.648374][ T6588] netlink: 'syz.1.322': attribute type 29 has an invalid length.
[   70.680786][ T6588] netlink: 'syz.1.322': attribute type 29 has an invalid length.
[   70.700870][ T6588] netlink: 'syz.1.322': attribute type 29 has an invalid length.
[   70.706078][ T6588] netlink: 'syz.1.322': attribute type 29 has an invalid length.
[   70.830052][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.832152][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.874792][   T55] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[   71.063630][ T6628] netlink: 'syz.0.343': attribute type 13 has an invalid length.
[   71.083096][ T6628] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.343'.
[   71.230322][ T6646] netlink: 'syz.1.351': attribute type 10 has an invalid length.
[   71.233087][ T6646] netlink: 168 bytes leftover after parsing attributes in process `syz.1.351'.
[   71.397707][ T6662] syzkaller0: entered promiscuous mode
[   71.400005][ T6662] syzkaller0: entered allmulticast mode
[   73.062667][ T6689] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[   73.170224][ T6702] netlink: 703 bytes leftover after parsing attributes in process `syz.2.377'.
[   74.292621][   T55] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   74.333324][ T6730] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[   74.335708][ T6730] netlink: 'syz.2.390': attribute type 2 has an invalid length.
[   74.339042][ T6730] netlink: 'syz.2.390': attribute type 4 has an invalid length.
[   74.341419][ T6730] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[   74.343754][ T6730] netlink: 'syz.2.390': attribute type 2 has an invalid length.
[   74.346098][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'.
[   74.348894][ T6730] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.390'.
[   74.351677][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'.
[   74.497110][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'.
[   74.678080][ T6758] syzkaller1: tun_chr_ioctl cmd 1074025676
[   74.681720][ T6758] syzkaller1: owner set to 778
[   74.717568][ T6762] netlink: 'syz.2.406': attribute type 40 has an invalid length.
[   74.720116][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.406'.
[   74.835659][ T6770] netlink: 'syz.1.410': attribute type 33 has an invalid length.
[   74.956829][ T5210] Bluetooth: hci2: unexpected event 0x18 length: 151 > 23
[   74.960460][ T6783] netlink: 'syz.0.416': attribute type 22 has an invalid length.
[   74.965103][ T6783] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   74.981121][ T6783] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.416'.
[   75.281677][ T6807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.427'.
[   75.953364][ T6816] netlink: 208252 bytes leftover after parsing attributes in process `syz.2.431'.
[   76.146112][ T6837] Driver unsupported XDP return value 0 on prog  (id 154) dev N/A, expect packet loss!
[   76.205170][ T6842] team0: Device ipvlan1 failed to register rx_handler
[   76.352905][ T5210] Bluetooth: hci0: command tx timeout
[   76.520976][ T6842] syz.0.444 (6842) used greatest stack depth: 17912 bytes left
[   76.668210][ T5210] Bluetooth: hci2: Malformed HCI Event
[   76.743382][ T6871] wlan1: mtu less than device minimum
[   76.745673][ T6871] .`: (slave wlan1): Error -22 calling dev_set_mtu
[   76.871445][ T6884] netlink: 156 bytes leftover after parsing attributes in process `syz.2.464'.
[   76.874791][ T6884] IPv6: NLM_F_CREATE should be specified when creating new route
[   76.880925][ T6884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.883268][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[   76.885465][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[   76.887684][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[   77.089909][ T6897] team0: Device hsr_slave_0 failed to register rx_handler
[   78.131954][ T6946] raw_sendmsg: syz.2.491 forgot to set AF_INET. Fix it!
[   78.203335][ T6955] delete_channel: no stack
[   78.556030][ T6975] C: renamed from team_slave_0 (while UP)
[   78.605394][ T6975] validate_nla: 11 callbacks suppressed
[   78.605407][ T6975] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[   78.614851][ T6975] __nla_validate_parse: 2 callbacks suppressed
[   78.614862][ T6975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.505'.
[   78.619854][ T6975] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   78.654862][ T6985] netlink: 'syz.1.507': attribute type 10 has an invalid length.
[   78.659421][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.662703][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.671807][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.674110][ T6985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.676827][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.679069][ T6985] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.685889][ T6985] bridge0: entered promiscuous mode
[   78.692715][ T6985] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   78.710237][ T6989] netlink: 'syz.2.510': attribute type 13 has an invalid length.
[   78.725356][ T6989] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.510'.
[   78.825825][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.512'.
[   78.904697][ T6998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.513'.
[   78.907911][ T6995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.513'.
[   78.911637][ T6995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.513'.
[   79.003490][ T7004] netlink: 'syz.0.517': attribute type 33 has an invalid length.
[   79.005900][ T7004] netlink: 152 bytes leftover after parsing attributes in process `syz.0.517'.
[   79.372644][ T7038] netlink: 'syz.1.534': attribute type 21 has an invalid length.
[   79.456244][ T7042] netlink: 'syz.2.537': attribute type 29 has an invalid length.
[   79.672762][ T7073] dvmrp1: tun_chr_ioctl cmd 1074025677
[   79.674555][ T7073] dvmrp1: linktype set to 773
[   79.794136][ T7082] netlink: 'syz.2.555': attribute type 4 has an invalid length.
[   79.801115][ T7082] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.555'.
[   79.805687][ T7082] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.555'.
[   79.828125][ T7083] ksmbd: Unknown IPC event: 3, ignore.
[   80.499605][ T7091] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.559'.
