last executing test programs:

2m40.570932111s ago: executing program 2 (id=873):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x1b, &(0x7f0000000280), 0x4)

2m40.430062614s ago: executing program 2 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a0000000500010006000000140007"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

2m40.429904756s ago: executing program 2 (id=877):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m40.323717568s ago: executing program 2 (id=878):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2a, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
r9 = socket$kcm(0xa, 0x5, 0x0)
r10 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8916, &(0x7f0000000000)={r10})
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8936, &(0x7f0000000000)={r10})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r11, 0x0, 0x1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m39.281700188s ago: executing program 2 (id=882):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m39.281527102s ago: executing program 2 (id=883):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40008d4)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0)

2m24.237181356s ago: executing program 32 (id=883):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40008d4)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0)

1m22.680969485s ago: executing program 1 (id=1879):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000000070102000000000000000003000006090001"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20004000)

1m22.680848459s ago: executing program 3 (id=1880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000003600010029bd7000ffdbdf25170000000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

1m22.609468418s ago: executing program 3 (id=1882):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1m22.541168879s ago: executing program 3 (id=1884):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

1m22.540933598s ago: executing program 1 (id=1885):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x7fff, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
close(r1)
socket$kcm(0x11, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)

1m22.391855122s ago: executing program 3 (id=1886):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100000004000000000000031f00000000000000", @ANYRES32, @ANYBLOB="050000000000005b39690236606bd39a00000000", @ANYRES32=0x0, @ANYRES32], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20)
syz_clone(0x4000000, &(0x7f0000000340), 0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000004c0)="0b2f212171db8f86f7fa522f7decb109378c2ff0a545f00985b92a4ed990449a7f7493b235d3e45771cc8c88dac0522005ad39ff32088b4319cb79bee80f590141ddc530704554777ad74b6d3433702236ccc2526f073a61403c5e57fe708bebf4e6ffe2888dc81f4b1cca1204759cf8e35e8d3001b86ee7e8ead40b72b36cb5235990111dbab9106fcebc")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))
sendmsg$tipc(r0, &(0x7f0000003f40)={&(0x7f00000039c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x84)

1m22.210843801s ago: executing program 1 (id=1887):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x33fe0}}, 0x0)

1m21.798094045s ago: executing program 1 (id=1888):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/260, 0x104}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000004ac0)=""/4134, 0x1026}, {&(0x7f0000000140)=""/210, 0xd2}, {&(0x7f0000000040)=""/175, 0xaf}, {&(0x7f0000000300)=""/278, 0x116}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/151, 0x97}], 0x9}, 0x2000)
write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33)

1m21.451175458s ago: executing program 1 (id=1890):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00')

1m21.360811301s ago: executing program 3 (id=1891):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x52}, 0x28)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
close(r0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)

1m21.261150247s ago: executing program 1 (id=1892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1m21.209353638s ago: executing program 33 (id=1892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1m20.387781239s ago: executing program 3 (id=1895):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125dea9d1b1", 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m20.38624102s ago: executing program 34 (id=1895):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125dea9d1b1", 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m0.988267541s ago: executing program 5 (id=2163):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000640), 0x4)

1m0.909589182s ago: executing program 5 (id=2166):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000)

1m0.909332639s ago: executing program 5 (id=2167):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000002c0), 0x8)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x1)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f80315420051379c86fcfd34f0bf334f466bc0f80bf5e242e8e9c25a12ccc88aece5bb4fcc6025e200"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x4a, 0x0, 0x0, 0xa5124f9}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)

59.909331627s ago: executing program 5 (id=2182):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2a1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="000000006a0000db000000000000000000000000d399d7962a1b8f27858ecd449fe7b211eda8905e6d6fffc69845a9517b4765548384a99af1582ca98fa2b973bb4219c25205ce760aee0f733a5fb3972a8cb504630898489354f06098e5e8fb52139f8e9d3c0a4488c6493dfc085ad415e51a7331cabbb421c378bb69084f26f02eb2afdecc61c91692e2dfada92e013f", @ANYRES32=0x0, @ANYRES32], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa84, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffc00, 0x3}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x5, 0xffffffffffffffff, 0xb)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000018000000070000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000011000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000001"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x35, &(0x7f0000000040), 0x13)

59.790533009s ago: executing program 5 (id=2183):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

59.7203998s ago: executing program 5 (id=2184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

44.718528039s ago: executing program 35 (id=2184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.529763433s ago: executing program 6 (id=2934):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20)

4.459702508s ago: executing program 6 (id=2935):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu<00||!')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x8, 0x0, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)='blkio.bfq.sectors\x00'}, 0x30)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$kcm(0xa, 0x1, 0x0)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x26, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b", 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004800)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8)
setsockopt$sock_attach_bpf(r4, 0x0, 0x2a, 0x0, 0x0)

4.228438056s ago: executing program 6 (id=2937):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

949.059416ms ago: executing program 6 (id=2941):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x22, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

896.101488ms ago: executing program 6 (id=2944):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0), 0x1000, r1}, 0x38)

895.900342ms ago: executing program 4 (id=2945):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x12)

660.10376ms ago: executing program 0 (id=2947):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90235fc60", 0x14}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)

590.181274ms ago: executing program 4 (id=2948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)
syz_clone(0xa3ae8500, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

450.07271ms ago: executing program 0 (id=2949):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
close(0x3)

380.235914ms ago: executing program 4 (id=2950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x24000000)

379.850384ms ago: executing program 4 (id=2951):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./cgroup/file0\x00', 0x0, 0x4010, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./cgroup/file0\x00', r3, 0x4000, r0}, 0x18)

319.546929ms ago: executing program 0 (id=2952):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x1a, 0x10}, 0x20)

319.459744ms ago: executing program 0 (id=2953):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x6, 'pids'}, {0x2d, 'devices'}, {0x2b, 'blkio'}, {0x6, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'pids'}]}, 0x2a)

219.27348ms ago: executing program 4 (id=2954):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08042000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

218.989295ms ago: executing program 0 (id=2955):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xd, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

68.937209ms ago: executing program 4 (id=2956):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

