last executing test programs:

2m37.816989651s ago: executing program 0 (id=9011):
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300))

2m37.703513588s ago: executing program 0 (id=9012):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)

2m37.15063954s ago: executing program 0 (id=9015):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000", @ANYBLOB, @ANYBLOB], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20)
r3 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x20000009c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, 0xffffffffffffffff}, 0x20)
r7 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='a 1223'], 0xa)

2m36.805599836s ago: executing program 0 (id=9026):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000020000000000001100000000000000000200000001000013020000000000000100000000000000000000000e0000000000000000000061"], 0x0, 0x52}, 0x28)

2m36.729232299s ago: executing program 0 (id=9027):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffeff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=0xfff, 0x12)

2m36.663214632s ago: executing program 0 (id=9028):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

2m21.606502861s ago: executing program 32 (id=9028):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

1m44.840573343s ago: executing program 1 (id=10102):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

1m44.837246474s ago: executing program 1 (id=10103):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
close(r1)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r4 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4)

1m44.781490527s ago: executing program 3 (id=10106):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)

1m43.913946658s ago: executing program 1 (id=10108):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1m43.831317644s ago: executing program 1 (id=10109):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0xa, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x21, 0x2, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

1m43.831133093s ago: executing program 3 (id=10110):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)

1m43.770533522s ago: executing program 3 (id=10112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m43.770098015s ago: executing program 3 (id=10114):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x6}, 0x8224, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x29, 0x7, 0x0)

1m43.542402044s ago: executing program 1 (id=10115):
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x76, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33)

1m43.542205436s ago: executing program 3 (id=10116):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x2, 0x20000000, 0x8, 0x0, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1m43.482669309s ago: executing program 1 (id=10117):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000030000000000000008000000181100", @ANYRES32, @ANYBLOB="0000000010000000b7020000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xc9c8}, 0x1400, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYBLOB="629806f96a640a7b081c7d7b0b4f1a76f77f999339bc3851d55ef7c4378cbd993bb7154be87d9ad3cace832fa2cb6c48db8d79e920a3e730e8d0e1ebc902a25943765cc04a57ef2ad5843921c6ae120fcc07a64bf1a41921adced2a17a89ab48455b0b857c72fbccb961178c1ac0904d6afaec0ffd8a5f4343efcbe30386dbb23a4fbb7af8d1f51abb4d8a8d10f11cab9ed1d3a452afd65d0666300a29bbc40075b00087ba31acc530fb2cd2a6b5c465d830127972d656d7b06a39bd456b2cccd980bc52c8496c22f3339d0e26ac544d0c75209ae62bce5acb89aa2d119a2993fcc5c82714561e7d18112004e04ebd049ca3fa2b81245ad3c1c584f92b017d5b7d5a20f7429d1a0eaff5ea2f1d39a193e9adbd04e622ccf2ee106b8e411550cd3554", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES8=0x0], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @dev, 0x42}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2400c000)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, 0x0, 0x25, 0x4, @val=@perf_event={0x2}}, 0x18)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x3000c084)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xa8}, 0x20040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x40000}, 0x120)

1m43.445765253s ago: executing program 33 (id=10117):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000030000000000000008000000181100", @ANYRES32, @ANYBLOB="0000000010000000b7020000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xc9c8}, 0x1400, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYBLOB="629806f96a640a7b081c7d7b0b4f1a76f77f999339bc3851d55ef7c4378cbd993bb7154be87d9ad3cace832fa2cb6c48db8d79e920a3e730e8d0e1ebc902a25943765cc04a57ef2ad5843921c6ae120fcc07a64bf1a41921adced2a17a89ab48455b0b857c72fbccb961178c1ac0904d6afaec0ffd8a5f4343efcbe30386dbb23a4fbb7af8d1f51abb4d8a8d10f11cab9ed1d3a452afd65d0666300a29bbc40075b00087ba31acc530fb2cd2a6b5c465d830127972d656d7b06a39bd456b2cccd980bc52c8496c22f3339d0e26ac544d0c75209ae62bce5acb89aa2d119a2993fcc5c82714561e7d18112004e04ebd049ca3fa2b81245ad3c1c584f92b017d5b7d5a20f7429d1a0eaff5ea2f1d39a193e9adbd04e622ccf2ee106b8e411550cd3554", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES8=0x0], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @dev, 0x42}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2400c000)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, 0x0, 0x25, 0x4, @val=@perf_event={0x2}}, 0x18)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x3000c084)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xa8}, 0x20040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x40000}, 0x120)

1m43.233513865s ago: executing program 3 (id=10119):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

1m43.233165406s ago: executing program 34 (id=10119):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

39.052219118s ago: executing program 5 (id=11284):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000000)='syzkaller\x00', 0xe}, 0x94)

39.051836261s ago: executing program 5 (id=11285):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)

39.001981029s ago: executing program 5 (id=11287):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_netfilter(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002280)={0x14, 0x6, 0x5, 0x401, 0x70bd2b, 0x25dfdbff, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000)

38.993196588s ago: executing program 5 (id=11288):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

38.931625016s ago: executing program 5 (id=11290):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0xc410)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x401888d)

38.008444105s ago: executing program 5 (id=11301):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

23.024316004s ago: executing program 35 (id=11301):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

16.430182978s ago: executing program 6 (id=11713):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000040), 0x4)

16.373845336s ago: executing program 6 (id=11715):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x30a0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.951824346s ago: executing program 6 (id=11719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000001200))

15.881020825s ago: executing program 6 (id=11723):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000140)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)

15.82053851s ago: executing program 6 (id=11724):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)

15.819758716s ago: executing program 6 (id=11726):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/4, 0x0, 0x4, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.53434513s ago: executing program 4 (id=11940):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0)

1.264015211s ago: executing program 4 (id=11941):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}], 0x20}, 0x20002800)

952.009872ms ago: executing program 4 (id=11944):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)

871.387574ms ago: executing program 4 (id=11946):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x14}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x48}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50)

871.139365ms ago: executing program 4 (id=11947):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="00faff0f0001eeff7f6faf9a1e4d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

829.748161ms ago: executing program 36 (id=11726):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/4, 0x0, 0x4, 0x1}, 0x28)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

511.702663ms ago: executing program 2 (id=11951):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f00000001c0)="f3", &(0x7f0000000280)=""/144}, 0x20)

511.468876ms ago: executing program 2 (id=11952):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000)

351.261045ms ago: executing program 2 (id=11953):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000002020ff0f1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

351.091022ms ago: executing program 2 (id=11954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

251.854771ms ago: executing program 2 (id=11955):
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff", 0x24}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

136.680098ms ago: executing program 2 (id=11956):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691deafffff9ffffff0018000000"], 0x38}, 0x41)

0s ago: executing program 4 (id=11957):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r4}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x58, &(0x7f0000000180)}, 0x10)

kernel console output (not intermixed with test programs):