[   80.503468][ T7091] netlink: zone id is out of range
[   80.508602][ T7091] netlink: zone id is out of range
[   80.511640][ T7091] netlink: zone id is out of range
[   80.513548][ T7091] netlink: get zone limit has 8 unknown bytes
[   82.864544][ T7096] netlink: 'syz.1.561': attribute type 21 has an invalid length.
[   82.870113][ T7096] netlink: 'syz.1.561': attribute type 6 has an invalid length.
[   82.879185][ T7096] netlink: 'syz.1.561': attribute type 21 has an invalid length.
[   83.751627][ T5210] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   83.864024][ T7117] netlink: 'syz.0.570': attribute type 2 has an invalid length.
[   83.959334][ T7127] __nla_validate_parse: 2 callbacks suppressed
[   83.959387][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.574'.
[   84.012714][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.125753][ T7127] bridge_slave_0 (unregistering): left allmulticast mode
[   84.155107][ T7127] bridge_slave_0 (unregistering): left promiscuous mode
[   84.160434][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.378277][ T7140] netlink: 'syz.0.580': attribute type 21 has an invalid length.
[   84.380750][ T7140] netlink: 128 bytes leftover after parsing attributes in process `syz.0.580'.
[   84.460947][ T5210] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[   84.550382][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.586'.
[   84.583447][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.461038][ T7153] bridge_slave_0 (unregistering): left allmulticast mode
[   85.465658][ T7153] bridge_slave_0 (unregistering): left promiscuous mode
[   85.468977][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.501961][ T7164] tap0: tun_chr_ioctl cmd 2147767517
[   85.608538][ T7176] netlink: 'syz.1.598': attribute type 3 has an invalid length.
[   85.733862][ T7188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'.
[   85.889274][ T7206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.613'.
[   85.941704][ T7212] netlink: 'syz.1.616': attribute type 21 has an invalid length.
[   87.149157][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'.
[   87.511702][ T5210] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28
[   87.514382][ T5210] Bluetooth: hci1: Unable to find connection with handle 0x0000
[   88.130239][ T7307] netlink: 'syz.1.660': attribute type 27 has an invalid length.
[   88.132735][ T7307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.660'.
[   88.135800][ T7307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   88.169462][ T7311] : renamed from hsr0 (while UP)
[   88.214067][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'.
[   89.818946][ T7355] netlink: 'syz.0.682': attribute type 9 has an invalid length.
[   89.821352][ T7355] netlink: 'syz.0.682': attribute type 8 has an invalid length.
[   89.823709][ T7355] netlink: 143452 bytes leftover after parsing attributes in process `syz.0.682'.
[   90.574061][ T7423] syzkaller1: tun_chr_ioctl cmd 1074025676
[   90.576036][ T7423] syzkaller1: owner set to 778
[   90.793425][ T7439] netlink: 'syz.1.721': attribute type 40 has an invalid length.
[   90.795939][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.721'.
[   92.872536][ T7502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'.
[   92.876784][ T7500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'.
[   92.881068][ T7503] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'.
[   92.998112][ T7506] netlink: 'syz.1.751': attribute type 10 has an invalid length.
[   93.001868][ T7506] geneve0: entered promiscuous mode
[   93.009658][ T7506] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   93.495909][ T7526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.621489][ T7536] -1: renamed from syzkaller0
[   94.513944][ T7544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.602196][ T7550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'.
[   94.605161][ T7547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'.
[   94.618613][ T7550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'.
[   94.750212][ T7556] netlink: 'syz.2.775': attribute type 17 has an invalid length.
[   94.752949][ T7556] netlink: 148 bytes leftover after parsing attributes in process `syz.2.775'.
[   94.771065][ T7556] netlink: 'syz.2.775': attribute type 29 has an invalid length.
[   94.878834][ T7567] nbd: must specify an index to disconnect
[   95.010837][ T7576] netlink: 830 bytes leftover after parsing attributes in process `syz.1.784'.
[   95.073651][ T7582] netlink: 'syz.1.787': attribute type 2 has an invalid length.
[   95.076066][ T7582] netlink: 'syz.1.787': attribute type 1 has an invalid length.
[   95.086485][ T7582] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.787'.
[   95.121209][ T7584] netlink: 'syz.0.788': attribute type 17 has an invalid length.
[   95.125408][ T7584] netlink: 148 bytes leftover after parsing attributes in process `syz.0.788'.
[   95.150022][ T7589] netlink: 'syz.1.790': attribute type 6 has an invalid length.
[   95.156015][ T7584] netlink: 'syz.0.788': attribute type 29 has an invalid length.
[   95.221841][ T7597] netlink: 'syz.2.794': attribute type 10 has an invalid length.
[   95.232371][ T7597] bridge0: port 3(dummy0) entered disabled state
[   95.235008][ T7597] dummy0: left allmulticast mode
[   95.239906][ T7597] dummy0: left promiscuous mode
[   95.241595][ T7597] bridge0: port 3(dummy0) entered disabled state
[   95.247785][ T7597] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.271346][ T7599] veth1_to_bond: entered allmulticast mode
[   95.495058][ T7629] netlink: 22 bytes leftover after parsing attributes in process `syz.1.809'.
[   95.737852][ T7649] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.818'.
[   95.878618][ T7661] netlink: 'syz.0.823': attribute type 2 has an invalid length.
[   95.939453][ T7667] sctp: [Deprecated]: syz.0.827 (pid 7667) Use of int in maxseg socket option.
[   95.939453][ T7667] Use struct sctp_assoc_value instead
[   96.576701][ T7683] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[   96.588133][ T7683] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[   96.596259][ T7683] netlink: 'syz.0.834': attribute type 29 has an invalid length.
[   97.161828][ T7707] netlink: 830 bytes leftover after parsing attributes in process `syz.0.847'.