176.56µs ago: executing program 6 (id=2957):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x108, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x28ae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5, 0x2000000}}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=2958):
r0 = socket$kcm(0xa, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40010040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62696' (ED25519) to the list of known hosts.
syzkaller login: [   50.213231][ T5778] cgroup: Unknown subsys name 'net'
[   50.295454][ T5778] cgroup: Unknown subsys name 'cpuset'
[   50.300748][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.465082][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.911196][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.922895][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.927175][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.931097][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.935258][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.938695][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.942503][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.953290][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.963367][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.971822][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.993501][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.995293][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.000261][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.004265][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.011190][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.357600][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   57.366132][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   57.422884][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   57.570483][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.574881][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.578224][ T5851] bridge_slave_0: entered allmulticast mode
[   57.582610][ T5851] bridge_slave_0: entered promiscuous mode
[   57.588708][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.592872][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.596248][ T5851] bridge_slave_1: entered allmulticast mode
[   57.599411][ T5851] bridge_slave_1: entered promiscuous mode
[   57.603273][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.606374][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.609373][ T5842] bridge_slave_0: entered allmulticast mode
[   57.613664][ T5842] bridge_slave_0: entered promiscuous mode
[   57.618236][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.621268][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.625236][ T5842] bridge_slave_1: entered allmulticast mode
[   57.629005][ T5842] bridge_slave_1: entered promiscuous mode
[   57.632556][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.635569][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.638597][ T5844] bridge_slave_0: entered allmulticast mode
[   57.642765][ T5844] bridge_slave_0: entered promiscuous mode
[   57.647140][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.650090][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.653310][ T5844] bridge_slave_1: entered allmulticast mode
[   57.656827][ T5844] bridge_slave_1: entered promiscuous mode
[   57.729114][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.749412][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.755995][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.762791][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.768836][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.798531][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.828405][ T5842] team0: Port device team_slave_0 added
[   57.832132][ T5851] team0: Port device team_slave_0 added
[   57.845608][ T5842] team0: Port device team_slave_1 added
[   57.849306][ T5851] team0: Port device team_slave_1 added
[   57.860820][ T5844] team0: Port device team_slave_0 added
[   57.865115][ T5844] team0: Port device team_slave_1 added
[   57.886746][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.889172][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.897747][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.944368][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.947310][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.958407][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.964204][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.967124][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.978368][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.984115][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.987089][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.998133][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.028593][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.031667][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.042859][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.054601][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.057292][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.067729][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.091265][ T5851] hsr_slave_0: entered promiscuous mode
[   58.096951][ T5851] hsr_slave_1: entered promiscuous mode
[   58.189929][ T5844] hsr_slave_0: entered promiscuous mode
[   58.193522][ T5844] hsr_slave_1: entered promiscuous mode
[   58.196098][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   58.198404][ T5844] Cannot create hsr debugfs directory
[   58.275093][ T5842] hsr_slave_0: entered promiscuous mode
[   58.278238][ T5842] hsr_slave_1: entered promiscuous mode
[   58.286147][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   58.288762][ T5842] Cannot create hsr debugfs directory
[   58.594727][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.604595][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.616256][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.634766][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.679427][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.686394][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.702898][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.722840][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.805029][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.813762][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.818991][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.834735][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.922773][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.930996][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.953531][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   58.960827][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   58.976474][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.979715][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.988085][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.990683][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.999568][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.002391][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.014140][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.016643][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.042921][   T55] Bluetooth: hci1: command tx timeout
[   59.043060][ T5848] Bluetooth: hci2: command tx timeout
[   59.045518][   T55] Bluetooth: hci0: command tx timeout
[   59.074809][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.098642][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.139821][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.164546][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   59.172802][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.175820][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.197281][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.200282][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.336716][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.374626][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.400289][ T5844] veth0_vlan: entered promiscuous mode
[   59.411264][ T5844] veth1_vlan: entered promiscuous mode
[   59.439493][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.490418][ T5844] veth0_macvtap: entered promiscuous mode
[   59.499038][ T5851] veth0_vlan: entered promiscuous mode
[   59.507642][ T5844] veth1_macvtap: entered promiscuous mode
[   59.516552][ T5851] veth1_vlan: entered promiscuous mode
[   59.532263][ T5842] veth0_vlan: entered promiscuous mode
[   59.540036][ T5842] veth1_vlan: entered promiscuous mode
[   59.546887][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.559600][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.580053][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.584451][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.590430][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.597959][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.646177][ T5851] veth0_macvtap: entered promiscuous mode
[   59.657556][ T5842] veth0_macvtap: entered promiscuous mode
[   59.669015][ T5851] veth1_macvtap: entered promiscuous mode
[   59.693448][ T5842] veth1_macvtap: entered promiscuous mode
[   59.709078][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.718338][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.746604][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.758193][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.764130][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.769295][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.779418][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.783512][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.794845][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.815222][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.836980][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.840629][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.844683][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.858788][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.863271][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.878732][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.892156][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.895439][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.948952][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.957607][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.964692][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.023462][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.030652][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.082448][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.085400][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.341328][    C0] hrtimer: interrupt took 32335 ns
[   60.516447][ T5936] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.10'.
[   60.846554][ T5942] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET)
[   61.132412][ T5850] Bluetooth: hci2: command tx timeout
[   61.136266][ T5848] Bluetooth: hci1: command tx timeout
[   61.139142][   T55] Bluetooth: hci0: command tx timeout
[   63.202604][ T5850] Bluetooth: hci2: command tx timeout
[   63.204670][ T5850] Bluetooth: hci1: command tx timeout
[   63.207184][   T55] Bluetooth: hci0: command tx timeout
[   64.460047][ T5955] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   64.463522][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   64.692760][ T5962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.034201][ T5951] netlink: 'syz.2.16': attribute type 12 has an invalid length.
[   65.038101][ T5951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16'.
[   65.295378][   T55] Bluetooth: hci0: command tx timeout
[   65.297712][   T55] Bluetooth: hci1: command tx timeout
[   65.300095][   T55] Bluetooth: hci2: command tx timeout
[   65.405961][ T5988] netlink: 277 bytes leftover after parsing attributes in process `syz.2.30'.
[   65.511626][ T5994] netlink: 'syz.1.34': attribute type 19 has an invalid length.
[   66.379363][ T5992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.33'.
[   66.391432][ T5996] netlink: 830 bytes leftover after parsing attributes in process `syz.1.35'.
[   69.867849][ T6021] netlink: 277 bytes leftover after parsing attributes in process `syz.0.45'.
[   70.587647][ T6034] netlink: 'syz.2.51': attribute type 2 has an invalid length.
[   70.595187][ T6034] netlink: 51 bytes leftover after parsing attributes in process `syz.2.51'.
[   71.313568][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.316419][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.952745][ T6075] warning: `syz.1.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.039396][ T6075] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   72.106848][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.287886][ T6091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.76'.
[   72.293506][ T6091] openvswitch: netlink: Missing key (keys=40, expected=100)
[   72.737983][ T6112] =======================================================
[   72.737983][ T6112] WARNING: The mand mount option has been deprecated and
[   72.737983][ T6112]          and is ignored by this kernel. Remove the mand
[   72.737983][ T6112]          option from the mount to silence this warning.
[   72.737983][ T6112] =======================================================
[   73.003935][ T6120] netlink: 'syz.2.89': attribute type 2 has an invalid length.
[   73.007428][ T6120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.89'.
[   73.226166][ T6134] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   73.272782][ T6136] netlink: 'syz.1.97': attribute type 28 has an invalid length.
[   73.503971][ T6138] netlink: 'syz.1.98': attribute type 25 has an invalid length.
[   73.905638][ T6163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.921049][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'.
[   74.979893][ T6218] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'.
[   75.264972][ T6226] netlink: 'syz.0.138': attribute type 2 has an invalid length.
[   75.268211][ T6226] netlink: 'syz.0.138': attribute type 7 has an invalid length.
[   75.270821][ T6226] netlink: 85 bytes leftover after parsing attributes in process `syz.0.138'.
[   75.275509][ T6226] netlink: 130140 bytes leftover after parsing attributes in process `syz.0.138'.
[   75.278905][ T6226] netlink: 'syz.0.138': attribute type 2 has an invalid length.
[   75.284860][ T6226] netlink: 'syz.0.138': attribute type 7 has an invalid length.
[   75.288146][ T6226] netlink: 85 bytes leftover after parsing attributes in process `syz.0.138'.
[   75.845606][ T6233] netlink: 'syz.1.142': attribute type 21 has an invalid length.
[   75.894256][ T6234] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[   76.086112][ T6242] netlink: 'syz.0.146': attribute type 10 has an invalid length.
[   76.119136][ T6242] team0: Port device geneve1 added
[   76.324015][ T6255] Zero length message leads to an empty skb
[   76.924418][ T6278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'.
[   77.087178][ T6278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'.
[   77.099189][ T6281] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.162'.
[   77.572395][ T6278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'.
[   79.128046][ T6290] netlink: 'syz.1.163': attribute type 10 has an invalid length.
[   79.278729][ T6290] geneve0: entered promiscuous mode
[   79.295388][ T6290] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   79.527673][ T6303] bridge0: port 3(veth0_to_team) entered blocking state
[   79.530677][ T6303] bridge0: port 3(veth0_to_team) entered disabled state
[   79.538078][ T6303] veth0_to_team: entered allmulticast mode
[   79.553268][ T6303] veth0_to_team: entered promiscuous mode
[   79.556083][ T6303] bridge0: port 3(veth0_to_team) entered blocking state
[   79.559277][ T6303] bridge0: port 3(veth0_to_team) entered forwarding state
[   79.682899][ T6308] netlink: 168 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.699571][ T6305] netlink: 'syz.1.170': attribute type 21 has an invalid length.
[   79.703040][ T6305] netlink: 'syz.1.170': attribute type 4 has an invalid length.
[   79.706247][ T6305] netlink: 14453 bytes leftover after parsing attributes in process `syz.1.170'.
[   80.830181][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   81.156311][ T6355] netlink: 'syz.0.192': attribute type 39 has an invalid length.
[   81.363380][   T10] cfg80211: failed to load regulatory.db