 local_pcp:9952kB free_cma:0kB
[  425.048821][T24832] lowmem_reserve[]: 0 0 854 854 854
[  425.050584][T24832] Node 1 Normal free:218904kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:10240KB free_highatomic:4084KB active_anon:31512kB inactive_anon:0kB active_file:22780kB inactive_file:91740kB unevictable:3536kB writepending:52kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39508kB local_pcp:17168kB free_cma:0kB
[  425.072766][T24832] lowmem_reserve[]: 0 0 0 0 0
[  425.076137][T24832] Node 0 DMA: 5*4kB (UM) 3*8kB (U) 6*16kB (U) 15*32kB (U) 11*64kB (U) 7*128kB (U) 10*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 0*4096kB = 14508kB
[  425.081562][T24832] Node 0 DMA32: 220*4kB (UMEH) 387*8kB (UMEH) 302*16kB (UMEH) 282*32kB (UMEH) 73*64kB (UMEH) 66*128kB (UME) 149*256kB (UME) 70*512kB (UM) 51*1024kB (UM) 17*2048kB (UM) 14*4096kB (UM) = 249320kB
[  425.094099][T24832] Node 1 DMA32: 4*4kB (M) 45*8kB (UM) 55*16kB (UM) 159*32kB (UM) 151*64kB (UM) 131*128kB (UM) 108*256kB (UM) 88*512kB (UM) 67*1024kB (UM) 33*2048kB (UM) 44*4096kB (UM) = 421896kB
[  425.101020][T24832] Node 1 Normal: 226*4kB (UMEH) 968*8kB (UMEH) 878*16kB (UMEH) 582*32kB (UMEH) 402*64kB (UMEH) 334*128kB (UMEH) 166*256kB (UMEH) 68*512kB (UME) 27*1024kB (UM) 2*2048kB (U) 0*4096kB = 218856kB
[  425.109312][T24832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  425.112601][T24832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  425.118424][T24832] 40020 total pagecache pages
[  425.119931][T24832] 54 pages in swap cache
[  425.121258][T24832] Free swap  = 120840kB
[  425.122821][T24832] Total swap = 124996kB
[  425.124186][T24832] 786301 pages RAM
[  425.126547][T24832] 0 pages HighMem/MovableOnly
[  425.128163][T24832] 241335 pages reserved
[  425.134752][T24832] 0 pages cma reserved
[  426.783620][T24975] __nla_validate_parse: 7 callbacks suppressed
[  426.783641][T24975] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.8421'.
[  426.871513][T24979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8423'.
[  426.877405][T24979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8423'.
[  426.880632][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8423'.
[  427.656143][T25022] netlink: 'syz.1.8440': attribute type 21 has an invalid length.
[  427.663884][T25022] netlink: 'syz.1.8440': attribute type 11 has an invalid length.
[  427.886914][T25033] netlink: 'syz.0.8444': attribute type 3 has an invalid length.
[  427.889762][T25033] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8444'.
[  428.399019][T25075] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8463'.
[  428.794731][T25085] vcan0 speed is unknown, defaulting to 1000
[  429.352252][T25085] lo speed is unknown, defaulting to 1000
[  429.755703][T25099] delete_channel: no stack
[  430.616956][T10999] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  430.741467][T10999] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  430.767227][T25145] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  431.031789][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8505'.
[  431.036762][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8505'.
[  431.047514][T25169] syzkaller0: entered promiscuous mode
[  431.051983][T25169] syzkaller0: entered allmulticast mode
[  431.120537][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8506'.
[  431.132026][T25173] netlink: 'syz.1.8506': attribute type 11 has an invalid length.
[  431.135660][T25173] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8506'.
[  431.154257][T25172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.223416][T25271] __nla_validate_parse: 3 callbacks suppressed
[  432.223432][T25271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8550'.
[  432.249379][T25272] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8548'.
[  432.280647][T25276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.185832][T10999] Bluetooth: Frame is too long (len 13, expected len 4)
[  433.213543][T25316] vcan0 speed is unknown, defaulting to 1000
[  433.266430][T25316] lo speed is unknown, defaulting to 1000
[  433.647026][T25329] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8574'.
[  433.679560][T25331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.733502][T25335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8577'.
[  433.924333][T25348] netlink: 'syz.2.8583': attribute type 21 has an invalid length.
[  433.929760][T25348] netlink: 'syz.2.8583': attribute type 1 has an invalid length.
[  433.968695][T25350] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8584'.
[  434.928850][T25383] netlink: 26 bytes leftover after parsing attributes in process `syz.2.8598'.
[  435.156563][T25393] netlink: 'syz.2.8602': attribute type 10 has an invalid length.
[  435.438586][T25393] : (slave netdevsim0): Releasing backup interface
[  435.442169][T25393] team0: Port device netdevsim0 added
[  435.591215][T25405] netlink: 'syz.2.8608': attribute type 21 has an invalid length.
[  435.594791][T25405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8608'.
[  435.598858][T25405] netlink: 'syz.2.8608': attribute type 1 has an invalid length.
[  435.844416][T25432] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8620'.
[  435.850610][T25434] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8621'.
[  436.132985][T25452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8629'.
[  437.084703][T25501] netlink: 'syz.2.8652': attribute type 5 has an invalid length.
[  437.904721][T25497] delete_channel: no stack
[  438.110595][T25551] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  438.492897][T25584] __nla_validate_parse: 5 callbacks suppressed
[  438.492916][T25584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8685'.
[  438.501326][T25584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8685'.
[  438.505855][T25584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8685'.
[  438.889557][T25601] ref_ctr_offset mismatch. inode: 0x23a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  438.977385][T25606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8694'.
[  439.008826][T25608] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.8695'.
[  439.012705][T25608] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.8695'.
[  439.337197][T25638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8709'.
[  439.663503][T25659] netlink: 'syz.1.8719': attribute type 1 has an invalid length.
[  439.853498][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.856344][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  439.878502][T25672] netlink: ct family unspecified
[  439.880327][T25672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.912388][T25670] netlink: 'syz.0.8721': attribute type 1 has an invalid length.
[  439.927696][T25681] option changes via remount are deprecated (pid=25680 comm=syz.1.8728)
[  440.041291][   T33] audit: type=1107 audit(1756244897.404:10): pid=25688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  440.851745][T25693] netlink: 'syz.2.8734': attribute type 2 has an invalid length.
[  440.854951][T25693] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.8734'.
[  440.910083][T10999] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  441.000496][T25708] netlink: 'syz.1.8741': attribute type 1 has an invalid length.
[  441.006017][T25708] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.8741'.
[  441.965007][T25738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.182118][T25751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  443.081437][T25785] netlink: 'syz.1.8775': attribute type 10 has an invalid length.
[  443.084516][T25785] macvlan0: entered allmulticast mode
[  443.092534][T25786] netlink: 'syz.2.8773': attribute type 10 has an invalid length.
[  444.030949][T25807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8784'.
[  444.215739][T25818] netlink: 'syz.2.8789': attribute type 10 has an invalid length.
[  444.612644][T25858] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.617469][T25858] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  444.622634][T25862] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8809'.
[  444.967196][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8823'.
[  444.988685][T25893] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.8822'.
[  444.992512][T25893] openvswitch: netlink: Message has 6 unknown bytes.
[  446.166563][T25930] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8837'.
[  446.511399][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8843'.
[  446.577572][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8846'.
[  446.982004][T25974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8855'.
[  447.002604][T25976] netlink: 'syz.0.8856': attribute type 1 has an invalid length.
[  448.835402][T26022] netlink: 'syz.1.8878': attribute type 10 has an invalid length.
[  448.848556][T26022] syz_tun: entered promiscuous mode
[  448.856173][T26022] team0: Port device syz_tun removed
[  449.003575][T26031] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  449.006989][T26031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  449.688010][T26043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8886'.
[  449.885787][T26052] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.8890'.
[  449.932465][T26056] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8892'.
[  449.936272][T26056] netlink: zone id is out of range
[  449.943458][T26056] netlink: zone id is out of range
[  449.945316][T26056] netlink: zone id is out of range
[  449.946962][T26056] netlink: zone id is out of range
[  449.948610][T26056] netlink: zone id is out of range
[  449.950254][T26056] netlink: zone id is out of range
[  449.951901][T26056] netlink: zone id is out of range
[  449.953628][T26056] netlink: zone id is out of range
[  449.955531][T26056] netlink: zone id is out of range
[  450.005666][T26062] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8895'.
[  450.157659][T26078] netlink: 'syz.0.8904': attribute type 21 has an invalid length.
[  450.172536][T26081] syzkaller0: entered promiscuous mode
[  450.235395][T26086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8907'.
[  450.782363][T26114] vcan0 speed is unknown, defaulting to 1000
[  450.970671][T26114] lo speed is unknown, defaulting to 1000
[  453.611036][T26177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8948'.
[  453.711852][T26187] netlink: 'syz.1.8952': attribute type 15 has an invalid length.
[  453.715735][T26187] netlink: 'syz.1.8952': attribute type 7 has an invalid length.
[  453.718629][T26187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8952'.
[  453.810572][T26191] net_ratelimit: 76 callbacks suppressed
[  453.810589][T26191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.294308][T26225] netlink: 'syz.2.8970': attribute type 2 has an invalid length.
[  454.301260][T26225] netlink: 'syz.2.8970': attribute type 1 has an invalid length.
[  454.368491][T26229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8972'.
[  454.466961][T26241] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8978'.
[  454.549633][T26252] netlink: 'syz.0.8983': attribute type 12 has an invalid length.
[  454.553217][T26252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8983'.
[  455.804800][T26303] sit0: left promiscuous mode
[  456.979077][T10999] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  456.979615][T26348] @: renamed from bond_slave_0
[  457.073253][T26343] netlink: 'syz.2.9022': attribute type 10 has an invalid length.
[  457.079866][T26343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9022'.
[  457.155345][T26357] siw: device registration error -23
[  457.159491][T26357] smc: removing ib device syz1
[  457.441457][T26376] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9036'.
[  457.984271][T26400] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9047'.
[  458.278412][T26410] netlink: 'syz.2.9052': attribute type 4 has an invalid length.
[  458.642249][T26417] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check.
[  458.699231][T26426] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9059'.
[  458.892405][T26439] netlink: 'syz.2.9065': attribute type 39 has an invalid length.
[  459.216876][T26462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9076'.
[  460.592176][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9095'.
[  460.597570][T26507] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.9095'.
[  461.037448][T26529] netlink: 'syz.1.9105': attribute type 29 has an invalid length.
[  461.055534][T26528] netlink: 'syz.1.9105': attribute type 10 has an invalid length.
[  461.127245][T26531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9106'.
[  461.138121][T26531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9106'.
[  461.652581][T26572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9125'.
[  462.787600][T26595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9135'.
[  462.791587][T26595] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9135'.
[  463.145539][T26606] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9139'.
[  463.375161][T26620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9146'.
[  463.550534][T26626] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9149'.
[  463.553920][T26626] netlink: zone id is out of range
[  463.555914][T26626] netlink: zone id is out of range
[  463.557826][T26626] netlink: zone id is out of range
[  463.559690][T26626] netlink: zone id is out of range
[  463.561581][T26626] netlink: zone id is out of range
[  463.563438][T26626] netlink: zone id is out of range
[  463.567850][T26626] netlink: zone id is out of range
[  463.569754][T26626] netlink: zone id is out of range
[  463.571627][T26626] netlink: zone id is out of range
[  463.573384][T26626] netlink: zone id is out of range
[  465.073710][T26650] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9160'.
[  466.429813][T26690] : renamed from pim6reg1
[  467.309493][T26706] netlink: 124 bytes leftover after parsing attributes in process `syz.1.9186'.
[  467.313340][T26706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9186'.
[  467.513003][T26716] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9190'.
[  467.631929][T26722] netlink: 'syz.1.9193': attribute type 3 has an invalid length.
[  467.635591][T26722] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.9193'.
[  467.846833][T26729] netlink: 'syz.2.9196': attribute type 10 has an invalid length.
[  468.121880][T26748] netlink: 'syz.1.9205': attribute type 10 has an invalid length.
[  468.125355][T26748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9205'.
[  468.264879][T26754] netlink: 'syz.1.9208': attribute type 1 has an invalid length.
[  468.292175][T26756] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.9209'.
[  468.320361][T26758] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9210'.
[  468.544360][T26766] xt_HMARK: proto mask must be zero with L3 mode
[  468.695631][T26775] netlink: 'syz.1.9218': attribute type 7 has an invalid length.
[  469.514985][T26797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9228'.
[  469.698101][T26806] netlink: 'syz.1.9232': attribute type 12 has an invalid length.
[  469.701410][T26806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9232'.
[  470.022533][T26822] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.9240'.
[  470.032581][T26822] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.9240'.
[  470.371796][T26846] netlink: 'syz.2.9251': attribute type 1 has an invalid length.
[  470.459974][T26855] netlink: 'syz.2.9255': attribute type 2 has an invalid length.
[  470.463217][T26855] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.9255'.
[  470.950268][T26879] netlink: 'syz.1.9267': attribute type 2 has an invalid length.
[  470.953573][T26879] netlink: 'syz.1.9267': attribute type 1 has an invalid length.
[  470.957728][T26879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9267'.
[  471.075637][T26888] net_ratelimit: 77 callbacks suppressed
[  471.075655][T26888] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  472.356558][T11096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  472.360467][T11096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  472.363649][T11096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  472.367496][T11096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  472.370975][T11096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  472.388792][T26910] lo speed is unknown, defaulting to 1000
[  472.594191][T26910] chnl_net:caif_netlink_parms(): no params data found
[  474.404708][T10999] Bluetooth: hci3: command tx timeout
[  474.490040][T26910] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.492557][T26910] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.495035][T26910] bridge_slave_0: entered allmulticast mode
[  474.497468][T26910] bridge_slave_0: entered promiscuous mode
[  474.500570][T26910] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.503375][T26910] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.506802][T26910] bridge_slave_1: entered allmulticast mode
[  474.510190][T26910] bridge_slave_1: entered promiscuous mode
[  474.541951][T26910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.555940][T26910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.591102][T26910] team0: Port device team_slave_0 added
[  474.594035][T26939] lo speed is unknown, defaulting to 1000
[  474.601271][T26910] team0: Port device team_slave_1 added