[   97.297864][ T7727] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.855'.
[   97.730043][ T7769] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.876'.
[   97.749045][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   97.762080][ T7771] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.877'.
[   98.856158][ T7794] bridge0: port 3(dummy0) entered disabled state
[   98.858429][ T7794] dummy0: left allmulticast mode
[   98.860076][ T7794] dummy0: left promiscuous mode
[   98.861689][ T7794] bridge0: port 3(dummy0) entered disabled state
[   98.868107][ T7794] .`: (slave dummy0): Enslaving as an active interface with an up link
[   98.897900][ T7799] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.887'.
[   99.301685][ T7834] ref_ctr_offset mismatch. inode: 0x5e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[   99.456647][ T7851] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   99.946007][ T5210] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  100.191885][ T7899] validate_nla: 6 callbacks suppressed
[  100.191905][ T7899] netlink: 'syz.0.932': attribute type 2 has an invalid length.
[  100.207037][ T7899] netlink: 'syz.0.932': attribute type 4 has an invalid length.
[  100.209407][ T7899] __nla_validate_parse: 6 callbacks suppressed
[  100.209414][ T7899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.932'.
[  100.308939][ T7907] netlink: 'syz.1.936': attribute type 21 has an invalid length.
[  100.311537][ T7907] netlink: 160 bytes leftover after parsing attributes in process `syz.1.936'.
[  100.579726][ T7922] netlink: 'syz.2.942': attribute type 2 has an invalid length.
[  100.582006][ T7922] netlink: 'syz.2.942': attribute type 4 has an invalid length.
[  100.584208][ T7922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.942'.
[  100.654660][ T7924] netlink: 'syz.2.943': attribute type 1 has an invalid length.
[  100.657780][ T7924] netlink: 'syz.2.943': attribute type 2 has an invalid length.
[  100.660184][ T7924] netlink: 'syz.2.943': attribute type 4 has an invalid length.
[  100.662541][ T7924] netlink: 'syz.2.943': attribute type 1 has an invalid length.
[  100.664894][ T7924] netlink: 'syz.2.943': attribute type 2 has an invalid length.
[  100.667431][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'.
[  100.670202][ T7924] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.943'.
[  100.673021][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'.
[  100.729142][ T7928] netlink: 128 bytes leftover after parsing attributes in process `syz.2.945'.
[  100.753634][ T7928] netlink: 3 bytes leftover after parsing attributes in process `syz.2.945'.
[  101.221420][ T7949] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.954'.
[  101.265398][ T7950] delete_channel: no stack
[  101.323158][ T5210] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  101.705923][ T7969] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.964'.
[  101.781089][ T5210] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  101.784388][ T5210] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  101.787929][ T5210] CPU: 1 UID: 0 PID: 5210 Comm: kworker/u11:1 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  101.787943][ T5210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.787949][ T5210] Workqueue: hci0 hci_rx_work
[  101.787970][ T5210] Call Trace:
[  101.787975][ T5210]  <TASK>
[  101.787980][ T5210]  dump_stack_lvl+0x189/0x250
[  101.787994][ T5210]  ? kernfs_path_from_node+0x2c/0x260
[  101.788006][ T5210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.788015][ T5210]  ? __pfx__printk+0x10/0x10
[  101.788028][ T5210]  ? kernfs_path_from_node+0x2c/0x260
[  101.788037][ T5210]  ? kernfs_path_from_node+0x2c/0x260
[  101.788047][ T5210]  ? kernfs_path_from_node+0x22c/0x260
[  101.788056][ T5210]  ? kernfs_path_from_node+0x2c/0x260
[  101.788067][ T5210]  sysfs_create_dir_ns+0x259/0x280
[  101.788079][ T5210]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  101.788089][ T5210]  ? do_raw_spin_unlock+0x4d/0x240
[  101.788101][ T5210]  kobject_add_internal+0x59f/0xb40
[  101.788115][ T5210]  kobject_add+0x155/0x220
[  101.788129][ T5210]  ? __pfx_kobject_add+0x10/0x10
[  101.788142][ T5210]  ? _raw_spin_unlock+0x28/0x50
[  101.788156][ T5210]  ? get_device_parent+0x366/0x3a0
[  101.788170][ T5210]  device_add+0x408/0xb50
[  101.788181][ T5210]  hci_conn_add_sysfs+0xd5/0x1e0
[  101.788193][ T5210]  le_conn_complete_evt+0xc3a/0x1220
[  101.788208][ T5210]  ? bt_warn+0x10b/0x160
[  101.788221][ T5210]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  101.788232][ T5210]  ? __pfx_bt_warn+0x10/0x10
[  101.788242][ T5210]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  101.788257][ T5210]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  101.788267][ T5210]  ? skb_pull_data+0xfb/0x200
[  101.788327][ T5210]  hci_le_conn_complete_evt+0x187/0x450
[  101.788343][ T5210]  hci_event_packet+0x78f/0x1200
[  101.788375][ T5210]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  101.788387][ T5210]  ? __pfx_hci_event_packet+0x10/0x10
[  101.788398][ T5210]  ? kcov_remote_start+0x4d3/0x7f0
[  101.788411][ T5210]  ? lockdep_hardirqs_on+0x90/0x150
[  101.788424][ T5210]  ? hci_send_to_monitor+0xe2/0x570
[  101.788438][ T5210]  hci_rx_work+0x46a/0xe80
[  101.788451][ T5210]  ? process_scheduled_works+0x9ef/0x17b0
[  101.788464][ T5210]  process_scheduled_works+0xae1/0x17b0
[  101.788490][ T5210]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.788510][ T5210]  worker_thread+0x8a0/0xda0
[  101.788534][ T5210]  kthread+0x711/0x8a0
[  101.788546][ T5210]  ? __pfx_worker_thread+0x10/0x10