[   81.747376][ T6382] netlink: 'syz.1.202': attribute type 29 has an invalid length.
[   81.760395][ T6382] netlink: 'syz.1.202': attribute type 29 has an invalid length.
[   81.767070][ T6382] netlink: 'syz.1.202': attribute type 29 has an invalid length.
[   81.773711][ T6382] netlink: 'syz.1.202': attribute type 29 has an invalid length.
[   82.517025][ T5850] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8
[   82.618480][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   82.625952][ T6402] netlink: 130076 bytes leftover after parsing attributes in process `syz.1.209'.
[   82.629615][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   82.865732][ T6413] netlink: 'syz.2.214': attribute type 10 has an invalid length.
[   82.898429][ T6413] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.036688][ T6409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.184919][ T6426] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.220'.
[   83.429425][ T6439] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   83.435959][ T6439] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   83.443401][ T6444] netlink: 'syz.0.226': attribute type 1 has an invalid length.
[   83.448226][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   83.928011][ T6460] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   83.932853][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   84.579924][ T6473] netlink: 'syz.0.238': attribute type 3 has an invalid length.
[   84.722552][ T6487] netlink: 'syz.0.245': attribute type 10 has an invalid length.
[   84.729336][ T6487] geneve0: entered promiscuous mode
[   84.743859][ T6487] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   84.929427][ T6498] netlink: 92 bytes leftover after parsing attributes in process `syz.1.250'.
[   84.935032][ T6498] netlink: 92 bytes leftover after parsing attributes in process `syz.1.250'.
[   85.433796][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   85.569866][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'.
[   85.794887][ T6547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.377608][ T6603] validate_nla: 1 callbacks suppressed
[   87.377619][ T6603] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[   87.670613][ T6625] netlink: set zone limit has 4 unknown bytes
[   87.836253][ T6629] __nla_validate_parse: 4 callbacks suppressed
[   87.836312][ T6629] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.308'.
[   88.119906][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'.
[   88.123959][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'.
[   88.217931][ T6661] netlink: 'syz.2.323': attribute type 12 has an invalid length.
[   88.220612][ T6661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.323'.
[   88.339430][ T6664] netlink: 240 bytes leftover after parsing attributes in process `syz.2.324'.
[   88.737767][ T6674] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.328'.
[   89.140194][ T6694] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.338'.
[   89.167885][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'.
[   90.613208][ T6744] wg2: entered promiscuous mode
[   90.615481][ T6744] wg2: entered allmulticast mode
[   91.335704][ T6788] netlink: 'syz.2.381': attribute type 6 has an invalid length.
[   91.791237][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'.
[   92.510177][ T6843] netlink: 'syz.2.407': attribute type 9 has an invalid length.
[   92.514032][ T6843] netlink: 44 bytes leftover after parsing attributes in process `syz.2.407'.
[   92.607092][ T6854] netlink: 'syz.1.413': attribute type 10 has an invalid length.
[   93.335630][ T6897] netlink: 'syz.2.432': attribute type 9 has an invalid length.
[   93.339182][ T6897] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.432'.
[   93.569168][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'.
[   93.579067][ T6908] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   93.580665][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'.
[   93.592342][ T6908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.611475][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'.
[   93.712792][ T6915] netlink: 'syz.2.440': attribute type 1 has an invalid length.
[   93.715683][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'.
[   93.790326][ T6923] netlink: 'syz.2.444': attribute type 10 has an invalid length.
[   93.808533][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.444'.
[   93.819185][ T6923] dummy0: entered promiscuous mode
[   93.824951][ T6923] bridge0: port 4(dummy0) entered blocking state
[   93.827969][ T6923] bridge0: port 4(dummy0) entered disabled state
[   93.831027][ T6923] dummy0: entered allmulticast mode
[   93.839304][ T6923] bridge0: port 4(dummy0) entered blocking state
[   93.842465][ T6923] bridge0: port 4(dummy0) entered forwarding state
[   94.318165][ T5850] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[   94.697860][ T6972] : port 1(veth0_to_bridge) entered blocking state
[   94.702965][ T6972] : port 1(veth0_to_bridge) entered disabled state
[   94.706438][ T6972] veth0_to_bridge: entered allmulticast mode
[   94.709930][ T6972] veth0_to_bridge: entered promiscuous mode
[   94.717597][ T6972] : port 2(veth0_to_team) entered blocking state
[   94.720310][ T6972] : port 2(veth0_to_team) entered disabled state
[   94.723791][ T6972] veth0_to_team: entered allmulticast mode
[   94.726706][ T6972] veth0_to_team: entered promiscuous mode
[   95.004925][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'.
[   95.008264][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'.
[   95.013044][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'.
[   95.251283][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[   95.424596][ T7025] netlink: 'syz.1.491': attribute type 1 has an invalid length.
[   97.460052][ T7076] netlink: zone id is out of range
[   97.468364][ T7076] netlink: zone id is out of range
[   97.470632][ T7076] netlink: zone id is out of range
[   97.474406][ T7076] netlink: zone id is out of range
[   97.476687][ T7076] netlink: zone id is out of range
[   97.479187][ T7076] netlink: zone id is out of range
[   97.483168][ T7076] netlink: zone id is out of range
[   97.485444][ T7076] netlink: zone id is out of range
[   98.033309][   T33] audit: type=1107 audit(1758698456.460:2): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   98.100018][ T7097] netlink: 'syz.2.524': attribute type 11 has an invalid length.
[   98.965681][ T7136] netlink: 'syz.1.535': attribute type 21 has an invalid length.
[   98.969276][ T7136] __nla_validate_parse: 9 callbacks suppressed
[   98.969287][ T7136] netlink: 128 bytes leftover after parsing attributes in process `syz.1.535'.
[   98.976180][ T7136] netlink: 'syz.1.535': attribute type 4 has an invalid length.
[   98.979431][ T7136] netlink: 'syz.1.535': attribute type 5 has an invalid length.
[   98.983539][ T7136] netlink: 3 bytes leftover after parsing attributes in process `syz.1.535'.
[   99.167071][ T7142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.537'.
[   99.319107][ T7154] netlink: 'syz.1.542': attribute type 10 has an invalid length.
[   99.322614][ T7154] lo: entered promiscuous mode
[   99.326732][ T7154] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   99.385261][ T7156] netlink: 'syz.2.543': attribute type 29 has an invalid length.
[   99.406666][ T7156] netlink: 'syz.2.543': attribute type 10 has an invalid length.
[   99.549876][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.572757][ T7156] team0: Port device bond0 added
[  100.002108][ T7197] net_ratelimit: 14 callbacks suppressed
[  100.002182][ T7197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.030147][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.2.565'.
[  100.166427][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'.
[  100.508058][ T7240] netlink: 'syz.2.582': attribute type 4 has an invalid length.
[  100.517649][ T7240] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.582'.
[  100.748670][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'.
[  101.673717][ T7277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.598'.
[  101.965711][ T7295] vcan0 speed is unknown, defaulting to 1000
[  101.972467][ T7295] vcan0 speed is unknown, defaulting to 1000
[  101.978012][ T7295] vcan0 speed is unknown, defaulting to 1000
[  102.626382][ T7295] infiniband syz1: set active
[  102.630190][  T792] vcan0 speed is unknown, defaulting to 1000
[  102.633491][ T7295] infiniband syz1: added vcan0
[  102.867568][ T7295] RDS/IB: syz1: added
[  102.870194][ T7295] smc: adding ib device syz1 with port count 1
[  102.875412][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[  102.882224][ T7295] smc:    ib device syz1 port 1 has pnetid 
[  102.885846][  T792] vcan0 speed is unknown, defaulting to 1000
[  102.890988][ T7295] vcan0 speed is unknown, defaulting to 1000
[  103.027013][ T7295] vcan0 speed is unknown, defaulting to 1000
[  103.143907][ T7295] vcan0 speed is unknown, defaulting to 1000
[  103.276419][ T7295] syz.2.602 (7295) used greatest stack depth: 18624 bytes left
[  103.667989][ T7342] netlink: 14 bytes leftover after parsing attributes in process `syz.1.619'.
[  103.997298][ T7354] __nla_validate_parse: 1 callbacks suppressed
[  103.997312][ T7354] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.624'.
[  104.215606][ T7379] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  104.261521][ T7383] netlink: 'syz.1.637': attribute type 21 has an invalid length.
[  104.277895][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  104.283687][ T7385] netlink: 200 bytes leftover after parsing attributes in process `syz.0.638'.
[  104.342074][ T7388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'.
[  104.538720][ T7402] vcan0 speed is unknown, defaulting to 1000
[  105.765376][ T7429] netlink: 'syz.2.656': attribute type 2 has an invalid length.
[  105.812376][ T7429] netlink: 'syz.2.656': attribute type 8 has an invalid length.
[  105.818266][ T7429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.656'.
[  106.475985][ T7442] team0: Port device team_slave_0 removed
[  106.478837][ T7442] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  110.219453][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'.
[  110.230834][ T7560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.809022][ T7603] netlink: 'syz.1.732': attribute type 3 has an invalid length.
[  112.305124][ T7634] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  112.615868][ T7660] netlink: 'syz.0.759': attribute type 8 has an invalid length.
[  112.749957][ T7663] vcan0 speed is unknown, defaulting to 1000
[  113.089162][ T7675] syzkaller0: entered promiscuous mode
[  113.090970][ T7675] syzkaller0: entered allmulticast mode
[  113.100267][ T7677] vxcan1: entered allmulticast mode
[  113.210193][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.766'.
[  114.355388][ T7709] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.779'.
[  114.367846][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  114.372378][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  114.507778][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'.
[  114.732751][ T7727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.787'.
[  115.077414][ T5850] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  115.550365][ T7734] option changes via remount are deprecated (pid=7729 comm=syz.2.788)
[  115.739921][ T7763] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  115.873291][ T7768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.801'.
[  116.025568][ T7779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.807'.
[  116.029375][ T7778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.807'.
[  116.343343][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'.
[  117.961188][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  117.978553][ T7835] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  117.981845][ T7835] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  118.294979][ T7854] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.842'.
[  122.193077][ T7951] delete_channel: no stack
[  123.785916][ T7988] syzkaller0: entered promiscuous mode
[  123.788313][ T7988] syzkaller0: entered allmulticast mode
[  124.847359][ T7999] netlink: 'syz.0.908': attribute type 39 has an invalid length.
[  127.240254][ T8081] netlink: 264 bytes leftover after parsing attributes in process `syz.0.946'.
[  127.253755][ T8081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.946'.
[  127.443004][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  127.446682][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  127.450320][   T55] Bluetooth: hci1: hardware error 0x00
[  127.635752][ T8089] netlink: 64 bytes leftover after parsing attributes in process `syz.0.949'.
[  127.845252][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  128.556328][ T8110] netlink: 92 bytes leftover after parsing attributes in process `syz.0.957'.
[  128.559783][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'.
[  128.566055][ T8110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'.
[  128.590007][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'.
[  128.599429][ T8110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.957'.
[  129.076774][ T8123] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.962'.
[  129.521569][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  130.386964][ T8153] netlink: 'syz.0.974': attribute type 23 has an invalid length.
[  130.875223][ T8168] netlink: 'syz.1.981': attribute type 3 has an invalid length.
[  131.008749][ T8175] hsr_slave_0: left promiscuous mode
[  131.012885][ T8175] hsr_slave_1: left promiscuous mode
[  132.379936][ T8207] openvswitch: netlink: Message has 8 unknown bytes.
[  132.428154][ T8215] __nla_validate_parse: 3 callbacks suppressed
[  132.428164][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'.
[  132.634983][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.639138][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.546180][ T8240] syz.1.1011: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  133.572141][ T8240] CPU: 0 UID: 0 PID: 8240 Comm: syz.1.1011 Not tainted syzkaller #0 PREEMPT(full) 
[  133.572169][ T8240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.572174][ T8240] Call Trace:
[  133.572179][ T8240]  <TASK>
[  133.572183][ T8240]  dump_stack_lvl+0x189/0x250
[  133.572199][ T8240]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.572210][ T8240]  ? __pfx__printk+0x10/0x10
[  133.572221][ T8240]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.572231][ T8240]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  133.572242][ T8240]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  133.572253][ T8240]  warn_alloc+0x214/0x310
[  133.572283][ T8240]  ? stack_depot_save_flags+0x436/0x860
[  133.572296][ T8240]  ? __pfx_warn_alloc+0x10/0x10
[  133.572309][ T8240]  ? kasan_save_track+0x4f/0x80
[  133.572319][ T8240]  ? xskq_create+0x56/0x170
[  133.572327][ T8240]  ? xsk_init_queue+0xb0/0x110
[  133.572334][ T8240]  ? xsk_setsockopt+0x57b/0x8d0
[  133.572346][ T8240]  ? do_sock_setsockopt+0x17c/0x1b0
[  133.572354][ T8240]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  133.572362][ T8240]  ? do_syscall_64+0xfa/0x3b0
[  133.572370][ T8240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.572380][ T8240]  __vmalloc_node_range_noprof+0x125/0x12f0
[  133.572409][ T8240]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  133.572420][ T8240]  ? xskq_create+0x56/0x170
[  133.572429][ T8240]  ? __kasan_kmalloc+0x93/0xb0
[  133.572441][ T8240]  vmalloc_user_noprof+0xad/0xf0
[  133.572453][ T8240]  ? xskq_create+0xbf/0x170
[  133.572460][ T8240]  xskq_create+0xbf/0x170
[  133.572469][ T8240]  xsk_init_queue+0xb0/0x110
[  133.572477][ T8240]  xsk_setsockopt+0x57b/0x8d0
[  133.572490][ T8240]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.572502][ T8240]  ? __pfx_aa_sk_perm+0x10/0x10
[  133.572515][ T8240]  ? __fget_files+0x2a/0x420
[  133.572522][ T8240]  ? aa_sock_opt_perm+0xff/0x1b0
[  133.572531][ T8240]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  133.572540][ T8240]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.572551][ T8240]  do_sock_setsockopt+0x17c/0x1b0
[  133.572562][ T8240]  __x64_sys_setsockopt+0x13f/0x1b0
[  133.572573][ T8240]  do_syscall_64+0xfa/0x3b0
[  133.572581][ T8240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.572591][ T8240]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  133.572605][ T8240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.572615][ T8240] RIP: 0033:0x7fa41018ec29