[  474.661140][T26910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.663918][T26910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.679004][T26910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.689972][T26910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.692986][T26910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.707963][T26910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.788867][T26910] hsr_slave_0: entered promiscuous mode
[  474.792253][T26910] hsr_slave_1: entered promiscuous mode
[  474.795521][T26910] debugfs: 'hsr0' already exists in 'hsr'
[  474.797757][T26910] Cannot create hsr debugfs directory
[  475.009431][T26910] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  475.016289][T26910] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  475.024025][T26910] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  475.031101][T26910] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  475.097686][T26910] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.100647][T26910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.103802][T26910] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.107011][T26910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.313393][T26910] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.331415][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.335638][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.354634][T26910] 8021q: adding VLAN 0 to HW filter on device team0
[  475.366003][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.369018][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.381322][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.384379][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.482083][T26910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.502451][T26910] veth0_vlan: entered promiscuous mode
[  475.509651][T26910] veth1_vlan: entered promiscuous mode
[  475.524367][T26910] veth0_macvtap: entered promiscuous mode
[  475.528474][T26910] veth1_macvtap: entered promiscuous mode
[  475.536050][T26910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.542892][T26910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.549906][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.552809][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.562312][ T5883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.570028][ T5883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.588033][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.590681][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.603419][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.607668][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.870803][T26995] netlink: 'syz.3.9304': attribute type 10 has an invalid length.
[  475.873697][T26995] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9304'.
[  475.920220][T27001] netlink: 'syz.1.9307': attribute type 29 has an invalid length.
[  476.484728][T10999] Bluetooth: hci3: command tx timeout
[  476.941073][T27015] netlink: 'syz.1.9313': attribute type 10 has an invalid length.
[  476.960150][T27015] team0: Device ipvlan1 failed to register rx_handler
[  477.189258][T27026] : entered promiscuous mode
[  477.733502][T27045] netlink: 'syz.3.9325': attribute type 29 has an invalid length.
[  477.788630][T27045] netlink: 'syz.3.9325': attribute type 29 has an invalid length.
[  477.799769][T27045] netlink: 'syz.3.9325': attribute type 29 has an invalid length.
[  477.803909][T27045] netlink: 'syz.3.9325': attribute type 29 has an invalid length.
[  478.068555][T27062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9331'.
[  478.139049][T27064] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9332'.
[  478.182994][T27062] netlink: 'syz.1.9331': attribute type 10 has an invalid length.
[  478.186721][T27062] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9331'.
[  478.371359][T27076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.374753][T27076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.527503][T27076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.537918][T27076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.564659][T10999] Bluetooth: hci3: command tx timeout
[  478.690075][   T33] audit: type=1107 audit(1756244936.054:11): pid=27086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  478.690075][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  478.690075][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  478.690075][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nu
[  478.690274][T27087] netlink: 'syz.3.9340': attribute type 1 has an invalid length.
[  480.065230][T27182] netlink: 'syz.1.9383': attribute type 21 has an invalid length.
[  480.127355][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9387'.
[  480.239685][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9388'.
[  480.243004][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9388'.
[  480.246669][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9388'.
[  480.644891][T10999] Bluetooth: hci3: command tx timeout
[  481.257327][T27228] netlink: 'syz.1.9405': attribute type 29 has an invalid length.
[  481.273934][T27228] netlink: 'syz.1.9405': attribute type 29 has an invalid length.
[  481.592727][T27249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9412'.
[  481.596508][T27249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9412'.
[  481.709466][T27253] netlink: 'syz.2.9414': attribute type 3 has an invalid length.
[  481.713075][T27253] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.9414'.
[  482.067697][T27264] smc: removing ib device syz2
[  482.449360][T27282] openvswitch: netlink: Missing valid actions attribute.
[  482.466375][T27284] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9427'.
[  482.479841][T27282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.637651][T27296] netlink: 'syz.3.9433': attribute type 5 has an invalid length.
[  482.640909][T27296] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9433'.
[  482.967136][T27329] netlink: 'syz.1.9449': attribute type 1 has an invalid length.
[  482.970442][T27329] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9449'.
[  483.257953][T27344] netlink: 'syz.1.9454': attribute type 10 has an invalid length.
[  483.260775][T27344] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9454'.
[  483.264191][T27344] team0: entered promiscuous mode
[  483.266454][T27344] C: entered promiscuous mode
[  483.268638][T27344] team_slave_1: entered promiscuous mode
[  483.271344][T27344] hsr_slave_0: entered promiscuous mode
[  483.745582][T27379] netlink: 'syz.1.9470': attribute type 1 has an invalid length.
[  483.960665][T27388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9474'.
[  483.980568][   T33] audit: type=1107 audit(1756244941.344:12): pid=27389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  484.008180][T10999] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3
[  484.092212][T27396] netlink: 'syz.1.9478': attribute type 2 has an invalid length.
[  484.097478][T27396] netlink: 'syz.1.9478': attribute type 8 has an invalid length.
[  484.100108][T27396] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9478'.
[  484.293996][T27404] netlink: 'syz.3.9481': attribute type 2 has an invalid length.
[  485.230028][T27416] delete_channel: no stack
[  485.777674][T27443] sctp: [Deprecated]: syz.1.9495 (pid 27443) Use of int in max_burst socket option deprecated.
[  485.777674][T27443] Use struct sctp_assoc_value instead
[  486.364010][T27490] validate_nla: 1 callbacks suppressed
[  486.364101][T27490] netlink: 'syz.2.9517': attribute type 10 has an invalid length.
[  486.369149][T27490] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9517'.
[  486.462595][T27510] netlink: 'syz.3.9525': attribute type 11 has an invalid length.
[  486.484848][T27509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.593239][T10999] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[  486.614376][T27527] netlink: 'syz.2.9530': attribute type 4 has an invalid length.
[  486.951371][T27542] sit0: entered promiscuous mode
[  487.189231][T27562] __nla_validate_parse: 1 callbacks suppressed
[  487.189247][T27562] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9549'.
[  487.288434][T27568] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9551'.
[  487.401448][T27570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9552'.
[  487.688302][T27586] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9557'.
[  487.692578][T27586] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  488.675846][T27609] netlink: 'syz.1.9570': attribute type 10 has an invalid length.
[  488.678669][T27609] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9570'.
[  488.787200][T27623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9576'.
[  489.152334][T27647] netlink: 'syz.3.9586': attribute type 21 has an invalid length.
[  489.159888][T27647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9586'.
[  489.166904][T27647] netlink: 'syz.3.9586': attribute type 1 has an invalid length.
[  489.181227][T27652] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9587'.
[  489.188493][T27652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9587'.
[  489.192513][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9586'.
[  490.303964][T27697] netlink: 'syz.1.9608': attribute type 10 has an invalid length.
[  490.580595][T27724] netlink: 'syz.2.9621': attribute type 10 has an invalid length.
[  490.584385][T27724] : entered promiscuous mode
[  490.592049][T27724] @: entered promiscuous mode
[  490.594988][T27724] 0: entered promiscuous mode
[  490.600382][T27724] batadv_slave_0: entered promiscuous mode
[  490.603640][T27724] mac80211_hwsim hwsim7 : entered promiscuous mode
[  491.225521][T27775] netlink: 'syz.1.9641': attribute type 15 has an invalid length.
[  491.611034][T27791] netlink: 'syz.2.9649': attribute type 4 has an invalid length.
[  491.940925][T27812] netlink: 'syz.3.9659': attribute type 13 has an invalid length.
[  491.945083][T27812] netlink: 'syz.3.9659': attribute type 17 has an invalid length.
[  492.048442][T27812] sit0: left promiscuous mode
[  492.170986][T10999] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  492.326264][T27812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  492.425021][T27824] netlink: 'syz.1.9664': attribute type 10 has an invalid length.
[  492.473165][T27829] netlink: 'syz.1.9666': attribute type 3 has an invalid length.
[  492.476802][T27829] __nla_validate_parse: 8 callbacks suppressed
[  492.476814][T27829] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9666'.
[  492.519287][T27834] bridge_slave_1: left allmulticast mode
[  492.521675][T27834] bridge_slave_1: left promiscuous mode
[  492.524206][T27834] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.558163][T27834] bridge_slave_0: left allmulticast mode
[  492.560172][T27834] bridge_slave_0: left promiscuous mode
[  492.562202][T27834] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.637924][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9669'.
[  493.277298][T27865] netlink: 'syz.3.9682': attribute type 10 has an invalid length.
[  493.452946][T27888] netlink: 'syz.1.9692': attribute type 11 has an invalid length.
[  493.455653][T27888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9692'.
[  493.523099][T27887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.745228][T27899] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.9697'.
[  493.749069][T27899] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.9697'.
[  493.752445][T27899] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.9697'.
[  494.156162][T27873] delete_channel: no stack
[  494.708320][T27930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9710'.
[  494.713240][T27930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9710'.
[  494.726626][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9710'.
[  494.747562][T27927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.941035][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9714'.
[  495.138708][T27953] netlink: 'syz.2.9721': attribute type 9 has an invalid length.
[  495.178309][T27957] netlink: 'syz.1.9723': attribute type 5 has an invalid length.
[  495.183859][T27957] : entered promiscuous mode
[  495.215880][T27961] netlink: 'syz.3.9725': attribute type 11 has an invalid length.
[  495.471028][T27991] openvswitch: netlink: Message has 6 unknown bytes.
[  495.485367][T27991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  495.490749][T27991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  495.772504][T28022] batadv_slave_1: entered promiscuous mode
[  495.862898][T28028] netlink: 'syz.3.9756': attribute type 10 has an invalid length.
[  497.547512][T28107] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check.
[  497.652224][T28119] __nla_validate_parse: 15 callbacks suppressed
[  497.652235][T28119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9797'.
[  497.659086][T28119] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  497.707953][T28124] IPv6: Can't replace route, no match found
[  497.847760][T28136] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode
[  497.850377][T28136] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  498.279135][T28176] validate_nla: 1 callbacks suppressed
[  498.279180][T28176] netlink: 'syz.2.9823': attribute type 21 has an invalid length.
[  498.284267][T28176] netlink: 'syz.2.9823': attribute type 15 has an invalid length.
[  498.288820][T28176] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9823'.
[  498.294953][T28176] IPv6: NLM_F_CREATE should be specified when creating new route
[  498.300016][T28176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  498.302901][T28176] IPv6: NLM_F_CREATE should be set when creating new route
[  498.307446][T28176] IPv6: NLM_F_CREATE should be set when creating new route
[  498.310402][T28176] IPv6: NLM_F_CREATE should be set when creating new route
[  499.123116][T28214] netlink: 'syz.3.9839': attribute type 6 has an invalid length.
[  499.219075][T28221] netlink: 'syz.1.9843': attribute type 1 has an invalid length.
[  499.316460][T28227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.373771][T28233] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9849'.
[  499.379825][T28233] netlink: zone id is out of range
[  499.381625][T28233] netlink: zone id is out of range
[  499.384978][T28233] netlink: zone id is out of range
[  499.387670][T28233] netlink: zone id is out of range
[  499.390354][T28233] netlink: zone id is out of range
[  499.407602][T28237] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9851'.
[  499.826500][T28261] netlink: 'syz.2.9862': attribute type 29 has an invalid length.
[  499.831275][T28261] netlink: 'syz.2.9862': attribute type 29 has an invalid length.
[  499.841135][T28261] netlink: 'syz.2.9862': attribute type 29 has an invalid length.
[  500.011962][T28265] netlink: 'syz.2.9862': attribute type 29 has an invalid length.
[  500.066033][T28270] netlink: 'syz.3.9865': attribute type 21 has an invalid length.
[  501.289241][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.292008][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  501.475532][T28314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9883'.
[  501.481742][T28314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9883'.
[  501.485324][T28314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9883'.
[  501.711351][T28325] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9887'.
[  502.049473][T28365] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9906'.
[  502.145529][T28369] netlink: 'syz.1.9908': attribute type 10 has an invalid length.
[  502.149573][T28369] team0: left promiscuous mode
[  502.151882][T28369] C: left promiscuous mode
[  502.154270][T28369] team_slave_1: left promiscuous mode
[  502.157368][T28369] hsr_slave_0: left promiscuous mode
[  502.895665][T28394] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9920'.
[  502.945432][T28399] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9921'.
[  503.148009][T28411] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9926'.
[  503.286774][T28431] validate_nla: 5 callbacks suppressed
[  503.286801][T28431] netlink: 'syz.1.9936': attribute type 3 has an invalid length.
[  503.292396][T28431] netlink: 'syz.1.9936': attribute type 1 has an invalid length.
[  503.295980][T28431] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.9936'.
[  503.333501][T28438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9939'.
[  503.338215][T28438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9939'.
[  503.416851][T28442] netlink: 'syz.2.9941': attribute type 6 has an invalid length.
[  503.420169][T28442] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9941'.
[  503.429218][T28448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9944'.
[  503.729447][   T33] audit: type=1107 audit(1756244961.094:13): pid=28461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  503.850831][T28494] net_ratelimit: 81 callbacks suppressed
[  503.850842][T28494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.093122][T28530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9980'.
[  505.099689][T28530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9980'.
[  505.274810][T10999] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  505.277534][T10999] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  505.280751][T10999] CPU: 0 UID: 0 PID: 10999 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) 