[  101.788557][ T5210]  ? __pfx_kthread+0x10/0x10
[  101.788567][ T5210]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.788577][ T5210]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.788587][ T5210]  ? __pfx_kthread+0x10/0x10
[  101.788596][ T5210]  ret_from_fork+0x3fc/0x770
[  101.788611][ T5210]  ? __pfx_ret_from_fork+0x10/0x10
[  101.788626][ T5210]  ? __switch_to_asm+0x39/0x70
[  101.788635][ T5210]  ? __switch_to_asm+0x33/0x70
[  101.788642][ T5210]  ? __pfx_kthread+0x10/0x10
[  101.788652][ T5210]  ret_from_fork_asm+0x1a/0x30
[  101.788668][ T5210]  </TASK>
[  101.788725][ T5210] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  101.881108][ T5210] Bluetooth: hci0: failed to register connection device
[  103.976511][ T5210] Bluetooth: hci0: command tx timeout
[  104.455236][ T8060] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  104.965845][ T8093] netlink: zone id is out of range
[  104.975163][ T8093] netlink: zone id is out of range
[  104.978308][ T8093] netlink: zone id is out of range
[  104.979929][ T8093] netlink: zone id is out of range
[  104.981545][ T8093] netlink: zone id is out of range
[  104.983147][ T8093] netlink: zone id is out of range
[  104.984727][ T8093] netlink: zone id is out of range
[  104.986898][ T8093] netlink: zone id is out of range
[  104.988462][ T8093] netlink: zone id is out of range
[  104.990013][ T8093] netlink: zone id is out of range
[  105.132549][ T8105] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  105.143169][ T8105] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.442382][ T5210] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  107.443246][ T8188] @: renamed from bond_slave_0 (while UP)
[  107.501548][ T8193] C: renamed from team_slave_0
[  107.507695][ T8193] validate_nla: 5 callbacks suppressed
[  107.507704][ T8193] netlink: 'syz.1.1065': attribute type 1 has an invalid length.
[  107.511839][ T8193] __nla_validate_parse: 6 callbacks suppressed
[  107.511846][ T8193] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1065'.
[  107.565426][ T8200] netlink: 'syz.2.1069': attribute type 21 has an invalid length.
[  107.569707][ T8200] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1069'.
[  107.604586][ T8206] netlink: 'syz.2.1072': attribute type 2 has an invalid length.
[  107.611343][ T8206] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.1072'.
[  108.694938][ T8218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1077'.
[  109.056729][ T8259] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1096'.
[  109.986586][ T8333] netlink: 'syz.2.1129': attribute type 21 has an invalid length.
[  110.088630][ T8344] netlink: 'syz.2.1134': attribute type 16 has an invalid length.
[  110.096497][ T8344] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1134'.
[  112.422078][ T8398] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1157'.
[  112.542692][ T8412] netlink: 731 bytes leftover after parsing attributes in process `syz.0.1164'.
[  112.559653][ T8414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1165'.
[  113.344920][ T8467] netlink: 'syz.0.1191': attribute type 29 has an invalid length.
[  113.362096][ T8467] netlink: 'syz.0.1191': attribute type 29 has an invalid length.
[  113.430987][ T5210] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  115.466708][ T5210] Bluetooth: hci0: command tx timeout
[  116.899194][ T8524] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1218'.
[  116.902613][ T8525] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1217'.
[  117.210075][ T5210] Bluetooth: hci2: Malformed LE Event: 0x0b
[  117.216706][ T8547] netlink: 'syz.0.1229': attribute type 10 has an invalid length.
[  117.302683][ T8553] netlink: 'syz.1.1230': attribute type 10 has an invalid length.
[  117.539992][ T8553] veth0_vlan: left promiscuous mode
[  117.578600][ T8553] veth0_vlan: entered promiscuous mode
[  117.619854][ T8553] team0: Device veth0_vlan failed to register rx_handler
[  117.700267][ T8560] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1233'.
[  117.855224][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1236'.
[  117.917354][ T8553] syz.1.1230 (8553) used greatest stack depth: 14400 bytes left
[  119.140784][ T8598] netlink: 'syz.0.1248': attribute type 10 has an invalid length.
[  119.339389][ T8614] netlink: 'syz.1.1256': attribute type 2 has an invalid length.
[  119.341897][ T8614] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1256'.
[  119.345925][ T8614] netlink: 'syz.1.1256': attribute type 2 has an invalid length.
[  119.351099][ T8614] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1256'.
[  119.782196][ T5210] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  120.218880][ T8655] netlink: 'syz.1.1275': attribute type 16 has an invalid length.
[  120.221504][ T8655] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1275'.
[  120.861349][ T8688] netlink: 'syz.0.1289': attribute type 28 has an invalid length.
[  120.864231][ T8688] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1289'.
[  120.912649][ T5210] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12
[  121.065211][ T8709] netlink: 'syz.2.1300': attribute type 2 has an invalid length.
[  122.267087][ T8729] netlink: 'syz.2.1309': attribute type 16 has an invalid length.
[  122.269674][ T8729] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1309'.
[  122.425396][ T8744] netlink: 'syz.0.1316': attribute type 3 has an invalid length.
[  122.428980][ T8744] netlink: 'syz.0.1316': attribute type 1 has an invalid length.
[  122.431354][ T8744] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1316'.