[  133.572625][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.572634][ T8240] RSP: 002b:00007fa410f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.572673][ T8240] RAX: ffffffffffffffda RBX: 00007fa4103d6090 RCX: 00007fa41018ec29
[  133.572684][ T8240] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  133.572693][ T8240] RBP: 00007fa410211e41 R08: 0000000000000004 R09: 0000000000000000
[  133.572700][ T8240] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  133.572707][ T8240] R13: 00007fa4103d6128 R14: 00007fa4103d6090 R15: 00007ffce6666068
[  133.572728][ T8240]  </TASK>
[  133.572780][ T8240] Mem-Info:
[  133.721822][ T8240] active_anon:5041 inactive_anon:0 isolated_anon:0
[  133.721822][ T8240]  active_file:1201 inactive_file:38265 isolated_file:0
[  133.721822][ T8240]  unevictable:1768 dirty:98 writeback:0
[  133.721822][ T8240]  slab_reclaimable:9589 slab_unreclaimable:55172
[  133.721822][ T8240]  mapped:18011 shmem:2437 pagetables:878
[  133.721822][ T8240]  sec_pagetables:0 bounce:0
[  133.721822][ T8240]  kernel_misc_reclaimable:0
[  133.721822][ T8240]  free:295932 free_pcp:18018 free_cma:0
[  133.739033][ T8240] Node 0 active_anon:12220kB inactive_anon:0kB active_file:3136kB inactive_file:16384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32452kB dirty:184kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4964kB pagetables:1460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.800885][ T8240] Node 1 active_anon:7944kB inactive_anon:0kB active_file:1668kB inactive_file:136676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39592kB dirty:208kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6340kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.803677][ T8247] netlink: 'syz.0.1016': attribute type 21 has an invalid length.
[  133.813472][ T8240] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  133.813721][ T8240] lowmem_reserve[]: 0 811 811 811 811
[  133.829276][ T8240] Node 0 DMA32 free:385700kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12220kB inactive_anon:0kB active_file:3136kB inactive_file:16384kB unevictable:3536kB writepending:184kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:30220kB local_pcp:14084kB free_cma:0kB
[  133.834503][ T8247] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1016'.
[  133.843331][ T8240] lowmem_reserve[]: 0 0 0 0 0
[  133.847001][ T8240] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  133.861220][ T8240] lowmem_reserve[]: 0 0 854 854 854
[  133.863421][ T8240] Node 1 Normal free:323940kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7944kB inactive_anon:0kB active_file:1668kB inactive_file:136676kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41604kB local_pcp:17544kB free_cma:0kB
[  133.876263][ T8240] lowmem_reserve[]: 0 0 0 0 0
[  133.878614][ T8240] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  133.901038][ T8240] Node 0 DMA32: 845*4kB (UM) 594*8kB (UME) 374*16kB (UM) 10*32kB (UME) 59*64kB (UM) 51*128kB (UM) 22*256kB (UM) 22*512kB (UME) 2*1024kB (U) 3*2048kB (UM) 82*4096kB (UM) = 385700kB
[  133.908447][ T8240] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  133.916953][ T8240] Node 1 Normal: 101*4kB (UE) 104*8kB (U) 589*16kB (UME) 500*32kB (UME) 150*64kB (UME) 58*128kB (UM) 25*256kB (UME) 15*512kB (UME) 12*1024kB (UME) 8*2048kB (UME) 58*4096kB (UM) = 324004kB
[  133.924753][ T8240] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.928037][ T8240] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.941218][ T8240] 41903 total pagecache pages
[  133.943517][ T8240] 0 pages in swap cache
[  133.945723][ T8240] Free swap  = 124996kB
[  133.948305][ T8240] Total swap = 124996kB
[  133.951229][ T8240] 786301 pages RAM
[  133.953729][ T8240] 0 pages HighMem/MovableOnly
[  133.956170][ T8240] 241346 pages reserved
[  133.958047][ T8240] 0 pages cma reserved
[  134.003973][ T8253] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[  135.178461][ T8279] netlink: 'syz.1.1030': attribute type 15 has an invalid length.
[  135.181884][ T8279] netlink: 'syz.1.1030': attribute type 7 has an invalid length.
[  135.184430][ T8279] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1030'.
[  135.333943][ T8287] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  135.338539][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1034'.
[  135.352881][ T8287] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  135.562203][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  135.570394][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  135.766572][ T8311] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  136.837250][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.843579][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.847908][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.852011][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.855522][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.889279][ T8336] vcan0 speed is unknown, defaulting to 1000
[  137.066366][ T5877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.260458][ T5877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.337456][ T8357] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1062'.
[  137.364928][ T5877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.390392][ T8336] chnl_net:caif_netlink_parms(): no params data found
[  137.471197][ T5877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.609308][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.613136][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.616037][ T8336] bridge_slave_0: entered allmulticast mode
[  137.618813][ T8336] bridge_slave_0: entered promiscuous mode
[  137.621987][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.624460][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.627291][ T8336] bridge_slave_1: entered allmulticast mode
[  137.630239][ T8336] bridge_slave_1: entered promiscuous mode
[  137.696187][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.727388][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.763217][ T5877] dummy0: left allmulticast mode
[  137.765896][ T5877] bridge0: port 4(dummy0) entered disabled state
[  137.772607][ T5877] veth0_to_team: left allmulticast mode
[  137.774654][ T5877] veth0_to_team: left promiscuous mode
[  137.776920][ T5877] bridge0: port 3(veth0_to_team) entered disabled state
[  137.792428][ T5877] bridge_slave_1: left allmulticast mode
[  137.794280][ T5877] bridge_slave_1: left promiscuous mode
[  137.796198][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.806827][ T5877] bridge_slave_0: left allmulticast mode
[  137.808789][ T5877] bridge_slave_0: left promiscuous mode
[  137.818424][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.146663][ T5877] team0: Port device bond0 removed
[  138.150595][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.157145][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.163891][ T5877] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  138.173527][ T5877] bond0 (unregistering): Released all slaves
[  138.215219][ T8414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1080'.
[  138.225260][ T8382] syzkaller0: entered promiscuous mode
[  138.234680][ T8382] syzkaller0: entered allmulticast mode
[  138.270758][ T8414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1080'.
[  138.293072][ T8336] team0: Port device team_slave_0 added
[  138.322778][ T8414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1080'.
[  138.330029][ T8336] team0: Port device team_slave_1 added
[  138.363113][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.368276][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.380848][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.395170][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.397745][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.411437][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.600293][ T8336] hsr_slave_0: entered promiscuous mode
[  138.607252][ T8336] hsr_slave_1: entered promiscuous mode
[  138.610257][ T8336] debugfs: 'hsr0' already exists in 'hsr'
[  138.612887][ T8336] Cannot create hsr debugfs directory
[  138.699166][ T8429] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.1082'.
[  138.706151][ T8429] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  138.709671][ T8429] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  138.882167][   T55] Bluetooth: hci2: command tx timeout
[  139.538520][ T5877] hsr_slave_0: left promiscuous mode
[  139.541178][ T5877] hsr_slave_1: left promiscuous mode
[  139.544042][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.547044][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.550920][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.554193][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.576850][ T5877] veth1_macvtap: left promiscuous mode
[  139.579967][ T5877] veth0_macvtap: left promiscuous mode
[  139.585025][ T5877] veth1_vlan: left promiscuous mode
[  139.587628][ T5877] veth0_vlan: left promiscuous mode
[  139.613056][ T8433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.989320][ T5877] team0 (unregistering): Port device team_slave_1 removed
[  140.021937][ T5877] team0 (unregistering): Port device team_slave_0 removed
[  140.218449][ T4504] smc: removing ib device syz1
[  140.284727][ T5914] vcan0 speed is unknown, defaulting to 1000
[  140.287386][ T5914] syz1: Port: 1 Link DOWN
[  140.507274][ T8336] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  140.528905][ T8336] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  140.558864][ T8336] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  140.587791][ T8336] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  140.739090][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.791009][ T8336] 8021q: adding VLAN 0 to HW filter on device team0
[  140.818844][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.822174][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.845685][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.848824][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.911416][ T8491] netlink: 'syz.0.1104': attribute type 1 has an invalid length.
[  140.963883][   T55] Bluetooth: hci2: command tx timeout
[  141.125723][ T8336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.212492][ T8336] veth0_vlan: entered promiscuous mode
[  141.226668][ T8336] veth1_vlan: entered promiscuous mode
[  141.262146][ T8336] veth0_macvtap: entered promiscuous mode
[  141.267472][ T8336] veth1_macvtap: entered promiscuous mode
[  141.278247][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.285874][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.293119][ T5744] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.297987][ T5744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.306401][ T5744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.313808][ T8519] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1111'.
[  141.318857][ T5744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.380023][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.388180][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.418720][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.422846][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.609741][ T8537] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1119'.
[  141.621860][ T8538] lo speed is unknown, defaulting to 1000
[  141.630031][ T8538] lo speed is unknown, defaulting to 1000
[  141.635277][ T8538] lo speed is unknown, defaulting to 1000
[  141.701722][ T8542] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1121'.
[  141.951430][ T5901] lo speed is unknown, defaulting to 1000
[  141.954225][ T8538] infiniband syz2: set down
[  141.955917][ T8538] infiniband syz2: added lo
[  142.011433][ T8545] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1122'.
[  142.015332][ T8538] RDS/IB: syz2: added
[  142.019083][ T8538] smc: adding ib device syz2 with port count 1
[  142.023219][ T8538] smc:    ib device syz2 port 1 has pnetid 
[  142.025482][ T5900] lo speed is unknown, defaulting to 1000
[  142.028735][ T8538] lo speed is unknown, defaulting to 1000
[  142.140522][ T8538] lo speed is unknown, defaulting to 1000
[  142.244262][ T8538] lo speed is unknown, defaulting to 1000
[  142.405406][ T8569] delete_channel: no stack
[  142.499345][ T8572] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1134'.
[  143.042141][   T55] Bluetooth: hci2: command tx timeout
[  143.935682][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'.
[  144.037669][ T8632] netlink: 'syz.0.1159': attribute type 21 has an invalid length.
[  144.041008][ T8632] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1159'.
[  144.048375][ T8632] netlink: 'syz.0.1159': attribute type 5 has an invalid length.
[  144.051065][ T8632] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1159'.
[  144.394828][ T8644] netlink: 'syz.3.1165': attribute type 4 has an invalid length.
[  144.649398][ T8649] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1167'.
[  144.658266][ T8649] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1167'.
[  144.689381][ T8661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.692360][ T8661] IPv6: NLM_F_CREATE should be set when creating new route
[  144.695350][ T8661] IPv6: NLM_F_CREATE should be set when creating new route
[  144.969706][ T8676] syzkaller0: entered promiscuous mode
[  144.976892][ T8676] syzkaller0: entered allmulticast mode
[  145.000523][ T8680] : renamed from veth0_to_bond (while UP)
[  145.121600][   T55] Bluetooth: hci2: command tx timeout
[  145.310851][ T8696] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  145.796067][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'.
[  146.128387][ T8740] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1211'.
[  146.132128][ T8740] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1211'.
[  146.135855][ T8740] tc_dump_action: action bad kind
[  146.390994][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'.
[  146.584823][ T8764] netlink: 'syz.3.1222': attribute type 13 has an invalid length.
[  146.590864][ T8764] gretap0: refused to change device tx_queue_len
[  146.594901][ T8764] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  146.827695][ T8782] netlink: 'syz.3.1227': attribute type 21 has an invalid length.
[  146.832371][ T8782] IPv6: NLM_F_CREATE should be specified when creating new route
[  147.536960][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'.
[  147.598019][ T8811] netlink: 'syz.1.1234': attribute type 4 has an invalid length.
[  147.612191][ T8811] .`: renamed from bond0 (while UP)
[  148.064990][ T8838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.067502][ T8838] IPv6: NLM_F_CREATE should be set when creating new route
[  148.070626][ T8838] IPv6: NLM_F_CREATE should be set when creating new route
[  148.073122][ T8838] IPv6: NLM_F_CREATE should be set when creating new route
[  151.326725][ T8874] __nla_validate_parse: 5 callbacks suppressed
[  151.326740][ T8874] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.1259'.
[  151.361028][ T8877] netlink: 'syz.1.1260': attribute type 33 has an invalid length.
[  151.366602][ T8877] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1260'.
[  152.769772][ T8934] sit0: entered allmulticast mode
[  153.250461][ T8939] netlink: 9292 bytes leftover after parsing attributes in process `syz.1.1281'.
[  153.443052][ T8946] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1283'.
[  157.139109][ T8975] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  157.329334][ T8984] netlink: 'syz.1.1299': attribute type 2 has an invalid length.
[  157.379001][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'.
[  157.383558][ T8990] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  157.710158][ T9014] syz.1.1314 (9014) used obsolete PPPIOCDETACH ioctl
[  157.968492][ T9038] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1324'.
[  158.047069][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  158.145870][ T9044] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1327'.
[  159.535030][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'.
[  159.611473][   T26] wlan1: Trigger new scan to find an IBSS to join
[  159.692629][ T9087] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1347'.
[  159.810782][ T9100] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1352'.
[  159.836216][ T9104] delete_channel: no stack
[  160.922799][ T9144] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1372'.