[  505.280764][T10999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  505.280770][T10999] Workqueue: hci1 hci_rx_work
[  505.280784][T10999] Call Trace:
[  505.280790][T10999]  <TASK>
[  505.280795][T10999]  dump_stack_lvl+0x189/0x250
[  505.280812][T10999]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.280824][T10999]  ? __pfx__printk+0x10/0x10
[  505.280833][T10999]  ? kernfs_root+0x1c/0x230
[  505.280851][T10999]  ? kernfs_path_from_node+0x250/0x290
[  505.280858][T10999]  ? kernfs_path_from_node+0x2f/0x290
[  505.280872][T10999]  sysfs_create_dir_ns+0x259/0x280
[  505.280886][T10999]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  505.280900][T10999]  ? do_raw_spin_unlock+0x4d/0x240
[  505.280915][T10999]  kobject_add_internal+0x59f/0xb40
[  505.280933][T10999]  kobject_add+0x155/0x220
[  505.280943][T10999]  ? class_to_subsys+0x104/0x120
[  505.280960][T10999]  ? __pfx_kobject_add+0x10/0x10
[  505.280974][T10999]  ? _raw_spin_unlock+0x28/0x50
[  505.280989][T10999]  ? get_device_parent+0x366/0x3a0
[  505.281003][T10999]  device_add+0x408/0xb50
[  505.281018][T10999]  hci_conn_add_sysfs+0xd5/0x1e0
[  505.281031][T10999]  le_conn_complete_evt+0xc3a/0x1220
[  505.281056][T10999]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  505.281068][T10999]  ? __pfx_bt_warn+0x10/0x10
[  505.281074][T10999]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  505.281092][T10999]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  505.281103][T10999]  ? skb_pull_data+0xfb/0x200
[  505.281118][T10999]  hci_le_conn_complete_evt+0x187/0x450
[  505.281139][T10999]  hci_event_packet+0x78f/0x1200
[  505.281153][T10999]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  505.281167][T10999]  ? __pfx_hci_event_packet+0x10/0x10
[  505.281179][T10999]  ? rcu_is_watching+0x15/0xb0
[  505.281194][T10999]  ? hci_send_to_monitor+0xe2/0x570
[  505.281210][T10999]  hci_rx_work+0x46a/0xe80
[  505.281229][T10999]  ? process_scheduled_works+0x9ef/0x17b0
[  505.281243][T10999]  process_scheduled_works+0xae1/0x17b0
[  505.281301][T10999]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.281344][T10999]  worker_thread+0x8a0/0xda0
[  505.281403][T10999]  kthread+0x711/0x8a0
[  505.281426][T10999]  ? __pfx_worker_thread+0x10/0x10
[  505.281440][T10999]  ? __pfx_kthread+0x10/0x10
[  505.281463][T10999]  ? rcu_is_watching+0x15/0xb0
[  505.281480][T10999]  ? __pfx_kthread+0x10/0x10
[  505.281501][T10999]  ret_from_fork+0x3fc/0x770
[  505.281515][T10999]  ? __pfx_ret_from_fork+0x10/0x10
[  505.281530][T10999]  ? __switch_to_asm+0x39/0x70
[  505.281539][T10999]  ? __switch_to_asm+0x33/0x70
[  505.281547][T10999]  ? __pfx_kthread+0x10/0x10
[  505.281559][T10999]  ret_from_fork_asm+0x1a/0x30
[  505.281610][T10999]  </TASK>
[  505.281637][T10999] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  505.393070][T10999] Bluetooth: hci1: failed to register connection device
[  505.717853][T28589] netlink: 'syz.2.10007': attribute type 10 has an invalid length.
[  506.422049][T28653] netlink: set zone limit has 8 unknown bytes
[  506.698546][T28689] netlink: 'syz.3.10054': attribute type 21 has an invalid length.
[  506.823123][T28700] netlink: 'syz.2.10059': attribute type 11 has an invalid length.
[  507.768901][T28739] IPv6: Can't replace route, no match found
[  508.041242][   T33] audit: type=1107 audit(1756244965.404:14): pid=28748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  508.790628][T28788] __nla_validate_parse: 11 callbacks suppressed
[  508.790702][T28788] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10098'.
[  509.032764][T28800] syz.1.10103: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  509.059656][T28800] CPU: 0 UID: 0 PID: 28800 Comm: syz.1.10103 Not tainted syzkaller #0 PREEMPT(full) 
[  509.059678][T28800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  509.059685][T28800] Call Trace:
[  509.059693][T28800]  <TASK>
[  509.059699][T28800]  dump_stack_lvl+0x189/0x250
[  509.059721][T28800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  509.059736][T28800]  ? __pfx__printk+0x10/0x10
[  509.059753][T28800]  ? lock_release+0x4b/0x3e0
[  509.059773][T28800]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  509.059789][T28800]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  509.059802][T28800]  warn_alloc+0x214/0x310
[  509.059821][T28800]  ? stack_depot_save_flags+0x40/0x860
[  509.059840][T28800]  ? __pfx_warn_alloc+0x10/0x10
[  509.059857][T28800]  ? kasan_save_track+0x4f/0x80
[  509.059872][T28800]  ? xskq_create+0x56/0x170
[  509.059889][T28800]  ? xsk_init_queue+0xb0/0x110
[  509.059902][T28800]  ? xsk_setsockopt+0x57b/0x8d0
[  509.059918][T28800]  ? do_sock_setsockopt+0x17c/0x1b0
[  509.059930][T28800]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  509.059943][T28800]  ? do_syscall_64+0xfa/0x3b0
[  509.059960][T28800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.059975][T28800]  __vmalloc_node_range_noprof+0x125/0x12f0
[  509.060002][T28800]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  509.060020][T28800]  ? xsk_setsockopt+0x502/0x8d0
[  509.060035][T28800]  ? __kasan_kmalloc+0x93/0xb0
[  509.060052][T28800]  vmalloc_user_noprof+0xad/0xf0
[  509.060068][T28800]  ? xskq_create+0xbf/0x170
[  509.060083][T28800]  xskq_create+0xbf/0x170
[  509.060100][T28800]  xsk_init_queue+0xb0/0x110
[  509.060115][T28800]  xsk_setsockopt+0x57b/0x8d0
[  509.060131][T28800]  ? __pfx_xsk_setsockopt+0x10/0x10
[  509.060146][T28800]  ? __pfx_aa_sk_perm+0x10/0x10
[  509.060162][T28800]  ? lock_release+0x4b/0x3e0
[  509.060178][T28800]  ? perf_trace_preemptirq_template+0x280/0x340
[  509.060195][T28800]  ? aa_sock_opt_perm+0xff/0x1b0
[  509.060207][T28800]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  509.060220][T28800]  ? __pfx_xsk_setsockopt+0x10/0x10
[  509.060234][T28800]  do_sock_setsockopt+0x17c/0x1b0
[  509.060247][T28800]  __x64_sys_setsockopt+0x13f/0x1b0
[  509.060260][T28800]  do_syscall_64+0xfa/0x3b0
[  509.060277][T28800]  ? rcu_is_watching+0x15/0xb0
[  509.060288][T28800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.060302][T28800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.060315][T28800] RIP: 0033:0x7f54f418ebe9
[  509.060326][T28800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.060336][T28800] RSP: 002b:00007f54f5013038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  509.060351][T28800] RAX: ffffffffffffffda RBX: 00007f54f43b5fa0 RCX: 00007f54f418ebe9
[  509.060361][T28800] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  509.060369][T28800] RBP: 00007f54f4211e19 R08: 0000000000000004 R09: 0000000000000000
[  509.060375][T28800] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  509.060382][T28800] R13: 00007f54f43b6038 R14: 00007f54f43b5fa0 R15: 00007ffd272132b8
[  509.060397][T28800]  </TASK>
[  509.060615][T28800] Mem-Info:
[  509.297965][T28800] active_anon:14466 inactive_anon:344 isolated_anon:0
[  509.297965][T28800]  active_file:7069 inactive_file:30786 isolated_file:0
[  509.297965][T28800]  unevictable:1768 dirty:97 writeback:0
[  509.297965][T28800]  slab_reclaimable:7305 slab_unreclaimable:128809
[  509.297965][T28800]  mapped:23132 shmem:2226 pagetables:995
[  509.297965][T28800]  sec_pagetables:0 bounce:0
[  509.297965][T28800]  kernel_misc_reclaimable:0
[  509.297965][T28800]  free:197786 free_pcp:22365 free_cma:0
[  509.329111][T28800] Node 0 active_anon:26872kB inactive_anon:1376kB active_file:5428kB inactive_file:31388kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:69144kB dirty:324kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5636kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  509.349628][T28800] Node 1 active_anon:31400kB inactive_anon:0kB active_file:22848kB inactive_file:91756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23860kB dirty:64kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5768kB pagetables:1320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  509.373210][T28800] Node 0 DMA free:14508kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:540kB local_pcp:284kB free_cma:0kB
[  509.391532][T28800] lowmem_reserve[]: 0 811 811 811 811
[  509.401001][T28800] Node 0 DMA32 free:173024kB boost:24576kB min:58236kB low:66648kB high:75060kB reserved_highatomic:2048KB free_highatomic:920KB active_anon:27960kB inactive_anon:1376kB active_file:5428kB inactive_file:31388kB unevictable:3536kB writepending:324kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:27480kB local_pcp:13672kB free_cma:0kB
[  509.415360][T28800] lowmem_reserve[]: 0 0 0 0 0
[  509.419185][T28800] Node 1 DMA32 free:406960kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:22916kB local_pcp:11904kB free_cma:0kB
[  509.439593][T28800] lowmem_reserve[]: 0 0 854 854 854
[  509.443762][T28800] Node 1 Normal free:198212kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:10240KB free_highatomic:4156KB active_anon:31400kB inactive_anon:0kB active_file:22848kB inactive_file:91756kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35152kB local_pcp:18208kB free_cma:0kB
[  509.462229][T28800] lowmem_reserve[]: 0 0 0 0 0
[  509.475621][T28800] Node 0 DMA: 5*4kB (UM) 3*8kB (U) 6*16kB (U) 15*32kB (U) 11*64kB (U) 7*128kB (U) 10*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 0*4096kB = 14508kB
[  509.511075][T28800] Node 0 DMA32: 851*4kB (UEH) 633*8kB (UMEH) 327*16kB (UEH) 182*32kB (UMEH) 147*64kB (UMEH) 72*128kB (UME) 95*256kB (UME) 52*512kB (UM) 46*1024kB (UM) 7*2048kB (UM) 5*4096kB (UM) = 171012kB
[  509.525446][T28800] Node 1 DMA32: 5*4kB (M) 45*8kB (UM) 57*16kB (UM) 140*32kB (UM) 141*64kB (UM) 122*128kB (UM) 105*256kB (UM) 87*512kB (UM) 72*1024kB (UM) 33*2048kB (UM) 40*4096kB (UM) = 406988kB
[  509.541536][T28800] Node 1 Normal: 346*4kB (UMEH) 492*8kB (UMEH) 724*16kB (UMEH) 430*32kB (UMEH) 398*64kB (UMEH) 270*128kB (UMEH) 166*256kB (UMEH) 69*512kB (UME) 27*1024kB (UM) 0*2048kB 0*4096kB = 196168kB
[  509.577778][T28800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  509.590453][T28800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  509.617688][T28800] 40159 total pagecache pages
[  509.627506][T28800] 78 pages in swap cache
[  509.639879][T28800] Free swap  = 120856kB
[  509.648975][T28800] Total swap = 124996kB
[  509.650975][T28800] 786301 pages RAM
[  509.652623][T28800] 0 pages HighMem/MovableOnly
[  509.662309][T28800] 241335 pages reserved
[  509.665364][T28800] 0 pages cma reserved
[  509.821471][T28814] netlink: 'syz.1.10108': attribute type 10 has an invalid length.
[  509.828574][T28814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10108'.
[  509.832501][T28814] lo: left promiscuous mode
[  509.840770][T28814] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  509.848714][T28814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  511.208661][T28849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  511.211778][T28849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  511.215071][T28849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  511.218662][T28849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  511.221954][T28849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  511.344284][T28848] chnl_net:caif_netlink_parms(): no params data found
[  511.370903][T28848] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.373573][T28848] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.376267][T28848] bridge_slave_0: entered allmulticast mode
[  511.378724][T28848] bridge_slave_0: entered promiscuous mode
[  511.381743][T28848] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.384423][T28848] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.387381][T28848] bridge_slave_1: entered allmulticast mode
[  511.389817][T28848] bridge_slave_1: entered promiscuous mode
[  511.401969][T28848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.407154][T28848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.418344][T28848] team0: Port device team_slave_0 added
[  511.421114][T28848] team0: Port device team_slave_1 added
[  511.431644][T28848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.434188][T28848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.443601][T28848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.448356][T28848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.450789][T28848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.460040][T28848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.475513][T28848] hsr_slave_0: entered promiscuous mode
[  511.477752][T28848] hsr_slave_1: entered promiscuous mode
[  511.479949][T28848] debugfs: 'hsr0' already exists in 'hsr'
[  511.481860][T28848] Cannot create hsr debugfs directory
[  511.535691][T28848] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  511.542707][T28848] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  511.547687][T28848] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  511.551710][T28848] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  511.564729][T28848] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.567148][T28848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.569733][T28848] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.572119][T28848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.593009][T28848] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.599388][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.602197][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.609014][T28848] 8021q: adding VLAN 0 to HW filter on device team0
[  511.613786][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.616913][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.623277][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.625737][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.708396][T28848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.883122][T28849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  511.886898][T28849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  511.890118][T28849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  511.891715][T28848] veth0_vlan: entered promiscuous mode
[  511.893658][T28849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  511.900584][T28849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  511.918561][T28848] veth1_vlan: entered promiscuous mode
[  511.937743][T28848] veth0_macvtap: entered promiscuous mode
[  511.946236][T28848] veth1_macvtap: entered promiscuous mode
[  511.951843][T28883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10122'.
[  511.960030][T28848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.968712][T28848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.972438][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10122'.
[  511.981603][T28883] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10122'.
[  511.985202][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10122'.
[  511.988885][T28883] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10122'.
[  511.999103][ T5883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.003789][ T5883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.015630][ T5883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.025373][ T5883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.112490][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.118245][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.137151][T28877] chnl_net:caif_netlink_parms(): no params data found
[  512.149175][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.157797][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.195414][T28877] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.197936][T28877] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.201402][T28877] bridge_slave_0: entered allmulticast mode
[  512.205640][T28877] bridge_slave_0: entered promiscuous mode
[  512.208736][T28877] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.211054][T28877] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.215698][T28877] bridge_slave_1: entered allmulticast mode
[  512.219447][T28877] bridge_slave_1: entered promiscuous mode
[  512.243755][T28877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.257135][T28877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.279336][T28877] team0: Port device team_slave_0 added
[  512.283673][T28877] team0: Port device team_slave_1 added
[  512.317227][T28877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.320554][T28877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.333268][T28877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.340250][T28877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.343987][T28877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.354675][T28877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.431220][T28877] hsr_slave_0: entered promiscuous mode
[  512.434268][T28877] hsr_slave_1: entered promiscuous mode
[  512.437256][T28877] debugfs: 'hsr0' already exists in 'hsr'
[  512.439948][T28877] Cannot create hsr debugfs directory
[  512.652429][T28877] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  512.665128][T28877] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  512.671941][T28877] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  512.678391][T28877] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  512.738929][T28877] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.750368][T28877] 8021q: adding VLAN 0 to HW filter on device team0