[  124.019564][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.023061][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.025718][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.037198][ T8796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.039753][ T8796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.046062][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.048941][ T8796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.051415][ T8796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.077594][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.082674][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.262900][ T8813] netlink: 'syz.2.1343': attribute type 29 has an invalid length.
[  124.281488][ T8813] netlink: 'syz.2.1343': attribute type 29 has an invalid length.
[  124.300950][ T8794] chnl_net:caif_netlink_parms(): no params data found
[  124.341767][ T8792] chnl_net:caif_netlink_parms(): no params data found
[  124.430551][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.432839][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.435023][ T8794] bridge_slave_0: entered allmulticast mode
[  124.441543][ T8794] bridge_slave_0: entered promiscuous mode
[  124.458364][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.460770][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.463006][ T8794] bridge_slave_1: entered allmulticast mode
[  124.465932][ T8794] bridge_slave_1: entered promiscuous mode
[  124.511915][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.514824][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.517813][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.520079][ T8792] bridge_slave_0: entered allmulticast mode
[  124.522784][ T8792] bridge_slave_0: entered promiscuous mode
[  124.527313][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.540828][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.543071][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.545303][ T8792] bridge_slave_1: entered allmulticast mode
[  124.548473][ T8792] bridge_slave_1: entered promiscuous mode
[  124.565890][ T8794] team0: Port device team_slave_0 added
[  124.587077][ T8794] team0: Port device team_slave_1 added
[  124.610316][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.614875][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.618865][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.621031][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.629824][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.654516][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.657418][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.665195][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.670320][ T8792] team0: Port device team_slave_0 added
[  124.673742][ T8792] team0: Port device team_slave_1 added
[  124.716012][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.719226][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.729310][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.736371][ T8794] hsr_slave_0: entered promiscuous mode
[  124.739181][ T8794] hsr_slave_1: entered promiscuous mode
[  124.742337][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.744488][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.752910][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.805892][ T8792] hsr_slave_0: entered promiscuous mode
[  124.810327][ T8792] hsr_slave_1: entered promiscuous mode
[  124.812456][ T8792] debugfs: 'hsr0' already exists in 'hsr'
[  124.814264][ T8792] Cannot create hsr debugfs directory
[  124.867747][ T8846] netlink: 'syz.2.1355': attribute type 3 has an invalid length.
[  124.871129][ T8846] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1355'.
[  124.970351][ T8850] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1357'.
[  124.990973][ T8794] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  124.997313][ T8794] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  125.001733][ T8794] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  125.013155][ T8794] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  125.047315][ T8792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.054493][ T8860] netlink: 'syz.2.1359': attribute type 1 has an invalid length.
[  125.057431][ T8860] netlink: 'syz.2.1359': attribute type 2 has an invalid length.
[  125.059858][ T8860] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.1359'.
[  125.062862][ T8792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  125.071124][ T8792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  125.075961][ T8792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  125.159511][ T8794] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.181271][ T8794] 8021q: adding VLAN 0 to HW filter on device team0
[  125.211945][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.215772][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.218095][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.224816][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.227126][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.262690][ T8792] 8021q: adding VLAN 0 to HW filter on device team0
[  125.280778][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.283028][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.307886][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.310142][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.404797][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.528318][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.559486][ T8792] veth0_vlan: entered promiscuous mode
[  125.565006][ T8792] veth1_vlan: entered promiscuous mode
[  125.585643][ T8792] veth0_macvtap: entered promiscuous mode
[  125.592019][ T8792] veth1_macvtap: entered promiscuous mode
[  125.604371][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.612171][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.621187][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.626969][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.629610][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.106659][ T5825] Bluetooth: hci1: command tx timeout
[  126.116610][ T5825] Bluetooth: hci0: command tx timeout
[  126.177940][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.259779][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.262109][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.291460][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.293875][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.318049][ T8794] veth0_vlan: entered promiscuous mode
[  126.336578][ T8794] veth1_vlan: entered promiscuous mode
[  126.379825][ T8794] veth0_macvtap: entered promiscuous mode
[  126.393303][ T8794] veth1_macvtap: entered promiscuous mode
[  126.427501][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.434620][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.442995][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.446017][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.453367][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.474224][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.543682][ T3047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.552966][ T3047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.602501][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.605053][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.712014][ T8906] syzkaller0: entered promiscuous mode
[  126.713705][ T8906] syzkaller0: entered allmulticast mode
[  126.753843][ T8910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1372'.