[  161.094565][ T9160] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  161.489540][ T9191] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  161.518763][ T9191] veth1_macvtap: left promiscuous mode
[  161.697054][ T9209] netlink: 'syz.0.1396': attribute type 39 has an invalid length.
[  161.700745][ T9209] veth0_macvtap: left promiscuous mode
[  161.786685][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  162.256499][ T9243] netlink: 'syz.1.1410': attribute type 29 has an invalid length.
[  162.271460][ T9243] netlink: 'syz.1.1410': attribute type 29 has an invalid length.
[  162.280775][ T9243] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1410'.
[  162.361665][ T9256] netlink: 'syz.0.1416': attribute type 7 has an invalid length.
[  162.427457][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'.
[  162.573384][   T53] wlan1: Trigger new scan to find an IBSS to join
[  163.568291][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1016937750 wd_nsec: 1016937876
[  164.298106][ T9294] netlink: 'syz.3.1432': attribute type 13 has an invalid length.
[  164.301051][ T9294] netlink: 'syz.3.1432': attribute type 17 has an invalid length.
[  165.601606][ T4656] wlan1: Trigger new scan to find an IBSS to join
[  166.636118][  T175] wlan1: Creating new IBSS network, BSSID 76:82:84:dc:95:8a
[  166.665102][ T9294] sit0: left allmulticast mode
[  166.726270][ T9294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.743938][ T9296] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  166.759310][ T9298] netlink: 'syz.1.1434': attribute type 21 has an invalid length.
[  166.763876][ T9298] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1434'.
[  166.987743][ T9321] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1445'.
[  167.302917][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'.
[  167.378982][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  167.424110][ T9351] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  167.606018][ T9362] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1464'.
[  167.609580][ T9362] openvswitch: netlink: Message has 6 unknown bytes.
[  167.616895][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'.
[  167.620428][ T9367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1466'.
[  167.727105][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'.
[  168.220508][ T9400] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1481'.
[  168.231862][ T9401] netlink: 'syz.3.1482': attribute type 23 has an invalid length.
[  168.387082][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1488'.
[  168.390709][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1488'.
[  169.368158][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1505'.
[  169.376423][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1505'.
[  169.380665][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1505'.
[  169.454446][ T9458] : renamed from vlan0 (while UP)
[  169.554691][ T9462] netlink: 'syz.3.1508': attribute type 2 has an invalid length.
[  169.557588][ T9462] netlink: 'syz.3.1508': attribute type 9 has an invalid length.
[  169.686863][ T9466] netlink: 'syz.3.1510': attribute type 10 has an invalid length.
[  172.174571][ T9536] rdma_rxe: rxe_newlink: failed to add erspan0
[  172.498806][ T9544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.570439][ T9546] syz.3.1545 (9546) used greatest stack depth: 18520 bytes left
[  172.624823][ T9552] netlink: 'syz.0.1547': attribute type 1 has an invalid length.
[  172.766547][ T9564] __nla_validate_parse: 4 callbacks suppressed
[  172.766566][ T9564] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1553'.
[  172.775927][ T9564] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1553'.
[  172.853956][ T9567] netlink: 'syz.3.1554': attribute type 3 has an invalid length.
[  172.857407][ T9567] netlink: 'syz.3.1554': attribute type 1 has an invalid length.
[  172.861142][ T9567] netlink: 'syz.3.1554': attribute type 2 has an invalid length.
[  172.864881][ T9567] netlink: 'syz.3.1554': attribute type 8 has an invalid length.
[  172.867935][ T9571] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1556'.
[  172.868223][ T9567] netlink: 'syz.3.1554': attribute type 10 has an invalid length.
[  172.876645][ T9567] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.1554'.
[  173.129738][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1567'.
[  173.210034][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'.
[  173.215786][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'.
[  173.436700][ T9611] validate_nla: 2 callbacks suppressed
[  173.436713][ T9611] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  173.445373][ T9611] netlink: 'syz.0.1572': attribute type 3 has an invalid length.
[  173.448192][ T9611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1572'.
[  174.449855][ T9627] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1582'.
[  174.527487][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'.
[  179.118865][ T9720] netlink: 'syz.3.1623': attribute type 280 has an invalid length.
[  179.140025][ T9722] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  179.330430][ T9738] __nla_validate_parse: 3 callbacks suppressed
[  179.330442][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'.
[  180.836460][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  181.749347][ T9767] netlink: 'syz.1.1642': attribute type 4 has an invalid length.
[  182.413060][ T9794] lo: entered allmulticast mode
[  182.419746][ T9794] lo: entered promiscuous mode
[  182.424392][ T9794] lo: left allmulticast mode
[  182.449388][ T9798] openvswitch: netlink: IP tunnel dst address not specified
[  182.542935][ T9802] pim6reg1: entered promiscuous mode
[  182.545254][ T9802] pim6reg1: entered allmulticast mode
[  183.290812][ T9825] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1666'.
[  183.468993][ T9834] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1671'.
[  183.543559][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'.
[  184.578666][ T9868] netlink: 'syz.1.1686': attribute type 1 has an invalid length.
[  184.589484][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'.
[  184.826800][ T9881] netlink: 'syz.0.1693': attribute type 2 has an invalid length.
[  184.830187][ T9881] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1693'.
[  185.430742][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'.
[  185.498122][ T9915] netlink: 'syz.3.1709': attribute type 25 has an invalid length.
[  185.523508][ T9915] netlink: 'syz.3.1709': attribute type 28 has an invalid length.
[  185.658665][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'.
[  185.675693][ T9927] netlink: 'syz.0.1714': attribute type 10 has an invalid length.
[  185.833173][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'.
[  185.836157][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'.
[  185.839284][ T9937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.958006][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'.
[  185.965418][ T9942] netlink: 'syz.3.1721': attribute type 4 has an invalid length.
[  185.969492][ T9942] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1721'.
[  185.985929][ T9944] netlink: 'syz.1.1722': attribute type 1 has an invalid length.
[  185.989325][ T9944] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1722'.
[  186.111045][ T9952] netlink: 'syz.1.1726': attribute type 7 has an invalid length.
[  186.564796][ T9969] netlink: 'syz.1.1733': attribute type 10 has an invalid length.
[  186.567852][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.570796][ T9969] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.608168][ T9969] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.611383][ T9969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.614092][ T9969] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.616571][ T9969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.645154][ T9969] .`: (slave bridge0): Enslaving as an active interface with an up link
[  187.438115][ T9991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1743'.
[  188.118260][T10011] netlink: 'syz.3.1751': attribute type 10 has an invalid length.
[  189.491673][T10060] cgroup: fork rejected by pids controller in /syz0
[  190.116907][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.120206][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.123092][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.128402][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.133060][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.154500][T10085] lo speed is unknown, defaulting to 1000
[  190.322883][T10096] validate_nla: 1 callbacks suppressed
[  190.322904][T10096] netlink: 'syz.3.1788': attribute type 1 has an invalid length.
[  190.328623][T10096] netlink: 'syz.3.1788': attribute type 2 has an invalid length.
[  190.334817][T10096] netlink: 'syz.3.1788': attribute type 3 has an invalid length.
[  190.338241][T10096] netlink: 'syz.3.1788': attribute type 5 has an invalid length.
[  190.342709][T10096] netlink: 'syz.3.1788': attribute type 6 has an invalid length.
[  190.346877][T10096] netlink: 'syz.3.1788': attribute type 7 has an invalid length.
[  190.350363][T10096] __nla_validate_parse: 2 callbacks suppressed
[  190.350377][T10096] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1788'.
[  190.358474][T10096] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.1788'.
[  190.362775][T10096] netlink: 'syz.3.1788': attribute type 1 has an invalid length.
[  190.366759][T10096] netlink: 'syz.3.1788': attribute type 2 has an invalid length.
[  190.370416][T10096] netlink: 'syz.3.1788': attribute type 3 has an invalid length.
[  190.374335][T10096] netlink: 'syz.3.1788': attribute type 5 has an invalid length.
[  190.377948][T10096] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1788'.
[  190.442905][T10085] chnl_net:caif_netlink_parms(): no params data found
[  190.525507][T10085] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.528011][T10085] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.530438][T10085] bridge_slave_0: entered allmulticast mode
[  190.533661][T10085] bridge_slave_0: entered promiscuous mode
[  190.537271][T10085] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.539723][T10085] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.542570][T10085] bridge_slave_1: entered allmulticast mode
[  190.545260][T10085] bridge_slave_1: entered promiscuous mode
[  190.566276][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.571676][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.591202][T10085] team0: Port device team_slave_0 added
[  190.597370][T10085] team0: Port device team_slave_1 added
[  190.616031][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.618453][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.627760][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.633366][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.635657][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.644938][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.674004][T10085] hsr_slave_0: entered promiscuous mode
[  190.676741][T10085] hsr_slave_1: entered promiscuous mode
[  190.779512][T10085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.876174][T10085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.933408][T10085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.971540][T10087] delete_channel: no stack
[  191.034267][T10085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.194585][T10085] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  191.198932][T10085] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  191.210372][T10085] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  191.214810][T10085] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  191.256417][T10114] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1791'.
[  191.321202][T10085] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.372397][T10085] 8021q: adding VLAN 0 to HW filter on device team0
[  191.386893][  T175] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.389555][  T175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.414772][  T175] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.417323][  T175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.740465][T10085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.848902][T10085] veth0_vlan: entered promiscuous mode
[  191.865993][T10085] veth1_vlan: entered promiscuous mode
[  191.915704][T10085] veth0_macvtap: entered promiscuous mode
[  191.928714][T10085] veth1_macvtap: entered promiscuous mode
[  191.954613][T10085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.968773][T10085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.990213][ T5744] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.995869][ T5744] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.001204][ T5744] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.008594][ T5744] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.127292][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.131193][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.145602][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1797'.
[  192.150923][T10134] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1797'.
[  192.154973][T10134] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1797'.
[  192.162602][ T5850] Bluetooth: hci1: command tx timeout
[  192.180056][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.183951][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.398186][T10151] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.1803'.
[  192.407653][T10151] openvswitch: netlink: Message has 6 unknown bytes.
[  192.498033][T10155] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  192.501637][T10155] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  192.647072][T10163] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1808'.
[  192.984052][T10173] openvswitch: netlink: IP tunnel dst address not specified
[  193.231562][T10186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1818'.
[  194.009659][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.021457][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.243725][ T5850] Bluetooth: hci1: command tx timeout
[  194.616211][T10252] syzkaller0: entered promiscuous mode
[  194.618501][T10252] syzkaller0: entered allmulticast mode
[  196.321662][ T5850] Bluetooth: hci1: command tx timeout
[  196.713275][   T26] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  197.904893][T10306] __nla_validate_parse: 3 callbacks suppressed
[  197.904904][T10306] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1872'.
[  197.958984][T10308] validate_nla: 5 callbacks suppressed
[  197.958997][T10308] netlink: 'syz.0.1873': attribute type 2 has an invalid length.
[  198.028731][T10314] netlink: 'syz.0.1876': attribute type 25 has an invalid length.
[  198.100211][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1879'.
[  198.117126][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1880'.
[  198.166745][T10326] netlink: 'syz.3.1882': attribute type 21 has an invalid length.
[  198.169664][T10326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1882'.
[  198.401693][ T5850] Bluetooth: hci1: command tx timeout
[  198.492661][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'.
[  199.258535][T10346] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1888'.
[  199.262459][T10345] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1888'.
[  200.406637][T10363] netlink: 'syz.0.1894': attribute type 3 has an invalid length.
[  200.409758][T10363] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1894'.
[  200.415513][T10363] netlink: 'syz.0.1894': attribute type 3 has an invalid length.
[  200.418670][T10363] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1894'.
[  200.676703][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.680131][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  200.682158][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.686796][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  200.691527][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.694182][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  200.694489][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.700372][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  200.703234][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.709582][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.738857][T10372] lo speed is unknown, defaulting to 1000
[  200.845870][T10373] lo speed is unknown, defaulting to 1000
[  200.938473][T10372] chnl_net:caif_netlink_parms(): no params data found