[  512.793243][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.796450][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.810191][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.813401][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.884081][T28877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.890575][T28939] netlink: 130144 bytes leftover after parsing attributes in process `syz.5.10138'.
[  513.031315][T28877] veth0_vlan: entered promiscuous mode
[  513.037963][T28877] veth1_vlan: entered promiscuous mode
[  513.059117][T28877] veth0_macvtap: entered promiscuous mode
[  513.062736][T28877] veth1_macvtap: entered promiscuous mode
[  513.075434][T28877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.081568][T28877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.088420][ T5883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.091650][ T5883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.095160][ T5883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.097986][ T5883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.123041][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.128787][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.140391][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.143371][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.294780][T11096] Bluetooth: hci1: command tx timeout
[  513.595257][T28979] netlink: 'syz.2.10152': attribute type 3 has an invalid length.
[  513.598682][T28979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10152'.
[  513.898819][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10157'.
[  513.902712][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10157'.
[  513.935273][T11096] Bluetooth: hci3: command tx timeout
[  514.498043][T29017] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10169'.
[  514.770178][T29046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10182'.
[  514.773035][T29048] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10183'.
[  514.777891][T29046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10182'.
[  515.026796][T29086] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10201'.
[  515.074449][T29091] delete_channel: no stack
[  515.364840][T11096] Bluetooth: hci1: command tx timeout
[  515.966214][T29109] netlink: 'syz.2.10210': attribute type 2 has an invalid length.
[  515.969143][T29109] netlink: 'syz.2.10210': attribute type 8 has an invalid length.
[  515.973913][T29109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10210'.
[  516.005128][T11096] Bluetooth: hci3: command tx timeout
[  517.199320][T29168] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10238'.
[  517.295893][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10240'.
[  517.445113][T11096] Bluetooth: hci1: command tx timeout
[  517.869852][T29200] cgroup: fork rejected by pids controller in /syz2
[  518.076649][T11096] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  518.084913][T11096] Bluetooth: hci3: command tx timeout
[  518.120330][T11096] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  518.174826][T28849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  518.181612][T28849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  518.184898][T28849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  518.188275][T28849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  518.191092][T28849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  518.342991][T29208] chnl_net:caif_netlink_parms(): no params data found
[  518.383981][T29208] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.387067][T29208] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.389804][T29208] bridge_slave_0: entered allmulticast mode
[  518.392821][T29208] bridge_slave_0: entered promiscuous mode
[  518.397031][T29208] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.399818][T29208] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.402906][T29208] bridge_slave_1: entered allmulticast mode
[  518.406766][T29208] bridge_slave_1: entered promiscuous mode
[  518.433838][T29208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.439202][T29208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.458662][T29208] team0: Port device team_slave_0 added
[  518.462265][T29208] team0: Port device team_slave_1 added
[  518.480428][T29208] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.483899][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.495038][T29208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.499880][T29208] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.502483][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.512598][T29208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.539147][T29208] hsr_slave_0: entered promiscuous mode
[  518.542046][T29208] hsr_slave_1: entered promiscuous mode
[  518.544928][T29208] debugfs: 'hsr0' already exists in 'hsr'
[  518.547129][T29208] Cannot create hsr debugfs directory
[  518.793174][T29208] team0: Port device netdevsim0 removed
[  518.882760][T29208] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  518.890956][T29208] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  518.897432][T29208] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  518.902243][T29208] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  518.925948][T29208] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.928889][T29208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.931948][T29208] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.934799][T29208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.001740][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.006511][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.036676][T29208] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.048283][T29208] 8021q: adding VLAN 0 to HW filter on device team0
[  519.056496][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.059295][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.065530][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.067911][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.154216][T29208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.182489][T29208] veth0_vlan: entered promiscuous mode
[  519.188394][T29208] veth1_vlan: entered promiscuous mode
[  519.206393][T29208] veth0_macvtap: entered promiscuous mode
[  519.212528][T29208] veth1_macvtap: entered promiscuous mode
[  519.228546][T29208] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.236543][T29208] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.241815][ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.248331][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.252160][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.258340][ T5883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.315616][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.323816][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.339563][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.342556][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.856504][T29280] netlink: 'syz.5.10281': attribute type 2 has an invalid length.
[  519.931821][T29282] netlink: 'syz.5.10282': attribute type 1 has an invalid length.
[  519.935545][T29282] netlink: 'syz.5.10282': attribute type 2 has an invalid length.
[  520.168585][T11096] Bluetooth: hci3: command tx timeout
[  520.245071][T11096] Bluetooth: hci2: command tx timeout
[  520.853736][T29310] netlink: 'syz.5.10295': attribute type 12 has an invalid length.
[  520.857995][T29310] __nla_validate_parse: 4 callbacks suppressed
[  520.858004][T29310] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.10295'.
[  521.205952][T29330] netlink: 'syz.5.10304': attribute type 39 has an invalid length.
[  521.223172][T29330] veth0_macvtap: left promiscuous mode
[  521.267499][T29328] netlink: 'syz.4.10303': attribute type 2 has an invalid length.
[  521.270841][T29328] netlink: 'syz.4.10303': attribute type 1 has an invalid length.
[  521.274273][T29328] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.10303'.
[  521.279619][T29328] block nbd5: not configured, cannot reconfigure
[  521.398796][T29338] netlink: 'syz.5.10308': attribute type 13 has an invalid length.
[  521.402171][T29338] netlink: 'syz.5.10308': attribute type 17 has an invalid length.
[  521.711900][T29338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  522.325609][T11096] Bluetooth: hci2: command tx timeout
[  522.805272][T11096] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  522.808876][T11096] Bluetooth: hci1: Injecting HCI hardware error event
[  522.811786][T11096] Bluetooth: hci1: hardware error 0x00
[  524.404851][T28849] Bluetooth: hci2: command tx timeout
[  524.926624][T29373] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.10323'.
[  525.078833][T29371] netlink: 'syz.2.10322': attribute type 6 has an invalid length.
[  525.082374][T29371] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10322'.
[  525.517147][T29391] netlink: 'syz.4.10330': attribute type 10 has an invalid length.
[  525.536838][T29391] team0: Port device geneve1 added
[  526.128996][T29414] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10341'.
[  526.143174][T29414] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10341'.
[  526.282709][T29421] delete_channel: no stack
[  526.284368][T29421] delete_channel: no stack
[  526.484704][T28849] Bluetooth: hci2: command tx timeout
[  526.513751][T29431] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.516899][T29431] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.520891][T29431] bridge0: entered allmulticast mode
[  526.527850][T29431] bridge_slave_1: left allmulticast mode
[  526.529974][T29431] bridge_slave_1: left promiscuous mode
[  526.532428][T29431] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.623796][T29431] bridge_slave_0: left allmulticast mode
[  526.628615][T29431] bridge_slave_0: left promiscuous mode
[  526.631025][T29431] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.738937][T29429] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10347'.
[  526.953306][T29440] netlink: 'syz.2.10352': attribute type 3 has an invalid length.
[  527.027559][T11096] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  527.301101][T29460] netlink: 'syz.2.10362': attribute type 2 has an invalid length.
[  527.304359][T29460] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.10362'.
[  528.671060][T29544] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.10401'.
[  532.071808][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10418'.
[  532.536574][T29603] sit0: entered allmulticast mode
[  532.813126][T29618] : entered promiscuous mode
[  532.963587][T29628] sit0: entered promiscuous mode
[  532.998431][T29636] netlink: 'syz.4.10443': attribute type 22 has an invalid length.
[  533.007264][T29638] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10445'.
[  534.035526][T29697] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10472'.
[  534.232568][T29708] : entered promiscuous mode
[  534.337667][T29722] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10483'.
[  534.342803][T29722] openvswitch: netlink: Message has 4 unknown bytes.
[  534.476928][T29735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10488'.
[  534.480299][T29732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10488'.
[  534.484161][T29735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10488'.
[  535.811384][T29772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10505'.
[  535.815872][T29773] netlink: 'syz.5.10504': attribute type 21 has an invalid length.
[  535.818963][T29773] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10504'.
[  535.822378][T29773] netlink: 'syz.5.10504': attribute type 4 has an invalid length.
[  535.831280][T29773] netlink: 'syz.5.10504': attribute type 3 has an invalid length.
[  535.835546][T29773] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10504'.
[  536.031040][T29785] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  536.035412][T29785] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  536.049635][T29789] netlink: 'syz.4.10512': attribute type 2 has an invalid length.
[  536.407499][T29801] netlink: 'syz.4.10518': attribute type 3 has an invalid length.
[  536.410235][T29801] netlink: 'syz.4.10518': attribute type 2 has an invalid length.
[  536.460655][T29807] netlink: 'syz.4.10521': attribute type 3 has an invalid length.
[  538.105612][T29896] netlink: 'syz.2.10560': attribute type 1 has an invalid length.
[  538.113110][T29896] __nla_validate_parse: 3 callbacks suppressed
[  538.113126][T29896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10560'.
[  538.147926][T29898] netlink: 'syz.4.10561': attribute type 21 has an invalid length.
[  538.152665][T29898] netlink: 'syz.4.10561': attribute type 15 has an invalid length.
[  538.157159][T29898] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10561'.
[  538.164392][T29898] IPv6: NLM_F_CREATE should be specified when creating new route
[  538.171153][T29898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  538.174199][T29898] IPv6: NLM_F_CREATE should be set when creating new route
[  538.176823][T29898] IPv6: NLM_F_CREATE should be set when creating new route
[  538.180340][T29898] IPv6: NLM_F_CREATE should be set when creating new route
[  538.317723][T29908] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10567'.
[  538.350509][T29912] netlink: 'syz.5.10569': attribute type 21 has an invalid length.
[  538.360420][T29912] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10569'.
[  538.366644][T29912] netlink: 'syz.5.10569': attribute type 4 has an invalid length.
[  538.402817][T29916] netlink: 'syz.4.10570': attribute type 2 has an invalid length.
[  538.408776][T29916] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.10570'.
[  538.910329][T29931] : renamed from vlan0 (while UP)
[  538.972338][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10583'.
[  538.976403][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10583'.
[  540.201955][T29980] GPL: port 1(gretap0) entered blocking state
[  540.204683][T29980] GPL: port 1(gretap0) entered disabled state
[  540.207982][T29980] gretap0: entered allmulticast mode
[  540.210898][T29980] gretap0: entered promiscuous mode
[  541.849614][T30047] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10627'.
[  542.240705][T30079] netlink: 'syz.4.10641': attribute type 21 has an invalid length.
[  542.244146][T30079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10641'.
[  542.286452][T30082] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.10642'.
[  542.360407][T30091] netlink: 'syz.2.10647': attribute type 1 has an invalid length.
[  542.892632][T30101] syzkaller0: entered promiscuous mode
[  542.894885][T30101] syzkaller0: entered allmulticast mode
[  544.259955][T30117] netlink: 'syz.4.10657': attribute type 3 has an invalid length.
[  544.263325][T30117] netlink: 'syz.4.10657': attribute type 1 has an invalid length.
[  544.266892][T30117] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.10657'.
[  546.005527][T30134] netlink: 'syz.5.10663': attribute type 12 has an invalid length.
[  546.009253][T30134] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10663'.
[  547.766404][T30138] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10665'.
[  548.807556][T30153] netlink: 'syz.5.10670': attribute type 4 has an invalid length.
[  548.811009][T30153] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10670'.
[  548.811002][T30152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10671'.
[  548.831034][T30153] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  548.922584][T30157] netlink: set zone limit has 4 unknown bytes
[  549.026651][T30173] netlink: 'syz.5.10680': attribute type 1 has an invalid length.
[  549.065471][T30179] netlink: 'syz.2.10684': attribute type 10 has an invalid length.
[  549.068844][T30179] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.10684'.
[  549.136813][T30184] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10686'.
[  549.953318][T30199] netlink: 'syz.4.10691': attribute type 3 has an invalid length.
[  549.987025][T30203] netlink: 'syz.4.10693': attribute type 21 has an invalid length.
[  549.999081][T30205] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10694'.
[  550.099374][T11096] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  550.189023][T30216] netlink: 'syz.4.10699': attribute type 1 has an invalid length.
[  550.215745][T30216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10699'.
[  550.235447][T30218] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.10700'.
[  550.252726][T30222] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  550.390894][T30243] netlink: 'syz.2.10712': attribute type 10 has an invalid length.
[  550.399544][T30243] team0 (unregistering): Port device team_slave_0 removed
[  550.403604][T30243] team0 (unregistering): Port device team_slave_1 removed
[  550.412445][T30246] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10714'.
[  550.456470][T30249] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.10712'.
[  550.472611][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10716'.
[  550.478234][T30253] netlink: 'syz.5.10716': attribute type 11 has an invalid length.
[  550.481240][T30253] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10716'.
[  550.481621][T30257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10719'.
[  550.498799][T30250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  550.843485][T30269] bridge_slave_1: left allmulticast mode
[  550.846654][T30269] bridge_slave_1: left promiscuous mode