[  231.876457][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  231.878597][    C0] rcu: 	0-...!: (1 GPs behind) idle=c9bc/1/0x4000000000000000 softirq=25241/25242 fqs=27
[  231.883137][    C0] rcu: 	(t=10500 jiffies g=16377 q=42 ncpus=2)
[  231.885066][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10445 jiffies! g16377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  231.888709][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=7526
[  231.891020][    C0] rcu: rcu_preempt kthread starved for 10447 jiffies! g16377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  231.894373][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  231.897385][    C0] rcu: RCU grace-period kthread stack dump:
[  231.899127][    C0] task:rcu_preempt     state:I stack:27128 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  231.902689][    C0] Call Trace:
[  231.903736][    C0]  <TASK>
[  231.904676][    C0]  __schedule+0x1737/0x4d30
[  231.906122][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  231.907698][    C0]  ? schedule+0x165/0x360
[  231.909032][    C0]  ? __lock_acquire+0xab9/0xd20
[  231.910566][    C0]  ? __pfx___schedule+0x10/0x10
[  231.912118][    C0]  ? schedule+0x91/0x360
[  231.913465][    C0]  schedule+0x165/0x360
[  231.914778][    C0]  schedule_timeout+0x12b/0x270
[  231.916315][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  231.917983][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  231.919821][    C0]  ? __pfx_process_timeout+0x10/0x10
[  231.921491][    C0]  ? prepare_to_swait_event+0x341/0x380
[  231.923242][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  231.924774][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  231.926698][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  231.928294][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  231.929912][    C0]  ? finish_swait+0xcd/0x1f0
[  231.931365][    C0]  rcu_gp_kthread+0x99/0x390
[  231.932775][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  231.934357][    C0]  ? __kthread_parkme+0x7b/0x200
[  231.935858][    C0]  ? __kthread_parkme+0x1a1/0x200
[  231.937388][    C0]  kthread+0x711/0x8a0
[  231.938610][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  231.940214][    C0]  ? __pfx_kthread+0x10/0x10
[  231.941643][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  231.943257][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.944877][    C0]  ? __pfx_kthread+0x10/0x10
[  231.946296][    C0]  ret_from_fork+0x3fc/0x770
[  231.947682][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  231.949251][    C0]  ? __switch_to_asm+0x39/0x70
[  231.950742][    C0]  ? __switch_to_asm+0x33/0x70
[  231.952253][    C0]  ? __pfx_kthread+0x10/0x10
[  231.953696][    C0]  ret_from_fork_asm+0x1a/0x30
[  231.955205][    C0]  </TASK>
[  231.956151][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  231.958045][    C0] Sending NMI from CPU 0 to CPUs 1:
[  231.959712][    C1] NMI backtrace for cpu 1
[  231.959727][    C1] CPU: 1 UID: 0 PID: 5749 Comm: sshd Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  231.959737][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.959743][    C1] RIP: 0010:native_queued_spin_lock_slowpath+0xaf/0x8e0
[  231.959761][    C1] Code: 00 00 00 c7 44 24 60 00 00 00 00 0f 1f 44 00 00 4c 8d 74 24 60 49 89 df 49 c1 ef 03 41 bd 01 00 00 00 eb 06 89 44 24 60 f3 90 <48> 89 df be 04 00 00 00 e8 54 66 b0 f6 48 b8 00 00 00 00 00 fc ff
[  231.959769][    C1] RSP: 0018:ffffc900001e03a0 EFLAGS: 00000202
[  231.959779][    C1] RAX: 0000000000000001 RBX: ffff8881103da8c0 RCX: ffffffff8b726fbc
[  231.959784][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881103da8c0
[  231.959789][    C1] RBP: ffffc900001e0498 R08: ffff8881103da8c3 R09: 1ffff1102207b518
[  231.959814][    C1] R10: dffffc0000000000 R11: ffffed102207b519 R12: 1ffff9200003c07c
[  231.959820][    C1] R13: 0000000000000001 R14: ffffc900001e0400 R15: 1ffff1102207b518
[  231.959835][    C1] FS:  00007f24f91b7800(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  231.959841][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  231.959847][    C1] CR2: 00007fbed19fefc8 CR3: 000000002759a000 CR4: 00000000000006f0
[  231.959870][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  231.959876][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  231.959880][    C1] Call Trace:
[  231.959886][    C1]  <IRQ>
[  231.959893][    C1]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[  231.959908][    C1]  queued_spin_lock_slowpath+0x43/0x50
[  231.959918][    C1]  do_raw_spin_lock+0x21f/0x290
[  231.959927][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  231.959938][    C1]  tcp_v4_rcv+0x260e/0x2f40
[  231.959951][    C1]  ? tcp_v4_rcv+0x10b1/0x2f40
[  231.959969][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  231.959982][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  231.959992][    C1]  ip_protocol_deliver_rcu+0x221/0x440
[  231.960005][    C1]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  231.960015][    C1]  ip_local_deliver_finish+0x3bb/0x6f0
[  231.960027][    C1]  NF_HOOK+0x30c/0x3a0
[  231.960037][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  231.960047][    C1]  ? NF_HOOK+0x9a/0x3a0
[  231.960056][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  231.960065][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  231.960077][    C1]  ? skb_dst+0x4f/0xd0
[  231.960086][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  231.960096][    C1]  NF_HOOK+0x30c/0x3a0
[  231.960106][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  231.960116][    C1]  ? NF_HOOK+0x9a/0x3a0
[  231.960125][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  231.960134][    C1]  ? ip_rcv_core+0x7f7/0xd00
[  231.960146][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  231.960155][    C1]  __netif_receive_skb+0x143/0x380
[  231.960168][    C1]  ? process_backlog+0x2d5/0x14f0
[  231.960182][    C1]  process_backlog+0x60e/0x14f0
[  231.960196][    C1]  ? __pfx_process_backlog+0x10/0x10
[  231.960206][    C1]  ? trace_call_bpf+0x5ba/0x850