[  201.000791][T10372] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.007762][T10372] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.011580][T10372] bridge_slave_0: entered allmulticast mode
[  201.023333][T10372] bridge_slave_0: entered promiscuous mode
[  201.026850][T10372] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.029647][T10372] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.032656][T10372] bridge_slave_1: entered allmulticast mode
[  201.035513][T10372] bridge_slave_1: entered promiscuous mode
[  201.084281][T10372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.090817][T10372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.098515][T10397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1907'.
[  201.125253][T10372] team0: Port device team_slave_0 added
[  201.133888][T10372] team0: Port device team_slave_1 added
[  201.148340][T10399] netlink: 'syz.0.1908': attribute type 7 has an invalid length.
[  201.158347][T10372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.160660][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.169338][T10372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.175718][T10372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.178095][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.187224][T10372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.229802][T10401] hsr0: entered promiscuous mode
[  201.243601][T10372] hsr_slave_0: entered promiscuous mode
[  201.246959][T10372] hsr_slave_1: entered promiscuous mode
[  201.249700][T10372] debugfs: 'hsr0' already exists in 'hsr'
[  201.254128][T10372] Cannot create hsr debugfs directory
[  201.340907][T10373] chnl_net:caif_netlink_parms(): no params data found
[  201.445921][T10373] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.448617][T10373] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.451224][T10373] bridge_slave_0: entered allmulticast mode
[  201.454999][T10373] bridge_slave_0: entered promiscuous mode
[  201.477189][T10373] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.479692][T10373] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.484218][T10373] bridge_slave_1: entered allmulticast mode
[  201.487432][T10373] bridge_slave_1: entered promiscuous mode
[  201.506458][T10413] netlink: 'syz.0.1910': attribute type 6 has an invalid length.
[  201.536507][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.553133][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.603178][T10373] team0: Port device team_slave_0 added
[  201.630483][T10373] team0: Port device team_slave_1 added
[  201.647117][T10372] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  201.663687][T10372] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  201.668500][T10372] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  201.683293][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.686402][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.696955][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.700968][T10372] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  201.707614][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.709913][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.718838][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.760443][T10373] hsr_slave_0: entered promiscuous mode
[  201.783858][T10373] hsr_slave_1: entered promiscuous mode
[  201.787917][T10373] debugfs: 'hsr0' already exists in 'hsr'
[  201.790120][T10373] Cannot create hsr debugfs directory
[  202.021101][T10372] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.024191][T10373] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  202.044899][T10373] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  202.061031][T10373] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  202.069623][T10373] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  202.077171][T10372] 8021q: adding VLAN 0 to HW filter on device team0
[  202.097616][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.100605][ T4656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.113348][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.115939][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.157164][T10427] netlink: 'syz.0.1911': attribute type 26 has an invalid length.
[  202.223904][T10373] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.255311][T10373] 8021q: adding VLAN 0 to HW filter on device team0
[  202.269084][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.272167][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.279593][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.282139][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.329088][T10372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.473566][T10373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.496232][T10372] veth0_vlan: entered promiscuous mode
[  202.633956][T10372] veth1_vlan: entered promiscuous mode
[  202.724613][ T5846] Bluetooth: hci0: command tx timeout
[  202.724649][ T5850] Bluetooth: hci2: command tx timeout
[  203.948936][T10372] veth0_macvtap: entered promiscuous mode
[  203.959111][T10372] veth1_macvtap: entered promiscuous mode
[  203.989189][T10372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.024383][T10372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.028511][T10373] veth0_vlan: entered promiscuous mode
[  204.038682][ T5744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.048110][ T5744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.056802][ T5744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.079239][ T5744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.086784][T10373] veth1_vlan: entered promiscuous mode
[  204.158873][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.166238][T10373] veth0_macvtap: entered promiscuous mode
[  204.172105][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.184884][T10373] veth1_macvtap: entered promiscuous mode
[  204.216563][  T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.219106][T10373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.219392][  T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.226640][T10373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.272959][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.291356][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.294839][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.297897][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.520348][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.526302][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.549201][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.553397][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.743637][T10481] netlink: 'syz.5.1925': attribute type 29 has an invalid length.
[  204.762638][T10484] netlink: 'syz.5.1925': attribute type 29 has an invalid length.
[  204.771652][T10481] netlink: 'syz.5.1925': attribute type 29 has an invalid length.
[  204.856978][ T5850] Bluetooth: hci0: command tx timeout
[  204.945904][ T5850] Bluetooth: hci2: command tx timeout
[  204.958742][T10490] netlink: 'syz.4.1928': attribute type 3 has an invalid length.
[  204.963643][T10484] netlink: 'syz.5.1925': attribute type 29 has an invalid length.
[  205.098520][T10498] __nla_validate_parse: 2 callbacks suppressed
[  205.098563][T10498] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1931'.
[  205.707248][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'.
[  206.310370][T10520] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1940'.
[  206.490150][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'.
[  206.892217][ T5850] Bluetooth: hci0: command tx timeout
[  206.961929][ T5850] Bluetooth: hci2: command tx timeout
[  207.233538][T10568] netlink: 'syz.5.1961': attribute type 21 has an invalid length.
[  207.276892][T10573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1963'.
[  207.343481][T10576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1965'.
[  207.357524][T10576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1965'.
[  207.387743][T10581] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  207.595919][T10587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.213567][T10608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.227675][T10608] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1979'.
[  208.420691][T10613] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1982'.
[  208.641780][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1984'.
[  208.963140][ T5850] Bluetooth: hci0: command tx timeout
[  209.045650][ T5850] Bluetooth: hci2: command tx timeout
[  209.265461][T10629] syzkaller1: tun_chr_ioctl cmd 1074025677
[  209.268400][T10629] syzkaller1: linktype set to 823
[  210.554455][T10655] netlink: 'syz.5.1999': attribute type 2 has an invalid length.
[  210.558230][T10655] netlink: 8196 bytes leftover after parsing attributes in process `syz.5.1999'.
[  211.224413][T10680] netlink: 'syz.0.2010': attribute type 1 has an invalid length.
[  211.228166][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  211.405804][T10692] sctp: [Deprecated]: syz.0.2016 (pid 10692) Use of int in max_burst socket option deprecated.
[  211.405804][T10692] Use struct sctp_assoc_value instead
[  211.598420][ T5850] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  211.679486][ T5850] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  211.687579][ T5850] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  212.051799][T10716] rdma_rxe: rxe_newlink: failed to add erspan0
[  212.096044][T10729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.167355][T10736] netlink: 'syz.0.2036': attribute type 10 has an invalid length.
[  212.186246][T10736] team0: Port device netdevsim0 added
[  212.227527][T10740] netlink: 'syz.0.2038': attribute type 27 has an invalid length.
[  212.230240][T10740] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2038'.
[  212.369418][T10748] lo speed is unknown, defaulting to 1000
[  213.304342][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.307988][T10787] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.327995][T10787] bridge0: entered allmulticast mode
[  213.681449][ T5850] Bluetooth: hci1: command tx timeout
[  214.498406][T10829] : renamed from wg2 (while UP)
[  214.630817][T10843] netlink: 'syz.0.2082': attribute type 4 has an invalid length.
[  214.855994][T10851] netlink: 'syz.5.2083': attribute type 1 has an invalid length.
[  214.871234][T10851] netlink: 'syz.5.2083': attribute type 2 has an invalid length.
[  215.102018][T10863] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2089'.
[  215.752011][ T5850] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  217.108540][T10939] netlink: 'syz.5.2117': attribute type 1 has an invalid length.
[  217.635261][T10958] netlink: 'syz.5.2129': attribute type 11 has an invalid length.
[  217.638712][T10958] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2129'.
[  218.299431][T10969] netlink: 'syz.0.2134': attribute type 19 has an invalid length.
[  218.306171][T10969] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2134'.
[  218.399313][T10976] netlink: 'syz.4.2137': attribute type 10 has an invalid length.
[  218.416940][T10976] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.421243][T10976] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.469447][T10976] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.472461][T10976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.476330][T10976] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.479549][T10976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.500978][T10976] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  218.833303][T10997] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2145'.
[  219.048999][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'.
[  219.078195][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'.
[  219.262979][T11017] lo speed is unknown, defaulting to 1000
[  219.761449][ T5850] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  219.766301][ T5850] Bluetooth: hci1: Injecting HCI hardware error event
[  219.770724][ T5846] Bluetooth: hci1: hardware error 0x00
[  220.417698][T11068] netlink: 'syz.0.2175': attribute type 21 has an invalid length.
[  220.420458][T11068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2175'.
[  220.498649][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2178'.
[  220.502917][T11074] netlink: 'syz.0.2178': attribute type 1 has an invalid length.
[  221.472488][T11090] syzkaller0: entered promiscuous mode
[  221.474387][T11090] syzkaller0: entered allmulticast mode
[  221.841441][ T5846] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  223.254010][T11106] netlink: 'syz.0.2193': attribute type 1 has an invalid length.
[  223.369139][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'.
[  223.380701][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'.
[  223.427173][T11112] netlink: 'syz.0.2196': attribute type 10 has an invalid length.
[  223.451210][T11112] bond0: (slave bond_slave_0): Releasing backup interface
[  223.518782][T11121] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2200'.
[  223.584227][T11125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2203'.
[  223.600412][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'.
[  223.621597][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'.
[  223.624721][T11127] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2202'.
[  225.972656][T11164] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2219'.
[  226.125896][T11172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2222'.
[  226.450248][T11183] netlink: 'syz.4.2227': attribute type 10 has an invalid length.
[  226.458746][T11183] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2227'.
[  226.787243][T11191] netlink: 'syz.0.2230': attribute type 10 has an invalid length.
[  226.825881][T11191] team0: Port device netdevsim0 removed
[  226.829674][T11191] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  227.638135][  T175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  228.537115][T11265] netlink: 'syz.0.2264': attribute type 11 has an invalid length.
[  228.540475][T11265] netlink: 'syz.0.2264': attribute type 6 has an invalid length.
[  228.645144][T11272] __nla_validate_parse: 1 callbacks suppressed
[  228.645154][T11272] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2267'.
[  229.425261][T11313] netlink: 'syz.4.2279': attribute type 10 has an invalid length.
[  229.428093][T11313] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2279'.
[  229.769542][T11325] netlink: 'syz.4.2283': attribute type 1 has an invalid length.
[  229.774318][T11325] netlink: 'syz.4.2283': attribute type 2 has an invalid length.
[  229.777148][T11325] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.2283'.
[  229.846860][T11329] netlink: 'syz.0.2285': attribute type 2 has an invalid length.
[  229.849728][T11329] netlink: 'syz.0.2285': attribute type 8 has an invalid length.
[  229.859513][T11329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2285'.
[  229.946471][T11331] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2286'.
[  230.515871][T11343] netlink: 'syz.4.2291': attribute type 32 has an invalid length.
[  231.339331][T11360] netlink: 182 bytes leftover after parsing attributes in process `syz.0.2298'.
[  232.360729][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'.
[  232.596855][T11383] xt_HMARK: proto mask must be zero with L3 mode
[  232.689503][T11382] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2308'.
[  232.711725][T11382] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  232.715192][T11382] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  233.449220][T11415] netlink: 'syz.0.2322': attribute type 2 has an invalid length.
[  233.461897][T11415] netlink: 130532 bytes leftover after parsing attributes in process `syz.0.2322'.
[  234.235149][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2326'.
[  234.244874][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2326'.
[  235.844648][T11462] bridge0: port 3(ip6gretap0) entered blocking state
[  235.848598][T11462] bridge0: port 3(ip6gretap0) entered disabled state
[  235.852384][T11462] ip6gretap0: entered allmulticast mode
[  235.870003][T11462] ip6gretap0: entered promiscuous mode
[  236.158423][T11481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2353'.
[  236.336666][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.343186][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.346931][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.355095][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.359992][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.446948][T11488] lo speed is unknown, defaulting to 1000