[  550.850310][T30269] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.375936][T30269] bridge_slave_0: left allmulticast mode
[  551.378723][T30269] bridge_slave_0: left promiscuous mode
[  551.384647][T30269] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.493678][T30283] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.10729'.
[  552.617973][T30353] netlink: 'syz.4.10759': attribute type 12 has an invalid length.
[  552.647070][T30353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10759'.
[  553.093509][T30396] netlink: 'syz.4.10780': attribute type 13 has an invalid length.
[  553.099189][T30396] erspan0: refused to change device tx_queue_len
[  553.101781][T30396] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  553.539953][T30436] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  554.733708][T30468] netlink: 'syz.5.10814': attribute type 6 has an invalid length.
[  554.740995][T30468] netlink: 'syz.5.10814': attribute type 1 has an invalid length.
[  554.843006][T28849] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  555.185808][T30498] : renamed from bond_slave_0 (while UP)
[  555.326247][T30456] delete_channel: no stack
[  555.364434][T30502] netlink: 'syz.5.10830': attribute type 10 has an invalid length.
[  555.391567][T30502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  555.646273][T30513] __nla_validate_parse: 6 callbacks suppressed
[  555.646288][T30513] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10835'.
[  555.653639][T30513] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10835'.
[  555.785348][T30519] netlink: 'syz.5.10838': attribute type 10 has an invalid length.
[  556.014285][T30519] macvlan0: entered allmulticast mode
[  556.032347][T30519] veth1_vlan: entered allmulticast mode
[  556.036875][T30519] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  556.260101][T30536] netlink: 'syz.4.10845': attribute type 7 has an invalid length.
[  556.310404][T30537] netlink: 'syz.5.10844': attribute type 10 has an invalid length.
[  556.428786][T30549] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10851'.
[  556.518883][T30555] netlink: 'syz.4.10854': attribute type 10 has an invalid length.
[  556.522538][T30555] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10854'.
[  556.526861][T30555] bond0: entered promiscuous mode
[  556.529263][T30555] bond_slave_0: entered promiscuous mode
[  556.531905][T30555] bond_slave_1: entered promiscuous mode
[  557.171258][T30595] netlink: 10 bytes leftover after parsing attributes in process `syz.5.10873'.
[  557.405730][T30609] IPv6: NLM_F_CREATE should be specified when creating new route
[  558.053535][T30650] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10897'.
[  558.290508][T30667] netlink: 'syz.4.10905': attribute type 1 has an invalid length.
[  558.293705][T30667] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.10905'.
[  558.392246][T30672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10907'.
[  558.605780][T30678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10910'.
[  558.609873][T30678] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  558.612987][T30678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.982900][T30696] netlink: 17 bytes leftover after parsing attributes in process `syz.5.10917'.
[  558.986325][T30696] netlink: zone id is out of range
[  558.988503][T30696] netlink: zone id is out of range
[  558.990730][T30696] netlink: zone id is out of range
[  558.993136][T30696] netlink: zone id is out of range
[  558.995567][T30696] netlink: zone id is out of range
[  558.997593][T30696] netlink: zone id is out of range
[  559.000195][T30696] netlink: zone id is out of range
[  559.002383][T30696] netlink: zone id is out of range
[  560.274765][T30782] netlink: 'syz.4.10955': attribute type 2 has an invalid length.
[  560.277628][T30782] netlink: 'syz.4.10955': attribute type 1 has an invalid length.
[  560.439749][T30797] netlink: 'syz.2.10961': attribute type 12 has an invalid length.
[  560.830303][T30852] netlink: 'syz.4.10989': attribute type 21 has an invalid length.
[  560.836197][T30852] __nla_validate_parse: 6 callbacks suppressed
[  560.836213][T30852] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10989'.
[  560.842700][T30852] netlink: 'syz.4.10989': attribute type 3 has an invalid length.
[  560.849347][T30852] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10989'.
[  560.886828][T30858] netlink: 'syz.5.10992': attribute type 2 has an invalid length.
[  562.636938][T30913] netlink: 'syz.4.11015': attribute type 10 has an invalid length.
[  562.643920][T30913] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  562.652832][T30913] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  562.658596][T30913] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  562.725896][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  562.729220][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  562.952936][T30930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11022'.
[  562.959196][T30930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11022'.
[  562.963135][T30930] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11022'.
[  563.118570][T30936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11026'.
[  563.247096][T30941] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11028'.
[  563.431146][T30957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11033'.
[  563.521023][T30974] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11041'.
[  564.249443][T30992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  564.252814][T30992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  564.320974][T31002] netlink: 'syz.5.11052': attribute type 10 has an invalid length.
[  564.329869][T31002] team0: Port device dummy0 added
[  564.459708][T31010] siw: device registration error -23
[  564.802976][T31040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11069'.
[  565.299187][T31070] netlink: 'syz.4.11082': attribute type 39 has an invalid length.
[  566.224642][T31098] netlink: 'syz.4.11091': attribute type 21 has an invalid length.
[  566.227513][T31098] __nla_validate_parse: 2 callbacks suppressed
[  566.227521][T31098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11091'.
[  566.232738][T31098] netlink: 'syz.4.11091': attribute type 1 has an invalid length.
[  566.670178][T31136] netlink: 'syz.5.11108': attribute type 2 has an invalid length.
[  566.676076][T31136] netlink: 'syz.5.11108': attribute type 1 has an invalid length.
[  566.679282][T31136] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.11108'.
[  566.919730][T31138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  566.928393][T31138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  566.942466][T31146] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11113'.
[  567.483970][T31187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11133'.
[  567.544166][T31193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11136'.
[  567.550363][T31193] netlink: 'syz.4.11136': attribute type 1 has an invalid length.
[  567.642164][T31200] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  567.710917][T31198] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11138'.
[  567.719382][T31198] netlink: 'syz.2.11138': attribute type 4 has an invalid length.
[  567.720530][T31202] netlink: 'syz.5.11139': attribute type 11 has an invalid length.
[  567.723724][T31198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11138'.
[  567.761737][T31198] net_ratelimit: 79 callbacks suppressed
[  567.761795][T31198] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  567.863728][T31207] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11141'.
[  568.009879][T31220] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11146'.
[  569.195747][T31286] netlink: 'syz.2.11176': attribute type 10 has an invalid length.
[  569.199125][T31286] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11176'.
[  569.203506][T31286] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  570.770958][T31390] netlink: 'syz.2.11223': attribute type 1 has an invalid length.
[  571.168553][T28849] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5
[  571.813547][T31457] __nla_validate_parse: 5 callbacks suppressed
[  571.813589][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11252'.
[  571.820821][T31457] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  571.841400][T31457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  571.856753][T31462] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.11254'.
[  571.880077][T31464] netlink: 'syz.5.11255': attribute type 6 has an invalid length.
[  571.884175][T31464] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.11255'.
[  572.319430][T11096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  572.322746][T11096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  572.326560][T11096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  572.330267][T11096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  572.333528][T11096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  572.438438][T31495] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.11270'.
[  572.498916][T31500] syz.5.11271: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  572.514768][T31500] CPU: 1 UID: 0 PID: 31500 Comm: syz.5.11271 Not tainted syzkaller #0 PREEMPT(full) 
[  572.514792][T31500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  572.514799][T31500] Call Trace:
[  572.514808][T31500]  <TASK>
[  572.514816][T31500]  dump_stack_lvl+0x189/0x250
[  572.514849][T31500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  572.514868][T31500]  ? __pfx__printk+0x10/0x10
[  572.514885][T31500]  ? lock_release+0x4b/0x3e0
[  572.514913][T31500]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  572.514935][T31500]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  572.514958][T31500]  warn_alloc+0x214/0x310
[  572.515011][T31500]  ? stack_depot_save_flags+0x40/0x860
[  572.515037][T31500]  ? __pfx_warn_alloc+0x10/0x10
[  572.515063][T31500]  ? kasan_save_track+0x4f/0x80
[  572.515085][T31500]  ? xskq_create+0x56/0x170
[  572.515101][T31500]  ? xsk_init_queue+0xb0/0x110
[  572.515117][T31500]  ? xsk_setsockopt+0x57b/0x8d0
[  572.515130][T31500]  ? do_sock_setsockopt+0x17c/0x1b0
[  572.515140][T31500]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  572.515152][T31500]  ? do_syscall_64+0xfa/0x3b0
[  572.515168][T31500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.515204][T31500]  __vmalloc_node_range_noprof+0x125/0x12f0
[  572.515282][T31500]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  572.515304][T31500]  ? xsk_setsockopt+0x502/0x8d0
[  572.515328][T31500]  ? __kasan_kmalloc+0x93/0xb0
[  572.515355][T31500]  vmalloc_user_noprof+0xad/0xf0
[  572.515379][T31500]  ? xskq_create+0xbf/0x170
[  572.515401][T31500]  xskq_create+0xbf/0x170
[  572.515428][T31500]  xsk_init_queue+0xb0/0x110
[  572.515452][T31500]  xsk_setsockopt+0x57b/0x8d0
[  572.515476][T31500]  ? __pfx_xsk_setsockopt+0x10/0x10
[  572.515494][T31500]  ? __pfx_aa_sk_perm+0x10/0x10
[  572.515516][T31500]  ? lock_release+0x4b/0x3e0
[  572.515537][T31500]  ? __se_sys_futex+0x36f/0x400
[  572.515553][T31500]  ? aa_sock_opt_perm+0xff/0x1b0
[  572.515574][T31500]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  572.515589][T31500]  ? __pfx_xsk_setsockopt+0x10/0x10
[  572.515610][T31500]  do_sock_setsockopt+0x17c/0x1b0
[  572.515634][T31500]  __x64_sys_setsockopt+0x13f/0x1b0
[  572.515661][T31500]  do_syscall_64+0xfa/0x3b0
[  572.515684][T31500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.515698][T31500]  ? exc_page_fault+0x9f/0xf0
[  572.515722][T31500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.515735][T31500] RIP: 0033:0x7f587878ebe9
[  572.515750][T31500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  572.515760][T31500] RSP: 002b:00007f5879522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  572.515776][T31500] RAX: ffffffffffffffda RBX: 00007f58789b5fa0 RCX: 00007f587878ebe9
[  572.515784][T31500] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  572.515793][T31500] RBP: 00007f5878811e19 R08: 0000000000000004 R09: 0000000000000000
[  572.515800][T31500] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  572.515807][T31500] R13: 00007f58789b6038 R14: 00007f58789b5fa0 R15: 00007ffc8340b7f8
[  572.515850][T31500]  </TASK>
[  572.515856][T31500] Mem-Info:
[  572.665945][T31483] chnl_net:caif_netlink_parms(): no params data found
[  572.676992][T31500] active_anon:14400 inactive_anon:336 isolated_anon:0
[  572.676992][T31500]  active_file:13311 inactive_file:24224 isolated_file:0
[  572.676992][T31500]  unevictable:1768 dirty:38 writeback:0
[  572.676992][T31500]  slab_reclaimable:7848 slab_unreclaimable:136020
[  572.676992][T31500]  mapped:22214 shmem:2194 pagetables:995
[  572.676992][T31500]  sec_pagetables:0 bounce:0
[  572.676992][T31500]  kernel_misc_reclaimable:0
[  572.676992][T31500]  free:188284 free_pcp:22384 free_cma:0
[  572.697141][T31500] Node 0 active_anon:24360kB inactive_anon:1324kB active_file:21572kB inactive_file:4524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27784kB dirty:108kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6512kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  572.711273][T31500] Node 1 active_anon:33240kB inactive_anon:20kB active_file:31672kB inactive_file:92372kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61072kB dirty:44kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5952kB pagetables:1724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  572.726490][T31500] Node 0 DMA free:14388kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:312kB free_cma:0kB
[  572.762057][T31500] lowmem_reserve[]: 0 811 811 811 811
[  572.772163][T31500] Node 0 DMA32 free:220752kB boost:24576kB min:58236kB low:66648kB high:75060kB reserved_highatomic:2048KB free_highatomic:920KB active_anon:24376kB inactive_anon:1324kB active_file:21572kB inactive_file:4524kB unevictable:3536kB writepending:136kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:30112kB local_pcp:14404kB free_cma:0kB
[  572.793549][T31500] lowmem_reserve[]: 0 0 0 0 0
[  572.795935][T31500] Node 1 DMA32 free:411064kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:1700kB inactive_file:4kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16996kB local_pcp:8028kB free_cma:0kB
[  572.824720][T31500] lowmem_reserve[]: 0 0 854 854 854
[  572.833892][T31505] IPv6: Can't replace route, no match found
[  572.835099][T31500] Node 1 Normal free:106300kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:10240KB free_highatomic:4848KB active_anon:33172kB inactive_anon:0kB active_file:29972kB inactive_file:92368kB unevictable:3536kB writepending:52kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41296kB local_pcp:25392kB free_cma:0kB
[  572.880681][T31500] lowmem_reserve[]: 0 0 0 0 0
[  572.882841][T31500] Node 0 DMA: 5*4kB (UM) 4*8kB (U) 6*16kB (U) 13*32kB (U) 10*64kB (U) 7*128kB (U) 8*256kB (UM) 8*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 0*4096kB = 14388kB
[  572.920149][T31500] Node 0 DMA32: 1118*4kB (UMEH) 1433*8kB (UMEH) 627*16kB (UMEH) 258*32kB (UMEH) 452*64kB (UMEH) 210*128kB (UME) 98*256kB (UME) 65*512kB (U) 40*1024kB (UM) 13*2048kB (UM) 1*4096kB (U) = 220080kB
[  572.936128][T31500] Node 1 DMA32: 9*4kB (UM) 51*8kB (UM) 59*16kB (UM) 137*32kB (UM) 129*64kB (UM) 114*128kB (UM) 90*256kB (UM) 84*512kB (UM) 69*1024kB (UM) 40*2048kB (UM) 40*4096kB (UM) = 411084kB
[  572.944092][T31500] Node 1 Normal: 417*4kB (UMEH) 345*8kB (UMEH) 219*16kB (UMH) 60*32kB (UMH) 83*64kB (UMEH) 57*128kB (MEH) 39*256kB (MEH) 58*512kB (UME) 37*1024kB (UM) 3*2048kB (UM) 0*4096kB = 106172kB
[  572.959405][T31500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.963487][T31500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.980232][T31500] 39804 total pagecache pages
[  572.982461][T31500] 73 pages in swap cache
[  572.985245][T31500] Free swap  = 120876kB
[  572.987493][T31500] Total swap = 124996kB
[  572.989769][T31500] 786301 pages RAM
[  572.991877][T31500] 0 pages HighMem/MovableOnly
[  572.994055][T31500] 241335 pages reserved
[  573.003902][T31500] 0 pages cma reserved
[  573.450114][T31483] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.453166][T31483] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.456633][T31483] bridge_slave_0: entered allmulticast mode
[  573.459680][T31483] bridge_slave_0: entered promiscuous mode
[  573.462981][T31483] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.466310][T31483] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.468861][T31483] bridge_slave_1: entered allmulticast mode
[  573.472339][T31483] bridge_slave_1: entered promiscuous mode
[  573.487718][T31483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.492896][T31483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.516313][T31483] team0: Port device team_slave_0 added
[  573.520773][T31483] team0: Port device team_slave_1 added
[  573.539759][T31483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.542881][T31483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.551522][T31483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.562166][T31483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.565399][T31483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.576271][T31483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.627701][T31483] hsr_slave_0: entered promiscuous mode
[  573.630707][T31483] hsr_slave_1: entered promiscuous mode