[  231.960218][    C1]  ? trace_call_bpf+0xb7/0x850
[  231.960228][    C1]  __napi_poll+0xc7/0x360
[  231.960237][    C1]  ? net_rx_action+0x46d/0xe30
[  231.960247][    C1]  net_rx_action+0x707/0xe30
[  231.960262][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  231.960272][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  231.960284][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  231.960299][    C1]  handle_softirqs+0x286/0x870
[  231.960313][    C1]  ? do_softirq+0xec/0x180
[  231.960324][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  231.960335][    C1]  ? __common_interrupt+0x163/0x250
[  231.960346][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  231.960356][    C1]  do_softirq+0xec/0x180
[  231.960366][    C1]  </IRQ>
[  231.960369][    C1]  <TASK>
[  231.960372][    C1]  ? __pfx_do_softirq+0x10/0x10
[  231.960384][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  231.960394][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  231.960405][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  231.960416][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  231.960423][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  231.960431][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  231.960439][    C1]  __dev_queue_xmit+0x1d79/0x3b50
[  231.960449][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  231.960457][    C1]  ? trace_call_bpf+0xb7/0x850
[  231.960467][    C1]  ? trace_call_bpf+0x5ba/0x850
[  231.960478][    C1]  ? __lock_acquire+0xab9/0xd20
[  231.960488][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  231.960496][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  231.960511][    C1]  ? __lock_acquire+0xab9/0xd20
[  231.960523][    C1]  ? ip_output+0x2a1/0x3c0
[  231.960532][    C1]  ? ip_finish_output2+0xae7/0x1160
[  231.960541][    C1]  ip_finish_output2+0xd03/0x1160
[  231.960551][    C1]  ? ip_finish_output2+0x452/0x1160
[  231.960560][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  231.960568][    C1]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  231.960576][    C1]  ? ip_skb_dst_mtu+0x866/0xab0
[  231.960584][    C1]  ? ip_finish_output+0x33a/0x3f0
[  231.960592][    C1]  ip_output+0x2a1/0x3c0
[  231.960599][    C1]  ? ip_output+0x60/0x3c0
[  231.960607][    C1]  ? __ip_queue_xmit+0x63/0x1b00
[  231.960614][    C1]  __ip_queue_xmit+0x1106/0x1b00
[  231.960623][    C1]  ? __ip_queue_xmit+0x63/0x1b00
[  231.960631][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[  231.960638][    C1]  __tcp_transmit_skb+0x2215/0x3680
[  231.960652][    C1]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  231.960663][    C1]  ? tcp_small_queue_check+0x1c1/0x3b0
[  231.960671][    C1]  tcp_write_xmit+0x1862/0x67f0
[  231.960690][    C1]  __tcp_push_pending_frames+0x97/0x360
[  231.960697][    C1]  ? tcp_push+0x424/0x660
[  231.960707][    C1]  tcp_sendmsg_locked+0x4afd/0x5620
[  231.960716][    C1]  ? trace_call_bpf+0xb7/0x850
[  231.960738][    C1]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  231.960747][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  231.960758][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  231.960771][    C1]  tcp_sendmsg+0x2f/0x50
[  231.960780][    C1]  __sock_sendmsg+0x19c/0x270
[  231.960791][    C1]  sock_write_iter+0x258/0x330
[  231.960831][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  231.960839][    C1]  ? migrate_enable+0x29c/0x3c0
[  231.960849][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  231.960860][    C1]  ? security_file_permission+0x75/0x290
[  231.960872][    C1]  vfs_write+0x54b/0xa90
[  231.960885][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  231.960894][    C1]  ? __pfx_vfs_write+0x10/0x10
[  231.960906][    C1]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  231.960917][    C1]  ksys_write+0x145/0x250
[  231.960928][    C1]  ? __pfx_ksys_write+0x10/0x10
[  231.960937][    C1]  ? rcu_is_watching+0x15/0xb0
[  231.960950][    C1]  ? do_syscall_64+0xbe/0x3b0
[  231.960962][    C1]  do_syscall_64+0xfa/0x3b0
[  231.960973][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.960981][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  231.960989][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.960997][    C1] RIP: 0033:0x7f24f8d16bf2
[  231.961007][    C1] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83
[  231.961014][    C1] RSP: 002b:00007ffdf8d015f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  231.961022][    C1] RAX: ffffffffffffffda RBX: 0000557d7f6d25e0 RCX: 00007f24f8d16bf2
[  231.961028][    C1] RDX: 0000000000000070 RSI: 0000557d7f73acc0 RDI: 0000000000000007
[  231.961032][    C1] RBP: 0000557d7f73acc0 R08: 0000000000000000 R09: 0000000000000000
[  231.961037][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000070
[  231.961042][    C1] R13: 0000557d7f6d1460 R14: 0000557d7f6cc220 R15: 0000557d7f6d2ff0
[  231.961051][    C1]  </TASK>
[  231.961715][    C0] CPU: 0 UID: 0 PID: 8915 Comm: syz.3.1374 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  231.961729][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.961735][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  231.961748][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 b2 e8 f2 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  231.961756][    C0] RSP: 0018:ffffc90000007420 EFLAGS: 00000206
[  231.961767][    C0] RAX: 7c88d4b055a33a00 RBX: 1ffff92000000e8c RCX: 7c88d4b055a33a00
[  231.961774][    C0] RDX: 0000000000000002 RSI: ffffffff8d9792eb RDI: ffffffff8be30a00
[  231.961781][    C0] RBP: ffffc90000007518 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[  231.961788][    C0] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffffffff8e141800
[  231.961813][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  231.961821][    C0] FS:  00007fbed1a206c0(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  231.961829][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  231.961836][    C0] CR2: 000000110c32053d CR3: 00000000308c0000 CR4: 00000000000006f0