[  236.478014][T11495] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.483010][T11495] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.727939][T11488] chnl_net:caif_netlink_parms(): no params data found
[  236.787505][T11488] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.790152][T11488] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.793414][T11488] bridge_slave_0: entered allmulticast mode
[  236.796371][T11488] bridge_slave_0: entered promiscuous mode
[  236.799547][T11488] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.802236][T11488] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.804708][T11488] bridge_slave_1: entered allmulticast mode
[  236.807790][T11488] bridge_slave_1: entered promiscuous mode
[  236.828091][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.833570][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.858260][T11488] team0: Port device team_slave_0 added
[  236.863232][T11488] team0: Port device team_slave_1 added
[  236.882158][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.884776][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.895182][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.899802][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.902237][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.911891][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.945304][T11488] hsr_slave_0: entered promiscuous mode
[  236.947814][T11488] hsr_slave_1: entered promiscuous mode
[  236.950136][T11488] debugfs: 'hsr0' already exists in 'hsr'
[  236.952536][T11488] Cannot create hsr debugfs directory
[  237.077602][T11488] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  237.082990][T11488] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  237.102119][T11488] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  237.110958][T11488] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  237.172854][T11488] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.175708][T11488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.178406][T11488] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.180675][T11488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.307026][T11488] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.363468][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.379774][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.420911][T11488] 8021q: adding VLAN 0 to HW filter on device team0
[  237.426717][T11520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2361'.
[  237.439144][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.441643][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.478605][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.481495][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.506076][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'.
[  237.631027][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.640372][T11533] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  237.805372][T11488] veth0_vlan: entered promiscuous mode
[  237.823704][T11488] veth1_vlan: entered promiscuous mode
[  237.907353][T11488] veth0_macvtap: entered promiscuous mode
[  237.911904][T11488] veth1_macvtap: entered promiscuous mode
[  237.934308][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.958227][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.969470][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.973810][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.977214][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.998962][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.077481][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.091124][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.111100][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.117401][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.425533][T11550] netlink: 'syz.4.2370': attribute type 6 has an invalid length.
[  238.426404][ T5850] Bluetooth: hci3: command tx timeout
[  238.430047][T11550] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2370'.
[  238.757607][T11567] syzkaller0: entered promiscuous mode
[  238.759554][T11567] syzkaller0: entered allmulticast mode
[  239.146328][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2384'.
[  239.150305][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2384'.
[  239.257670][T11588] netlink: 103 bytes leftover after parsing attributes in process `syz.4.2385'.
[  239.881753][T11613] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.2395'.
[  239.898688][T11613] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  239.971751][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2399'.
[  239.975069][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2399'.
[  239.978148][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'.
[  240.100647][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2403'.
[  240.481652][ T5850] Bluetooth: hci3: command tx timeout
[  240.502007][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2411'.
[  240.700529][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2413'.
[  240.749882][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.754804][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.761984][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.766274][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.770272][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.820545][T11650] lo speed is unknown, defaulting to 1000
[  240.913001][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2412'.
[  240.919382][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2412'.
[  241.535130][T11650] chnl_net:caif_netlink_parms(): no params data found
[  241.789170][T11650] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.794222][T11650] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.797383][T11650] bridge_slave_0: entered allmulticast mode
[  241.804545][T11650] bridge_slave_0: entered promiscuous mode
[  241.815153][T11650] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.818286][T11650] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.824475][T11650] bridge_slave_1: entered allmulticast mode
[  241.828344][T11650] bridge_slave_1: entered promiscuous mode
[  242.568177][ T5846] Bluetooth: hci3: command tx timeout
[  242.808316][ T5846] Bluetooth: hci1: command tx timeout
[  243.444655][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.457559][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.529667][T11650] team0: Port device team_slave_0 added
[  243.535333][T11650] team0: Port device team_slave_1 added
[  243.593868][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.596850][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.666497][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.685705][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.688708][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.723809][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.850315][T11650] hsr_slave_0: entered promiscuous mode
[  243.862535][T11650] hsr_slave_1: entered promiscuous mode
[  243.867571][T11650] debugfs: 'hsr0' already exists in 'hsr'
[  243.870129][T11650] Cannot create hsr debugfs directory
[  244.035899][T11650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.116504][T11650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.218223][T11650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.307352][T11650] bond0: (slave netdevsim0): Releasing backup interface
[  244.318324][T11650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.343918][T11697] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2431'.
[  244.645012][ T5846] Bluetooth: hci3: command tx timeout
[  244.846155][T11650] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  244.859690][T11713] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2437'.
[  244.864514][T11650] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  244.879039][T11650] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  244.882464][ T5846] Bluetooth: hci1: command tx timeout
[  244.897526][T11650] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  245.058292][T11650] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.089432][T11650] 8021q: adding VLAN 0 to HW filter on device team0
[  245.103336][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.105938][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.118331][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.120970][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.276387][T11650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.300415][T11650] veth0_vlan: entered promiscuous mode
[  245.313278][T11650] veth1_vlan: entered promiscuous mode
[  245.329171][T11650] veth0_macvtap: entered promiscuous mode
[  245.334329][T11650] veth1_macvtap: entered promiscuous mode
[  245.359337][T11650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.398738][T11650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.814282][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.817973][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.840122][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.857690][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.883982][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.886669][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.950970][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.955386][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.971590][ T5846] Bluetooth: hci1: command tx timeout
[  249.045121][ T5846] Bluetooth: hci1: command tx timeout
[  249.945851][T11828] netlink: 'syz.6.2486': attribute type 4 has an invalid length.
[  249.958306][T11828] netlink: 'syz.6.2486': attribute type 4 has an invalid length.
[  250.153473][T11828] netlink: 199756 bytes leftover after parsing attributes in process `syz.6.2486'.
[  251.039920][T11856] sit0: entered promiscuous mode
[  251.050313][T11856] sit0: entered allmulticast mode
[  251.342184][T11864] netlink: 'syz.6.2498': attribute type 21 has an invalid length.
[  251.345445][T11864] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2498'.
[  251.348716][T11864] netlink: 'syz.6.2498': attribute type 4 has an invalid length.
[  252.076408][T11900] netlink: 'syz.0.2516': attribute type 6 has an invalid length.
[  252.149917][T11903] sctp: [Deprecated]: syz.4.2517 (pid 11903) Use of int in maxseg socket option.
[  252.149917][T11903] Use struct sctp_assoc_value instead
[  252.289873][T11918] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2523'.
[  253.180907][T11958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2542'.
[  253.365901][T11972] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2549'.
[  253.449645][T11970] : entered promiscuous mode
[  253.689864][T11985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2555'.
[  253.872238][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2566'.
[  254.528473][T12049] siw: device registration error -23
[  254.729331][T12053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.736343][T12053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.176181][T12064] netlink: 'syz.6.2591': attribute type 39 has an invalid length.
[  255.531689][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.534696][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.734123][T12082] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2600'.
[  255.875366][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2605'.
[  256.623781][T12119] lo speed is unknown, defaulting to 1000
[  256.669090][T12091] delete_channel: no stack
[  256.670747][T12091] delete_channel: no stack
[  257.507745][T12140] sctp: [Deprecated]: syz.4.2624 (pid 12140) Use of int in max_burst socket option deprecated.
[  257.507745][T12140] Use struct sctp_assoc_value instead
[  257.763685][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2627'.
[  258.564616][ T4656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  258.619568][T12166] netlink: 3752 bytes leftover after parsing attributes in process `syz.6.2636'.
[  259.060502][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2644'.
[  259.089255][T12192] netlink: 'syz.0.2647': attribute type 4 has an invalid length.
[  259.096068][T12192] netlink: 'syz.0.2647': attribute type 3 has an invalid length.
[  259.099264][T12192] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2647'.
[  259.197766][T12197] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  259.337323][T12208] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  259.517696][T12226] netlink: 'syz.0.2663': attribute type 13 has an invalid length.
[  259.524213][T12226] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2663'.
[  259.633720][T12226] erspan0: refused to change device tx_queue_len
[  259.692583][T12226] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  259.769824][T12233] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2664'.
[  263.025641][T12251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2671'.
[  263.065762][T12255] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2673'.
[  263.358958][T12282] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2686'.
[  266.495413][T12412] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2747'.
[  266.676847][T12418] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  266.681107][T12418] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  268.459071][T12496] netlink: 'syz.6.2786': attribute type 1 has an invalid length.
[  268.467884][T12496] netlink: 'syz.6.2786': attribute type 2 has an invalid length.
[  268.534383][T12497] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2786'.
[  268.923414][T12511] netlink: 'syz.6.2793': attribute type 1 has an invalid length.
[  269.042418][T12517] netlink: 'syz.4.2796': attribute type 10 has an invalid length.
[  269.045738][T12517] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2796'.
[  269.887537][T12582] netlink: 'syz.0.2822': attribute type 7 has an invalid length.
[  270.536001][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'.
[  270.632946][T12612] netlink: 'syz.6.2836': attribute type 2 has an invalid length.
[  270.635656][T12612] netlink: 'syz.6.2836': attribute type 1 has an invalid length.
[  271.384738][T12649] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2852'.
[  271.388524][T12650] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2852'.
[  271.394868][T12649] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2852'.
[  272.266102][T12692] lo speed is unknown, defaulting to 1000
[  272.538587][T12699] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2873'.
[  273.520335][T12720] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2882'.
[  273.966379][T12727] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2884'.
[  273.969965][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2884'.
[  274.735252][T12749] option changes via remount are deprecated (pid=12746 comm=syz.4.2894)
[  275.896362][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'.
[  276.099647][T12831] netlink: 'syz.6.2932': attribute type 9 has an invalid length.
[  276.103864][T12831] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.2932'.
[  276.573071][T12853] xt_socket: unknown flags 0x20
[  279.922288][ T5846] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  280.538658][T12894] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2954'.
[  280.771507][ T5877] unregister_netdevice: waiting for vcan0 to become free. Usage count = 4
[  280.776789][ T5877] ref_tracker: netdev@ffff88810e1b8610 has 1/1 users at
[  280.776789][ T5877]      ib_device_set_netdev+0x31f/0x6d0
[  280.776789][ T5877]      rxe_register_device+0x1c7/0x310
[  280.776789][ T5877]      rxe_net_add+0x81/0x110
[  280.776789][ T5877]      rxe_newlink+0xdd/0x190
[  280.776789][ T5877]      nldev_newlink+0x4a5/0x5a0
[  280.776789][ T5877]      rdma_nl_rcv+0x6ae/0x980
[  280.776789][ T5877]      netlink_unicast+0x82f/0x9e0
[  280.776789][ T5877]      netlink_sendmsg+0x805/0xb30
[  280.776789][ T5877]      __sock_sendmsg+0x21c/0x270
[  280.776789][ T5877]      ____sys_sendmsg+0x505/0x830
[  280.776789][ T5877]      ___sys_sendmsg+0x21f/0x2a0
[  280.776789][ T5877]      __x64_sys_sendmsg+0x19b/0x260
[  280.776789][ T5877]      do_syscall_64+0xfa/0x3b0
[  280.776789][ T5877]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.776789][ T5877] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  289.692726][ T1597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)