[  573.633623][T31483] debugfs: 'hsr0' already exists in 'hsr'
[  573.636824][T31483] Cannot create hsr debugfs directory
[  573.731221][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.769483][T31523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  573.772581][T31523] IPv6: NLM_F_CREATE should be set when creating new route
[  573.775835][T31523] IPv6: NLM_F_CREATE should be set when creating new route
[  573.821499][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.891897][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.939506][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.109275][T31483] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  574.119835][T31483] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  574.130700][T31483] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  574.145083][T31483] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  574.213382][T31483] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.216651][T31483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.343879][T31483] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.371597][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.395057][T31483] 8021q: adding VLAN 0 to HW filter on device team0
[  574.405180][T11096] Bluetooth: hci2: command tx timeout
[  574.412345][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.415455][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.433988][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.437209][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.589337][T31483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  574.616140][T31483] veth0_vlan: entered promiscuous mode
[  574.621084][T31483] veth1_vlan: entered promiscuous mode
[  574.631845][T31483] veth0_macvtap: entered promiscuous mode
[  574.635267][T31483] veth1_macvtap: entered promiscuous mode
[  574.641768][T31483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  574.648049][T31483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.652749][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.657767][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.661413][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.665208][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.692041][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.696368][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.711701][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.716530][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.768679][T31544] siw: device registration error -23
[  575.293112][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11296'.
[  575.770229][T31583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.814267][T31581] lo speed is unknown, defaulting to 1000
[  575.815165][T31587] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  575.817127][T31581] lo speed is unknown, defaulting to 1000
[  575.824394][T31581] lo speed is unknown, defaulting to 1000
[  575.868577][T31581] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  575.970472][T31581] lo speed is unknown, defaulting to 1000
[  575.980729][T31581] lo speed is unknown, defaulting to 1000
[  575.994265][T31581] lo speed is unknown, defaulting to 1000
[  576.002810][T31581] lo speed is unknown, defaulting to 1000
[  576.009779][T31581] lo speed is unknown, defaulting to 1000
[  576.021819][T31581] lo speed is unknown, defaulting to 1000
[  576.034343][T31581] lo speed is unknown, defaulting to 1000
[  576.047971][T31581] lo speed is unknown, defaulting to 1000
[  576.058776][T31581] lo speed is unknown, defaulting to 1000
[  576.069036][T31581] lo speed is unknown, defaulting to 1000
[  576.083974][T31581] lo speed is unknown, defaulting to 1000
[  576.096713][T31581] lo speed is unknown, defaulting to 1000
[  576.104338][T31601] netlink: 'syz.4.11309': attribute type 1 has an invalid length.
[  576.108064][T31601] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.11309'.
[  576.119978][T31581] lo speed is unknown, defaulting to 1000
[  576.167468][T31581] lo speed is unknown, defaulting to 1000
[  576.181500][T31581] lo speed is unknown, defaulting to 1000
[  576.236623][T31611] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11314'.
[  576.498630][T11096] Bluetooth: hci2: command tx timeout
[  578.404144][T31683] netlink: 'syz.2.11346': attribute type 29 has an invalid length.
[  578.452354][T31683] netlink: 'syz.2.11346': attribute type 29 has an invalid length.
[  578.457728][T31683] netlink: 'syz.2.11346': attribute type 29 has an invalid length.
[  578.472791][T31683] netlink: 'syz.2.11346': attribute type 29 has an invalid length.
[  578.564705][T11096] Bluetooth: hci2: command tx timeout
[  578.958898][T31713] netlink: 'syz.4.11360': attribute type 10 has an invalid length.
[  579.069466][T31724] delete_channel: no stack
[  579.099232][T31731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11369'.
[  579.113054][T31731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11369'.
[  579.142390][T31731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11369'.
[  580.560950][T31762] netlink: 'syz.4.11381': attribute type 10 has an invalid length.
[  580.569206][T31762] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  580.572632][T31762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  580.654700][T28849] Bluetooth: hci2: command tx timeout
[  580.683057][T31768] netlink: 'syz.4.11384': attribute type 10 has an invalid length.
[  580.790877][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11388'.
[  580.797492][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11388'.
[  580.871055][T31778] netlink: 'syz.4.11389': attribute type 1 has an invalid length.
[  580.874069][T31778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11389'.
[  580.903555][T31780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11390'.
[  580.931860][T31784] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11392'.
[  581.012981][T31792] netlink: 182 bytes leftover after parsing attributes in process `syz.4.11396'.
[  581.132746][T31810] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11405'.
[  581.301922][T31818] sit0: entered allmulticast mode
[  581.418780][T31824] sit0: entered promiscuous mode
[  582.586006][T31898] netlink: 'syz.2.11445': attribute type 4 has an invalid length.
[  582.638589][T31900] netlink: 'syz.2.11446': attribute type 10 has an invalid length.
[  582.649388][T31900] batman_adv: batadv0: Adding interface: virt_wifi0
[  582.652037][T31900] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.664090][T31900] batman_adv: batadv0: Interface activated: virt_wifi0
[  583.620710][T31940] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  583.624286][T31940] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  583.993757][T31968] veth0_vlan: entered allmulticast mode
[  584.158330][T31984] netlink: 'syz.2.11487': attribute type 21 has an invalid length.
[  584.161549][T31984] __nla_validate_parse: 9 callbacks suppressed
[  584.161604][T31984] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11487'.
[  584.168606][T31984] netlink: 'syz.2.11487': attribute type 6 has an invalid length.
[  584.172759][T31984] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11487'.
[  584.473206][T31998] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.11494'.
[  584.873695][T32017] netlink: 'syz.2.11502': attribute type 4 has an invalid length.
[  584.877371][T32017] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11502'.
[  585.965554][T32046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11515'.
[  586.790790][T32058] netlink: 268 bytes leftover after parsing attributes in process `syz.4.11520'.
[  587.122587][T32085] netlink: 'syz.2.11532': attribute type 39 has an invalid length.
[  588.082738][T32107] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.11542'.
[  588.086757][T32107] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11542'.
[  588.167118][T32117] netlink: 'syz.4.11547': attribute type 3 has an invalid length.
[  588.170509][T32117] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.11547'.
[  588.307064][T32121] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11549'.
[  588.576651][T32121] netlink: 'syz.4.11549': attribute type 28 has an invalid length.
[  588.734165][T32130] netlink: 'syz.2.11552': attribute type 30 has an invalid length.
[  589.815161][T32138] netlink: zone id is out of range
[  589.817390][T32138] netlink: zone id is out of range
[  589.819584][T32138] netlink: zone id is out of range
[  589.821740][T32138] netlink: zone id is out of range
[  589.824313][T32138] netlink: zone id is out of range
[  589.828314][T32138] netlink: zone id is out of range
[  589.830531][T32138] netlink: zone id is out of range
[  589.832214][T32138] netlink: zone id is out of range
[  589.834186][T32138] netlink: zone id is out of range
[  589.836221][T32138] netlink: zone id is out of range
[  590.355737][T32166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11569'.
[  590.658083][T32199] siw: device registration error -23
[  590.849425][T32209] netlink: 'syz.4.11585': attribute type 6 has an invalid length.
[  590.864778][T32209] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11585'.
[  590.946722][T11096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  590.951220][T11096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  590.954372][T11096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  590.958418][T11096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  590.961772][T11096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  591.041222][T32210] lo speed is unknown, defaulting to 1000
[  591.127303][T32210] chnl_net:caif_netlink_parms(): no params data found
[  591.172258][T32210] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.177963][T32210] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.181046][T32210] bridge_slave_0: entered allmulticast mode
[  591.184357][T32210] bridge_slave_0: entered promiscuous mode
[  591.188718][T32210] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.193092][T32210] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.198597][T32210] bridge_slave_1: entered allmulticast mode
[  591.201944][T32210] bridge_slave_1: entered promiscuous mode
[  591.222068][T32210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.228900][T32210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.248516][T32210] team0: Port device team_slave_0 added
[  591.253042][T32210] team0: Port device team_slave_1 added
[  591.266221][T32210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.268813][T32210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.278983][T32210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.284050][T32210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.288317][T32210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.303203][T32210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.344337][T32210] hsr_slave_0: entered promiscuous mode
[  591.358409][T32210] hsr_slave_1: entered promiscuous mode
[  591.360708][T32210] debugfs: 'hsr0' already exists in 'hsr'
[  591.363055][T32210] Cannot create hsr debugfs directory
[  591.398463][T11096] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  591.513676][T32210] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  591.519374][T32210] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  591.523388][T32210] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  591.527668][T32210] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  591.542237][T32210] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.545223][T32210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.548172][T32210] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.550629][T32210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.582723][T32210] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.591655][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.594998][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.600974][T32210] 8021q: adding VLAN 0 to HW filter on device team0
[  591.607536][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.609987][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.617643][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.620329][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.720941][T32210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.739221][T32240] team0: Port device team_slave_0 removed
[  591.839119][T32210] veth0_vlan: entered promiscuous mode
[  591.848345][T32210] veth1_vlan: entered promiscuous mode
[  591.872719][T32210] veth0_macvtap: entered promiscuous mode
[  591.879816][T32210] veth1_macvtap: entered promiscuous mode
[  591.890604][T32210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  592.718319][T32210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  592.740005][T32255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11599'.
[  592.747280][T26953] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  592.750712][T26953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.754106][T26953] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.763168][T26953] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.806817][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.809916][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.838352][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.842956][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.900912][T32265] netlink: 'syz.2.11601': attribute type 12 has an invalid length.
[  592.904482][T32265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11601'.
[  592.956706][T32273] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11606'.
[  592.962557][T32275] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11605'.
[  593.055230][T11096] Bluetooth: hci4: command tx timeout
[  593.282490][T32297] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11616'.
[  593.490702][T32303] IPv6: NLM_F_REPLACE set, but no existing node found!
[  593.519734][T32303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.530076][T32303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.534053][T32303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.538323][T32303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.589330][T32336] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11632'.
[  595.023726][T32370] netlink: 'syz.2.11646': attribute type 10 has an invalid length.
[  595.027461][T32370] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11646'.
[  595.040364][T32370] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  595.073165][T32370] batman_adv: batadv0: Removing interface: virt_wifi0
[  595.125048][T11096] Bluetooth: hci4: command tx timeout
[  595.513429][T32400] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11661'.
[  595.612347][T32408] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11664'.
[  595.856627][T32418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11668'.
[  595.860409][T32418] netlink: 'syz.2.11668': attribute type 10 has an invalid length.
[  595.863397][T32418] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11668'.
[  595.868129][T32418] bond0: entered promiscuous mode
[  595.870210][T32420] netlink: 'syz.4.11669': attribute type 1 has an invalid length.
[  595.873122][T32418] bond_slave_0: entered promiscuous mode
[  595.878351][T32418] bond_slave_1: entered promiscuous mode
[  595.883916][T32418] bridge0: port 3(bond0) entered blocking state
[  595.892012][T32418] bridge0: port 3(bond0) entered disabled state
[  595.894954][T32418] bond0: entered allmulticast mode
[  595.896911][T32418] bond_slave_0: entered allmulticast mode
[  595.899257][T32418] bond_slave_1: entered allmulticast mode
[  595.905528][T32418] bridge0: port 3(bond0) entered blocking state
[  595.908053][T32418] bridge0: port 3(bond0) entered forwarding state
[  595.911592][T32418] netlink: 'syz.2.11668': attribute type 4 has an invalid length.
[  595.914991][T32418] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11668'.
[  596.109125][T32427] net_ratelimit: 80 callbacks suppressed
[  596.109181][T32427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.382791][T32449] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11683'.
[  596.400076][T32451] netlink: 22 bytes leftover after parsing attributes in process `syz.2.11684'.
[  596.481053][T32463] netlink: 'syz.4.11690': attribute type 29 has an invalid length.
[  596.487017][T32463] netlink: 'syz.4.11690': attribute type 29 has an invalid length.
[  596.490990][T32463] netlink: 'syz.4.11690': attribute type 29 has an invalid length.
[  596.497535][T32463] netlink: 'syz.4.11690': attribute type 29 has an invalid length.
[  596.591578][T32473] netlink: 'syz.2.11695': attribute type 3 has an invalid length.
[  596.596815][T32473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11695'.
[  596.624887][T32477] netlink: 124 bytes leftover after parsing attributes in process `syz.4.11694'.
[  596.631933][T32477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11694'.
[  596.923143][T32491] netlink: 'syz.2.11703': attribute type 1 has an invalid length.
[  596.931723][T32491] netlink: 'syz.2.11703': attribute type 4 has an invalid length.
[  596.962503][T11096] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10
[  596.962599][T11096] Bluetooth: hci4: connection err: -111
[  597.205205][T11096] Bluetooth: hci4: command tx timeout
[  598.183655][T32552] veth0_macvtap: left promiscuous mode
[  598.460078][T32573] sctp: [Deprecated]: syz.2.11738 (pid 32573) Use of struct sctp_assoc_value in delayed_ack socket option.