[  231.961861][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  231.961869][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  231.961875][    C0] Call Trace:
[  231.961881][    C0]  <IRQ>
[  231.961885][    C0]  ? __lock_acquire+0xab9/0xd20
[  231.961901][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  231.961915][    C0]  ? unwind_next_frame+0xa5/0x2390
[  231.961930][    C0]  __rcu_read_unlock+0x84/0xe0
[  231.961941][    C0]  ? unwind_next_frame+0xa5/0x2390
[  231.961949][    C0]  unwind_next_frame+0x19ae/0x2390
[  231.961963][    C0]  ? unwind_next_frame+0xa5/0x2390
[  231.961972][    C0]  ? call_timer_fn+0x17e/0x5f0
[  231.961988][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  231.961999][    C0]  arch_stack_walk+0x11c/0x150
[  231.962014][    C0]  ? __run_timer_base+0x61a/0x860
[  231.962027][    C0]  stack_trace_save+0x9c/0xe0
[  231.962038][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  231.962052][    C0]  ? sched_clock+0x3f/0x60
[  231.962064][    C0]  kasan_save_track+0x3e/0x80
[  231.962077][    C0]  ? kasan_save_track+0x3e/0x80
[  231.962087][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  231.962097][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  231.962111][    C0]  ? kmalloc_reserve+0xbd/0x290
[  231.962125][    C0]  ? __alloc_skb+0x142/0x2d0
[  231.962136][    C0]  ? __tcp_send_ack+0xaf/0x620
[  231.962145][    C0]  ? tcp_delack_timer_handler+0x366/0x530
[  231.962155][    C0]  ? tcp_delack_timer+0x205/0x3b0
[  231.962164][    C0]  ? call_timer_fn+0x17e/0x5f0
[  231.962202][    C0]  __kasan_slab_alloc+0x6c/0x80
[  231.962215][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  231.962228][    C0]  ? kmalloc_reserve+0xbd/0x290
[  231.962243][    C0]  kmalloc_reserve+0xbd/0x290
[  231.962258][    C0]  __alloc_skb+0x142/0x2d0
[  231.962273][    C0]  __tcp_send_ack+0xaf/0x620
[  231.962286][    C0]  tcp_delack_timer_handler+0x366/0x530
[  231.962300][    C0]  tcp_delack_timer+0x205/0x3b0
[  231.962310][    C0]  ? call_timer_fn+0x155/0x5f0
[  231.962323][    C0]  call_timer_fn+0x17e/0x5f0
[  231.962335][    C0]  ? __pfx_tcp_delack_timer+0x10/0x10
[  231.962344][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.962355][    C0]  ? call_timer_fn+0xbe/0x5f0
[  231.962366][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  231.962385][    C0]  ? __pfx_tcp_delack_timer+0x10/0x10
[  231.962397][    C0]  __run_timer_base+0x61a/0x860
[  231.962407][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  231.962426][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  231.962447][    C0]  run_timer_softirq+0xb7/0x180
[  231.962458][    C0]  handle_softirqs+0x286/0x870
[  231.962473][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  231.962489][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  231.962507][    C0]  __irq_exit_rcu+0xca/0x1f0
[  231.962519][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  231.962537][    C0]  irq_exit_rcu+0x9/0x30
[  231.962547][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  231.962560][    C0]  </IRQ>
[  231.962563][    C0]  <TASK>
[  231.962569][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.962579][    C0] RIP: 0010:__x64_sys_openat+0x0/0x170
[  231.962590][    C0] Code: 41 5e 41 5f c3 cc cc cc cc cc e8 eb 3d 3d 09 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 41 55 41 54 53 48 83 ec 20 49 89 ff 65 48
[  231.962598][    C0] RSP: 0018:ffffc90007b57ee8 EFLAGS: 00000246
[  231.962607][    C0] RAX: 7c88d4b055a33a00 RBX: ffffc90007b57ef0 RCX: 7c88d4b055a33a00
[  231.962614][    C0] RDX: 0000000000000000 RSI: 0000000000000101 RDI: ffffc90007b57f58
[  231.962621][    C0] RBP: ffffc90007b57f48 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[  231.962627][    C0] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: 0000000000000101
[  231.962634][    C0] R13: 0000000000000101 R14: ffffc90007b57f58 R15: ffff888123b69cc0
[  231.962650][    C0]  do_syscall_64+0xfa/0x3b0
[  231.962664][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.962672][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.962684][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.962693][    C0] RIP: 0033:0x7fbed0b8eb69
[  231.962703][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.962711][    C0] RSP: 002b:00007fbed1a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  231.962721][    C0] RAX: ffffffffffffffda RBX: 00007fbed0db6080 RCX: 00007fbed0b8eb69
[  231.962728][    C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  231.962734][    C0] RBP: 00007fbed0c11df1 R08: 0000000000000000 R09: 0000000000000000
[  231.962740][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.962746][    C0] R13: 0000000000000000 R14: 00007fbed0db6080 R15: 00007ffcfb0ab3f8
[  231.962761][    C0]  </TASK>
[  232.361229][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
19:03:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006750
R8 =ffff888108370237 R9 =1ffff1102106e046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591d R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbed1a206c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32053d CR3=00000000308c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbed0d87498 00007fbed0d87470 XMM03=00007fbed0d874a8 00007fbed0d874a0
XMM04=00007fbed18ed100 00007fbed0d87460 XMM05=00007fbed0d87478 00007fbed0d874c0
XMM06=00007fbed0d874b8 00007fbed0d874b0 XMM07=00007fbed0d874a8 00007fbed0d874a0
XMM08=0000000000000000 00007fbed0c12eab XMM09=0000000000000000 00007fbed0c12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff8881103da8c0 RCX=ffffffff8b726fbc RDX=0000000000000000
RSI=0000000000000004 RDI=ffff8881103da8c0 RBP=ffffc900001e0498 RSP=ffffc900001e0398
R8 =ffff8881103da8c3 R9 =1ffff1102207b518 R10=dffffc0000000000 R11=ffffed102207b519
R12=1ffff9200003c07c R13=0000000000000001 R14=ffffc900001e0400 R15=1ffff1102207b518
RIP=ffffffff8222d610 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f24f91b7800 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbed19fefc8 CR3=000000002759a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