VM DIAGNOSIS:
07:23:59  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e7b35 RBX=8000000125b31007 RCX=ffff888109f18000 RDX=0000000000000000
RSI=0000000000125b31 RDI=0000000400000000 RBP=ffffc90006ee7890 RSP=ffffc90006ee7550
R8 =ffffea000496cc47 R9 =1ffffd400092d988 R10=dffffc0000000000 R11=fffff9400092d989
R12=dffffc0000000000 R13=1ffffd400092d98b R14=0000000000125b31 R15=0000000000000000
RIP=ffffffff81bfc45f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c33fc2e CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=00100001b0030fff ffffffffff0401a0 XMM03=100001d0030fffff ffffffff0401c003
XMM04=0000000000000000 0000000000000000 XMM05=000055558a1d1c0c 000055558a1d1450
XMM06=0000000000000000 0000000000000000 XMM07=b0030fffffffffff ff0401a003000800
XMM08=ffffff0402f00300 080002e803000800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003adeeb0
R8 =ffff8881079d0237 R9 =1ffff11020f3a046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008d7 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556151c808 CR3=0000000112276000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f3ba2412e7b
XMM06=0000000000000000 00007f3ba2412e75 XMM07=0000000000000000 00007f3ba2412e89
XMM08=0000000000000000 00007f3ba2412f0f XMM09=0000000000000000 00007f3ba2412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