[  598.460078][T32573] Use struct sctp_sack_info instead
[  599.284871][T11096] Bluetooth: hci4: command tx timeout
[  599.554118][T32544] lo speed is unknown, defaulting to 1000
[  600.478094][T32662] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  601.016546][T32691] __nla_validate_parse: 4 callbacks suppressed
[  601.016607][T32691] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11794'.
[  601.203207][T32693] netlink: 16370 bytes leftover after parsing attributes in process `syz.2.11795'.
[  601.676520][T32710] lo speed is unknown, defaulting to 1000
[  601.700056][T32722] lo: entered allmulticast mode
[  601.707431][T32722] lo: entered promiscuous mode
[  601.709296][T32722] lo: left allmulticast mode
[  601.726729][T32724] validate_nla: 4 callbacks suppressed
[  601.726739][T32724] netlink: 'syz.2.11809': attribute type 21 has an invalid length.
[  601.810132][T32730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11812'.
[  601.813891][T32730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11812'.
[  604.939686][T32746] netlink: 'syz.2.11817': attribute type 6 has an invalid length.
[  604.943137][T32746] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11817'.
[  605.056274][T32752] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.11820'.
[  605.097536][T11096] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  606.867164][  T311] netlink: 'syz.2.11832': attribute type 29 has an invalid length.
[  606.871119][  T312] netlink: 'syz.2.11832': attribute type 29 has an invalid length.
[  606.877704][  T311] netlink: 'syz.2.11832': attribute type 29 has an invalid length.
[  606.916072][  T311] netlink: 'syz.2.11832': attribute type 29 has an invalid length.
[  607.571793][  T330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11840'.
[  608.784495][  T369] lo speed is unknown, defaulting to 1000
[  609.210725][  T410] netlink: 'syz.2.11877': attribute type 3 has an invalid length.
[  609.213574][  T410] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.11877'.
[  609.242581][  T414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11879'.
[  609.326587][  T418] IPv6: Can't replace route, no match found
[  609.419211][  T414] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  609.630441][  T440] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11892'.
[  609.696407][  T443] delete_channel: no stack
[  610.056920][  T465] netlink: 277 bytes leftover after parsing attributes in process `syz.4.11902'.
[  610.161362][  T475] netlink: 'syz.4.11907': attribute type 1 has an invalid length.
[  610.165110][  T475] netlink: 'syz.4.11907': attribute type 3 has an invalid length.
[  610.168438][  T475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11907'.
[  611.022100][  T497] netlink: 'syz.2.11916': attribute type 10 has an invalid length.
[  611.087848][  T497] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  611.090979][  T497] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  611.094490][  T497] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  611.498494][  T505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11919'.
[  611.954100][  T531] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11930'.
[  612.122137][  T533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11931'.
[  612.135965][  T533] siw: device registration error -23
[  612.260464][  T549] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11939'.
[  613.087193][T28849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  613.090859][T28849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  613.094392][T28849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  613.098929][T28849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  613.102713][T28849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  613.196546][  T572] lo speed is unknown, defaulting to 1000
[  613.274414][  T572] chnl_net:caif_netlink_parms(): no params data found
[  613.326187][  T572] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.331496][  T572] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.334219][  T572] bridge_slave_0: entered allmulticast mode
[  613.338431][  T572] bridge_slave_0: entered promiscuous mode
[  613.347116][  T572] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.351119][  T572] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.353817][  T572] bridge_slave_1: entered allmulticast mode
[  613.357734][  T572] bridge_slave_1: entered promiscuous mode
[  613.380770][  T572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.388626][  T572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.417012][  T572] team0: Port device team_slave_0 added
[  613.421525][  T572] team0: Port device team_slave_1 added
[  613.441297][  T572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.446303][  T572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.459387][  T572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.464167][  T572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.467307][  T572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.479335][  T572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.518131][  T572] hsr_slave_0: entered promiscuous mode
[  613.521298][  T572] hsr_slave_1: entered promiscuous mode
[  613.523822][  T572] debugfs: 'hsr0' already exists in 'hsr'
[  613.527556][  T572] Cannot create hsr debugfs directory
[  613.615652][  T572] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  613.624190][  T572] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  613.634481][  T572] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  613.640001][  T572] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  613.659145][  T572] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.661861][  T572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.664294][  T572] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.666604][  T572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.702669][  T572] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.738740][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.751195][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.764010][  T572] 8021q: adding VLAN 0 to HW filter on device team0
[  613.779493][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.782207][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.795012][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.797682][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.907824][  T572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.925417][   T34] INFO: task syz.0.9028:26357 blocked for more than 143 seconds.
[  613.928462][   T34]       Not tainted syzkaller #0
[  613.931501][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
[  613.939384][   T34] task:syz.0.9028      state:D stack:19592 pid:26357 tgid:26356 ppid:5877   task_flags:0x400140 flags:0x00004006
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  613.964148][   T34] Call Trace:
[  613.965866][   T34]  <TASK>
[  613.968341][   T34]  __schedule+0x1798/0x4cc0
[  613.971981][   T34]  ? trace_call_bpf+0xb7/0x850
[  613.978959][   T34]  ? __pfx_trace_call_bpf+0x10/0x10
[  613.984242][   T34]  ? __pfx_trace_call_bpf+0x10/0x10
[  613.993348][   T34]  ? __pfx___schedule+0x10/0x10
[  613.997603][   T34]  ? schedule+0x91/0x360
[  614.001435][   T34]  ? rcu_is_watching+0x15/0xb0
[  614.005068][   T34]  ? lock_release+0x4b/0x3e0
[  614.012058][   T34]  schedule+0x165/0x360
[  614.013940][   T34]  schedule_timeout+0x9a/0x270
[  614.017948][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  614.019973][   T34]  ? wait_for_completion+0x267/0x5d0
[  614.022123][   T34]  wait_for_completion+0x2bf/0x5d0
[  614.024323][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  614.026936][   T34]  ? remove_client_context+0x19c/0x1e0
[  614.029097][   T34]  disable_device+0x1c6/0x320
[  614.030986][   T34]  ? __pfx_disable_device+0x10/0x10
[  614.033111][   T34]  ? xa_load+0x1ea/0x210
[  614.044186][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  614.053803][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  614.060149][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  614.064602][   T34]  nldev_dellink+0x2d1/0x320
[  614.070344][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  614.077873][   T34]  ? apparmor_capable+0x137/0x1b0
[  614.085079][   T34]  ? bpf_lsm_capable+0x9/0x20
[  614.090138][   T34]  ? security_capable+0x7e/0x2e0
[  614.095589][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  614.103447][   T34]  rdma_nl_rcv+0x6ae/0x980
[  614.107265][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  614.111922][   T34]  ? net_generic+0x1e/0x240
[  614.132265][   T34]  ? rcu_is_watching+0x15/0xb0
[  614.134018][   T34]  netlink_unicast+0x82f/0x9e0
[  614.150273][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  614.152429][   T34]  ? netlink_sendmsg+0x642/0xb30
[  614.154345][   T34]  ? skb_put+0x11b/0x210
[  614.164755][   T34]  netlink_sendmsg+0x805/0xb30
[  614.168817][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  614.170882][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  614.172765][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  614.175272][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  614.177219][   T34]  __sock_sendmsg+0x21c/0x270
[  614.179080][   T34]  ____sys_sendmsg+0x505/0x830
[  614.180850][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  614.182867][   T34]  ? import_iovec+0x74/0xa0
[  614.184710][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  614.186410][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  614.188311][   T34]  ? trace_call_bpf+0xb7/0x850
[  614.189991][   T34]  ? rcu_is_watching+0x15/0xb0
[  614.191686][   T34]  ? __fget_files+0x2a/0x420
[  614.193980][   T34]  ? __fget_files+0x3a0/0x420
[  614.195799][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  614.197534][   T34]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  614.199715][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  614.201662][   T34]  ? rcu_is_watching+0x15/0xb0
[  614.203244][   T34]  ? rcu_is_watching+0x15/0xb0
[  614.204920][   T34]  do_syscall_64+0xfa/0x3b0
[  614.206396][   T34]  ? rcu_is_watching+0x15/0xb0
[  614.208039][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.210382][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.212587][   T34] RIP: 0033:0x7fc100b8ebe9
[  614.214337][   T34] RSP: 002b:00007fc101917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  614.217776][   T34] RAX: ffffffffffffffda RBX: 00007fc100db5fa0 RCX: 00007fc100b8ebe9
[  614.220638][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  614.223717][   T34] RBP: 00007fc100c11e19 R08: 0000000000000000 R09: 0000000000000000
[  614.227271][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.230280][   T34] R13: 00007fc100db6038 R14: 00007fc100db5fa0 R15: 00007ffcf2482618
[  614.233481][   T34]  </TASK>
[  614.235972][   T34] INFO: lockdep is turned off.
[  614.237956][   T34] NMI backtrace for cpu 1
[  614.237969][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  614.237983][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  614.237990][   T34] Call Trace:
[  614.237995][   T34]  <TASK>
[  614.238000][   T34]  dump_stack_lvl+0x189/0x250
[  614.238018][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.238032][   T34]  ? __pfx__printk+0x10/0x10
[  614.238048][   T34]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  614.238060][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  614.238074][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  614.238088][   T34]  ? __pfx__printk+0x10/0x10
[  614.238102][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  614.238120][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  614.238131][   T34]  watchdog+0xf93/0xfe0
[  614.238141][   T34]  ? watchdog+0x1de/0xfe0
[  614.238151][   T34]  kthread+0x711/0x8a0
[  614.238161][   T34]  ? __pfx_watchdog+0x10/0x10
[  614.238169][   T34]  ? __pfx_kthread+0x10/0x10
[  614.238178][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  614.238186][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.238196][   T34]  ? __pfx_kthread+0x10/0x10
[  614.238203][   T34]  ret_from_fork+0x3fc/0x770
[  614.238211][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  614.238218][   T34]  ? __switch_to_asm+0x39/0x70
[  614.238227][   T34]  ? __switch_to_asm+0x33/0x70
[  614.238235][   T34]  ? __pfx_kthread+0x10/0x10
[  614.238244][   T34]  ret_from_fork_asm+0x1a/0x30
[  614.238255][   T34]  </TASK>
[  614.238259][   T34] Sending NMI from CPU 1 to CPUs 0:
[  614.304521][    C0] NMI backtrace for cpu 0
[  614.304549][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  614.304559][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  614.304585][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  614.304598][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  614.304604][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  614.304611][    C0] RAX: 28fa014383772f00 RBX: ffffffff819683b8 RCX: 28fa014383772f00
[  614.304616][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  614.304621][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  614.304625][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38430
[  614.304630][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  614.304634][    C0] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  614.304640][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  614.304644][    C0] CR2: 00005572e7504043 CR3: 000000000df36000 CR4: 00000000000006f0
[  614.304671][    C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  614.304680][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  614.304685][    C0] Call Trace:
[  614.304690][    C0]  <TASK>
[  614.304694][    C0]  default_idle+0x13/0x20
[  614.304704][    C0]  default_idle_call+0x74/0xb0
[  614.304715][    C0]  do_idle+0x1e8/0x510
[  614.304727][    C0]  ? __pfx_do_idle+0x10/0x10
[  614.304738][    C0]  ? do_idle+0x4f1/0x510
[  614.304748][    C0]  cpu_startup_entry+0x44/0x60
[  614.304758][    C0]  rest_init+0x2de/0x300
[  614.304767][    C0]  start_kernel+0x3a9/0x410
[  614.304777][    C0]  x86_64_start_reservations+0x24/0x30
[  614.304797][    C0]  x86_64_start_kernel+0x143/0x1c0
[  614.304810][    C0]  common_startup_64+0x13e/0x147
[  614.304827][    C0]  </TASK>
[  614.314981][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  614.314996][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  614.315010][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  614.315018][   T34] Call Trace:
[  614.315023][   T34]  <TASK>
[  614.315029][   T34]  dump_stack_lvl+0x99/0x250
[  614.315049][   T34]  ? __asan_memcpy+0x40/0x70
[  614.315064][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.315078][   T34]  ? __pfx__printk+0x10/0x10
[  614.315097][   T34]  vpanic+0x281/0x750
[  614.315110][   T34]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  614.315122][   T34]  ? __pfx_vpanic+0x10/0x10
[  614.315135][   T34]  ? preempt_schedule+0xae/0xc0
[  614.315152][   T34]  ? preempt_schedule_common+0x83/0xd0
[  614.315169][   T34]  panic+0xb9/0xc0
[  614.315182][   T34]  ? __pfx_panic+0x10/0x10
[  614.315195][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  614.315215][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  614.315230][   T34]  watchdog+0xfd2/0xfe0
[  614.315248][   T34]  ? watchdog+0x1de/0xfe0
[  614.423527][   T34]  kthread+0x711/0x8a0
[  614.425167][   T34]  ? __pfx_watchdog+0x10/0x10
[  614.427074][   T34]  ? __pfx_kthread+0x10/0x10
[  614.428983][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  614.431165][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.433310][   T34]  ? __pfx_kthread+0x10/0x10
[  614.435214][   T34]  ret_from_fork+0x3fc/0x770
[  614.437109][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  614.439157][   T34]  ? __switch_to_asm+0x39/0x70
[  614.441059][   T34]  ? __switch_to_asm+0x33/0x70
[  614.443025][   T34]  ? __pfx_kthread+0x10/0x10
[  614.444914][   T34]  ret_from_fork_asm+0x1a/0x30
[  614.446924][   T34]  </TASK>
[  614.448956][   T34] Kernel Offset: disabled
[  614.450710][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:51:11  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81c93929 RBX=0000000000000014 RCX=ffff888027a45640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90008607518
R8 =ffffffff8fa38437 R9 =1ffffffff1f47086 R10=dffffc0000000000 R11=fffffbfff1f47087
R12=ffffffff8e19aa88 R13=dffffc0000000000 R14=ffffc900086075a0 R15=0000000000000000
RIP=ffffffff81bfab61 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000107000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f249d612e53
XMM06=0000000000000000 00007f249d612e4d XMM07=0000000000000000 00007f249d612e61
XMM08=0000000000000000 00007f249d612ee7 XMM09=0000000000000000 00007f249d612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106968237 R9 =1ffff11020d2d046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8ce R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f297d1e1440 CR3=0000000028df2000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00fffffff9ffffea 1d6957e721671f94
XMM02=0000001800ffffff f9ffffea1d6957e7 XMM03=21671f9400000008 0000008400000000
XMM04=00007fb40e2ed100 00007fb40d787460 XMM05=00007fb40d787478 00007fb40d7874c0
XMM06=00007fb40d7874b8 00007fb40d7874b0 XMM07=00007fb40d7874a8 00007fb40d7874a0
XMM08=0000000000000000 00007fb40d612ee7 XMM09=0000000000000000 00007fb40d612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
